A priori non, où sont les rapports ![]()
je te les pose dans 10sec
vundofix :
Listing files found while scanning....
VundoFix V6.3.23
Checking Java version...
Java version is 1.5.0.6
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.9
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.10
Scan started at 13:21:49 20/05/2007
Listing files found while scanning....
VundoFix V6.3.23
Checking Java version...
Java version is 1.5.0.6
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.9
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.10
Scan started at 15:05:25 20/05/2007
Listing files found while scanning....
No infected files were found.
Ok les autres.
Rapport Navipromo.bat 0.73 effectué le 20/05/2007 à 14:59:22,04
Le programme n´est pas lancé en mode sans échec par conséquent les résultats seront probablement faussés
Aucun résultat par la recherche heuristique
-------------
Rapport Navipromo.bat 0.73 effectué le 2007-05-20 à 16:04:28.84
C:\Documents and Settings\Kaiser\Bureau
-- Le programme n´est pas lancé en mode sans échec par conséquent les résultats seront probablement faussés
Fin du rapport de recherche
Adware Navipromo non trouvé avec cette méthode
Engagement de la méthode Heuristique
Rapport Navipromo.bat 0.73 effectué le 2007-05-20 à 16:04:29.18
Le programme n´est pas lancé en mode sans échec par conséquent les résultats seront probablement faussés
Aucun résultat par la recherche heuristique
combofix je trouve pas
Ah si voila
"Kaiser" - 2007-05-20 16:05:45 Service Pack 2
ComboFix 07-05.20.9.V - Running from: "C:\Documents and Settings\Kaiser\Bureau\"
((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-20 ))))))))))))))))))))))))))))))))))
2007-05-20
15:01 <REP> d-------- C:\WINDOWS\system32\bfubacku
ps
2007-05-20 11:19 <REP> d-------- C:\VundoFix Backups
2007-05-20 01:13 <REP> d--h----- C:\Program Files\Zero G Registry
2007-05-20 01:00 <REP> d-------- C:\Navipromo
2007-05-18
21:09 786,432 --ah----- C:\DOCUME~1\ADMINI~1.001\n
tuser.dat
2007-05-18
21:09 <REP> dr------- C:\DOCUME~1\ADMINI~1.001\Mes
documents
2007-05-18
21:09 <REP> dr------- C:\DOCUME~1\ADMINI~1.001\Men
u D‚marrer
2007-05-18
21:09 <REP> dr------- C:\DOCUME~1\ADMINI~1.001\Fav
oris
2007-05-18
21:09 <REP> d--h----- C:\DOCUME~1\ADMINI~1.001\Voi
sinage r‚seau
2007-05-18
21:09 <REP> d--h----- C:\DOCUME~1\ADMINI~1.001\Voi
sinage d´impression
2007-05-18
21:09 <REP> d--h----- C:\DOCUME~1\ADMINI~1.001\Mod
Šles
2007-05-18
21:09 <REP> d-------- C:\DOCUME~1\ADMINI~1.001\Bur
eau
2007-05-18 20:09 <REP> d-------- C:\BFU
2007-05-18 18:15 <REP> d-------- C:\328af57b8f9e2280d6f7c2
2007-05-18 07:53 1,641 --a------ C:\WINDOWS\609x.exe
2007-05-17
13:26 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~
1\Nero
2007-05-13 23:55 25,413 --a------ C:\WINDOWS\449x.exe
2007-05-13 20:07 <REP> d-------- C:\Program Files\Labtec
2007-04-21
00:41 786,432 --ah----- C:\DOCUME~1\ADMINI~1.000\N
TUSER.DAT
2007-04-21
00:41 <REP> dr------- C:\DOCUME~1\ADMINI~1.000\Mes
documents
2007-04-21
00:41 <REP> dr------- C:\DOCUME~1\ADMINI~1.000\Men
u D‚marrer
2007-04-21
00:41 <REP> dr------- C:\DOCUME~1\ADMINI~1.000\Fav
oris
2007-04-21
00:41 <REP> d--h----- C:\DOCUME~1\ADMINI~1.000\Voi
sinage r‚seau
2007-04-21
00:41 <REP> d--h----- C:\DOCUME~1\ADMINI~1.000\Voi
sinage d´impression
2007-04-21
00:41 <REP> d--h----- C:\DOCUME~1\ADMINI~1.000\Mod
Šles
2007-04-21
00:41 <REP> d-------- C:\DOCUME~1\ADMINI~1.000\Bur
eau
2007-04-21
00:18 786,432 --ah----- C:\DOCUME~1\ADMINI~1.RAN\N
TUSER.DAT
2007-04-21
00:18 <REP> dr------- C:\DOCUME~1\ADMINI~1.RAN\Mes
documents
2007-04-21
00:18 <REP> dr------- C:\DOCUME~1\ADMINI~1.RAN\Men
u D‚marrer
2007-04-21
00:18 <REP> dr------- C:\DOCUME~1\ADMINI~1.RAN\Fav
oris
2007-04-21
00:18 <REP> d--h----- C:\DOCUME~1\ADMINI~1.RAN\Voi
sinage r‚seau
2007-04-21
00:18 <REP> d--h----- C:\DOCUME~1\ADMINI~1.RAN\Voi
sinage d´impression
2007-04-21
00:18 <REP> d--h----- C:\DOCUME~1\ADMINI~1.RAN\Mod
Šles
2007-04-21
00:18 <REP> d-------- C:\DOCUME~1\ADMINI~1.RAN\Bur
eau
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report
))))))))))))))))))))))))))))))))))))))))))))))))))
)))
2007-05-20 11:14:25 -------- d-----w C:\Program Files\Spyware Doctor
2007-05-19 19:51:41 -------- d-----w C:\Program Files\TVUPlayer
2007-05-18 17:16:57 -------- d-----w C:\Program Files\AskTBar
2007-05-17 11:27:50 -------- d-----w C:\Program Files\Fichiers communs\Ahead
2007-05-02
12:15:59 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\Azureus
2007-04-30 20:12:59 -------- d-----w C:\Program Files\Yu-Gi-Oh Virtual Battle 5
2007-04-29
22:27:58 83,536 ----a-w C:\WINDOWS\system32\driver
s\iksyssec.sys
2007-04-29
22:27:57 59,984 ----a-w C:\WINDOWS\system32\driver
s\iksysflt.sys
2007-04-29
22:27:52 26,064 ----a-w C:\WINDOWS\system32\driver
s\kcom.sys
2007-04-29
22:27:51 52,304 ----a-w C:\WINDOWS\system32\driver
s\ikfilesec.sys
2007-04-29
22:27:50 39,248 ----a-w C:\WINDOWS\system32\driver
s\ikfileflt.sys
2007-04-29
15:21:50 84,072 ----a-w C:\WINDOWS\system32\perfc0
0C.dat
2007-04-29
15:21:50 507,626 ----a-w C:\WINDOWS\system32\perfh
00C.dat
2007-04-29 14:59:34 -------- d-----w C:\Program Files\MadCoder
2007-04-29
10:40:01 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\CyberLink
2007-04-28 22:10:16 -------- d-----w C:\Program Files\CyberLink
2007-04-28 22:10:04 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-04-24 22:31:33 -------- d-----w C:\Program Files\webcamXP
2007-04-21 18:23:29 -------- d-----w C:\Program Files\EA GAMES
2007-04-20 01:07:24 -------- d-----w C:\Program Files\WinISO
2007-04-18 16:16:54 -------- d-----w C:\Program Files\Windows Media Connect 2
2007-04-16
12:20:58 79 ----a-w C:\WINDOWS\system32\netwbix32.
dll
2007-04-14 18:50:15 -------- d-----w C:\Program Files\THQ
2007-04-13
16:22:20 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\PC Tools
2007-04-11 18:18:59 -------- d-----w C:\Program Files\Common Files
2007-04-11 18:18:58 -------- d-----w C:\Program Files\Yahoo!
2007-04-11 02:03:00 -------- d-----w C:\Program Files\SWiSH v2.01 FRA
2007-04-08 22:09:32 -------- d-----w C:\Program Files\Azureus
2007-04-08 18:28:45 -------- d-----w C:\Program Files\Fichiers communs\MAGIX Shared
2007-04-08 15:28:24 -------- d-----w C:\Program Files\Fake Webcam
2007-04-05 20:52:20 -------- d-----w C:\Program Files\GameSpy Arcade
2007-04-02
11:42:02 108,144 ----a-w C:\WINDOWS\system32\CmdLi
neExt.dll
2007-04-02
11:42:02 -------- d--h--r C:\DOCUME~1\Kaiser\APPLI
C~1\SecuROM
2007-04-02 11:20:42 -------- d-----w C:\Program Files\Atari
2007-03-28 19:46:33 -------- d-----w C:\Program Files\BitTorrent
2007-03-28
18:00:55 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\Screenshot Sender
2007-03-28
07:43:35 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\BitTorrent
2007-03-27 20:03:26 -------- d-----w C:\Program Files\DivX
2007-03-20 23:10:45 -------- d-----w C:\Program Files\Messenger Plus! Live
2007-03-17
13:44:47 293,376 ----a-w C:\WINDOWS\system32\winsr
v.dll
2007-03-14 17:27:58 972,336 ----a-w C:\WINDOWS\UNRecode.exe
2007-03-14
17:20:38 133,168 ----a-w C:\WINDOWS\system32\drive
rs\imagesrv.sys
2007-03-14
17:20:36 11,568 ----a-w C:\WINDOWS\system32\driver
s\imagedrv.sys
2007-03-14
17:19:56 95,864 ----a-w C:\WINDOWS\system32\NeroCo
.dll
2007-03-14
17:19:26 972,336 ----a-w C:\WINDOWS\UNNeroBackItUp
.exe
2007-03-14
16:05:47 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\vlc
2007-03-14 15:49:37 -------- d-----w C:\Program Files\adslTV
2007-03-14 14:10:16 -------- d-----w C:\Program Files\iWin
2007-03-12
11:51:08 972,336 ----a-w C:\WINDOWS\UNNeroMediaHom
e.exe
2007-03-10
10:58:34 -------- d-----w C:\DOCUME~1\Kaiser\APPLI
C~1\ATI
2007-03-08
15:37:50 578,560 ----a-w C:\WINDOWS\system32\user3
2.dll
2007-03-08
15:37:50 40,960 ----a-w C:\WINDOWS\system32\mf3216
.dll
2007-03-08
15:37:50 281,600 ----a-w C:\WINDOWS\system32\gdi32
.dll
2007-03-08
15:33:58 1,843,712 ----a-w C:\WINDOWS\system32\win
32k.sys
2007-02-28
18:53:50 972,336 ----a-w C:\WINDOWS\UNNeroVision.e
xe
2007-02-28
13:41:02 972,336 ----a-w C:\WINDOWS\UNNeroShowTime
.exe
2007-02-23
04:29:58 524,288 ----a-w C:\WINDOWS\system32\DivXs
m.exe
2007-02-23
04:29:56 3,596,288 ----a-w C:\WINDOWS\system32\qt-
dx331.dll
2007-02-23
04:29:49 200,704 ----a-w C:\WINDOWS\system32\ssldi
vx.dll
2007-02-23
04:29:49 1,044,480 ----a-w C:\WINDOWS\system32\lib
divx.dll
2007-02-23
04:25:24 73,728 ----a-w C:\WINDOWS\system32\dpl100
.dll
2007-02-23
04:25:24 196,608 ----a-w C:\WINDOWS\system32\dtu10
0.dll
2007-02-23
04:25:23 53,248 ----a-w C:\WINDOWS\system32\dpuGUI
10.dll
2007-02-23
04:25:22 593,920 ----a-w C:\WINDOWS\system32\dpuGU
I11.dll
2007-02-23
04:25:22 57,344 ----a-w C:\WINDOWS\system32\dpv11.
dll
2007-02-23
04:25:22 344,064 ----a-w C:\WINDOWS\system32\dpus1
1.dll
2007-02-23
04:25:22 294,912 ----a-w C:\WINDOWS\system32\dpu11
.dll
2007-02-23
04:25:22 294,912 ----a-w C:\WINDOWS\system32\dpu10
.dll
2007-02-23
04:25:19 823,296 ----a-w C:\WINDOWS\system32\divx_
xx0c.dll
2007-02-23
04:25:19 823,296 ----a-w C:\WINDOWS\system32\divx_
xx07.dll
2007-02-23
04:25:19 802,816 ----a-w C:\WINDOWS\system32\divx_
xx11.dll
2007-02-23
04:25:19 639,066 ----a-w C:\WINDOWS\system32\DivX.
dll
2007-02-16
01:40:35 124,472 ----a-w C:\WINDOWS\system32\DivXC
odecUpdateChecker.exe
2007-02-05
20:19:06 185,344 ----a-w C:\WINDOWS\system32\upnph
ost.dll
dsl mais c vraiment trop long comem rapport
Rofl, et en plus tu n´as même pas lancé navipromo en mode sans échec ><
Reposte un log Hijackthis s´il te plait.
Logfile of HijackThis v1.99.1
Scan saved at 16:22:22, on 20/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Kaiser\Mes documents\scanner.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: (no name) - {F8208964-6E67-4470-AAA8-0DA7583F1B40} - (no file)
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [{1290A33C-85F5-4164-A1BE-7DD299D4986A}] "C:\Program Files\CyberLink\PowerBackup\PBKScheduler.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SDTray] C:\Program Files\Spyware Doctor\SDTrayApp.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra ´Tools´ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=
http://www.01net.com/telecharger/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
Relance Hijackthis et coche les lignes ci dessous :
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {F8208964-6E67-4470-AAA8-0DA7583F1B40} - (no file)
Ferme toutes les fenêtres sauf Hijackthis et clique sur "Fix Checked".
Télécharge et installe CleanUp!
http://www.stevengould.org/downloads/cleanup/CleanUp40.exe
- Lance CleanUp!
- Clique sur le bouton Option.
- Dans Quick Setup, vérifie que la flèche soit en face de Standard CleanUp! Si ce n´est pas le cas, fais le.
- Décoche la case située devant Enable sounds.
- Clique sur OK.
- Clique sur le bouton CleanUp!
- Lorsque le message "Initial CleanUp! done. Now restart Windows to complete CleanUp!" apparaît, clique sur le bouton Close.
- Enfin, à la fenêtre de redémarrage, clique sur Oui.
Télécharge AVG anti-spyware et installe le :
http://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/31851.html
Tuto:
http://www.malekal.com/tum/tutorial_AVG_AntiSpyware.php
- Redémarre en mode sans échec.
- Ensuite lance AVG et clique sur « Analyse » puis sur le sous-onglet Paramètres
- Dans Comment Réagir ? Choisis Quarantaine.
- Reviens au sous-onglet Analyser puis clique sur Analyse complète du système.
- le scan démarre.
Quand le scan touche à sa fin, clique sur Appliquer toutes les actions, les éléments sont alors déplacé en quarantaine.
Enfin, clique sur Enregistrer le rapport d´analyse, enregistre le sur le bureau et poste le ici.
Encore des soucis ??
++ ![]()