"ADS SERVED BY RIGHONADZ". [Résolu]

Bonjour,

Télécharge puis installe Hijackthis (Trend Micro).
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

Logfile of HijackThis v1.99.1
Scan saved at 12:03:19, on 2008-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: rightonads optimizer - {10F3E8BD-257A-4702-A2F5-DC02055B068C} - C:\WINDOWS\system32\gzmrt.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [postSetupCheck] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\gzmrt.dll" DllStart
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUpload...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

voila

Bonjour,

Télécharge ce fichier :
http://dcangeldark.googlepages.com/Kill_Adssite.zip
Dézippe-le puis lance Kill.cmd. Poste le rapport.

C:\WINDOWS\system32\adssite_sidebar.dll n'existe pas !
C:\WINDOWS\system32\gzmrt.dll - Trouve !
C:\WINDOWS\system32\gzmrt.dll - Erreur de Suppression !
C:\WINDOWS\system32\nsoC6.dll n'existe pas !
C:\WINDOWS\system32\nss131.dll n'existe pas !
C:\WINDOWS\system32\gzmrotate.dll n'existe pas !
C:\WINDOWS\system32\adssite_sidebar_uninstall.exe n'existe pas !
C:\WINDOWS\system32\adssite-remove.exe n'existe pas !

Reposte un rapport Hijackthis.

Logfile of HijackThis v1.99.1
Scan saved at 14:03:30, on 2008-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUpload...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

Re,

Supprime Kill_Adssite de ton pc ainsi que C:\kill.txt.
Recommence (même lien)

http://dcangeldark.googlepages.com/Kill_Adssite.zip

C:\WINDOWS\system32\adssite_sidebar.dll n'existe pas !
C:\WINDOWS\system32\gzmrt.dll - Trouve !
C:\WINDOWS\system32\gzmrt.dll - Erreur de Suppression !
C:\WINDOWS\system32\nsoC6.dll n'existe pas !
C:\WINDOWS\system32\nss131.dll n'existe pas !
C:\WINDOWS\system32\gzmrotate.dll n'existe pas !
C:\WINDOWS\system32\adssite_sidebar_uninstall.exe n'existe pas !
C:\WINDOWS\system32\adssite-remove.exe n'existe pas !
C:\WINDOWS\system32\adssite_sidebar.dll n'existe pas !
----------
C:\WINDOWS\system32\gzmrt.dll - Trouve !
C:\WINDOWS\system32\gzmrt.dll - Erreur de Suppression !
----------
C:\WINDOWS\system32\nsoC6.dll n'existe pas !
----------
C:\WINDOWS\system32\nss131.dll n'existe pas !
----------
C:\WINDOWS\system32\gzmrotate.dll n'existe pas !
----------
C:\WINDOWS\system32\adssite_sidebar_uninstall.exe n'existe pas !
----------
C:\WINDOWS\system32\adssite-remove.exe n'existe pas !
----------


Dsl du contretemps , je ne sais pas a quel fréquence tu viens. Merci de l'aide en passant.

Je passe quand je peux  

[#ff0000]Désactive tes protections résidentes (antivirus, Spybot...) ![/#f]

Télécharge Combofix ([#ff0000]sUBs[/#f]) sur ton Bureau.

Double clique sur combofix.exe afin de le lancer.

Tape sur la touche 1 (Yes) pour démarrer le scan.

Lorsque le scan sera complété, un rapport apparaîtra. Poste ce rapport dans ta prochaine réponse.

ComboFix 08-01-08.4 - Dave 2008-01-08 15:30:53.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.157 [GMT -5:00]
Running from: C:\Documents and Settings\Dave\Bureau\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\gzmrt.dll

.
((((((((((((((((((((((((((((( Fichiers créés 2007-12-08 to 2008-01-08 ))))))))))))))))))))))))))))))))))))
.

2008-01-08 15:30 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-08 09:29 . 2008-01-08 09:29 <REP> d-------- C:\Documents and Settings\Dave\Application Data\vlc
2008-01-07 07:28 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-01-06 17:46 . 2008-01-06 17:46 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\FaxCtr
2008-01-05 14:36 . 2008-01-05 14:36 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-05 13:52 . 2008-01-05 13:52 <REP> d-------- C:\Program Files\WON
2008-01-05 13:48 . 2008-01-05 13:52 <REP> d-------- C:\Program Files\Sierra
2008-01-05 10:56 . 2008-01-05 10:56 <REP> d-------- C:\Documents and Settings\Annie\Application Data\Symantec
2008-01-05 09:24 . 2008-01-05 09:25 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2008-01-05 09:24 . 2008-01-05 09:25 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF
2008-01-05 09:18 . 2008-01-05 09:18 <REP> d-------- C:\Documents and Settings\Dave\Application Data\Symantec
2008-01-05 09:14 . 2008-01-05 09:39 <REP> d-------- C:\Program Files\Norton AntiVirus
2008-01-05 09:14 . 2008-01-05 09:25 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2008-01-05 09:14 . 2008-01-05 09:25 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2008-01-05 09:14 . 2008-01-05 09:14 10,344 --a------ C:\WINDOWS\system32\drivers\symlcbrd.sys
2008-01-05 09:12 . 2008-01-05 09:25 <REP> d-------- C:\Program Files\Symantec
2008-01-05 09:12 . 2008-01-08 09:04 <REP> d-------- C:\Program Files\Fichiers communs\Symantec Shared
2008-01-05 09:12 . 2008-01-05 09:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Symantec
2008-01-04 11:35 . 2003-05-07 13:01 8,464 --a------ C:\WINDOWS\system32\sporder.dll
2008-01-04 10:45 . 2008-01-04 11:20 <REP> d-------- C:\Documents and Settings\Dave\Application Data\mIRC
2008-01-02 20:11 . 2008-01-08 12:11 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2008-01-02 20:11 . 2008-01-02 20:11 21,840 --a------ C:\WINDOWS\system32\SIntfNT.dll
2008-01-02 20:11 . 2008-01-02 20:11 17,212 --a------ C:\WINDOWS\system32\SIntf32.dll
2008-01-02 20:11 . 2008-01-02 20:11 12,067 --a------ C:\WINDOWS\system32\SIntf16.dll
2008-01-02 20:05 . 2008-01-02 20:11 35,950 --a------ C:\WINDOWS\DIIUnin.dat
2008-01-02 20:04 . 2008-01-02 20:04 102,400 --a------ C:\WINDOWS\DIIUnin.exe
2008-01-02 20:04 . 2008-01-02 20:04 2,829 --a------ C:\WINDOWS\DIIUnin.pif
2008-01-02 19:57 . 2008-01-08 12:13 <REP> d-------- C:\Program Files\Diablo II
2008-01-02 19:47 . 2008-01-02 19:47 <REP> d-------- C:\WINDOWS\Sun
2008-01-02 09:54 . 1998-11-12 12:13 667,136 --a------ C:\WINDOWS\system32\oik32.ocx
2008-01-02 09:54 . 2000-05-30 13:02 419,240 --a------ C:\WINDOWS\system32\vsflex7L.ocx
2008-01-02 09:54 . 1999-02-01 19:19 302,088 --a------ C:\WINDOWS\system32\Strip.ocx
2008-01-02 09:54 . 1999-01-07 09:19 187,392 --a------ C:\WINDOWS\system32\Slider.ocx
2008-01-02 09:54 . 1998-10-23 17:27 119,288 --a------ C:\WINDOWS\system32\LED.ocx
2008-01-02 09:54 . 2001-06-14 05:08 112,776 --a------ C:\WINDOWS\system32\mcast50.ocx
2008-01-02 09:54 . 1998-11-20 14:44 110,096 --a------ C:\WINDOWS\system32\Toggle.ocx
2008-01-02 09:54 . 2000-12-06 00:00 109,248 --a------ C:\WINDOWS\system32\Mswinsck.ocx
2008-01-02 09:54 . 1998-10-23 17:44 108,560 --a------ C:\WINDOWS\system32\NumLED.ocx
2008-01-02 09:54 . 2000-05-05 08:53 96,256 --a------ C:\WINDOWS\system32\Eplay32.dll
2008-01-02 09:48 . 1998-05-18 01:00 368,912 --a------ C:\WINDOWS\system32\vbar332.dll
2008-01-02 09:48 . 2001-10-05 21:02 143,360 --a------ C:\WINDOWS\system32\Stamin32.Dll
2008-01-02 09:48 . 2001-03-13 13:49 140,288 --a------ C:\WINDOWS\system32\COMDLG32.OCX
2008-01-02 09:48 . 2000-05-22 00:00 115,920 --a------ C:\WINDOWS\system32\Msinet.ocx
2008-01-02 09:26 . 2008-01-04 11:34 <REP> d-------- C:\Program Files\poc
2007-12-23 10:07 . 2007-12-23 10:07 <REP> d-------- C:\Program Files\Microprose
2007-12-23 09:42 . 2007-12-23 10:03 <REP> d-------- C:\Program Files\XoftSpy
2007-12-19 15:55 . 2007-12-19 15:55 <REP> d-------- C:\Program Files\GameSpy Arcade
2007-12-19 15:55 . 2007-12-19 15:55 <REP> d-------- C:\Documents and Settings\Dave\Application Data\Leadertech
2007-12-19 15:36 . 2007-12-19 15:36 <REP> d-------- C:\NeverwinterNights
2007-12-15 09:53 . 2007-12-15 09:53 <REP> d-------- C:\Program Files\Windows Media Connect 2
2007-12-15 09:51 . 2007-12-15 09:51 <REP> d-------- C:\WINDOWS\system32\LogFiles
2007-12-15 09:51 . 2007-12-15 09:52 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-12-11 17:34 . 2007-12-11 17:34 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-12-11 17:34 . 2007-12-11 17:34 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-12-11 15:28 . 2003-12-12 16:06 1,693,696 --a------ C:\WINDOWS\system32\ltclr13n.dll
2007-12-11 15:28 . 2003-11-04 15:11 155,648 --a------ C:\WINDOWS\system32\lftif13n.dll
2007-12-11 15:28 . 2003-11-04 15:10 98,304 --a------ C:\WINDOWS\system32\lffax13n.dll
2007-12-11 15:27 . 2004-05-14 16:53 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll
2007-12-11 15:27 . 2004-05-14 16:53 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll
2007-12-11 15:27 . 2004-05-14 16:53 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll
2007-12-11 15:27 . 2004-05-14 16:53 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll
2007-12-11 15:27 . 2004-01-12 02:09 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll
2007-12-11 15:27 . 2004-05-14 16:53 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll
2007-12-11 15:27 . 2003-11-04 15:10 69,632 --a------ C:\WINDOWS\system32\lfgif13n.dll
2007-12-11 15:27 . 2004-05-14 16:53 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll
2007-12-10 17:06 . 2007-12-11 19:16 <REP> d-------- C:\Program Files\DivX
2007-12-08 14:36 . 2007-12-08 14:37 <REP> d--h----- C:\WINDOWS\msdownld.tmp
2007-12-08 13:27 . 2007-12-08 13:28 <REP> d-------- C:\Program Files\3DO
2007-12-08 13:27 . 1998-10-29 16:45 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-12-08 11:48 . 2007-12-08 11:48 <REP> d-------- C:\Program Files\EA GAMES
2007-12-08 11:47 . 2005-02-26 00:34 442,368 -ra------ C:\WINDOWS\system32\vp6vfw.dll
2007-12-08 10:34 . 2007-12-08 10:34 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ParetoLogic Anti-Spyware
2007-12-08 10:28 . 2007-12-08 10:28 <REP> d-------- C:\WINDOWS\system32\config\systemprofile\Application Data\FaxCtr

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-08 14:03 --------- d-----w C:\Documents and Settings\Dave\Application Data\LimeWire
2008-01-08 13:18 --------- d-----w C:\Program Files\lx_cats
2008-01-06 19:36 --------- d-----w C:\Documents and Settings\Annie\Application Data\FaxCtr
2008-01-05 18:52 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-19 20:35 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2007-12-08 01:13 --------- d-----w C:\Program Files\Veoh Networks
2007-12-07 20:42 --------- d-----w C:\Program Files\CamStudio
2007-12-04 20:28 --------- d-----w C:\Program Files\Google
2007-12-04 03:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2007-12-04 03:05 --------- d-----w C:\Program Files\Java
2007-12-03 20:44 --------- d-----w C:\Documents and Settings\Dave\Application Data\FaxCtr
2007-12-02 21:22 --------- d-----w C:\Program Files\Microsoft LifeCam
2007-12-02 21:20 --------- d-----w C:\Program Files\Lexmark Toolbar
2007-12-02 21:19 --------- d-----w C:\Program Files\Lexmark 3400 Series
2007-12-02 21:18 --------- d-----w C:\Program Files\Lexmark Fax Solutions
2007-12-02 21:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\FaxCtr
2007-12-02 21:12 --------- d-----w C:\Program Files\Microsoft ActiveSync
2007-12-02 20:43 --------- d-----w C:\Program Files\LimeWire
2007-12-02 20:42 --------- d-----w C:\Program Files\Fichiers communs\Java
2007-12-02 20:21 --------- d-----w C:\Program Files\Ahead
2007-12-02 20:21 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ahead
2007-12-02 20:19 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2007-12-02 18:47 --------- d-----w C:\Program Files\Windows Live Toolbar
2007-12-02 18:46 --------- d-----w C:\Program Files\Windows Live Favorites
2007-12-02 18:46 --------- d-----w C:\Program Files\Windows Live
2007-12-02 18:45 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2007-12-02 18:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2007-12-02 16:13 --------- d-----w C:\Program Files\SystemRequirementsLab
2007-12-02 15:50 --------- d-----w C:\Program Files\microsoft frontpage
2007-12-02 15:48 --------- d-----w C:\Program Files\Services en ligne
2007-12-02 15:47 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-12-02 10:39 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
2007-12-02 10:39 --------- d-----w C:\Program Files\Fichiers communs\ODBC
2007-11-26 04:43 245,408 ----a-w C:\WINDOWS\system32\unicows.dll
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-25 14:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-22 08:39 267,272 ----a-w C:\WINDOWS\system32\xactengine2_10.dll
2007-10-22 08:37 17,928 ----a-w C:\WINDOWS\system32\X3DAudio1_2.dll
2007-10-18 16:31 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
2007-10-12 20:14 3,734,536 ----a-w C:\WINDOWS\system32\d3dx9_36.dll
2007-10-12 20:14 1,374,232 ----a-w C:\WINDOWS\system32\D3DCompiler_36.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 07:00 15360]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-12-03 13:21 3461120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-07-27 12:01 68096 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 17:14 8491008]
"nwiz"="nwiz.exe" [2007-10-04 17:14 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-10-04 17:14 81920]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"lxcymon.exe"="C:\Program Files\Lexmark 3400 Series\lxcymon.exe" [2006-01-25 11:02 286720]
"EzPrint"="C:\Program Files\Lexmark 3400 Series\ezprint.exe" [2006-02-07 00:10 98304]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2006-02-02 03:11 290816]
"LifeCam"="C:\Program Files\Microsoft LifeCam\LifeExp.exe" [2006-06-29 18:54 269104]
"VX3000"="C:\WINDOWS\vVX3000.exe" [2006-06-29 18:55 707376]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2005-09-17 09:27 52848]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 07:00 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04]

R0 viasraid;viasraid;C:\WINDOWS\system32\DRIVERS\viasraid.sys [2003-10-31 00:22]
R2 MSCamSvc;MSCamSvc;"C:\Program Files\Microsoft LifeCam\MSCamSvc.exe" [2006-06-29 18:54]
R3 lxcy_device;lxcy_device;C:\WINDOWS\system32\lxcycoms.exe [2006-02-20 14:23]

*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-01-05 14:20:52 C:\WINDOWS\Tasks\Norton AntiVirus - Run Full System Scan - Dave.job"
- C:\PROGRA~1\NORTON~1\Navw32.exeh/TASK:
"2008-01-01 23:00:00 C:\WINDOWS\Tasks\Pareto UNS.job"
- C:\Program Files\Fichiers communs\ParetoLogic\UUS\UUS.dll\Pareto_Update.exe
"2008-01-08 20:28:01 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2007-12-15 01:56:19 C:\WINDOWS\Tasks\XoftSpy.job"
- C:\Program Files\XoftSpy\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-08 15:33:44
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-08 15:34:17
ComboFix-quarantined-files.txt 2008-01-08 20:34:02
.
2008-01-07 13:07:22 --- E O F ---

C'est mieux ?

eh bien je nai pas revu encore la pub ou meme mes options internet re-ouvrir ......... Merci a toi !! Si jamais jai encore des problemes due a ca , je reviendrai. Merci beaucoup du temps et de l'aide que vous apportez !!!

Ok  

Télécharge ToolsCleaner sur ton Bureau.

Clique sur Recherche et laisse le scan se terminer.

Clique sur Suppression pour finaliser.

Clique sur Quitter, pour que le rapport puisse se créer.

Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\)

Désactive puis réactive la restauration du système : Voir aide

Ajoute maintenant [Résolu] au titre. Pour cela :
* Clique, dans ton premier message, sur le bouton "Editer"
* Rajoute la mention [Résolu] au titre
* Clique ensuite sur "Valider votre message"

Lis le dossier dossier sur la prévention et la protection pour ne plus avoir ce genre de problème en cliquant sur l'image ci-dessous :