Bonjour,je reviens vous voir car je viens d'être averti par avast d' un cheval de troie que j'ai placé en quarantaine win32:Agent EID[trj] D/antivirus spyware/avst keygen/keygen.exe donc j'ai fait un scan ewido el là ,à ma stupeur j'ai 43 fichiers infectés .Ainsi je me permet de vous adressé mes rapports ewido et highjack pour faire un diagnostic.Car je trouve que ma machine traine un peu de nouveau.D'avance je vous remercie dans l'attente d'une réponse.---------------------------------------------------------
ewido anti-malware - Rapport de connexion
---------------------------------------------------------
+ Créé le: 02:32:24, 23/01/2007
+ Somme de contrôle: 449A9465
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2869 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1028 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1037 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1038 0.0.0.0:0 LISTENING
TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING
TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING
TCP 127.0.0.1:12110 0.0.0.0:0 LISTENING
TCP 127.0.0.1:12119 0.0.0.0:0 LISTENING
TCP 127.0.0.1:12143 0.0.0.0:0 LISTENING
UDP 0.0.0.0:445
UDP 0.0.0.0:500
UDP 0.0.0.0:1032
UDP 0.0.0.0:1036
UDP 0.0.0.0:1048
UDP 0.0.0.0:1151
UDP 0.0.0.0:4500
UDP 90.2.204.49:123
UDP 90.2.204.49:1900
UDP 90.2.204.49:11410
UDP 90.2.204.49:35038
UDP 127.0.0.1:123
UDP 127.0.0.1:1033
UDP 127.0.0.1:1052
UDP 127.0.0.1:1059
UDP 127.0.0.1:1900
---------------------------------------------------------
ewido anti-malware - Rapport de démarrage
---------------------------------------------------------
+ Créé le: 02:31:50, 23/01/2007
+ Somme de contrôle: 52DB66C7
Reg\HKLM\Run WOOWATCH C:\PROGRA~1\Wanadoo\Watch.exe
Reg\HKLM\Run WOOTASKBARICON C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
Reg\HKLM\Run DSP24 Dsp24Set.exe /n
Reg\HKLM\Run avast! C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Reg\HKLM\Run EPSON Stylus DX4200 Series C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
Reg\HKLM\Run WinampAgent C:\Program Files\Winamp\winampa.exe
Reg\HKLM\Run Zone Labs Client C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
Reg\HKLM\Run QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottime
Reg\HKLM\Run iTunesHelper "C:\Program Files\iTunes\iTunesHelper.exe"
Reg\HKLM\Run ATICCC "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
Reg\HKLM\Run SunJavaUpdateSched "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
Reg\HKCU\Run CTFMON.EXE C:\WINDOWS\system32\ctfmon.exe
Reg\HKCU\Run WOOKIT C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
Reg\HKCU\Run MsnMsgr "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
ewido anti-malware - Rapport de scan
---------------------------------------------------------
+ Créé le: 02:30:16, 23/01/2007
+ Somme de contrôle: D71D4AF1
+ Résultats du scan:
HKLM\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7f3aad1e -> Adware.NavExcel : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7f3aad1e\5739e893 -> Adware.NavExcel : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7f3aad1e\5739e893\1d -> Adware.NavExcel : Nettoyer et sauvegarder
HKLM\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7f3aad1e\5739e893\1d\InvertDependencies -> Adware.NavExcel : Nettoyer et sauvegarder
:mozilla.8:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.9:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.10:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.11:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.12:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.13:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder
:mozilla.14:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder
:mozilla.15:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
:mozilla.31:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.32:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.33:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.34:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.35:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.36:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
:mozilla.37:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
:mozilla.38:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder
:mozilla.41:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Estat : Nettoyer et sauvegarder
:mozilla.47:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.48:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.49:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder
:mozilla.51:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder
:mozilla.59:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder
:mozilla.62:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.84:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.2o7 : Nettoyer et sauvegarder
:mozilla.96:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder
:mozilla.103:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyer et sauvegarder
:mozilla.114:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
:mozilla.115:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Adtech : Nettoyer et sauvegarder
:mozilla.118:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
:mozilla.119:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
:mozilla.120:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
:mozilla.121:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
:mozilla.122:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Advertising : Nettoyer et sauvegarder
:mozilla.128:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Falkag : Nettoyer et sauvegarder
:mozilla.129:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Ivwbox : Nettoyer et sauvegarder
:mozilla.130:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyer et sauvegarder
:mozilla.148:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyer et sauvegarder
:mozilla.183:C:\Documents and Settings\alex\Application Data\Mozilla\Firefox\Profiles\4srwazb3.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyer et sauvegarder
C:\Documents and Settings\alex\Cookies\alex@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyer et sauvegarder
::Fin du rapport---------------------------------------------------------
ewido anti-malware - Rapport des processus
---------------------------------------------------------
+ Créé le: 02:32:59, 23/01/2007
+ Somme de contrôle: 4B37760F
0: System Process
4: System Process
480: C:\Program Files\Canon\CAL\CALMAIN.exe
628: C:\WINDOWS\system32\Ati2evxx.exe
636: \SystemRoot\System32\smss.exe
720: \??\C:\WINDOWS\system32\csrss.exe
752: \??\C:\WINDOWS\system32\winlogon.exe
796: C:\WINDOWS\system32\services.exe
808: C:\WINDOWS\system32\lsass.exe
1064: C:\WINDOWS\system32\Ati2evxx.exe
1076: C:\WINDOWS\system32\svchost.exe
1084: C:\WINDOWS\system32\wuauclt.exe
1132: C:\WINDOWS\Explorer.EXE
1144: C:\WINDOWS\system32\svchost.exe
1184: C:\WINDOWS\System32\svchost.exe
1232: C:\WINDOWS\System32\svchost.exe
1284: C:\WINDOWS\System32\svchost.exe
1472: C:\WINDOWS\system32\spoolsv.exe
1596: C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
1624: C:\Program Files\Alwil Software\Avast4\ashServ.exe
1680: C:\Program Files\ewido anti-malware\ewidoctrl.exe
1776: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
1820: C:\WINDOWS\System32\svchost.exe
1884: C:\WINDOWS\system32\wdfmgr.exe
1920: C:\WINDOWS\system32\ZoneLabs\vsmon.exe
1968: C:\WINDOWS\system32\Dsp24Set.exe
1976: C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
2052: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
2072: C:\Program Files\Winamp\winampa.exe
2088: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
2100: C:\Program Files\QuickTime\qttask.exe
2116: C:\Program Files\iTunes\iTunesHelper.exe
2132: C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
2168: C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
2180: C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
2264: C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
2280: C:\WINDOWS\system32\ctfmon.exe
2352: C:\Program Files\MSN Messenger\MsnMsgr.Exe
2356: C:\WINDOWS\System32\alg.exe
2400: C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
2572: C:\PROGRA~1\Wanadoo\ComComp.exe
2604: C:\PROGRA~1\Wanadoo\Toaster.exe
2612: C:\PROGRA~1\Wanadoo\Inactivity.exe
2620: C:\PROGRA~1\Wanadoo\PollingModule.exe
2652: C:\Program Files\iPod\bin\iPodService.exe
2684: C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
2820: C:\WINDOWS\system32\WgaTray.exe
3280: C:\WINDOWS\System32\svchost.exe
3360: C:\PROGRA~1\Wanadoo\Watch.exe
3640: C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
3648: C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
3672: C:\WINDOWS\system32\LVComsX.exe
3920: C:\Program Files\ewido anti-malware\SecuritySuite.exe
Logfile of HijackThis v1.99.1
Scan saved at 02:42:58, on 23/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Dsp24Set.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\LVComsX.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\alex\Mes documents\Mes fichiers reçus\high jack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [DSP24] Dsp24Set.exe /n
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{6969B9C2-948D-40A6-9816-4A96AAC9D491}: NameServer = 80.10.246.2,80.10.246.129
O17 - HKLM\System\CCS\Services\Tcpip\..\{7EDA9965-C2A8-4794-8AC0-20CAF2CC0D0D}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Bah voilà pas mal de boulot pour vous je sais ,mais ce serait sympa de m'aider à déchiffrer tous ce papyrus afin d'en tirer un diagnostic mes chères docteurs.Encore merci pour aide.Le margouya Configuration: Windows XP sp2
Firefox 1.5.0.9 pc 2.6 ghz 1go ddr zone alarm +avast
