Virus help merci

Fait ceci :

► Installe Combofix ( de sUBs ) sur ton bureaux

* Pour installer Combofix clique ici

(!) Avant de l'utiliser deconnécte toute tes connexion à Internet et tout les programmes en cours d'execution (!)

# Désactive Pare-feu, Antivirus, Antispyware #

● Double clic sur l'icône de ComboFix située sur le Bureau

Une fenetre bleu va s'ouvrir ... [!] Ne pas ouvrir de programmes [!]

Un message va apparaitre tu clique sur "Oui"

Un rapport s'ouvriras à la fin de l'analyse envoie son contenue dans ta prochaine reponse et n'oublie pas de réactiver la protection en temp réel de ton antivirus .

Si tu trouve des difficultés pendant l'installation suit ce lien :

◆ Tuto Combofix

Luu' !

Edit : Il manque la moitié du rapport ^^

- Quel sont les symptômes ?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:49:06, on 23/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Kiwee Toolbar\2.9.201\kwtbaim.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\caro\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\avira\antivir desktop\avgnt.exe
C:\PROGRA~1\MICROS~2\wkcalrem.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

toutest-gratuit.ifrance.com/antivirus.php

je comprend pas?

Salut Helper Mask.
Le rapport est complet :

End of file - 2145 bytes

Après, c'est sûr qu'il y a eu un souci à l'exécution.
Pour suivre.
A+.
Crapoulou.

deja ont a deux ordi portable donc je rame beaaucoup malgrés que j'ai du bon debit ensuite msn deconne a donc se bloque plus moyen de le remettre sauf si je redemarre l'ordi quand je vais sur des cite idem je rame mon orange se mais mal y disent qui a un probleme de cookies mais je c'est qui a un bleme quelque par crapoulou m'avais aider la derniere fois comme sa m'arrive souvent mais j'ai beau rester zen la y m'enerve cette ordi

voila
ComboFix 09-09-28.01 - caro 29/09/2009 8:18.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.1917 [GMT 2:00]
Lancé depuis: c:\users\caro\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3431425319-2830747522-187906293-500
c:\$recycle.bin\S-1-5-21-746032363-521491259-186433594-500
c:\users\caro\AppData\Roaming\Microsoft\Clip Organizer\mstore10.mgc
c:\users\caro\AppData\Roaming\Microsoft\Clip Organizer\Offic10.MGC
c:\windows\Installer\23ee8.msi
c:\windows\Installer\23ef6.msi
c:\windows\Installer\23efa.msi
c:\windows\Installer\23efe.msi
c:\windows\Installer\23f02.msi
c:\windows\Installer\23f06.msi
c:\windows\Installer\292398.msi

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-08-28 au 2009-09-29 ))))))))))))))))))))))))))))))))))))
.

2009-09-29 06:25 . 2009-09-29 06:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-28 21:11 . 2009-09-28 21:11 -------- d-----w- c:\programdata\LightScribe
2009-09-28 12:45 . 2009-09-28 12:45 -------- d-----w- c:\users\caro\AppData\Roaming\EPSON
2009-09-28 12:26 . 2009-09-28 12:26 -------- d-----w- c:\programdata\UDL
2009-09-28 12:23 . 2009-09-28 12:23 -------- d-----w- c:\program files\ABBYY FineReader 6.0 Sprint
2009-09-28 12:20 . 2009-09-28 12:20 -------- d-----w- c:\programdata\EPSON
2009-09-28 12:19 . 2006-12-08 02:04 76800 ----a-w- c:\windows\system32\E_FLBCFE.DLL
2009-09-28 12:19 . 2004-09-10 20:12 49152 ----a-w- c:\windows\system32\E_DCINST.DLL
2009-09-28 12:19 . 2006-04-19 02:00 62976 ----a-w- c:\windows\system32\E_FD4BCFE.DLL
2009-09-28 12:18 . 2009-09-28 12:24 -------- d-----w- c:\program files\epson
2009-09-28 12:18 . 2007-04-17 22:00 67072 ----a-w- c:\windows\system32\escwiad.dll
2009-09-27 15:50 . 2009-09-27 15:50 -------- d-----w- c:\programdata\McAfee
2009-09-25 15:50 . 2009-09-25 15:50 -------- d-----w- c:\programdata\McAfee Security Scan
2009-09-25 15:50 . 2009-09-25 15:50 -------- d-----w- c:\program files\McAfee Security Scan
2009-09-23 20:10 . 2008-06-05 16:18 5737 ----a-w- c:\users\caro\AppData\Local\gnc.exe
2009-09-23 19:50 . 2009-09-23 20:16 -------- d-----w- c:\program files\Navilog1
2009-09-23 19:48 . 2009-09-23 19:48 -------- d-----w- c:\program files\Trend Micro
2009-09-22 13:29 . 2009-09-22 13:29 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-22 13:28 . 2009-09-22 13:28 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-09-22 13:26 . 2009-09-22 13:26 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-09-18 18:53 . 2009-09-18 18:53 -------- d-----w- c:\program files\Windows Live Safety Center
2009-09-17 21:48 . 2009-09-17 21:48 -------- d-----w- c:\windows\Sun
2009-09-17 06:15 . 2009-09-17 06:15 -------- d-----w- c:\windows\system32\ca-ES
2009-09-17 06:15 . 2009-09-17 06:15 -------- d-----w- c:\windows\system32\eu-ES
2009-09-17 06:15 . 2009-09-17 06:15 -------- d-----w- c:\windows\system32\vi-VN
2009-09-17 06:01 . 2009-09-17 06:01 -------- d-----w- c:\windows\system32\EventProviders
2009-09-15 22:49 . 2009-09-15 22:49 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2009-09-15 19:54 . 2009-09-15 19:54 -------- d-----w- c:\program files\Safari
2009-09-15 19:19 . 2009-09-15 19:19 -------- d-----w- c:\program files\Utilitaire de configuration iPhone
2009-09-15 19:18 . 2009-09-15 19:18 -------- d-----w- c:\users\caro\AppData\Roaming\Apple Computer
2009-09-15 19:18 . 2009-05-18 12:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-09-15 19:18 . 2008-04-17 11:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2009-09-15 19:17 . 2009-09-15 19:17 -------- d-----w- c:\program files\iPod
2009-09-15 19:17 . 2009-09-15 19:18 -------- d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-15 19:17 . 2009-09-15 19:18 -------- d-----w- c:\program files\iTunes
2009-09-15 19:16 . 2009-09-15 19:16 -------- d-----w- c:\program files\Bonjour
2009-09-15 19:16 . 2009-09-15 19:16 -------- d-----w- c:\program files\QuickTime
2009-09-15 19:16 . 2009-09-15 19:17 -------- d-----w- c:\programdata\Apple Computer
2009-09-15 19:12 . 2009-09-15 19:17 -------- d-----w- c:\program files\Common Files\Apple
2009-09-15 06:03 . 2009-04-11 06:32 180712 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2009-09-14 19:04 . 2009-09-14 19:07 -------- d-----w- c:\program files\adslTV
2009-09-14 08:28 . 2009-09-14 08:28 -------- d-----w- c:\users\caro\AppData\Roaming\Template
2009-09-11 19:47 . 2009-09-15 19:54 -------- d-----w- c:\users\caro\AppData\Local\Apple Computer
2009-09-11 09:41 . 2009-09-11 09:41 -------- d-----w- c:\program files\CCleaner
2009-09-10 18:01 . 2009-09-10 18:01 -------- d-----w- c:\programdata\eMule
2009-09-10 18:00 . 2009-09-10 18:01 -------- d-----w- c:\users\caro\AppData\Local\eMule
2009-09-10 18:00 . 2009-09-10 18:00 -------- d-----w- c:\program files\eMule
2009-09-09 16:25 . 2009-08-14 16:27 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-09-09 16:25 . 2009-08-14 13:48 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-09-09 16:25 . 2009-08-14 13:49 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-09-09 16:25 . 2009-08-14 13:49 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-09-09 16:25 . 2009-08-14 13:48 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-09-09 16:25 . 2009-08-14 13:49 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-09-09 16:25 . 2009-08-14 13:49 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-09-09 16:25 . 2009-08-14 13:49 10240 ----a-w- c:\windows\system32\finger.exe
2009-09-09 16:25 . 2009-08-14 13:49 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-09-09 16:25 . 2009-08-14 13:49 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-09-09 16:25 . 2009-08-14 15:53 17920 ----a-w- c:\windows\system32\netevent.dll
2009-09-09 16:24 . 2009-07-11 19:01 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-09-09 16:24 . 2009-07-11 19:01 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-09-09 16:24 . 2009-04-11 06:28 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-09-09 16:24 . 2009-07-11 19:01 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-09-09 16:24 . 2009-07-11 19:01 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-09-09 16:24 . 2009-07-11 17:03 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-09-09 16:24 . 2009-06-10 11:41 2868224 ----a-w- c:\windows\system32\mf.dll
2009-09-09 16:24 . 2009-04-11 06:28 98816 ----a-w- c:\windows\system32\mfps.dll
2009-09-09 16:24 . 2009-04-11 06:27 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-09-09 16:24 . 2009-04-11 06:27 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-09-09 16:24 . 2009-04-11 04:54 2048 ----a-w- c:\windows\system32\mferror.dll
2009-09-08 19:36 . 2009-09-08 19:36 -------- d-----w- c:\users\caro\AppData\Local\Apple
2009-09-08 19:35 . 2009-09-08 19:35 -------- d-----w- c:\program files\Apple Software Update
2009-09-08 19:35 . 2009-09-08 19:35 -------- d-----w- c:\programdata\Apple
2009-09-03 20:19 . 2009-09-23 06:40 6836 ----a-w- c:\users\caro\AppData\Local\d3d9caps.dat
2009-09-03 19:21 . 2009-09-03 19:21 -------- d-----w- c:\program files\Kiwee Toolbar
2009-09-03 19:21 . 2009-09-03 19:21 -------- d-----w- c:\programdata\Kiwee Toolbar
2009-09-03 19:21 . 2009-09-03 19:21 -------- d-----w- c:\users\caro\AppData\Roaming\agi
2009-09-03 19:21 . 2009-09-03 19:21 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-09-03 19:21 . 2009-09-03 19:21 2117632 ----a-w- c:\windows\system32\python25.dll
2009-09-03 19:21 . 2009-09-03 19:21 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-09-03 19:21 . 2008-09-16 16:26 1332197 ----a-w- c:\windows\system32\pythondll.zip
2009-09-03 19:21 . 2009-09-03 19:21 -------- d-----w- c:\programdata\AGI
2009-09-03 19:21 . 2009-09-03 19:21 -------- d-----w- c:\program files\AGI
2009-09-03 19:02 . 2009-09-03 19:02 -------- d-----w- c:\users\caro\AppData\Local\Microsoft Help
2009-09-02 18:17 . 2008-01-21 02:24 638976 ----a-w- c:\windows\system32\win_utilman.exe
2009-09-02 18:17 . 2009-09-02 18:17 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-09-02 18:17 . 2009-09-02 18:17 93640 ----a-w- c:\windows\system32\ezUninst.exe
2009-09-02 18:17 . 2009-09-02 18:17 51656 ----a-w- c:\windows\system32\ezUPBHook.dll
2009-09-02 18:17 . 2009-09-02 18:17 271304 ----a-w- c:\windows\system32\ezSetup.exe
2009-09-02 18:17 . 2009-09-02 18:17 18376 ----a-w- c:\windows\system32\ezMAPIHelper.exe
2009-09-02 18:17 . 2009-09-02 18:17 115656 ----a-w- c:\windows\system32\ezShellStart.exe
2009-09-02 17:43 . 2009-09-02 17:43 16 ----a-w- c:\windows\popcinfo.dat
2009-09-02 16:42 . 2009-09-02 16:42 -------- d-----w- c:\programdata\Sandlot Games
2009-09-02 16:41 . 2009-09-02 16:41 -------- d-----w- c:\users\caro\AppData\Roaming\WildTangent
2009-09-02 08:16 . 2009-09-06 16:11 -------- d-----w- c:\users\caro\AppData\Roaming\dvdcss
2009-09-02 08:10 . 2009-09-02 08:10 -------- d-----w- c:\program files\BitTorrent
2009-09-02 08:10 . 2009-09-02 08:10 -------- d-----w- c:\program files\Ask.com
2009-09-01 23:46 . 2009-09-01 23:46 -------- d-----w- c:\users\caro\AppData\Local\CyberLink
2009-09-01 23:46 . 2009-09-01 23:46 -------- d-----w- c:\users\caro\AppData\Local\PowerCinema
2009-09-01 23:21 . 2009-09-28 14:39 -------- d-----w- c:\users\caro\AppData\Roaming\vlc
2009-09-01 23:20 . 2009-09-01 23:20 -------- d-----w- c:\program files\VideoLAN
2009-09-01 23:17 . 2009-09-02 12:59 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-09-01 23:17 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-09-01 23:17 . 2009-09-01 23:17 -------- d-----w- c:\programdata\Avira
2009-09-01 23:17 . 2009-09-01 23:17 -------- d-----w- c:\program files\Avira
2009-09-01 21:40 . 2009-06-22 10:09 2048 ----a-w- c:\windows\system32\tzres.dll
2009-09-01 21:23 . 2009-09-01 21:24 -------- d-----w- c:\users\caro\AppData\Local\Adobe
2009-09-01 21:11 . 2008-07-27 18:03 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-09-01 21:10 . 2009-04-11 06:28 1696768 ----a-w- c:\windows\system32\gameux.dll
2009-09-01 21:10 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-09-01 21:10 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-01 21:10 . 2009-09-01 21:10 -------- d-----w- c:\program files\MSXML 4.0
2009-09-01 21:10 . 2009-07-17 13:54 71680 ----a-w- c:\windows\system32\atl.dll
2009-09-01 21:10 . 2009-06-04 12:07 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-09-01 21:10 . 2009-04-11 06:28 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-09-01 21:10 . 2009-04-11 06:28 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-09-01 21:10 . 2009-04-21 11:39 2034688 ----a-w- c:\windows\system32\win32k.sys
2009-09-01 21:10 . 2009-09-29 05:33 -------- d-----w- c:\users\caro\Tracing
2009-09-01 21:10 . 2009-06-10 11:42 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-09-01 21:09 . 2009-06-15 14:54 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-09-01 21:09 . 2009-06-15 14:53 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-01 21:09 . 2009-06-15 14:52 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2009-09-01 21:09 . 2009-06-15 14:52 499712 ----a-w- c:\windows\system32\kerberos.dll
2009-09-01 21:09 . 2009-06-15 14:53 270848 ----a-w- c:\windows\system32\schannel.dll
2009-09-01 21:09 . 2009-06-15 23:15 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-09-01 21:09 . 2009-06-15 14:53 72704 ----a-w- c:\windows\system32\secur32.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-29 05:39 . 2009-02-26 15:48 669566 ----a-w- c:\windows\system32\perfh00C.dat
2009-09-29 05:39 . 2009-02-26 15:48 123556 ----a-w- c:\windows\system32\perfc00C.dat
2009-09-28 12:31 . 2009-02-26 08:07 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-28 12:28 . 2009-02-26 08:07 -------- d-----w- c:\program files\Common Files\InstallShield
2009-09-28 12:21 . 2009-09-28 12:21 -------- d-----w- c:\users\caro\AppData\Roaming\InstallShield
2009-09-28 09:22 . 2009-09-28 09:22 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-09-17 06:16 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-09-17 06:16 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-17 06:16 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-09-17 06:16 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-09-17 06:16 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-09-17 06:16 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-17 06:16 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-09-15 22:51 . 2009-02-26 08:53 -------- d-----w- c:\program files\Microsoft Works
2009-09-15 22:50 . 2009-02-26 09:05 -------- d-----w- c:\programdata\Microsoft Help
2009-09-15 06:56 . 2009-02-26 08:07 -------- d-----w- c:\programdata\Hewlett-Packard
2009-09-14 09:11 . 2009-09-14 08:28 202 ----a-w- c:\users\caro\AppData\Roaming\wklnhst.dat
2009-09-11 09:26 . 2009-02-26 08:09 -------- d-----w- c:\programdata\Norton
2009-09-03 11:41 . 2009-02-26 09:11 -------- d-----w- c:\program files\Common Files\Adobe
2009-09-02 18:17 . 2009-02-26 09:22 8292 ----a-w- c:\windows\system32\ezdigsgn.dat
2009-09-02 17:24 . 2009-02-26 08:36 -------- d-----w- c:\programdata\WildTangent
2009-09-01 22:23 . 2009-02-26 09:25 -------- d-----w- c:\program files\Java
2009-09-01 21:26 . 2009-09-01 21:26 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-09-01 21:07 . 2009-02-26 08:10 -------- d-----w- c:\programdata\Symantec
2009-09-01 20:34 . 2009-02-26 09:29 -------- d-----w- c:\program files\SMINST
2009-09-01 20:27 . 2009-09-01 20:27 0 --sha-r- c:\windows\system32\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF924261M_E518373-051_4A_I3060_SQuanta_V19.15_F.13_T090511_WV3-1_L40C_M3069_J500_7AMD_8F31_92.20_#090522_N10EC8168;168C002B_(NZ291EA#ABF)_XMOBILE_CN10_Z_2Rev 1.MRK
2009-09-01 20:25 . 2009-09-01 20:25 -------- d-sh--we c:\programdata\Modèles
2009-09-01 20:25 . 2009-09-01 20:25 -------- d-sh--we c:\programdata\Menu Démarrer
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 03:23 . 2009-02-26 09:25 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-21 21:52 . 2009-09-02 08:26 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-09-02 08:26 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-09-02 08:26 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-09-02 08:26 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-02-26 16:10 . 2009-02-26 15:51 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0BC6E3FA-78EF-4886-842C-5A1258C4455A}"= "c:\program files\AGI\common\agcutils.dll" [2009-09-29 43520]

[HKEY_CLASSES_ROOT\clsid\{0bc6e3fa-78ef-4886-842c-5a1258c4455a}]
[HKEY_CLASSES_ROOT\agcutils.AGSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{647B16D8-AD7B-4983-82D7-82A270FC9E6D}]
[HKEY_CLASSES_ROOT\agcutils.AGSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]
2009-09-03 19:21 277648 ----a-w- c:\program files\Kiwee Toolbar\2.9.201\KiweeIEToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-07-10 15:28 1174920 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-10 1174920]
"{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= "c:\program files\Kiwee Toolbar\2.9.201\KiweeIEToolbar.dll" [2009-09-03 277648]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CLASSES_ROOT\clsid\{6638a9de-0745-4292-8a2e-ae530e7b9b3f}]
[HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}]
[HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-10 1174920]
"{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}"= "c:\program files\Kiwee Toolbar\2.9.201\KiweeIEToolbar.dll" [2009-09-03 277648]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CLASSES_ROOT\clsid\{6638a9de-0745-4292-8a2e-ae530e7b9b3f}]
[HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{259EEB17-79AA-44DF-8410-8E55F82A902A}]
[HKEY_CLASSES_ROOT\KiweeIEToolbar.KiweeToolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Sidebar"="c:\program files\windows sidebar\sidebar.exe" [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-12-04 1410344]
"DVDAgent"="c:\program files\Hewlett-Packard\Media\DVD\DVDAgent.exe" [2008-11-28 1148200]
"TSMAgent"="c:\program files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" [2008-12-25 1316136]
"CLMLServer for HP TouchSmart"="c:\program files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" [2008-12-25 189736]
"TVAgent"="c:\program files\Hewlett-Packard\Media\TV\TVAgent.exe" [2009-05-08 206120]
"UCam_Menu"="c:\program files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2008-11-14 218408]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2008-11-18 914224]
"UpdateLBPShortCut"="c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"UpdatePSTShortCut"="c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2008-11-26 210216]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-10-10 206128]
"UpdateP2GoShortCut"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-10-30 210216]
"UpdatePDIRShortCut"="c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-12-08 432432]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"KiweeHook"="c:\program files\Kiwee Toolbar\2.9.201\kwtbaim.exe" [2009-09-03 56456]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-08 305440]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-01-08 450663]

c:\users\caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Notification de cadeaux MSN.lnk - c:\users\caro\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-9-22 135680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan.lnk - c:\program files\McAfee Security Scan\1.0.150\SSScheduler.exe [2009-7-28 199184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):d8,5a,59,23,5f,37,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{13C2863D-C605-4AD9-9F78-D3FF2B1D556A}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{4291C81D-72F3-4EC9-99AB-0C73A243D703}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{CE27DBDA-2B35-495A-8166-3BE5EDB1866A}"= c:\program files\CyberLink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{53177EC7-70DE-44AA-9EBD-B446F4A93E3F}"= c:\program files\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe:HP TouchSmart Music
"{646202FB-0489-4A29-93CD-4D2C2A730F6F}"= c:\program files\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe:HP TouchSmart Photo
"{F3B1CAC4-4F80-4C6D-8E10-B29F70A16A8C}"= c:\program files\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe:HP TouchSmart Video
"{3B8CAA1E-D819-4B72-9953-294FBD3AB9A6}"= c:\program files\Hewlett-Packard\Media\DVD\TSMAgent.exe:HP TouchSmart Media Resident Program
"{A5973572-67A8-4A42-8307-D85935672ECD}"= c:\program files\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe:CyberLink Media Service
"{A3335D94-CC2F-4D8D-8BA9-A654C7DABDCA}"= c:\program files\Hewlett-Packard\Media\DVD\HPDVDSmart.exe:HP MediaSmart DVD
"{138D6CA6-28B3-4E85-9213-2E05280351A7}"= c:\program files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe:HP TouchSmart Music
"{E8A1C49D-D521-41E7-99B9-BB8B305D7D5F}"= c:\program files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe:HP TouchSmart Photo
"{AB6142F4-C254-47CC-AE8F-AD71C25627A6}"= c:\program files\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe:HP TouchSmart Video
"{E7FBCC4F-43D5-4054-B410-DA439D26AD75}"= c:\program files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe:HP TouchSmart Media Resident Program
"{B56CEDF9-4110-4E48-998B-760701D5AA0A}"= c:\program files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe:CyberLink Media Service
"{83F73F1A-1AB0-41E4-A0C7-783E2A2ED51D}"= c:\program files\Hewlett-Packard\Media\TV\QP.exe:Quick Play
"{04421745-3F20-405F-8C52-A96940D9DB5A}"= c:\program files\Hewlett-Packard\Media\TV\QPService.exe:Quick Play Resident Program
"{6B7C192F-414B-46DB-92CE-BC5784C3B45C}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{5405A050-A3DE-4F58-8D6D-FAD21110DD7F}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"TCP Query User{AB567A2C-7E62-42DB-99C4-00D265B4951D}c:\\program files\\adsltv\\adsltv.exe"= UDP:c:\program files\adsltv\adsltv.exe:adsltv
"UDP Query User{98A73BAF-E005-4A44-B22B-6D06784A4116}c:\\program files\\adsltv\\adsltv.exe"= TCP:c:\program files\adsltv\adsltv.exe:adsltv
"{3CF0AC06-E906-4C97-8D4A-CB966B6BC6B0}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{0CFC92FD-9F03-41A7-B014-35B7916A96D3}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{3C21EBFD-BF3D-4B57-9E0E-ECD1DBEC7631}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{CDA430EA-9169-4E8D-8066-CEAF97AED3A1}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"TCP Query User{2F16D42D-21CD-465A-9F29-945891CE5306}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
"UDP Query User{C5B1BE0D-4233-4C7D-B437-DB53E5250FB1}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

R2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/05/22 03:57];c:\program files\Hewlett-Packard\Media\DVD\000.fcl [28/11/2008 18:04 87536]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\AEstSrv.exe [22/05/2009 03:19 77824]
R2 AGWinService;AG Windows Service;c:\program files\AGI\common\win32\pythonservice.exe [03/09/2009 21:21 10240]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [02/09/2009 01:17 108289]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:23 21504]
R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18/03/2008 16:24 19456]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\SMINST\BLService.exe [26/02/2009 11:29 365952]
R2 TVCapSvc;TV Background Capture Service (TVBCS);c:\program files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [26/11/2008 17:13 296320]
R2 TVSched;TV Task Scheduler (TVTS);c:\program files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [26/11/2008 17:13 116096]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [26/02/2009 10:23 222512]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [04/09/2008 19:47 54784]
R3 usbfilter;AMD USB Filter Driver;c:\windows\System32\drivers\usbfilter.sys [22/05/2009 03:22 22072]
S3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [05/12/2008 13:06 109408]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Contenu du dossier 'Tâches planifiées'

2009-09-29 c:\windows\Tasks\HPCeeScheduleForcaro.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-02-26 10:34]
.
.
------- Examen supplémentaire -------
.
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Pavilion&pf=cnnb
uInternet Settings,ProxyOverride = *.local
IE: &Recherche AOL Toolbar - c:\programdata\AOL\ieToolbar\resources\fr-FR\local\search.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
FF - ProfilePath - c:\users\caro\AppData\Roaming\Mozilla\Firefox\Profiles\il5pyh7p.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
FF - prefs.js: keyword.URL - hxxp://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-4081-901d-01bf93043ede&q=
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-29 08:25
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{55662437-DA8C-40c0-AADA-2C816A897A49}]
"ImagePath"="\??\c:\program files\Hewlett-Packard\Media\DVD\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2009-09-29 8:27
ComboFix-quarantined-files.txt 2009-09-29 06:27

Avant-CF: 384 465 625 088 octets libres
Après-CF: 384 339 193 856 octets libres

364 --- E O F --- 2009-09-25 05:50

Re' !

► Télécharge sur ton bureaux Toolbar S&D ( par Eric_71 )

<<< Pour installer Toolbar S&D clique ici >>>

✿ Clique sur l'icône ToolbarS&D.exe
✿ Installe le sur ton bureaux
✿ Une nouvelle icône (avec écrit Toolbar S&D noir) est alors crée sur le bureau qui permet de démarrer le programme clique dessus
✿ Le programme se lance... tu dois choisir la langue.
✿ Pour choisir en français, tape sur la touche F et valide .

# T'arrive alors sur le menu principal de ToolBar S&D :

● L'option 1 : Recherche permet de rechercher l'infection
● L'option 2 : Supprimes les infections détectées

Tu va d'abord choisir l'option 1 ( Recherche )

(Le menu Démarrer et les icônes vont disparaitrent, c'est normal.)

La recherche s'effectue, cela peut prendre plusieurs minutes, ne touche à rien.

► Une fois l'analyse terminé, le rapport de recherche s'ouvre sur le Bloc-Note. (Dans le cas où le rapport ne s'ouvre pas, ce dernier se trouve sur C:\TB.txt)

Sélectionne tout, copie sont contenue et colle le dans ta prochaine réponse sur le Topic.

(!) Avant de démarrer le programme, désactive les antispywares (!)

P.S : Un peu de lecture sur les barres d'outils

qu'est ce que c'est?

(!) Avant de démarrer le programme, désactive les antispywares (

En ce qui te concerne n'y fait pas attention tu ne possède pas d'Antispyware ...

Fait la manip' stp ..

je trouve pas le rapport

Regarde ici C:\TB.txt

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-74 )
BIOS : Default System BIOS
USER : caro ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:454 Go (Free:354 Go)
D:\ (Local Disk) - NTFS - Total:11 Go (Free:1 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [1] ( 29/09/2009|19:39 )

[ UAC => 1 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\ProgramData\Kiwee Toolbar
C:\ProgramData\Kiwee Toolbar\config
C:\ProgramData\Kiwee Toolbar\images
C:\ProgramData\Kiwee Toolbar\config\content_a.xml
C:\ProgramData\Kiwee Toolbar\config\content_ie.xml
C:\ProgramData\Kiwee Toolbar\config\content_m.xml
C:\ProgramData\Kiwee Toolbar\config\content_y.xml
C:\ProgramData\Kiwee Toolbar\config\logger.xml
C:\ProgramData\Kiwee Toolbar\config\toolbarIE.xml
C:\ProgramData\Kiwee Toolbar\config\toolbarIM_a.xml
C:\ProgramData\Kiwee Toolbar\config\toolbarIM_m.xml
C:\ProgramData\Kiwee Toolbar\config\toolbarIM_y.xml
C:\ProgramData\Kiwee Toolbar\images\allow.bmp
C:\ProgramData\Kiwee Toolbar\images\block.bmp
C:\ProgramData\Kiwee Toolbar\images\dontsend.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbardropdownmenu.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbarsHelprolloverbase.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbarsm1rolloverbase.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_bg.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_dp.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbarsm2rolloverbase.bmp
C:\ProgramData\Kiwee Toolbar\images\im_toolbarstextrollover.bmp
C:\ProgramData\Kiwee Toolbar\images\kiwee_iconX16.ico
C:\ProgramData\Kiwee Toolbar\images\kiwee_iconX48.ico
C:\ProgramData\Kiwee Toolbar\images\send.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_eg.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_emoticons.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_eyeglass.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_gear.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_images.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_kiwee.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_msnlogo.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_news.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_text.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_videos.bmp
C:\ProgramData\Kiwee Toolbar\images\toolbar_winks.bmp
C:\ProgramData\Kiwee Toolbar\images\X.bmp
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Kiwee Toolbar
C:\Program Files\Kiwee Toolbar
C:\Program Files\Kiwee Toolbar\2.9.201
C:\Program Files\Kiwee Toolbar\2.9.201\AGTBCore.dll
C:\Program Files\Kiwee Toolbar\2.9.201\AolIMToolbar.dll
C:\Program Files\Kiwee Toolbar\2.9.201\firefox
C:\Program Files\Kiwee Toolbar\2.9.201\FlashCOM.dll
C:\Program Files\Kiwee Toolbar\2.9.201\KiweeCommonCtrls.dll
C:\Program Files\Kiwee Toolbar\2.9.201\KiweeContentHost.dll
C:\Program Files\Kiwee Toolbar\2.9.201\KiweeIEToolbar.dll
C:\Program Files\Kiwee Toolbar\2.9.201\KiweeIMToolbar.dll
C:\Program Files\Kiwee Toolbar\2.9.201\KiweeTBCore.dll
C:\Program Files\Kiwee Toolbar\2.9.201\KiweeTBCore.tlb
C:\Program Files\Kiwee Toolbar\2.9.201\kiweetoolbar.zip
C:\Program Files\Kiwee Toolbar\2.9.201\kwtbaim.exe
C:\Program Files\Kiwee Toolbar\2.9.201\mfc80u.dll
C:\Program Files\Kiwee Toolbar\2.9.201\Microsoft.VC80.CRT.manifest
C:\Program Files\Kiwee Toolbar\2.9.201\Microsoft.VC80.MFC.manifest
C:\Program Files\Kiwee Toolbar\2.9.201\msimg32.dll
C:\Program Files\Kiwee Toolbar\2.9.201\MsnIMToolbar.dll
C:\Program Files\Kiwee Toolbar\2.9.201\msvcp80.dll
C:\Program Files\Kiwee Toolbar\2.9.201\msvcr80.dll
C:\Program Files\Kiwee Toolbar\2.9.201\RemoteLib.dll
C:\Program Files\Kiwee Toolbar\2.9.201\Riched20.dll
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\chrome
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\chrome.manifest
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\components
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\defaults
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\firefox.xpi
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\install.rdf
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\META-INF
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\chrome\kiweetoolbar.jar
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\components\AGCore.js
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\components\AGCore.xpt
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\components\KiweeSearchHistory.js
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\components\SearchProtection.js
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\components\SearchProtection.xpt
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\defaults\preferences
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\defaults\preferences\defaults.js
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\META-INF\manifest.mf
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\META-INF\zigbert.rsa
C:\Program Files\Kiwee Toolbar\2.9.201\firefox\META-INF\zigbert.sf

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\Windows\\System32\\blank.htm"

--------------------\\ Recherche d'autres infections

~~~~~~~~~~~~Nettoyage~~~~~~~~~~~~~

► Pour lancer le nettoyage via ToolBar S&D, relance le programme.
► Dans le menu principal, tape 2 et valide

Le menu démarrer et les icônes vont à nouveau disparaître.. c'est normal.
Le nettoyage va prendre quelques minutes...

(!) Ne ferme pas la fenètre pendant la suppression (!)

Une fois le nettoyage terminée, le rapport de nettoyage s'ouvre, sélectionne tout copie son intégralité et colle le dans ta prochaine réponse...

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-74 )
BIOS : Default System BIOS
USER : caro ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:454 Go (Free:354 Go)
D:\ (Local Disk) - NTFS - Total:11 Go (Free:1 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 29/09/2009|20:02 )

[ UAC => 1 ]

-----------\\ SUPPRESSION

Supprime! - C:\ProgramData\Kiwee Toolbar\config
Supprime! - C:\ProgramData\Kiwee Toolbar\images
Supprime! - C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Kiwee Toolbar
Supprime! - C:\Program Files\Kiwee Toolbar\2.9.201
Supprime! - C:\ProgramData\Kiwee Toolbar
Supprime! - C:\Program Files\Kiwee Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\Windows\\System32\\blank.htm"

--------------------\\ Recherche d'autres infections

Bien !

Fait moi un rapport hijackthis stp ...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:49, on 29/09/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICFE.EXE
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\conime.exe
C:\Windows\Explorer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [TVAgent] "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\windows sidebar\sidebar.exe /autoRun
O4 - Startup: Notification de cadeaux MSN.lnk = caro\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\aestsrv.exe
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\STacSV.exe
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe

Supprime ceci manuellement :
C:\Program Files\Ask.com\GenericAskToolbar.dll

Procède par étapes :

Usb Fix<=====

Server 2 : http://pagesperso-orange.fr/nostools/usbfix.html

● Installe sur ton bureaux Usbfix ( de Chiquitine29 et C_XX )
● Double clique sur l'icone Usbfix le programme se lance ...
● Sur le menu principal de USBFix choisit l'option 1 ( Recherche )

Un message t'indique alors de brancher tous tes medias amovibles, insére les puis appuye sur une touche pour lancer le scan.

(!) Le menu démarrer et les icônes vont disparaître.. c'est normal (!)

A la fin du scan un rapport s'ouvre dans le bloc note :

● Clique sur le menu Edition puis Sélectionner tout.
● Clique à nouveau sur le menu Edition puis coller.
● Colle le contenue du rapport dans ta prochaine reponse

(!) Ne pas ouvrir d'application pendant le scan (!)

(!) Faire une mise à jour du logiciel avant de le manipuler (!)

>>> Lance Malwarebytes

♦ Installe Malwarbytes sur ton bureaux

✿✿ Pour installer Malwarbytes clique ici ✿✿

☞ Sélectionne "Exécuter un examen complet" puis clique sur le bouton Rechercher pour lancer le scan.
☞ Clique sur le bouton "Lancer l'examen" pour démarrer le scan.
☞ Clique sur le bouton "Supprimer la sélection" en bas à gauche.
☞ Un rapport de scan s'ouvre, sélectionne tout copie le et colle le dans ta prochaine réponse.

~~~~~~> Tuto Malwarbytes

############################## | UsbFix V6.037 |

User : caro (Administrateurs) # PC-DE-CARO
Update on 27/09/2009 by Chiquitine29, C_XX & Chimay8
Start at: 21:07:25 | 29/09/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

AMD Turion(tm) X2 Dual-Core Mobile RM-74
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18813
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 454,75 Go (354,49 Go free) # NTFS
D:\ -> Disque fixe local # 11,01 Go (1,83 Go free) [RECOVERY] # NTFS
E:\ -> Disque CD-ROM

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\STacSV.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c92065b9\aestsrv.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\AGI\common\win32\PythonService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICFE.EXE
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\svchost.exe
C:\Program Files\SMINST\BLService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Windows\system32\conime.exe
C:\Windows\Explorer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## | Fichiers # Dossiers infectieux |

D:\desktop.ini

################## | Registre # Clés Run infectieuses |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Registre # Mountpoints2 |

################## | ! Fin du rapport # UsbFix V6.037 ! |