Connection trés lente

pmlgeek · le 5 juin 2006

Bonjour,

Je fais appel à vous car la connection et le chargement des pages sur cet ordinateur sont trés lents alors que j'ai un portable branch'é sur la même ligne (club-internet ADSL 8mega) qui est trés rapide.

J'ai déjà fait tous les netoyages, optimisation avec TweakDun mais rien n'y fait.

Si vous pouvez m'aider, ce serait génial!

Voici mon raport;

Logfile of HijackThis v1.99.1

Scan saved at 11:16:16, on 05/06/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\CTsvcCDA.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Club-Internet\Controle Parental\bin\optproxy.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\MsPMSPSv.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe

C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Pierre-Marc.DELLMAISON\Bureau\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/def...://fr.yahoo.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/def...://fr.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O1 - Hosts: 69.28.242.197 www.divxmovies.com

O1 - Hosts: 212.27.63.115 a.vouillon.online.fr

O1 - Hosts: 195.200.118.99 www.gratuiciel.com

O1 - Hosts: 212.27.63.108 frenchw40k.free.fr

O1 - Hosts: 199.107.66.99 fr.games-workshop.com

O1 - Hosts: 207.46.198.60 www.microsoft.com

O1 - Hosts: 195.200.114.145 www.pidf.com

O1 - Hosts: 194.158.126.14 www.impots.gouv.fr

O1 - Hosts: 213.186.45.38 www.kartoo.com

O1 - Hosts: 69.25.212.153 www.lacompagniedumicro.com

O1 - Hosts: 212.27.63.108 forum.windows.free.fr

O1 - Hosts: 80.12.247.1 www.mappy.com

O1 - Hosts: 194.117.217.29 www.meteoconsult.fr

O1 - Hosts: 63.111.24.20 fr.weather.com

O1 - Hosts: 194.98.19.126 www.moviecovers.com

O1 - Hosts: 193.252.242.142 www.pagesjaunes.fr

O1 - Hosts: 194.153.110.160 www.paris.fr

O1 - Hosts: 194.117.219.192 www.debitel.fr

O1 - Hosts: 217.19.52.18 www.reverso.net

O1 - Hosts: 217.117.146.54 www.ville-saint-cloud.fr

O1 - Hosts: 195.200.118.98 www.anshare.com

O1 - Hosts: 212.94.176.153 forum.touslesdrivers.com

O1 - Hosts: 194.158.121.15 www.club-internet.fr

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll

O4 - HKLM\..\Run: [DIAGENT] C:\Program Files\Creative\SBLive\Creative Diagnostics 2.0\DIAGENT.EXE startup

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\Updreg.exe

O4 - HKLM\..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKLM\..\Run: [CJIMETIPSYNC] C:\Program Files\Fichiers communs\Microsoft Shared\IME\IMTC65\ChangJie\CINTLCFG.EXE /CJIMETIPSync

O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Fichiers communs\CMEII\CMESys.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [TweakDUN] C:\Program Files\TweakDUN\tweakdun.exe splash

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"

O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe

O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Handspring\Hotsync.exe

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll

O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtool...ams/hbtools.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{775C7EE3-4FB8-4D74-8046-9491ECAEFE62}: NameServer = 194.117.200.10,194.117.200.15

O17 - HKLM\System\CCS\Services\Tcpip\..\{793F2709-1C93-45C3-8DEC-57EC7ABA1AB4}: NameServer = 194.117.200.10,194.117.200.15

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Contrôle Parental Club Internet (OPTENET_FILTER) - Club Internet - C:\Program Files\Club-Internet\Controle Parental\bin\optproxy.exe

Merci beaucoup.

tornado · le 5 juin 2006

Bojour pmlgeek et bienvenue sur le forum sécu de zeb ,

Ton rapport montre des signes d'infections mais rien de très grave.

Avant toute désinfection "directe", il te faut appliquer la procédure de pré-nettoyage, qui te débarrassera sûrement en partie des infections --> http://forum.zebulon.fr/index.php?showtopic=83986

PS: C'est bien toi qui a établi toutes ces modifs dans le fichier Hosts ? (voir lignes O1)

Modifié le 5 juin 2006 par tornado

pmlgeek · le 5 juin 2006

Bojour pmlgeek et bienvenue sur le forum sécu de zeb ,

Ton rapport montre des signes d'infections mais rien de très grave.

Avant toute désinfection "directe", il te faut appliquer la procédure de pré-nettoyage, qui te débarrassera sûrement en partie des infections --> http://forum.zebulon.fr/index.php?showtopic=83986

PS: C'est bien toi qui a établi toutes ces modifs dans le fichier Hosts ? (voir lignes O1)

Merci de cette réponse et je vais suivre la procedure.

Non ce n'est pas moi qui ai fait toutes ces modif du fichier Host, je ne sais pas comment faire!!! mais cela dit, je reconnais les noms des sites. Que dois-je en faire?

Merci encore

pmlgeek · le 9 juin 2006

Merci de cette réponse et je vais suivre la procedure.

Non ce n'est pas moi qui ai fait toutes ces modif du fichier Host, je ne sais pas comment faire!!! mais cela dit, je reconnais les noms des sites. Que dois-je en faire?

Merci encore

Pourais-je avoir une réponse sur ce que je dois faire de ces fichiers hosts?

Merci

tornado · le 9 juin 2006

Salut pmlgeek,

Pourais-je avoir une réponse sur ce que je dois faire de ces fichiers hosts?

As-tu au moins appliqué la procédure de pré-nettoyage ?

Si oui, tu peux faire ceci pour restaurer ton fichier Hosts :

- Télécharge Zeb-restore à cette adresse => http://telechargement.zebulon.fr/233-zeb-restore.html

- Dézippe l'archive précédement télchargé et ouvre le dossier ZR_1.0.0.37

- Double-clique sur Zeb-Restore.exe afin de lancer le programme

- Coche la case Fichier Hosts

- Clique sur le bouton Restaurer puis redémarre

- Ensuite, poste un nouveau rapport Hijackthis ( Je tiens compte que tu as appliqué la procédure de pré-nettoyage. Si ce n'est pas le cas, fais-le avant d'utiliser Zeb-restore)

A+

pmlgeek · le 10 juin 2006

Salut pmlgeek,

As-tu au moins appliqué la procédure de pré-nettoyage ?

Si oui, tu peux faire ceci pour restaurer ton fichier Hosts :

- Télécharge Zeb-restore à cette adresse => http://telechargement.zebulon.fr/233-zeb-restore.html

- Dézippe l'archive précédement télchargé et ouvre le dossier ZR_1.0.0.37

- Double-clique sur Zeb-Restore.exe afin de lancer le programme

- Coche la case Fichier Hosts

- Clique sur le bouton Restaurer puis redémarre

- Ensuite, poste un nouveau rapport Hijackthis ( Je tiens compte que tu as appliqué la procédure de pré-nettoyage. Si ce n'est pas le cas, fais-le avant d'utiliser Zeb-restore)

A+

Oui j'ai fait la procedure de pré-nettoyage au complet. Antivir m'a trouvé 4 virus que j'ai supprimés et 168 warnings dont je ne sais que faire????? Je n'ai pas encore restauré mon fichier Host et mes pages web sont toujours aussi longues à charger!!! que dois-je faire?

Voici le rapport d'Antivir et celui de HijackThis:

AntiVir PersonalEdition Classic

Report file date: samedi 10 juin 2006 16:01

Scanning for 397237 virus strains and unwanted programs.

Licensed to: AntiVir PersonalEdition Classic

Serial number: 0000149996-WURGE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Username: Pierre-Marc

Computer name: DELLMAISON

Version informations:

AVSCAN.EXE : 7.0.0.42 557096 10/06/2006 13:31:29

AVSCAN.DLL : 7.0.0.42 53288 10/06/2006 13:31:29

LUKE.DLL : 7.0.0.42 118824 10/06/2006 13:31:30

LUKERES.DLL : 7.0.0.42 25640 10/06/2006 13:31:30

ANTIVIR0.VDF : 6.35.0.1 7371264 10/06/2006 13:31:28

ANTIVIR1.VDF : 6.35.0.4 2048 10/06/2006 13:31:28

ANTIVIR2.VDF : 6.35.0.5 2048 10/06/2006 13:31:28

ANTIVIR3.VDF : 6.35.0.6 2048 10/06/2006 13:31:28

AVEWIN32.DLL : 7.1.0.10 1511936 10/06/2006 13:31:28

AVPREF.DLL : 7.0.0.1 49192 10/06/2006 13:31:29

AVREP.DLL : 6.35.0.1 643112 10/06/2006 13:31:29

AVRPBASE.DLL : 7.0.0.0 2162728 10/06/2006 13:31:29

AVPACK32.DLL : 7.1.0.1 335912 10/06/2006 13:31:29

AVREG.DLL : 6.31.0.90 27688 10/06/2006 13:31:29

NETNT.DLL : 6.32.0.0 6696 10/06/2006 13:31:31

NETNW.DLL : 6.32.0.0 9768 10/06/2006 13:31:31

RCIMAGE.DLL : 7.0.0.71 1642536 10/06/2006 13:31:33

RCTEXT.DLL : 7.0.0.75 77864 10/06/2006 13:31:33

Configuration settings for the scan:

Jobname: '%s'.................: Manual Selection

Configuration file............: C:\Documents and Settings\All Users.WINDOWS\Application Data\AntiVir PersonalEdition Classic\PROFILES\folder.avp

Boot sectors..................: C

Scan memory...................: 1

Process scan..................: 1

Scan all files................: 1

Scan archives.................: 1

Recursion depth...............: 20

Smart extensions..............: 1

Skipped archive types.........: 1000,1001,1002,1003,1004,

Macro heuristic...............: 1

File heuristic................: 2

Primary action................: 1

Secondary action..............: 0

Start of the scan: samedi 10 juin 2006 16:01

The scan over running processes will be started

14 Processes was scanned

Start scanning boot sectors:

Boot sector 'C:\'

[NOTE] No virus was found!

Starting to scan the registry.

The registry was scanned ( 32 files ).

Starting the file scan:

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Dr Watson\user.dmp

[WARNING] The file could not be opened!

C:\Documents and Settings\Jean\Local Settings\Application Data\Mozilla\Firefox\Profiles\o7j0njme.default\Cache\3B76AA82d01

[DETECTION] Contains signature of the SPR/Dldr.WinFixer.f program

[iNFO] The file was moved to '44c1d146.qua'!

C:\Documents and Settings\NetworkService.AUTORITE NT\NTUSER.DAT

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService.AUTORITE NT\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\Pierre-Marc.DELLMAISON\NTUSER.DAT

[WARNING] The file could not be opened!

C:\Documents and Settings\Pierre-Marc.DELLMAISON\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\Pierre-Marc.DELLMAISON\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\Pierre-Marc.DELLMAISON\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Program Files\Fichiers communs\nhfphjrh\nnltphnnbt\berjflplp.exe

[DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.AY Backdoor server programs

[iNFO] The file was deleted!

C:\Program Files\Fichiers communs\nhfphjrh\pnttnpbj\jlrhfpfp.exe

[DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.AY Backdoor server programs

[iNFO] The file was deleted!

C:\Program Files\Norton AntiVirus\Quarantine\7CA362EB.tmp

[DETECTION] Contains signature of the worm WORM/NetSky.D.Dam2

[iNFO] The file was deleted!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc1.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc100.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc105.xls

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc106.gif

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc107.gif

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc108.psp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc109.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc110.gif

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc114.pip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc115.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc116.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc117.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc118.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc119.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc12.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc120.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc121.mpp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc122.mpp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc123.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc124.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc125.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc126.mpp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc127.tmp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc128

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc13.psp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc14.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc143.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc146.rtf

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc147.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc148.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc149.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc15.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc150.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc151.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc152.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc153.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc154.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc155.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc156.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc157.tab

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc158.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc159.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc16.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc160.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc161.bmp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc165.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc166.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc167.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc168.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc169.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc17.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc171.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc178.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc18.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc182.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc188.bmp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc19.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc190.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc192.txt

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc193.html

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc194.prc

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc199.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc2.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc20.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc202.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc203.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc21.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc210.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc217.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc218.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc227.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc234.doc

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc237.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc238.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc239.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc241.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc242.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc243.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc245.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc28.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc29.LNK

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc3.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc30.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc31.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc32.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc33.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc330.bak

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc331.dat

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc332.DBA

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc333.dat

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc335.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc34.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc35.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc36.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc37.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc38.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc39.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc4.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc40.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc41.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc42.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc43.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc44.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc45.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc458.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc46.mp3

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc47.m3u

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc48.doc

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc5.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc50.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc54.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc55.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc56.wps

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc58.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc59.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc6.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc60.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc61.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc62.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc63.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc64.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc65.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc66.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc67.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc68.JPG

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc7.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc71.lnk

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc72.pdf

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc74.doc

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc75.pdf

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc78.html

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc8.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc82.html

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc84.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc85.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc89.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc9.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc90.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc91.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc92.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc93.pdf

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc94.exe

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc96.zip

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc98.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-1417818515-1449655655-3289834387-1006\Dc99.url

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-220523388-484763869-725345543-1009\Dc28.bmp

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-220523388-484763869-725345543-1009\Dc29.jpg

[WARNING] The file could not be opened!

C:\RECYCLER\S-1-5-21-220523388-484763869-725345543-1009\Dc30.bmp

[WARNING] The file could not be opened!

C:\System Volume Information\_restore{656EF008-F10E-4865-A0B4-A4D4829B955A}\RP396\A0065355.exe

[DETECTION] Contains signature of the dial-up program DIAL/302273

[iNFO] The file was deleted!

C:\System Volume Information\_restore{656EF008-F10E-4865-A0B4-A4D4829B955A}\RP408\A0066566.exe

[DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.AY Backdoor server programs

[iNFO] The file was deleted!

C:\System Volume Information\_restore{656EF008-F10E-4865-A0B4-A4D4829B955A}\RP408\A0066567.exe

[DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.AY Backdoor server programs

[iNFO] The file was deleted!

C:\WINDOWS\system32\config\default

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\default.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SAM

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SAM.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SECURITY

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SECURITY.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\software

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\software.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\system

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\system.LOG

[WARNING] The file could not be opened!

End of the scan: samedi 10 juin 2006 18:53

Used time: 2:52:13 min

The scan has been done completely.

7333 Scanning directories

380511 Files were scanned

7 viruses and/or unwanted programs was found

6 files were deleted

0 files were repaired

1 files were moved to quarantine

0 files were renamed

3904 Archives were scanned

168 Warnings

1 Notes

__________________________________________________________________

Logfile of HijackThis v1.99.1

Scan saved at 20:42:28, on 10/06/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe

C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\CTsvcCDA.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Club-Internet\Controle Parental\bin\optproxy.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\MsPMSPSv.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\Pierre-

Marc.DELLMAISON\Bureau\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

http://fr.rd.yahoo.com/customize/ycomp/def...://fr.yahoo.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://fr.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://fr.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://fr.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

http://fr.rd.yahoo.com/customize/ycomp/def...://fr.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title =

Internet Explorer avec Club-Internet

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

Liens

O1 - Hosts: 69.28.242.197 www.divxmovies.com

O1 - Hosts: 212.27.63.115 a.vouillon.online.fr

O1 - Hosts: 195.200.118.99 www.gratuiciel.com

O1 - Hosts: 212.27.63.108 frenchw40k.free.fr

O1 - Hosts: 199.107.66.99 fr.games-workshop.com

O1 - Hosts: 207.46.198.60 www.microsoft.com

O1 - Hosts: 195.200.114.145 www.pidf.com

O1 - Hosts: 194.158.126.14 www.impots.gouv.fr

O1 - Hosts: 213.186.45.38 www.kartoo.com

O1 - Hosts: 69.25.212.153 www.lacompagniedumicro.com

O1 - Hosts: 212.27.63.108 forum.windows.free.fr

O1 - Hosts: 80.12.247.1 www.mappy.com

O1 - Hosts: 194.117.217.29 www.meteoconsult.fr

O1 - Hosts: 63.111.24.20 fr.weather.com

O1 - Hosts: 194.98.19.126 www.moviecovers.com

O1 - Hosts: 193.252.242.142 www.pagesjaunes.fr

O1 - Hosts: 194.153.110.160 www.paris.fr

O1 - Hosts: 194.117.219.192 www.debitel.fr

O1 - Hosts: 217.19.52.18 www.reverso.net

O1 - Hosts: 217.117.146.54 www.ville-saint-cloud.fr

O1 - Hosts: 195.200.118.98 www.anshare.com

O1 - Hosts: 212.94.176.153 forum.touslesdrivers.com

O1 - Hosts: 194.158.121.15 www.club-internet.fr

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} -

c:\program files\google\googletoolbar1.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -

c:\program files\google\googletoolbar1.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -

C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll

O4 - HKLM\..\Run: [DIAGENT] C:\Program Files\Creative\SBLive\Creative

Diagnostics 2.0\DIAGENT.EXE startup

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\Updreg.exe

O4 - HKLM\..\Run: [AHQInit] C:\Program

Files\Creative\SBLive\Program\AHQInit.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers

communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [CloneCDTray] "C:\Program

Files\SlySoft\CloneCD\CloneCDTray.exe" /s

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32

\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32

\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKLM\..\Run: [CJIMETIPSYNC] C:\Program Files\Fichiers

communs\Microsoft Shared\IME\IMTC65\ChangJie\CINTLCFG.EXE /CJIMETIPSync

O4 - HKLM\..\Run: [CMESys] "C:\Program Files\Fichiers

communs\CMEII\CMESys.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06

\bin\jusched.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"

-atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers

communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program

Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [TweakDUN] C:\Program Files\TweakDUN\tweakdun.exe splash

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

"C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"

O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Fichiers

communs\DataViz\DvzIncMsgr.exe

O4 - Global Startup: HotSync Manager.lnk = C:\Program

Files\Handspring\Hotsync.exe

O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-

Packard\Digital Imaging\bin\hpobnz08.exe

O4 - Global Startup: hpoddt01.exe.lnk = ?

O8 - Extra context menu item: &Traduire à partir de l'anglais -

res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel -

res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Pages liées - res://c:\program

files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program

files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program

files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans

le cache Google - res://c:\program

files\google\GoogleToolbar1.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-

AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040}

- C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll

O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E

-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E

-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet

Explorer\PLUGINS\nppdf32.dll

O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} -

http://installs.hotbar.com/installs/hbtool...ams/hbtools.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{775C7EE3-4FB8-4D74-8046-

9491ECAEFE62}: NameServer = 194.117.200.10,194.117.200.15

O17 - HKLM\System\CCS\Services\Tcpip\..\{793F2709-1C93-45C3-8DEC-

57EC7ABA1AB4}: NameServer = 194.117.200.10,194.117.200.15

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil

Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program

Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil

Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd

- C:\WINDOWS\System32\CTsvcCDA.EXE

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11

\Intel 32\IDriverT.exe

O23 - Service: iPodService - Apple Computer, Inc. - C:\Program

Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation

- C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Contrôle Parental Club Internet (OPTENET_FILTER) - Club

Internet - C:\Program Files\Club-Internet\Controle

Parental\bin\optproxy.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Merci beaucoup de votre aide.

pmlgeek · le 10 juin 2006

voila, j'ai fait le Zeb-restore, malheureusement l'affichage des pages web est toujours aussi lent alors qu'il est trés rapide sur mon portable branché sur la même ligne!

Voici mon nouveau rapport et merci encore de votre aide:

Logfile of HijackThis v1.99.1

Scan saved at 21:03:56, on 10/06/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe

C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\System32\CTsvcCDA.EXE

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Club-Internet\Controle Parental\bin\optproxy.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\MsPMSPSv.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Internet Explorer\iexplore.exe