Aide sur Scan HIJACKTHIS.LOG

Gege -  
Bonjour,
Comme sonseillé par ce Forum, j'ai fait un scan avec HIJACKTHIS pour solutionner mon probleme de blocage de PC ainsi que le probleme de rapport de AVAST avec le Trojan-Gen.

Pouvez vous y jeter un coup d'oeil et me dire ce que je dois faire !!

Merci d'avance pour votre aide et pour votre temps !!

Gege

VOICI LE RAPPORT :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:52:07, on 31/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\IFXTCS.exe
C:\SOURCE\AVAST\Fichier Avast\aswUpdSv.exe
C:\SOURCE\AVAST\Fichier Avast\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\IFXSPMGT.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\SOURCE\AVAST\Fichier Avast\ashMaiSv.exe
C:\SOURCE\AVAST\Fichier Avast\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\TEMP\SI1A2E.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\AccelerometerSt.exe
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\UMonit.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\SOURCE\Itunes\IPod\iTunesHelper.exe
C:\SOURCE\AVAST\FICHIE~1\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\SOURCE\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe
C:\SOURCE\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\SOURCE\Logiciel Supp. WGA\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://sbs2003.tivolux.local:4343/officescan/default_SMB.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
R3 - URLSearchHook: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\SOURCE\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\AccelerometerSt.exe
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\UMonit.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\SOURCE\Quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\SOURCE\Itunes\IPod\iTunesHelper.exe"
O4 - HKLM\..\Run: [Internet Connection Wizard Setup Tool] C:\Program Files\Internet Explorer\Connection Wizard\icwsetup.exe
O4 - HKLM\..\Run: [avast!] C:\SOURCE\AVAST\FICHIE~1\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Cld2000.exe] C:\SOURCE\Agenda\Calendrier\Cld2000.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AnyDVD] C:\SOURCE\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\SOURCE\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\SOURCE\JEUX\POKER\PokerStarsUpdate.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\SOURCE\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\SOURCE\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/WinNTChk.cab
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/setupini.cab
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/setup.cab
O16 - DPF: {485D813E-EE26-4DF8-9FAF-DEDF2885306E} (NSHelp Class) - http://sbs2003/connectcomputer/nshelp.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/RemoveCtrl.cab
O16 - DPF: {9BBB3919-F518-4D06-8209-299FC243FC30} (Encrypt Class) - https://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxEnc.cab
O16 - DPF: {9DCD8EB7-E925-45C9-9321-8CA843FBED40} (Console d'administration de Security Server) - https://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxConsole.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Tivolux.local
O17 - HKLM\Software\..\Telephony: DomainName = Tivolux.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Tivolux.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Tivolux.local
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Service Google Update (gupdate1ca3ec41ed29b4) (gupdate1ca3ec41ed29b4) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\IFXSPMGT.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\IFXTCS.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Scan en temps réel Trend Micro Client/Server Security Agent (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
O23 - Service: Pare-feu personnel Trend Micro Client/Server Security Agent (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe

--
End of file - 17118 bytes
Configuration: Windows XP Internet Explorer 7.0

10 réponses

  1. archet9
    Bonjour,

    Télécharge AD-REMOVER
    ou
    AD-REMOVER

    (de Cyrildu17 / C_XX) sur ton Bureau.

    Déconnecte-toi et ferme toutes applications en cours

    Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
    Double-clique sur l'icône [AD-Remover située sur ton Bureau.
    Au menu principal, choisis l'option L.
    Poste le rapport qui apparaît à la fin.

    (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

    (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

    Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure

    a+
    0
    1. Gege
      Bonjour,

      Un grand merci pour ta rapidité et ton aide.

      Voici le Rapport de AD-REMOVER

      A+
      Gege

      .
      ======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
      .
      Mit à jour par C_XX le 26.12.2009 à 20:47
      Contact: AdRemover.contact@gmail.com
      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
      .
      Lancé à: 14:19:38, jeu. 31/12/2009 | Mode Normal | Option: CLEAN
      Exécuté de: C:\Program Files\Ad-Remover\
      Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
      Nom du PC: PC-PORT5 | Utilisateur actuel: port5

      Bonnes fêtes de fin d'année à vous tous :)
      .
      ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
      .
      Service: ASKService
      Service: ASKUpgrade

      C:\Program Files\Mozilla FireFox\Components\AskSearch.js
      C:\Program Files\AskBarDis
      C:\Program Files\Search Settings
      C:\DOCUME~1\port5\APPLIC~1\Search Settings
      C:\Windows\Installer\b2a61e6.msi

      (!) -- Fichiers temporaires supprimés.

      .
      HKCU\software\appdatalow\AskBarDis
      HKCU\software\AskBarDis
      HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
      HKCU\software\microsoft\internet explorer\searchscopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
      HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
      HKCU\software\Search Settings
      HKLM\software\appdatalow\AskBarDis
      HKLM\software\AskBarDis
      HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
      HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
      HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
      HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
      HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
      HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
      HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
      HKLM\software\classes\SearchSettings.BHO
      HKLM\software\classes\SearchSettings.BHO.1
      HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
      HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
      HKLM\software\Dealio
      HKLM\software\microsoft\internet explorer\searchscopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings
      HKLM\software\Search Settings
      .
      ============== Scan additionnel ==============
      .
      .
      * Internet Explorer Version 7.0.5730.13 *
      .
      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
      .
      Do404Search: 01000000
      Local Page: C:\WINDOWS\system32\blank.htm
      Show_ToolBar: yes
      Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      Start Page: hxxp://fr.msn.com/
      Enable Browser Extensions: yes
      Use Search Asst: no
      Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
      .
      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Delete_Temp_Files_On_Exit: yes
      Local Page: %SystemRoot%\system32\blank.htm
      Start Page: hxxp://fr.msn.com/
      Search bar: hxxp://search.msn.com/spbasic.htm
      .
      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
      .
      Tabs: res://ieframe.dll/tabswelcome.htm
      .
      ===================================
      .
      4746 Octet(s) - C:\Ad-Report-CLEAN[1].log
      .
      2 Fichier(s) - C:\DOCUME~1\port5\LOCALS~1\Temp
      4 Fichier(s) - C:\WINDOWS\Temp
      0 Fichier(s) - C:\WINDOWS\Prefetch
      .
      16 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
      32 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
      .
      Fin à: 14:26:34 | jeu. 31/12/2009 - CLEAN[1]
      .
      ============== E.O.F ==============
      .
      0
  2. archet9
    Télécharge RSIT (de random/random) sur le bureau :

    - Double clique sur RSIT.exe qui est sur le bureau
    - Clique sur "Continue" dans la fenêtre
    - RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
    - Poste le contenu de log.txt plus info.txt (réduit ds la barre de taches) à la fin de l’analyse .

    Les rapports sont dans le dossier ici C:\rsit
    a+
    0
    1. Gege
      Bonjour,

      Désolé de mon absence mais à cause des fêtes je n'ai pu continuer la résolution de mon problème.

      Voilà, je te poste le rapport LOG et INFO de RSIT comme demandé.

      Encore merci pour ton aide et BONNE ANNEE !!

      Gege

      Rapport Log.txt

      Logfile of random's system information tool 1.06 (written by random/random)
      Run by port5 at 2010-01-03 12:33:46
      Microsoft Windows XP Professionnel Service Pack 2
      System drive C: has 73 GB (69%) free of 106 GB
      Total RAM: 1023 MB (31% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 12:34:00, on 3/01/2010
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16945)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\IFXTCS.exe
      C:\SOURCE\AVAST\Fichier Avast\aswUpdSv.exe
      C:\SOURCE\AVAST\Fichier Avast\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      C:\WINDOWS\system32\IFXSPMGT.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
      C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\WINDOWS\system32\mqsvc.exe
      C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
      C:\WINDOWS\system32\mqtgsvc.exe
      C:\SOURCE\AVAST\Fichier Avast\ashMaiSv.exe
      C:\SOURCE\AVAST\Fichier Avast\ashWebSv.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\TEMP\DCE0EA.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Analog Devices\Core\smax4pnp.exe
      C:\WINDOWS\system32\AccelerometerSt.exe
      C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
      C:\WINDOWS\System32\DLA\DLACTRLW.EXE
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
      C:\WINDOWS\SMINST\Scheduler.exe
      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
      C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Trend Micro\OfficeScan Client\pccntupd.exe
      C:\WINDOWS\system32\UMonit.exe
      C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
      C:\SOURCE\Itunes\IPod\iTunesHelper.exe
      C:\SOURCE\AVAST\FICHIE~1\ashDisp.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
      C:\SOURCE\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe
      C:\SOURCE\Spybot - Search & Destroy\TeaTimer.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
      C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\SOURCE\Rsit\RSIT.exe
      C:\SOURCE\Logiciel Supp. WGA\port5.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://sbs2003.tivolux.local:4343/officescan/default_SMB.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\SOURCE\SPYBOT~1\SDHelper.dll
      O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
      O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
      O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
      O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
      O3 - Toolbar: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
      O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
      O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
      O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\AccelerometerSt.exe
      O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
      O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
      O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
      O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
      O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
      O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
      O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\UMonit.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\SOURCE\Quicktime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\SOURCE\Itunes\IPod\iTunesHelper.exe"
      O4 - HKLM\..\Run: [Internet Connection Wizard Setup Tool] C:\Program Files\Internet Explorer\Connection Wizard\icwsetup.exe
      O4 - HKLM\..\Run: [avast!] C:\SOURCE\AVAST\FICHIE~1\ashDisp.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKCU\..\Run: [Cld2000.exe] C:\SOURCE\Agenda\Calendrier\Cld2000.exe
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [AnyDVD] C:\SOURCE\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\SOURCE\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
      O4 - Global Startup: BTTray.lnk = ?
      O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
      O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\SOURCE\JEUX\POKER\PokerStarsUpdate.exe
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\SOURCE\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\SOURCE\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
      O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/WinNTChk.cab
      O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/setupini.cab
      O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/setup.cab
      O16 - DPF: {485D813E-EE26-4DF8-9FAF-DEDF2885306E} (NSHelp Class) - http://sbs2003/connectcomputer/nshelp.dll
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/RemoveCtrl.cab
      O16 - DPF: {9BBB3919-F518-4D06-8209-299FC243FC30} (Encrypt Class) - https://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxEnc.cab
      O16 - DPF: {9DCD8EB7-E925-45C9-9321-8CA843FBED40} (Console d'administration de Security Server) - https://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxConsole.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Tivolux.local
      O17 - HKLM\Software\..\Telephony: DomainName = Tivolux.local
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Tivolux.local
      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Tivolux.local
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashWebSv.exe
      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: Service Google Update (gupdate1ca3ec41ed29b4) (gupdate1ca3ec41ed29b4) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\IFXSPMGT.exe
      O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\IFXTCS.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Scan en temps réel Trend Micro Client/Server Security Agent (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
      O23 - Service: Pare-feu personnel Trend Micro Client/Server Security Agent (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
      O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
      O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
      O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
      0
      1. archet9
        ---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
        http://download.bleepingcomputer.com/sUBs/ComboFix.exe

        /!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

        ---> Double-clique sur Combofix.exe
        Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
        Accepte en cliquant sur "Oui"

        ---> Mets-le en langue française F
        Tape sur la touche 1 (Yes) pour démarrer le scan.

        /!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

        En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

        Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

        /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

        Note : Le rapport se trouve également là : C:\ComboFix.txt

        a+
        0
        1. Gege
          Hello !

          Voici le rapport de COMBOFIX.

          ComboFix 10-01-02.05 - port5 03/01/2010 19:01:11.1.2 - x86
          Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1023.453 [GMT 1:00]
          Lancé depuis: c:\source\Combofix\ComboFix.exe
          AV: avast! antivirus 4.8.1368 [VPS 100103-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
          AV: Trend Micro Client-Server Security Agent *On-access scanning enabled* (Outdated) {5DBA0DB9-1DCB-4DB4-A709-4BC9980C09C8}
          FW: Pare-feu Trend Micro Client-Server Security Agent *disabled* {5DBA0DB9-1DCB-4DB4-A709-4BC9980C09C8}

          AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
          .
          [i] ADS - WINDOWS: deleted 48 bytes in 1 streams. /i

          (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
          .

          c:\documents and settings\port5\Application Data\wiaserva.log
          c:\recycler\S-1-5-21-117609710-706699826-839522115-500
          c:\recycler\S-1-5-21-3319599889-3383249327-2123659515-500
          E:\Autorun.inf

          .
          ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
          .

          -------\Service_glaide32

          ((((((((((((((((((((((((((((( Fichiers créés du 2009-12-03 au 2010-01-03 ))))))))))))))))))))))))))))))))))))
          .

          2009-12-31 13:56 . 2010-01-03 12:28 -------- d-----w- C:\COPIE HDD MICHOLZ
          2009-12-31 13:15 . 2009-12-31 13:26 -------- d-----w- c:\program files\Ad-Remover
          2009-12-31 11:43 . 2009-12-31 11:43 -------- d-----w- c:\documents and settings\port5\Application Data\Uniblue
          2009-12-24 13:01 . 2009-12-24 13:03 -------- d-----w- C:\DVDVideoSoft
          2009-12-24 12:50 . 2009-12-24 13:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
          2009-12-24 12:50 . 2009-12-24 12:50 -------- d-----w- c:\program files\NortonInstaller
          2009-12-24 12:50 . 2009-12-24 12:50 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
          2009-12-24 12:21 . 2009-12-24 12:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Azureus
          2009-12-24 12:20 . 2009-12-31 11:01 -------- d-----w- c:\documents and settings\port5\Application Data\Azureus
          2009-12-24 12:20 . 2009-12-24 12:51 -------- d-----w- c:\program files\Vuze
          2009-12-24 12:02 . 2009-12-24 12:02 -------- d-----w- c:\program files\Conduit
          2009-12-24 12:02 . 2009-12-24 12:02 -------- d-----w- c:\documents and settings\port5\Local Settings\Application Data\Conduit
          2009-12-24 12:02 . 2009-12-24 12:10 -------- d-----w- c:\documents and settings\port5\Local Settings\Application Data\DVDVideoSoft
          2009-12-24 12:02 . 2009-12-27 17:57 -------- d-----w- c:\program files\DVDVideoSoft
          2009-12-24 12:01 . 2009-12-27 17:57 -------- d-----w- c:\program files\Fichiers communs\DVDVideoSoft
          2009-12-23 19:54 . 2010-01-02 11:18 -------- d-----w- c:\documents and settings\port5\Tracing
          2009-12-23 19:53 . 2009-12-23 19:53 -------- d-----w- c:\program files\Microsoft
          2009-12-23 19:52 . 2009-12-23 19:52 -------- d-----w- c:\program files\Windows Live SkyDrive
          2009-12-23 19:52 . 2009-12-23 19:53 -------- d-----w- c:\program files\Windows Live
          2009-12-23 19:49 . 2009-12-23 19:49 -------- d-----w- c:\program files\Fichiers communs\Windows Live
          2009-12-11 06:41 . 2009-12-11 06:42 -------- d-----w- C:\eb6d57fe4ad16054a684e470

          .
          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2009-12-31 12:30 . 2009-09-07 06:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
          2009-12-24 12:50 . 2007-10-05 16:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
          2009-12-23 19:53 . 2007-10-25 06:24 74552 ----a-w- c:\documents and settings\port5\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
          2009-12-23 19:37 . 2004-08-17 08:20 90148 ----a-w- c:\windows\system32\perfc00C.dat
          2009-12-23 19:37 . 2004-08-17 08:20 526918 ----a-w- c:\windows\system32\perfh00C.dat
          2009-11-27 06:24 . 2007-11-10 18:01 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
          2009-11-25 07:13 . 2007-10-05 16:01 -------- d-----w- c:\program files\Java
          2009-11-25 07:12 . 2009-11-25 07:12 152576 ----a-w- c:\documents and settings\port5\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
          2009-11-25 07:12 . 2009-11-24 19:24 79488 ----a-w- c:\documents and settings\port5\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
          2009-11-24 23:54 . 2009-10-28 06:43 1280480 ----a-w- c:\windows\system32\aswBoot.exe
          2009-11-24 23:51 . 2009-10-28 06:43 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
          2009-11-24 23:49 . 2009-10-28 06:43 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
          2009-11-24 23:48 . 2009-10-28 06:43 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
          2009-11-24 23:47 . 2009-10-28 06:43 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
          2009-11-24 23:47 . 2009-10-28 06:43 97480 ----a-w- c:\windows\system32\AvastSS.scr
          2009-11-08 14:17 . 2009-11-08 14:16 -------- d-----w- c:\documents and settings\port5\Application Data\Autodesk
          2009-11-08 14:16 . 2008-05-30 17:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Autodesk
          2009-11-08 11:58 . 2009-10-25 18:26 -------- d-----w- c:\documents and settings\port5\Application Data\U3
          2009-10-29 07:44 . 2004-08-05 08:00 832512 ----a-w- c:\windows\system32\wininet.dll
          2009-10-29 07:44 . 2004-08-05 08:00 78336 ----a-w- c:\windows\system32\ieencode.dll
          2009-10-29 07:44 . 2004-08-05 08:00 17408 ------w- c:\windows\system32\corpol.dll
          2009-10-21 06:03 . 2004-08-05 08:00 75776 ----a-w- c:\windows\system32\strmfilt.dll
          2009-10-21 06:03 . 2004-08-05 08:00 25088 ----a-w- c:\windows\system32\httpapi.dll
          2009-10-20 14:58 . 2004-08-05 08:00 263552 ----a-w- c:\windows\system32\drivers\http.sys
          2009-10-13 10:52 . 2004-08-05 08:00 267776 ----a-w- c:\windows\system32\oakley.dll
          2009-10-12 13:52 . 2004-08-05 08:00 69632 ----a-w- c:\windows\system32\raschap.dll
          2009-10-12 13:52 . 2004-08-05 08:00 113152 ----a-w- c:\windows\system32\rastls.dll
          2009-10-11 03:17 . 2008-11-18 20:06 411368 ----a-w- c:\windows\system32\deploytk.dll
          2008-12-14 10:59 . 2008-12-14 10:55 24 --sha-w- c:\windows\SAE0300D0.tmp
          2007-12-16 19:53 . 2007-12-16 19:53 56 --sha-w- c:\windows\SMINST\hpboot.sys
          .

          ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
          REGEDIT4

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
          "{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}"= "c:\program files\DVDVideoSoft\tbDVDV.dll" [2009-11-09 2331672]

          [HKEY_CLASSES_ROOT\clsid\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]

          [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]
          2009-11-09 17:38 2331672 ----a-w- c:\program files\DVDVideoSoft\tbDVDV.dll

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
          "{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}"= "c:\program files\DVDVideoSoft\tbDVDV.dll" [2009-11-09 2331672]

          [HKEY_CLASSES_ROOT\clsid\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
          "{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}"= "c:\program files\DVDVideoSoft\tbDVDV.dll" [2009-11-09 2331672]

          [HKEY_CLASSES_ROOT\clsid\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-05 68856]
          "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-10-28 94208]
          "AnyDVD"="c:\source\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe" [2008-12-01 2292672]
          "SpybotSD TeaTimer"="c:\source\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
          "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "MsmqIntCert"="mqrt.dll" [2009-06-25 177152]
          "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
          "AccelerometerSysTrayApplet"="c:\windows\system32\AccelerometerSt.exe" [2006-01-16 53248]
          "PTHOSTTR"="c:\program files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2006-02-14 122880]
          "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2006-04-06 122940]
          "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 761948]
          "hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2006-02-14 454656]
          "CognizanceTS"="c:\progra~1\HPQ\IAM\Bin\AsTsVcc.dll" [2003-12-22 17920]
          "QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-05-08 131072]
          "Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2006-02-22 40960]
          "Recguard"="c:\windows\Sminst\Recguard.exe" [2005-12-20 1187840]
          "Reminder"="c:\windows\Creator\Remind_XP.exe" [2006-03-09 806912]
          "Scheduler"="c:\windows\SMINST\Scheduler.exe" [2006-02-15 892928]
          "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
          "WatchDog"="c:\program files\InterVideo\DVD Check\DVDCheck.exe" [2005-11-08 184320]
          "OfficeScanNT Monitor"="c:\program files\Trend Micro\OfficeScan Client\pccntmon.exe" [2006-12-19 381005]
          "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]
          "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
          "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
          "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
          "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
          "UMonit"="c:\windows\system32\UMonit.exe" [2008-08-13 200704]
          "QuickTime Task"="c:\source\Quicktime\qttask.exe" [2009-01-05 413696]
          "iTunesHelper"="c:\source\Itunes\IPod\iTunesHelper.exe" [2009-04-02 342312]
          "avast!"="c:\source\AVAST\FICHIE~1\ashDisp.exe" [2009-11-24 81000]
          "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

          c:\documents and settings\All Users\Application Data\Microsoft\Shortcuts\
          Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]
          BTTray.lnk - c:\program files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [2006-2-15 581693]
          DVD Check.lnk - c:\program files\InterVideo\DVD Check\DVDCheck.exe [2007-10-5 184320]
          Lancement rapide d'Adobe Acrobat.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe [2007-11-10 295606]
          Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
          "NoWelcomeScreen"= 1 (0x1)

          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]
          "DisableMonitoring"=dword:00000001

          [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
          "DisableMonitoring"=dword:00000001

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
          "%windir%\\system32\\sessmgr.exe"=
          "c:\\WINDOWS\\system32\\mqsvc.exe"=
          "c:\\WINDOWS\\SMINST\\Scheduler.exe"=
          "c:\\WINDOWS\\system32\\fxsclnt.exe"=
          "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\HP2014MC.EXE"=
          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
          "c:\\Program Files\\Messenger\\msmsgs.exe"=
          "c:\\Program Files\\TeamViewer3\\TeamViewer.exe"=
          "c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
          "c:\\SOURCE\\Eggcrm_1.0\\server\\apache\\bin\\distribhttpd.exe"=
          "c:\\SOURCE\\Eggcrm_1.0\\server\\mysql\\bin\\distribmysqld.exe"=
          "c:\\SOURCE\\Itunes\\IPod\\iTunes.exe"=
          "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
          "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
          "c:\\Program Files\\Vuze\\Azureus.exe"=

          R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [28/10/2009 7:43 114768]
          R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [25/10/2005 19:10 35488]
          R2 ASChannel;Canal de communication local;c:\windows\System32\svchost.exe -k Cognizance [5/08/2004 9:00 14336]
          R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [28/10/2009 7:43 20560]
          R2 TmFilter;Trend Micro Filter;c:\program files\Trend Micro\OfficeScan Client\TmXPFlt.sys [6/09/2006 20:27 225296]
          R2 TmPreFilter;Trend Micro PreFilter;c:\program files\Trend Micro\OfficeScan Client\tmpreflt.sys [6/09/2006 20:27 36368]
          R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [11/10/2006 22:53 87936]
          R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [10/06/2005 14:26 35968]
          S2 gupdate1ca3ec41ed29b4;Service Google Update (gupdate1ca3ec41ed29b4);c:\program files\Google\Update\GoogleUpdate.exe [26/09/2009 17:11 133104]
          S3 Insvcdkwdpdm;Insvcdkwdpdm;c:\windows\system32\drivers\rio8drv.sys [5/08/2004 9:00 12032]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
          Cognizance REG_MULTI_SZ ASChannel
          HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
          .
          Contenu du dossier 'Tâches planifiées'

          2009-09-18 c:\windows\Tasks\AppleSoftwareUpdate.job
          - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

          2010-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
          - c:\program files\Google\Update\GoogleUpdate.exe [2009-09-26 16:11]

          2010-01-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
          - c:\program files\Google\Update\GoogleUpdate.exe [2009-09-26 16:11]

          2010-01-03 c:\windows\Tasks\OGADaily.job
          - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

          2010-01-03 c:\windows\Tasks\OGALogon.job
          - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]
          .
          .
          ------- Examen supplémentaire -------
          .
          uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
          uStart Page = hxxp://www.google.be/
          uInternet Connection Wizard,ShellNext = https://sbs2003.tivolux.local:4343/officescan/default_SMB.htm
          DPF: {9BBB3919-F518-4D06-8209-299FC243FC30} - hxxps://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxEnc.cab
          DPF: {9DCD8EB7-E925-45C9-9321-8CA843FBED40} - hxxps://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxConsole.cab
          .
          - - - - ORPHELINS SUPPRIMES - - - -

          BHO-{201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
          BHO-{E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
          HKCU-Run-Cld2000.exe - c:\source\Agenda\Calendrier\Cld2000.exe
          HKLM-Run-Internet Connection Wizard Setup Tool - c:\program files\Internet Explorer\Connection Wizard\icwsetup.exe
          Notify-IfxWlxEN - IfxWlxEN.dll
          AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe

          **************************************************************************

          catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2010-01-03 19:11
          Windows 5.1.2600 Service Pack 2 NTFS

          Recherche de processus cachés ...

          Recherche d'éléments en démarrage automatique cachés ...

          HKLM\Software\Microsoft\Windows\CurrentVersion\Run
          Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe?????? ???@???????????????@? ???????????(?@???????@
          UMonit = c:\windows\system32\UMonit.exe?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

          Recherche de fichiers cachés ...

          Scan terminé avec succès
          Fichiers cachés: 0

          **************************************************************************
          .
          --------------------- CLES DE REGISTRE BLOQUEES ---------------------

          [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
          "C040311900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
          .
          --------------------- DLLs chargées dans les processus actifs ---------------------

          - - - - - - - > 'winlogon.exe'(912)
          c:\windows\system32\Ati2evxx.dll

          - - - - - - - > 'explorer.exe'(5148)
          c:\source\ANY DVD\Programme\AnyDVD\ADvdDiscHlp.dll
          c:\program files\HPQ\IAM\Bin\SFSShell.dll
          c:\program files\HPQ\IAM\bin\ItMsg.dll
          c:\program files\HPQ\IAM\bin\1036\SFSShell.dll
          .
          ------------------------ Autres processus actifs ------------------------
          .
          c:\windows\system32\Ati2evxx.exe
          c:\windows\system32\IFXTCS.exe
          c:\source\AVAST\Fichier Avast\aswUpdSv.exe
          c:\source\AVAST\Fichier Avast\ashServ.exe
          c:\windows\System32\SCardSvr.exe
          c:\windows\system32\msdtc.exe
          c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          c:\program files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
          c:\windows\system32\IFXSPMGT.exe
          c:\program files\Java\jre6\bin\jqs.exe
          c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
          c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
          c:\program files\Trend Micro\OfficeScan Client\ntrtscan.exe
          c:\program files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
          c:\program files\Trend Micro\OfficeScan Client\tmlisten.exe
          c:\windows\system32\wdfmgr.exe
          c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
          c:\windows\system32\mqsvc.exe
          c:\program files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
          c:\windows\System32\spool\DRIVERS\W32X86\3\HP2014MC.EXE
          c:\windows\system32\mqtgsvc.exe
          c:\source\AVAST\Fichier Avast\ashMaiSv.exe
          c:\source\AVAST\Fichier Avast\ashWebSv.exe
          c:\windows\system32\wbem\wmiapsrv.exe
          c:\windows\system32\Ati2evxx.exe
          c:\windows\TEMP\KKA22E.EXE
          c:\progra~1\HPQ\Shared\HPQTOA~1.EXE
          c:\program files\iPod\bin\iPodService.exe
          c:\program files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          .
          **************************************************************************
          .
          Heure de fin: 2010-01-03 19:18:15 - La machine a redémarré
          ComboFix-quarantined-files.txt 2010-01-03 18:18

          Avant-CF: 76.341.116.928 octets libres
          Après-CF: 76.291.043.328 octets libres

          - - End Of File - - 7C8FAED82873BE6BE557C5CAC4B85997
          0
      3. archet9
        Fais un scan avec cet antispyware :
        Malwarebytes + tutoriel

        Tu l´installes; mets le a jour...(onglet mise a jour)
        Click maintenant sur l´onglet recherche et coche la case :
        "Executer un examen rapide".
        Puis click sur "rechercher".
        Laisses le scanner le pc...
        A la fin du scan, clique sur Afficher les résultats
        Si des elements on ete trouvés :
        > click sur supprimer la selection.
        si il t´es demandé de redemarrer > click sur "oui".
        A la fin un rapport va s´ouvrir;
        sauvegarde le de maniere a le retrouver en vue de le poster sur le forum.
        Copies et colles le rapport stp.

        a+

        0
        1. Gege
          Hello Archet9,

          Voici le rapport :
          Merci

          Malwarebytes' Anti-Malware 1.43
          Version de la base de données: 3488
          Windows 5.1.2600 Service Pack 2
          Internet Explorer 7.0.5730.13

          3/01/2010 20:10:34
          mbam-log-2010-01-03 (20-10-34).txt

          Type de recherche: Examen rapide
          Eléments examinés: 136748
          Temps écoulé: 8 minute(s), 23 second(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 0
          Clé(s) du Registre infectée(s): 0
          Valeur(s) du Registre infectée(s): 0
          Elément(s) de données du Registre infecté(s): 0
          Dossier(s) infecté(s): 0
          Fichier(s) infecté(s): 0

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Clé(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Valeur(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Elément(s) de données du Registre infecté(s):
          (Aucun élément nuisible détecté)

          Dossier(s) infecté(s):
          (Aucun élément nuisible détecté)

          Fichier(s) infecté(s):
          (Aucun élément nuisible détecté)
          0
      4. archet9
        Comment se comporte le pc?

        a+
        0
        1. Gege
          Il a l'air de bien aller ... mais j'ai encore eu, juste avant le scan, une alerte de virus de AVAST que j'ai mis en quarantaine (le nom : Trojan-gen 32).

          Je vais attendre demain, car c'est souvent au lancement du PC que ca bloque ... je dois m'y reprendre à deux reprises avant qu'il ne fonctionne bien !!

          Je te tiendrais au courant de la suite si tu le souhaites.

          PUIS-JE relancer Spy-Boot et Avast ?

          A +, Grand Merci !
          Gege
          0
      5. archet9 
        PUIS-JE relancer Spy-Boot et Avast ?


        ==> Oui ...

        je bosses demain très tot...et toute la journée --> donc à demain soir !

        bye..
        0
        1. Gege
          Ok, je te donnerai des nouvelles ...

          Encore merci à toi ,

          Gege
          0
      6. archet9
        Refais un RSIT.... je regarderai demain

        a+
        0
        1. Gege
          Bonjour archet9,

          Je voulais te remercier à nouveau pour ton aide.

          Je ne sais pas ce que tu entendais par refaire un RSIT mais j'ai refait un scan avec "Malwarebytes' Anti-Malware" (Scan rapide et Minutieux) et il n'a toujours pas detecté de virus nuisible !!

          Mon Pc tourne très bien depuis hier matin (j'ai encore eu des alertes de Avast avant hier "5 virus de suite" et j'ai tout supprimé) Ce matin mon PC tourne Toujours bien ... On verra par la suite !!

          Encore Merci,

          ARCHET ... La personne de la situation !!

          A bientôt (peut être)

          Gege
          0
      7. archet9
        RSIT = Comme au message :4

        a+
        0
        1. Gege
          Hello !

          Voici le rapport RSIT :

          Logfile of random's system information tool 1.06 (written by random/random)
          Run by port5 at 2010-01-07 11:32:47
          Microsoft Windows XP Professionnel Service Pack 2
          System drive C: has 69 GB (65%) free of 106 GB
          Total RAM: 1023 MB (46% free)

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 11:33:24, on 7/01/2010
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16945)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\IFXTCS.exe
          C:\SOURCE\AVAST\Fichier Avast\aswUpdSv.exe
          C:\SOURCE\AVAST\Fichier Avast\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
          C:\WINDOWS\system32\IFXSPMGT.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
          C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
          C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
          C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
          C:\WINDOWS\system32\mqsvc.exe
          C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
          C:\WINDOWS\system32\mqtgsvc.exe
          C:\SOURCE\AVAST\Fichier Avast\ashMaiSv.exe
          C:\SOURCE\AVAST\Fichier Avast\ashWebSv.exe
          C:\WINDOWS\system32\wbem\wmiapsrv.exe
          C:\WINDOWS\TEMP\PJBC24.EXE
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Analog Devices\Core\smax4pnp.exe
          C:\WINDOWS\system32\AccelerometerSt.exe
          C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
          C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
          C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
          C:\WINDOWS\SMINST\Scheduler.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
          C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
          C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
          C:\WINDOWS\system32\UMonit.exe
          C:\SOURCE\Itunes\IPod\iTunesHelper.exe
          C:\SOURCE\AVAST\FICHIE~1\ashDisp.exe
          C:\Program Files\Java\jre6\bin\jusched.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
          C:\SOURCE\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe
          C:\SOURCE\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
          C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          c:\program files\fichiers communs\installshield\updateservice\isuspm.exe
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe
          c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
          C:\SOURCE\Rsit\RSIT.exe
          C:\SOURCE\Logiciel Supp. WGA\port5.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://sbs2003.tivolux.local:4343/officescan/default_SMB.htm
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\SOURCE\SPYBOT~1\SDHelper.dll
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
          O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
          O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          O2 - BHO: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
          O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
          O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
          O3 - Toolbar: DVDVideoSoft Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll
          O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
          O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
          O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\AccelerometerSt.exe
          O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
          O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
          O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
          O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
          O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
          O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
          O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
          O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
          O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
          O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
          O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
          O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
          O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\UMonit.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\SOURCE\Quicktime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\SOURCE\Itunes\IPod\iTunesHelper.exe"
          O4 - HKLM\..\Run: [avast!] C:\SOURCE\AVAST\FICHIE~1\ashDisp.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
          O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
          O4 - HKCU\..\Run: [AnyDVD] C:\SOURCE\ANY DVD\Programme\AnyDVD\AnyDVDtray.exe
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\SOURCE\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [Cld2000.exe] C:\SOURCE\Agenda\Calendrier\Cld2000.exe
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
          O4 - Global Startup: BTTray.lnk = ?
          O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
          O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
          O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\SOURCE\JEUX\POKER\PokerStarsUpdate.exe
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\SOURCE\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\SOURCE\SPYBOT~1\SDHelper.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
          O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/WinNTChk.cab
          O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/setupini.cab
          O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/setup.cab
          O16 - DPF: {485D813E-EE26-4DF8-9FAF-DEDF2885306E} (NSHelp Class) - http://sbs2003/connectcomputer/nshelp.dll
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://sbs2003.tivolux.local:4343/officescan/console/ClientInstall/RemoveCtrl.cab
          O16 - DPF: {9BBB3919-F518-4D06-8209-299FC243FC30} (Encrypt Class) - https://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxEnc.cab
          O16 - DPF: {9DCD8EB7-E925-45C9-9321-8CA843FBED40} (Console d'administration de Security Server) - https://sbs2003.tivolux.local:4343/SMB/console/html/root/AtxConsole.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Tivolux.local
          O17 - HKLM\Software\..\Telephony: DomainName = Tivolux.local
          O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Tivolux.local
          O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Tivolux.local
          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\SOURCE\AVAST\Fichier Avast\ashWebSv.exe
          O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
          O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          O23 - Service: Service Google Update (gupdate1ca3ec41ed29b4) (gupdate1ca3ec41ed29b4) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
          O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\IFXSPMGT.exe
          O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\IFXTCS.exe
          O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          O23 - Service: Scan en temps réel Trend Micro Client/Server Security Agent (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
          O23 - Service: Pare-feu personnel Trend Micro Client/Server Security Agent (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
          O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
          O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Program Files\ProtectTools\Embedded Security Software\PSDsrvc.EXE
          O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
          0
      8. archet9
        re,

        ---> Télécharge OTM (OldTimer) sur ton Bureau :
        http: http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

        ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

        ---> Copie (Ctrl+C) le texte suivant en gras ci-dessous :

        :reg
        [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
        [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]

        :commands
        [purity]
        [emptytemp]
        [start explorer]
        [Reboot]

        ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre:
        Paste Instructions for Items to be Moved.

        ---> Clique maintenant sur le bouton MoveIt!

        Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
        Accepte en cliquant sur YES.

        ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
        Le nom du rapport correspond au moment de sa création : date_heure.log

        a+
        0

        Discussions similaires

        Scan manga m'a bloqué
        Mia

        5 réponses
        Bloqué de scan manga
        Am43768

        1 réponse
        IJ Scan utility
        ministratif

        3 réponses
        Où sont stockés les QR codes sur android ?
        zatox19

        11 réponses
        Problème lecture Scan manga
        léa

        14 réponses