cesarioohh

-----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : AMD Phenom 9500 Quad-Core Processor ) BIOS : Default System BIOS USER : ********** ( Administrator ) (Changé par moi-même pour privacy !) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1229 [VPS 081218-0] 4.8.1229 (Activated) Firewall : ESET Personal firewall 3.0.672.0 (Activated) C:\ (Local Disk) - NTFS - Total:327 Go (Free:271 Go) D:\ (Local Disk) - NTFS - Total:335 Go (Free:334 Go) E:\ (USB) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 26/02/2009|13:25 ) [ UAC => 1 ] -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\Windows\\system32\\blank.htm" "Search Page"="http://www.google.com" "Start Page"="http://www.google.fr/" "Search Bar"="http://www.google.com/ie" "Url"="http://go.microsoft.com/fwlink/?LinkId=75720" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Page_URL"="http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=8&key=IESTART" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [ UAC => 1 ] 1 - "C:\ToolBar SD\TB_1.txt" - 26/02/2009|13:25 - Option : [1] -----------\\ Fin du rapport a 13:25:37,81 ************************************************************************** --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1 X86-based PC ( Multiprocessor Free : AMD Phenom 9500 Quad-Core Processor ) BIOS : Default System BIOS USER : *********** ( Administrator ) (Idem !) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1229 [VPS 081218-0] 4.8.1229 (Activated) Firewall : ESET Personal firewall 3.0.672.0 (Activated) C:\ (Local Disk) - NTFS - Total:327 Go (Free:271 Go) D:\ (Local Disk) - NTFS - Total:335 Go (Free:334 Go) E:\ (USB) F:\ (USB) G:\ (USB) H:\ (USB) I:\ (CD or DVD) "C:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 26/02/2009|13:28 ) [ UAC => 1 ] --------------------\\ Listing des dossiers dans Local [17/02/2009|14:54] C:\Users\HERBAU~1\AppData\Local\Adobe [16/02/2009|12:34] C:\Users\HERBAU~1\AppData\Local\Apple [16/02/2009|12:39] C:\Users\HERBAU~1\AppData\Local\Apple Computer [20/10/2008|16:43] C:\Users\HERBAU~1\AppData\Local\Application Data [26/02/2009|10:51] C:\Users\HERBAU~1\AppData\Local\ApplicationHistory [23/02/2009|12:06] C:\Users\HERBAU~1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [04/02/2009|15:19] C:\Users\HERBAU~1\AppData\Local\ESET [20/10/2008|16:54] C:\Users\HERBAU~1\AppData\Local\fusioncache.dat [12/02/2009|15:57] C:\Users\HERBAU~1\AppData\Local\GDIPFONTCACHEV1.DAT [03/02/2009|12:50] C:\Users\HERBAU~1\AppData\Local\Google [20/10/2008|16:43] C:\Users\HERBAU~1\AppData\Local\Historique [25/02/2009|18:51] C:\Users\HERBAU~1\AppData\Local\IconCache.db [27/01/2009|15:27] C:\Users\HERBAU~1\AppData\Local\Microsoft [08/12/2008|14:51] C:\Users\HERBAU~1\AppData\Local\Microsoft Games [18/12/2008|17:00] C:\Users\HERBAU~1\AppData\Local\Microsoft Help [20/10/2008|17:06] C:\Users\HERBAU~1\AppData\Local\Mozilla [20/10/2008|17:01] C:\Users\HERBAU~1\AppData\Local\Packard Bell [12/02/2009|13:47] C:\Users\HERBAU~1\AppData\Local\Seven Zip [26/02/2009|13:27] C:\Users\HERBAU~1\AppData\Local\Temp [20/10/2008|16:43] C:\Users\HERBAU~1\AppData\Local\Temporary Internet Files [20/10/2008|16:54] C:\Users\HERBAU~1\AppData\Local\VirtualStore --------------------\\ Tâches planifiées dans C:\Windows\tasks [26/02/2009 13:00][--a------] C:\Windows\tasks\Extension de garantie.job [26/02/2009 13:00][--a------] C:\Windows\tasks\Recovery DVD Creator.job [26/02/2009 10:51][--ah-----] C:\Windows\tasks\SA.DAT [25/02/2009 18:51][--a------] C:\Windows\tasks\SCHEDLGU.TXT --------------------\\ Listing des dossiers dans C:\ProgramData [16/02/2009|12:38] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} [07/11/2008|17:45] C:\ProgramData\Adobe [16/02/2009|12:33] C:\ProgramData\Apple [16/02/2009|12:38] C:\ProgramData\Apple Computer [02/11/2006|14:02] C:\ProgramData\Application Data [20/10/2008|16:39] C:\ProgramData\Bureau [02/11/2006|14:02] C:\ProgramData\Desktop [02/11/2006|14:02] C:\ProgramData\Documents [04/02/2009|13:06] C:\ProgramData\ESET [20/10/2008|16:39] C:\ProgramData\Favoris [02/11/2006|14:02] C:\ProgramData\Favorites [27/01/2009|15:40] C:\ProgramData\Google [17/03/2008|11:45] C:\ProgramData\InstallShield [04/02/2009|13:22] C:\ProgramData\Lavasoft [12/02/2009|12:39] C:\ProgramData\Malwarebytes [20/10/2008|16:39] C:\ProgramData\Menu D‚marrer [27/01/2009|15:27] C:\ProgramData\Microsoft [12/02/2009|15:54] C:\ProgramData\Microsoft Help [20/10/2008|16:39] C:\ProgramData\ModŠles [12/02/2009|14:01] C:\ProgramData\NortonInstaller [07/11/2008|17:39] C:\ProgramData\NOS [12/02/2009|15:57] C:\ProgramData\NVIDIA [17/03/2008|11:57] C:\ProgramData\Roxio [17/03/2008|11:55] C:\ProgramData\Skype [24/10/2008|12:39] C:\ProgramData\Sonic [02/11/2006|14:02] C:\ProgramData\Start Menu [02/11/2006|14:02] C:\ProgramData\Templates [19/11/2008|19:22] C:\ProgramData\WLInstaller --------------------\\ Listing des dossiers dans C:\Program Files [07/11/2008|17:46] C:\Program Files\Adobe [20/10/2008|19:21] C:\Program Files\Alwil Software [16/02/2009|12:34] C:\Program Files\Apple Software Update [16/02/2009|12:35] C:\Program Files\Bonjour [23/10/2008|17:28] C:\Program Files\Brother [23/10/2008|17:29] C:\Program Files\Brownie [16/02/2009|12:33] C:\Program Files\Common Files [04/02/2009|13:13] C:\Program Files\ESET [20/10/2008|16:39] C:\Program Files\Fichiers communs [C:\Program Files\Common Files] [27/01/2009|15:51] C:\Program Files\Google [17/03/2008|11:39] C:\Program Files\HDReg [23/10/2008|17:24] C:\Program Files\InstallShield Installation Information [16/02/2009|12:35] C:\Program Files\Internet Explorer [16/02/2009|12:38] C:\Program Files\iPod [16/02/2009|12:38] C:\Program Files\iTunes [04/02/2009|13:20] C:\Program Files\Lavasoft [12/02/2009|13:26] C:\Program Files\Malwarebytes' Anti-Malware [23/10/2008|11:59] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [02/11/2006|13:37] C:\Program Files\Microsoft Games [17/03/2008|11:53] C:\Program Files\Microsoft Office [17/03/2008|11:53] C:\Program Files\Microsoft Works [17/03/2008|11:53] C:\Program Files\Microsoft.NET [03/02/2009|17:59] C:\Program Files\Movie Maker [12/02/2009|15:27] C:\Program Files\Mozilla Firefox [02/11/2006|13:37] C:\Program Files\MSBuild [12/02/2009|14:16] C:\Program Files\MSECACHE [23/10/2008|11:52] C:\Program Files\MSXML 4.0 [07/11/2008|17:39] C:\Program Files\NOS [17/03/2008|11:55] C:\Program Files\Packard Bell [20/10/2008|19:26] C:\Program Files\PDFCreator [20/10/2008|19:26] C:\Program Files\PDFCreator Toolbar [03/02/2009|12:50] C:\Program Files\Picasa2 [16/02/2009|12:35] C:\Program Files\QuickTime [17/03/2008|11:35] C:\Program Files\Realtek [02/11/2006|13:37] C:\Program Files\Reference Assemblies [17/03/2008|11:45] C:\Program Files\Roxio [17/03/2008|11:40] C:\Program Files\Seagate [17/03/2008|11:55] C:\Program Files\Skype [02/11/2006|14:01] C:\Program Files\Uninstall Information [20/10/2008|19:31] C:\Program Files\VideoLAN [03/02/2009|17:59] C:\Program Files\Windows Calendar [03/02/2009|17:59] C:\Program Files\Windows Collaboration [03/02/2009|17:59] C:\Program Files\Windows Defender [12/02/2009|14:16] C:\Program Files\Windows Installer Clean Up [03/02/2009|17:59] C:\Program Files\Windows Journal [19/11/2008|19:25] C:\Program Files\Windows Live [12/02/2009|11:54] C:\Program Files\Windows Mail [03/02/2009|17:59] C:\Program Files\Windows Media Player [20/10/2008|16:39] C:\Program Files\Windows NT [03/02/2009|17:59] C:\Program Files\Windows Photo Gallery [03/02/2009|17:59] C:\Program Files\Windows Sidebar [03/02/2009|12:43] C:\Program Files\WinRAR --------------------\\ Listing des dossiers dans C:\Program Files\Common Files [07/11/2008|17:45] C:\Program Files\Common Files\Adobe [07/11/2008|17:45] C:\Program Files\Common Files\Adobe AIR [16/02/2009|12:38] C:\Program Files\Common Files\Apple [17/03/2008|11:53] C:\Program Files\Common Files\DESIGNER [23/10/2008|17:24] C:\Program Files\Common Files\InstallShield [24/10/2008|12:11] C:\Program Files\Common Files\microsoft shared [17/03/2008|11:45] C:\Program Files\Common Files\Roxio Shared [02/11/2006|12:18] C:\Program Files\Common Files\Services [17/03/2008|11:55] C:\Program Files\Common Files\Skype [17/03/2008|11:45] C:\Program Files\Common Files\Sonic Shared [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines [17/03/2008|11:45] C:\Program Files\Common Files\SureThing Shared [12/02/2009|14:01] C:\Program Files\Common Files\Symantec Shared [03/02/2009|17:59] C:\Program Files\Common Files\System [19/11/2008|19:25] C:\Program Files\Common Files\WindowsLiveInstaller [04/02/2009|13:18] C:\Program Files\Common Files\Wise Installation Wizard --------------------\\ Process ( 58 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-26 13:28:29 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! [F:85][D:15]-> C:\Users\HERBAU~1\AppData\Local\Temp [F:60][D:1]-> C:\Users\HERBAU~1\AppData\Roaming\MICROS~1\Windows\Cookies [F:6416][D:5]-> C:\Users\HERBAU~1\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5 [F:4][D:4]-> C:\$Recycle.Bin 1 - "C:\Lop SD\LopR_1.txt" - 26/02/2009|13:33 - Option : [1] --------------------\\ Fin du rapport a 13:33:40 [ UAC => 1 ] **************************************** salut Apollo, Désolé de revenir si tard, mais les exigences du boulot ne m'ont pas permis d'avoir le temps d'exécuter ces deux programmes... C'est chose faite ce jour ! J'ai toujours des redirections non souhaitées quand je fais une recherche sur Google vers des sites pas spécialement les bienvenus au bureau (Type sites de cul, ou autres sites genre "Monstermarketplace" ou un truc dans le genre...). Disons que ça ne pose pas de problèmes directs, car il suffit que je fasse un ctrl C / ctrl V pour atteindre le site désiré. Cela reste cependant embêtant car les redirections sont parfois régulières, parfois passagères. Et d'après les rapports remis plus haut, il ne me semble pas que des infections aient été trouvées. Ce problème viendrait-il d'un piratage de Google ? Merci pour ta patience et tes conseils ! Cesarioohh

Re, Encore merci, Je supprime les résidus de Norton et sinon, par contre, encore quelques redirections intempestives via google. Le reste fonctionne effectivement mieux après les suppressions des différents trojans et malwares ! Je te tiens au courant si ça revient trop fréquemment. Encore merci Cesarioohh

Et le résultat HiJackThis après redémarrage : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:37:07, on 12/02/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe C:\Windows\System32\rundll32.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe C:\Windows\System32\rundll32.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe C:\Windows\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\mmc.exe C:\HiJackThis\HiJackThis.exe C:\Windows\system32\SearchFilterHost.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/cgi-bin/redi...amp;key=IESTART R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll (file missing) O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll (file missing) O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- End of file - 5923 bytes

Re, Merci pour la rapidité ! Malwarebytes' Anti-Malware 1.34 Version de la base de données: 1753 Windows 6.0.6001 Service Pack 1 12/02/2009 13:26:35 mbam-log-2009-02-12 (13-26-35).txt Type de recherche: Examen complet (C:\|D:\|) Eléments examinés: 145652 Temps écoulé: 45 minute(s), 16 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 3 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 11 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Framework Windows (Trojan.FakeAlert) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\Windows\System32\senekatiepblol.dll (Trojan.Seneka) -> Delete on reboot. C:\Windows\System32\senekaulhttgvb.dll (Trojan.Seneka) -> Delete on reboot. C:\Windows\System32\drivers\seneka.sys (Trojan.Seneka) -> Quarantined and deleted successfully. C:\Windows\System32\drivers\senekaeqpdotru.sys (Trojan.Seneka) -> Quarantined and deleted successfully. C:\Windows\System32\ntdll64.exe (Trojan.Agent) -> Quarantined and deleted successfully. C:\Windows\System32\warning.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Users\Administrateur\AppData\Local\Temp\ntdll64.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Users\Administrateur\AppData\Local\Temp\mousehook.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Windows\System32\senekaoqvumgjm.dll (Trojan.Agent) -> Delete on reboot. C:\Windows\System32\senekapeweyjsr.dat (Trojan.Agent) -> Quarantined and deleted successfully. C:\Windows\System32\senekavgivkvqs.dat (Trojan.Agent) -> Quarantined and deleted successfully. ... et toujours des sites porno sur les liens google !

Bonjour à tous, premier post sur ce forum. J'explique ma situation : Sur mon PC de travail, j'ai tenté une bidouille qui m'a ammené ce problème, à savoir, la redirection vers d'autres pages que celles recherchées sur google. J'ai vu un nombre incalculable de pages sur différents forum à ce sujet, mais j'ai l'impression que chaque cas est particulier, d'où la création de ce sujet. Please, help ! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:29:09, on 12/02/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Windows Mail\WinMail.exe C:\Program Files\Internet Explorer\IEUser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe C:\HiJackThis\HiJackThis.exe C:\Windows\system32\SearchFilterHost.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/cgi-bin/redi...amp;key=IESTART R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll (file missing) O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll (file missing) O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Framework Windows] frmwrk32.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- End of file - 6345 bytes D'avance merci, ma Boss est une sorte de Cerbère sympa, mais Cerbère quand même ! Cesarioohh