Sos, blockage msn et facebook - Page 2

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========
Error: No service named {95808DC4-FA4A-4c74-92FE-5B863F82066B};{ was found to stop!
Service\Driver key {95808DC4-FA4A-4c74-92FE-5B863F82066B};{ not found.
========== FILES ==========
C:\11f508d2b9823373ecd4\3082 folder moved successfully.
C:\11f508d2b9823373ecd4\3076 folder moved successfully.
C:\11f508d2b9823373ecd4\2070 folder moved successfully.
C:\11f508d2b9823373ecd4\2052 folder moved successfully.
C:\11f508d2b9823373ecd4\1055 folder moved successfully.
C:\11f508d2b9823373ecd4\1053 folder moved successfully.
C:\11f508d2b9823373ecd4\1049 folder moved successfully.
C:\11f508d2b9823373ecd4\1046 folder moved successfully.
C:\11f508d2b9823373ecd4\1045 folder moved successfully.
C:\11f508d2b9823373ecd4\1044 folder moved successfully.
C:\11f508d2b9823373ecd4\1043 folder moved successfully.
C:\11f508d2b9823373ecd4\1042 folder moved successfully.
C:\11f508d2b9823373ecd4\1041 folder moved successfully.
C:\11f508d2b9823373ecd4\1040 folder moved successfully.
C:\11f508d2b9823373ecd4\1038 folder moved successfully.
C:\11f508d2b9823373ecd4\1037 folder moved successfully.
C:\11f508d2b9823373ecd4\1036 folder moved successfully.
C:\11f508d2b9823373ecd4\1035 folder moved successfully.
C:\11f508d2b9823373ecd4\1033 folder moved successfully.
C:\11f508d2b9823373ecd4\1032 folder moved successfully.
C:\11f508d2b9823373ecd4\1031 folder moved successfully.
C:\11f508d2b9823373ecd4\1030 folder moved successfully.
C:\11f508d2b9823373ecd4\1029 folder moved successfully.
C:\11f508d2b9823373ecd4\1028 folder moved successfully.
C:\11f508d2b9823373ecd4\1025 folder moved successfully.
C:\11f508d2b9823373ecd4 folder moved successfully.
C:\2b2ddc9b759cb395337cc86e\i386 folder moved successfully.
C:\2b2ddc9b759cb395337cc86e\amd64 folder moved successfully.
C:\2b2ddc9b759cb395337cc86e folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1\Local Store folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1\Local Store folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1\Local Store folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\app folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1\Local Store folder moved successfully.
C:\Documents and Settings\gourbert\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\6138 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A3570649-72CF-4FA2-A237-74A7EE92053E}\OFFLINE\mMSI.dll folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A3570649-72CF-4FA2-A237-74A7EE92053E}\OFFLINE\mIDEFunc.dll folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A3570649-72CF-4FA2-A237-74A7EE92053E}\OFFLINE\mDown.dll folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A3570649-72CF-4FA2-A237-74A7EE92053E}\OFFLINE folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A3570649-72CF-4FA2-A237-74A7EE92053E} folder moved successfully.
C:\UsbFix\Tools folder moved successfully.
C:\UsbFix\Res folder moved successfully.
C:\UsbFix\Quarantine\C\Recycler\S-1-5-21-1343024091-1637723038-1801674531-1004\Dc7 folder moved successfully.
C:\UsbFix\Quarantine\C\Recycler\S-1-5-21-1343024091-1637723038-1801674531-1004 folder moved successfully.
C:\UsbFix\Quarantine\C\Recycler folder moved successfully.
C:\UsbFix\Quarantine\C\DOCUME~1\gourbert\LOCALS~1\Temp folder moved successfully.
C:\UsbFix\Quarantine\C\DOCUME~1\gourbert\LOCALS~1 folder moved successfully.
C:\UsbFix\Quarantine\C\DOCUME~1\gourbert folder moved successfully.
C:\UsbFix\Quarantine\C\DOCUME~1 folder moved successfully.
C:\UsbFix\Quarantine\C folder moved successfully.
C:\UsbFix\Quarantine folder moved successfully.
C:\UsbFix\Erunt folder moved successfully.
C:\UsbFix\BACKUP\Registry-25-01-2010\Users\00000002 folder moved successfully.
C:\UsbFix\BACKUP\Registry-25-01-2010\Users\00000001 folder moved successfully.
C:\UsbFix\BACKUP\Registry-25-01-2010\Users folder moved successfully.
C:\UsbFix\BACKUP\Registry-25-01-2010 folder moved successfully.
C:\UsbFix\BACKUP folder moved successfully.
C:\UsbFix folder moved successfully.
C:\UsbFix.txt moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41044 bytes

User: gourbert
->Temp folder emptied: 1283784095 bytes
->Temporary Internet Files folder emptied: 5963998 bytes
->Java cache emptied: 220383 bytes
->FireFox cache emptied: 59500417 bytes
->Google Chrome cache emptied: 14419142 bytes
->Flash cache emptied: 13244659 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 3421489 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2351795 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 152234536 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 100702126 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1 560,00 mb

OTM by OldTimer - Version 3.1.17.1 log created on 01262010_192513

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

UPupup on m'oublie?

Sil-vous-plait, j'ai toujours le même probléme, ce serait sympa de pas m'abandonner et de m'aider a finir de régler mon soucis qui commence e être pesant!

Merci!

Voilà le lien:

http://www.cijoint.fr/cjlink.php?file=cj201011/cijxrWaREH.txt

======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 05/11/10 à 10:25
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 20:31:44 le 05/02/2010, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86)
gourbert@GOURBERT-9312D4 ( )

============== RECHERCHE ==============

============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.11 (fr)] **

-- C:\Documents and Settings\gourbert\Application Data\Mozilla\FireFox\Profiles\zd3craws.default\Prefs.js --
browser.download.lastDir, C:\\Documents and Settings\\gourbert\\Mes documents\\Mes images
browser.search.defaultenginename, SearchTheWeb
browser.search.selectedEngine, Google
browser.startup.homepage, hxxp://search.imesh.com/
browser.startup.homepage_override.mstone, rv:1.9.2.11

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 1188 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 05/02/2010 (14688 Octet(s))
C:\Ad-Report-SCAN[1].txt - 05/02/2010 (2097 Octet(s))

Fin à: 20:32:39, 05/02/2010

============== E.O.F ==============

ComboFix 10-11-05.05 - gourbert 05/11/2010 23:35:18.1.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1346 [GMT 1:00]
Lancé depuis: c:\documents and settings\gourbert\Mes documents\Téléchargements\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\gourbert\Application Data\PriceGong
c:\documents and settings\gourbert\Application Data\PriceGong\Data\1.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\a.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\b.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\c.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\d.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\e.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\f.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\g.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\h.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\i.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\J.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\k.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\l.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\m.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\mru.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\n.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\o.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\p.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\q.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\r.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\s.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\t.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\u.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\v.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\w.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\x.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\y.xml
c:\documents and settings\gourbert\Application Data\PriceGong\Data\z.xml
c:\windows\system32\winlogon.bak
c:\windows\TEMP\logishrd\LVPrcInj01.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-10-05 au 2010-11-05 ))))))))))))))))))))))))))))))))))))
.

2010-10-14 20:34 . 2008-04-14 12:00 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-10-12 15:40 . 2010-01-23 13:51 -------- d-----w- c:\program files\Fichiers communs\Java
2010-10-12 15:39 . 2010-10-12 15:39 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-10-11 17:20 . 2010-01-23 13:51 -------- d-----w- c:\program files\Java
2010-10-11 17:14 . 2010-10-12 15:39 423656 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2010-10-11 17:14 . 2010-10-12 15:39 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-10-09 20:07 . 2010-02-05 22:15 -------- d-----w- c:\documents and settings\gourbert\Local Settings\Application Data\Adobe
2010-10-09 14:31 . 2003-06-16 15:46 192272 ----a-w- c:\windows\system32\mci32.ocx
2010-10-09 10:39 . 2010-10-09 19:44 -------- d-----w- c:\program files\Mindscape
2010-10-09 10:39 . 2010-10-09 10:39 -------- d-----w- c:\documents and settings\gourbert\Application Data\Mindscape
2010-10-09 10:39 . 2004-04-18 21:42 733184 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\iKernel.dll
2010-10-09 10:39 . 2004-04-18 21:40 69715 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\ctor.dll
2010-10-09 10:39 . 2004-04-18 21:39 266240 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\iscript.dll
2010-10-09 10:39 . 2004-04-18 21:39 172032 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\iuser.dll
2010-10-09 10:39 . 2004-04-18 21:39 5632 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\DotNetInstaller.exe
2010-10-09 10:39 . 2010-10-09 10:39 180356 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\iGdi.dll
2010-10-09 10:39 . 2010-10-09 10:39 303236 ----a-w- c:\program files\Fichiers communs\InstallShield\Professional\RunTime\10\00\Intel32\setup.dll
2010-10-09 10:14 . 2010-01-23 13:49 -------- d-----w- c:\program files\Myst III Exile
2010-10-09 10:14 . 2000-10-05 13:55 77824 ----a-w- c:\program files\Fichiers communs\InstallShield\engine\6\Intel 32\ctor.dll
2010-10-09 10:14 . 2000-10-05 15:01 602244 ----a-w- c:\program files\Fichiers communs\InstallShield\engine\6\Intel 32\IKernel.exe
2010-10-07 20:35 . 2010-01-21 18:48 16856 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe
2010-10-07 20:35 . 2010-01-21 18:48 719832 ----a-w- c:\program files\Mozilla Firefox\mozcpp19.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-18 10:23 . 2008-04-14 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2008-04-14 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2008-04-14 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2008-04-14 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:50 . 2008-04-14 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:50 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:50 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:51 . 2008-04-14 12:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:55 . 2008-04-14 12:00 1852928 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:02 . 2008-04-14 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:58 . 2008-04-14 12:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2010-08-26 13:39 . 2008-04-14 12:00 357248 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-23 16:12 . 2008-04-14 12:00 617472 ----a-w- c:\windows\system32\comctl32.dll
2010-08-17 13:17 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-16 08:44 . 2008-04-14 12:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
.

------- Sigcheck -------

[-] 2009-07-16 . 8D71F28DEB37CC9C2E344095D8BFE1EE . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{346de098-61f9-4b42-89da-6dfba7091bb6}"= "c:\program files\IMBooster4web-en\tbIMB1.dll" [2010-09-22 2735200]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes0.dll" [2010-09-13 2735200]
"{84FF7BD6-B47F-46F8-9130-01B2696B36CB}"= "c:\program files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll" [2010-08-17 111608]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\tbSoft.dll" [2010-06-13 2734688]

[HKEY_CLASSES_ROOT\clsid\{346de098-61f9-4b42-89da-6dfba7091bb6}]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CLASSES_ROOT\clsid\{84ff7bd6-b47f-46f8-9130-01b2696b36cb}]
[HKEY_CLASSES_ROOT\IminentBHONavigationError.CHelperBHO.1]
[HKEY_CLASSES_ROOT\TypeLib\{59E6E159-57CC-4DA5-8700-2AD17DC31DD1}]
[HKEY_CLASSES_ROOT\IminentBHONavigationError.CHelperBHO]

[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{346de098-61f9-4b42-89da-6dfba7091bb6}]
2010-09-22 20:35 2735200 ----a-w- c:\program files\IMBooster4web-en\tbIMB1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
2010-06-13 18:10 2734688 ----a-w- c:\program files\Softonic_France\tbSoft.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
2010-07-02 07:54 2607872 ----a-w- c:\program files\IMinent Toolbar\tbcore3.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{59994074-c06d-4a75-9768-49e5a8c21264}]
2010-09-13 18:10 2735200 ----a-w- c:\program files\Messenger_Plus_Live_France\tbMes0.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
2010-08-17 14:18 111608 ----a-w- c:\program files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{346de098-61f9-4b42-89da-6dfba7091bb6}"= "c:\program files\IMBooster4web-en\tbIMB1.dll" [2010-09-22 2735200]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes0.dll" [2010-09-13 2735200]
"{977AE9CC-AF83-45E8-9E03-E2798216E2D5}"= "c:\program files\IMinent Toolbar\tbcore3.dll" [2010-07-02 2607872]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\tbSoft.dll" [2010-06-13 2734688]

[HKEY_CLASSES_ROOT\clsid\{346de098-61f9-4b42-89da-6dfba7091bb6}]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CLASSES_ROOT\clsid\{977ae9cc-af83-45e8-9e03-e2798216e2d5}]
[HKEY_CLASSES_ROOT\TBSB01620.TBSB01620.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB01620.TBSB01620]

[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{346DE098-61F9-4B42-89DA-6DFBA7091BB6}"= "c:\program files\IMBooster4web-en\tbIMB1.dll" [2010-09-22 2735200]
"{59994074-C06D-4A75-9768-49E5A8C21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes0.dll" [2010-09-13 2735200]
"{977AE9CC-AF83-45E8-9E03-E2798216E2D5}"= "c:\program files\IMinent Toolbar\tbcore3.dll" [2010-07-02 2607872]
"{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}"= "c:\program files\Softonic_France\tbSoft.dll" [2010-06-13 2734688]

[HKEY_CLASSES_ROOT\clsid\{346de098-61f9-4b42-89da-6dfba7091bb6}]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CLASSES_ROOT\clsid\{977ae9cc-af83-45e8-9e03-e2798216e2d5}]
[HKEY_CLASSES_ROOT\TBSB01620.TBSB01620.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB01620.TBSB01620]

[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-06-03 251240]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-04-30 5472016]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-24 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 16126464]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-02-07 71216]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-02-07 54832]
"nwiz"="nwiz.exe" [2009-06-10 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-06-10 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 13758464]
"SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648]
"PaperPort PTD"="c:\program files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 57393]
"IndexSearch"="c:\program files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 40960]
"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 622592]
"SetDefPrt"="c:\program files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 49152]
"ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 61440]
"FixCamera"="c:\windows\FixCamera.exe" [2007-07-11 20480]
"snpstd3"="c:\windows\vsnpstd3.exe" [2006-09-19 827392]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [2007-04-21 270336]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-05-08 2780432]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"IMBooster"="c:\program files\Iminent\IMBooster\imbooster.exe" [2010-08-17 1631224]
"Iminent.Notifier"="c:\program files\Iminent\SearchTheWeb\Iminent.Notifier.exe" [2010-08-17 536056]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-05-14 248552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\gourbert\Menu D'marrer\Programmes\D'marrage\
Logitech . Enregistrement du produit.lnk - c:\program files\Logitech\Logitech WebCam Software\eReg.exe [2008-11-7 517384]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2009-7-21 1205840]
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\SecondLife\\SLVoice.exe"=
"c:\\WINDOWS\\system32\\rtcshare.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Pinnacle\\VideoSpin\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\VideoSpin\\Programs\\umi.exe"=
"c:\\Program Files\\Pinnacle\\VideoSpin\\Programs\\VideoSpin.exe"=
"c:\\Program Files\\Logitech\\Logitech Vid\\Vid.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [16/07/2009 14:16 165456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [16/07/2009 14:16 17744]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [03/06/2009 13:46 92008]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\drivers\ArcSoftKsUFilter.sys [13/04/2010 11:55 13184]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [21/07/2009 17:42 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [21/07/2009 17:42 69656]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [06/02/2010 13:20 135664]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15/01/2010 13:49 227232]
.
Contenu du dossier 'Tâches planifiées'

2010-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 12:20]

2010-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 12:20]

2010-11-05 c:\windows\Tasks\User_Feed_Synchronization-{A100F9BF-501C-449B-89BC-54D1502B04C6}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://search.iminent.com/?appId=8dac8bf4-5726-45e2-9760-7e9ab54ef272
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\gourbert\Application Data\Mozilla\Firefox\Profiles\zd3craws.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://search.iminent.com/?appId=8dac8bf4-5726-45e2-9760-7e9ab54ef272&ref=homepage
FF - component: c:\documents and settings\gourbert\Application Data\Mozilla\Firefox\Profiles\zd3craws.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\gourbert\Application Data\Mozilla\Firefox\Profiles\zd3craws.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\gourbert\Application Data\Mozilla\Firefox\Profiles\zd3craws.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\components\Engine.dll
FF - component: c:\program files\Mozilla Firefox\extensions\webbooster@iminent.com\components\Iminent.XPCOM.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\documents and settings\gourbert\Application Data\Mozilla\plugins\np-mswmp.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\all-iminent.js - pref("iminent.appInstanceUid", "8dac8bf4-5726-45e2-9760-7e9ab54ef272");
c:\program files\Mozilla Firefox\defaults\pref\all-iminent.js - pref("iminent.currentLcid", "1036");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-msnmsgr - c:\program files\Windows Live\Messenger\msnmsgr.exe
AddRemove-Usbfix - c:\usbfix\Un-UsbFix.exe
AddRemove-{8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763} - c:\documents and settings\All Users\Application Data\{A3570649-72CF-4FA2-A237-74A7EE92053E}\iMesh_V10_en_Setup.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-05 23:41
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(6988)
c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\program files\Brother\ControlCenter3\brccMCtl.exe
c:\program files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
.
**************************************************************************
.
Heure de fin: 2010-11-05 23:45:48 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-11-05 22:45

Avant-CF: 207 628 943 360 octets libres
Après-CF: 207 831 187 456 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

- - End Of File - - ECE1C6CED276CA6C67EAD4FE3362146B

bonjour,
toujours pour avancer notre ami :-)

Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

ou ici : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. Tu cliques droit dans le cadre de la réponse et coller
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!

Si tu as besoin d'aide regarde ce tutoriel :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Combien reste t-il d'étapes ?

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5058

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

06/11/2010 11:32:51
mbam-log-2010-11-06 (11-32-51).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Elément(s) analysé(s): 302094
Temps écoulé: 1 heure(s), 17 minute(s), 43 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\gourbert\Bureau\EduCle-Eleve\Apps\Son\PortableCDex\CDex\unicows.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\oobe\AntiWPA_Crypt.dll (Hacktool) -> Quarantined and deleted successfully.

bonjour,
on verra ton rapport de zhpdiag,

relance MBAM, vide seulement sa quarantaine,

relance Zhpdiag,
* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
http://www.cijoint.fr/
ou :
http://ww38.toofiles.com/fr/documents-upload.html

http://ww38.toofiles.com/fr/oip/documents/ZhPDiag/zhpdia.html

ton lien ne passe pas, rehéberge ton rapport ou su too files ou sur Cijoint, colle le lien ici :-)

Sur ci-joint il me dise que les fichiers avec extensions ne sont pas accepter, pourtant je ne l'ai pas modifier, et pour le lien ne fonctionnant pas c'est celui que me fournis too files.

?

Bein après, j'ai fait les étapes que l'on ma dit de faire, mais les site n'accepter pas mon fichier.
Oui c'est un zip je crois!

Merci de ton lien, j'ai réussi a avoir ceci comme lien du fichier, j'espère qu'il va marcher:

https://www.cjoint.com/?0lgnmo4xFan

Rapport de ZHPFix 1.12.3213 par Nicolas Coolman, Update du 27/10/2010
Fichier d'export Registre : C:\ZHPExportRegistry-06-11-2010-13-50-45.txt
Run by gourbert at 06/11/2010 13:50:44
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Clé(s) du Registre ==========
O42 - Logiciel: IMBooster - (.Iminent.) [HKLM] -- IMBoosterARP => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
O2 - BHO: IMBooster4web-en Toolbar - {346de098-61f9-4b42-89da-6dfba7091bb6} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IMBooster4web-en\tbIMB1.dll => Clé absente
O2 - BHO: TBSB01620 - {58124A0B-DC32-4180-9BFF-E0E21AE34026} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files\IMinent Toolbar\tbcore3.dll => Clé absente
O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Iminent - IminentNavigationBHO.) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll => Clé absente
O2 - BHO: IMinent WebBooster - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} . (.Iminent - Iminent WebBooster.) -- C:\Program Files\Iminent\IMBooster4Web\Iminent.WebBooster.dll => Clé absente
HKCU\Software\IMBooster4web-en => Clé absente
HKCU\Software\PriceGong => Clé supprimée avec succès
HKLM\Software\IMBooster4web-en => Clé absente

========== Valeur(s) du Registre ==========
R3 - URLSearchHook: IMBooster4web-en Toolbar - {346de098-61f9-4b42-89da-6dfba7091bb6} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 3, 1) -- C:\Program Files\IMBooster4web-en\tbIMB1.dll => Valeur absente
R3 - URLSearchHook: Iminent.BHO.NavigationError - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Iminent - IminentNavigationBHO.) (3.27.3) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll => Valeur absente
O3 - Toolbar: IMBooster4web-en Toolbar - {346de098-61f9-4b42-89da-6dfba7091bb6} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IMBooster4web-en\tbIMB1.dll => Valeur absente
O3 - Toolbar: IMinent Toolbar - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files\IMinent Toolbar\tbcore3.dll => Valeur absente
O4 - HKLM\..\Run: [IMBooster] . (.Iminent - IMBooster.) -- C:\Program Files\Iminent\IMBooster\imbooster.exe => Valeur absente
O4 - HKLM\..\Run: [Iminent.Notifier] . (.Iminent - Iminent Notifier.) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe => Valeur absente

========== Dossier(s) ==========
C:\Program Files\IMBooster4web-en => Supprimé et mis en quarantaine
C:\Program Files\IMinent Toolbar => Dossier absent

========== Fichier(s) ==========
c:\program files\mozilla firefox\extensions\webbooster@iminent.com () => Fichier absent
c:\program files\imbooster4web-en\tbimb1.dll () => Fichier absent
c:\program files\iminent\searchtheweb\iminent.bho.navigationerror.dll () => Fichier absent
c:\program files\iminent toolbar\tbcore3.dll () => Fichier absent
c:\program files\iminent\imbooster4web\iminent.webbooster.dll () => Fichier absent
c:\program files\iminent\imbooster\imbooster.exe () => Fichier absent
c:\program files\iminent\searchtheweb\iminent.notifier.exe () => Fichier absent

========== Logiciel(s) ==========
O42 - Logiciel: IMBooster - (.Iminent.) [HKLM] -- {96221FFE-0C5C-4113-963A-DCC523AD0260} => Logiciel déjà supprimé
O42 - Logiciel: IMinent Toolbar - (.IMinent.) [HKLM] -- {A76AA284-E52D-47E6-9E4F-B85DBF8E35C3} => Logiciel déjà supprimé

========== Autre ==========
https://www.cjoint.com/?0lgnmo4xFan[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified => Format Non supporté

========== Récapitulatif ==========
8 : Clé(s) du Registre
6 : Valeur(s) du Registre
2 : Dossier(s)
7 : Fichier(s)
2 : Logiciel(s)
1 : Autre

End of the scan

J'ai des difficulté a effectuer cette étape!

Oui, mais ça me demande de télécharger un Java rutime, je n'y trouve pas ou alors quand j'arrive a y trouver, ça me demande de remplir un formulaire.

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Nov 07 10:25:50 2010

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

bonjour,
pas cool ce message :P

* Télécharge FindyKill sur le Bureau (Merci à El Desaparecido) :
http://www.teamxscript.org/findykillTelechargement.html
ou :
http://www.teamxscript.org/too/Setup.exe
ou ici :
http://teamxscript.changelog.fr/FindyKill.html

* Double-cliquez sur FindyKill présent sur le Bureau.
* Choisis l'option F pour la langue
* Choisissez l'option 1 (Recherche).
* Laissez travailler l'outil.
* Ensuite postez le rapport FindyKill.txt qui apparaîtra (si vous avez créé un sujet sur un forum pour vous faire aider).
* Note : Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt).

(CTRL+A pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller)
* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.

O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø

Msn 2009 ne marche pas non plus!
Un Virus ? Fiou, j'espère que c'est bientôt fini!
La prochaine fois je change de MP

############################## | FindyKill V5.052 |

# User : gourbert (Administrateurs) # GOURBERT-9312D4
# Update on 23/10/2010 by El Desaparecido
# Start at: 12:16:45 | 07/11/2010
# Website : http://www.teamxscript.org/
# Contact : eldesaparecido@teamxscript.org

# Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : avast! Antivirus 5.0.83886757 [ Enabled | Updated ]

# C:\ # Disque fixe local # 232,88 Go (194,39 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
# J:\ # Disque amovible # 3,74 Go (2,4 Go free) [KINGSTON] # FAT32

################## | Eléments infectieux |

C:\WINDOWS\prefetch\WINUPGRO.EXE-2D513C93.pf
C:\Documents and Settings\gourbert\Local Settings\Temporary Internet Files\Content.IE5\5WKFGDQI\filelist[1].txt
C:\Documents and Settings\gourbert\Local Settings\Temporary Internet Files\Content.IE5\5WKFGDQI\filelist[2].txt
C:\Documents and Settings\gourbert\Local Settings\Temporary Internet Files\Content.IE5\5WKFGDQI\file[2].txt

################## | Registre |

################## | Etat |

# Affichage des fichiers cachés : OK

# Mode sans echec : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | ! Fin du rapport # FindyKill V5.052 ! |