regedit

Le
michel
voici mon rapport hjt
tout mes logiciel de securiter son a jour je n ai aucun virus

Logfile of HijackThis v1.99.1
Scan saved at 11:17:40, on 2006-03-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesFichiers communsCommand Softwaredvpapi.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesQuickTimeqttask.exe
C:Program FilesMSN Messengermsnmsgr.exe
C:Program FilesZero KnowledgeFreedomFreedom.exe
C:Program FilesMSNMSNCoreFilesmsn.exe
C:Documents and Settingsmichel lafleurMes documentsMes
téléchargementshijackthisHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet Explorer,SearchURL =
http://www.google.ca/keyword/%s
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar =
http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page =
http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://sympatico.ca/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
http://www.google.ca/ie
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) =
http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = salut
STÉ, VAN, DIDI, MICHEL BONNE JOURNÉE
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat
7.0ActiveXAcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} -
C:Program FilesZero KnowledgeFreedompkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} -
C:Program FilesZero KnowledgeFreedomFreeBHOR.dll
O2 - BHO: Barre d'outils de MSN Recherche Helper -
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN Toolbar
SuiteTB2.05.0000.1082fr-camsntb.dll
O3 - Toolbar: Barre d'outils de MSN Recherche -
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN Toolbar
SuiteTB2.05.0000.1082fr-camsntb.dll
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe"
-atboottime
O4 - HKLM..Run: [Freedom] C:Program FilesZero
KnowledgeFreedomFreedom.exe
O4 - HKCU..Run: [msnmsgr] "C:Program FilesMSN Messengermsnmsgr.exe"
/background
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O8 - Extra context menu item: &Définition Encarta -
http://fr.ca.encarta.msn.com/encnet/features/dictionary/quickDictionary.htm
O8 - Extra context menu item: &MSN Recherche - res://C:Program FilesMSN
Toolbar SuiteTB2.05.0000.1082fr-camsntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan -
res://C:Program FilesMSN Toolbar
SuiteTAB2.05.0001.1119fr-camsntabres.dll/229?404bf9032e30456698e162bf72accede
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan -
res://C:Program FilesMSN Toolbar
SuiteTAB2.05.0001.1119fr-camsntabres.dll/230?404bf9032e30456698e162bf72accede
O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre -
C:WINDOWSwebOpenFrame.htm
O8 - Extra context menu item: Surligner en Vert -
C:WINDOWSwebMarqueurFluoGreen.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:Program FilesJavajre1.5.0_02binpjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program
FilesJavajre1.5.0_02binpjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -
%windir%bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -
{85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%bdoscandel.exe (file
missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} -
C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote K - IE
6.htm (HKCU)
O9 - Extra button: Dictionnaire - {FB4AE6A3-EE20-442c-9189-251885352358} -
C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote D - IE
6.htm (HKCU)
O9 - Extra button: Synonymes - {FDD637F8-2693-49ce-817E-1AD59574900C} -
C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote S - IE
6.htm (HKCU)
O9 - Extra button: Conjugueur - {FF229BEC-9E1F-48c1-99A6-AF34ABEFAB0A} -
C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote C - IE
6.htm (HKCU)
O9 - Extra button: Grammaire - {FFB5EE7F-726F-423e-83C2-572FE7CEB3F0} -
C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote G - IE
6.htm (HKCU)
O16 - DPF: TruePass EPF 7,0,100,717 -
https://blrscr3.egs-seg.gc.ca/applets/entrusttruepassapplet-epf.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) -
http://zone.msn.com/binFrameWork/v10/StagingUI.cab34120.cab
O16 - DPF: {09C6CAC0-936E-40A0-BC26-707480103DC3} -
http://www.uproar.com/applets/activex/shizmoo/flipside_web18.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient
Class) -
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkidH835
O16 - DPF: {23B1D1AE-A29F-4AE2-B76E-CAB6E14811C4} (DHCPConfiguration Class)
- http://eserv.sympatico.ca/netassistant/controls/BellCanadaPortalAX.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class)
- http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio
Conferencing) -
http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} (WildTangent Active
Launcher) - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) -
http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) -
http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {596AF4AC-40A0-474A-9F86-33F0A90F0FD6} (PictureItLauncher Class)
- http://photos.fr.msn.ca/resources/neutral/controls/DigWebX2.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://www.coupdepoucepc.com/scan8/oscan8.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) -
http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -
https://www.gamespyid.com/alaunch.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient
Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader
3.0 Control) - http://www.photolab.ca/fr/Photo/ImageUploader3.cab
O16 - DPF: {A243F6C2-34D2-4549-BCCD-A7BEF759B236} (Seekford Solutions,
Inc.'s ssiPictureUploader Control) -
http://img.funtigo.com/images/uploader/ssiPictureUploader.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) -
http://game12.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} -
http://threats.freedom.net/viruscenter/onlineviruscheck/cabs/cssweb.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class)
- http://zone.msn.com/bingame/zpagames/zpa_pool.cab36107.cab
O16 - DPF: {D57262F5-9637-4E67-BC59-88C53EA76FC3} (ULcontrol Control) -
http://pix.futureshop.ca/fr/ulcontrolxp.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) -
http://zone.msn.com/binframework/v10/StProxy.cab35645.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://www.iwin.com/global/premium/popcap/popcaploader_v6.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) -
http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {F04FE050-90DE-4EDD-A719-7CF3EBA4175E} (DetectCtl Class) -
http://centredetransition.sympatico.ca/systemdetect.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://chat.msn.com/bin/msnchat45.cab
O17 -
HKLMSystemCCSServicesTcpip..{F9EB01E4-6A17-4B01-A422-34300A4BF421}:
NameServer = 67.69.184.20 67.69.184.151
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
"C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:Program
FilesFichiers communsCommand Softwaredvpapi.exe



--
michel
  • Partager ce contenu :
Vos réponses
Trier par : date / pertinence
Claude LaFrenière
Le #1415131
Bonjour *michel* :

voici mon rapport hjt
tout mes logiciel de securiter son a jour je n ai aucun virus



Ordinateur infecté par WildTangent, ADW_GAMESPY.A, ADW_POP.A ...
+
tout un tas de trucs ± utiles...

Voir en premier lignes C), F), G)...

Refait un scan avec HijackThis, coche ces lignes et fait un FIX pour
les supprimer définitivement.

Voir aussi la note en bas de page...
----------------------------------------------------------------------------------------------------

*[W xp Mises à jour: OK]*

Logfile of HijackThis v1.99.1
Scan saved at 11:17:40, on 2006-03-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

===================================================================================================
*[Processus]*

En plus ou à la place du Gestionnaire des Tâches de W xp tu peux utiliser ceci:

Process Explorer de Mark Russinovich:
(un gestionnaire des tâches amélioré)
http://www.sysinternals.com/Utilities/ProcessExplorer.html

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe

----------------------------------------------------------------------------------------------------
*A)* Fiable ?

Va jeter un coup d'oeil de ce côté:
Logiciels antivirus et produits de sécurité
Par les participants du groupe alt.comp.virus.

http://www.claymania.com/anti-virus-fr.html

Anti-virus fournit par Bell Sympatico?
http://www.authentium.com/products/
C:Program FilesFichiers communsCommand Softwaredvpapi.exe
----------------------------------------------------------------------------------------------------
C:WINDOWSsystem32svchost.exe
C:WINDOWSExplorer.EXE
C:Program FilesQuickTimeqttask.exe
C:Program FilesMSN Messengermsnmsgr.exe
C:Program FilesZero KnowledgeFreedomFreedom.exe
C:Program FilesMSNMSNCoreFilesmsn.exe
C:Documents and Settingsmichel lafleurMes documentsMes téléchargementshijackthisHijackThis.exe

===================================================================================================
*[Démarrage]*

En plus de msconfig tu peux utiliser ces logiciels
pour avoir un meilleur contrôle sur ton système:

Starter de Code Stuff:
http://codestuff.mirrorz.com/

Pour certains cas spéciaux

{désactivation de certains éléments dans des
zones non-contrôlées par les autres outils}

avec

Autoruns de Sysinternals
http://www.sysinternals.com/Utilities/Autoruns.html
TOUT ce qui est lancé au démarrage.
Outil puissant : ne désactive ou ne supprime rien sans savoir...


R1 - HKCUSoftwareMicrosoftInternet Explorer,SearchURL = http://www.google.ca/keyword/%s
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://sympatico.ca/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.google.ca/ie
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = salut STÉ, VAN, DIDI, MICHEL BONNE JOURNÉE
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:Program FilesZero KnowledgeFreedompkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:Program FilesZero KnowledgeFreedomFreeBHOR.dll
O2 - BHO: Barre d'outils de MSN Recherche Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN Toolbar SuiteTB2.05.0000.1082fr-camsntb.dll
O3 - Toolbar: Barre d'outils de MSN Recherche - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN Toolbar SuiteTB2.05.0000.1082fr-camsntb.dll

----------------------------------------------------------------------------------------------------
*B)* Trucs divers...

Pas nécessaire de lancer ce truc à chaque démarrage pour utiliser Apple Quick Time.
Désactive.
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime

Utile ce machin ? à toi d'y voir...
O4 - HKLM..Run: [Freedom] C:Program FilesZero KnowledgeFreedomFreedom.exe

Pas nécessaire de lancer ce truc à chaque démarrage...
C'est ton choix...
O4 - HKCU..Run: [msnmsgr] "C:Program FilesMSN Messengermsnmsgr.exe" /background
----------------------------------------------------------------------------------------------------

O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present

O8 - Extra context menu item: &Définition Encarta - http://fr.ca.encarta.msn.com/encnet/features/dictionary/quickDictionary.htm
O8 - Extra context menu item: &MSN Recherche - res://C:Program FilesMSN Toolbar SuiteTB2.05.0000.1082fr-camsntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:Program FilesMSN Toolbar SuiteTAB2.05.0001.1119fr-camsntabres.dll/229?404bf9032e30456698e162bf72accede
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:Program FilesMSN Toolbar SuiteTAB2.05.0001.1119fr-camsntabres.dll/230?404bf9032e30456698e162bf72accede
O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - C:WINDOWSwebOpenFrame.htm
O8 - Extra context menu item: Surligner en Vert - C:WINDOWSwebMarqueurFluoGreen.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_02binnpjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_02binnpjpi150_02.dll

----------------------------------------------------------------------------------------------------
*C)* Truc étrange...

??? Quel est ce truc ???
Suggestion: si tu ne sais pas à quoi il sert, ne prend pas de chance et vire-le.
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%bdoscandel.exe (file missing)

----------------------------------------------------------------------------------------------------

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote K - IE 6.htm (HKCU)
O9 - Extra button: Dictionnaire - {FB4AE6A3-EE20-442c-9189-251885352358} - C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote D - IE 6.htm (HKCU)
O9 - Extra button: Synonymes - {FDD637F8-2693-49ce-817E-1AD59574900C} - C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote S - IE 6.htm (HKCU)
O9 - Extra button: Conjugueur - {FF229BEC-9E1F-48c1-99A6-AF34ABEFAB0A} - C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote C - IE 6.htm (HKCU)
O9 - Extra button: Grammaire - {FFB5EE7F-726F-423e-83C2-572FE7CEB3F0} - C:PROGRA~1DruideAntidoteAntidoteInternet Explorer6Antidote G - IE 6.htm (HKCU)

O16 - DPF: TruePass EPF 7,0,100,717 - https://blrscr3.egs-seg.gc.ca/applets/entrusttruepassapplet-epf.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab34120.cab
O16 - DPF: {09C6CAC0-936E-40A0-BC26-707480103DC3} - http://www.uproar.com/applets/activex/shizmoo/flipside_web18.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkidH835

----------------------------------------------------------------------------------------------------
*D)* Utilitaire inutile ?

Bidule du Kit de connexion de Bell Sympatico?
Je suis client de Bell Sympatico depuis des lunes et je n'ai jamais eu besoin de ce machin...
À toi de décider...
http://www1.sympatico.ca/help/local/bell/tools/netassistant_features.html
O16 - DPF: {23B1D1AE-A29F-4AE2-B76E-CAB6E14811C4} (DHCPConfiguration Class) - http://eserv.sympatico.ca/netassistant/controls/BellCanadaPortalAX.cab

----------------------------------------------------------------------------------------------------

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab

----------------------------------------------------------------------------------------------------
*E)* Jeux en ligne et... spyware!
Vire-le!
Refait un scan avec HijackThis, coche cette ligne et fait un "FIX"
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} (WildTangent Active Launcher) - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab

----------------------------------------------------------------------------------------------------

O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {596AF4AC-40A0-474A-9F86-33F0A90F0FD6} (PictureItLauncher Class) - http://photos.fr.msn.ca/resources/neutral/controls/DigWebX2.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.coupdepoucepc.com/scan8/oscan8.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab

----------------------------------------------------------------------------------------------------
*F)* ADW_GAMESPY.A

Vire ça !
Refait un scan avec HijackThis, coche cette ligne et fait un "FIX"
ADW_GAMESPY.A
http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME­W%5FGAMESPY%2EA
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - https://www.gamespyid.com/alaunch.cab

----------------------------------------------------------------------------------------------------

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.0 Control) - http://www.photolab.ca/fr/Photo/ImageUploader3.cab
O16 - DPF: {A243F6C2-34D2-4549-BCCD-A7BEF759B236} (Seekford Solutions, Inc.'s ssiPictureUploader Control) - http://img.funtigo.com/images/uploader/ssiPictureUploader.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game12.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} - http://threats.freedom.net/viruscenter/onlineviruscheck/cabs/cssweb.cab
O16 - DPF: {CAC181B0-4D70-402D-B571-C596A47D0CE0} (CBankshotZoneCtrl Class) - http://zone.msn.com/bingame/zpagames/zpa_pool.cab36107.cab
O16 - DPF: {D57262F5-9637-4E67-BC59-88C53EA76FC3} (ULcontrol Control) - http://pix.futureshop.ca/fr/ulcontrolxp.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab35645.cab

----------------------------------------------------------------------------------------------------
*G)* ADW_POP.A

Vire ça!
Refait un scan avec HijackThis, coche cette ligne et fait un "FIX"
ADW_POP.A
http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME­W%5FPOP%2EA
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.iwin.com/global/premium/popcap/popcaploader_v6.cab

----------------------------------------------------------------------------------------------------

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab

----------------------------------------------------------------------------------------------------
*H)* Utile ou pas ? laisse-le pour le moment...
Autre bidule Sympatico?
O16 - DPF: {F04FE050-90DE-4EDD-A719-7CF3EBA4175E} (DetectCtl Class) - http://centredetransition.sympatico.ca/systemdetect.cab

----------------------------------------------------------------------------------------------------

O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab

O17 - HKLMSystemCCSServicesTcpip..{F9EB01E4-6A17-4B01-A422-34300A4BF421}: NameServer = 67.69.184.20 67.69.184.151

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)

O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:Program FilesFichiers communsCommand Softwaredvpapi.exe

----------------------------------------------------------------------------------------------------

À consulter et conserver dans les Favoris:

Le "Safe-Hex" :
http://sebsauvage.net/safehex.html



Vire les cochoneries de ton PC, redémarre
et reviens-nous dire si tout est "OK"

[Sur le même fil de discussion s.v.p.]

P.S.:

Ce serait plus facile avec un client Nntp (lecteur de "news")
plutôt que de passer par le site web.

Voici comment faire avec Outlook Express:
http://support.microsoft.com/default.aspx?scidfh;FR;NEWSGROUPOE

http://perso.wanadoo.fr/doc.jm/Config_NewsGroups.htm
http://perso.wanadoo.fr/doc.jm/Utiliser_NewsGroups.htm
+
ceci :
OE-QuoteFix:
http://home.in.tum.de/~jain/software/oe-quotefix/

OU

Mes News :
http://www.mesnews.net/index.php

40tude Dialog:
http://www.40tude.com/dialog/

Les 2 gratuits et en français.


:)
--
Claude LaFrenière [mvp] :-{

«My Principal Design Was To Inform, Not To Amuse Thee.»
Lemuel Gulliver, The Travels (IV:12)

Poster une réponse
Anonyme