zaza57

Voici ce que tu m'as demandé PS : entre temps, ce soir, j'avais lancé spyboot qui a trouvé 11 entrées sur Newdotnet !!! C:\WINDOWS\System32\perfh00C.dat -->29/07/2006 19:44:22 C:\WINDOWS\System32\perfh009.dat -->29/07/2006 19:44:22 C:\WINDOWS\System32\perfc00C.dat -->29/07/2006 19:44:22 C:\WINDOWS\System32\perfc009.dat -->29/07/2006 19:44:22 C:\WINDOWS\System32\PerfStringBackup.INI -->29/07/2006 19:44:17 C:\WINDOWS\System32\wpa.dbl -->29/07/2006 19:41:47 C:\WINDOWS\System32\CONFIG.NT -->29/07/2006 19:16:32 C:\WINDOWS\System32\msssc.dll -->27/07/2006 17:07:22 C:\WINDOWS\System32\MRT.exe -->06/07/2006 18:21:48 C:\WINDOWS\System32\rasmans.dll -->22/06/2006 12:48:06 C:\WINDOWS\System32\WgaLogon.dll -->19/06/2006 16:20:42 C:\WINDOWS\System32\LegitCheckControl.dll -->19/06/2006 16:19:42 C:\WINDOWS\System32\WgaTray.exe -->19/06/2006 16:19:26 C:\WINDOWS\System32\jgpl400.dll -->01/06/2006 20:48:44 C:\WINDOWS\System32\jgdw400.dll -->01/06/2006 20:48:44 C:\WINDOWS\System32\aswBoot.exe -->31/05/2006 11:02:04 C:\WINDOWS\System32\AVASTSS.scr -->31/05/2006 10:54:35 C:\WINDOWS\System32\shdocvw.dll -->29/05/2006 17:29:14 C:\WINDOWS\System32\mshtml.dll -->19/05/2006 17:09:50 C:\WINDOWS\System32\iphlpapi.dll -->19/05/2006 15:23:35 C:\WINDOWS\System32\dnsapi.dll -->19/05/2006 15:23:35 C:\WINDOWS\System32\dhcpcsvc.dll -->19/05/2006 15:23:35 C:\WINDOWS\System32\jscript.dll -->18/05/2006 07:31:21 C:\WINDOWS\System32\xpsp3res.dll -->11/05/2006 10:57:36 C:\WINDOWS\System32\wininet.dll -->10/05/2006 07:24:40 C:\WINDOWS\setupapi.log -->29/07/2006 20:30:50 C:\WINDOWS\6-wlancfg.log -->29/07/2006 19:42:28 C:\WINDOWS\WindowsUpdate.log -->29/07/2006 19:40:49 C:\WINDOWS\wiadebug.log -->29/07/2006 19:40:38 C:\WINDOWS\spupdsvc.log -->29/07/2006 19:40:38 C:\WINDOWS\wiaservc.log -->29/07/2006 19:40:37 C:\WINDOWS\0.log -->29/07/2006 19:40:27 C:\WINDOWS\bootstat.dat -->29/07/2006 19:40:25 C:\WINDOWS\SchedLgU.Txt -->29/07/2006 19:39:23 C:\WINDOWS\tsoc.log -->29/07/2006 19:37:58 C:\WINDOWS\ocmsn.log -->29/07/2006 19:37:58 C:\WINDOWS\ntdtcsetup.log -->29/07/2006 19:37:58 C:\WINDOWS\KB917734.log -->29/07/2006 19:37:58 C:\WINDOWS\imsins.log -->29/07/2006 19:37:58 C:\WINDOWS\iis6.log -->29/07/2006 19:37:58 Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 465B-0816 R‚pertoire de C:\Program Files 29/07/2006 20:36 <REP> . 29/07/2006 20:36 <REP> .. 17/06/2006 19:33 <REP> ABBYY 11/01/2004 20:25 <REP> ACD Systems 28/04/2006 10:25 <REP> Adobe 13/03/2005 18:30 <REP> Ahead 19/06/2005 12:20 <REP> Alwil Software 17/07/2003 09:54 <REP> Analog Devices 17/07/2003 10:07 <REP> ATI Technologies 04/06/2005 12:34 <REP> AvantGo Connect 17/03/2004 08:07 <REP> AVPersonal 25/10/2004 12:39 <REP> Browser MOUSE 23/06/2005 21:24 <REP> C2Media 04/06/2005 12:34 <REP> Common Files 17/07/2003 17:46 <REP> ComPlus Applications 08/06/2004 21:05 <REP> CyberLink 30/04/2006 11:12 <REP> Dell 720 30/04/2006 11:51 <REP> Dell Computer 29/05/2006 20:19 <REP> DIFX 28/03/2004 12:40 <REP> directx 10/06/2005 22:28 <REP> DivX 19/11/2003 20:55 <REP> DivXCodec 29/04/2004 12:02 <REP> EA Games 03/01/2004 17:57 <REP> EA SPORTS 03/01/2004 17:59 <REP> EACOM 23/11/2003 01:30 <REP> Easy Internet signup 26/04/2006 15:49 <REP> eBay 02/11/2003 21:50 <REP> epson 16/09/2005 19:21 <REP> EZFace 27/07/2006 17:10 <REP> Fichiers communs 02/10/2005 01:05 <REP> FloorPlan 3D v7 Setup 07/12/2003 00:11 <REP> FusionSoft DVD Player XP 23/04/2006 15:08 <REP> Google 12/03/2004 20:37 <REP> Hewlett-Packard 24/05/2004 21:42 <REP> HighMAT CD Writing Wizard 29/07/2006 20:01 <REP> HijackThis 12/03/2004 22:22 <REP> hp deskjet 825c series 19/10/2003 19:27 <REP> HPQ 11/01/2004 19:37 <REP> ImageServer 02/10/2005 01:07 <REP> IMSI 19/10/2003 19:42 <REP> Intel 29/07/2006 19:29 <REP> Internet Explorer 11/12/2003 23:12 <REP> InterVideo 25/06/2005 17:35 <REP> Inventel 30/04/2006 11:51 <REP> Jasc Software Inc 07/03/2005 22:59 <REP> Lavasoft 17/10/2004 22:44 <REP> Lavasoft Ad-Aware 16/04/2005 13:39 <REP> MaxSpeed 10/07/2005 20:36 <REP> MEDION 20/02/2005 18:39 <REP> Messenger 04/06/2005 12:35 <REP> Microsoft ActiveSync 09/01/2005 20:00 <REP> microsoft frontpage 15/05/2004 09:17 <REP> Microsoft Money 04/06/2005 12:29 <REP> Microsoft Office 29/10/2003 15:27 <REP> Microsoft Visual Studio 31/10/2003 04:14 <REP> Microsoft Works 16/09/2004 21:50 <REP> Movie Maker 10/09/2005 09:50 <REP> MSN 06/11/2004 10:21 <REP> MSN Apps 17/07/2003 17:46 <REP> MSN Gaming Zone 17/06/2006 19:33 <REP> MSN Messenger 08/10/2005 10:00 <REP> NetMeeting 30/11/2003 22:28 <REP> Ontrack 22/04/2006 12:26 <REP> Outlook Express 12/05/2006 07:40 <REP> PhotoFiltre 11/03/2005 22:22 <REP> QuickTime 27/12/2004 11:10 <REP> Raxco 15/03/2005 22:54 <REP> Real 19/10/2003 19:34 <REP> Roxio 14/05/2006 10:42 <REP> ScanWizard 5 17/07/2003 10:15 <REP> Services en ligne 05/09/2004 17:32 <REP> Simple Star 20/11/2003 08:03 <REP> SLD CODEC PACK 1.5 PRO 09/01/2005 20:01 <REP> Snapshot Viewer 25/09/2005 18:12 <REP> SoftCAD 02/09/2004 22:04 <REP> Soldier of Fortune II - Double Helix 29/07/2006 21:14 <REP> Spybot - Search & Destroy 11/12/2004 16:44 <REP> ToniArts 26/12/2004 18:15 <REP> Ubi Soft 26/12/2004 18:03 <REP> UbiSoft 21/11/2004 22:52 <REP> Ulead Systems 23/04/2006 15:09 <REP> VideoLAN 30/04/2006 16:43 <REP> VSO 22/10/2003 21:58 <REP> Wanadoo 28/03/2004 12:35 <REP> Warthog 05/09/2004 17:28 <REP> Windows Media Components 22/04/2006 12:29 <REP> Windows Media Player 16/09/2004 21:41 <REP> Windows NT 21/03/2004 19:20 <REP> WinRAR 02/01/2005 18:28 <REP> WinZip 17/07/2003 17:46 <REP> xerox 20/11/2003 08:01 <REP> XviD 12/03/2004 22:56 <REP> Zone Labs 0 fichier(s) 0 octets 93 R‚p(s) 18ÿ062ÿ139ÿ392 octets libres Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 465B-0816 R‚pertoire de C:\Program Files\fichiers communs 27/07/2006 17:10 <REP> . 27/07/2006 17:10 <REP> .. 11/01/2004 20:25 <REP> ACD Systems 27/07/2006 17:10 <REP> Adaptec Shared 06/04/2005 22:00 <REP> Adobe 06/04/2005 22:03 <REP> Adobe Systems Shared 13/03/2005 18:30 <REP> Ahead 29/10/2003 15:27 <REP> Designer 14/01/2004 22:25 <REP> DirectX 25/06/2005 17:35 274ÿ432 FDEUnInstaller.exe 17/07/2003 10:08 <REP> InstallShield 17/06/2006 19:33 <REP> Microsoft Shared 17/07/2003 17:46 <REP> MSSoap 19/06/2005 12:09 <REP> Network Associates 17/07/2003 17:46 <REP> ODBC 10/04/2005 17:53 <REP> Raxco 15/03/2005 22:54 <REP> Real 17/07/2003 17:46 <REP> Services 17/07/2003 17:46 <REP> SpeechEngines 22/04/2006 12:26 <REP> System 05/09/2004 17:21 <REP> Ulead Systems 15/03/2005 22:55 <REP> xing shared 1 fichier(s) 274ÿ432 octets 21 R‚p(s) 18ÿ062ÿ139ÿ392 octets libres Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 465B-0816 R‚pertoire de C:\Program Files\common files 04/06/2005 12:34 <REP> . 04/06/2005 12:34 <REP> .. 02/10/2005 01:07 <REP> Microsoft Shared 01/08/2004 18:56 <REP> System 0 fichier(s) 0 octets 4 R‚p(s) 18ÿ062ÿ135ÿ296 octets libres Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 465B-0816 R‚pertoire de C:\ 24/05/2001 12:59 162ÿ304 UNWISE.EXE 1 fichier(s) 162ÿ304 octets 0 R‚p(s) 18ÿ062ÿ135ÿ296 octets libres c:\Documents and Settings\marc despierres\Application Data\Adobe\Acrobat\6.0\Updater\Ac60PrP1.exe c:\Documents and Settings\marc despierres\Application Data\Macromedia\Flash Player\#SharedObjects\XTVX25KL\localhost\DOCUME~1\MARCDE~1\LOCALS~1\Temp\Jgl_Rt\hostileskies.exe c:\Documents and Settings\marc despierres\Application Data\Microsoft\Installer\{708A6AC6-03EC-11D5-AA9A-00C0DF245F7E}\_12B1C3E3BE0A_44B7_B356_F7F6A9249A25.exe c:\Documents and Settings\marc despierres\Bureau\MAJ_WLAN.exe c:\Documents and Settings\marc despierres\Bureau\WinsockFix.exe c:\Documents and Settings\marc despierres\Bureau\chercher\LFiles.exe c:\Documents and Settings\marc despierres\Local Settings\Temp\patch.exe c:\Documents and Settings\marc despierres\Local Settings\Temp\$CD_Viewer\CDVIEWER.EXE c:\Documents and Settings\marc despierres\Local Settings\Temp\pftD~tmp\VSCUTIL.exe c:\Documents and Settings\marc despierres\Local Settings\Temp\usmt\migload.exe c:\Documents and Settings\marc despierres\Local Settings\Temp\_ISTMP10.DIR\_ISTMP0.DIR\IsUninst.exe c:\Documents and Settings\marc despierres\Local Settings\Temp\_ISTMP3.DIR\_ISTMP0.DIR\ISUninst.exe c:\Documents and Settings\marc despierres\Local Settings\Temp\_ISTMP6.DIR\_ISTMP0.DIR\ICOMP.EXE c:\Documents and Settings\marc despierres\Local Settings\Temp\_ISTMP6.DIR\_ISTMP0.DIR\WINTDIST.EXE c:\Documents and Settings\marc despierres\Local Settings\Temp\_ISTMP8.DIR\_ISTMP0.DIR\ICOMP.EXE c:\Documents and Settings\marc despierres\Local Settings\Temp\_ISTMP8.DIR\_ISTMP0.DIR\WINTDIST.EXE c:\Documents and Settings\marc despierres\Local Settings\Temporary Internet Files\Content.IE5\KH2JOLYJ\eBayTBCareApp[1].exe c:\Documents and Settings\marc despierres\Local Settings\Temporary Internet Files\Content.IE5\WL4PY3KP\eBayTBDaemon[1].exe c:\Documents and Settings\marc despierres\Menu D‚marrer\Programmes\D‚marrage\PowerReg Scheduler.exe c:\Documents and Settings\marc despierres\Mes documents\ACD FotoAngelo\turbot.exe c:\Documents and Settings\marc despierres\Mes documents\Corinne\pf-setup.exe c:\Documents and Settings\marc despierres\Mes documents\Corinne\vso_image_resizer_setup.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\programmes\gogh.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\programmes\monet.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\01-La MalŠne\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\02-Murol\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\03-Longeville\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\04-Ste Montaine\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\04-Ste Montaine\VIEW.EXE c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\05-Ronce\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\05-Ronce\VIEW.EXE c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\06-La Bresse\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\07-St Georges\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\08-Carqueiranne\0001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\09-St Trojan\00001Viewer.exe c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\09-St Trojan\VIEW.EXE c:\Documents and Settings\marc despierres\Mes documents\Mes images\photos\promo\10-Egat\0001Viewer.exe c:\Documents and Settings\All Users\Application Data\Adobe\AWSCommonUI.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\marc despierres\Application Data\Adobe\AWSCommonUI.dll Vérifications de quelques clefs Recherche de clefs EGDACCESS HKLM\SOFTWARE\Microsoft\Windows\explorer\SharedTaskScheduler

Vous êtes formidable. depuis 10 mn, j'ai à nouveau ma connexion Internet. Depuis le début d'après midi, j'ai essayé de respecter scupuleusement vos conseils et la marche à suivre. Et je n'en reviens pas, cela fonctionne. Moi qui suis nulle en informatique, j'y suis arrivée grâce à vous ! Chapeau bas Messieurs. Vous m'avez convertie à votre site et risquez de m' y voir assez souvent pour profiter de votre expertise Merci, Merci, mille fois merci. Vous êtes pro, hyper rapides. ...et d'utilité publique Je vous joins mon rapport HijackThis, des fois qu'il y ait encore des choses à voir et pour vérifier si j'ai bien supprimer l'un des 2 anti virus. bon week end Logfile of HijackThis v1.99.1 Scan saved at 20:01:28, on 29/07/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\S24EvMon.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\WINDOWS\SYSTEM32\ZCfgSvc.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\WINDOWS\System32\RegSrvc.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Inventel\Add-on\wlancfg.exe C:\Program Files\Raxco\PerfectDisk\PDSched.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe C:\Program Files\Browser MOUSE\mouse32a.exe C:\Program Files\ToniArts\EasyCleaner\EasyClea.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Alwil Software\Avast4\ashSimpl.exe C:\Program Files\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.jtsxbtwwaqoxtdicq.com/bsKr/nBGb...v_qkLY1J4GA.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qfr8l.hpwis.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://qfr8l.hpwis.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file) O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser MOUSE\mouse32a.exe O4 - HKLM\..\Run: [ToniArts EasyCleaner] "C:\Program Files\ToniArts\EasyCleaner\EasyClea.exe" -s -startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - Startup: PowerReg Scheduler.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://qfr8l.hpwis.com O16 - DPF: Interface Chat Voila - http://chat14.x-echo.com/version6/Applet/vchatsign.cab O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab O16 - DPF: offline - https://static.ir.dgi.minefi.gouv.fr/secure...4n4/offline.cab O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure...teleir_cert.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} (ChkDVDCtl Class) - http://www.gocyberlink.com/winxp/CheckDVD.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Add-on\wlancfg.exe

Bonsoir les amis, merci pour vos réponses. Pour être sûre que tout fonctionne correctement et pour ne pas râter d' étape, comme cela m'a été conseillé, je suis la procédure en préambule. J'ai donc télécharger Anti vir et je fais un scan depuis 2 heures. Je suivrai ensuite vos autres conseils. Je vous recontacterai ensuite, s'il n'est pas minuit à la fin de mon scanne

Bonjour mon ordinateur est infecté par w32.Klez.gen mm ou W32.Elkern.gen. Cela a été détecté par Avast Depuis, j'ai téléchargé l'antidote sur Symantec, respecter les procédures mode sans échec....Rien n'y fait. Je n'ai toujours pas d' accès à Internet, j'ai des messages d' erreur de protocole après démarrage, le pare feu reste désepérément désactivé. en venant sur ce site hier j'ai téléchargé hijack et voici le rapport Logfile of HijackThis v1.99.1 Scan saved at 18:38:49, on 27/07/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.jtsxbtwwaqoxtdicq.com/bsKr/nBGb...rbww543MGH(...) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qfr8l.hpwis.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://qfr8l.hpwis.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file) O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser MOUSE\mouse32a.exe O4 - HKLM\..\Run: [ToniArts EasyCleaner] "C:\Program Files\ToniArts\EasyCleaner\EasyClea.exe" -s -startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - Startup: PowerReg Scheduler.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet7_22.dll' missing O14 - IERESET.INF: START_PAGE_URL=http://qfr8l.hpwis.com O16 - DPF: Interface Chat Voila - http://chat14.x-echo.com/version6/Applet/vchatsign.cab O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab O16 - DPF: offline - https://static.ir.dgi.minefi.gouv.fr/secure...n4/offline(...) O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure.../teleir_ce(...) O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} (ChkDVDCtl Class) - http://www.gocyberlink.com/winxp/CheckDVD.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir Service (AntiVirService) - Unknown owner - C:\Program Files\AVPersonal\AVGUARD.EXE (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Bluetooth Service (btwdins) - Unknown owner - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Add-on\wlancfg.exe Si cela peut vous aider pour que je puisse faire a nouveau fonctionner mon micro. Je précise qu'en désepoir de cause après avoir tout essayé, j'ai voulu réinstaller Windows, mais cela me dit que la version du micro est plus récente que mon CD. Donc cela bloque. Merci pour votre aide (je suis sous windows XP)