Mon pc se connecte tout seul - a internet

Système d'exploitation Microsoft Windows
1

bonjour
petit souci sur mon pc
celui ci se connecte a internet sans que je lui demande quoi que ce soit
y a t il une manip a faire pour le dompter?
merci

2

Bonjour!

Cela se passe t-il au démarrage du PC? Si oui jette un oeil sur les options de conf. de ton fournisseur d’accès (établissement de la connexion au lancement du logiciel de messagerie ou du navigateur si ceux-ci sont lancés au démarrage).

3

Je te redirige vers un forum plus approprié: logiciel/windows/windows xp :wink:

Merci pour ta patience :jap:

4

Salut,

voir aussi ( si tu as Internet Explorer) les paramètres dans “Options Internet”, onglet ‘Connexion’
-> case ‘Ne jamais établir de connexion’ : est-elle cochée?

5

:hello: +1 :wink:
Salut Mike :hello:

6

Et puis, voir le type de connection … :ane:

Moi j’ai le cable, et il se " connecte " automatiquement aussi

Oki

7

hello Alonzo :smiley:

8

rien y fait
les options etaient bien decochées alors j’ai carrement desinstallée la connexion internet adsl pour ne garder que la connexion wanadoo
mais la o demarrage du pc toujours des demandes de connexions et je lui dit de me aparaitre au prochain demarrage g pa le choix c ca ou une connexion
merci quand meme

9

Salut,

Télécharge HijackThis sur hijackthis.de et poste le fichier log ici.

10

voici le log

Logfile of HijackThis v1.99.1
Scan saved at 11:39:32, on 28/09/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\ATKKBService.exe
E:\Program Files\antivir\AVWUPSRV.EXE
E:\WINDOWS\System32\nvsvc32.exe
E:\WINDOWS\psmonsvc.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\ZoneLabs\vsmon.exe
E:\PROGRA~1\Wanadoo\CnxMon.exe
E:\PROGRA~1\MESSAG~2\StartMessager.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\WINDOWS\System32\RUNDLL32.EXE
E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\Program Files\ScanSoft\OmniPageSE\opware32.exe
E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE
E:\WINDOWS\System32\LVCOMSX.EXE
E:\Program Files\Logitech\Video\LogiTray.exe
E:\WINDOWS\SPMSMON.EXE
E:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe
E:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
E:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
E:\Program Files\QuickTime\qttask.exe
E:\Program Files\iTunes\iTunesHelper.exe
E:\Program Files\MessengerPlus! 3\MsgPlus.exe
E:\Program Files\Winamp\winampa.exe
E:\PROGRA~1\Wanadoo\taskbaricon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
E:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
E:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
E:\Program Files\Logitech\Video\FxSvr2.exe
E:\Program Files\iPod\bin\iPodService.exe
E:\WINDOWS\explorer.exe
E:\Program Files\Wanadoo\EspaceWanadoo.exe
E:\Program Files\Wanadoo\ComComp.exe
E:\Program Files\Wanadoo\Watch.exe
E:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\Program Files\HbTools\Bin\4.7.0.0\HbtSrv.exe
E:\WINDOWS\System32\mswin.pif
E:\Documents and Settings\pc\Mes documents\logiciels\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - E:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - E:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.02.3000.1001\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - E:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - E:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - E:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\…\Run: [WooCnxMon] E:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\…\Run: [MessagerStarter Wanadoo] E:\PROGRA~1\MESSAG~2\StartMessager.exe Messager Wanadoo
O4 - HKLM\…\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\…\Run: [NVIDIA nTune] "E:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\…\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\…\Run: [nwiz] nwiz.exe /install
O4 - HKLM\…\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\…\Run: [RemoteControl] "E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\…\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\…\Run: [Omnipage] E:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\…\Run: [EPSON Stylus C86 Series] E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB001" /M "Stylus C86"
O4 - HKLM\…\Run: [LVCOMSX] E:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\…\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\…\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\…\Run: [ChangeICON] E:\WINDOWS\SPMSMON.EXE
O4 - HKLM\…\Run: [msnappau] "E:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\…\Run: [TkBellExe] "E:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\…\Run: [HbTools] E:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
O4 - HKLM\…\Run: [mcimkhhs] E:\WINDOWS\System32\fisldkbd.exe
O4 - HKLM\…\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\…\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\…\Run: [Microsoft Client] mshost.exe
O4 - HKLM\…\Run: [MessengerPlus3] "E:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\…\Run: [WinampAgent] E:\Program Files\Winamp\winampa.exe
O4 - HKLM\…\Run: [WOOWATCH] E:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\…\Run: [WOOTASKBARICON] E:\PROGRA~1\Wanadoo\taskbaricon.exe
O4 - HKLM\…\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\…\Run: [MS Sys Security] mswin.pif
O4 - HKLM\…\RunServices: [Microsoft Client] mshost.exe
O4 - HKLM\…\RunServices: [MS Sys Security] mswin.pif
O4 - HKCU\…\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\\SmartDoctor.exe /start
O4 - HKCU\…\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\…\Run: [Microsoft Client] mshost.exe
O4 - HKCU\…\Run: [PopUpStopperFreeEdition] "E:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\…\Run: [MS Sys Security] mswin.pif
O4 - HKCU\…\RunServices: [Microsoft Client] mshost.exe
O4 - HKCU\…\RunServices: [MS Sys Security] mswin.pif
O4 - Global Startup: DSLMON.lnk = E:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://E:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://E:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://E:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://E:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1114866781466
O16 - DPF: {75D2080B-4857-4B96-9B7D-732634FBD01F} - http://activex.microsoft.com/objects/ocget.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\…\{BBBD3227-4BD4-43CF-9711-2C69E852BB75}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - E:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - E:\WINDOWS\ATKKBService.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - E:\Program Files\antivir\AVWUPSRV.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Performance Adapter Moniter (Performance Adapter) - Unknown owner - E:\WINDOWS\psmonsvc.exe
O23 - Service: SYS MANAGER (system) - Unknown owner - E:\WINDOWS\SYSWIN32.EXE (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

11

Re,

A faire :

  • Démarrer en mode sans échec

  • Désactiver la restauration système : clic droit sur le Poste de travail -> Propriétés -> onglet Restauration système -> cocher Désactiver… -> OK.

  • Aller dans le gestionnaire de services (clic droit sur le Poste de travail -> Gérer -> section Services), double cliquer sur le nom de chacun des services suivants s’ils sont présents -> cliquer sur Arrêter et passer en mode de démarrage Désactivé -> OK :
    Microsoft Client
    MS Sys Security
    Performance Adapter

  • Désinstaller si trouvés dans Panneau de config -> Ajout/Suppr. de programmes :
    Adware.HotBar
    ShopperReports
    MessengerPlus

  • Lancer HijackThis, cocher puis fixer les lignes suivantes :
    O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
    O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - E:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll
    O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - E:\Program Files\HbTools\Bin\4.7.0.0\HbtHostIE.dll
    O4 - HKLM\…\Run: [HbTools] E:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
    O4 - HKLM\…\Run: [mcimkhhs] E:\WINDOWS\System32\fisldkbd.exe
    O4 - HKLM\…\Run: [Microsoft Client] mshost.exe
    O4 - HKLM\…\Run: [MS Sys Security] mswin.pif
    O4 - HKLM\…\RunServices: [Microsoft Client] mshost.exe
    O4 - HKLM\…\RunServices: [MS Sys Security] mswin.pif
    O4 - HKCU\…\Run: [Microsoft Client] mshost.exe
    O4 - HKCU\…\Run: [MS Sys Security] mswin.pif
    O4 - HKCU\…\RunServices: [Microsoft Client] mshost.exe
    O4 - HKCU\…\RunServices: [MS Sys Security] mswin.pif
    O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
    O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
    O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
    O23 - Service: Performance Adapter Moniter (Performance Adapter) - Unknown owner - E:\WINDOWS\psmonsvc.exe
    O23 - Service: SYS MANAGER (system) - Unknown owner - E:\WINDOWS\SYSWIN32.EXE (file missing)
    O4 - HKLM\…\Run: [ChangeICON] E:\WINDOWS\SPMSMON.EXE

  • Afficher tous les fichiers cachés et protégés par le système :
    –> Panneau de config -> Options des dossiers :

  • cocher Afficher les fichiers et dossiers cachés
  • décocher Masquer les fichiers protégés du système d’exploitation
  • décocher Masquer les extensions connues

  • Vérifier et supprimer les dossiers suivants si trouvés :
    E:\Program Files\HbTools
    C:\Program Files\HbTools
    C:\Program Files\ShopperReports
    E:\Program Files\ShopperReports

  • Rechercher et supprimer les fichiers suivants si trouvés :
    E:\WINDOWS\psmonsvc.exe
    E:\WINDOWS\System32\fisldkbd.exe
    E:\Windows\mshost.exe
    C:\Windows\mshost.exe
    E:\Windows\system32\mshost.exe
    C:\Windows\system32\mshost.exe
    E:\Windows\mswin.pif
    C:\Windows\mswin.pif
    E:\Windows\system32\mswin.pif
    C:\Windows\system32\mswin.pif
    E:\WINDOWS\psmonsvc.exe
    E:\WINDOWS\SYSWIN32.EXE
    E:\WINDOWS\SPMSMON.EXE

  • Vider le cache Internet + cookies : Panneau de config -> Options Internet -> onglet Général : Supprimer les cookies + Supprimer les fichiers (cocher les deux cases)

  • Vider le dossier TEMP : Démarrer -> Exécuter -> %TEMP% -> OK -> supprimer tout le contenu.

  • Vider la corbeille.

  • Recacher les fichiers cachés + système

  • Redémarrer.

  • Réinstaller MessengerPlus si tu veux mais décocher tous les adwares/spywares en bonus :fou:

  • Aller sur secuser.com et effectuer un scan antivirus en ligne.

  • Redémarrer, repasser HijackThis et poster le nouveau log.

12

ta manip m’a resolu mon problrme
il me demande plus de me reconnecter en plus il ne m’affiche plus le poste de travail au demarrage
merci bien le boss

sinon le nouvo fichier log

Logfile of HijackThis v1.99.1
Scan saved at 15:17:17, on 28/09/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\logonui.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\ATKKBService.exe
E:\Program Files\antivir\AVWUPSRV.EXE
E:\WINDOWS\System32\nvsvc32.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\ZoneLabs\vsmon.exe
E:\PROGRA~1\Wanadoo\CnxMon.exe
E:\PROGRA~1\MESSAG~2\StartMessager.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\WINDOWS\System32\RUNDLL32.EXE
E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\Program Files\ScanSoft\OmniPageSE\opware32.exe
E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE
E:\WINDOWS\System32\LVCOMSX.EXE
E:\Program Files\Logitech\Video\LogiTray.exe
E:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe
E:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
E:\Program Files\QuickTime\qttask.exe
E:\Program Files\iTunes\iTunesHelper.exe
E:\Program Files\Winamp\winampa.exe
E:\PROGRA~1\Wanadoo\taskbaricon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
E:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
E:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
E:\Program Files\Logitech\Video\FxSvr2.exe
E:\Program Files\iPod\bin\iPodService.exe
E:\Program Files\Wanadoo\EspaceWanadoo.exe
E:\Program Files\Wanadoo\ComComp.exe
E:\Program Files\Wanadoo\Watch.exe
E:\WINDOWS\System32\mswin.pif
E:\Documents and Settings\pc\Mes documents\logiciels\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - E:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.02.3000.1001\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - E:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - E:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\…\Run: [WooCnxMon] E:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\…\Run: [MessagerStarter Wanadoo] E:\PROGRA~1\MESSAG~2\StartMessager.exe Messager Wanadoo
O4 - HKLM\…\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\…\Run: [NVIDIA nTune] "E:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\…\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\…\Run: [nwiz] nwiz.exe /install
O4 - HKLM\…\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\…\Run: [RemoteControl] "E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\…\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\…\Run: [Omnipage] E:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\…\Run: [EPSON Stylus C86 Series] E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB001" /M "Stylus C86"
O4 - HKLM\…\Run: [LVCOMSX] E:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\…\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\…\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\…\Run: [msnappau] "E:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\…\Run: [TkBellExe] "E:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\…\Run: [HbTools] E:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
O4 - HKLM\…\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\…\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\…\Run: [WinampAgent] E:\Program Files\Winamp\winampa.exe
O4 - HKLM\…\Run: [WOOWATCH] E:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\…\Run: [WOOTASKBARICON] E:\PROGRA~1\Wanadoo\taskbaricon.exe
O4 - HKLM\…\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\…\Run: [MS Sys Security] mswin.pif
O4 - HKLM\…\RunServices: [MS Sys Security] mswin.pif
O4 - HKCU\…\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\\SmartDoctor.exe /start
O4 - HKCU\…\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\…\Run: [Microsoft Client] mshost.exe
O4 - HKCU\…\Run: [PopUpStopperFreeEdition] "E:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\…\Run: [MS Sys Security] mswin.pif
O4 - HKCU\…\RunServices: [Microsoft Client] mshost.exe
O4 - HKCU\…\RunServices: [MS Sys Security] mswin.pif
O4 - Global Startup: DSLMON.lnk = E:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://E:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://E:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://E:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://E:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)
O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1114866781466
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {75D2080B-4857-4B96-9B7D-732634FBD01F} - http://activex.microsoft.com/objects/ocget.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\…\{BBBD3227-4BD4-43CF-9711-2C69E852BB75}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - E:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - E:\WINDOWS\ATKKBService.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - E:\Program Files\antivir\AVWUPSRV.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SYS MANAGER (system) - Unknown owner - E:\WINDOWS\SYSWIN32.EXE (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

13

OK. Ca va mieux maintenant. Tu as passé l’analyse de l’antivirus en ligne ? Tu avais un paquet de spywares et cie.

A faire encore :

  • Fixer encore ces lignes dans HijackThis, toujours en sans échec :
    O4 - HKLM\…\Run: [HbTools] E:\Program Files\HbTools\Bin\4.7.0.0\HbtOEAddOn.exe
    O4 - HKLM\…\Run: [MS Sys Security] mswin.pif
    O4 - HKLM\…\RunServices: [MS Sys Security] mswin.pif
    O4 - HKCU\…\Run: [Microsoft Client] mshost.exe
    O4 - HKCU\…\Run: [MS Sys Security] mswin.pif
    O4 - HKCU\…\RunServices: [Microsoft Client] mshost.exe
    O4 - HKCU\…\RunServices: [MS Sys Security] mswin.pif
    O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)
    O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)
    O23 - Service: SYS MANAGER (system) - Unknown owner - E:\WINDOWS\SYSWIN32.EXE (file missing)
  • Télécharger KillBox ici :
    http://www.bleepingcomputer.com/files/spyware/KillBox.zip
    Lancer et cocher la case Delete on reboot.
    Dans la petite fenêtre sous Full path of the file to delete, copier et coller les lignes suivantes :
    E:\Windows\mshost.exe
    C:\Windows\mshost.exe
    E:\Windows\system32\mshost.exe
    C:\Windows\system32\mshost.exe
    E:\Windows\mswin.pif
    C:\Windows\mswin.pif
    E:\Windows\system32\mswin.pif
    C:\Windows\system32\mswin.pif

Cliquer sur la croix blanche sur fond rouge et répondre Oui aux deux messages de confirmation.

  • Supprimer si trouver ces dossiers :
    E:\Program Files\ShopperReports
    E:\Program Files\HbTools
  • Rebooter et poster un nouveau log.
    Il faut songer à mettre ton Windows à jour. Sans les SP et les patchs, ton système est actuellement exposé à de nombreuses failles de sécurité.
14

apparement il est impossible de virer les shopperreports
je fais le fix en sans echec mais rien a faire il ne s’en va pas

Logfile of HijackThis v1.99.1
Scan saved at 17:49:50, on 28/09/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\csrss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\PROGRA~1\Wanadoo\CnxMon.exe
E:\PROGRA~1\MESSAG~2\StartMessager.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\WINDOWS\System32\RUNDLL32.EXE
E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\Program Files\ScanSoft\OmniPageSE\opware32.exe
E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE
E:\WINDOWS\System32\LVCOMSX.EXE
E:\Program Files\Logitech\Video\LogiTray.exe
E:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe
E:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
E:\Program Files\QuickTime\qttask.exe
E:\Program Files\iTunes\iTunesHelper.exe
E:\Program Files\Winamp\winampa.exe
E:\PROGRA~1\Wanadoo\taskbaricon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
E:\WINDOWS\system32\usbn.exe
E:\WINDOWS\etb\pokapoka70.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
E:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
E:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
E:\Program Files\Logitech\Video\FxSvr2.exe
E:\WINDOWS\System32\alg.exe
E:\WINDOWS\ATKKBService.exe
E:\Program Files\antivir\AVWUPSRV.EXE
E:\WINDOWS\System32\nvsvc32.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\wdfmgr.exe
E:\WINDOWS\system32\ZoneLabs\vsmon.exe
E:\Program Files\iPod\bin\iPodService.exe
E:\WINDOWS\System32\wuauclt.exe
E:\Documents and Settings\pc\Mes documents\logiciels\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.eza1netsearch.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.eza1netsearch.com/sp2.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.eza1netsearch.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - E:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\…\Run: [WooCnxMon] E:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\…\Run: [MessagerStarter Wanadoo] E:\PROGRA~1\MESSAG~2\StartMessager.exe Messager Wanadoo
O4 - HKLM\…\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\…\Run: [NVIDIA nTune] "E:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\…\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\…\Run: [nwiz] nwiz.exe /install
O4 - HKLM\…\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\…\Run: [RemoteControl] "E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\…\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\…\Run: [Omnipage] E:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\…\Run: [EPSON Stylus C86 Series] E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB001" /M "Stylus C86"
O4 - HKLM\…\Run: [LVCOMSX] E:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\…\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\…\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\…\Run: [msnappau] "E:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\…\Run: [TkBellExe] "E:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\…\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\…\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\…\Run: [WinampAgent] E:\Program Files\Winamp\winampa.exe
O4 - HKLM\…\Run: [WOOWATCH] E:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\…\Run: [WOOTASKBARICON] E:\PROGRA~1\Wanadoo\taskbaricon.exe
O4 - HKLM\…\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\…\Run: [usbn] E:\WINDOWS\system32\usbn.exe -go -c7 -w10
O4 - HKLM\…\Run: [System service70] E:\WINDOWS\etb\pokapoka70.exe
O4 - HKCU\…\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\\SmartDoctor.exe /start
O4 - HKCU\…\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\…\Run: [Microsoft Client] mshost.exe
O4 - HKCU\…\Run: [PopUpStopperFreeEdition] "E:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\…\Run: [MS Sys Security] mswin.pif
O4 - HKCU\…\RunServices: [Microsoft Client] mshost.exe
O4 - HKCU\…\RunServices: [MS Sys Security] mswin.pif
O4 - Global Startup: DSLMON.lnk = E:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://E:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://E:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://E:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://E:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE14} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)
O9 - Extra button: ShopperReports - Compare product prices - {E77EDA01-3C56-4a96-8D08-02B42891C169} - E:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://awbeta.net-nucleus.com (HKLM)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {33331111-1111-1111-1111-611111193457} - file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} - file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-622221193458} - file://c:\ex.cab
O16 - DPF: {43331111-1111-1111-1111-611111195622} - file://c:\ex.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1127920902607
O16 - DPF: {64311111-1111-1121-1111-111191113457} - file://c:\eied_s7.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {75D2080B-4857-4B96-9B7D-732634FBD01F} - http://activex.microsoft.com/objects/ocget.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse…pdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit…wn.cab31267.cab
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - E:\WINDOWS\System32\vbsys2.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - E:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - E:\WINDOWS\ATKKBService.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - E:\Program Files\antivir\AVWUPSRV.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SYS MANAGER (system) - Unknown owner - E:\WINDOWS\SYSWIN32.EXE (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

15

Hein ? C’est encore pire que tout à l’heure. Tu as plein de trucs bizarres, notamment les O16 ex.cab et R1 eza1netsearch.com.

  • vérifie d’urgence les réglages de ton pare-feu.
  • qu’en est-il de l’antivirus en ligne ?
  • ton antivir est à jour ?
  • tu as désinstallé MessengerPlus ?
16

eux moi auss g une question …:frowning: parce que moi c pareille mais sur un vista ! c pareille que ca marche ?

17

:hello: Ca, c’est ce qu’on appelle une très belle remontée de Topic :clap::clap: aller chercher un sujet de 2005, fallait oser:paf: