Aller au contenu

Mchel BACHOZ

Membres
  • Compteur de contenus

    44
  • Inscription

  • Dernière visite

Mchel BACHOZ's Achievements

Member

Member (4/12)

0

Réputation sur la communauté

  1. Pour finir mon antivirus ne se met plus a jour ... merci quand même pour le coup de main. Merci d'avoir essayé.
  2. Euh la machine va mal. La mise à jour du service Window PACK 3 est bloquée sur un fichier apparemment anodine (bethov9 ...) et le ResetBroswer ne semble pas compatible avec XP. Et j'ai toujours le trojan du début ... aie aie Help.
  3. hep il y a quelqu'un?
  4. Super!!! Connexion Internet rétablie. J'en étais ou déjà ... ah oui MBMA Voici le rapport d'analyse: http://www.cjoint.com/c/EKlutfIiCmg et voici le rapport de désinfection: http://www.cjoint.com/c/EKluwWVQQjg Sinon pour Firefox je n'ai pas bien compris se qu'il fallait faire. A+
  5. Ayai, c'est fait, voici les rapports: Le rapport JRT sur ci joint : http://www.cjoint.com/c/EKhxgQxxtzA et le rapport AdwCleaner ci dessous: # AdwCleaner v5.018 - Rapport créé le 07/11/2015 à 23:57:31 # Mis à jour le 05/11/2015 par Xplode # Base de données : 2015-11-03.2 [serveur] # Système d'exploitation : Microsoft Windows XP Service Pack 2 (x86) # Nom d'utilisateur : Bourrel Jean-Robert - JREV # Exécuté depuis : C:\Documents and Settings\Bourrel Jean-Robert\Bureau\adwcleaner_5.018.exe # Option : Nettoyer # Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Dossiers ] ***** [-] Dossier Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\Extensions\crossriderapp12747@crossrider.com [-] Dossier Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\crossriderapp12747@crossrider.com [-] Dossier Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\Extensions\crossriderapp12747@crossrider.com [-] Dossier Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com [!] Dossier Non Supprimé : C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\Extensions\crossriderapp12747@crossrider.com ***** [ Fichiers ] ***** ***** [ DLLs ] ***** ***** [ Raccourcis ] ***** ***** [ Tâches planifiées ] ***** ***** [ Registre ] ***** [-] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E} [-] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} [-] Clé Supprimée : HKCU\Software\Deal Boat [-] Clé Supprimée : HKCU\Software\MyWaySA [-] Clé Supprimée : HKLM\SOFTWARE\Deal Boat [-] Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IadahToolbar [-] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deal Boat [-] Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IadahToolbar [-] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Deal Boat ***** [ Navigateurs ] ***** [-] [C:\Documents and Settings\Bourrel Evelyne\Application Data\Mozilla\Firefox\Profiles\79oybjo1.default\prefs.js] [Preference] Supprimée : user_pref("extensions.crossriderapp12747.adsOldValue", -1); [-] [C:\Documents and Settings\Xavier\Application Data\Mozilla\Firefox\Profiles\uiqadj1x.default\prefs.js] [Preference] Supprimée : user_pref("extensions.crossriderapp12747.adsOldValue", -1); [-] [C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\prefs.js] [Preference] Supprimée : user_pref("extensions.crossriderapp12747.adsOldValue", -1); [-] [C:\Documents and Settings\Invité\Application Data\Mozilla\Firefox\Profiles\cygxnefa.default\prefs.js] [Preference] Supprimée : user_pref("extensions.newAddons", "crossriderapp12747@crossrider.com"); ************************* :: Clés "Tracing" supprimées :: Paramètres Winsock réinitialisés ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [13210 octets] ########## @+
  6. Nettoyage terminé, voici le rapport. Aucune difficultés rencontrées pour le moment. ~ ZHPCleaner v2015.11.6.374 by Nicolas Coolman (2015/11/06) ~ Run by Bourrel Jean-Robert (Administrator) (07/11/2015 23:14:46) ~ Site : http://www.nicolascoolman.fr ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Type : Nettoyer ~ Report : C:\Documents and Settings\Bourrel Jean-Robert\Bureau\ZHPCleaner.txt ~ Quarantine : C:\Documents and Settings\Bourrel Jean-Robert\Application Data\ZHP\ZHPCleaner_Quarantine.txt ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows XP, 32-bit Service Pack 2 (Build 2600) ---\\ Service. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Navigateur internet. (1) SUPPRIMÉ: [5onazy52.default] - user_pref("extensions.crossriderapp12747.adsOldValue", -1); =>PUP.Optional.CrossRider ---\\ Fichier hôte. (1) ~ Le fichier hôte est légitime. (1) ---\\ Tâche planifiée. (0) ~ Aucun élément malicieux ou superflu trouvé. ---\\ Explorateur ( Dossiers, Fichiers ). (24) DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\chrome =>PUP.Optional.Conduit DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\chrome.manifest =>PUP.Optional.Conduit DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\components =>PUP.Optional.Conduit DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\defaults =>PUP.Optional.Conduit DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\DualPackage =>PUP.Optional.Conduit DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\install.rdf =>PUP.Optional.Conduit DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\lib =>PUP.Optional.Conduit DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\META-INF =>PUP.Optional.Conduit DEPLACÉ fichier^: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\searchplugin =>PUP.Optional.Conduit DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com\version.txt =>PUP.Optional.Conduit DEPLACÉ fichier: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll [Copyright © 2000 - MetaStream 3 Plugin r4] =>PUP.Optional.MetaStream DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\extensions\crossriderapp12747@crossrider.com\chrome\content\core\searchSettings.js =>PUP.Optional.SearchSettings DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage-journal =>PUP.Optional.Wajam DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage =>PUP.Optional.Wajam DEPLACÉ fichier: C:\Program Files\Deal Boat\Deal Boat-bho.dll [innovative Apps - Deal Boat BHO] =>PUP.Optional.CrossRider DEPLACÉ fichier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\KeySafe\KeySafe.exe [M-Systems - KeySafe Application] => DEPLACÉ dossier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\Mozilla\Firefox\Profiles\5onazy52.default\Extensions\engine@conduit.com =>PUP.Optional.Conduit DEPLACÉ dossier: C:\Documents and Settings\Bourrel Jean-Robert\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp =>PUP.Optional.Wajam DEPLACÉ dossier: C:\Documents and Settings\Bourrel Jean-Robert\Application Data\KeySafe => DEPLACÉ dossier: C:\Program Files\Deal Boat =>PUP.Optional.RewardsArcade DEPLACÉ dossier: C:\Program Files\Viewpoint =>PUP.Optional.MetaStream DEPLACÉ dossier: C:\Documents and Settings\All Users\Application Data\Viewpoint =>PUP.Optional.MetaStream DEPLACÉ dossier: C:\Documents and Settings\Bourrel Jean-Robert\Menu Démarrer\Programmes\Wajam =>PUP.Optional.Wajam DEPLACÉ dossier: C:\Documents and Settings\Bourrel Jean-Robert\Local Settings\Application Data\Wajam =>PUP.Optional.Wajam ---\\ Base de Registres ( Clés, Valeurs, Données ). (45) SUPPRIMÉ valeur: HKCU\Software\Mozilla\Firefox\Extensions\\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2} [C:\Program Files\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi] =>PUP.Optional.Wajam SUPPRIMÉ clé*: HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP [Viewpoint Corporation] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp [] =>PUP.Optional.Wajam SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111271147} [CrossriderApp0012747] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110111271147} [] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110111271147} [] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\Software\Classes\CLSID\{11111111-1111-1111-1111-110111271147} [Deal Boat] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220122272247} [CrossriderApp0012747.Sandbox] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550155275547} [iCrossriderBHO] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660166276647} [iSandBox] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440144274447} [] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-4028215567-2561087892-430838994-1006\Software\Wajam [] =>PUP.Optional.Wajam SUPPRIMÉ clé: HKCU\Software\Wajam [] =>PUP.Optional.Wajam SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com [10] =>Toolbar.Ask SUPPRIMÉ clé*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\wajam.com [11] =>PUP.Optional.Wajam SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\protector_dll.protectorbho [Google Toolbar Notifier BHO] =>PUP.Optional.BProtector SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 [Google Toolbar Notifier BHO] =>PUP.Optional.BProtector SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl [MetaStreamCtl Class] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1 [MetaStreamCtl Class] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary [MetaStreamCtl Class] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1 [MetaStreamCtl Class] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CrossriderApp0012747.BHO [CrossriderApp0012747] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CrossriderApp0012747.BHO.1 [CrossriderApp0012747] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CrossriderApp0012747.Sandbox [CrossriderApp0012747.Sandbox] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CrossriderApp0012747.Sandbox.1 [CrossriderApp0012747.Sandbox] =>PUP.Optional.CrossRider SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC [searchAssistantOC] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC.1 [searchAssistantOC] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SrchUI.SearchAssistant [search Assistant Control] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\SrchUI.SearchAssistant.1 [search Assistant Control] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E} [MetaStreamCtl Class] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} [MetaStreamCtl Class] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{2E71FD0F-AAB1-42c0-9146-6D2C4EDCF07D} [searchAssistantOC] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{B45FF030-4447-11D2-85DE-00C04FA35C89} [searchAssistantOC] =>PUP.Optional.SearchAssist SUPPRIMÉ clé*: HKLM\SOFTWARE\Classes\CLSID\{BFB46600-2D85-4E1C-8F44-82409508CF72} [saveImage Class] =>PUP.Optional.Multiplug SUPPRIMÉ clé*: HKLM\SOFTWARE\MetaStream [] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Viewpoint [] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer [Viewpoint Media Player] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer [] =>PUP.Optional.MetaStream SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13833fa8-f3b8-43fb-bd9b-b0be31eeb47f} [C:\Program Files\Deal Boat (Not File)] =>PUP.Optional.RewardsArcade SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b4e319c-f744-451f-b70f-b297ba6d1ccb} [C:\Program Files\Deal Boat (Not File)] =>PUP.Optional.RewardsArcade SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84560900-c6da-4bea-8958-b6c798f0b5c4} [C:\Program Files\Deal Boat (Not File)] =>PUP.Optional.RewardsArcade SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8e4e8f1f-1c54-4df6-92ab-6b0eef157091} [C:\Program Files\Deal Boat (Not File)] =>PUP.Optional.RewardsArcade SUPPRIMÉ clé*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e25c359d-a2e8-4d9a-becf-f76c9e9292ee} [C:\Program Files\Deal Boat (Not File)] =>PUP.Optional.RewardsArcade SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}\InprocServer32 [C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll (Not File)] =>PUP.Optional.MetaStream SUPPRIMÉ clé: HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}\InprocServer32 [C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll (Not File)] =>PUP.Optional.MetaStream ---\\ Bilan de la réparation ~ Réparation réalisée avec succès. ~ Ce navigateur est absent (Opera Software) ~ Le système a été redémarré. ---\\ Statistiques ~ Items scannés : 4026 ~ Items trouvés : 0 ~ Items annulés : 0 ~ Items réparés : 70 ~ End of clean in 1 minutes =================== ZHPCleaner-[R]-07112015-23_15_47.txt ZHPCleaner--07112015-23_13_18.txt
  7. Super, merci pour la prise en charge! Voici le lien : http://www.cjoint.com/c/EKhvBKffWSA A plus
  8. Bonjour, J'ai redémarrer un PC pas utilisé depuis environ 2 ans et me voila avec un cheval de troie. Merci pour votre aide. Michel
  9. Après scan avec Malwarebytes antimalwares et élimination des 9 objets infecté trouvés, la commande "netsh winsock reset" a résolu le problème a priori. A plus le zebulon-men M. Bachoz
  10. Bonjour, Mon PC (Packard Bell sous vista 32 bits) me donne des signes d'infection que je ne parviens pas à résorber avec Windows Defender et Avira. Seules la session administrateur peut s'ouvrir. Toutes les autres sessions ne peuvent plus s'ouvrir. La connexion à Internet n'est plus possible non plus. Je cherche une démarche à suivre. Quelqu'un saurait-il par où commencer ? Merci
  11. Salut, Si si j'ai des symptômes, légers mais désagréables, quand je navigue avec Firefox, j'ai des fenêtres qui s'affiche de manière intenpestives, soit mon contrôle parental les bloques, soient elle m'indique que mon ordinateur est infecté et qu'il faut vite installer un antivirus. Je ferme aussitôt les fenêtres. J'ai fait un scan avec antivir, tout va bien , un scan avec AVG Antispyware, tout à l'air ok. Ya t'il d'autres trucs à scanner ou d'autres outils? Merci
  12. Bonjour, Merci pour ta réponse, Ok j'ai fait ce que tu m'as dit, Voici le nouveau rapport: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:00:14, on 15/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\keyhook.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\ALCXMNTR.EXE C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Telecom Italia France\Securite Enfants\bin\OPTGui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/webhp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.aliceadsl.fr R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: &Google Notebook - {CCCCCCD3-666F-4F81-8B69-745DE9F6D897} - C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll O3 - Toolbar: Google Bloc-notes - {CCCCCCDB-4DDB-4703-95D4-DD2C526397BF} - C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [OPTENET_GUI] C:\Program Files\Telecom Italia France\Securite Enfants\bin\OPTGui.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe O4 - Startup: ubisoft register.lnk = C:\Program Files\Ubisoft\Rayman 3\Register\schedule.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Page à noter (Google Bloc-notes) - res://C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll/gn_menu1.html O8 - Extra context menu item: À noter (Google Bloc-notes) - res://C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll/gn_menu2.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Sécurité Enfants (OPTENET_FILTER) - Telecom Italia France - C:\Program Files\Telecom Italia France\Securite Enfants\bin\optproxy.exe O23 - Service: Streamload Service (StreamloadService) - Streamload - C:\Program Files\Streamload\MediaMax XL\StreamloadService.exe -- End of file - 10992 bytes
  13. Bonjour, Après un scan avec HijackThis, comme vu sur le forum, j'ai voulu installer Navilog mais l'installation de Navilog1 est bloquée par antivir, Que faire? Voici le rapport HijalThis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:21:18, on 15/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\keyhook.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\ALCXMNTR.EXE C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Telecom Italia France\Securite Enfants\bin\OPTGui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/webhp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.aliceadsl.fr R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F3 - REG:win.ini: run=C:\SCANNER\EXE16\AM.EXE O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: &Google Notebook - {CCCCCCD3-666F-4F81-8B69-745DE9F6D897} - C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll O3 - Toolbar: Google Bloc-notes - {CCCCCCDB-4DDB-4703-95D4-DD2C526397BF} - C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [OPTENET_GUI] C:\Program Files\Telecom Italia France\Securite Enfants\bin\OPTGui.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe O4 - Startup: ubisoft register.lnk = C:\Program Files\Ubisoft\Rayman 3\Register\schedule.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Page à noter (Google Bloc-notes) - res://C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll/gn_menu1.html O8 - Extra context menu item: À noter (Google Bloc-notes) - res://C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll/gn_menu2.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Sécurité Enfants (OPTENET_FILTER) - Telecom Italia France - C:\Program Files\Telecom Italia France\Securite Enfants\bin\optproxy.exe O23 - Service: Streamload Service (StreamloadService) - Streamload - C:\Program Files\Streamload\MediaMax XL\StreamloadService.exe -- End of file - 11040 bytes
  14. Voici le rapport HijackThis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 00:14:44, on 13/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\keyhook.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\ALCXMNTR.EXE C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Telecom Italia France\Securite Enfants\bin\OPTGui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Google\Google Talk\googletalk.exe C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\eMule\emule.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/webhp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.aliceadsl.fr R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe" R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F3 - REG:win.ini: run=C:\SCANNER\EXE16\AM.EXE O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: &Google Notebook - {CCCCCCD3-666F-4F81-8B69-745DE9F6D897} - C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll O3 - Toolbar: Google Bloc-notes - {CCCCCCDB-4DDB-4703-95D4-DD2C526397BF} - C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [OPTENET_GUI] C:\Program Files\Telecom Italia France\Securite Enfants\bin\OPTGui.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [uSB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\PCHButton.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKCU\..\Run: [btttzx] c:\documents and settings\compaq_propriétaire\local settings\application data\btttzx.exe btttzx O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe O4 - Startup: ubisoft register.lnk = C:\Program Files\Ubisoft\Rayman 3\Register\schedule.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Page à noter (Google Bloc-notes) - res://C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll/gn_menu1.html O8 - Extra context menu item: À noter (Google Bloc-notes) - res://C:\Program Files\Google\Google Notebook\gnotes1.0.2.19--946322401.dll/gn_menu2.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Sécurité Enfants (OPTENET_FILTER) - Telecom Italia France - C:\Program Files\Telecom Italia France\Securite Enfants\bin\optproxy.exe O23 - Service: Streamload Service (StreamloadService) - Streamload - C:\Program Files\Streamload\MediaMax XL\StreamloadService.exe -- End of file - 11131 bytes
  15. Bonjour, malgré Antivir et AVG anti spyware, je suis parasité par des fenêtres intempestives de sécurité , que faire? Merci
×
×
  • Créer...