Pb de changements de pages internet intempestifs

bonjour

1/Télécharge L2Mfix la[/url] ou
la

Mets-le sur ton bureau.
Double-clic sur l2mfix.exe
A la 1ère question clic sur Accept, ensuite clic sur Install

2/Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 1 puis Entrée
Poste ce 1er rapport.

3/ Ensuite ferme tous les programmes parce qu'il va y avoir reboot automatique
Ouvre le dossier l2mfix créé sur le bureau puis double-clic sur L2Mfix.bat
Ensuite choisis l'option 2 puis Entrée
Puis appuie sur n'importe quelle touche pour redémarrer l'ordinateur
Après redémarrage, le bureau et les icônes vont apparaître puis disparaître, c'est normal ! Et un nouveau rapport va apparaître à l'écran.
>> Si après redémarrage les icônes n'apparaissent/disparaissent pas ou si le rapport n'apparaît pas, alors ouvre le dossier l2mfix et lance second.bat


Ainsi que LSPfix
- télécharger LSPfix et éventuellement le dézipper sur le bureau
- lancer LSPfix et se mettre en plein écran pour voir tous les boutons et ascenseurs - fermer Internet Explorer et arrêter la connexion à Internet - cocher la case "I know what I'm doing" (je sais ce que je fais)
- dans la colonne de gauche, sélectionner toutes les instances des fichiers à éliminer
- cliquer sur la flèche vers la droite pour les ajouter (de la colonne KEEP) dans la colonne REMOVE
- scroller et cliquer sur Finish.
LSPfix

as tu lancer LSPfix??? si non fais le et ensuite tu repost un scan hijackthis.

Pour ton log hijacthis :



- Redémarre en mode sans échec. Attention, tu n'as pas accès à Internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuie sur la touche F8 jusqu'à l'affichage du menu des options avancées de Windows.
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuie sur Entrée.

- Relance un scan HijackThis et coche la lignes ci-dessous :


O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} - http://promo.dollarrevenue.com/web [...] ad185a.exe

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
O20 - Winlogon Notify: URL - C:\WINDOWS\system32\fpn4035qe.dll

O23 - Service: Service Bonjour (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)


Ferme toutes les fenêtres Windows, Internet explorer, Outlook, sauf le logiciel Hijackthis et clique sur « Fix checked »


scan ton pc avec ewido:
ewido

rapport ewido:

---------------------------------------------------------
ewido security suite - Rapport de scan
---------------------------------------------------------

+ Créé le: 19:46:09, 23/11/2005
+ Somme de contrôle: A43ED16F

+ Résultats du scan:

HKLM\SOFTWARE\Altnet -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Altnet\TopSearch -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM25.ADM25.1\CLSID\\ -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\ADM4.ADM4.1\CLSID\\ -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\AppID\adm.EXE\\AppID -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE\\AppID -> Spyware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Effective-i -> Spyware.EffectiveBrandToolbar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Effective-i\TheSearchAccelerator -> Spyware.EffectiveBrandToolbar : Nettoyer et sauvegarder
HKLM\SOFTWARE\Need2Find -> Spyware.Need2Find : Nettoyer et sauvegarder
HKLM\SOFTWARE\Need2Find\bar -> Spyware.Need2Find : Nettoyer et sauvegarder
HKLM\SOFTWARE\Need2Find\bar\Partner -> Spyware.Need2Find : Nettoyer et sauvegarder
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\Effective-i -> Spyware.EffectiveBrandToolbar : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\Effective-i\TheSearchAccelerator -> Spyware.EffectiveBrandToolbar : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\Effective-i\TheSearchAccelerator\IE5 -> Spyware.EffectiveBrandToolbar : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\IST -> Spyware.ISTBar : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{44BE0690-5429-47F0-85BB-3FFD8020233E} -> Spyware.UCmore : Nettoyer et sauvegarder
HKU\S-1-5-21-725345543-1935655697-682003330-1004\Software\RX Toolbar -> Spyware.RXToolbar : Nettoyer et sauvegarder
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Erreur durant le nettoyage
[684] C:\WINDOWS\system32\khdcan.dll -> Spyware.Look2Me : Erreur durant le nettoyage
[820] C:\WINDOWS\system32\khdcan.dll -> Spyware.Look2Me : Erreur durant le nettoyage
:mozilla.29:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder
:mozilla.39:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.41:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.42:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.43:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.44:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.46:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.47:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.48:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.49:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.50:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.51:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.52:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.53:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.54:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.55:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.56:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.57:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.58:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.59:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.60:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
:mozilla.61:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
:mozilla.63:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.65:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.66:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.67:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.68:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
:mozilla.69:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
:mozilla.91:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder
:mozilla.96:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
:mozilla.97:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
:mozilla.98:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
:mozilla.99:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
:mozilla.105:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.106:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.107:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.108:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.109:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.110:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.111:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.112:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.122:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
:mozilla.123:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
:mozilla.124:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
:mozilla.125:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
:mozilla.126:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
:mozilla.132:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.133:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.134:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.153:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Linksynergy : Nettoyer et sauvegarder
:mozilla.154:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Linksynergy : Nettoyer et sauvegarder
:mozilla.155:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Linksynergy : Nettoyer et sauvegarder
:mozilla.157:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
:mozilla.159:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder
:mozilla.160:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.161:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.162:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.163:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.164:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.165:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.166:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.167:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.168:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.169:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.170:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.171:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.172:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
:mozilla.200:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Com : Nettoyer et sauvegarder
:mozilla.201:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Com : Nettoyer et sauvegarder
:mozilla.204:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Spylog : Nettoyer et sauvegarder
:mozilla.205:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.206:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.207:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.208:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.209:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.210:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.211:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.212:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.213:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.214:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.215:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.216:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.217:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder
:mozilla.231:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Qksrv : Nettoyer et sauvegarder
:mozilla.232:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Qksrv : Nettoyer et sauvegarder
:mozilla.235:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Sitestat : Nettoyer et sauvegarder
:mozilla.236:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Sitestat : Nettoyer et sauvegarder
:mozilla.248:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder
:mozilla.252:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
:mozilla.262:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitslink : Nettoyer et sauvegarder
:mozilla.266:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitslink : Nettoyer et sauvegarder
:mozilla.267:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitslink : Nettoyer et sauvegarder
:mozilla.268:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitslink : Nettoyer et sauvegarder
:mozilla.272:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.350:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder
:mozilla.351:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder
:mozilla.352:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder
:mozilla.447:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Centrport : Nettoyer et sauvegarder
:mozilla.462:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Questionmarket : Nettoyer et sauvegarder
:mozilla.479:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
:mozilla.491:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Counted : Nettoyer et sauvegarder
:mozilla.492:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Counted : Nettoyer et sauvegarder
:mozilla.493:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Nettoyer et sauvegarder
:mozilla.494:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
:mozilla.495:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
:mozilla.496:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
:mozilla.497:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
:mozilla.498:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
:mozilla.519:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Revenue : Nettoyer et sauvegarder
:mozilla.524:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Realtracker : Nettoyer et sauvegarder
:mozilla.525:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Realtracker : Nettoyer et sauvegarder
:mozilla.552:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.553:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.554:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.555:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.572:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Ivwbox : Nettoyer et sauvegarder
:mozilla.576:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Adjuggler : Nettoyer et sauvegarder
:mozilla.577:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Adjuggler : Nettoyer et sauvegarder
:mozilla.637:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
:mozilla.638:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder
:mozilla.639:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
:mozilla.640:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder
:mozilla.641:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
:mozilla.687:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.703:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
:mozilla.706:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.707:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.713:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder
:mozilla.722:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.723:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.724:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.725:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.726:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.727:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.728:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
:mozilla.737:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder
:mozilla.738:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder
:mozilla.747:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Sitestat : Nettoyer et sauvegarder
:mozilla.749:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder
:mozilla.750:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder
:mozilla.754:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.755:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.757:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.758:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.771:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
:mozilla.776:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder
:mozilla.777:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder
:mozilla.778:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Sitestat : Nettoyer et sauvegarder
:mozilla.815:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.816:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.817:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.818:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.819:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
:mozilla.855:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Sitestat : Nettoyer et sauvegarder
:mozilla.908:C:\Documents and Settings\LiLiZ\Application Data\Mozilla\Firefox\Profiles\4uz1pj1i.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@2o7[2].txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@atdmt[1].txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@findwhat[1].txt -> Spyware.Cookie.Findwhat : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@statcounter[1].txt -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Cookies\liliz@www.smartadserver[1].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temp\p2psetup.exe -> Spyware.P2PNetworking : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temp\__unin__.exe -> Spyware.Altnet : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\JZHF0LUD\mm[1].js -> Spyware.Chitika : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\SXSDINSX\drsmartload_js[2].htm -> TrojanDownloader.IstBar.j : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\SXSDINSX\ucmoreiex[1].exe/UCMTSAIE.DLL -> Spyware.UCmore : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\SXSDINSX\ucmoreiex[1].exe/IUCMORE.DLL -> Spyware.UCmore : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\WLEVG12N\mm[1].js -> Spyware.Chitika : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\WLEVG12N\mm[2].js -> Spyware.Chitika : Nettoyer et sauvegarder
C:\Documents and Settings\LiLiZ\Local Settings\Temporary Internet Files\Content.IE5\WLEVG12N\mm[3].js -> Spyware.Chitika : Nettoyer et sauvegarder
C:\Program Files\INSTAFINK -> Spyware.404Search : Nettoyer et sauvegarder
C:\Program Files\Mozilla Firefox\plugins\NPNd2fn.dll -> Spyware.MyWebSearch : Nettoyer et sauvegarder
C:\Program Files\Need2Find -> Spyware.Need2Find : Nettoyer et sauvegarder
C:\Program Files\Need2Find\bar -> Spyware.Need2Find : Nettoyer et sauvegarder
C:\Program Files\RXToolBar -> Spyware.RXToolbar : Nettoyer et sauvegarder
C:\Program Files\RXToolBar\sfcont.bin -> Spyware.RXToolbar : Nettoyer et sauvegarder
C:\WINDOWS\system32\aqycfilt.dll -> Spyware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\system32\csmrepl.dll -> Spyware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\system32\dVdim.dll -> Spyware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\system32\o8pqli7518.dll -> Spyware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\system32\pgtorec.dll -> Spyware.Look2Me : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\adm.exe -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\adm25.dll -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\adm4.dll -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\admdloader.dll -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\admfdi.dll -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\admprog.dll -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\dmfiles.cab/AltnetUninstall.exe -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\dmfiles.cab/asmend.exe -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\mysearch.cab/mySetp.exe -> Spyware.MyWebSearch : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\pmexe.cab/Points Manager.exe -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\pmfiles.cab/setup.cab/PMuninstall.bde -> Spyware.Altnet : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\pmfiles.cab/sysdetect.dll -> Adware.BrilliantDigital : Nettoyer et sauvegarder
C:\WINDOWS\Temp\Altnet\Setup.exe -> Spyware.Altnet : Nettoyer et sauvegarder
D:\Program Files\Altnet\Download Manager\asm.exe -> Spyware.Altnet : Nettoyer et sauvegarder
D:\Program Files\Altnet\Download Manager\asmps.dll -> Spyware.Altnet : Nettoyer et sauvegarder

Norton me dit "TCP/IP non installé", comment je reinstalle ? :-?

ewido me signale des nouvelles infections spyware.look2me

je peux pas te dire si j ai tjr des pages j'ai plus de navigation! (je suis sur un autre pc pr t ecrire).
ewido s'affole tjr.

Logfile of HijackThis v1.99.1
Scan saved at 20:15:01, on 23/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\Tablet.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Club-Internet\Agent Wifi\AgentWifi.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Documents and Settings\LiLiZ\Bureau\HijackThis.exe
C:\WINDOWS\system32\Wtablet\TabUserW.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Club-Internet\Lanceur\lanceur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-internet.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MPSWiFiManager] C:\Program Files\Club-Internet\Agent Wifi\AgentWifi.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CanalPlayer] C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe /iconic
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\Wtablet\TabUserW.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O16 - DPF: {E504AD79-2E1A-4EE6-814D-53DE1EEB75AF} (Canal+ Active MSWAY) - https://www.canalplay.com/cabs/msway43.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Nls - C:\WINDOWS\system32\fprq0395e.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\System32\Tablet.exe

l'option 2?

Bonsoir,

** ATTENTION **

il faut préciser quelles DLL doivent être supprimées
en effet il ne faut absolument pas virer les fichiers winrnr.dll, rsvpsp.dll, mswsock.dll

or ton message sous-entend de tout supprimer : "sélectionner toutes les instances des fichiers à éliminer"
Les gens ne sont pas censés savoir quels fichiers sont à conserver (KEEP) ou à supprimer (REMOVE) et risquent de comprendre qu'il faut tout virer !

c'est pour cette raison que baguerrah a eu le message "TCP/IP non installé" (absence de mswsock.dll)

Salut

J'ai un probleme similaire enfait, et comme le post est plutot recent je me suis dis que c'etait inutile de faire un nouveau.

Ma page de demarage d'internet explorer est changer par http:///4.3.10

Je suis a peu pres sur de m'etre chopé ça apres avoir telechargé un crack accompagné d'un exe que j'aurais pas du executer... enfin voici mon log hijack:

Logfile of HijackThis v1.99.1
Scan saved at 15:17:15, on 24/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Dell\QuickSet\QuickSet.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Creative\USB SBAudigy2 NX\DVDAudio\CTDVDDet.EXE
C:\Program Files\Creative\USB SBAudigy2 NX\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\NetLimiter\NetLimiter.exe
C:\WINDOWS\system32\NotifyPhoneBook.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
C:\Documents and Settings\Paul McCartney\Mes documents\Mes fichiers reçus\yzdck0060_beta\YzDock.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hijck\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = /4.3.10
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = /4.3.10
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = /4.3.10
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = /4.3.10
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = /4.3.10
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = /4.3.10
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = /4.3.10
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = /4.3.10
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {840121111101411911080111101077109114053} - (no file)
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [AtiPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\USB SBAudigy2 NX\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\USB SBAudigy2 NX\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [AME_CSA] rundll32 amecsa.cpl,RUN_DLL
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Startup Manager] C:\Documents and Settings\Paul McCartney\Application Data\Systweak\ASO 2\smstartUp manager.exe
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Raccourci vers YzDock.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download All by FlashGet - C:\PROGRA~1\FlashGet\jc_all.htm
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Download using FlashGet - C:\PROGRA~1\FlashGet\jc_link.htm
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {1358E11F-ADE8-4D2B-9135-1A4CB9A23D7B} (Install Class) - https://genius.belgacom.be/esupport [...] taller.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 9328339640
O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/Download [...] _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A97E911A-D45A-4145-B17B-8189E84CD4A6}: NameServer = 195.238.2.22 195.238.2.21
O20 - Winlogon Notify: avpe32 - C:\WINDOWS\SYSTEM32\avpe32.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe


Qu'est ce que je dois faire maintenant? Parce qu'en plus lorsque je demarre mon ordi le disque travail sans que je en le sollicite et fini par bloque IE puis tout rentre dans l'ordre.

Merci

Salut à vous nobles vérolés... lol bonmoi je le même soucis que vous 2 dc j'ai voulu faire ce que tu conseillais lomaster!
donc voila le premier report de l2mfix:

L2MFIX find log 1.99
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Controls Folder]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\kt6ml7j11.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001


RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above
Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de)
This program is Freeware, use it on your own risk!

Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify:
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-NI) ALLOW Read BUILTIN\Utilisateurs
(ID-IO) ALLOW Read BUILTIN\Utilisateurs
(ID-NI) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-IO) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-NI) ALLOW Full access BUILTIN\Administrateurs
(ID-IO) ALLOW Full access BUILTIN\Administrateurs
(ID-NI) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access CREATEUR PROPRIETAIRE


**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{A3050628-0341-A1BA-6477-7429928CEF6B}"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}"="iTunes"
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{8411EC52-BAE7-414C-9A43-E529B792A72A}"=""
"{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}"=""
"{90860FD4-E1F4-4C08-9A10-996A97E82B07}"=""
"{D653647D-D607-4DF6-A5B8-48D2BA195F7B}"="BitDefender Antivirus v8"
"{472083B0-C522-11CF-8763-00608CC02F24}"="avast"

**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}]
@=""
"IDEx"="ADDR"

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}\InprocServer32]
@="C:\\WINDOWS\\system32\\uoandlg.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}\InprocServer32]
@="C:\\WINDOWS\\system32\\nvapi32.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}\InprocServer32]
@="C:\\WINDOWS\\system32\\deactfrm.dll"
"ThreadingModel"="Apartment"

**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
atmtd.dll Wed 23 Nov 2005 7:02:44 A.... 687 592 671,48 K
browseui.dll Sat 3 Sep 2005 1:06:12 A.... 1 020 416 996,50 K
cdfview.dll Sat 3 Sep 2005 1:06:12 A.... 152 064 148,50 K
cdmaysvr.dll Tue 22 Nov 2005 22:51:00 A.... 45 056 44,00 K
cdosys.dll Sat 10 Sep 2005 2:55:14 A.... 2 067 968 1,97 M
danim.dll Sat 3 Sep 2005 1:06:12 A.... 1 056 256 1,00 M
deactfrm.dll Thu 24 Nov 2005 19:21:12 ..... 234 272 228,78 K
dn6s01~1.dll Thu 24 Nov 2005 6:58:02 ..S.R 234 272 228,78 K
dxtrans.dll Sat 3 Sep 2005 1:06:12 A.... 205 312 200,50 K
extmgr.dll Sat 3 Sep 2005 1:06:12 A.... 55 808 54,50 K
gdi32.dll Thu 6 Oct 2005 4:18:12 A.... 280 064 273,50 K
iepeers.dll Sat 3 Sep 2005 1:06:12 A.... 251 392 245,50 K
inseng.dll Sat 3 Sep 2005 1:06:12 A.... 96 768 94,50 K
kt6ml7~1.dll Wed 23 Nov 2005 21:12:04 ..S.R 234 272 228,78 K
linkinfo.dll Thu 1 Sep 2005 2:43:38 A.... 19 968 19,50 K
mshtml.dll Tue 4 Oct 2005 16:26:06 A.... 3 013 120 2,87 M
mshtmled.dll Sat 3 Sep 2005 1:06:12 A.... 448 512 438,00 K
msrating.dll Sat 3 Sep 2005 1:06:12 A.... 146 432 143,00 K
mstime.dll Sat 3 Sep 2005 1:06:12 A.... 530 432 518,00 K
o266lc~1.dll Thu 24 Nov 2005 6:57:02 ..S.R 235 934 230,40 K
pngfilt.dll Sat 3 Sep 2005 1:06:12 A.... 39 424 38,50 K
quartz.dll Tue 30 Aug 2005 4:55:44 A.... 1 293 312 1,23 M
shdocvw.dll Sat 3 Sep 2005 1:06:12 A.... 1 484 288 1,41 M
shell32.dll Fri 23 Sep 2005 4:07:00 A.... 8 506 880 8,11 M
shlwapi.dll Sat 3 Sep 2005 1:06:12 A.... 474 112 463,00 K
sirenacm.dll Thu 13 Oct 2005 0:11:06 A.... 118 784 116,00 K
urlmon.dll Sat 3 Sep 2005 1:06:12 A.... 605 696 591,50 K
wininet.dll Sat 3 Sep 2005 1:06:12 A.... 662 528 647,00 K
winsrv.dll Thu 1 Sep 2005 2:43:38 A.... 292 352 285,50 K

29 items found: 29 files (3 H/S), 0 directories.
Total of file sizes: 24 493 286 bytes 23,36 M
Locate .tmp files:

C:\WINDOWS\SYSTEM32\
guard.tmp Thu 24 Nov 2005 19:23:12 ..S.R 234 272 228,78 K

1 item found: 1 file (1 H/S), 0 directories.
Total of file sizes: 234 272 bytes 228,78 K
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 40BF-DD40

R‚pertoire de C:\WINDOWS\System32

24/11/2005 19:23 234ÿ272 guard.tmp
24/11/2005 06:58 234ÿ272 dn6s01j7e.dll
24/11/2005 06:57 235ÿ934 o266lcjs1fo6.dll
23/11/2005 21:12 234ÿ272 kt6ml7j11.dll
08/11/2005 23:11 <REP> dllcache
28/01/2005 20:12 <REP> Microsoft
4 fichier(s) 938ÿ750 octets
2 R‚p(s) 43ÿ064ÿ156ÿ160 octets libres

je suis bloqué pr le second rapport car il me demande un password que je ne peux pas taper...je tape sur le clavier mais rien ne se passe! :-?

et voila mon hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 19:47:22, on 24/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Mes documents\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [InstallNAIProduct] "D:\Vsc\setup.exe" /RUNKEY
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FD72E68-3B10-4DF2-97AD-8CEEA8A541B6}: NameServer = 80.10.246.1,80.10.246.139
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Controls Folder - C:\WINDOWS\system32\kt6ml7j11.dll
O21 - SSODL: SysTray.Excn2 - {1722ECFF-4356-4f5b-B534-E67294FE75E9} - C:\WINDOWS\system32\edgoadee.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\Q29jaGV0\command.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

tin j'espère que tu vas revenir sur ce topic où qq'un d'autre...
Merci d'avance!

L2MFix ne donne rien ni spy sweeper ni LSPfix
aidez moi plz ça me gave trop...

Hijack:

Logfile of HijackThis v1.99.1
Scan saved at 00:46:49, on 27/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Mes documents\friter du virus\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FD72E68-3B10-4DF2-97AD-8CEEA8A541B6}: NameServer = 80.10.246.1,80.10.246.139
O20 - Winlogon Notify: ShellServiceObjectDelayLoad - C:\WINDOWS\system32\irl0l53m1.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

-------------------------------
me dites pas qu'il faut que je supprime la ligne 20 elle revient tt le tps mais sous un autre nom...à cause d'elle je ne peux pas utiliser L2MFix...
aidez moi plz

Premier rapport L2Mfix:

L2MFIX find log 1.99
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ShellServiceObjectDelayLoad]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\irl0l53m1.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
"DLLName"="wzcdlg.dll"
"Logon"="WZCEventLogon"
"Logoff"="WZCEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000000


RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above
Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de)
This program is Freeware, use it on your own risk!

Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify:
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-NI) ALLOW Read BUILTIN\Utilisateurs
(ID-IO) ALLOW Read BUILTIN\Utilisateurs
(ID-NI) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-IO) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-NI) ALLOW Full access BUILTIN\Administrateurs
(ID-IO) ALLOW Full access BUILTIN\Administrateurs
(ID-NI) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access CREATEUR PROPRIETAIRE


**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{A3050628-0341-A1BA-6477-7429928CEF6B}"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}"="iTunes"
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{8411EC52-BAE7-414C-9A43-E529B792A72A}"=""
"{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}"=""
"{90860FD4-E1F4-4C08-9A10-996A97E82B07}"=""
"{D653647D-D607-4DF6-A5B8-48D2BA195F7B}"="BitDefender Antivirus v8"
"{472083B0-C522-11CF-8763-00608CC02F24}"="avast"
"{C0EA65E9-B8FB-4512-9817-A772E6374ADF}"=""

**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}]
@=""
"IDEx"="ADDR"

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8411EC52-BAE7-414C-9A43-E529B792A72A}\InprocServer32]
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{54ED14AC-171E-4C5C-AD92-E22BB2A6670C}\InprocServer32]
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{90860FD4-E1F4-4C08-9A10-996A97E82B07}\InprocServer32]
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{C0EA65E9-B8FB-4512-9817-A772E6374ADF}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C0EA65E9-B8FB-4512-9817-A772E6374ADF}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C0EA65E9-B8FB-4512-9817-A772E6374ADF}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C0EA65E9-B8FB-4512-9817-A772E6374ADF}\InprocServer32]
@="C:\\WINDOWS\\system32\\rupdd.dll"
"ThreadingModel"="Apartment"

**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
aysnt.dll Fri 25 Nov 2005 15:23:08 ..S.R 235 340 229,82 K
browseui.dll Sat 3 Sep 2005 1:06:12 A.... 1 020 416 996,50 K
bsdispl.dll Sun 27 Nov 2005 0:13:16 ..S.R 236 369 230,83 K
cdfview.dll Sat 3 Sep 2005 1:06:12 A.... 152 064 148,50 K
cdosys.dll Sat 10 Sep 2005 2:55:14 A.... 2 067 968 1,97 M
danim.dll Sat 3 Sep 2005 1:06:12 A.... 1 056 256 1,00 M
dwmsshrn.dll Sat 26 Nov 2005 16:35:34 ..S.R 234 232 228,74 K
dxtrans.dll Sat 3 Sep 2005 1:06:12 A.... 205 312 200,50 K
ennql1~1.dll Sat 26 Nov 2005 16:51:04 ..S.R 235 691 230,16 K
extmgr.dll Sat 3 Sep 2005 1:06:12 A.... 55 808 54,50 K
f4l0le~1.dll Sun 27 Nov 2005 0:17:46 ..S.R 234 799 229,29 K
g0lm0a~1.dll Sat 26 Nov 2005 10:22:32 ..S.R 234 362 228,87 K
gdi32.dll Thu 6 Oct 2005 4:18:12 A.... 280 064 273,50 K
icshlpr.dll Sat 26 Nov 2005 16:42:42 ..S.R 235 591 230,07 K
iepeers.dll Sat 3 Sep 2005 1:06:12 A.... 251 392 245,50 K
iihlpapi.dll Sat 26 Nov 2005 16:45:08 ..S.R 235 591 230,07 K
inseng.dll Sat 3 Sep 2005 1:06:12 A.... 96 768 94,50 K
irl0l5~1.dll Sun 27 Nov 2005 0:16:08 ..S.R 233 765 228,29 K
iyuext32.dll Fri 25 Nov 2005 21:17:04 A.... 45 056 44,00 K
j2l4lc~1.dll Thu 24 Nov 2005 21:44:20 ..S.R 235 704 230,18 K
j60slg~1.dll Sat 26 Nov 2005 16:46:08 ..S.R 235 591 230,07 K
ksdukx.dll Thu 24 Nov 2005 23:22:30 ..S.R 235 915 230,38 K
ktj0l7~1.dll Sat 26 Nov 2005 16:48:48 ..S.R 235 157 229,64 K
ktrql7~1.dll Sat 26 Nov 2005 16:40:36 ..S.R 236 042 230,51 K
linkinfo.dll Thu 1 Sep 2005 2:43:38 A.... 19 968 19,50 K
msctl32.dll Wed 23 Nov 2005 17:57:24 A.... 46 592 45,50 K
mshtml.dll Tue 4 Oct 2005 16:26:06 A.... 3 013 120 2,87 M
mshtmled.dll Sat 3 Sep 2005 1:06:12 A.... 448 512 438,00 K
msrating.dll Sat 3 Sep 2005 1:06:12 A.... 146 432 143,00 K
mstime.dll Sat 3 Sep 2005 1:06:12 A.... 530 432 518,00 K
mvr2cenu.dll Sat 26 Nov 2005 15:21:58 ..S.R 234 232 228,74 K
nmobjapi.dll Sat 26 Nov 2005 16:47:04 ..S.R 234 140 228,65 K
oqkley.dll Thu 24 Nov 2005 23:11:24 ..S.R 235 048 229,54 K
otkley.dll Sun 27 Nov 2005 0:04:10 ..S.R 234 140 228,65 K
pngfilt.dll Sat 3 Sep 2005 1:06:12 A.... 39 424 38,50 K
quartz.dll Tue 30 Aug 2005 4:55:44 A.... 1 293 312 1,23 M
rupdd.dll Sun 27 Nov 2005 0:17:48 ..S.R 233 765 228,29 K
shdocvw.dll Sat 3 Sep 2005 1:06:12 A.... 1 484 288 1,41 M
shell32.dll Fri 23 Sep 2005 4:07:00 A.... 8 506 880 8,11 M
shlwapi.dll Sat 3 Sep 2005 1:06:12 A.... 474 112 463,00 K
sirenacm.dll Thu 13 Oct 2005 0:11:06 A.... 118 784 116,00 K
urlmon.dll Sat 3 Sep 2005 1:06:12 A.... 605 696 591,50 K
wininet.dll Sat 3 Sep 2005 1:06:12 A.... 662 528 647,00 K
winsrv.dll Thu 1 Sep 2005 2:43:38 A.... 292 352 285,50 K
wudmtp.dll Sun 27 Nov 2005 0:06:12 ..S.R 234 140 228,65 K

45 items found: 45 files (20 H/S), 0 directories.
Total of file sizes: 27 613 150 bytes 26,33 M
Locate .tmp files:

No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C s'appelle HDD
Le num‚ro de s‚rie du volume est 40BF-DD40

R‚pertoire de C:\WINDOWS\System32

27/11/2005 00:17 233ÿ765 rupdd.dll
27/11/2005 00:17 234ÿ799 f4l0le3m1h.dll
27/11/2005 00:16 233ÿ765 irl0l53m1.dll
27/11/2005 00:13 236ÿ369 bsdispl.dll
27/11/2005 00:06 234ÿ140 wudmtp.dll
27/11/2005 00:04 234ÿ140 oTkley.dll
26/11/2005 16:51 235ÿ691 ennql1551.dll
26/11/2005 16:48 235ÿ157 ktj0l71m1.dll
26/11/2005 16:47 234ÿ140 nmobjapi.dll
26/11/2005 16:46 235ÿ591 j60slgd7160.dll
26/11/2005 16:45 235ÿ591 iihlpapi.dll
26/11/2005 16:42 235ÿ591 iCshlpr.dll
26/11/2005 16:40 236ÿ042 ktrql7951.dll
26/11/2005 16:35 234ÿ232 DWMSSHRN.DLL
26/11/2005 15:21 234ÿ232 mvr2cenu.dll
26/11/2005 10:22 234ÿ362 g0lm0a31ed.dll
25/11/2005 15:23 235ÿ340 aysnt.dll
24/11/2005 23:22 235ÿ915 ksdukx.dll
24/11/2005 23:11 235ÿ048 oQkley.dll
24/11/2005 21:44 235ÿ704 j2l4lc3q1f.dll
08/11/2005 23:11 <REP> dllcache
28/01/2005 20:12 <REP> Microsoft
20 fichier(s) 4ÿ699ÿ614 octets
2 R‚p(s) 47ÿ037ÿ550ÿ592 octets libres

Look2me remover a bien fonctionné pour moi! et ewido a fini le travail (dommage qu'il soit pas gratuit celui là d'ailleurs ).