Blocage intempestif

rebonsoir
le souci qui reste et que si je clique sur une page proposée par google ma requête tourne en rond ou est redirigée sur une page "untitled document".
il y a t-il encore un intrus?
merci
trk64

aucun peripheriques de branché à part imprimante!
si les cracks sont des logiciels craqués : non aucun
le keygens ? kesako !
trk64

non jamais utilisé ces bêtes là !

quand aux intrus j'en ai un qui essaye de se connecter au site http://new.snappyads.biz/bc/2ndtier.php
et qui reçoit un message d'erreur

Error - Ads need to be loaded from adcode, if you keep getting this error contact your account rep.

ce n'est pas encore tout à fait fini
merci de ton attention
trk64

lorsque j'essaye de me connecter a partit du lien que tu as inscrit la connexion échoue, à partir de google également, et si j'inscris le site dans la barre d'adresse le site http://new.snappyads.biz/bc/2ndtier.php s'ouvre !! (lui qui provoque habituellement un message d'erreur !

la question reste comment aller chercher RSIT
A+
trk64

je n'ai pas ces possibilités !

nous sommes deja vendredi, j'irai charger tout à l'heure avec ma cle l'executable et je reprends contact
merci encore et à tout à l'heure
trk64

bonjour gen hackman,
1er rapport:
Logfile of random's system information tool 1.05 (written by random/random)
Run by pc1 at 2009-01-23 15:00:24
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 33 GB (56%) free of 60 GB
Total RAM: 959 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:00:27, on 23/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\regsvr32.exe
C:\Documents and Settings\All Users\Application Data\1703809370\1772966743.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\Shared Files\CamTray.exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\Program Files\Antivirus 2009\av2009.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\pc1\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\pc1.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr/kit/adsl/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: &Research - {0B014B81-4E12-46F9-806F-55867AF8FD3C} - C:\WINDOWS\system32\winsystems.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {47ed7374-bfa5-e213-cb5a-3e0e2c314f48} - (no file)
O2 - BHO: snappyads browser enhancer - {4D8EC7B6-CF12-5E24-72F9-5351E46FDB3D} - C:\WINDOWS\system32\raqlibvxfkbbmor.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: mysidesearch search enhancer - {821C0CA7-CD11-B822-C30B-782701B3EADE} - C:\WINDOWS\system32\qqjopbabehabn.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [mmbjovmcuegp] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\raqlibvxfkbbmor.dll"
O4 - HKLM\..\Run: [1772966743] "C:\Documents and Settings\All Users\Application Data\1703809370\1772966743.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [72759833816116209266957809127997] C:\Program Files\Antivirus 2009\av2009.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe

2ème rapport:

info.txt logfile of random's system information tool 1.05 2009-01-23 15:00:30

======Uninstall list======

-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->MsiExec.exe /I{8A42F680-2DD6-11D4-9A8C-0040F6982C20}
-->MsiExec.exe /I{A2529672-574A-4A99-86A5-C1770A0E31FE}
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2C81600D-D6C7-4687-9362-DD4A78B3483E}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\SETUP.EXE" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Abacast Client-->C:\PROGRA~1\Abacast\UNWISE.EXE C:\PROGRA~1\Abacast\client.LOG
Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
Apple Mobile Device Support-->MsiExec.exe /I{AA9768AA-FF0B-4C66-A085-31E934F77841}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Barre d'outils MSN-->C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\mtbs.exe c
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Brother MFL-Pro Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D83BD5E2-5AF4-49F6-B5C1-484A9760E73D}\Setup.exe" -l0x40c Brunin03.dllBrunin03.dll
Canon Camera Access Library-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CAL\Uninst.ini"
Canon Camera Support Core Library-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CSCLIB\Uninst.ini"
Canon Camera Window DC_DV 5 for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC\Uninst.ini"
Canon Camera Window DC_DV 6 for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.ini"
Canon Camera Window MC 6 for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowMC\Uninst.ini"
Canon G.726 WMP-Decoder-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\G726Decoder\G726DecUnInstall.ini"
CANON iMAGE GATEWAY Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CRWUnInstall.ini"
Canon Internet Library for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\CIGUnInstall.ini"
Canon MovieEdit Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\MVWUninst.ini"
Canon RAW Image Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\RAW Image Task\Uninst.ini"
Canon RemoteCapture Task for ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureTask DC\Uninst.ini"
Canon Utilities EOS Utility-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\EOS Utility\Uninst.ini"
Canon Utilities PhotoStitch-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini"
Canon Utilities ZoomBrowser EX-->"C:\Program Files\Fichiers communs\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini"
Contextual Tool Snappyads-->C:\WINDOWS\system32\cont_snappyads-remove.exe
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Creative Photo Calendar-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2C81600D-D6C7-4687-9362-DD4A78B3483E}\setup.exe" -l0x40c /remove
Creative Photo Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{513D9FB1-27A2-44E4-8F2D-77A6737921A5}\setup.exe" -l0x40c /remove
Creative Software AutoUpdate-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88B1984E-36F0-47B8-B8DC-728966807A9C}\SETUP.EXE" -l0x40c /remove
Creative System Information-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x40c /remove
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
ECONOMISEUR ECRAN Screen Saver-->C:\WINDOWS\ECONOMISEUR ECRAN.scr /u
eMule-->"C:\Documents and Settings\pc1\Mes documents\claire\eMule\Uninstall.exe"
eMusic - 50 Free MP3 offer-->"C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe"
FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
Glary Utilities 2.9.0.518-->"C:\Program Files\Glary Utilities\unins000.exe"
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Google Toolbar for Firefox-->MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
iTunes-->MsiExec.exe /I{41B9E2CF-0B3F-442A-B5B3-592A4A355634}
J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
KhalSetup-->MsiExec.exe /I{EE7B9A8D-19F0-450D-8E94-3E391E6044CD}
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire 4.16.7-->"C:\Program Files\LimeWire\uninstall.exe"
Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\SETUP.exe" -l0x40c UNINSTALL -removeonly
Logitech SetPoint-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x40c -removeonly
Macromedia Flash Player-->MsiExec.exe /X{4ecaf021-478c-40c1-b777-3368a15f9966}
Macromedia FlashPaper 2-->MsiExec.exe /X{F977FD4B-C9A6-4BAA-B4BB-DE3023288253}
Manuel d'utilisation de Creative Live! Cam Voice (Français)-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\Creative Live! Cam Voice\Manuel d'utilisation de Creative Live! Cam Voice\French\CTManual.isu"
Microsoft Office 2000 Premium-->MsiExec.exe /I{0000040C-78E1-11D2-B60F-006097C998E7}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works 7.0-->MsiExec.exe /I{64D114CE-4234-45C2-B60A-2B07D5A48F72}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953155)-->"C:\WINDOWS\$NtUninstallKB953155$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
muvee autoProducer 4.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{76B78008-3832-42FD-AE55-C8F946ED3C7E}\Setup.exe" -l0x40c
Navilog1 3.7.1-->"C:\Program Files\Navilog1\unins000.exe"
OpenOffice.org 1.9.79-->MsiExec.exe /I{D64CB110-5067-460E-A19C-8C2C6856D494}
Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
PaperPort-->MsiExec.exe /I{A17EABB6-D0C6-44E5-820C-72DC7F495064}
Performance Dashboard Snappyads-->C:\WINDOWS\system32\uszbhzdieezeg.exe
PhotoFiltre-->"C:\Documents and Settings\pc1\Mes documents\Mes logiciels\PhotoFiltre\Uninst.exe"
Picture Package Music Transfer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CE2121C6-C94D-4A73-8EA4-6943F33EE335}\setup.exe" -l0x40c /removeonly /cont -removeonly
Picture Package-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E2F8AE3-3437-44E6-BB75-E95751D6B83F}\setup.exe" -l0x40c UNINSTALL
Pinnacle InstantCD/DVD Suite-->MsiExec.exe /I{A01872BE-2123-4F1B-B295-E3D1774DC0C9}
QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
S3 S3Display-->vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Display'
S3 S3Gamma2-->vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Gamma2'
S3 S3Info2-->vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Info2'
S3 S3Overlay-->vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Overlay'
Search Assistant Mysidesearch-->C:\WINDOWS\system32\qqjopbabehabn.dll-uninst.exe
SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
U3Launcher-->MsiExec.exe /I{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}
UltimateZip 2.7-->"C:\Program Files\UltimateZip 2.7\unins000.exe"
UniChrome IGP Driver and Utilities-->C:\PROGRA~1\S3Inc\S3\s3setvga.exe -s -fC:\PROGRA~1\S3Inc\S3\S3.uns
Utilitaire Effets vidéos avancés-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D0803DB-8FC8-4C97-AE1F-1C3DCA357B01}\setup.exe" -l0x40c /remove
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
VideoLAN VLC media player 0.8.6b-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp Remote-->"C:\Program Files\Winamp Remote\uninstall.exe"
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: AVG Anti-Virus Free (outdated)

System event log

Computer Name: TUREK
Event Code: 7023
Message: Le service Explorateur d'ordinateur s'est arrêté avec l'erreur :
Cette opération s'est terminée car le délai d'attente a expiré.


Record Number: 246670728
Source Name: Service Control Manager
Time Written: 20081223092405.000000+060
Event Type: erreur
User:

Computer Name: TUREK
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 246670727
Source Name: Service Control Manager
Time Written: 20081223092405.000000+060
Event Type: Informations
User:

Computer Name: TUREK
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

Record Number: 246670726
Source Name: Service Control Manager
Time Written: 20081223092023.000000+060
Event Type: Informations
User:

Computer Name: TUREK
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Services Terminal Server.

Record Number: 246670725
Source Name: Service Control Manager
Time Written: 20081223092023.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: TUREK
Event Code: 7036
Message: Le service avast! Mail Scanner est entré dans l'état : en cours d'exécution.

Record Number: 246670724
Source Name: Service Control Manager
Time Written: 20081223092023.000000+060
Event Type: Informations
User:

Application event log

Computer Name: TUREK
Event Code: 0
Message:
Record Number: 5
Source Name: gusvc
Time Written: 20080822085722.000000+120
Event Type: Informations
User:

Computer Name: TUREK
Event Code: 1002
Message: L'environnement s'est arrêté de façon inattendue et Explorer.exe a redémarré.

Record Number: 4
Source Name: Winlogon
Time Written: 20080821131519.000000+120
Event Type: Informations
User:

Computer Name: TUREK
Event Code: 0
Message:
Record Number: 3
Source Name: gusvc
Time Written: 20080821131448.000000+120
Event Type: Informations
User:

Computer Name: TUREK
Event Code: 1002
Message: L'environnement s'est arrêté de façon inattendue et Explorer.exe a redémarré.

Record Number: 2
Source Name: Winlogon
Time Written: 20080819092356.000000+120
Event Type: Informations
User:

Computer Name: TUREK
Event Code: 0
Message:
Record Number: 1
Source Name: gusvc
Time Written: 20080819092306.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=0a00
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip

-----------------EOF-----------------

merci
A+
trk64

les attaques ont repris, l'ecran se bloque de nouveau :-[
je garde espoir, pour repondre à ta question: personne ne m'aide par ailleurs

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : pc1 ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus Free 8.0 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:58 Go (Free:32 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:131 Go (Free:113 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 23/01/2009|16:43 )

--------------------\\ Listing des dossiers dans APPLIC~1

[22/01/2009|23:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[05/03/2007|15:55] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla

[27/09/2008|19:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[20/01/2009|11:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\1703809370
[22/04/2008|13:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/12/2007|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[25/12/2007|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[22/01/2009|23:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[04/11/2005|10:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Brother
[20/07/2007|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2009|22:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[30/01/2007|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[22/12/2007|09:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[23/11/2008|03:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[24/07/2006|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[15/12/2008|20:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OrbNetworks
[04/11/2005|10:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[02/10/2008|08:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[09/06/2006|13:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[14/12/2008|12:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\U3
[30/04/2007|11:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[06/02/2008|09:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[09/08/2005|15:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[23/01/2009|01:35] C:\DOCUME~1\leopold\APPLIC~1\Adobe
[30/10/2007|10:17] C:\DOCUME~1\leopold\APPLIC~1\Logitech
[08/09/2007|16:00] C:\DOCUME~1\leopold\APPLIC~1\Macromedia
[22/01/2009|23:10] C:\DOCUME~1\leopold\APPLIC~1\Microsoft
[15/09/2008|22:49] C:\DOCUME~1\leopold\APPLIC~1\Mozilla
[22/03/2008|18:17] C:\DOCUME~1\leopold\APPLIC~1\Sun

[22/01/2009|23:10] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[22/01/2009|23:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[27/04/2008|15:45] C:\DOCUME~1\pc1\APPLIC~1\Adobe
[26/01/2007|09:14] C:\DOCUME~1\pc1\APPLIC~1\AdobeUM
[25/12/2007|16:07] C:\DOCUME~1\pc1\APPLIC~1\Apple Computer
[22/01/2009|23:54] C:\DOCUME~1\pc1\APPLIC~1\AVGTOOLBAR
[07/11/2005|20:58] C:\DOCUME~1\pc1\APPLIC~1\Brother
[24/07/2006|19:49] C:\DOCUME~1\pc1\APPLIC~1\Creative
[12/03/2008|16:30] C:\DOCUME~1\pc1\APPLIC~1\digital publishing
[30/04/2007|12:27] C:\DOCUME~1\pc1\APPLIC~1\DivX
[04/09/2006|11:18] C:\DOCUME~1\pc1\APPLIC~1\EoRezo
[09/01/2009|11:56] C:\DOCUME~1\pc1\APPLIC~1\GlarySoft
[06/04/2007|20:01] C:\DOCUME~1\pc1\APPLIC~1\Google
[20/02/2006|09:59] C:\DOCUME~1\pc1\APPLIC~1\Help
[25/05/2007|12:49] C:\DOCUME~1\pc1\APPLIC~1\Identities
[09/08/2005|11:06] C:\DOCUME~1\pc1\APPLIC~1\Lavasoft
[21/09/2006|20:57] C:\DOCUME~1\pc1\APPLIC~1\Leadertech
[15/01/2009|23:57] C:\DOCUME~1\pc1\APPLIC~1\LimeWire
[27/10/2007|19:08] C:\DOCUME~1\pc1\APPLIC~1\Logitech
[30/01/2007|19:20] C:\DOCUME~1\pc1\APPLIC~1\Macromedia
[01/01/2008|15:20] C:\DOCUME~1\pc1\APPLIC~1\Microsoft
[04/12/2006|20:09] C:\DOCUME~1\pc1\APPLIC~1\Microsoft Web Folders
[05/09/2008|08:49] C:\DOCUME~1\pc1\APPLIC~1\Mozilla
[30/09/2005|20:33] C:\DOCUME~1\pc1\APPLIC~1\MSNInstaller
[26/07/2006|13:52] C:\DOCUME~1\pc1\APPLIC~1\muvee Technologies
[19/12/2005|11:20] C:\DOCUME~1\pc1\APPLIC~1\ntr
[04/03/2008|10:11] C:\DOCUME~1\pc1\APPLIC~1\OpenOffice.org1.9.79
[05/09/2005|19:34] C:\DOCUME~1\pc1\APPLIC~1\Real
[26/12/2005|11:50] C:\DOCUME~1\pc1\APPLIC~1\ScanSoft
[14/04/2007|11:05] C:\DOCUME~1\pc1\APPLIC~1\SecondLife
[23/01/2009|01:42] C:\DOCUME~1\pc1\APPLIC~1\Skype
[23/08/2006|18:37] C:\DOCUME~1\pc1\APPLIC~1\Sony Corporation
[11/09/2006|09:32] C:\DOCUME~1\pc1\APPLIC~1\Steinberg
[09/08/2005|13:36] C:\DOCUME~1\pc1\APPLIC~1\Sun
[14/05/2007|18:35] C:\DOCUME~1\pc1\APPLIC~1\TaoUSign
[13/09/2005|20:12] C:\DOCUME~1\pc1\APPLIC~1\Template
[22/01/2009|21:03] C:\DOCUME~1\pc1\APPLIC~1\U3
[10/03/2007|19:04] C:\DOCUME~1\pc1\APPLIC~1\vlc
[14/12/2008|12:22] C:\DOCUME~1\pc1\APPLIC~1\Winamp
[02/08/2008|14:44] C:\DOCUME~1\pc1\APPLIC~1\ZoomBrowser EX


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[23/01/2009 14:58][--a------] C:\WINDOWS\tasks\GlaryInitialize.job
[17/01/2009 23:17][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[23/01/2009 14:58][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[17/02/2007|16:57] C:\Program Files\3B Software
[09/11/2005|16:30] C:\Program Files\Abacast
[28/06/2008|08:46] C:\Program Files\Adobe
[19/01/2007|09:34] C:\Program Files\Alwil Software
[22/01/2009|15:28] C:\Program Files\Antivirus 2009
[27/09/2008|19:37] C:\Program Files\Apple Software Update
[09/01/2009|11:56] C:\Program Files\AskSearch
[20/01/2009|21:56] C:\Program Files\AVG
[27/09/2008|19:39] C:\Program Files\Bonjour
[04/11/2005|10:56] C:\Program Files\Brother
[10/10/2006|21:29] C:\Program Files\Canon
[25/07/2006|13:49] C:\Program Files\Common Files
[23/01/2009|01:35] C:\Program Files\Creative
[12/03/2008|16:51] C:\Program Files\digital publishing
[12/01/2009|15:03] C:\Program Files\DivX
[09/06/2006|12:15] C:\Program Files\Easy Cleaner
[23/01/2009|01:35] C:\Program Files\eoRezo
[23/01/2009|01:35] C:\Program Files\Fichiers communs
[22/01/2009|23:07] C:\Program Files\FindyKill
[09/01/2009|11:55] C:\Program Files\Glary Utilities
[02/08/2008|13:48] C:\Program Files\Google
[23/01/2009|01:35] C:\Program Files\InstallShield Installation Information
[07/01/2009|11:17] C:\Program Files\Internet Explorer
[27/09/2008|19:39] C:\Program Files\iPod
[27/09/2008|19:39] C:\Program Files\iTunes
[07/06/2007|12:16] C:\Program Files\Java
[23/01/2009|01:35] C:\Program Files\Kap.GRETests
[09/08/2005|11:06] C:\Program Files\Lavasoft
[08/06/2008|11:28] C:\Program Files\LimeWire
[27/10/2007|18:59] C:\Program Files\Logitech
[10/05/2008|17:48] C:\Program Files\Macromedia
[07/01/2009|11:19] C:\Program Files\Messenger
[04/12/2006|20:09] C:\Program Files\microsoft frontpage
[22/12/2007|09:35] C:\Program Files\Microsoft Office
[04/12/2006|20:11] C:\Program Files\Microsoft Visual Studio
[22/12/2007|09:35] C:\Program Files\Microsoft Works
[01/09/2005|10:26] C:\Program Files\modem ADSL USB
[07/01/2009|11:17] C:\Program Files\Movie Maker
[23/01/2009|16:39] C:\Program Files\Mozilla Firefox
[22/12/2007|09:35] C:\Program Files\MSBuild
[30/09/2005|20:32] C:\Program Files\MSN
[01/10/2005|15:33] C:\Program Files\MSN Apps
[09/08/2005|15:26] C:\Program Files\MSN Gaming Zone
[09/06/2007|14:40] C:\Program Files\MSN Messenger
[24/07/2006|19:32] C:\Program Files\muvee Technologies
[23/01/2009|01:35] C:\Program Files\Navilog1
[07/01/2009|11:16] C:\Program Files\NetMeeting
[09/08/2005|15:27] C:\Program Files\Online Services
[09/08/2005|11:07] C:\Program Files\OpenOffice.org 1.9.79
[07/01/2009|11:16] C:\Program Files\Outlook Express
[23/01/2009|01:35] C:\Program Files\Picasa2
[09/08/2005|16:58] C:\Program Files\Pinnacle
[23/01/2009|01:35] C:\Program Files\Programme
[23/01/2009|01:35] C:\Program Files\QuickTime
[05/09/2005|19:48] C:\Program Files\Real
[09/06/2006|13:00] C:\Program Files\RegCleaner
[09/08/2005|16:55] C:\Program Files\S3Inc
[04/11/2005|10:54] C:\Program Files\ScanSoft
[09/08/2005|15:28] C:\Program Files\Services en ligne
[03/01/2009|16:59] C:\Program Files\SFR
[02/10/2008|08:17] C:\Program Files\Skype
[23/08/2006|18:25] C:\Program Files\Sony
[21/11/2005|18:14] C:\Program Files\Sony Corporation
[23/01/2009|01:35] C:\Program Files\Spybot - Search & Destroy
[24/02/2008|20:18] C:\Program Files\ToniArts
[18/01/2009|18:20] C:\Program Files\Trend Micro
[23/01/2009|01:28] C:\Program Files\UltimateZip 2.7
[09/08/2005|16:53] C:\Program Files\Uninstall Information
[09/08/2005|16:56] C:\Program Files\VIAudioi
[10/03/2007|19:01] C:\Program Files\VideoLAN
[14/12/2008|12:20] C:\Program Files\Winamp
[14/12/2008|12:12] C:\Program Files\Winamp Remote
[30/04/2007|12:11] C:\Program Files\Windows Media Connect 2
[23/01/2009|01:35] C:\Program Files\Windows Media Player
[07/01/2009|11:16] C:\Program Files\Windows NT
[09/08/2005|15:28] C:\Program Files\WindowsUpdate
[09/08/2005|15:29] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/04/2008|13:52] C:\Program Files\Fichiers communs\Adobe
[25/12/2007|16:05] C:\Program Files\Fichiers communs\Apple
[10/10/2006|21:29] C:\Program Files\Fichiers communs\Canon
[04/12/2006|20:11] C:\Program Files\Fichiers communs\Designer
[27/02/2007|10:00] C:\Program Files\Fichiers communs\Fellowes
[04/11/2005|10:56] C:\Program Files\Fichiers communs\InstallShield
[09/08/2005|11:05] C:\Program Files\Fichiers communs\Java
[27/10/2007|18:58] C:\Program Files\Fichiers communs\Logitech
[30/01/2007|19:10] C:\Program Files\Fichiers communs\Macromedia
[30/01/2007|19:10] C:\Program Files\Fichiers communs\Macromedia Shared
[18/01/2009|01:10] C:\Program Files\Fichiers communs\Microsoft Shared
[09/08/2005|15:27] C:\Program Files\Fichiers communs\MSSoap
[21/11/2005|18:13] C:\Program Files\Fichiers communs\muvee Technologies
[05/09/2005|19:29] C:\Program Files\Fichiers communs\Real
[04/11/2005|10:54] C:\Program Files\Fichiers communs\ScanSoft Shared
[09/08/2005|15:27] C:\Program Files\Fichiers communs\Services
[09/08/2005|11:06] C:\Program Files\Fichiers communs\Softwin
[09/08/2005|16:39] C:\Program Files\Fichiers communs\SpeechEngines
[07/01/2009|11:16] C:\Program Files\Fichiers communs\System
[05/09/2005|19:29] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 42 Processes )

iexplore.exe ~ [PID:176]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme


--------------------\\ Recherche d'autres infections

--------------------\\ ROOTKIT !!

Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV.SYS]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV.SYS]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV.SYS]

--------------------\\ ROGUES ..

C:\PROGRA~1\Antivirus 2009



[F:14][D:4]-> C:\DOCUME~1\pc1\LOCALS~1\Temp
[F:3][D:0]-> C:\DOCUME~1\pc1\Cookies
[F:74][D:4]-> C:\DOCUME~1\pc1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 23/01/2009|16:46 - Option : [1]

--------------------\\ Fin du rapport a 16:46:08

A+
trk64

smitfraudfix ne peut pas être lancé ! il rencontre un problème
que faire?
merci
trk64

c'est la boite de dialogue disant qu'il doit fermer (demande si envoyer le rapport d'erreur a Microsoft)
je nai pas pu copier les elements d'erreurs
A+

habituellement je ne l'envoie jamais, mais cette fois-ci je l'ai envoyé.
j'ai l'impression de tourner en rond !!!
A+
trk64

Bonsoir gen hackman
je ne peux pas me connecter (no found error 404)
donc je devrai faire comme ce matin avec ma cle USB et charger combofix et autres fichiers..

en ce qui concerne Microsoft, j'ai reçu un rapport :

Server Error in '/' Application.
Runtime Error
Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.

Details: To enable the details of this specific error message to be viewable on remote machines, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "Off".

<!-- Web.Config Configuration File -->

<configuration>
<system.web>
<customErrors mode="Off"/>
</system.web>
</configuration>


Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.

<!-- Web.Config Configuration File -->

<configuration>
<system.web>
<customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/>
</system.web>
</configuration>

Merci encore de ta patience
trk64

bonjour gen hackman,

Combofix a bien travaillé, je veux dire par là qu'il ne m'a pas pris la tête; la connexion à internet est rétablie, l'écran de blocage n'apparait plus , les sollicitations pour des protections contre les virus n'apparaissent plus :-) le moral est serieusement remonté.
voici le rapport

ComboFix 09-01-21.04 - pc1 2009-01-24 19:26:20.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.959.731 [GMT 1:00]
Lancé depuis: c:\documents and settings\pc1\Bureau\ComboFix.exe.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Antivirus 2009
c:\program files\Antivirus 2009\av2009.exe
c:\program files\Mozilla Firefox\components\qqjopbabehabn.dll
c:\windows\juca.bat
c:\windows\msagent\agtintl
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\drivers\TDSSmhxt.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\ieupdates.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\qqjopbabehabn.dll
c:\windows\system32\SrchSTS.exe
c:\windows\system32\stera.job
c:\windows\system32\stera.log
c:\windows\system32\TDSScfgb.dll
c:\windows\system32\TDSSfpmp.dll
c:\windows\system32\TDSSliqp.dll
c:\windows\system32\TDSSnmxa.log
c:\windows\system32\TDSSnrse.dll
c:\windows\system32\TDSSoeqh.dll
c:\windows\system32\TDSSosvn.dat
c:\windows\system32\TDSSsbhc.dll
c:\windows\system32\TDSSthym.log
c:\windows\system32\TDSStkdv.log
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_TDSSserv.sys
-------\Legacy_TDSSserv.sys
-------\Legacy_VSPF
-------\Legacy_VSPF_HK
-------\Service_vspf
-------\Service_vspf_hk


((((((((((((((((((((((((((((( Fichiers créés du 2008-12-24 au 2009-01-24 ))))))))))))))))))))))))))))))))))))
.

2009-01-23 16:42 . 2009-01-23 16:46 <REP> d-------- C:\Lop SD
2009-01-23 15:00 . 2009-01-23 15:02 <REP> d-------- C:\rsit
2009-01-20 22:47 . 2009-01-22 23:07 <REP> d-------- c:\program files\FindyKill
2009-01-20 21:56 . 2009-01-20 21:56 <REP> d-------- c:\program files\AVG
2009-01-20 11:28 . 2009-01-20 11:28 <REP> d-------- c:\documents and settings\All Users\Application Data\1703809370
2009-01-19 20:43 . 2009-01-23 01:35 <REP> d-------- c:\program files\Navilog1
2009-01-19 12:17 . 2009-01-19 20:36 <REP> d-------- C:\ToolBar SD
2009-01-18 18:20 . 2009-01-18 18:20 <REP> d-------- c:\program files\Trend Micro
2009-01-18 01:18 . 2009-01-18 14:16 <REP> d--h----- C:\$AVG8.VAULT$
2009-01-18 01:10 . 2009-01-24 01:31 <REP> d-------- c:\documents and settings\All Users\Application Data\avg8
2009-01-15 16:23 . 2009-01-15 16:23 69,007 --a------ c:\windows\system32\qqjopbabehabn.dll-uninst.exe
2009-01-09 11:56 . 2009-01-09 11:56 <REP> d-------- c:\program files\AskSearch
2009-01-09 11:56 . 2009-01-23 23:20 <REP> d-------- c:\documents and settings\pc1\Application Data\GlarySoft
2009-01-09 11:54 . 2009-01-09 11:55 <REP> d-------- c:\program files\Glary Utilities
2009-01-09 11:53 . 2009-01-09 11:53 5,628,392 --a------ c:\program files\glary-utilities_glary_utilities_2.9.518_francais_73266.exe
2009-01-07 11:17 . 2009-01-07 11:17 <REP> d-------- c:\windows\system32\fr
2009-01-07 11:17 . 2009-01-07 11:17 <REP> d-------- c:\windows\system32\bits
2009-01-07 11:17 . 2009-01-07 11:17 <REP> d-------- c:\windows\l2schemas
2009-01-07 11:16 . 2009-01-07 11:16 <REP> d-------- c:\windows\ServicePackFiles
2009-01-07 11:11 . 2009-01-07 11:12 <REP> d-------- c:\windows\EHome
2009-01-03 16:59 . 2009-01-03 16:59 <REP> d-------- c:\program files\SFR

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-24 18:15 --------- d-----w c:\documents and settings\pc1\Application Data\U3
2009-01-24 17:59 --------- d-----w c:\documents and settings\pc1\Application Data\Skype
2009-01-24 00:33 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-01-23 22:53 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2009-01-23 22:07 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-23 00:35 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-23 00:35 --------- d-----w c:\program files\QuickTime
2009-01-23 00:35 --------- d-----w c:\program files\Programme
2009-01-23 00:35 --------- d-----w c:\program files\Picasa2
2009-01-23 00:35 --------- d-----w c:\program files\Kap.GRETests
2009-01-23 00:35 --------- d-----w c:\program files\eoRezo
2009-01-23 00:35 --------- d-----w c:\program files\Creative
2009-01-23 00:28 --------- d-----w c:\program files\UltimateZip 2.7
2009-01-15 22:57 --------- d-----w c:\documents and settings\pc1\Application Data\LimeWire
2009-01-12 14:03 --------- d-----w c:\program files\DivX
2008-12-15 19:50 --------- d-----w c:\documents and settings\All Users\Application Data\OrbNetworks
2008-12-14 11:22 --------- d-----w c:\documents and settings\pc1\Application Data\Winamp
2008-12-14 11:20 --------- d-----w c:\program files\Winamp
2008-12-14 11:12 --------- d-----w c:\program files\Winamp Remote
2008-12-14 11:05 --------- d-----w c:\documents and settings\All Users\Application Data\U3
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-11-03 15:10 44,992 ----a-w c:\program files\mrtstub.exe
2008-09-27 18:21 67,110,184 ----a-w c:\program files\iTunes8Setup.exe
2008-06-09 09:01 9,581,368 -c--a-w c:\program files\winamp5531_full_emusic-7plus_fr-fr(2).exe
2008-02-24 17:06 2,951,802 -c--a-w c:\program files\easycleaner_easycleaner_2.0.6.381_francais_11170.exe
2007-12-25 15:03 54,330,664 -c--a-w c:\program files\iTunesSetup.exe
2007-06-09 13:39 17,929,072 -c--a-w c:\program files\Install_Messenger.exe
2007-05-05 22:59 15,505,200 -c--a-w c:\program files\IE7-WindowsXP-x86-enu.exe
2006-08-27 18:51 560 -c--a-w c:\documents and settings\pc1\Application Data\ViewerApp.dat
2006-02-06 11:47 3,468,862 -c--a-w c:\program files\ultimatezipsetup.exe
2006-12-31 00:54 28 -csh--r c:\windows\msapss\boot.bat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{C94E154B-1459-4A47-966B-4B843BEFC7DB}"= "c:\program files\AskSearch\bin\DefaultSearch.dll" [2008-07-17 45056]

[HKEY_CLASSES_ROOT\clsid\{c94e154b-1459-4a47-966b-4b843befc7db}]
[HKEY_CLASSES_ROOT\DefaultSearch.DefaultSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EC73A159-0736-4EF3-972D-6EA9B2278495}]
[HKEY_CLASSES_ROOT\DefaultSearch.DefaultSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0B014B81-4E12-46F9-806F-55867AF8FD3C}]
2004-08-05 13:00 296960 --a------ c:\windows\system32\winsystems.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Creative WebCam Tray"="c:\program files\Creative\Shared Files\CamTray.exe" [2005-10-27 299008]
"Orb"="c:\program files\Winamp Remote\bin\OrbTray.exe" [2008-04-01 507904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\[u]0/ustera\[u]0/usprestrt

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]
backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Outil de mise à jour Google.lnk]
backup=c:\windows\pss\Outil de mise à jour Google.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Picture Package Menu.lnk]
backup=c:\windows\pss\Picture Package Menu.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Picture Package VCD Maker.lnk]
backup=c:\windows\pss\Picture Package VCD Maker.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^pc1^Programmes^Démarrage^Nathan - Anglais - Fil d'info RSS.lnk]
backup=c:\windows\pss\Nathan - Anglais - Fil d'info RSS.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Registry Repair Pro

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
--a------ 2005-06-23 19:33 57344 c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AudioDeck]
--a--c--- 2004-09-30 07:44 7957504 c:\program files\VIAudioi\SBADeck\ADeck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
--a--c--- 2004-11-11 22:00 864256 c:\program files\Brother\ControlCenter2\brctrcen.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative WebCam Tray]
--------- 2005-10-27 11:00 299008 c:\program files\Creative\Shared Files\CamTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2008-04-14 03:33 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
--a--c--- 2004-03-10 11:39 40960 c:\program files\ScanSoft\PaperPort\IndexSearch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstantTray]
--a--c--- 2004-09-02 10:37 770048 c:\program files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-09-10 16:40 289576 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IW_Drop_Icon]
--a--c--- 2004-07-30 15:10 1123840 c:\program files\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]
--a------ 2007-11-06 10:32 67128 c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
--a--c--- 2003-11-10 15:06 406016 c:\windows\system32\PSDrvCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-09-06 14:09 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
--a--c--- 2004-11-11 16:14 49152 c:\program files\Brother\Brmfl04g\BrStDvPt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2008-02-12 19:10 21898024 c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
-ra--c--- 2003-10-14 10:22 155648 c:\program files\Fichiers communs\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a--c--- 2007-03-14 02:43 83608 c:\program files\Java\jre1.6.0_01\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2008-10-02 08:16 185632 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 19:49 36352 c:\program files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
--a--c--- 2006-03-28 16:38 94208 c:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
-ra------ 2004-01-15 13:33 49152 c:\windows\system32\VTTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableNotifications"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications]
"<NO NAME>"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 tffsport;M-Systems DiskOnChip 2000;c:\windows\system32\drivers\tffsport.sys [2004-08-05 149376]
R1 vobiw;vobiw;c:\windows\system32\drivers\vobIW.sys [2004-09-01 188416]
R3 cdrdrv;Cdrdrv;c:\windows\system32\drivers\Cdrdrv.sys [2004-08-03 62976]
R3 P1370VID;Live! Cam Voice;c:\windows\system32\drivers\P1370Vid.sys [2006-09-13 179040]
S0 VOBID;VOBID;c:\windows\system32\drivers\vobid.sys [2003-08-01 29239]
S3 P1370Aud;Creative WebCam Audio Control;c:\windows\system32\drivers\P1370Aud.sys [2006-09-13 93056]
S3 P1370Aul;PD1370 Lower Filter Driver;c:\windows\system32\drivers\P1370Aul.sys [2006-09-13 4992]
S3 PALLADIA;Palladia 300/400 Usb Adsl Modem;c:\windows\system32\DRIVERS\usbiad.sys --> c:\windows\system32\DRIVERS\usbiad.sys [?]
S3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;c:\windows\system32\drivers\WlanUIG.sys [2007-02-27 379456]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\LaunchU3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{536b1f4a-5860-11dc-92d7-001109eb5f70}]
\Shell\AutoRun\command - F:\m9ma.exe
\Shell\explore\Command - F:\m9ma.exe
\Shell\open\Command - F:\m9ma.exe
.
Contenu du dossier 'Tâches planifiées'

2009-01-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-01-24 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2008-12-01 09:38]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{47ed7374-bfa5-e213-cb5a-3e0e2c314f48} - (no file)
BHO-{821C0CA7-CD11-B822-C30B-782701B3EADE} - c:\windows\system32\qqjopbabehabn.dll
MSConfigStartUp-adiras - adiras.exe
MSConfigStartUp-pxador - (no file)
MSConfigStartUp-spoolsvc - (no file)


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.sfr.fr/kit/adsl/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mWindow Title =
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\pc1\Application Data\Mozilla\Firefox\Profiles\u0izr531.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www15.yoog.com/search.php?q=
FF - prefs.js: browser.search.selectedEngine - Yoog Search
FF - prefs.js: keyword.URL - hxxp://www15.yoog.com/search.php?q=
FF - component: c:\documents and settings\pc1\Application Data\Mozilla\Firefox\Profiles\u0izr531.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1399.3742\npCIDetect13.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPAbacheck.dll

---- PARAMETRES FIREFOX ----
FF - user.js: browser.search.selectedEngine - Yoog Search
FF - user.js: keyword.URL - hxxp://www15.yoog.com/search.php?q=
FF - user.js: keyword.enabled - true
FF - user.js: browser.search.defaultenginename - Yoog Search
FF - user.js: browser.search.defaulturl - hxxp://www15.yoog.com/search.php?q=
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-24 19:29:23
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\windows\system32\wscntfy.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Heure de fin: 2009-01-24 19:31:58 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-01-24 18:31:38

Avant-CF: 34,381,606,912 octets libres
Après-CF: 34,309,201,920 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

299 --- E O F --- 2009-01-14 23:21:42

Merci de tes attentions
A+
trk64