Salut à tous !!
merci r@in | b0w pour cette méthode de présentation de mon message !! effectivement, et mille excuses, les photos ne ressemblaient à rien !!!
Voici donc les nouveau lien :
Pour le rapport de HiJackThis, voila :
Logfile of HijackThis v1.99.1
Scan saved at 20:41:52, on 21/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesLogitechGamePanel SoftwareLCD ManagerLCDMon.exe
C:Program FilesLogitechGamePanel SoftwareG-series SoftwareLGDCore.exe
C:Program Filesone LabsoneAlarmzlclient.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSuperCopier2SuperCopier2.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Program FilesChangeur de fond d'écranDataCFE TrayIcon.exe
C:Program FilesLogitechGamePanel SoftwareLCD ManagerAppletsLCDClock.exe
C:Program FilesLogitechGamePanel SoftwareLCD ManagerAppletsLCDPop3.exe
C:Program FilesLogitechGamePanel SoftwareLCD ManagerAppletsLCDMedia.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:WINDOWSsystem32
vsvc32.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32oneLabsvsmon.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:PROGRA~1ONELA~1ONEAL~1MAILFR~1mantispm.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSSystem32alg.exe
C:Program FilesKiwee Toolbar21.5.131kwtbaim.exe
C:Program FilesWindows LiveMessengerusnsvc.exe
C:PROGRA~1Mozilla Firefoxfirefox.exe
C:WINDOWSsystem32
otepad.exe
K:logicielsReinstallation-juil2007HijackThis.exe
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext =
http://update.zonelabs.com/checkupdatew ... 31-3301&...
...SerialNumber=j5hvqhisiu3s4he7bhx644bu4g0&License=1&Language=FR&Query=Manual&OEM=3301 (obfuscated)
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:Program FilesKiwee Toolbar21.5.131KiweeIEToolbar.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:Program FilesBitComet oolsBitCometBHO_1.2.2.28.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:Program FilesKiwee Toolbar21.5.131KiweeIEToolbar.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:Program FilesKiwee Toolbar21.5.131KiweeIEToolbar.dll
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [Launch LCDMon] "C:Program FilesLogitechGamePanel SoftwareLCD ManagerLCDMon.exe"
O4 - HKLM..Run: [Launch LGDCore] "C:Program FilesLogitechGamePanel SoftwareG-series SoftwareLGDCore.exe" /SHOWHIDE
O4 - HKLM..Run: [ZoneAlarm Client] "C:Program Filesone LabsoneAlarmzlclient.exe"
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [LogitechCommunicationsManager] "C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe"
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [SuperCopier2.exe] C:Program FilesSuperCopier2SuperCopier2.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - Startup: CFE TrayIcon.lnk = ?
O4 - Startup: CFE.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet -
res://C:Program FilesBitCometBitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet -
res://C:Program FilesBitCometBitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet -
res://C:Program FilesBitCometBitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:Program FilesShoppingReportBin2.5.0ShoppingReport.dll (file missing)
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:Program FilesShoppingReportBin2.5.0ShoppingReport.dll (file missing)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} -
res://C:Program FilesBitComet oolsBitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: CabBuilder -
http://kiw.imgag.com/imgag/kiw/toolbar/ ... ontrol.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microso ... 7474709140
O17 - HKLMSystemCCSServicesTcpip..{CCE58C42-387B-481F-A0D9-F3A360042DF3}: NameServer = 212.27.53.252,212.27.54.252
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1WINDOW~4MESSEN~1MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:Program FilesFichiers communsMicrosoft SharedHelphxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1WINDOW~4MESSEN~1MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1FICHIE~1SkypeSKYPE4~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:Program FilesWindows LiveMailmailcomm.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:PROGRA~1FICHIE~1MICROS~1OFFICE12MSOXMLMF.DLL
O20 - Winlogon Notify: LBTWlgn - c:program filesfichiers communslogishrdluetoothLBTWlgn.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:Program FilesFichiers communsLogiShrdBluetoothLBTServ.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:Program FilesFichiers communsLogiShrdSrvLnchSrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:WINDOWSsystem32PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:WINDOWSsystem32oneLabsvsmon.exe
Voici le rapport de startuplist :
StartupList report, 21/05/2008, 20:50:20
StartupList version: 1.52.2
Started from : K:logicielsReinstallation-juil2007HijackThis.EXE
Detected: Windows XP SP3 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.16640)
* Using default options
==================================================
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:Program FilesLogitechGamePanel SoftwareLCD ManagerLCDMon.exe
C:Program FilesLogitechGamePanel SoftwareG-series SoftwareLGDCore.exe
C:Program Filesone LabsoneAlarmzlclient.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSuperCopier2SuperCopier2.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Program FilesChangeur de fond d'écranDataCFE TrayIcon.exe
C:Program FilesLogitechGamePanel SoftwareLCD ManagerAppletsLCDClock.exe
C:Program FilesLogitechGamePanel SoftwareLCD ManagerAppletsLCDPop3.exe
C:Program FilesLogitechGamePanel SoftwareLCD ManagerAppletsLCDMedia.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:WINDOWSsystem32
vsvc32.exe
C:WINDOWSsystem32PnkBstrA.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32oneLabsvsmon.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:PROGRA~1ONELA~1ONEAL~1MAILFR~1mantispm.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSSystem32alg.exe
C:Program FilesKiwee Toolbar21.5.131kwtbaim.exe
C:Program FilesWindows LiveMessengerusnsvc.exe
C:PROGRA~1Mozilla Firefoxfirefox.exe
K:logicielsReinstallation-juil2007HijackThis.exe
--------------------------------------------------
Listing of startup folders:
Shell folders Startup:
[C:Documents and SettingsDespwellMenu DémarrerProgrammesDémarrage]
CFE TrayIcon.lnk = ?
CFE.lnk = ?
--------------------------------------------------
Checking Windows NT UserInit:
[HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon]
UserInit = C:WINDOWSsystem32userinit.exe,
--------------------------------------------------
Autorun entries from Registry:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
avast! = C:PROGRA~1ALWILS~1Avast4ashDisp.exe
NvCplDaemon = RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
nwiz = nwiz.exe /install
NvMediaCenter = RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
Launch LCDMon = "C:Program FilesLogitechGamePanel SoftwareLCD ManagerLCDMon.exe"
Launch LGDCore = "C:Program FilesLogitechGamePanel SoftwareG-series SoftwareLGDCore.exe" /SHOWHIDE
ZoneAlarm Client = "C:Program Filesone LabsoneAlarmzlclient.exe"
SoundMan = SOUNDMAN.EXE
LogitechCommunicationsManager = "C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe"
--------------------------------------------------
Autorun entries from Registry:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
CTFMON.EXE = C:WINDOWSsystem32ctfmon.exe
SuperCopier2.exe = C:Program FilesSuperCopier2SuperCopier2.exe
SpybotSD TeaTimer = C:Program FilesSpybot - Search & DestroyTeaTimer.exe
--------------------------------------------------
Autorun entries in Registry subkeys of:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
[OptionalComponents]
=
--------------------------------------------------
Shell & screensaver key from C:WINDOWSSYSTEM.INI:
Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*
Shell & screensaver key from Registry:
Shell=Explorer.exe
SCRNSAVE.EXE=C:WINDOWSSystem32logon.scr
drivers=*Registry value not found*
Policies Shell key:
HKCU..Policies: Shell=*Registry key not found*
HKLM..Policies: Shell=*Registry value not found*
--------------------------------------------------
Enumerating Browser Helper Objects:
(no name) - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
Skype add-on (mastermind) - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll - {22BF413B-C6D2-4d91-82A9-A0F997BA588C}
BitComet ClickCapture - C:Program FilesBitComet oolsBitCometBHO_1.2.2.28.dll - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}
(no name) - C:PROGRA~1SPYBOT~1SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:Program FilesKiwee Toolbar21.5.131KiweeIEToolbar.dll - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F}
(no name) - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
--------------------------------------------------
Enumerating Download Program Files:
[MUWebControl Class]
InProcServer32 = C:WINDOWSsystem32muweb.dll
CODEBASE =
http://www.update.microsoft.com/microso ... 7474709140
--------------------------------------------------
Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*
Windows NT checkdisk command:
BootExecute = autocheck autochk *
Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:DOCUME~1DespwellLOCALS~1Temp
ss48.tmpBcNsisHelper.dll||C:DOCUME~1DespwellLOCALS~1
Temp
ss48.tmpgtapi.dll||C:DOCUME~1DespwellLOCALS~1Temp
ss48.tmp||C:DOCUME~1DespwellLOCALS~1
Temp
sk55.tmpSystem.dll||C:DOCUME~1DespwellLOCALS~1Temp
sk55.tmp||C:DOCUME~1DespwellLOCALS~1
Temp
sy53.tmpDivXComponent.exe||C:DOCUME~1DespwellLOCALS~1Temp
sy53.tmpDivXResourceHelper.dll||C:DOCUME~1
DespwellLOCALS~1Temp
sy53.tmpdlqParser.dll||C:DOCUME~1DespwellLOCALS~1Temp
sy53.tmpSystem.dll||C:DOCUME~1
DespwellLOCALS~1Temp
sy53.tmp
--------------------------------------------------
Enumerating ShellServiceObjectDelayLoad items:
PostBootReminder: C:WINDOWSsystem32SHELL32.dll
CDBurn: C:WINDOWSsystem32SHELL32.dll
WebCheck: C:WINDOWSsystem32webcheck.dll
SysTray: C:WINDOWSsystem32stobject.dll
WPDShServiceObj: C:WINDOWSsystem32WPDShServiceObj.dll
--------------------------------------------------
End of report, 7 542 bytes
Report generated in 0,063 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
Pour le nettoyage, je le fait régulièrement !!!!!
merci à vous tous !!
NB : le pc se bloque cquelque foix et je ne peu plus rien en faire sauf le redemmarrer, es la même chose ?? merci