Ordi qui rame [Résolu]

Salut,
ça ne sert à rien de dormater parcequ'un ordi rame ..
Est tu bien proteger anti virus + pare feu ?
Telecharger ces logiciels gratuit puis fait un scan avec chacuns d'eux:

SpyBot - Search & Destroy en français: http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/26157.html

a² free: Contre les trojans et malware.
http://www.01net.com/telecharger/windows/Utilitaire/antivirus/fiches/26618.html

Ad-Aware SE Personal:(en anglais)
http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/11643.html
-Le patch pour le faire fonctionner en français:
http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/25543.html

Ensuite si ça ne fonctionne toujours pas:
telecharge ce logiciel, installe le dans son propre dossier, choisis l'option 1, puis copie et colle ici le rapport, qu'il va te generer.

HijackThis:
http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/29061.html

Quel est ta config?? et ramez-t-il deja avant??

je pense que tu as des virus il faut formater ton disque dur et reinstallez windows

Bein deja essaye de scanner ton ordi avec un antivirus et sinon comme dit sebiseb, c'est surment du a un virus!!

Tu peux aussi essayer de le défragmenter, mais je ne te promet rien!
Clique droit sur ton disque C:/ -> Propriétés -> Outils -> Défragmenter Maintenant

Essaye ca ne coute rien ...

Oui c'est vrai que formater est la solution la plus radicale mais essaye d'abord les programmes proposer par boulepate comme j'ai dis avant ca ne coute rien d'essayer avant de formater on ne sait jamais !

j'adore faut formater il existe plein de methode avant d'avoir recours au formatage et ce meme avec un ecran bleu

Bonjour à tous
merci pour vos bons conseils
mon ordo semble ramer un peu moins, mais les fenêtres que j'ouvre lorsque je les referment elles se ferment par morceaux.
j'ai kaperski comme anti virus est t'il bon et vous qu'avez vous comme antivirus.
j'ai aussi un autre problème a chaque fois que je vai sur le net il y a plein de fenêtres de pub de casino qui s'ouvrent que faut il faire?
j'ai fais un scan avec mon ordi si vous voyez quelque chose qui ne va pas , moi je ne comprend rien . merci A+ Delphine **** Run Keys ****

RUN: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
RUN: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
RUN: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
RUN: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
RUN: [WinampAgent] C:\Program Files\Winamp\winampa.exe
RUN: [adiras] adiras.exe
RUN: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
RUN: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
RUN: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
RUN: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
RUN: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
RUN: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
RUN: [KAVPersonal50] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kav.exe" /minimize
RUN: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
RUN: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
RUN: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized


**** Browser Helper Objects ****

BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
BHO: [AcroIEHlprObj Class] C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar1.dll


**** IE Toolbars ****

TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Google] c:\program files\google\googletoolbar1.dll


**** IE Extensions ****

IEExt: [@shdoclc.dll,-866]
IEExt: [Messenger] C:\Program Files\Messenger\MSMSGS.EXE


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 localhost


**** IE Settings ****

Default Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Local Page: C:\WINDOWS\System32\blank.htm
Search Bar: http://www.wanadoo.fr/go/page_recherche/
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch


**** IE Context Menu (Right click) ****

IEContext: [&Traduire à partir de l'anglais] res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IEContext: [Pages liées] res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IEContext: [Pages similaires] res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IEContext: [Recherche &Google] res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IEContext: [Version de la page actuelle disponible dans le cache Google] res://c:\program files\google\GoogleToolbar1.dll/cmcache.html


**** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] SEQPACKET 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] DATAGRAM 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] SEQPACKET 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] DATAGRAM 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] SEQPACKET 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] DATAGRAM 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] SEQPACKET 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] DATAGRAM 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] DATAGRAM 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] DATAGRAM 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] SEQPACKET 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] DATAGRAM 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] SEQPACKET 10
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] DATAGRAM 10


**** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No


**** Downloaded Program Files ****

DirectAnimation Java Classes [file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
Yahoo! Chat [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab]
{0594AF7E-573B-40DF-8165-E47AB2EAEFE8} [http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab] C:\WINDOWS\System32\eglivecam_1028.dll C:\WINDOWS\System32\EGAUTH.dll
{0B682CC1-FB40-4006-A5DD-99EDD3C9095D} [http://www.thepaymentcentre.com/build/vbiewer.cab]
{1D6711C8-7154-40BB-8380-3DEA45B69CBF} []
{2B323CD9-50E3-11D3-9466-00A0C9700498} [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab] C:\WINDOWS\Downloaded Program Files\avsniff.dll
{469C7080-8EC8-43A6-AD97-45848113743C} [http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab]
{511F9316-771B-4953-A268-1C36DA667FE9} [http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{71CBDCD9-0830-4470-A890-35D364DA352C} [http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab]
{917623D1-D8E5-11D2-BE8B-00104B06BDE3} [http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx]
{95460ABD-946A-46FF-9F56-268718323EEE} [http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab]
{9F1C11AA-197B-4942-BA54-47A8489BB47F} [http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37865.3030902778]
{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} [http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab]
{C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]
{D670D0B3-05AB-4115-9F87-D983EF1AC747} [http://photos02.aol.fr/ygp/aol/plugin/download/YGPPicDownload.fr-FR.9.1.6.18.cab]
{F00F4763-7355-4725-82F7-0DA94A256D46} [http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab]


**** Windows Services ****

[Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
[ALG] %SystemRoot%\System32\alg.exe
[AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
[Ati HotKey Poller] %SystemRoot%\System32\Ati2evxx.exe
[ATI Smart] C:\WINDOWS\system32\ati2sgag.exe
[AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
[CiSvc] %SystemRoot%\system32\cisvc.exe
[ClipSrv] %SystemRoot%\system32\clipsrv.exe
[COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
[CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
[dmadmin] %SystemRoot%\System32\dmadmin.exe /com
[dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
[ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[Eventlog] %SystemRoot%\system32\services.exe
[EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
[FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
[helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
[ImapiService] C:\WINDOWS\System32\imapi.exe
[Ip6FwHlp] %SystemRoot%\System32\svchost.exe -k netsvcs
[kavsvc] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kavsvc.exe"
[lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
[LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
[Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
[mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
[MSDTC] C:\WINDOWS\System32\msdtc.exe
[MSIServer] C:\WINDOWS\System32\msiexec.exe /V
[NetDDE] %SystemRoot%\system32\netdde.exe
[NetDDEdsdm] %SystemRoot%\system32\netdde.exe
[Netlogon] %SystemRoot%\System32\lsass.exe
[Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
[Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
[NtLmSsp] %SystemRoot%\System32\lsass.exe
[NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[PlugPlay] %SystemRoot%\system32\services.exe
[Pml Driver HPZ12] C:\WINDOWS\System32\HPZipm12.exe
[PolicyAgent] %SystemRoot%\System32\lsass.exe
[ProtectedStorage] %SystemRoot%\system32\lsass.exe
[RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
[RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
[RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
[RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[RpcLocator] %SystemRoot%\System32\locator.exe
[RpcSs] %SystemRoot%\system32\svchost -k rpcss
[RSVP] %SystemRoot%\System32\rsvp.exe
[SamSs] %SystemRoot%\system32\lsass.exe
[SCardDrv] %SystemRoot%\System32\SCardSvr.exe
[SCardSvr] %SystemRoot%\System32\SCardSvr.exe
[Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
[seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
[Spooler] %SystemRoot%\system32\spoolsv.exe
[srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
[SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
[stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
[SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{26790C32-D2FF-44F3-8933-D5857D14371C}
[SysmonLog] %SystemRoot%\system32\smlogsvc.exe
[TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[TermService] %SystemRoot%\System32\svchost.exe -k netsvcs
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
[TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
[uploadmgr] %SystemRoot%\System32\svchost.exe -k netsvcs
[upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
[UPS] %SystemRoot%\System32\ups.exe
[VSS] %SystemRoot%\System32\vssvc.exe
[W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
[WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
[winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
[WMDM PMSP Service] C:\WINDOWS\System32\MsPMSPSv.exe
[WmdmPmSp] %SystemRoot%\System32\svchost.exe -k netsvcs
[WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
[WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs


**** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm


**** Complete IE Options ****

IEOPT: [NoUpdateCheck]
IEOPT: [NoJITSetup]
IEOPT: [Disable Script Debugger] yes
IEOPT: [Show_ChannelBand] No
IEOPT: [Anchor Underline] yes
IEOPT: [Cache_Update_Frequency] Once_Per_Session
IEOPT: [Display Inline Images] yes
IEOPT: [Do404Search]
IEOPT: [Local Page] C:\WINDOWS\System32\blank.htm
IEOPT: [Save_Session_History_On_Exit] no
IEOPT: [Show_FullURL] no
IEOPT: [Show_StatusBar] yes
IEOPT: [Show_ToolBar] yes
IEOPT: [Show_URLinStatusBar] yes
IEOPT: [Show_URLToolBar] yes
IEOPT: [Start Page] http://www.wanadoo.fr
IEOPT: [Use_DlgBox_Colors] yes
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [FullScreen] no
IEOPT: [Window_Placement] ,
IEOPT: [Window Title] Wanadoo
IEOPT: [NotifyDownloadComplete] no
IEOPT: [Use FormSuggest] no
IEOPT: [Error Dlg Displayed On Every Error] no
IEOPT: [AddToFavoritesExpanded]
IEOPT: [Search Bar] http://www.wanadoo.fr/go/page_recherche/
IEOPT: [Use Custom Search URL]
IEOPT: [Check_Associations] no
IEOPT: [HistoryViewType]
IEOPT: [HistoryTopNSitesView]
IEOPT: [Enable Browser Extensions] yes
IEOPT: [Save Directory] C:\Documents and Settings\del.mick\Mes documents\
IEOPT: [Default_Page_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Enable_Disk_Cache] yes
IEOPT: [Cache_Percent_of_Disk]
IEOPT: [Delete_Temp_Files_On_Exit] yes
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm
IEOPT: [Anchor_Visitation_Horizon]
IEOPT: [Use_Async_DNS] yes
IEOPT: [Placeholder_Width]
IEOPT: [Placeholder_Height]
IEOPT: [Start Page] http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IEOPT: [CompanyName] Microsoft Corporation
IEOPT: [Custom_Key] MICROSO
IEOPT: [Wizard_Version] 6.00.2800.1017
IEOPT: [FullScreen] no
IEOPT: [BigBitmap] C:\PROGRA~1\WANADOO\static38.bmp
IEOPT: [SmallBitmap] C:\PROGRA~1\WANADOO\static22.bmp

Salut,
Pour ton probleme d'internet, telecharge Firefox, c'est 100x mieux qu'internet explorer et ca devrait te bloquer pas mal de pop-up.
c u
Ludovic

salut

récupere Hijack this (http://www.infos-du-net.com/telecharger/HijackThis.html)
fait un scan
puis colle moi le log...(complet)
t'as effectivement des trucs pas clair sur a bécane (par ex : RUN: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess ).
on va essayer d'y voir clair


bye

boujour à tous
excusez moi pour le retard mais je n'arrivais plus a me conecter sur le net. j'ai toujours les même problèmes! et toujours ces pub de casino qui se mette sur mon ordi qt je navigue sur le net
merci d'avance pour votre aide
a+delphine.

voici mon dernier scan.

**** Run Keys ****

RUN: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
RUN: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
RUN: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
RUN: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
RUN: [WinampAgent] C:\Program Files\Winamp\winampa.exe
RUN: [adiras] adiras.exe
RUN: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
RUN: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
RUN: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
RUN: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
RUN: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
RUN: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
RUN: [KAVPersonal50] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kav.exe" /minimize
RUN: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
RUN: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
RUN: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized


**** Browser Helper Objects ****

BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
BHO: [AcroIEHlprObj Class] C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar1.dll


**** IE Toolbars ****

TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Google] c:\program files\google\googletoolbar1.dll


**** IE Extensions ****

IEExt: [Messenger] C:\Program Files\Messenger\MSMSGS.EXE


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 localhost


**** IE Settings ****

Default Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Local Page: C:\WINDOWS\System32\blank.htm
Search Bar: http://www.wanadoo.fr/go/page_recherche/
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch


**** IE Context Menu (Right click) ****

IEContext: [&Traduire à partir de l'anglais] res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IEContext: [Pages liées] res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IEContext: [Pages similaires] res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IEContext: [Recherche &Google] res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IEContext: [Version de la page actuelle disponible dans le cache Google] res://c:\program files\google\GoogleToolbar1.dll/cmcache.html


**** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] SEQPACKET 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{CAA96AFB-7E10-4AB5-B646-F8E4CEF4F4DC}] DATAGRAM 12
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] SEQPACKET 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BAF8D74E-E47B-4A1A-BCD2-E123A5607374}] DATAGRAM 11
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] SEQPACKET 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{932F6941-2C3F-4C09-A4B2-D31F9F20E8AF}] DATAGRAM 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{5589F2D7-2FE8-4D5C-98BA-58656A016FA6}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] SEQPACKET 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E230F31C-2929-4CBD-B192-973FC9918E76}] DATAGRAM 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{580BC633-43D0-447D-AD06-3E38142CE299}] DATAGRAM 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6F27C9DC-9368-4BBA-9110-705F022F7CBB}] DATAGRAM 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{556FF6CA-DAA8-46DD-A348-639D895FB5E3}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0E38500-B4E2-4F87-8ED8-9D1A3F614E0A}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9804E36A-74A7-4B07-901B-029193480161}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{91FD5E67-7F7A-4096-AA8C-54282A233A91}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] SEQPACKET 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2CCD8A98-B404-477E-A964-C14273696EB5}] DATAGRAM 9
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] SEQPACKET 10
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}] DATAGRAM 10


**** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No


**** Downloaded Program Files ****

DirectAnimation Java Classes [file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
Yahoo! Chat [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab]
{0594AF7E-573B-40DF-8165-E47AB2EAEFE8} [http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab] C:\WINDOWS\System32\eglivecam_1028.dll C:\WINDOWS\System32\EGAUTH.dll
{1D6711C8-7154-40BB-8380-3DEA45B69CBF} []
{2B323CD9-50E3-11D3-9466-00A0C9700498} [http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab] C:\WINDOWS\Downloaded Program Files\avsniff.dll
{469C7080-8EC8-43A6-AD97-45848113743C} [http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab]
{511F9316-771B-4953-A268-1C36DA667FE9} [http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{71CBDCD9-0830-4470-A890-35D364DA352C} [http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab]
{917623D1-D8E5-11D2-BE8B-00104B06BDE3} [http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx]
{95460ABD-946A-46FF-9F56-268718323EEE} [http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab]
{9F1C11AA-197B-4942-BA54-47A8489BB47F} [http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37865.3030902778]
{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} [http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab]
{C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} [http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]
{D670D0B3-05AB-4115-9F87-D983EF1AC747} [http://photos02.aol.fr/ygp/aol/plugin/download/YGPPicDownload.fr-FR.9.1.6.18.cab]
{F00F4763-7355-4725-82F7-0DA94A256D46} [http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab]


**** Windows Services ****

[Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
[ALG] %SystemRoot%\System32\alg.exe
[AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
[Ati HotKey Poller] %SystemRoot%\System32\Ati2evxx.exe
[ATI Smart] C:\WINDOWS\system32\ati2sgag.exe
[AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
[CiSvc] %SystemRoot%\system32\cisvc.exe
[ClipSrv] %SystemRoot%\system32\clipsrv.exe
[COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
[CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
[dmadmin] %SystemRoot%\System32\dmadmin.exe /com
[dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
[ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[Eventlog] %SystemRoot%\system32\services.exe
[EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
[FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
[helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
[ImapiService] C:\WINDOWS\System32\imapi.exe
[Ip6FwHlp] %SystemRoot%\System32\svchost.exe -k netsvcs
[kavsvc] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kavsvc.exe"
[lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
[LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
[Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
[mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
[MSDTC] C:\WINDOWS\System32\msdtc.exe
[MSIServer] C:\WINDOWS\System32\msiexec.exe /V
[NetDDE] %SystemRoot%\system32\netdde.exe
[NetDDEdsdm] %SystemRoot%\system32\netdde.exe
[Netlogon] %SystemRoot%\System32\lsass.exe
[Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
[Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
[NtLmSsp] %SystemRoot%\System32\lsass.exe
[NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[PlugPlay] %SystemRoot%\system32\services.exe
[Pml Driver HPZ12] C:\WINDOWS\System32\HPZipm12.exe
[PolicyAgent] %SystemRoot%\System32\lsass.exe
[ProtectedStorage] %SystemRoot%\system32\lsass.exe
[RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
[RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
[RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
[RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[RpcLocator] %SystemRoot%\System32\locator.exe
[RpcSs] %SystemRoot%\system32\svchost -k rpcss
[RSVP] %SystemRoot%\System32\rsvp.exe
[SamSs] %SystemRoot%\system32\lsass.exe
[SCardDrv] %SystemRoot%\System32\SCardSvr.exe
[SCardSvr] %SystemRoot%\System32\SCardSvr.exe
[Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
[seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
[Spooler] %SystemRoot%\system32\spoolsv.exe
[srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
[SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
[stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
[SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{26790C32-D2FF-44F3-8933-D5857D14371C}
[SysmonLog] %SystemRoot%\system32\smlogsvc.exe
[TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[TermService] %SystemRoot%\System32\svchost.exe -k netsvcs
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
[TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
[uploadmgr] %SystemRoot%\System32\svchost.exe -k netsvcs
[upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
[UPS] %SystemRoot%\System32\ups.exe
[VSS] %SystemRoot%\System32\vssvc.exe
[W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
[WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
[winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
[WMDM PMSP Service] C:\WINDOWS\System32\MsPMSPSv.exe
[WmdmPmSp] %SystemRoot%\System32\svchost.exe -k netsvcs
[WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
[WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs


**** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm


**** Complete IE Options ****

IEOPT: [NoUpdateCheck]
IEOPT: [NoJITSetup]
IEOPT: [Disable Script Debugger] yes
IEOPT: [Show_ChannelBand] No
IEOPT: [Anchor Underline] yes
IEOPT: [Cache_Update_Frequency] Once_Per_Session
IEOPT: [Display Inline Images] yes
IEOPT: [Do404Search]
IEOPT: [Local Page] C:\WINDOWS\System32\blank.htm
IEOPT: [Save_Session_History_On_Exit] no
IEOPT: [Show_FullURL] no
IEOPT: [Show_StatusBar] yes
IEOPT: [Show_ToolBar] yes
IEOPT: [Show_URLinStatusBar] yes
IEOPT: [Show_URLToolBar] yes
IEOPT: [Start Page] http://www.wanadoo.fr
IEOPT: [Use_DlgBox_Colors] yes
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [FullScreen] no
IEOPT: [Window_Placement] ,
IEOPT: [Window Title] Wanadoo
IEOPT: [NotifyDownloadComplete] no
IEOPT: [Use FormSuggest] no
IEOPT: [Error Dlg Displayed On Every Error] no
IEOPT: [AddToFavoritesExpanded]
IEOPT: [Check_Associations] no
IEOPT: [HistoryViewType]
IEOPT: [HistoryTopNSitesView]
IEOPT: [Save Directory] C:\Documents and Settings\del.mick\Mes documents\
IEOPT: [Search Bar] http://www.wanadoo.fr/go/page_recherche/
IEOPT: [Use Custom Search URL]
IEOPT: [Default_Page_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IEOPT: [Enable_Disk_Cache] yes
IEOPT: [Cache_Percent_of_Disk]
IEOPT: [Delete_Temp_Files_On_Exit] yes
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm
IEOPT: [Anchor_Visitation_Horizon]
IEOPT: [Use_Async_DNS] yes
IEOPT: [Placeholder_Width]
IEOPT: [Placeholder_Height]
IEOPT: [Start Page] http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IEOPT: [CompanyName] Microsoft Corporation
IEOPT: [Custom_Key] MICROSO
IEOPT: [Wizard_Version] 6.00.2800.1017
IEOPT: [FullScreen] no
IEOPT: [BigBitmap] C:\PROGRA~1\WANADOO\static38.bmp
IEOPT: [SmallBitmap] C:\PROGRA~1\WANADOO\static22.bmp

boujour a tous
j'ai suivi vos conceils et j'ai fait un scan, mais je n'y comprnds rien
merci a+ delphine

Logfile of HijackThis v1.99.1
Scan saved at 22:55:31, on 21/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWISVC.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\WANADOO\CnxMon.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PUSAS.EXE
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Micro Application\Sécurité Internet\Anti-Hacker\KAVPF.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\PROGRA~1\WANADOO\EspaceWanadoo.exe
C:\PROGRA~1\WANADOO\ComComp.exe
C:\PROGRA~1\WANADOO\Watch.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\del.mick\Local Settings\Temporary Internet Files\Content.IE5\DO6M14FG\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Panicware BHO Class - {00000000-6C30-11D8-9363-000AE6309658} - C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWIBHO.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Pop-Up Stopper Anti-Spyware Toolbar - {E4CAA75E-9B5F-45EB-8E4E-8B743B44F171} - C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWITB.DLL
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kav.exe" /minimize
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Pop-Up_Stopper_Anti-Spyware] C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PUSAS.EXE
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Anti-Hacker.lnk = ?
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {71CBDCD9-0830-4470-A890-35D364DA352C} - http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://floridakeysmedia.tv/axiscam/Codebase/AxisCamControl.ocx
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D670D0B3-05AB-4115-9F87-D983EF1AC747} (AOL Downloader Plugin) - http://photos02.aol.fr/ygp/aol/plugin/download/YGPPicDownload.fr-FR.9.1.6.18.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{396B56AD-EBBF-4A10-9BEA-25ADFB17DF54}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Micro Application\Sécurité Internet\Anti-Virus\kavsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Pop-Up Stopper Anti-Spyware Service (PWISVC) - Panicware, Inc. - C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\PWISVC.EXE

salut execute hijack clike sur le 2 eme bouton ensuite selectiones et fix ces ligne :

R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [WMCRRS] C:\WINDOWS\System32\WMCRRS.EXE
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1068.dll,InstantAccess
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1022_FR_XP.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
O16 - DPF: {71CBDCD9-0830-4470-A890-35D364DA352C} - http://scripts.downloadv3.com/binaries/P2EClient/EGAUTH_1047_FR_XP.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
O16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - http://scripts.downloadv3.com/binaries/IA/sysinetsvc32_FR_XP.cab

cherche et supprime ces fichiers :
WMCRRS.EXE
EGDACCESS_1068.dll

lance les antispyware (adaware, spybot...ect)
redemaree refait un hijack et colle le resultat ici

@+++++

je crois que plusieure page internette reste ouvert et ca fait ce que tu vois sur ton ordie essai de la restaurer dans accessoire systeme restore a un point inferieure juste avant que est ses problemes ca devrait regler tout essais. tu ne perdras pas tes document ou autre fichier.

ray54 le message date de 2005^^