Probleme Pop-up (spyware)

Dabord bonjour à tous ,

En fait , mon probleme , cest que quand j'ouvre le panneau de configuration , poste de travail , la corbeille ... Ou quand je lance internet explorer , et bien j'ai au moin 4 nouvelle fenettre d'internet explorer qui ce lancent et il y a marquer des trucs sur le casino etc ... sur les pages et sa devient vraiment agacant !!!

J'ai fait des analyse avec bit defender , kaspersky , spybot , ad-aware , spyware doctor ... Ils ont tous trouver au moin un spyware et j'ai tout suprimer mais sa reste toujours et je ne sait plus quoi faire !!!!

Si quelqun connais la solution , merci beaucoup de me la dire !!!!

Cordialement,

Benoît

ok merci à toi

Voila le rapport :

Logfile of HijackThis v1.99.1
Scan saved at 14:03:05, on 21/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\PowerStrip\pstrip.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Documents and Settings\Kenny McCormick\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Great Offers Displayer - {CE05B815-6F98-4ADD-AEB7-60BB2D4264F1} - C:\WINDOWS\bh.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [Anti-Blaxx Manager] C:\Program Files\Anti-Blaxx\Anti-Blaxx.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Audio Web Cam 31
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AIP] C:\WINDOWS\aip.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Spy Sweeper Fix.lnk = C:\Program Files\Spy Sweeper\SpySweeperFix.bat
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger le site web avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Télécharger sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger tout avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

Salut,

Installe Ewido
Décoche lors de l'installation les deux cases.

Lance Ewido puis mets le à jour.
Fais un Scan complet du système.
Sauvegarde puis colle le rappport.

Au fait , J'ai toujours les spywares meme apres le scan de ewido :-(

Poste un nouveau log HJT.

Fais un scan en ligne Panda (avec IE)
Sauvegarde, colle le rapport

Voila le raport de Panda ActiveScan :


Incident Status Location

Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.as-eu.falkag.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.as-eu.falkag.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.bluestreak.com/]
Spyware:Cookie/Valueclick Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.valueclick.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.weborama.fr/]
Spyware:Cookie/Comclick Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[fl01.ct2.comclick.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.com.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.2o7.net/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/SpyLog Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.spylog.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/HotLog Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.hotlog.ru/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Coremetrics Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[data.coremetrics.com/]
Spyware:Cookie/24/7 Realmedia Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.247realmedia.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[fe.lea.lycos.fr/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[sel.as-eu.falkag.net/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[statse.webtrendslive.com/S154324]
Spyware:Cookie/onestat.com Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[stat.onestat.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[as1.falkag.de/]
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[fe.lea.lycos.es/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.bannerlandia.com.ar/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[server.iad.liveperson.net/hc/77207656]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.cs.sexcounter.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.hitbox.com/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[server.iad.liveperson.net/hc/46036647]
Spyware:Cookie/MetriWeb Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.metriweb.be/]
Spyware:Cookie/Findwhat Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.findwhat.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.adultfriendfinder.com/]
Spyware:Cookie/SexList Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.sexlist.com/]
Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[landing.domainsponsor.com/]
Spyware:Cookie/Linksynergy Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.linksynergy.com/]
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.888.com/]
Spyware:Cookie/ErrorSafe Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.errorsafe.com/]
Spyware:Cookie/WinFixer Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[.winfixer.com/]
Spyware:Cookie/ErrorSafe Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[www.errorsafe.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[S154324]
Spyware:Cookie/onestat.com Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[77207656]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[46036647]
Spyware:Cookie/MetriWeb Not disinfected C:\Documents and Settings\Kenny McCormick\Application Data\Mozilla\Firefox\Profiles\4i3xscpm.default\cookies.txt[]
Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Kenny McCormick\Cookies\kenny mccormick@weborama[2].txt
Adware:Adware/StartPage.AQA Not disinfected C:\Documents and Settings\Kenny McCormick\Local Settings\Temporary Internet Files\Content.IE5\GHIJKLMN\nk%20hack[1].dll

Merci à toi

Bonjour, moi aussi j'ai un probléme pareil.
Pourrriez vous m'aider
En fait 'il y'a des fenetres publicitaires qui s'ouvrent dès que je me connecte.
Pourriez vous lire les logs Hijackthis et de me trouver une solution
pleasseeeeee

Logfile of HijackThis v1.99.1
Scan saved at 17:55:28, on 22/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\YW1pbmU\command.exe
C:\Program Files\Network Monitor\netmon.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\NB Probe\NBProbe.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\WINDOWS\system32\AVWLPSTA.EXE
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\newfrn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\FICHIE~1\owmi\owmim.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\amine\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1e1b2879-88ff-11d3-8d96-d7acac95951a} - (no file)
O2 - BHO: (no name) - {2bc43670-c0bd-4794-bb11-f60f3e001dc5} - (no file)
O2 - BHO: (no name) - {6001CDF7-6F45-471b-A203-0225615E35A7} - C:\WINDOWS\DH.dll
O2 - BHO: winapi32.MyBHO - {86A0607D-6126-45AE-8A29-46C181AFF4D6} - C:\WINDOWS\system32\winapi32.dll (file missing)
O2 - BHO: (no name) - {8702d9e1-890b-4bf2-a233-fa44e582b2de} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: (no name) - {9819c369-5f62-4d37-9a42-44043a742c1e} - (no file)
O2 - BHO: (no name) - {9EAC0102-5E61-2312-BC2D-000000000000} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-716d74632608} - (no file)
O2 - BHO: (no name) - {d53b810f-6219-11d4-95b6-0040950375e7} - (no file)
O2 - BHO: (no name) - {dd6f50c0-9f8f-a41c-291e-7b3fb818ef18} - (no file)
O2 - BHO: (no name) - {f21bd77e-0cce-c6cd-4f85-aa3b7895988e} - (no file)
O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
O2 - BHO: (no name) - {ff731508-cd28-e0b0-3e85-0cf55fde9fba} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [NB Probe] C:\Program Files\ASUS\NB Probe\NBProbe.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"
O4 - HKLM\..\Run: [AVWLPSTA.EXE] AVWLPSTA.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [newname] C:\windows\newname4.exe
O4 - HKLM\..\Run: [cme] C:\WINDOWS\system32\cme.exe
O4 - HKLM\..\Run: [cmesys] C:\WINDOWS\system32\cmesys.exe
O4 - HKLM\..\Run: [cmeupd] C:\WINDOWS\system32\cmeupd.exe
O4 - HKLM\..\Run: [gator] C:\WINDOWS\system32\gator.exe
O4 - HKLM\..\Run: [gmt] C:\WINDOWS\system32\gmt.exe
O4 - HKLM\..\Run: [Cydoor] C:\WINDOWS\system32\cd_gif.dll
O4 - HKLM\..\Run: [Dynamic Desktop Media] C:\WINDOWS\system32\sysu.exe
O4 - HKLM\..\Run: [NewFrn] C:\WINDOWS\newfrn.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [NetAppel] "C:\Program Files\NetAppel\NetAppel.exe" -nosplash -minimized
O4 - HKCU\..\Run: [Shell] "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E2510E6-BF2D-4C78-9F28-2F5C8760F124} (ERPageAddin Class) - https://project1.eroom.net/eRoomSetup/client.cab
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://fr.errorsafe.com/pages/scan [...] tallFR.cab
O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: C:\WINDOWS\system32\systi5x.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\YW1pbmU\command.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe