"Mes documents" s'ouvre tout seul.

C'est bon merci beaucoup de tes réponse et de ton temps si généreux!
Problème résolu

quand vous faire ceci :
menu démarrer => Exécuter et tappez REGEDIT
et pour matio il dit ( menu démarrer => tous les programmes => démarrage

Mais pour Mation je n'ai rien dans démarrage

Je met rnedre le lien publics?

Oui, pas de souci.

J'ai oublier de préciser que ça me le faisait pour chaque utilisateur je coche "Tous les utlisateurs"?

Pour l'instant non.

Attendre ou recommencer.

.
======= RAPPORT D'AD-REMOVER 2.0.0.0,B | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 31/03/10 à 21:30
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 15:23:31 le 12/04/2010 | Mode normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft® Windows Vista(TM) HomeBasic Service Pack 2 - X86
Nom du PC: PC-DE-DAMIEN | Utilisateur actuel: Gilles (Administrateur)
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
C:\Program Files\Ask.com
C:\Program Files\Bandoo
C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
C:\ProgramData\Bandoo
C:\Users\Administrateur\AppData\LocalLow\AskToolbar
C:\Users\Administrateur\AppData\Roaming\Bandoo
C:\Users\damien\AppData\LocalLow\AskToolbar
C:\Users\damien\AppData\Roaming\Bandoo
C:\Users\Elodie\AppData\Roaming\Bandoo
C:\Users\Elodie2\AppData\LocalLow\AskToolbar
C:\Users\Elodie2\AppData\Roaming\Bandoo
C:\Users\Gilles\AppData\LocalLow\AskToolbar
C:\Users\Gilles\AppData\Roaming\Bandoo
C:\Users\Gilles\AppData\Roaming\Mozilla\FireFox\Profiles\9j3z5n0k.default\extensions\toolbar@ask.com
C:\Users\Gilles\AppData\Roaming\Mozilla\FireFox\Profiles\9j3z5n0k.default\searchplugins\askcom.xml
C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
C:\Windows\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar

(!) -- Fichiers temporaires supprimés.
.
HKCU\Software\AppDataLow\AskBarDis
HKCU\Software\AppDataLow\AskHomePage
HKCU\Software\AppDataLow\AskToolbarInfo
HKCU\Software\AppDataLow\Software\AskToolbar
HKCU\Software\Ask.com
HKCU\Software\AskToolbar
HKCU\Software\Iminent
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\bandoo
HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
HKLM\Software\Classes\Interface\{DB885111-F39F-4D88-9EE5-C88460B6DF7B}
HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
HKLM\Software\Iminent
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|IMBooster
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Ask.com\GenericAskToolbar.dll
.
(Orpheline) HKCU,Run - RoboForm - C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Fichier manquant)
(Orpheline) HKCU,Run - EPSON SX100 Series (Copie 1) - C:\Windows\TEMP\E_S894E.tmp (Fichier manquant)
(Orpheline) HKCU,Run - CryptLoad - C:\Users\Gilles\AppData\Local\Temp\Rar$EX01.581\RouterClient.exe (Fichier manquant)
(Orpheline) BHO: (AVG Safe Search) -{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (Fichier manquant)
(Orpheline) BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} (CLSID manquant)
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version 3.6 (fr) *
.
C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - browser.download.lastDir: C:\\Users\\Gilles\\Downloads
C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - browser.search.defaultenginename: Ask.com
C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - browser.search.selectedEngine: Bing
C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - browser.startup.homepage: hxxp://fr.msn.com/
C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2
C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - keyword.URL: hxxp://www.bing.com/search?mkt=fr-FR&form=MIAWB1&q=
C:\Users\damien\..\vtfh54nr.default\prefs.js - browser.download.lastDir: C:\\Users\\damien\\Pictures
C:\Users\damien\..\vtfh54nr.default\prefs.js - browser.startup.homepage: hxxp://www.google.fr/
C:\Users\damien\..\vtfh54nr.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2
C:\Users\Elodie\..\88ecr2fz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.7
C:\Users\Elodie2\..\dp6al2bs.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2
.
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("browser.search.defaultengine", "Ask.com");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("browser.search.defaultenginename", "Ask.com");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("browser.search.order.1", "Ask.com");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.cbid", "UG");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&dm=lang");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.first-launch-url", "hxxp://www.torrentz.com/");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.l", "dis");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.last-config-req", "1268419221335");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.locale", "fr_FR");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.o", "15158");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.asktb.qsrc", "2871");
EFFACÉ: C:\Users\Gilles\..\9j3z5n0k.default\prefs.js - user_pref("extensions.enabledItems", "{20a82645-c095-46ed-80e3-08825760534b}:1.1,DTToolbar@toolbarnet.com:1.1.1.0014,toolbar@ask.com:3.5.1.110,fdm_ffext@freedownloadmanager.org:1.3.4,litmus-ff@f-secure.com:1.10,mozilla_cc@internetdownloadmanager.com:6.9.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6");
.
* Internet Explorer Version 8.0.6001.18904 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
============== SUSPECT(S) ==============
.
C:\Users\Gilles\Documents\Downloads\currports_patch_francais_francais_31635.zip
C:\Users\Gilles\Documents\Downloads\Les sims 3\crack Sims 3 patch 3.exe
C:\Users\Gilles\Documents\Downloads\Les sims 3\crack Sims 3 patch 3.rar
C:\Users\Gilles\Documents\Downloads\Les sims 3\Nouveau dossier\The.Sims.3.Crackfix.Read.Nfo-Raz.exe
C:\Users\Gilles\Documents\Downloads\Les sims 3\Nouveau dossier\The.Sims.3.Crackfix.Read.Nfo-Raz.rar
.
========================================
.
C:\Users\Gilles\AppData\Local\Temp: 4 Fichier(s), 331 Dossier(s)
C:\Windows\temp: 2 Fichier(s), 2 Dossier(s)
C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies: 2 Fichier(s), 2 Dossier(s)
Temporary Internet Files: 2 Fichier(s), 13 Dossier(s)
.
C:\Ad-Remover\Quarantine: 128 Fichier(s)
C:\Ad-Remover\Backup: 29 Fichier(s)
.
C:\Ad-Report-CLEAN[1].txt - 520 Octet(s)
C:\Ad-Report-CLEAN[2].txt - 9494 Octet(s)
.
Fin à: 15:31:23, 12/04/2010
.
============== E.O.F - CLEAN[2] ==============

Voilà en espérant que c'est bien cela que vous m'aviez demandé!

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Version de la base de données: 3982

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

12/04/2010 20:19:21
mbam-log-2010-04-12 (20-19-21).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 150605
Temps écoulé: 9 minute(s), 19 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\$RECYCLE.BIN\S-1-5-21-2852739564-123972161-778286282-1000\$RJDZFQW.exe (Backdoor.Agent) -> Quarantined and deleted successfully.

Avec "tous les utilisateurs"?

Pourquoi pas.

https://www.cjoint.com/?emvIpxgNdl

A chaque fois je n'ai plus OTL! pourquoi?

All processes killed
========== OTL ==========
Service Bandoo Coordinator stopped successfully!
Service Bandoo Coordinator deleted successfully!
File File not found not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\RunOnce not found.
C:\Users\Gilles\AppData\Local\Temp\_inst1.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~1\bandoo\bndhook.dll deleted successfully.
C:\Windows\System32\drivers\gbhvto.sys moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 58087077 bytes
->Temporary Internet Files folder emptied: 3641604 bytes
->Flash cache emptied: 509 bytes

User: All Users

User: damien
->Temp folder emptied: 122689880 bytes
->Temporary Internet Files folder emptied: 78848078 bytes
->Java cache emptied: 26070653 bytes
->FireFox cache emptied: 52583195 bytes
->Google Chrome cache emptied: 453463032 bytes
->Flash cache emptied: 59497 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 134 bytes
->Flash cache emptied: 41695 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Elodie
->Temp folder emptied: 1575212 bytes
->Temporary Internet Files folder emptied: 412081335 bytes
->Java cache emptied: 25998417 bytes
->FireFox cache emptied: 3253425 bytes
->Flash cache emptied: 8780 bytes

User: Elodie2
->Temp folder emptied: 9087688 bytes
->Temporary Internet Files folder emptied: 21848666 bytes
->Java cache emptied: 13374468 bytes
->FireFox cache emptied: 3403635 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 38336 bytes

User: Gilles
->Temp folder emptied: 1025396 bytes
->Temporary Internet Files folder emptied: 12183052 bytes
->Java cache emptied: 26202906 bytes
->FireFox cache emptied: 36064594 bytes
->Google Chrome cache emptied: 153582789 bytes
->Flash cache emptied: 67306 bytes

User: Invité
->Temp folder emptied: 1081378 bytes
->Temporary Internet Files folder emptied: 1559716 bytes
->Flash cache emptied: 75 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3816 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 165972730 bytes

Total Files Cleaned = 1 606,00 mb


OTL by OldTimer - Version 3.2.1.1 log created on 04122010_215718

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\_avast5_\Webshlock.txt not found!

Registry entries deleted on Reboot...