(RÉSOLU) (Merci Apollo^^) Pub intempestive et navigation hyper lente.

[Gros-Minet]

14:36:51:796 820 ForceUnloadDriver: NtUnloadDriver error 2

14:36:51:796 820 ForceUnloadDriver: NtUnloadDriver error 2

14:36:51:796 820 ForceUnloadDriver: NtUnloadDriver error 2

14:36:51:796 820 main: Driver KLMD successfully dropped

14:36:51:796 820 main: Driver KLMD successfully loaded

14:36:51:796 820

Scanning Registry ...

14:36:51:796 820 ScanServices: Searching service UACd.sys

14:36:51:796 820 ScanServices: Open/Create key error 2

14:36:51:796 820 ScanServices: Searching service TDSSserv.sys

14:36:51:796 820 ScanServices: Open/Create key error 2

14:36:51:796 820 ScanServices: Searching service gaopdxserv.sys

14:36:51:796 820 ScanServices: Open/Create key error 2

14:36:51:796 820 ScanServices: Searching service gxvxcserv.sys

14:36:51:796 820 ScanServices: Open/Create key error 2

14:36:51:796 820 ScanServices: Searching service MSIVXserv.sys

14:36:51:796 820 ScanServices: Open/Create key error 2

14:36:51:796 820 UnhookRegistry: Kernel module file name: C:\windows\system32\ntoskrnl.exe, base addr: 804D7000

14:36:51:796 820 UnhookRegistry: Kernel local addr: A40000

14:36:51:796 820 UnhookRegistry: KeServiceDescriptorTable addr: ACB520

14:36:51:796 820 UnhookRegistry: KiServiceTable addr: A4D8B0

14:36:51:796 820 UnhookRegistry: NtEnumerateKey service number (local): 47

14:36:51:796 820 UnhookRegistry: NtEnumerateKey local addr: AE1E14

14:36:51:796 820 KLMD_OpenDevice: Trying to open KLMD device

14:36:51:796 820 KLMD_GetSystemRoutineAddressA: Trying to get system routine address ZwEnumerateKey

14:36:51:796 820 KLMD_GetSystemRoutineAddressW: Trying to get system routine address ZwEnumerateKey

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0x804E380F[0x4]

14:36:51:796 820 UnhookRegistry: NtEnumerateKey service number (kernel): 47

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0x804E49CC[0x4]

14:36:51:796 820 UnhookRegistry: NtEnumerateKey real addr: 80578E14

14:36:51:796 820 UnhookRegistry: NtEnumerateKey calc addr: 80578E14

14:36:51:796 820 UnhookRegistry: No SDT hooks found on NtEnumerateKey

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0x80578E14[0xA]

14:36:51:796 820 UnhookRegistry: No splicing found on NtEnumerateKey

14:36:51:796 820

Scanning Kernel memory ...

14:36:51:796 820 KLMD_OpenDevice: Trying to open KLMD device

14:36:51:796 820 KLMD_GetSystemObjectAddressByNameA: Trying to get system object address by name \Driver\Disk

14:36:51:796 820 KLMD_GetSystemObjectAddressByNameW: Trying to get system object address by name \Driver\Disk

14:36:51:796 820 DetectCureTDL3: \Driver\Disk PDRIVER_OBJECT: 8A252D58

14:36:51:796 820 DetectCureTDL3: KLMD_GetDeviceObjectList returned 2 DevObjects

14:36:51:796 820 DetectCureTDL3: 0 Curr stack PDEVICE_OBJECT: 8A234C68

14:36:51:796 820 KLMD_GetLowerDeviceObject: Trying to get lower device object for 8A234C68

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0x8A234C68[0x38]

14:36:51:796 820 DetectCureTDL3: DRIVER_OBJECT addr: 8A252D58

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0x8A252D58[0xA8]

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0xE1012FE0[0x208]

14:36:51:796 820 DetectCureTDL3: DRIVER_OBJECT name: \Driver\Disk, Driver Name: Disk

14:36:51:796 820 DetectCureTDL3: IrpHandler (0) addr: F763DBB0

14:36:51:796 820 DetectCureTDL3: IrpHandler (1) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (2) addr: F763DBB0

14:36:51:796 820 DetectCureTDL3: IrpHandler (3) addr: F7637D1F

14:36:51:796 820 DetectCureTDL3: IrpHandler (4) addr: F7637D1F

14:36:51:796 820 DetectCureTDL3: IrpHandler (5) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (6) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (7) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler ( addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (9) addr: F76382E2

14:36:51:796 820 DetectCureTDL3: IrpHandler (10) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (11) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (12) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (13) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (14) addr: F76383BB

14:36:51:796 820 DetectCureTDL3: IrpHandler (15) addr: F763BF28

14:36:51:796 820 DetectCureTDL3: IrpHandler (16) addr: F76382E2

14:36:51:796 820 DetectCureTDL3: IrpHandler (17) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (18) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (19) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (20) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (21) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (22) addr: F7639C82

14:36:51:796 820 DetectCureTDL3: IrpHandler (23) addr: F763E99E

14:36:51:796 820 DetectCureTDL3: IrpHandler (24) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (25) addr: 804F9739

14:36:51:796 820 DetectCureTDL3: IrpHandler (26) addr: 804F9739

14:36:51:796 820 KLMD_ReadMem: Trying to ReadMemory 0x0[0x400]

14:36:51:796 820 KLMD_ReadMem: DeviceIoControl error 1

14:36:51:796 820 TDL3_StartIoHookDetect: Unable to get StartIo handler code

14:36:51:796 820 TDL3_FileDetect: Processing driver: Disk

14:36:51:796 820 TDL3_FileDetect: Parameters: C:\WINDOWS\system32\drivers\disk.sys, C:\WINDOWS\system32\Drivers\tsk_disk.sys, SYSTEM\CurrentControlSet\Services\Disk, system32\Drivers\tsk_disk.sys

14:36:51:796 820 TDL3_FileDetect: Processing driver file: C:\WINDOWS\system32\drivers\disk.sys

14:36:51:796 820 KLMD_CreateFileW: Trying to open file C:\WINDOWS\system32\drivers\disk.sys

14:36:51:828 820 DetectCureTDL3: 1 Curr stack PDEVICE_OBJECT: 8A1E8AB8

14:36:51:828 820 KLMD_GetLowerDeviceObject: Trying to get lower device object for 8A1E8AB8

14:36:51:828 820 DetectCureTDL3: 1 Curr stack PDEVICE_OBJECT: 8A28DB58

14:36:51:828 820 KLMD_GetLowerDeviceObject: Trying to get lower device object for 8A28DB58

14:36:51:828 820 DetectCureTDL3: 1 Curr stack PDEVICE_OBJECT: 8A1B0D98

14:36:51:828 820 KLMD_GetLowerDeviceObject: Trying to get lower device object for 8A1B0D98

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0x8A1B0D98[0x38]

14:36:51:828 820 DetectCureTDL3: DRIVER_OBJECT addr: 8A1EC670

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0x8A1EC670[0xA8]

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0xE1012170[0x208]

14:36:51:828 820 DetectCureTDL3: DRIVER_OBJECT name: \Driver\atapi, Driver Name: atapi

14:36:51:828 820 DetectCureTDL3: IrpHandler (0) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (1) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (2) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (3) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (4) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (5) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (6) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (7) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler ( addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (9) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (10) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (11) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (12) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (13) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (14) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (15) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (16) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (17) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (18) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (19) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (20) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (21) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (22) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (23) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (24) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (25) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: IrpHandler (26) addr: F74C8B3A

14:36:51:828 820 DetectCureTDL3: All IRP handlers pointed to one addr: F74C8B3A

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0xF74C8B3A[0x400]

14:36:51:828 820 TDL3_IrpHookDetect: TDL3 Stub signature found, trying to get hook true addr

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0xFFDF0308[0x4]

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0x8A1DC0B4[0x4]

14:36:51:828 820 TDL3_IrpHookDetect: New IrpHandler addr: 8A1E28C6

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0x8A1E28C6[0x400]

14:36:51:828 820 TDL3_IrpHookDetect: TDL3 is already cured

14:36:51:828 820 KLMD_ReadMem: Trying to ReadMemory 0xF74C6864[0x400]

14:36:51:828 820 TDL3_StartIoHookDetect: CheckParameters: 0, 0, 316, 0

14:36:51:828 820 TDL3_FileDetect: Processing driver: atapi

14:36:51:828 820 TDL3_FileDetect: Parameters: C:\WINDOWS\system32\drivers\tsk_atapi.sys, C:\WINDOWS\system32\Drivers\tsk_tsk_atapi.sys, SYSTEM\CurrentControlSet\Services\atapi, system32\Drivers\tsk_tsk_atapi.sys

14:36:51:828 820 TDL3_FileDetect: Processing driver file: C:\WINDOWS\system32\drivers\tsk_atapi.sys

14:36:51:828 820 KLMD_CreateFileW: Trying to open file C:\WINDOWS\system32\drivers\tsk_atapi.sys

14:36:51:859 820

Completed

 

Results:

14:36:51:859 820 Infected objects in memory: 0

14:36:51:859 820 Cured objects in memory: 0

14:36:51:859 820 Infected objects on disk: 0

14:36:51:859 820 Objects on disk cured on reboot: 0

14:36:51:859 820 Objects on disk deleted on reboot: 0

14:36:51:859 820 Registry nodes deleted on reboot: 0

14:36:51:859 820

[Gros-Minet]

Voilà, je viens de redémarrer

[Gros-Minet]

Je ne touche à rien, le temps d'avoir ta réponse, Apollo, mais je constate déjà une chose: quand je fais F5, ma page s'actualise rapidement, alors que ça mettait une éternité, juste avant mon dernier redémarrage!

[Apollo]

Je voudrais comme toi que les choses soient aussi simples.

 

As-tu toujours ces redirections quand tu fais une recherche?

 

Le tool de Kaspersky est bon mais parfois insuffisant; ça dépend surtout de la variante on à laquelle on a affaire.

 

Je vais prendre un second avis avant d'aller plus avant.

 

@++

[Gros-Minet]

Je viens de faire une recherche google et tout est impeccable: plus de redirections, résultats instantanés, bref je viens de passer d'un char à boeufs à une Ferrari!!!

[Apollo]

Re,

 

Ben de toutes façons, ton pc est déjà une formule 1 quand je vois la rapidité des analyses; c'est très rare, j'ai vu des analyses MBAM durer 15 heures

 

Il faudra quand-même qu'on s'assure de tout ça avec un scan en ligne; on prendra le plus pointu d'entre eux.

 

Je ne vais donc pas te faire désinstaller les outils tout de suite.

 

Fais ces quelques vérifications (du moins pour les applications que tu as): http://theknitter-apollo.xooit.com/p17644.htm

 

Il est important pour la sécurité que ces appli soient toujours maintenues bien à jour.

 

Après avoir procédé, poste un nouveau log Hijackthis stp.

 

On fera le scan en ligne après.

 

@++

[Gros-Minet]

D'accord, je viens de lire ta réponse, je suis la procédure et je t'envoie le log du hijackthis.

[Gros-Minet]

Voilà, toutes mes versions étaient déjà à jour, j'ai tout vérifié. Je n'ai pas Adobe reader, car je préfère foxit, plus léger. Bon, voici le dernier hijackthis:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:24:21, on 2009-12-20

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Program Files\IDT\232009162153\STacSV.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Program Files\IDT\WDM\sttray.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\WINDOWS\VM303_STI.EXE

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\User\Mes documents\Téléchargements\hijackthis-2.0.2.75917.exe

C:\DOCUME~1\User\LOCALS~1\Temp\hijackthis-2.0.2.75917.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: [sysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [bigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGam...1/GAME_UNO1.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/...can8/oscan8.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1234478802625

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Program Files\IDT\232009162153\STacSV.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

--

End of file - 6884 bytes

[Apollo]

Ok pour Foxit, tant qu'on n'installe pas la sale Ask Toolbar.

 

Relance Hijackthis avec Do a system scan only et coche les cases devant les lignes suivantes: SOUS VISTA: Clic droit sur Hijackthis/exécuter en temps qu'administrateur!

 

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

 

Ferme toutes les applications ouvertes et les navigateurs et clique sur Fix Checked

 

 

Pour désinstaller les outils utilisés:

 

Télécharger ToolsCleaner! de A.Rothstein pour enlever les programmes utilisés pendant la procédure.

http://pc-system.fr/TC/ToolsCleaner2.exe

* Enregistrer ToolsCleaner2.exe sur le Bureau.

Sous Vista,Clic-droit > Exécuter en tant qu' Administrateur

* Double-cliquer dessus, puis cliquer sur Recherche --> Le programme va chercher les utilitaires installés

------> Il se peut que la fenêtre devienne blanche pendant le scan, c'est normal !

* Copier-coller le contenu du rapport qui apparait dans la fenêtre blanche.

 

Lorsque la recherche est terminée ToolsCleaner affiche une liste des différents outils trouvés, cliquez sur "Suppression" afin de les supprimer.

Fermez le programme en cliquant sur "Quitter ".

 

Postez le rapport qui se trouve ici >>> C:\TCleaner.txt

 

Options facultatives

 

A utiliser si vous le souhaitez :

 

Création d'un nouveau point de restauration (conseillé)

Vidage de la corbeille

Nettoyage de vos fichiers temporaires

 

Mettre ToolsCleaner2 à la corbeille.

 

Tout roule?

 

@++

[Gros-Minet]

Ouaip, tout roule nickel!

Je fais ce que tu viens de me demander et je te poste ça