Voici l'autre rapport de hijackthis.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:30:54, on 15/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20733)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\Windows\System32\VisualTaskTips.exe
C:\Program Files\styler\Styler.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\PROGRA~1\DVDREG~1\DVDRegionFree.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Ultimate Edition
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\styler\TB\StylerTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKLM\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKLM\..\Run: [VisualTaskTips] C:\Windows\System32\VisualTaskTips.exe
O4 - HKLM\..\Run: [Vistadrv] C:\WINDOWS\system32\Vistadrive\vsdrv.exe
O4 - HKLM\..\Run: [Styler] C:\Program Files\styler\Styler.exe
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSection nLite.inf,C (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) -
http://fichiers.touslesdrivers.com/...
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
ep44 tout d'abord je te remercie de m'avoir repondu aussi vite. Je me sens beaucoup moins seul face a ce probleme. Donc merci...
Comme tu me la demander j'ai effectuer le rapport, je te le copie à la suite. Merci
# Rapport Lopxp fait le 15/03/2008 à 0:49:14
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.09 - Maj du 28/02/2008
Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\iexplore.exe" (1308)
"C:\Program Files\Internet Explorer\iexplore.exe" (2272)
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (1188)
========== Listing des dossiers Application Data
+- C:\Documents and Settings\Administrateur\Application Data
2008-03-14 à 18:32:32 - Adobe
2008-03-04 à 15:12:44 - FileZilla
2008-02-13 à 05:33:44 - Google
2008-03-06 à 11:48:11 - HPAppData
2008-02-09 à 12:21:52 - Identities
2008-03-09 à 12:38:30 - Lavasoft
2008-02-09 à 12:35:05 - ma-config.com
2008-02-09 à 12:29:44 - Macromedia
2008-02-20 à 21:47:15 - Microsoft
2008-02-13 à 00:01:04 - Real
2008-03-02 à 19:09:39 - SoftwareSiteEggs
2008-02-09 à 12:22:11 - Styler
2008-03-10 à 20:37:02 - Teleca
2008-02-14 à 10:33:16 - vlc
2008-02-09 à 12:48:30 - WinRAR
2008-02-09 à 13:04:04 - Xentient
+- C:\Documents and Settings\Administrateur\Local Settings\Application Data
2008-02-09 à 13:28:45 - Axialis
2008-02-21 à 17:11:56 - Google
2008-03-05 à 20:03:15 - HP
2008-02-09 à 16:24:40 - looknstop
2008-03-14 à 18:39:37 - Microsoft
2008-03-06 à 19:21:28 - Microsoft Games
2008-03-10 à 20:55:51 - Paint.NET
+- C:\Documents and Settings\All Users\Application Data
2008-03-14 à 18:32:32 - Adobe
2008-02-12 à 23:58:17 - Google
2008-03-02 à 19:09:18 - great coal love default
2008-03-05 à 19:49:34 - Hewlett-Packard
2008-03-05 à 19:05:49 - HP
2008-03-05 à 19:05:04 - HP Product Assistant
2008-03-05 à 19:07:20 - HPSSUPPLY
2008-02-12 à 23:20:44 - Macrovision
2008-03-14 à 17:35:58 - Messenger Plus!
2008-02-09 à 12:57:43 - Microsoft
2008-03-10 à 20:33:34 - Sony Ericsson
2008-03-14 à 22:00:56 - Spybot - Search & Destroy
2008-03-10 à 20:33:25 - Teleca
2008-03-05 à 19:51:13 - WEBREG
2007-08-17 à 22:22:00 - Windows Genuine Advantage
2008-02-09 à 12:06:23 - WindowsLiveInstaller
2008-03-03 à 11:39:54 - WLInstaller
+- C:\Documents and Settings\Default User\Application Data
2005-08-23 à 22:36:20 - Microsoft
+- C:\Documents and Settings\Default User\Local Settings\Application Data
2008-02-09 à 11:51:55 - Microsoft
========== Listing du dossier Program Files
+- C:\Program Files
2008-03-09 à 18:33:27 - Ad-Aware
2008-02-12 à 23:13:46 - Adobe
2008-02-09 à 13:01:15 - Alwil Software
2007-05-03 à 22:38:56 - AusLogics Disk Defrag
2007-09-18 à 13:02:37 - CCleaner
2008-02-09 à 12:18:19 - Cener Development
2008-02-09 à 12:05:56 - Compare It!
2008-02-09 à 11:48:44 - ComPlus Applications
2008-02-09 à 13:03:56 - DivX
2008-02-09 à 13:11:32 - DVD Region+CSS Free
2008-03-12 à 19:43:42 - eMule
2007-07-16 à 00:24:03 - Everest
2008-03-10 à 20:32:50 - Fichiers communs
2008-02-12 à 13:59:25 - FileZilla Client
2007-08-14 à 01:53:24 - FoxitReader
2008-02-09 à 15:31:17 - Free.fr
2008-02-12 à 23:58:16 - Google
2008-03-05 à 19:04:13 - Hewlett-Packard
2008-03-05 à 19:07:20 - HP
2006-06-14 à 17:46:21 - IE Privacy Keeper
2008-03-06 à 22:46:05 - InstallShield Installation Information
2008-02-13 à 02:03:00 - Internet Explorer
2008-02-09 à 13:05:13 - Ligos
2008-03-14 à 23:49:28 - Lopxp
2008-02-09 à 12:34:53 - ma-config.com
2008-02-10 à 10:54:04 - Macrogaming
2008-03-14 à 17:42:05 - Messenger Plus! Live
2008-03-06 à 22:46:05 - Micro Application
2008-02-09 à 12:59:03 - Microsoft Office
2008-03-12 à 02:40:48 - MSN Messenger
2008-02-09 à 12:04:28 - MSXML 4.0
2008-02-09 à 12:21:26 - MSXML 6.0
2008-02-09 à 12:05:01 - Nero
2008-02-09 à 13:04:03 - NimoCodec Pack
2007-03-18 à 21:42:40 - Occtpt
2008-02-09 à 11:50:04 - Outlook Express
2007-06-16 à 21:48:23 - Paint.NET
2008-02-21 à 17:11:20 - Picasa2
2008-02-09 à 13:59:36 - PopCap Games
2008-02-12 à 23:57:38 - Real
2008-02-09 à 12:45:10 - Realtek AC97
2004-08-04 à 14:19:03 - Soft4Ever
2008-03-02 à 19:09:02 - SoftwareSiteEggs
2008-03-10 à 20:32:27 - Sony Ericsson
2007-09-17 à 22:31:19 - Spybot
2008-03-09 à 02:45:05 - Spybot - Search & Destroy
2008-02-09 à 12:22:13 - Styler
2006-07-05 à 02:20:04 - TweakRAM
2007-07-13 à 22:36:48 - UberIcon
2008-02-09 à 12:21:46 - Uninstall Information
2008-02-09 à 13:06:23 - VideoLAN
2007-08-12 à 14:28:27 - Windows Defender
2008-02-11 à 20:03:20 - Windows Live
2008-02-09 à 11:48:11 - Windows Media Connect 2
2008-02-09 à 11:51:59 - Windows Media Player
2008-02-09 à 12:05:23 - Windows Sidebar
2008-02-09 à 11:50:33 - WindowsUpdate
2007-07-20 à 20:16:35 - WinRAR
2008-02-11 à 01:52:06 - Zuma Deluxe
========== Tâches planifiées
AF27CA3B91887C0B.job: c:\docume~1\admini~1\applic~1\softwa~1\third way rdr.exe
MP Scheduled Scan.job: C:\Program Files\Windows Defender\MpCmdRun.exe Scan -RestrictPrivileges
========== Clés registre
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Love default global mess"="C:\Documents and Settings\All Users\Application Data\great coal love default\manager poke.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GplAim"="C:\DOCUME~1\ADMINI~1\APPLIC~1\SOFTWA~1\BALM ONCE.exe"
========== Bloqueur popups Internet Explorer
www.host-domain-lookup.com
mysearchnow.com
www.mysearchnow.com
========== Suggestion ( /!\ Nécessite une interprétation.) ==========
C:\Documents and Settings\Administrateur\Application Data\SoftwareSiteEggs
C:\Documents and Settings\All Users\Application Data\great coal love default
C:\Program Files\SoftwareSiteEggs
C:\WINDOWS\tasks\AF27CA3B91887C0B.job
+- Registre:
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Love default global mess"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GplAim"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow]
"host-domain-lookup.com"=-
"www.host-domain-lookup.com"=-
"mysearchnow.com"=-
"www.mysearchnow.com"=-
- Fin du rapport -