Aller au contenu

carcajou76

Membres
  • Compteur de contenus

    32
  • Inscription

  • Dernière visite

Tout ce qui a été posté par carcajou76

  1. Impeccable, encore un grand merci pour ton aide et ta gentillesse, j'ai signalé le malware sur le site Malware-Complaints. voili voilou !
  2. euh... je crois que c'est surtout toi qui a très bien travaillé !! pour le rapport Hijackthis, j'avais coller le mauvais, désolé, voici celui que je viens de faire : Logfile of HijackThis v1.99.1 Scan saved at 13:14:01, on 26/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mclogsrv.exe C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\PROGRA~1\McAfee\MSC\mctskshd.exe C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\SiteAdvisor\4608\SAService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe C:\Program Files\SiteAdvisor\4608\SiteAdv.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\rundll32.exe c:\program files\mcafee\msc\mcshell.exe c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Program Files\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.fr.netscape.com/fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.fr.netscape.com/fr/home/winsearch.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.fr.netscape.com/fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe O4 - HKLM\..\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\4608\SiteAdv.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {78AEEDE8-7345-4FB5-A8FE-4BFF16EF25FC} (McAfee Virtual Technician Control Class) - http://mvt.mcafee.com/mvt/bin/3,0,1,0/mvt.cab O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://register.tiscali.fr/configurateur/AccountHelper.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...795/mcfscan.cab O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\4608\SAService.exe j'ai fait l'installation de Java 1.5.0. apparemment je n'ai plus de problème de fenetre intempestive qui s'ouvre style winantivirus, etc... donc tout ce que tu as fait a l'air de très bien marcher. Juste une petite question : lors de mon dernier scan en ligne avec Panda, il y avait encore un spyware, est ce que je dois m'en soucier ? En tout cas un grand merci pour ton aide, je suis vraiment impressioné par la réactivité et l'efficacité de ton intervention !! BRAVO!!
  3. Re Charles, et voilà les resultats : rapport edg.txt : BFU v1.00.9 Windows XP SP2 (WinNT 5.01.2600 SP2) Script started at 23:09:24, on 25/12/2006 Option Delete files to Recycle Bin: Yes Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|MC (key not found) Failed: RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|msupd (key not found) Failed: RegDelValue HKCU\software\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0|ELECTRONIC GROUP (key not found) Failed: DllUnregister C:\WINDOWS\system32\MSWBM32.DLL|1 (file not found) Failed: DllUnregister C:\Program Files\MailSkinner\OESkinner.dll|1 (file not found) Failed: FolderDelete C:\Program Files\dialpass (folder not found) Failed: FolderDelete C:\Program Files\eghtmldialer (folder not found) Failed: FolderDelete C:\Program Files\egroup (folder not found) Failed: FolderDelete C:\Program Files\Instant Access (folder not found) Failed: FolderDelete C:\Program Files\MailSkinner (folder not found) Failed: FolderDelete C:\Program Files\InternetGameBox (folder not found) Failed: FolderDelete C:\Program Files\GoRecord2 (folder not found) Failed: FolderDelete C:\Program Files\GoAstro (folder not found) Failed: FolderDelete C:\Program Files\SudoPlanet (folder not found) Failed: FolderDelete C:\Program Files\WebMediaPlayer (folder not found) Failed: FolderDelete C:\Program Files\MessengerSkinner (folder not found) Failed: DllUnregister C:\WINDOWS\mslagent\2_mslagent.dll|1 (file not found) Failed: DllUnregister C:\WINDOWS\navmpc\2_navmpc.dll|1 (file not found) Failed: FolderDelete C:\WINDOWS\mslagent (folder not found) Failed: FolderDelete C:\WINDOWS\navmpc (folder not found) Failed: FolderDelete C:\WINDOWS\msskinner (folder not found) Failed: FolderDelete C:\WINDOWS\wintrim (folder not found) Failed: FolderDelete C:\WINDOWS\wincomp (folder not found) Failed: FolderDelete C:\WINDOWS\winmgts (folder not found) Failed: FolderDelete C:\WINDOWS\simcss (folder not found) Failed: FolderDelete C:\WINDOWS\mc (folder not found) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso10B62.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso1FDDD.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso25954.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso25ACD.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso28F00.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso2ACE0.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso2B767.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso2EB6B.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso36461.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso3769C.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso39B39.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso3EDD9.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso4CD1E.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso4E5EF.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso4F11.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso576DB.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso58524.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso5AC0.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso5B27D.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso5B37F.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso61907.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso61944.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso64A89.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso64AA3.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso65BD2.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso6704F.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso6BF0.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso6DFE9.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso6EDB1.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso7025.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso73E2D.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso74B8.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso770D3.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso79956.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso83042.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso851D0.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso866DC.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso8ADC1.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso8FE8.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso922AB.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso97CAC.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso981D5.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\mso9C135.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoA07A6.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoAF4CC.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoB968E.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoBA4C6.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoBA6BC.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoC51E6.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoC60F8.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoC811F.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoC9EBF.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoCBA43.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoCCAA7.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoCF56E.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoD131A.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoD64AA.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoD6522.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoE366A.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoE5013.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoE87D7.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoF18D.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoF7436.wmf (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\msoFEB01.wmf (operation failed) Failed: FolderDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\Word8.0 (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\~DF3AC7.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\~DF77DA.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\~DFEE84.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\~WRD0000.doc (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\~WRF0001.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\~WRS0002.tmp (operation failed) Script completed. Blacklight : 27:18 [info]: BlackLight Engine 1.0.47 initialized 12/25/06 23:27:18 [info]: OS: 5.1 build 2600 (Service Pack 2) 12/25/06 23:27:19 [Note]: 7019 4 12/25/06 23:27:19 [Note]: 7005 0 12/25/06 23:27:21 [Note]: 7006 0 12/25/06 23:27:21 [Note]: 7011 564 12/25/06 23:27:22 [Note]: 7026 0 12/25/06 23:27:22 [Note]: 7026 0 12/25/06 23:27:37 [Note]: FSRAW library version 1.7.1020 12/25/06 23:40:58 [Note]: 7007 0 Hijackthis : Logfile of HijackThis v1.99.1 Scan saved at 22:59:44, on 25/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mclogsrv.exe C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\PROGRA~1\McAfee\MSC\mctskshd.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe C:\Program Files\SiteAdvisor\4608\SiteAdv.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\SiteAdvisor\4608\SAService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\explorer.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.fr.netscape.com/fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.fr.netscape.com/fr/home/winsearch.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.fr.netscape.com/fr/home/winsearch200.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.fr.netscape.com/fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.fr.netscape.com/keyword/%s R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe O4 - HKLM\..\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\4608\SiteAdv.exe O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {78AEEDE8-7345-4FB5-A8FE-4BFF16EF25FC} (McAfee Virtual Technician Control Class) - http://mvt.mcafee.com/mvt/bin/3,0,1,0/mvt.cab O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://register.tiscali.fr/configurateur/AccountHelper.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...795/mcfscan.cab O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\4608\SAService.exe et enfin, scan en ligne avec Panda : Incident Status Location Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\jullien de pommerol\Cookies\jullien de pommerol@xiti[1].txt Apparemment y a du mieux , merci de metenir au courant et bonne nuit.
  4. Merci beaucoup pour la procedure, je m'y colle !
  5. Merci Charles ingals, voici le raport que tu m'as demandé : 7-Zip 4.42 Ad-Aware SE Personal Adobe Acrobat - Reader 6.0.2 Update Adobe Acrobat 5.0 Adobe Acrobat and Reader 6.0.3 Update Adobe Acrobat and Reader 6.0.4 Update Adobe Flash Player 9 Adobe Photoshop Album 2.0 Edition Découverte Adobe Reader 6.0.1 - Français Alice Auto-diagnostic CCleaner (remove only) Complément Microsoft Word pour Microsoft Works Suite Conexant 56K ACLink Modem Conexant AC-Link Audio Connexion Facile à Internet Correctif Windows XP - KB834707 Correctif Windows XP - KB867282 Correctif Windows XP - KB873333 Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB885884 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB887742 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890047 Correctif Windows XP - KB890175 Correctif Windows XP - KB890859 Correctif Windows XP - KB890923 Correctif Windows XP - KB891781 Correctif Windows XP - KB893066 Correctif Windows XP - KB893086 DIGIPILLS Miniphoto EasyTransfer Encyclopédie Microsoft Encarta 2004 Extension Système de Microsoft Money HijackThis 1.99.1 HP Deskjet Preloaded Printer Drivers HP Image Zone 3.5 HP Image Zone Plus 3.5 HP Photo and Imaging 2.0 - Photosmart Cameras HP PSC & OfficeJet 3.5 HP Software Update HPIZ350 InterVideo WinDVD InterVideo WinDVD Creator 2 iTunes Java 2 Runtime Environment, SE v1.4.2_03 Kit de Connexion Alice ADSL Logiciel QuickCam de Logitech Logitech Desktop Messenger Logitech MouseWare 9.79 Logitech Print Service McAfee SecurityCenter Memories Disc Creator 2.0 Memory Craft 10000 Update Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft AutoRoute v11.0 Microsoft Money Microsoft Office 97 Professional Microsoft Office PowerPoint Viewer 2003 Microsoft Picture It! Photo Premium 9 Microsoft Word 2002 Microsoft Works Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565) Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734) Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) Mise à jour de sécurité pour Windows XP (KB883939) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB896688) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899588) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB903235) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB905915) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB908531) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911567) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912812) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913446) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB916281) Mise à jour de sécurité pour Windows XP (KB917159) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918439) Mise à jour de sécurité pour Windows XP (KB918899) Mise à jour de sécurité pour Windows XP (KB919007) Mise à jour de sécurité pour Windows XP (KB920213) Mise à jour de sécurité pour Windows XP (KB920214) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB920685) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921883) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour de sécurité pour Windows XP (KB922760) Mise à jour de sécurité pour Windows XP (KB922819) Mise à jour de sécurité pour Windows XP (KB923191) Mise à jour de sécurité pour Windows XP (KB923414) Mise à jour de sécurité pour Windows XP (KB923689) Mise à jour de sécurité pour Windows XP (KB923694) Mise à jour de sécurité pour Windows XP (KB923980) Mise à jour de sécurité pour Windows XP (KB924191) Mise à jour de sécurité pour Windows XP (KB924270) Mise à jour de sécurité pour Windows XP (KB924496) Mise à jour de sécurité pour Windows XP (KB925454) Mise à jour de sécurité pour Windows XP (KB925486) Mise à jour de sécurité pour Windows XP (KB926255) Mise à jour pour Windows XP (KB894391) Mise à jour pour Windows XP (KB896727) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB911280) Mise à jour pour Windows XP (KB916595) Mise à jour pour Windows XP (KB920872) Mise à jour pour Windows XP (KB922582) MSXML 4.0 SP2 (KB927978) MUSICMATCH® Jukebox NVIDIA Display Driver overland Paint Shop Pro 6.0 (ESD) Panda ActiveScan PhotoRescue Wizard PC 2.0.647 Hama Version Photosmart 140,240,7200,7600,7700,7900 Series PokerStars Programme de gestion Camera de Logitech® Quick Launch Buttons 4.20 C1 QuickTime RealPlayer Basic RecordNow! RegSupreme 1.4 Sélecteur d'installation de Microsoft Works 2004 Shockwave Skype 2.5 SnagIt 7 SoftK56 Data Fax CARP Sonic Update Manager Spybot - Search & Destroy 1.4 Synaptics Pointing Device Driver Windows Installer 3.1 (KB893803) Windows Installer 3.1 (KB893803) Windows XP Service Pack 2
  6. Salut Charles ingals, merci beaucoup de t'occuper de mes problèmes, j'ai fait un scan avec BlackLight : 12/25/06 19:27:08 [info]: BlackLight Engine 1.0.47 initialized 12/25/06 19:27:08 [info]: OS: 5.1 build 2600 (Service Pack 2) 12/25/06 19:27:08 [Note]: 7019 4 12/25/06 19:27:08 [Note]: 7005 0 12/25/06 19:27:12 [Note]: 7006 0 12/25/06 19:27:12 [Note]: 7011 188 12/25/06 19:27:13 [Note]: 7026 0 12/25/06 19:27:13 [Note]: 7026 0 12/25/06 19:27:13 [Note]: 7024 3 12/25/06 19:27:13 [info]: Hidden process: C:\windows\system32\srzhmb.exe 12/25/06 19:27:13 [Note]: FSRAW library version 1.7.1020 12/25/06 19:30:04 [info]: Hidden file: c:\WINDOWS\Prefetch\SRZHMB.EXE-085A266B.pf 12/25/06 19:30:04 [Note]: 10002 1 12/25/06 19:30:56 [info]: Hidden file: c:\WINDOWS\system32\srzhmb.dat 12/25/06 19:30:56 [Note]: 10002 1 12/25/06 19:30:56 [info]: Hidden file: C:\windows\system32\srzhmb.exe 12/25/06 19:30:56 [Note]: 10002 1 12/25/06 19:30:56 [info]: Hidden file: c:\WINDOWS\system32\srzhmb_nav.dat 12/25/06 19:30:56 [Note]: 10002 1 12/25/06 19:30:57 [info]: Hidden file: c:\WINDOWS\system32\srzhmb_navps.dat 12/25/06 19:30:57 [Note]: 10002 1 Merci de m'indiquer la suite du programme
  7. Bonjour, mon PC contient apparemment des virus ou spyware car j'ai des fenetres internet style Winantispyware 2006 qui s'ouvre ou autre site de rencontre. j'ai effectué des scans avec McAffee qui detecte regulièrement les mêmes problèmes : Cookie-Eyeblaster Cookie-Adserver Cookie-Cybermonitor Patched-Function (Memory\ZwQuerySystemInformation) J'ai ensuite lancer un rapport Hijackthis : Logfile of HijackThis v1.99.1 Scan saved at 18:45:54, on 25/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mclogsrv.exe C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\PROGRA~1\McAfee\MSC\mctskshd.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe C:\Program Files\SiteAdvisor\4608\SiteAdv.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\SiteAdvisor\4608\SAService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\explorer.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\taskmgr.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\notepad.exe C:\WINDOWS\system32\rundll32.exe c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe C:\DOCUME~1\JULLIE~1\LOCALS~1\Temp\Répertoire temporaire 2 pour hijackthis.zip\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.fr.netscape.com/fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.fr.netscape.com/fr/home/winsearch.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.fr.netscape.com/fr/home/winsearch200.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.fr.netscape.com/fr/home/winsearch.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.fr.netscape.com/fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.fr.netscape.com/keyword/%s R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe O4 - HKLM\..\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\4608\SiteAdv.exe O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {78AEEDE8-7345-4FB5-A8FE-4BFF16EF25FC} (McAfee Virtual Technician Control Class) - http://mvt.mcafee.com/mvt/bin/3,0,1,0/mvt.cab O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://register.tiscali.fr/configurateur/AccountHelper.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...795/mcfscan.cab O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\4608\SiteAdv.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\4608\SAService.exe et aussi un scan via le site de panda qui m'a detecté des spyware : Incident Status Location Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\jullien de pommerol\Cookies\jullien de pommerol@serving-sys[1].txt Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\jullien de pommerol\Cookies\jullien de pommerol@stats1.reliablestats[1].txt Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\jullien de pommerol\Cookies\jullien de pommerol@systemdoctor[1].txt Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\jullien de pommerol\Cookies\jullien de pommerol@weborama[1].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\jullien de pommerol\Cookies\jullien de pommerol@xiti[1].txt Adware:Adware/NaviPromo Not disinfected C:\WINDOWS\system32\srzhmb.exe Mais ensuite je ne sais pas trop quoi faire avec ça. Merci d'avance de m'aider sur ces problèmes.
×
×
  • Créer...