Bonjour,
Le pb d'accent est survenu récemment la semaine dernière. J'ai évoqué les malwares en cas de programmes dormants. Par contre je n'ai pas vérifié comment les malwares ont été nettoyés. Toujours est-il que je n'ai jamais pu installer mon scanner neuf HP G3010 (il fonctionne sur mon ordi portable). Cela fait deux mois que je rame sur les forums, dont celui là pour éliminer ce pb. J'ai déjà téléchargé Hijack. Je vous envoie le rapport. Personnellement je ne vois rien d'anormal mais je ne suis pas informaticien sauf ".O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup"
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:50:00, on 02/06/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1ANTIVI~1ackweb6588780ProgramSERVIC~1.EXE
C:Program FilesAntivirusFirewallAnti-Virusfsgk32st.exe
C:Program FilesAntivirusFirewallAnti-VirusFSGK32.EXE
C:Program FilesAntivirusFirewallackweb6588780programfsbwsys.exe
C:Program FilesAntivirusFirewallAnti-Virusfssm32.exe
C:Program FilesAntivirusFirewallCommonFSMA32.EXE
C:Program FilesFichiers communsMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesAntivirusFirewallCommonFSMB32.EXE
C:WINDOWSsystem32
vsvc32.exe
C:Program FilesAntivirusFirewallackweb6588780Programfspex.exe
C:Program FilesAntivirusFirewallCommonFCH32.EXE
C:Program FilesAntivirusFirewallAnti-Virusfsqh.exe
C:Program FilesAntivirusFirewallCommonFAMEH32.EXE
C:Program FilesAntivirusFirewallAnti-Virusfsrw.exe
C:Program FilesAntivirusFirewallFWESProgramfsdfwd.exe
C:Program FilesAntivirusFirewallAnti-Virusfsav32.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesAntivirusFirewallCommonFSM32.EXE
C:Program FilesAntivirusFirewallFSGUIispnews.exe
C:Program FilesJavajre1.6.0_05injusched.exe
C:Program FilesAdobeDistillrAcrotray.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesFichiers communsAheadLibNMBgMonitor.exe
C:PROGRA~1MI3AA1~1wcescomm.exe
C:PROGRA~1ANTIVI~1ANTI-S~1fsaw.exe
C:Program FilesHarrap's MultimédiaShorterinHiHarrapsTray.exe
C:PROGRA~1MI3AA1~1
apimgr.exe
C:Program FilesFichiers communsAheadLibNMIndexingService.exe
C:Program FilesAntivirusFirewallFSGUIfsguidll.exe
C:Program FilesTrendnetUSBKVM SwitcherUSBKVM.exe
C:Program FilesWinZipWZQKPICK.EXE
C:Program FilesFichiers communsAheadLibNMIndexStoreSvr.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesOutlook Expressmsimn.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesTrend MicroHijackThisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://www.orange.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL =
http://fr.yahoo.com
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://fr.yahoo.com
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:Program FilesIEProiepro.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeActiveXAcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_05inssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:Program FilesAdobeAcrobatAcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier2.0.301.7164swg.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:Program FilesCopernic AgentCopernicAgentExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: Systran40premi.IEPlugIn - {D3919E1A-D6A5-11D6-AC3E-00B0D094B576} - C:Program FilesSystran4_0PremiumIEPlugIn.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:Program FilesAdobeAcrobatAcroIEFavClient.dll
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [JMB36X IDE Setup] C:WINDOWSJMJMInsIDE.exe
O4 - HKLM..Run: [36X Raid Configurer] C:WINDOWSsystem32JMRaidSetup.exe boot
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [F-Secure Manager] "C:Program FilesAntivirusFirewallCommonFSM32.EXE" /splash
O4 - HKLM..Run: [F-Secure TNB] "C:Program FilesAntivirusFirewallTNBTNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM..Run: [F-Secure Startup Wizard] "C:Program FilesAntivirusFirewallFSGUIFSSW.EXE" /reboot
O4 - HKLM..Run: [News Service] "C:Program FilesAntivirusFirewallFSGUIispnews.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_05injusched.exe"
O4 - HKLM..Run: [Acrobat Assistant 7.0] "C:Program FilesAdobeDistillrAcrotray.exe"
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesFichiers communsAheadLibNMBgMonitor.exe"
O4 - HKCU..Run: [H/PC Connection Agent] "C:PROGRA~1MI3AA1~1wcescomm.exe"
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Global Startup: Antivirus Firewall.lnk = C:Program FilesAntivirusFirewallackweb6588780Programfspex.exe
O4 - Global Startup: Ask Harrap's Shorter.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O4 - Global Startup: USBKVM Switcher.lnk = C:Program FilesTrendnetUSBKVM SwitcherUSBKVM.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:Program FilesWinZipWZQKPICK.EXE
O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:Program FilesAntivirusFirewallAnti-Spywarelockpopups.htm
O8 - Extra context menu item: Convertir en Adobe PDF -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant -
res://C:Program FilesAdobeAcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program FilesIEProiepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:Program FilesIEProiepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05inssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:PROGRA~1COPERN~1COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:PROGRA~1COPERN~1COPERN~1.EXE
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:PROGRA~1MI3AA1~1INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:PROGRA~1MI3AA1~1INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:PROGRA~1MI3AA1~1INetRepl.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:Program FilesAntivirusFirewallAnti-Spywareieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:Program FilesAntivirusFirewallAnti-Spywareieshield.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:PROGRA~1COPERN~1COPERN~1.EXE
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O15 - Trusted Zone:
http://www.secuser.com
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) -
http://catalog.update.microsoft.com/v7/ ... 7729639781
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} -
http://h20270.www2.hp.com/ediags/gmn2/i ... ection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microso ... 7154011109
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) -
https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai.net/7/840/537/2005 ... scan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:PROGRA~1ANTIVI~1ackweb6588780ProgramSERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:Program FilesAntivirusFirewallAnti-Virusfsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:Program FilesAntivirusFirewallackweb6588780programfsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:Program FilesAntivirusFirewallFWESProgramfsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:Program FilesAntivirusFirewallCommonFSMA32.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:Program Filesma-config.commaconfservice.exe
O23 - Service: NBService - Nero AG - C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesFichiers communsAheadLibNMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
--
End of file - 12080 bytes
Pour la touche shift, elle fonctionne normalement. Par contre merci de m'indiquer comment on accède aux fonctions rémanentes.