Tom's Guide > Forum > Sécurité - Virus > pb ouverture intempestive de fenêtres

pb ouverture intempestive de fenêtres

Forum Sécurité - Virus : pb ouverture intempestive de fenêtres

TomsGuide.com : 800 000 inscrits répondent à toutes vos questions high-tech et informatique. Pour obtenir de l'aide, inscrivez-vous gratuitement !
Créer un nouveau sujet Répondre
Mot :    Pseudo :           
 
boie   05-03-2006 à 20:45:21

Bonjour,

Je suis nouveau sur ce forum et relativement nul en informatique. Lorsque je suis connecté, j'ai constamment des fenêtres fenêtres publicitaires qui s'ouvrent. J'ai essayé ad aware, spybot, divers antivirus mais rien n'y fait.
Si quelqu'un avait la gentillesse de regarder mon log Hijackthis et de me dire ce que je peux faire, ce serait super sympa :

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\ACER\PSM.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\MMDiag.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
D:\Téléchargements\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [MPS] C:\ACER\PSM.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKLM\..\Run: [MimBoot] C:\Program Files\Musicmatch\Musicmatch Jukebox\mimboot.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - HKCU\..\Run: [Nphb] "C:\Program Files\euud\rowe.exe" -vt yazr
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\j4j60e1seh.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Thanks a lot.

Répondre
Liens sponsorisés
Inscrivez-vous ou connectez-vous pour masquer ceci.
Angeldark   05-03-2006 à 20:49:33
- 0 +

Salut,

Tu as une infection de type Look2me
Imprime ces instructions, ou colle les dans un fichier texte.
Regarde bien les trois indications en bas, avant de commencer la procédure.
Télécharge Look2Me-Destroyer.exe sur ton Bureau.

http://www.atribune.org/ccount/click.php?id=7

. Ferme toutes les fenêtres actives.
. Lance l'outil Look2Me-Destroyer.exe.
. Coche Run this program as a task
. Un message s'affichera :
"Look2Me-Destroyer will close and re-open in approximately 10 seconds"-> OK
. Il se relancera après les 10 secondes, puis appuie sur le bouton Scan for L2M.
. Les icônes de ton Bureau vont disparaître.
. Le scan termine, clique sur Remove L2M
. Un nouveau message Done Scanning apparaîtra, clique sur OK.
. Suivi de Done removing infected files! Look2Me-Destroyer will now shutdown your computer -> OK.
. Ton PC va s’éteindre.
. Démarre ton PC normalement.
. Colle le rapport généré, situé ici : C:\Look2Me-Destroyer.txt ,ainsi qu'un rapport HijackThis.

1/ Si Look2Me-Destroyer ne se relance pas automatiquement après les 10 secondes, redémarre et essaie à nouveau.

2/ Si tu reçois un message de ton firewall disant que l'outil tente d'accéder à l'internet : Accepte ou desactive ton firewall

3/ Si un message runtime error '339' s'affiche : télécharge MSWINSCK.OCX et place-le dans le dossier C:\Windows\System32.
http://www.ascentive.com/support/n [...] WINSCK.OCX

Répondre à Angeldark
thierryj0   05-03-2006 à 20:51:34
- 0 +

adaware, spybot et aucun antivirus ne peuvent empecher ça. la bonne solution est de ne plus utiliser internet explorer mais firefox pour surfer. Ce navigateur permet entre autres de bloquer les fenetres de pubs.

hth

Répondre à thierryj0
Angeldark   05-03-2006 à 21:18:23
- 0 +

Avec l'infection L2me, il recevra toujours des pubs

Répondre à Angeldark
boie   06-03-2006 à 09:59:28
- 0 +

Salut, merci de votre réponse. En effet, j'utilise déjà Firefox depuis longtemps.

Répondre à boie
bob_   06-03-2006 à 10:04:07
- 0 +

Salut,

As-tu fait ce qu' Angeldark t'as dit ? si Non fait le

Répondre à bob_
boie   06-03-2006 à 10:23:31
- 0 +

Ca y est, j'ai suivi toute la procédure.
Voici le rapport de L2M (ca va être un peu long) :


Look2Me-Destroyer V1.0.7

Scanning for infected files.....
Scan started at 06/03/2006 10:11:56

Infected! C:\WINDOWS\system32\j4j60e1seh.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053283.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053526.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053999.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0056152.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0058404.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0058724.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0058931.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0059111.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP131\A0059658.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP131\A0059921.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP132\A0061078.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP132\A0061151.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP133\A0061247.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP133\A0061342.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP136\A0061391.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP137\A0061415.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP140\A0062878.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067025.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067146.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067196.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0068306.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP143\A0068345.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP143\A0068346.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP144\A0068622.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0069909.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0070270.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0070910.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0071887.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0072073.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080443.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080444.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080535.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080575.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080607.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080718.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080737.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080769.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080810.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0083665.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0083666.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0084104.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085414.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085418.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085536.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085727.dll
Infected! C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085979.dll
Infected! C:\WINDOWS\system32\ayiiiexx.dll
Infected! C:\WINDOWS\system32\bqtsprx3.dll
Infected! C:\WINDOWS\system32\butsprx3.dll
Infected! C:\WINDOWS\system32\clmpstui.dll
Infected! C:\WINDOWS\system32\dgcpcsvc.dll
Infected! C:\WINDOWS\system32\dn7vb.dll
Infected! C:\WINDOWS\system32\dnr6019se.dll
Infected! C:\WINDOWS\system32\egs.dll
Infected! C:\WINDOWS\system32\ennql1551.dll
Infected! C:\WINDOWS\system32\fpr2039oe.dll
Infected! C:\WINDOWS\system32\gymf32.dll
Infected! C:\WINDOWS\system32\h40qled51h0.dll
Infected! C:\WINDOWS\system32\hDl.dll
Infected! C:\WINDOWS\system32\hfetcfg.dll
Infected! C:\WINDOWS\system32\hp0023dmg.dll
Infected! C:\WINDOWS\system32\hZl.dll
Infected! C:\WINDOWS\system32\imetcomm.dll
Infected! C:\WINDOWS\system32\j4j60e1seh.dll
Infected! C:\WINDOWS\system32\jtjq0715e.dll
Infected! C:\WINDOWS\system32\krdic.dll
Infected! C:\WINDOWS\system32\l0p2la7o1d.dll
Infected! C:\WINDOWS\system32\mbls31.dll
Infected! C:\WINDOWS\system32\mfiwave.dll
Infected! C:\WINDOWS\system32\MIIMTF.dll
Infected! C:\WINDOWS\system32\mkxmlr.dll
Infected! C:\WINDOWS\system32\mowebdvd.dll
Infected! C:\WINDOWS\system32\mpoert2.dll
Infected! C:\WINDOWS\system32\n62u0gf9e62.dll
Infected! C:\WINDOWS\system32\n8n60i5se8.dll
Infected! C:\WINDOWS\system32\o0660ajsedo60.dll
Infected! C:\WINDOWS\system32\o066lajs1do6.dll
Infected! C:\WINDOWS\system32\p2r4lc9q1f.dll
Infected! C:\WINDOWS\system32\pwtorsvc.dll
Infected! C:\WINDOWS\system32\qxartz.dll
Infected! C:\WINDOWS\system32\ryched20.dll
Infected! C:\WINDOWS\system32\sdcbase.dll
Infected! C:\WINDOWS\system32\sdorage.dll
Infected! C:\WINDOWS\system32\shi_ci.dll
Infected! C:\WINDOWS\system32\spbcsp.dll
Infected! C:\WINDOWS\system32\tNpi32.dll
Infected! C:\WINDOWS\system32\ucrlbva.dll
Infected! C:\WINDOWS\system32\uirvpa.dll
Infected! C:\WINDOWS\system32\vfmredir.dll
Infected! C:\WINDOWS\system32\wipasf.dll
Infected! C:\WINDOWS\system32\wlspdmod.dll
Infected! C:\WINDOWS\system32\wwadss.dll

Attempting to delete infected files...

Attempting to delete: C:\WINDOWS\system32\j4j60e1seh.dll
C:\WINDOWS\system32\j4j60e1seh.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053283.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053283.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053526.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053526.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053999.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0053999.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0056152.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0056152.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0058404.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP129\A0058404.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0058724.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0058724.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0058931.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0058931.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0059111.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP130\A0059111.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP131\A0059658.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP131\A0059658.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP131\A0059921.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP131\A0059921.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP132\A0061078.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP132\A0061078.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP132\A0061151.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP132\A0061151.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP133\A0061247.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP133\A0061247.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP133\A0061342.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP133\A0061342.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP136\A0061391.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP136\A0061391.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP137\A0061415.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP137\A0061415.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP140\A0062878.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP140\A0062878.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067025.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067025.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067146.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067146.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067196.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0067196.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0068306.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP142\A0068306.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP143\A0068345.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP143\A0068345.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP143\A0068346.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP143\A0068346.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP144\A0068622.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP144\A0068622.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0069909.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0069909.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0070270.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0070270.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0070910.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP145\A0070910.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0071887.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0071887.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0072073.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0072073.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080443.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080443.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080444.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080444.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080535.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080535.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080575.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080575.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080607.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080607.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080718.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080718.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080737.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080737.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080769.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080769.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080810.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0080810.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0083665.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0083665.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0083666.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0083666.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0084104.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0084104.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085414.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085414.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085418.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085418.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085536.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085536.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085727.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085727.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085979.dll
C:\System Volume Information\_restore{AC558B47-FDA0-4B13-9A25-6D2A31F50BBE}\RP146\A0085979.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\ayiiiexx.dll
C:\WINDOWS\system32\ayiiiexx.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\bqtsprx3.dll
C:\WINDOWS\system32\bqtsprx3.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\butsprx3.dll
C:\WINDOWS\system32\butsprx3.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\clmpstui.dll
C:\WINDOWS\system32\clmpstui.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\dgcpcsvc.dll
C:\WINDOWS\system32\dgcpcsvc.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\dn7vb.dll
C:\WINDOWS\system32\dn7vb.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\dnr6019se.dll
C:\WINDOWS\system32\dnr6019se.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\egs.dll
C:\WINDOWS\system32\egs.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\ennql1551.dll
C:\WINDOWS\system32\ennql1551.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\fpr2039oe.dll
C:\WINDOWS\system32\fpr2039oe.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\gymf32.dll
C:\WINDOWS\system32\gymf32.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\h40qled51h0.dll
C:\WINDOWS\system32\h40qled51h0.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\hDl.dll
C:\WINDOWS\system32\hDl.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\hfetcfg.dll
C:\WINDOWS\system32\hfetcfg.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\hp0023dmg.dll
C:\WINDOWS\system32\hp0023dmg.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\hZl.dll
C:\WINDOWS\system32\hZl.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\imetcomm.dll
C:\WINDOWS\system32\imetcomm.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\j4j60e1seh.dll
C:\WINDOWS\system32\j4j60e1seh.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\jtjq0715e.dll
C:\WINDOWS\system32\jtjq0715e.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\krdic.dll
C:\WINDOWS\system32\krdic.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\l0p2la7o1d.dll
C:\WINDOWS\system32\l0p2la7o1d.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\mbls31.dll
C:\WINDOWS\system32\mbls31.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\mfiwave.dll
C:\WINDOWS\system32\mfiwave.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\MIIMTF.dll
C:\WINDOWS\system32\MIIMTF.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\mkxmlr.dll
C:\WINDOWS\system32\mkxmlr.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\mowebdvd.dll
C:\WINDOWS\system32\mowebdvd.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\mpoert2.dll
C:\WINDOWS\system32\mpoert2.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\n62u0gf9e62.dll
C:\WINDOWS\system32\n62u0gf9e62.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\n8n60i5se8.dll
C:\WINDOWS\system32\n8n60i5se8.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\o0660ajsedo60.dll
C:\WINDOWS\system32\o0660ajsedo60.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\o066lajs1do6.dll
C:\WINDOWS\system32\o066lajs1do6.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\p2r4lc9q1f.dll
C:\WINDOWS\system32\p2r4lc9q1f.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\pwtorsvc.dll
C:\WINDOWS\system32\pwtorsvc.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\qxartz.dll
C:\WINDOWS\system32\qxartz.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\ryched20.dll
C:\WINDOWS\system32\ryched20.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\sdcbase.dll
C:\WINDOWS\system32\sdcbase.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\sdorage.dll
C:\WINDOWS\system32\sdorage.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\shi_ci.dll
C:\WINDOWS\system32\shi_ci.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\spbcsp.dll
C:\WINDOWS\system32\spbcsp.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\tNpi32.dll
C:\WINDOWS\system32\tNpi32.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\ucrlbva.dll
C:\WINDOWS\system32\ucrlbva.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\uirvpa.dll
C:\WINDOWS\system32\uirvpa.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\vfmredir.dll
C:\WINDOWS\system32\vfmredir.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\wipasf.dll
C:\WINDOWS\system32\wipasf.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\wlspdmod.dll
C:\WINDOWS\system32\wlspdmod.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\wwadss.dll
C:\WINDOWS\system32\wwadss.dll Deleted successfully!

Making registry repairs.

Removing: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\App Management

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{2D0226B5-F845-4046-BE0A-7F0F23D9DD4E}"
HKCR\Clsid\{2D0226B5-F845-4046-BE0A-7F0F23D9DD4E}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{4CA43E4A-B9F3-4FAF-967D-02390D6F03B8}"
HKCR\Clsid\{4CA43E4A-B9F3-4FAF-967D-02390D6F03B8}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{8EFBDD38-8EB5-4145-A5B2-22018B758B52}"
HKCR\Clsid\{8EFBDD38-8EB5-4145-A5B2-22018B758B52}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{541C1CA3-C41D-459E-8423-7F66DD7E7E77}"
HKCR\Clsid\{541C1CA3-C41D-459E-8423-7F66DD7E7E77}

Restoring Windows certificates.

Replaced hosts file with default windows hosts file


Restoring SeDebugPrivilege for Administrateurs - Succeeded



et voici le rapport Hijackthis :

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\ACER\PSM.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Musicmatch\Musicmatch Jukebox\MMDiag.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
D:\Téléchargements\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [MPS] C:\ACER\PSM.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKLM\..\Run: [MimBoot] C:\Program Files\Musicmatch\Musicmatch Jukebox\mimboot.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - HKCU\..\Run: [Nphb] "C:\Program Files\euud\rowe.exe" -vt yazr
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Encore merci, ça a l'air d'être stable maintenant.

Répondre à boie
bob_   06-03-2006 à 10:47:31
- 0 +

Salut,

Télécharge, installe et mets à jour ewido

http://www.infos-du-net.com/telech [...] Suite.html

Redémarre en mode sans échec (Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
Attention tu n'as pas accès à Internet dans ce mode donc note ou imprime les consignes qui suivent.

Lance ewido (Scan complet du système) et supprime tout ce qu'il trouve. Sauvegarde le rapport sur le bureau.

Redémarre normalement et poste le rapport d'ewido ainsi qu’un nouveau Log HijackThis ensuite on terminera le boulot à la main

Répondre à bob_
Créer un nouveau sujet Répondre
Tom's Guide > Forum > Sécurité - Virus > pb ouverture intempestive de fenêtres
Aller à :

Il y a 1676 utilisateurs connus et inconnus. Pour voir la liste des connectés connus, cliquez ici.

Plan du forum
Forum Bestofmedia ©
2000-2009 Bestofmedia Group
Page générée en 0,330 secondes
Attention

Vous allez répondre sur un sujet resté inactif pendant plus de 6 mois.
Assurez-vous d'apporter des éléments nouveaux à la discussion avant de poursuivre.

Répondre Annuler
Liens