Est-ce que j'ai un virus????

merci de m'aider green day, je t'en suis très reconnaissant

alors j'ai fait ce que tu m'as dit, et je crois qu'il y a un quelquechose sur mon système qui n'aime pas beaucoup SmitFraudFix : en effet, Norton par deux fois pendant l'exécution de SmitFraudFix m'a donné un message disant "script malveillant détecté" et ça venait de "C:\windows\system32\GetValue.vbs". Je sais pas si c'est l'exécution de SmitFraud qui gênait Norton ou bien si c'est un virus??? Bon, en tout cas, j'ai bloqué les scripts, comme recommandé par Norton, et Smitfraud a quand même généré un rapport, que voici :


SmitFraudFix v2.132

Rapport fait à 16:49:07,76, 10/01/2007
Executé à partir de C:\Program Files\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est FAT32
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Olive


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Olive\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin



Voilà, j'espère que j'ai rien...

Scan AVG anti spyware :

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 20:12:38 10/01/2007

+ Résultat de l'analyse:



G:\Programs\Adobe Photoshop CS 9\Adobe Photoshop CS2 Crack.zip/apcs2ge/Adobe Photoshop CS2 Patch.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Aucune action entreprise.
G:\Programs\Adobe Photoshop CS 9\Adobe Photoshop CS2 Crack\apcs2ge\Adobe Photoshop CS2 Patch.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@247realmedia[1].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.36:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.23:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.40:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.11:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.12:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.7:C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\Olive\Cookies\olive@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.


Fin du rapport





Scan bitdefender


BitDefender Online Scanner



Scan report generated at: Wed, Jan 10, 2007 - 21:18:23





Scan path: C:\;D:\;E:\;F:\;G:\;







Statistics

Time
01:02:27

Files
652052

Folders
6324

Boot Sectors
8

Archives
13560

Packed Files
57946




Results

Identified Viruses
2

Infected Files
7

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
9




Engines Info

Virus Definitions
369273

Engine build
AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)

Scan plugins
14

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 401)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?==>(VBSCRIPT 1)
Infected with: Win32.Scano.AG@mm.VBS

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 401)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?==>(VBSCRIPT 1)
Disinfection failed

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 401)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?==>(VBSCRIPT 1)
Deleted

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 401)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?=
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 401)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 401)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 402)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?==>(VBSCRIPT 1)
Infected with: Win32.Scano.AG@mm.VBS

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 402)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?==>(VBSCRIPT 1)
Disinfection failed

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 402)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?==>(VBSCRIPT 1)
Deleted

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 402)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?=
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 402)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 402)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 405)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?==>(VBSCRIPT 1)
Infected with: Win32.Scano.AG@mm.VBS

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 405)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?==>(VBSCRIPT 1)
Disinfection failed

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 405)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?==>(VBSCRIPT 1)
Deleted

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 405)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?=
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 405)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox=>(message 405)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Inbox
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 59)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?==>(VBSCRIPT 1)
Infected with: Win32.Scano.AG@mm.VBS

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 59)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?==>(VBSCRIPT 1)
Disinfection failed

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 59)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?==>(VBSCRIPT 1)
Deleted

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 59)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)=>=?koi8-r?B?98HWzs8uaHRh?=
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 59)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4!_=F1_=D3][Date: Tue, 20 Jun 2006 06:50:39 +0100]=>(MIME part)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 59)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 60)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?==>(VBSCRIPT 1)
Infected with: Win32.Scano.AG@mm.VBS

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 60)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?==>(VBSCRIPT 1)
Disinfection failed

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 60)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?==>(VBSCRIPT 1)
Deleted

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 60)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)=>=?koi8-r?B?8MHSz8zJLmh0YQ==?=
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 60)=>[Subject: =?koi8-r?Q?Re=3A_=EB=C1=CB_=CE=C1=D3=D][Date: Tue, 20 Jun 2006 08:44:39 +0100]=>(MIME part)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 60)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 65)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?==>(VBSCRIPT 1)
Infected with: Win32.Scano.AG@mm.VBS

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 65)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?==>(VBSCRIPT 1)
Disinfection failed

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 65)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?==>(VBSCRIPT 1)
Deleted

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 65)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)=>=?koi8-r?B?79TexdQuaHRh?=
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 65)=>[Subject: =?koi8-r?Q?=F0=D2=C9=D7=C5=D4=C9=CB=2C][Date: Thu, 22 Jun 2006 05:37:58 +0100]=>(MIME part)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash=>(message 65)
Updated

C:\Documents and Settings\Olive\Application Data\Thunderbird\Profiles\o66pfgob.default\Mail\pop.wanadoo.fr\Trash
Updated

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\094931FE.htm=>(Quarantine-2)=>(unicode)
Infected with: Exploit.HTML.IframeBof.A

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\094931FE.htm=>(Quarantine-2)=>(unicode)
Disinfection failed

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\094931FE.htm=>(Quarantine-2)=>(unicode)
Deleted







et puis un scan HijackThis pour terminer

Logfile of HijackThis v1.99.1
Scan saved at 00:52:16, on 11/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\Program Files\Notebook Hardware Control\nhc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\ATK0100\ATKOSD.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - c:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.exe
O4 - HKLM\..\Run: [NotebookHardwareControl] "C:\Program Files\Notebook Hardware Control\nhc.exe" -quiet
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe


Voilà, 2 virus supprimés, mais je sais pas si je suis totalement clean, à toi de me dire?? Et ces deux virus, ils étaient dangereux, ils ont pu faire des dégâts sur mon ordi ou pas??
Merci en tout cas de l'aide et du temps que vous apportez sur ce site, c'est vraiment chouette!!

Juste, est-ce qu'ils sont vraiment mort ou est-ce qu'il faut que je redémarre et que je refasse la procédure après pour voir? Ils restent pas d'en rester une trace dans la estauration windows (enfin de tte façon j'ai pas crée de point de restauration depuis ce matin après l'infection, donc à part si le virus en a crée un ça devrait être bon??).

ça a l'air plus ou moins propre, mais j'ai de petits soucis depuis mon nettoyage d'hier... par exemple il y a l'application rundll32 qui a pas voulu se terminer correctement à la fermeture de windows et j'ai aussi eu un message d'un processus critique qui avait un pb, m'enfin il s'est éteint tt seul qd même et il a redémarré comme si de rien était et tt fonctionne comme d'habitude

euh, j'ai fait l'analyse avec AVG et il me semble que j'ai fait ce qu'il demandait...

voilà le rapport que tu demandais, ça a pris 5 secondes, vraiment hyper rapide... j'espère que je suis clean?? a priori c'est plutôt bon comme rapport

tu penses que les petits pbs rencontrés aujourd'hui peuvent être du au traitement corrosif que j'ai fait subir à mon système pour éliminer les cochonneries?

en tout cas je te remercie sincèrement pour ton aide, ça m'évite de formater en pleine écriture de rapport.





Rapport clean par Malekal_morte - http://www.malekal.com
Option 1, executee le 11/01/2007 a 21:13:47,45

*** Recherche de fichiers sur C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32

*** Fin du rapport !

bon, j'ai refait un scan complet AVG, et il y avait que 5 cookies pas bien méchants que j'ai supprimé avec certitude cette fois-ci...

sinon voici mon log Hijack :


Logfile of HijackThis v1.99.1
Scan saved at 23:25:29, on 11/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Notebook Hardware Control\nhc.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\WINDOWS\system32\ctfmon.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - c:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.exe
O4 - HKLM\..\Run: [NotebookHardwareControl] "C:\Program Files\Notebook Hardware Control\nhc.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe


++

merci pour tt greenday.

++