Merci bien!
J'ai un ordi qui marche en anglais, je me suis mis en "debugging mode" pour faire tout ca, j'espere que ca correspond bien au "mode sans echec" francais (je n'avais de toutes facons pas acces au "safe mode" )
Voila mes rapports:
HIJACK THIS --------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 8:09:41 PM, on 8/8/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ACS.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
C:\WINNT\SYSTEM32\DWRCS.EXE
C:\WINNT\system32\svchost.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Network Associates\VirusScan\VsStat.exe
C:\Program Files\Network Associates\VirusScan\Vshwin32.exe
C:\Program Files\Network Associates\VirusScan\Avconsol.exe
C:\Program Files\Network Associates\VirusScan\Webscanx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SYSTEM32\DWRCST.exe
C:\WINNT\system32\igfxtray.exe
C:\WINNT\system32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINNT\AGRSMMSG.exe
C:\Program Files\Atheros\ACU.exe
C:\WINNT\vsnpstd3.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Apoint2K\Apntex.exe
D:\Documents and Settings\aboiteau\Local Settings\Application Data\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\explorer.exe
C:\WINNT\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Documents and Settings\aboiteau\Desktop\Virus PSGuard\Hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = IE6 SP1 Provided by PARKEON
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxyconfig.parkeon.com/proxy.pac
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [snpstd3] C:\WINNT\vsnpstd3.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [Skype] "D:\Documents and Settings\aboiteau\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn. [...] tPkMSN.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activ [...] asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINNT\system32\ACS.exe
O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: McShield - Unknown owner - C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
PANDA --------------------------------------------------
Incident - Virus:W32/Smitfraud.E
Statut - Désinfecté
Analyse - C:\WINNT\system32\wininet.dll
EWIDO -------------------------------------------------
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 7:37:20 PM, 8/8/2005
+ Report-Checksum: D0F27A9C
+ Scan result:
:mozilla.6
:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.7:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.8:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.9:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.20:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
::Report End
----------------------------------------------------------
Dis-moi si ca semble un peu mieux. Merci d'avance!
Bonjour Metro78,
Si tu veux que quelqu'un t'aide, il te faut créer ton propre sujet.
Tu auras plus de chances de réponses,,, 
