Ai je un virus ?????

Question

Bonjour tous le mondeVoila j'aimerais savoir si quelqu'un pourrais voir si g des virus Platform:        Windows 98Windows version: 4.10.2222 A Username:        UtilisateurProcessor:       PentiumWorking memory:  228796 KB freeGuard:            activeVersion information: AVWIN.DLL      : 6.32.00.51     561192  04.11.2005  12:58:52 AVEWIN32.DLL   : 6.33.0.75     1008128  07.01.2006  13:11:08 SYS_RW16.DLL   : 6.19.0          12800  25.10.2004  12:33:28 SYS_RW32.DLL   : 6.19.0          16384  25.10.2004  12:33:28 AVGCTRL.EXE    : 6.32.00.04     127031  04.11.2005  12:58:52 AVGUARD.VXD    : 6.33.0.75      565527  07.01.2006  13:11:08 AVPACK32.DLL   : 6.32.00.02     319528  04.11.2005  12:58:52 AVGETVER.DLL   : 6.30.00.00      24576  28.01.2005  18:10:20 AVSHLEXT.DLL   : 6.30.00.01      40960  28.01.2005  18:10:22 AVSched32.EXE  : 6.32.00.01     110632  20.09.2005  14:16:24 AVSched32.DLL  : 6.30.00.00     122880  01.02.2005  11:24:10 AVREG.DLL      : 6.31.00.05      41000  07.09.2005  16:34:50 AVRep.DLL      : 6.33.00.100    1617960  07.01.2006  13:11:10 INETUPD.EXE    : 6.32.00.53     262203  04.11.2005  12:58:52 INETUPD.DLL    : 6.32.00.53     143360  04.11.2005  12:58:52 MFC42.DLL      : 6.00.8447.0     995383  05.05.1999  22:22:00 MSVCRT.DLL     : 6.10.8293.0     278581  24.05.2000  13:12:04 CTL3D32.DLL    : 2.31.000        45056  05.05.1999  22:22:00 CTL3DV2.DLL    : 2.31.000        27632  05.05.1999  22:22:00Configuration file: Name of configuration file: C:\PROGRAM FILES\AVPERSONAL\AVWIN.INI Name of report file:        C:\PROGRAM FILES\AVPERSONAL\LOGFILES\AVWIN.LOG Start path:                 C:\PROGRAM FILES\AVPERSONAL Command line:                Start mode:                  unknown Mode of report file: [ ] Do not create report [X] Overwrite report [ ] Append new report Data in report file: [X] Infected files [ ] Infected files with paths [ ] All scanned files [ ] Full information Abridge report file: [ ] Abridge report file Warnings in report: [X] Access denied/file locked [X] Wrong file size in directory [X] Wrong creation time in directory [ ] COM file is too large [X] Invalid start address [X] Invalid EXE header [X] Possibly damaged Summary report: [X] Create summary report     Output file: AVWIN.ACT     Maximum number of entries: 100 Where to search: [X] Memory [X] Boot record of selected drives [ ] Report unknown boot sectors [ ] All files [X] Program files     Extensions:  .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP  Response in case of a detection: [X] Repair with prompt [ ] Repair without prompt [ ] Delete with prompt [ ] Delete without prompt [ ] Write in report file only [X] Acoustic alarm Response in case of destroyed files: [X] Delete with prompt [ ] Delete without prompt [ ] Ignore Response in case of destroyed files: [X] No change [ ] Current system time [ ] Correct date Drag&drop settings: [X] Scan subdirectories Profile settings: [X] Scan subdirectories Archive options [X] Search archive [X] All archive types Miscellaneous options: Temporary path: %TEMP% -> C:\WINDOWS\TEMP [X] Overwrite infected files [ ] Detect idle time [X] Allow interruptions of scan [X] Load AVWin®/9x Guard on System start General settings: [X] Save options on exiting AntiVir Priority: medium Drives: A: Floppy drive C: Hard disk D: Hard disk E: CD-ROMStart of scan:  lundi 15 mai 2006  17:32Memory test                          OKMaster boot record of hard disk HD0   OKBoot record of drive C:            OKBoot record of drive D:            OKC:\WIN98  DRIVER14.CAB  ArchiveType: CAB (Microsoft)      NOTE! The archive is created by multiple volumesC:\WINDOWS\Temporary Internet Files\Content.IE5\4D63G12J  wchatsign[1].cab  ArchiveType: CAB (Microsoft)    --> Interface Chat Wanadoo.osd        NOTE! Bad header    --> fr\wanadoo\a\a.class        NOTE! Bad header    --> fr\wanadoo\a\b.class        NOTE! Bad header    --> fr\wanadoo\a\c.class        NOTE! Bad header    --> fr\wanadoo\a\d.class        NOTE! Bad header    --> fr\wanadoo\a\e.class        NOTE! Bad header    --> fr\wanadoo\a\a\a.class        NOTE! Bad header    --> fr\wanadoo\a\a\b.class        NOTE! Bad header    --> fr\wanadoo\a\a\c.class        NOTE! Bad header    --> fr\wanadoo\b\a.class        NOTE! Bad header    --> fr\wanadoo\b\aa.class        NOTE! Bad header    --> fr\wanadoo\b\ab.class        NOTE! Bad header    --> fr\wanadoo\b\b.class        NOTE! Bad header    --> fr\wanadoo\b\c.class        NOTE! Bad header    --> fr\wanadoo\b\d.class        NOTE! Bad header    --> fr\wanadoo\b\e.class        NOTE! Bad header    --> fr\wanadoo\b\f.class        NOTE! Bad header    --> fr\wanadoo\b\g.class        NOTE! Bad header    --> fr\wanadoo\b\h.class        NOTE! Bad header    --> fr\wanadoo\b\i.class        NOTE! Bad header    --> fr\wanadoo\b\j.class        NOTE! Bad header    --> fr\wanadoo\b\k.class        NOTE! Bad header    --> fr\wanadoo\b\l.class        NOTE! Bad header    --> fr\wanadoo\b\m.class        NOTE! Bad header    --> fr\wanadoo\b
.class        NOTE! Bad header    --> fr\wanadoo\b\o.class        NOTE! Bad header    --> fr\wanadoo\b\p.class        NOTE! Bad header    --> fr\wanadoo\b\q.class        NOTE! Bad header    --> fr\wanadoo\b.class        NOTE! Bad header    --> fr\wanadoo\b\s.class        NOTE! Bad header    --> fr\wanadoo\b	.class        NOTE! Bad header    --> fr\wanadoo\b\u.class        NOTE! Bad header    --> fr\wanadoo\b\v.class        NOTE! Bad header    --> fr\wanadoo\b\w.class        NOTE! Bad header    --> fr\wanadoo\b\x.class        NOTE! Bad header    --> fr\wanadoo\b\y.class        NOTE! Bad header    --> fr\wanadoo\b\z.class        NOTE! Bad header    --> fr\wanadoo\b\a\a.class        NOTE! Bad header    --> fr\wanadoo\b\a\b.class        NOTE! Bad header    --> fr\wanadoo\b\a\c.class        NOTE! Bad header    --> fr\wanadoo\b\a\d.class        NOTE! Bad header    --> fr\wanadoo\view\a.class        NOTE! Bad header    --> fr\wanadoo\view\b.class        NOTE! Bad header    --> fr\wanadoo\view\c.class        NOTE! Bad header    --> fr\wanadoo\view\Chat$COMClassObject.class        NOTE! Bad header    --> fr\wanadoo\view\Chat.class        NOTE! Bad header    --> fr\wanadoo\view\ChatBeanInfo.class        NOTE! Bad header    --> fr\wanadoo\view\d$1.class        NOTE! Bad header    --> fr\wanadoo\view\d$10.class        NOTE! Bad header    --> fr\wanadoo\view\d$11.class        NOTE! Bad header    --> fr\wanadoo\view\d$12.class        NOTE! Bad header    --> fr\wanadoo\view\d$13.class        NOTE! Bad header    --> fr\wanadoo\view\d$14.class        NOTE! Bad header    --> fr\wanadoo\view\d$15.class        NOTE! Bad header    --> fr\wanadoo\view\d$16.class        NOTE! Bad header    --> fr\wanadoo\view\d$17.class        NOTE! Bad header    --> fr\wanadoo\view\d$2.class        NOTE! Bad header    --> fr\wanadoo\view\d$3.class        NOTE! Bad header    --> fr\wanadoo\view\d$4.class        NOTE! Bad header    --> fr\wanadoo\view\d$5.class        NOTE! Bad header    --> fr\wanadoo\view\d$6.class        NOTE! Bad header    --> fr\wanadoo\view\d$7.class        NOTE! Bad header    --> fr\wanadoo\view\d$8.class        NOTE! Bad header    --> fr\wanadoo\view\d$9.class        NOTE! Bad header    --> fr\wanadoo\view\d.class        NOTE! Bad header    --> fr\wanadoo\view\e.class        NOTE! Bad header    --> fr\wanadoo\view\f.class        NOTE! Bad header    --> fr\wanadoo\view\g.class        NOTE! Bad header    --> fr\wanadoo\view\h.class        NOTE! Bad header    --> fr\wanadoo\view\i$a.class        NOTE! Bad header    --> fr\wanadoo\view\i.class        NOTE! Bad header    --> fr\wanadoo\view\j.class        NOTE! Bad header    --> fr\wanadoo\view\k.class        NOTE! Bad header    --> fr\wanadoo\view\l.class        NOTE! Bad header    --> fr\wanadoo\view\m.class        NOTE! Bad header    --> fr\wanadoo\view
.class        NOTE! Bad header    --> fr\wanadoo\view\o.class        NOTE! Bad header    --> fr\wanadoo\view\p.class        NOTE! Bad header    --> fr\wanadoo\view\q$1.class        NOTE! Bad header    --> fr\wanadoo\view\q$2.class        NOTE! Bad header    --> fr\wanadoo\view\q$3.class        NOTE! Bad header    --> fr\wanadoo\view\q$4.class        NOTE! Bad header    --> fr\wanadoo\view\q.class        NOTE! Bad header    --> fr\wanadoo\view$1.class        NOTE! Bad header    --> fr\wanadoo\view$2.class        NOTE! Bad header    --> fr\wanadoo\view$3.class        NOTE! Bad header    --> fr\wanadoo\view$4.class        NOTE! Bad header    --> fr\wanadoo\view$5.class        NOTE! Bad header    --> fr\wanadoo\view$6.class        NOTE! Bad header    --> fr\wanadoo\view$7.class        NOTE! Bad header    --> fr\wanadoo\view$8.class        NOTE! Bad header    --> fr\wanadoo\view$9.class        NOTE! Bad header    --> fr\wanadoo\view.class        NOTE! Bad header    --> fr\wanadoo\view\s.class        NOTE! Bad header    --> fr\wanadoo\view	.class        NOTE! Bad header    --> fr\wanadoo\view\u.class        NOTE! Bad header    --> fr\wanadoo\view\a\a.class        NOTE! Bad header    --> fr\wanadoo\view\b\a.class        NOTE! Bad header    --> fr\wanadoo\view\b\aa.class        NOTE! Bad header    --> fr\wanadoo\view\b\ab.class        NOTE! Bad header    --> fr\wanadoo\view\b\ac.class        NOTE! Bad header    --> fr\wanadoo\view\b\ad.class        NOTE! Bad header    --> fr\wanadoo\view\b\ae.class        NOTE! Bad header    --> fr\wanadoo\view\b\af.class        NOTE! Bad header    --> fr\wanadoo\view\b\ag.class        NOTE! Bad header    --> fr\wanadoo\view\b\ah.class        NOTE! Bad header    --> fr\wanadoo\view\b\b.class        NOTE! Bad header    --> fr\wanadoo\view\b\c.class        NOTE! Bad header    --> fr\wanadoo\view\b\d$a.class        NOTE! Bad header    --> fr\wanadoo\view\b\d.class        NOTE! Bad header    --> fr\wanadoo\view\b\e.class        NOTE! Bad header    --> fr\wanadoo\view\b\f.class        NOTE! Bad header    --> fr\wanadoo\view\b\g.class        NOTE! Bad header    --> fr\wanadoo\view\b\h$a.class        NOTE! Bad header    --> fr\wanadoo\view\b\h.class        NOTE! Bad header    --> fr\wanadoo\view\b\i.class        NOTE! Bad header    --> fr\wanadoo\view\b\j.class        NOTE! Bad header    --> fr\wanadoo\view\b\k.class        NOTE! Bad header    --> fr\wanadoo\view\b\l.class        NOTE! Bad header    --> fr\wanadoo\view\b\m.class        NOTE! Bad header    --> fr\wanadoo\view\b
.class        NOTE! Bad header    --> fr\wanadoo\view\b\o.class        NOTE! Bad header    --> fr\wanadoo\view\b\p.class        NOTE! Bad header    --> fr\wanadoo\view\b\q.class        NOTE! Bad header    --> fr\wanadoo\view\b.class        NOTE! Bad header    --> fr\wanadoo\view\b\s.class        NOTE! Bad header    --> fr\wanadoo\view\b	.class        NOTE! Bad header    --> fr\wanadoo\view\b\u.class        NOTE! Bad header    --> fr\wanadoo\view\b\v.class        NOTE! Bad header    --> fr\wanadoo\view\b\w.class        NOTE! Bad header    --> fr\wanadoo\view\b\x$a.class        NOTE! Bad header    --> fr\wanadoo\view\b\x$b.class        NOTE! Bad header    --> fr\wanadoo\view\b\x.class        NOTE! Bad header    --> fr\wanadoo\view\b\y.class        NOTE! Bad header    --> fr\wanadoo\view\b\z.class        NOTE! Bad header    --> fr\wanadoo\view\c\a.class        NOTE! Bad header    --> fr\wanadoo\view\c\b$a.class        NOTE! Bad header    --> fr\wanadoo\view\c\b.class        NOTE! Bad header    --> fr\wanadoo\view\c\c.class        NOTE! Bad header    --> fr\wanadoo\view\c\d$1.class        NOTE! Bad header    --> fr\wanadoo\view\c\d.class        NOTE! Bad header    --> fr\wanadoo\view\c\e.class        NOTE! Bad header    --> fr\wanadoo\view\c\f.class        NOTE! Bad header    --> fr\wanadoo\view\c\g.class        NOTE! Bad header    --> fr\wanadoo\view\c\h.class        NOTE! Bad header    --> fr\wanadoo\view\c\i.class        NOTE! Bad header    --> fr\wanadoo\view\c\j.class        NOTE! Bad header    --> fr\wanadoo\view\c\k.class        NOTE! Bad header    --> fr\wanadoo\view\c\l.class        NOTE! Bad header    --> fr\wanadoo\view\c\m.class        NOTE! Bad header    --> fr\wanadoo\view\c
.class        NOTE! Bad header    --> fr\wanadoo\view\c\o.class        NOTE! Bad header    --> fr\wanadoo\view\c\p$a.class        NOTE! Bad header    --> fr\wanadoo\view\c\p.class        NOTE! Bad header    --> fr\wanadoo\view\c\q.class        NOTE! Bad header    --> fr\wanadoo\view\c.class        NOTE! Bad header    --> fr\wanadoo\view\c\s.class        NOTE! Bad header    --> fr\wanadoo\view\c	$a.class        NOTE! Bad header    --> fr\wanadoo\view\c	.class        NOTE! Bad header    --> fr\wanadoo\view\c\u.class        NOTE! Bad header    --> img\!.gif        NOTE! Bad header    --> img\.#arrow_left.removed.gif        NOTE! Bad header    --> img\.#arrow_right.removed.gif        NOTE! Bad header    --> img\aide.gif        NOTE! Bad header    --> img\attendre.gif        NOTE! Bad header    --> img\away.gif        NOTE! Bad header    --> img\away_gui.gif        NOTE! Bad header    --> img\banane.gif        NOTE! Bad header    --> img\biere.gif        NOTE! Bad header    --> img\blank.gif        NOTE! Bad header    --> img\blue_arrow_left.gif        NOTE! Bad header    --> img\blue_arrow_right.gif        NOTE! Bad header    --> img\bombe.gif        NOTE! Bad header    --> img\cadeau.gif        NOTE! Bad header    --> img\cafe.gif        NOTE! Bad header    --> img\cd.gif        NOTE! Bad header    --> img\chagrin.gif        NOTE! Bad header    --> img\channel_icon.gif        NOTE! Bad header    --> img\chien.gif        NOTE! Bad header    --> img\clindoeil.gif        NOTE! Bad header    --> img\close.gif        NOTE! Bad header    --> img\coeur.gif        NOTE! Bad header    --> img\creer_un_salon.gif        NOTE! Bad header    --> img\danger.gif        NOTE! Bad header    --> img\danger2.gif        NOTE! Bad header    --> img\dial_priv.gif        NOTE! Bad header    --> img\droits.gif        NOTE! Bad header    --> img\ecouterasvv.gif        NOTE! Bad header    --> img\enregistrer.gif        NOTE! Bad header    --> img\entrer_dans_un_salon.gif        NOTE! Bad header    --> img\envoimv.gif        NOTE! Bad header    --> img\fantome.gif        NOTE! Bad header    --> img\fille.gif        NOTE! Bad header    --> img\fleurbleu.gif        NOTE! Bad header    --> img\foot.gif        NOTE! Bad header    --> img\gateau.gif        NOTE! Bad header    --> img\give_op.gif        NOTE! Bad header    --> img\give_voice.gif        NOTE! Bad header    --> img\halloween.gif        NOTE! Bad header    --> img\hotdog.gif        NOTE! Bad header    --> img\ignorer.gif        NOTE! Bad header    --> img\ignorer_gui.gif        NOTE! Bad header    --> img\images.gif        NOTE! Bad header    --> img\interdit.gif        NOTE! Bad header    --> img\inviter.gif        NOTE! Bad header    --> img\langue.gif        NOTE! Bad header    --> img\listasvv.gif        NOTE! Bad header    --> img\liste_ignore.gif        NOTE! Bad header    --> img\mail.gif        NOTE! Bad header    --> img\maison.gif        NOTE! Bad header    --> img\mecontent.gif        NOTE! Bad header    --> img\messages_pv.gif        NOTE! Bad header    --> img\messages_pv_alt.gif        NOTE! Bad header    --> img\mobile.gif        NOTE! Bad header    --> img\mobilegris.gif        NOTE! Bad header    --> img\moderer.gif        NOTE! Bad header    --> img\mode_change.gif        NOTE! Bad header    --> img\monasvv.gif        NOTE! Bad header    --> img\musique.gif        NOTE! Bad header    --> img\oeil.gif        NOTE! Bad header    --> img\ok.gif        NOTE! Bad header    --> img\op.gif        NOTE! Bad header    --> img\options_pv.gif        NOTE! Bad header    --> img\options_salon.gif        NOTE! Bad header    --> img\orage.gif        NOTE! Bad header    --> img\peacelove.gif        NOTE! Bad header    --> img\picto_listbox.gif        NOTE! Bad header    --> img\picto_systeme.gif        NOTE! Bad header    --> img\picto_texte.gif        NOTE! Bad header    --> img\pict_video_mess.gif        NOTE! Bad header    --> img\pleure.gif        NOTE! Bad header    --> img\plus_ignorer.gif        NOTE! Bad header    --> img\poisson.gif        NOTE! Bad header    --> img\poubelle.gif        NOTE! Bad header    --> img\pv.gif        NOTE! Bad header    --> img\pv_alert.gif        NOTE! Bad header    --> imgemove_ban.gif        NOTE! Bad header    --> imgeveil.gif        NOTE! Bad header    --> imgevenir.gif        NOTE! Bad header    --> imgobot.gif        NOTE! Bad header    --> img\search.gif        NOTE! Bad header    --> img\sourire.gif        NOTE! Bad header    --> img\sourire2.gif        NOTE! Bad header    --> img	ake_op.gif        NOTE! Bad header    --> img	ake_voice.gif        NOTE! Bad header    --> img	chat_options.gif        NOTE! Bad header    --> img	elephone.gif        NOTE! Bad header    --> img	erre.gif        NOTE! Bad header    --> img	opic_change.gif        NOTE! Bad header    --> img	riste.gif        NOTE! Bad header    --> img	riste2.gif        NOTE! Bad header    --> img\v.gif        NOTE! Bad header    --> img\vache.gif        NOTE! Bad header    --> img\voice.gif        NOTE! Bad header    --> img\voiture.gif        NOTE! Bad header    --> img\v_sms.gif        NOTE! Bad header    --> img\w_sms.gif        NOTE! Bad header    --> img\yellow_arrow_left.gif        NOTE! Bad header    --> img\yellow_arrow_right.gif        NOTE! Bad header    --> img\yingyang.gif        NOTE! Bad header    --> img\_i_invite.gif        NOTE! Bad header    --> img\_i_inviteliste.gif        NOTE! Bad header    --> img\_i_reporter.gif        NOTE! Bad header    --> img\_i_reporterliste.gif        NOTE! Bad header    --> img\_i_reporterq.gif        NOTE! Bad header    --> img\_me.gif        NOTE! Bad header    --> img\_pj.gif        NOTE! Bad header    --> img\_pmk.gif        NOTE! Bad header    --> img\_pp.gif        NOTE! Bad header    --> img\_pq.gif        NOTE! Bad header    --> img\_ptn.gif        NOTE! Bad header    --> img\buttons\blue_but_left_down.gif        NOTE! Bad header    --> img\buttons\blue_but_left_up.gif        NOTE! Bad header    --> img\buttons\blue_but_midd_down.gif        NOTE! Bad header    --> img\buttons\blue_but_midd_up.gif        NOTE! Bad header    --> img\buttons\blue_but_right_down.gif        NOTE! Bad header    --> img\buttons\blue_but_right_up.gif        NOTE! Bad header    --> img\buttons\but_left_down.gif        NOTE! Bad header    --> img\buttons\but_left_up.gif        NOTE! Bad header    --> img\buttons\but_midd_down.gif        NOTE! Bad header    --> img\buttons\but_midd_up.gif        NOTE! Bad header    --> img\buttons\but_right_down.gif        NOTE! Bad header    --> img\buttons\but_right_up.gif        NOTE! Bad header    --> img\buttons\onglet_left.gif        NOTE! Bad header    --> img\buttons\onglet_mid.gif        NOTE! Bad header    --> img\buttons\onglet_right.gif        NOTE! Bad header    --> img\buttons\scrl_l_0.gif        NOTE! Bad header    --> img\buttons\scrl_l_1.gif        NOTE! Bad header    --> img\buttons\scrl_r_0.gif        NOTE! Bad header    --> img\buttons\scrl_r_1.gif        NOTE! Bad header    --> img\buttons\yellow_but_left_down.gif        NOTE! Bad header    --> img\buttons\yellow_but_left_up.gif        NOTE! Bad header    --> img\buttons\yellow_but_midd_down.gif        NOTE! Bad header    --> img\buttons\yellow_but_midd_up.gif        NOTE! Bad header    --> img\buttons\yellow_but_right_down.gif        NOTE! Bad header    --> img\buttons\yellow_but_right_up.gif        NOTE! Bad header    --> languages\client_fr.txt        NOTE! Bad header    --> languages\image_fr.txt        NOTE! Bad header    --> languages\server_fr.txt        NOTE! Bad header    --> languages\smiley_fr.txt        NOTE! Bad header    --> languages\userlist_fr.txt        NOTE! Bad header

marina · Answer

Logfile of HijackThis v1.99.1
Scan saved at 18:06:40, on 15/05/06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\VTTIMER.EXE
C:\PROGRAM FILES\VIAUDIOI\SBADECK\ADECK.EXE
C:\PROGRAM FILES\WANADOO\CNXMON.EXE
C:\PROGRAM FILES\MESSAGER WANADOO\STARTMESSAGER.EXE
C:\PROGRAM FILES\WANADOO\TASKBARICON.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\AVPERSONAL\AVSCHED32.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\PROGRAM FILES\AVPERSONAL\AVGCTRL.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\MSN APPS\UPDATER\01.03.0000.1005\FR\MSNAPPAU.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
C:\PROGRAM FILES\NIKON\NKVIEW5\NKVMON.EXE
C:\PROGRAM FILES\FOTOSTATION EASY\FOTOSTATION EASY AUTOLAUNCH.EXE
C:\PROGRAM FILES\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 2 SE\CALCHECK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\OPENOFFICE.ORG 2.0\PROGRAM\SOFFICE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\OPENOFFICE.ORG 2.0\PROGRAM\SOFFICE.BIN
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\PROGRAM FILES\WANADOO\ESPACEWANADOO.EXE
C:\PROGRAM FILES\WANADOO\COMCOMP.EXE
C:\PROGRAM FILES\WANADOO\WATCH.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\WINDOWS\BUREAU\HIJACKTHIS.EXE
C:\WINDOWS\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - - (no file)
F1 - win.ini: run=hpfsched
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YT.DLL
O2 - BHO: (no name) - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FR\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\PROGRAM FILES\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: Reactivator - {AC2E8306-D24E-4082-8669-7781499F4E03} - C:\PROGRA~1\EVERYT~1.1\EVERYCOM.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Every Toolbar - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - C:\PROGRA~1\EVERYT~1.1\EVERYCOM.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YT.DLL
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FR\MSNTB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AudioDeck] C:\PROGRAM FILES\VIAUDIOI\SBADECK\ADECK.EXE 1
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [AVSCHED32] C:\PROGRAM FILES\AVPERSONAL\AVSCHED32.EXE /min
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [AVGCtrl] C:\PROGRAM FILES\AVPERSONAL\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
O4 - HKLM\..\Run: [msnappau] "c:\program files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe"
O4 - HKLM\..\Run: [Firewall] "C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe" /win98
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe
O4 - Startup: FotoStation Easy AutoLaunch.lnk = C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: Photo Express Calendar Checker SE.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O8 - Extra context menu item: &Every Toolbar Search - res://C:\PROGRA~1\EVERYT~1.1\EVERYCOM.DLL/GoRSDN.dll.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version6/Applet/wchatsign.cab
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)

aranjuez31 · Answer

hello

commence par faire ceci :

3/ - Ewido (download)- gratuit même après 14 jours d’essai
http://perso.wanadoo.fr/entraide-hijackthis/Ewido/
Copie/COLLE le rapport généré sur ce forum

4/ - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

6/ - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
https://assiste.com/404_La_page_demandee_n_existe_pas.php
http://www.bitdefender.fr/scan8/ie.html
Copie/COLLE le rapport entier

aranjuez31 · Answer

re
ouvre ton hijack
coche et fixe ces lignes /

O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun

O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe

O4 - HKLM\..\Run: [SystemTray] VTTimer.exe

O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

O4 - HKLM\..\Run: [AudioDeck] C:\PROGRAM FILES\VIAUDIOI\SBADECK\ADECK.EXE 1

O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup

O4 - HKLM\..\Run: [LoadQM] loadqm.exe

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

O4 - HKLM\..\Run: [adiras] adiras.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime

O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe

O4 - HKLM\..\Run: [msnappau] "c:\program files\MSN Apps\Updater\01.03.0000.1005\fr\msnappau.exe"

O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView5\NkvMon.exe

O4 - Startup: FotoStation Easy AutoLaunch.lnk = C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe

O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe

O4 - Startup: Photo Express Calendar Checker SE.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
+
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version6/Applet/wchatsign.cab
====
n ai pas encore fini

Ai je un virus ?????

3 réponses

Discussions similaires

Newsletters