Twitter iPhone pliant OnePlus 11 PS5 Disney+ Orange Livebox Windows 11

hijackthis pour jack MVP

2 réponses
Avatar
fastkoala
salut,
voici le rapport hijack pour ma page de d=E9marrage=20
impossible =E0 m'en d=E9barrasser de la pub:

Logfile of HijackThis v1.97.7
Scan saved at 23:22:01, on 24/04/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec=20
Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec=20
Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec=20
Shared\ccProxy.exe
C:\Program Files\Norton Internet Security\Norton=20
AntiVirus\navapsvc.exe
C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\AOL 8.0\aoltray.exe
C:\Program Files\Fichiers communs\Symantec=20
Shared\SNDSrvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Norton Internet Security\Norton=20
AntiVirus\SAVScan.exe
C:\Program Files\AOL 8.0\waol.exe
C:\Program Files\AOL 8.0\shellmon.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\Messenger\msmsgs.exe
C:\DOCUME~1\dara\LOCALS~1\Temp\Rar$EX00.698\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=20
=3D3D http://aifind.i=3D nfo/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search=20
Bar =3D3D forum.par=3D isiran.com/v8/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search=20
Page =3D3D forum.pa=3D risiran.com/v8/
R1 - HKCU\Software\Microsoft\Internet=20
Explorer\Search,SearchAssistant =3D3D re=3D=20
s://C:\WINDOWS\System32\bndb.dll/sp.html (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search=20
Bar =3D3D res://C:\=3D WINDOWS\System32\bndb.dll/sp.html=20
(obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search=20
Page =3D3D res://C:=3D \WINDOWS\System32\bndb.dll/sp.html=20
(obfuscated)
R0 - HKLM\Software\Microsoft\Internet=20
Explorer\Search,SearchAssistant =3D3D re=3D=20
s://C:\WINDOWS\System32\bndb.dll/sp.html (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) =3D3D http:=3D //www.google.fr/keyword/%s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local=20
Page =3D3D forum.par=3D isiran.com/v8/
R1 - HKCU\Software\Microsoft\Internet=20
Explorer\Main,HomeOldSP =3D3D about:blan=3D k
R0 - HKCU\Software\Microsoft\Internet=20
Explorer\Toolbar,LinksFolderName =3D3D L=3D iens
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\Program Fi=3D les\Adobe\Acrobat 6.0
\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {99BF375F-2BA0-4C92-B550-
FE147D73D63C} - C:\WINDOWS\Sy=3D stem32\bndb.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-
298DDF1699E1} - C:\Progra=3D m Files\Fichiers=20
communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
FADC6B084872} - C:\Program F=3D iles\Norton Internet=20
Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-
00A0C9082467} - C:\WINDO=3D WS\System32\msdxm.ocx
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-
A37C9A5676A7} - C:\Pr=3D ogram Files\Fichiers=20
communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-
7859DF00B1D6} - C:=3D \Program Files\Norton Internet=20
Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program=20
Files\Alcatel\Spe=3D edTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers=20
communs\Symantec Shared=3D \ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton=20
Internet Security\U=3D rlLstCk.exe
O4 - Global Startup: AOL 8.0 Ic=3DF4ne AOL.lnk =3D3D=20
C:\Program Files\AOL 8.0\ao=3D ltray.exe
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: DigiChat Applet -=20
http://bedehi.de/DigiChat/DigiClasses/Client_IE=3D .cab
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE}=20
(TDServer Control) - http:=3D //api.ehmel.hachette-
multimedia.fr/ehm/includes/js/tdserver.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61}=20
(HouseCall Control) -=20
http=3D ://a840.g.akamai.net/7/840/537/2004033001/housecall.a
ntivirus.com/housecall/=3D xscan53.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove=20
Control) - http://=3D=20
www.nick.com/common/groove/gx/GrooveAX25.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}=20
(Shockwave Flash Object) -=3D=20
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{81AA8911-CC47-
4EAF-9CFA-90F2E07B6D6=3D B}: NameServer =3D3D 205.188.146.146


=E0 noter que "forum.parisiran.com/v8/" c'est la page que je=20
veux en tentant le changement dans la BDR.=20
merci d'avance pour tous r=E9ponses.

2 réponses

Avatar
JacK [MVP]
sur les news:53fc01c42ce8$e4db0410$
fastkoala signalait:
salut,
voici le rapport hijack pour ma page de démarrage
impossible à m'en débarrasser de la pub:


A supprimer :


R1 - HKCUSoftwareMicrosoftInternet Explorer,SearchURL
= http://aifind.i= nfo/
R1 - HKCUSoftwareMicrosoftInternet
ExplorerSearch,SearchAssistant = re > s://C:WINDOWSSystem32bndb.dll/sp.html (obfuscated)
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search
Bar = res://C:= WINDOWSSystem32bndb.dll/sp.html
(obfuscated)
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search
Page = res://C:= WINDOWSSystem32bndb.dll/sp.html
(obfuscated)
R0 - HKLMSoftwareMicrosoftInternet
ExplorerSearch,SearchAssistant = re > s://C:WINDOWSSystem32bndb.dll/sp.html (obfuscated)
R1 - HKCUSoftwareMicrosoftInternet
ExplorerMain,HomeOldSP = about:blan= k
R0 - HKCUSoftwareMicrosoftInternet
ExplorerToolbar,LinksFolderName = L= iens
O2 - BHO: (no name) - {99BF375F-2BA0-4C92-B550-
FE147D73D63C} - C:WINDOWSSy= stem32bndb.dll
O4 - Global Startup: AOL 8.0 Icône AOL.lnk =
C:Program FilesAOL 8.0ao= ltray.exe

à noter que "forum.parisiran.com/v8/" c'est la page que je
veux en tentant le changement dans la BDR.
merci d'avance pour tous réponses.
--

http://www.optimix.be.tf /MVP WindowsXP/ http://websecurite.org
http://www.msmvps.com/XPditif/
http://experts.microsoft.fr/longhorn4u/
*Helping you void your warranty since 2000*
---***ANTISPAM***---
Click on the link to anwer -Cliquez sur le lien pour répondre
http://www.cerbermail.com/?csaLJS6yvZ
@(*0*)@ JacK

Avatar
fastkoala
merci!
je vais donc faire cette suppression chez moi.
;-)

-----Message d'origine-----
sur les news:53fc01c42ce8$e4db0410$
fastkoala signalait:
salut,
voici le rapport hijack pour ma page de démarrage
impossible à m'en débarrasser de la pub:


A supprimer :


R1 - HKCUSoftwareMicrosoftInternet Explorer,SearchURL
= http://aifind.i= nfo/
R1 - HKCUSoftwareMicrosoftInternet
ExplorerSearch,SearchAssistant = re=
s://C:WINDOWSSystem32bndb.dll/sp.html (obfuscated)
R1 - HKLMSoftwareMicrosoftInternet
ExplorerMain,Search


Bar = res://C:= WINDOWSSystem32bndb.dll/sp.html
(obfuscated)
R1 - HKLMSoftwareMicrosoftInternet
ExplorerMain,Search


Page = res://C:= WINDOWSSystem32bndb.dll/sp.html
(obfuscated)
R0 - HKLMSoftwareMicrosoftInternet
ExplorerSearch,SearchAssistant = re=
s://C:WINDOWSSystem32bndb.dll/sp.html (obfuscated)
R1 - HKCUSoftwareMicrosoftInternet
ExplorerMain,HomeOldSP = about:blan= k
R0 - HKCUSoftwareMicrosoftInternet
ExplorerToolbar,LinksFolderName = L= iens
O2 - BHO: (no name) - {99BF375F-2BA0-4C92-B550-
FE147D73D63C} - C:WINDOWSSy= stem32bndb.dll
O4 - Global Startup: AOL 8.0 Icône AOL.lnk =
C:Program FilesAOL 8.0ao= ltray.exe

à noter que "forum.parisiran.com/v8/" c'est la page que
je


veux en tentant le changement dans la BDR.
merci d'avance pour tous réponses.
--

http://www.optimix.be.tf /MVP WindowsXP/
http://websecurite.org

http://www.msmvps.com/XPditif/
http://experts.microsoft.fr/longhorn4u/
*Helping you void your warranty
since 2000*

---
***ANTISPAM***---

Click on the link to anwer -Cliquez sur le lien pour
répondre

http://www.cerbermail.com/?csaLJS6yvZ
@(*0*)@ JacK


.