PC envahi de virus

Salut,

Donne nous plus de précision sur comment est protégé ton système !

Télécharge HijackThis :
---> fichiers/hijackthis.zip

Installe le dans son propre dossier :
- clic droit sur le bureau, tu choisis "nouveau dossier" puis installe-le à l'intérieur.
Fais un clic droit sur Hijackthis, choisis "renommer" puis marque ceci : abcde.exe
Double-clic sur HijackThis. Clic sur "I Accept" puis clic sur "do a system scan and save logfile"
Puis copie et colle ici le rapport qu'il va te générer.

Démo pour HijackThis si besoin :
http://pageperso.aol.fr/balltrap34/demohijack.htm

ta, ta ??

Logfile of HijackThis v1.99.1
Scan saved at 12:44:44, on 26/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\PROGRA~1\MESSAG~1\Demon.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - C:\WINDOWS\system32\qfckwihb.dll
O2 - BHO: (no name) - {26FAFD75-1005-41F6-978D-178C00165C0B} - C:\WINDOWS\system32\rqrppol.dll
O2 - BHO: (no name) - {5A8D6612-060D-47A5-8F77-4F0DF2D61F52} - C:\WINDOWS\system32\ddaby.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {B6F1A4CB-DADD-4D0C-BDFC-E945647302C1} - c:\wmplayer.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S91.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [WindowsHive] C:\WINDOWS\system32\rpcc.exe
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\pqjxkwfi.dll",realset
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {33331111-1111-1111-1111-615111193427} -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{002F3B35-A891-4909-BF88-1E947812195F}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{002F3B35-A891-4909-BF88-1E947812195F}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: ddaby - C:\WINDOWS\system32\ddaby.dll
O20 - Winlogon Notify: rqrppol - C:\WINDOWS\SYSTEM32\rqrppol.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MSIEUpdater_1 (Microsoft IE Updater_1) - Unknown owner - C:\Documents and Settings\Jean Pierre\ie_updater.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Télécharge VundoFix
---> http://www.atribune.org/ccount/click.php?id=4

Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..

double clic dessus choisis "start for vundo"
attends quelques minutes, quand le scan est terminé clic sur "remove vundo"
un message te demandera si tu veux supprimes les fichiers sur "yes"
Quand il a terminé, clic sur "yes" ton ordinateur devrait redemarrer sinon, fais le par toit même
Une fois qu'il a redemarré colle le rapport C:\vundofix.txt

ET

Télécharge et installe AVG anti-spyware : mets le à jour
Tu fais un scan complet de ton système, dès qu'il a fini.
Si il te trouve des espions,supprime les. Enregistre le rapport et colle le ici stp

AVG anti-spyware : reste gratuit après la période d'essai en français
---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html

Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
--> http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

rapport Vunofix:

VundoFix V6.3.20

Checking Java version...

Java version is 1.5.0.11

Scan started at 13:50:46 26/04/2007

Listing files found while scanning....

C:\WINDOWS\system32\ddaby.dll
C:\WINDOWS\system32\rqrppol.dll
C:\WINDOWS\system32\ybadd.bak1
C:\WINDOWS\system32\ybadd.ini

Beginning removal...

Attempting to delete C:\WINDOWS\system32\ddaby.dll
C:\WINDOWS\system32\ddaby.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\rqrppol.dll
C:\WINDOWS\system32\rqrppol.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\ybadd.bak1
C:\WINDOWS\system32\ybadd.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\ybadd.ini
C:\WINDOWS\system32\ybadd.ini Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\ddaby.dll
C:\WINDOWS\system32\ddaby.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\rqrppol.dll
C:\WINDOWS\system32\rqrppol.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ybadd.ini
C:\WINDOWS\system32\ybadd.ini Has been deleted!

Performing Repairs to the registry.
Done!

Rapport AVG:

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 15:30:19 26/04/2007

+ Résultat de l'analyse:

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\YQ9ATCVE\bho[1] -> Adware.BHO : Nettoyé.
C:\WINDOWS\system32\winupd_KB58336742.exe -> Adware.BHO : Nettoyé.
C:\wmplayer.dll -> Adware.BHO : Nettoyé.
C:\Program Files\BraveSentry -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry.exe -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry.lic -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry0.bs -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry0.dll -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry1.bs -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry1.dll -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry2.dll -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\BraveSentry3.dll -> Adware.Bravesentry : Nettoyé.
C:\Program Files\BraveSentry\Uninstall.exe -> Adware.Bravesentry : Nettoyé.
HKU\.DEFAULT\Software\BraveSentry -> Adware.Bravesentry : Nettoyé.
HKU\S-1-5-18\Software\BraveSentry -> Adware.Bravesentry : Nettoyé.
C:\Program Files\Everest Poker\Everest Poker.exe -> Adware.Casino : Nettoyé.
C:\Program Files\Everest Poker\cstart-tmp.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP199\A0030508.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP204\A0030711.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP206\A0030791.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP220\A0033822.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP220\A0033830.old -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP222\A0033928.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP249\A0044322.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP249\A0044330.old -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP251\A0044646.exe -> Adware.Casino : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP282\A0053763.exe -> Adware.SpySolder : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\XQIXTZAY\is67347[1] -> Adware.Virtumonde : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP282\A0053736.dll -> Adware.Virtumonde : Nettoyé.
C:\VundoFix Backups\rqrppol.dll.bad -> Adware.Virtumonde : Nettoyé.
[1464] C:\WINDOWS\system32\qfckwihb.dll -> Adware.Virtumonde : Nettoyé.
[3768] C:\WINDOWS\system32\qfckwihb.dll -> Adware.Virtumonde : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\YQ9ATCVE\chist[1] -> Downloader.Agent.bnf : Nettoyé.
C:\WINDOWS\system32\winupd_KB68731342.exe -> Downloader.Agent.bnf : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\H0STCM5O\loader[1] -> Dropper.Small.avu : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\YQ9ATCVE\loader[1] -> Dropper.Small.avu : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP282\A0053764.exe -> Not-A-Virus.Hoax.Win32.Renos.fi : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP282\A0053765.exe -> Not-A-Virus.Hoax.Win32.Renos.fi : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\YQ9ATCVE\33[1] -> Proxy.Dlena.ad : Nettoyé.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WinOpts -> Proxy.Small : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.75:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@bwincom.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@nba.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@mistergooddeal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@adrevolver[3].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.12:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.13:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.14:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.15:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@adviva[2].txt -> TrackingCookie.Adviva : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@as.casalemedia[2].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@casalemedia[1].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@cz2.clickzs[2].txt -> TrackingCookie.Clickzs : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@vip2.clickzs[1].txt -> TrackingCookie.Clickzs : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@com[1].txt -> TrackingCookie.Com : Nettoyé.
:mozilla.58:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.59:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.60:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@connextra[1].txt -> TrackingCookie.Connextra : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
:mozilla.70:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.51:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@as-us.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@fastclick[2].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-deltatre.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-hollywood.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-hollywoodmedia.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-telecomitalia.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-ti.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-youtube.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ehg-yvesrocher.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@searchportal.information[1].txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ivwbox[2].txt -> TrackingCookie.Ivwbox : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@search.live[1].txt -> TrackingCookie.Live : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ie.search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@perf.overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
:mozilla.98:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Paypal : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@revenue[2].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.61:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.62:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.63:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
:mozilla.64:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Sexcounter : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@sexlist[1].txt -> TrackingCookie.Sexlist : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@counter1.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@counter5.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@counter7.sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@counter9.sextracker[2].txt -> TrackingCookie.Sextracker : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@sextracker[1].txt -> TrackingCookie.Sextracker : Nettoyé.
:mozilla.96:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@specificclick[1].txt -> TrackingCookie.Specificclick : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@statcounter[2].txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@tacoda[2].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@targetnet[2].txt -> TrackingCookie.Targetnet : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@toplist[1].txt -> TrackingCookie.Toplist : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Nettoyé.
:mozilla.97:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Jean Pierre\Local Settings\Temp\Cookies\jean pierre@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@trafficmp[1].txt -> TrackingCookie.Trafficmp : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.103:C:\Documents and Settings\Jean Pierre\Application Data\Mozilla\Firefox\Profiles\bjt700uf.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Jean Pierre\Cookies\jean pierre@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\H0STCM5O\1303[1] -> Trojan.Agent.bou : Nettoyé.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\XQIXTZAY\1303[1] -> Trojan.Agent.bou : Nettoyé.
C:\System Volume Information\_restore{32040EDE-7C0A-4A81-9940-364682E77DDD}\RP233\A0037547.exe -> Trojan.LipGame.by : Nettoyé.
C:\WINDOWS\internt.exe -> Trojan.LipGame.by : Nettoyé.

Fin du rapport

Voilà :)

Merci.

¤ Fais ce nettoyage: à faire réguliérement

*Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
---> http://www.infos-du-net.com/telecharger/CCleaner,0301-1039.html

- Dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis clic en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu clic "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
Les sauvegardes que tu aura faites, tu pourras les supprimer si ton ordinateur n'a plus de problémes.

- Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

Si tu as besoin d'aide avec Ccleaner, regarde ce tutoriel :
https://kerio.probb.fr/t242-tuto-ccleaner-v-2

Puis remet un rapport hijackthis dès que c'est fait stp

(Depuis tout a lheure, je n'arrete pas detre bombardé par des attaques de chevaux de troies...)

As-tu fait ce que je t'ai indiqué au dessus, si oui, j'attends la suite

oui oui jlai fais.
maintenant je vais faire ce que tu viens de me dire ;)

Voici le rapport:

Logfile of HijackThis v1.99.1
Scan saved at 17:00:36, on 26/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\PROGRA~1\MESSAG~1\Demon.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
C:\Documents and Settings\Jean Pierre\ie_updater.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Program Files\Wanadoo\Watch.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E0750E2-6160-4A67-B316-0BF81459B155} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {B6F1A4CB-DADD-4D0C-BDFC-E945647302C1} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S91.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [WindowsHive] C:\WINDOWS\system32\rpcc.exe
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\pqjxkwfi.dll",realset
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {33331111-1111-1111-1111-615111193427} -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{002F3B35-A891-4909-BF88-1E947812195F}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{002F3B35-A891-4909-BF88-1E947812195F}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MSIEUpdater_1 (Microsoft IE Updater_1) - Unknown owner - C:\Documents and Settings\Jean Pierre\ie_updater.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

C'est mieux mais pas encore ça

Télécharge ComboScan sur ton Bureau.
---> http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

Ferme toutes les applications en cours ; antivirus, pare-feu, etc ..
Double-clic sur comboscan.exe A la fenêtre qui s'affiche, clic sur OK.
Soit patient ..
Le rapport Comboscan.txt s'affichera, copie et colle le contenu de ce fichier ici.

Voilà !!!

ComboScan v20070306.20 run by Jean Pierre on 2007-04-26 at 17:58:46
Supplementary logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professionnel (build 2600) SP 2.0
Architecture: X86; Language: French

CPU 0: AMD Athlon(tm) 64 Processor 3000+
Percentage of Memory in Use: 36%
Physical Memory (total/avail): 1023.48 MiB / 645.96 MiB
Pagefile Memory (total/avail): 2460.43 MiB / 2174.33 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1996.5 MiB

A: is Removable (Unformatted)
C: is Fixed (NTFS) - 152.66 GiB total, 87.88 GiB free.
D: is CDROM (No Media)
E: is CDROM (No Media)
F: is Removable (No Media)
G: is CDROM (No Media)

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FirstRunDisabled is set.

AV: avast! antivirus 4.7.986 [VPS 000736-1] v4.7.986 (ALWIL Software) [COLOR=RED]Disabled[/COLOR]

-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Jean Pierre\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=ORDINATEUR
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Jean Pierre
LOGONSERVER=\\ORDINATEUR
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\PROGRA~1\MICROS~2\Office
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 10, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=040a
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\JEANPI~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\JEANPI~1\LOCALS~1\Temp
USERDOMAIN=ORDINATEUR
USERNAME=Jean Pierre
USERPROFILE=C:\Documents and Settings\Jean Pierre
windir=C:\WINDOWS

-- User Profiles ---------------------------------------------------------------

Jean Pierre [I](admin)[/I]

-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
--> C:\Program Files\Nero\Nero 7\\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
--> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
--> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
--> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNRecode.exe /UNINSTALL
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
$occer$oft 2004 version 0.86 --> "c:\Program Files\$occer$oft\unins000.exe"
ABBYY FineReader 6.0 Sprint --> MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Reader 7.0.8 - Français --> MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70800000002}
Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Alexandra Ledermann 3 - Équitation Aventure --> C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\PAN vision\Alexandra Ledermann 3 - Équitation Aventure\Uninst.isu"
Alexandra Ledermann 6 - L'Ecole des Champions --> C:\Program Files\UbiSoft\Lexis Numérique\Alexandra Ledermann 6\Desinst.exe
Archiveur WinRAR --> C:\Program Files\WinRAR\uninstall.exe
Athlon 64 Processor Driver --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Call of Duty(R) 2 --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374}
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Correctif pour Windows XP (KB893357) -->
Correctif Windows XP - KB834707 -->
Correctif Windows XP - KB867282 -->
Correctif Windows XP - KB873333 -->
Correctif Windows XP - KB873339 -->
Correctif Windows XP - KB884020 -->
Correctif Windows XP - KB885222 -->
Correctif Windows XP - KB885250 -->
Correctif Windows XP - KB885523 -->
Correctif Windows XP - KB885626 -->
Correctif Windows XP - KB885835 --> C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836 -->
Correctif Windows XP - KB886185 -->
Correctif Windows XP - KB886677 -->
Correctif Windows XP - KB887742 -->
Correctif Windows XP - KB888113 -->
Correctif Windows XP - KB888302 -->
Correctif Windows XP - KB890047 -->
Correctif Windows XP - KB890175 -->
Correctif Windows XP - KB890831 -->
Correctif Windows XP - KB890859 -->
Correctif Windows XP - KB890923 -->
Correctif Windows XP - KB891781 -->
Correctif Windows XP - KB893086 -->
Correctif Windows XP - KB896626 --> "C:\WINDOWS\$NtUninstallKB896626$\spuninst\spuninst.exe"
Cycling Manager 4 --> C:\Program Files\Cyanide\Cycling Manager 4\uninstall.exe
Digimax Master --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AEC0CEBC-0FC7-4716-8222-1C4A742719B1}\Setup.exe" -l0x9 -removeonly
Digimax S500 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8E2EC824-DC8B-45CD-A839-58FA00EA5953}\Setup.exe" anything
DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
eMule --> "C:\Program Files\eMule\Uninstall.exe"
eMusic - 50 Free MP3 offer --> "C:\Program Files\Winamp\eMusic\Uninst-eMusic-promotion.exe"
EPSON Attach To Email --> C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall
EPSON Easy Photo Print --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x40c UNINST
EPSON File Manager --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x40c UNINST
EPSON Logiciel imprimante --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan --> C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Scan Assistant --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u
EPSON Web-To-Page --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESDX6000_CX5900 Guide util. --> C:\Program Files\EPSON\TPMANUAL\ESDX6000_CX5900\USE_G\DOCUNINS.EXE
Everest Poker (Remove Only) --> C:\Program Files\Everest Poker\cstart.exe /uninstall
Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP --> MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
Football Manager 2007 --> C:\Program Files\Sports Interactive\Football Manager 2007\uninstall\Uninstall FM 2007.exe
Free Mp3 Wma Converter V 1.5.1 --> "C:\Program Files\Free Audio Pack\unins000.exe"
GameSpy Arcade --> C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
Google Toolbar for Firefox --> MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
Hijackthis Version Française 1.99.0.1 --> "C:\Program Files\Hijackthis Version Française\unins000.exe"
J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
Java 2 Runtime Environment Standard Edition v1.3.1_03 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\JavaSoft\JRE\1.3.1_03\Uninst.isu"
Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
L'étrange disparition du Professeur Scientifix --> C:\Program Files\Creo inc\Scientifix\Uninstall.exe
Logitech SetPoint --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe" -l0x40c
MediaLife --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{362BFFCD-8274-11D8-97C8-000129760CBE}\setup.exe" -uninstall
Messager Wanadoo --> C:\PROGRA~1\MESSAG~1\UNWISE.EXE C:\PROGRA~1\MESSAG~1\INSTALL.LOG
Messenger Plus! 3 --> "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
Microsoft Midtown Madness --> "C:\Program Files\Microsoft Games\Midtown Madness\UNINSTAL.EXE" /runtemp /uninstall
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Publisher 98 --> C:\Program Files\Microsoft Office\Office\Install\Install.exe /m
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) -->
Mise à jour de sécurité pour Windows XP (KB883939) -->
Mise à jour de sécurité pour Windows XP (KB890046) --> "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893066) -->
Mise à jour de sécurité pour Windows XP (KB893756) -->
Mise à jour de sécurité pour Windows XP (KB896358) -->
Mise à jour de sécurité pour Windows XP (KB896422) -->
Mise à jour de sécurité pour Windows XP (KB896423) -->
Mise à jour de sécurité pour Windows XP (KB896428) -->
Mise à jour de sécurité pour Windows XP (KB896688) -->
Mise à jour de sécurité pour Windows XP (KB899587) -->
Mise à jour de sécurité pour Windows XP (KB899588) -->
Mise à jour de sécurité pour Windows XP (KB899589) -->
Mise à jour de sécurité pour Windows XP (KB899591) -->
Mise à jour de sécurité pour Windows XP (KB900725) -->
Mise à jour de sécurité pour Windows XP (KB901017) -->
Mise à jour de sécurité pour Windows XP (KB901214) -->
Mise à jour de sécurité pour Windows XP (KB902400) -->
Mise à jour de sécurité pour Windows XP (KB903235) -->
Mise à jour de sécurité pour Windows XP (KB904706) -->
Mise à jour de sécurité pour Windows XP (KB905414) -->
Mise à jour de sécurité pour Windows XP (KB905749) -->
Mise à jour pour Windows XP (KB894391) -->
Mise à jour pour Windows XP (KB896727) -->
Mozilla Firefox (1.5.0.11) --> C:\Program Files\Mozilla Firefox\uninstall\uninstall.exe /ua "1.5.0.11 (fr)"
MSN Messenger 7.5 --> MsiExec.exe /I{BAFD3C1E-03EC-11DA-BFBD-00065BBDC0B5}
Nero 7 --> MsiExec.exe /I{F0A7FB2C-99E2-4884-9187-4BC60B2C1036}
NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
PIF DESIGNER --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x40c anything
PronoFoot Expert Plus 2.56 --> "C:\Program Files\PronoFoot Expert Plus\unins000.exe"
Realtek AC'97 Audio --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
Roxio RecordNow! --> MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
SAGEM F@st800 --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}\setup.exe" -l0x40c
Scooby-Doo(TM), Panique dans la Ville fantôme(TM) --> C:\Program Files\Mindscape\Scooby-Doo(TM), Panique dans la Ville fantôme(TM)\uninstal.exe
Shareaza version 2.2.5.0 --> "C:\Program Files\Shareaza\Uninstall\unins000.exe"
VideoLAN VLC media player 0.8.5 --> C:\Program Files\VideoLAN\VLC\uninstall.exe
VirtualCloneDrive --> "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\vcd-uninst.exe" /D="C:\Program Files\Elaborate Bytes\VirtualCloneDrive"
Wanadoo --> C:\PROGRA~1\Wanadoo\Uninstall.exe
Winamp (remove only) --> "C:\Program Files\Winamp\UninstWA.exe"
WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
Yahoo! Install Manager --> C:\WINDOWS\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL

-- End of ComboScan: finished at 2007-04-26 at 17:59:32 ------------------------

tu m'as oublié boulepate :'( ?

Non, j'ai du monde au balcon, chacun son tour :P

pas de probleme ;)

Ton rapport Comboscan n'est pas en entier, la il y a juste le deuxième rapport ;-)

Tu peux néanmoins désinstaller :

- J2SE Runtime Environment 5.0 Update 11 -
- Java 2 Runtime Environment Standard Edition v1.3.1_03
- Panda ActiveScan

Télécharge et installe Java dernière version
---> https://www.java.com/fr/download/manual.jsp

ComboScan v20070306.20 run by Jean Pierre on 2007-04-27 at 09:35:01
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created ComboScan Restore Point.

-- Last 5 Restore Point(s) --
90: 2007-04-27 07:35:03 UTC - RP288 - ComboScan Restore Point
89: 2007-04-27 07:31:00 UTC - RP287 - Installé Java(TM) SE Runtime Environment 6 Update 1
88: 2007-04-27 07:30:28 UTC - RP286 - Supprimé Java(TM) SE Runtime Environment 6 Update 1
87: 2007-04-27 07:25:12 UTC - RP285 - Supprimé J2SE Runtime Environment 5.0 Update 11
86: 2007-04-27 07:18:32 UTC - RP284 - Opération de restauration

-- First Restore Point --
1: 2007-01-27 15:31:01 UTC - RP199 - Point de vérification système

Performed disk cleanup.

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-04-27 09:35:20
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.0.2900.2180)

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Documents and Settings\Jean Pierre\ie_updater.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Wanadoo\CnxMon.exe
C:\Program Files\Messager Wanadoo\Demon.exe
C:\Program Files\Wanadoo\TaskBarIcon.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Jean Pierre\Bureau\comboscan.exe
C:\WINDOWS\system32\wscntfy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/toolbar/ie8/sidebar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E0750E2-6160-4A67-B316-0BF81459B155} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\GoogleToolbar2.dll
O2 - BHO: (no name) - {B6F1A4CB-DADD-4D0C-BDFC-E945647302C1} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S91.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WindowsHive] C:\WINDOWS\system32\rpcc.exe
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\pqjxkwfi.dll",realset
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {33331111-1111-1111-1111-615111193427} () -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - Service: Avertissement (Alerter) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Service de la passerelle de la couche Application (ALG) - C:\WINDOWS\system32\alg.exe
O23 - Service: Gestion d'applications (AppMgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
O23 - Service: Audio Windows (AudioSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
O23 - Service: avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
O23 - Service: AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Explorateur d'ordinateur (Browser) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Service d'indexation (CiSvc) - C:\WINDOWS\system32\cisvc.exe
O23 - Service: Gestionnaire de l'Album (ClipSrv) - C:\WINDOWS\system32\clipsrv.exe
O23 - Service: Application système COM+ (COMSysApp) - C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
O23 - Service: Services de cryptographie (CryptSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Lanceur de processus serveur DCOM (DcomLaunch) - C:\WINDOWS\system32\svchost -k DcomLaunch
O23 - Service: Client DHCP (Dhcp) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - C:\WINDOWS\System32\dmadmin.exe /com
O23 - Service: Gestionnaire de disque logique (dmserver) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Client DNS (Dnscache) - C:\WINDOWS\system32\svchost.exe -k NetworkService
O23 - Service: Service de rapport d'erreurs (ERSvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Journal des événements (Eventlog) - C:\WINDOWS\system32\services.exe
O23 - Service: Système d'événements de COM+ (EventSystem) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Google Updater Service (gusvc) - "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
O23 - Service: Aide et support (helpsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Accès du périphérique d'interface utilisateur (HidServ) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: HTTP SSL (HTTPFilter) - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - C:\WINDOWS\system32\imapi.exe
O23 - Service: Serveur (lanmanserver) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Station de travail (lanmanworkstation) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Assistance TCP/IP NetBIOS (LmHosts) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Machine Debug Manager (MDM) - "C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE"
O23 - Service: Affichage des messages (Messenger) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: MSIEUpdater_1 (Microsoft IE Updater_1) - C:\Documents and Settings\Jean Pierre\ie_updater.exe /start
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - C:\WINDOWS\system32\msdtc.exe
O23 - Service: Windows Installer (MSIServer) - C:\WINDOWS\system32\msiexec.exe /V
O23 - Service: NBService - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: DDE réseau (NetDDE) - C:\WINDOWS\system32\netdde.exe
O23 - Service: DSDM DDE réseau (NetDDEdsdm) - C:\WINDOWS\system32\netdde.exe
O23 - Service: Ouverture de session réseau (Netlogon) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Connexions réseau (Netman) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: NLA (Network Location Awareness) (Nla) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: NMIndexingService - "C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe"
O23 - Service: Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Stockage amovible (NtmsSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: NVIDIA Display Driver Service (NVSvc) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Office Source Engine (ose) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
O23 - Service: Plug-and-Play (PlugPlay) - C:\WINDOWS\system32\services.exe
O23 - Service: Services IPSEC (PolicyAgent) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Emplacement protégé (ProtectedStorage) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Gestionnaire de connexion automatique d'accès distant (RasAuto) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Gestionnaire de connexions d'accès distant (RasMan) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Routage et accès distant (RemoteAccess) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Accès à distance au Registre (RemoteRegistry) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Localisateur d'appels de procédure distante (RPC) (RpcLocator) - C:\WINDOWS\system32\locator.exe
O23 - Service: Appel de procédure distante (RPC) (RpcSs) - C:\WINDOWS\system32\svchost -k rpcss
O23 - Service: QoS RSVP (RSVP) - C:\WINDOWS\system32\rsvp.exe
O23 - Service: Gestionnaire de comptes de sécurité (SamSs) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Carte à puce (SCardSvr) - C:\WINDOWS\system32\scardsvr.exe
O23 - Service: Planificateur de tâches (Schedule) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Connexion secondaire (seclogon) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Notification d'événement système (SENS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Pare-feu Windows / Partage de connexion Internet (SharedAccess) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Détection matériel noyau (ShellHWDetection) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: Service de restauration système (srservice) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Service de découvertes SSDP (SSDPSRV) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Acquisition d'image Windows (WIA) (stisvc) - C:\WINDOWS\system32\svchost.exe -k imgsvc
O23 - Service: MS Software Shadow Copy Provider (SwPrv) - C:\WINDOWS\system32\dllhost.exe /Processid:{387BDC5B-58B4-44E3-B28D-7AB4FB452037}
O23 - Service: Journaux et alertes de performance (SysmonLog) - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Téléphonie (TapiSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Services Terminal Server (TermService) - C:\WINDOWS\System32\svchost -k DComLaunch
O23 - Service: Thèmes (Themes) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Telnet (TlntSvr) - C:\WINDOWS\system32\tlntsvr.exe
O23 - Service: Client de suivi de lien distribué (TrkWks) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Windows User Mode Driver Framework (UMWdf) - C:\WINDOWS\system32\wdfmgr.exe
O23 - Service: Hôte de périphérique universel Plug-and-Play (upnphost) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Onduleur (UPS) - C:\WINDOWS\system32\ups.exe
O23 - Service: Cliché instantané de volume (VSS) - C:\WINDOWS\system32\vssvc.exe
O23 - Service: Horloge Windows (W32Time) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: WebClient - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Infrastructure de gestion Windows (winmgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Service de numéro de série du lecteur multimédia portable (WmdmPmSN) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Extensions du pilote WMI (Wmi) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Carte de performance WMI (WmiApSrv) - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Centre de sécurité (wscsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Mises à jour automatiques (wuauserv) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Configuration automatique sans fil (WZCSVC) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Service d'approvisionnement réseau (xmlprov) - C:\WINDOWS\System32\svchost.exe -k netsvcs

-- File Associations -----------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

1R Aavmker4 (avast! Asynchronous Virus Monitor) - C:\WINDOWS\system32\drivers\aavmker4.sys
2S ADILOADER (General Purpose USB Driver (adildr.sys)) - C:\WINDOWS\system32\drivers\adildr.sys
3R adiusbaw (USB ADSL WAN Adapter) - C:\WINDOWS\system32\drivers\adiusbaw.sys
3R ALCXWDM (Service for Realtek AC97 Audio (WDM)) - C:\WINDOWS\system32\drivers\ALCXWDM.SYS
1R AmdK8 (Pilote de processeur AMD) - C:\WINDOWS\system32\drivers\AmdK8.sys
2R aswMon2 (avast! Standard Shield Support) - C:\WINDOWS\system32\drivers\aswmon2.sys
3R aswRdr - C:\WINDOWS\system32\drivers\aswRdr.sys
1R aswTdi (avast! Network Shield Support) - C:\WINDOWS\system32\drivers\aswTdi.sys
1R AVG Anti-Spyware Driver - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
1R AvgAsCln (AVG Anti-Spyware Clean Driver) - C:\WINDOWS\system32\drivers\AvgAsCln.sys
2R ElbyCDIO (ElbyCDIO Driver) - C:\WINDOWS\system32\drivers\ElbyCDIO.sys
3R ElbyDelay - C:\WINDOWS\system32\drivers\ElbyDelay.sys
3S gUSBSTOi - C:\DOCUME~1\JEANPI~1\LOCALS~1\Temp\gUSBSTOi.sys (not found)
3R L8042Kbd (Logitech SetPoint Keyboard Driver) - C:\WINDOWS\system32\drivers\L8042Kbd.sys
3R L8042mou (Logitech SetPoint PS/2 Mouse Filter Driver) - C:\WINDOWS\system32\drivers\L8042mou.Sys
3R LMouKE (Logitech SetPoint Mouse Filter Driver) - C:\WINDOWS\system32\drivers\LMouKE.Sys
3R nv - C:\WINDOWS\system32\drivers\nv4_mini.sys
0R nvata - C:\WINDOWS\system32\drivers\nvata.sys
3R NVENETFD (NVIDIA nForce Networking Controller Driver) - C:\WINDOWS\system32\drivers\NVENETFD.sys
3R nvnetbus (NVIDIA Network Bus Enumerator) - C:\WINDOWS\system32\drivers\nvnetbus.sys
0R PxHelp20 - C:\WINDOWS\system32\drivers\PxHelp20.sys
0R sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - C:\WINDOWS\system32\drivers\sfdrv01.sys
0R sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfhlp02.sys
0R sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfsync02.sys
0R sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfvfs02.sys
3S usbccgp (Pilote parent générique USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbohci (Pilote miniport de contrôleur hôte ouvert USB Microsoft) - C:\WINDOWS\system32\drivers\usbohci.sys
3S usbprint (Classe d'imprimantes USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3S usbscan (Pilote de scanneur USB) - C:\WINDOWS\system32\drivers\usbscan.sys
3S USBSTOR (Pilote de stockage de masse USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS
0R VClone - C:\WINDOWS\system32\drivers\VClone.sys
2S WGAUKWJY - C:\WINDOWS\system32\wgaukwjy.zpe (not found)
2S windbg48 - C:\WINDOWS\system32\windbg48.sys (not found)
4S WS2IFSL (Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0) - C:\WINDOWS\system32\drivers\ws2ifsl.sys

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

2R aswUpdSv (avast! iAVS4 Control Service) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
2R avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
3S avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
2S AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
3S gusvc (Google Updater Service) - "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
2R Microsoft IE Updater_1 (MSIEUpdater_1) - C:\Documents and Settings\Jean Pierre\ie_updater.exe /start
3S NBService - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
3R NMIndexingService - "C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe"
2R NVSvc (NVIDIA Display Driver Service) - C:\WINDOWS\system32\nvsvc32.exe
3S ose (Office Source Engine) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
2R UMWdf (Windows User Mode Driver Framework) - C:\WINDOWS\system32\wdfmgr.exe

-- Files created between 2007-03-27 and 2007-04-27 -----------------------------

2007-04-27 09:33:39 0 d-------- C:\Program Files\Java
2007-04-27 09:31:07 0 d-------- C:\Program Files\Fichiers communs\Java
2007-04-26 17:58:47 4960256 --a------ C:\Documents and Settings\Jean Pierre\ntuser.dat
2007-04-26 16:53:01 0 d-------- C:\Program Files\CCleaner
2007-04-26 16:51:39 0 d-------- C:\Program Files\Yahoo!
2007-04-26 14:01:37 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-04-26 13:50:46 0 d-------- C:\VundoFix Backups<VUNDOF~1>
2007-04-26 12:44:00 0 d-------- C:\Program Files\Hijackthis Version Française<HIJACK~1>
2007-04-26 11:07:34 132660 --a------ C:\WINDOWS\system32\pqjxkwfi.dll
2007-04-26 10:57:41 0 d-------- C:\Documents and Settings\LocalService\Menu Démarrer<MENUDM~1>
2007-04-26 10:57:40 0 d-------- C:\Brave-Sentry<BRAVE-~1>
2007-04-26 10:56:58 87040 --a------ C:\WINDOWS\system32\winupd_KB69665071.exe<WINUPD~4.EXE>
2007-04-26 10:56:54 33792 --a------ C:\WINDOWS\system32\rpcc.exe
2007-04-26 10:54:29 14885 --a------ C:\Documents and Settings\Jean Pierre\ie_updater.exe<IE_UPD~1.EXE>
2007-04-18 18:16:52 0 d-------- C:\Program Files\UbiSoft
2007-04-14 12:59:43 0 d-------- C:\Program Files\Winamp
2007-04-11 09:48:21 0 d-------- C:\Documents and Settings\All Users\Application Data\NVIDIA
2007-03-28 16:55:40 0 d-------- C:\WINDOWS\Sun
2007-03-28 16:55:40 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\Sun
2007-03-28 16:55:07 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\Google
2007-03-28 16:15:26 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\EPSON

-- Find3M Report ---------------------------------------------------------------

2007-04-27 09:34:52 0 d-------- C:\Program Files\Wanadoo
2007-04-27 09:31:07 0 d-------- C:\Program Files\Fichiers communs<FICHIE~1>
2007-04-27 09:21:11 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-04-26 21:39:40 0 d-------- C:\Program Files\eMule
2007-04-26 14:49:43 0 d-------- C:\Program Files\SpywareKnight<SPYWAR~1>
2007-04-18 18:16:59 733824 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-04-18 18:06:59 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-04-12 18:46:06 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\AdobeUM
2007-03-30 11:01:40 0 d-------- C:\Program Files\Google
2007-03-25 19:39:25 0 d-------- C:\Program Files\Everest Poker<EVERES~1>
2007-03-25 10:41:09 370832 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-03-25 10:41:09 49734 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-03-18 17:47:45 0 d-------- C:\Program Files\Shareaza
2007-03-18 17:47:42 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\Shareaza
2007-03-16 14:35:09 2958 --a------ C:\WINDOWS\mozver.dat
2007-03-08 14:43:36 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\uTorrent
2007-03-02 19:32:45 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\dvdcss
2007-02-28 16:03:13 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\vlc
2007-02-28 15:55:13 0 d-------- C:\Program Files\VideoLAN
2007-02-27 17:34:24 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\Sonic
2007-02-27 17:31:22 0 d-------- C:\Documents and Settings\Jean Pierre\Application Data\Leadertech<LEADER~1>
2007-02-27 17:29:46 0 d-------- C:\Program Files\Roxio
2007-02-14 13:28:35 0 --a------ C:\WINDOWS\nsreg.dat
2007-02-01 06:56:06 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll<DIVX_X~2.DLL>
2007-02-01 06:56:05 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll<DIVX_X~3.DLL>
2007-02-01 06:56:05 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll<DIVX_X~1.DLL>
2007-02-01 06:56:04 639066 --a------ C:\WINDOWS\system32\DivX.dll
2007-01-31 23:27:01 524288 --a------ C:\WINDOWS\system32\DivXsm.exe
2007-01-31 01:15:10 118784 --a------ C:\WINDOWS\system32\DivXCodecUpdateChecker.exe<DIVXCO~1.EXE>
2007-01-30 07:03:40 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-01-30 07:03:34 118520 -----n--- C:\WINDOWS\system32\pxinsi64.exe
2007-01-30 07:03:34 116472 -----n--- C:\WINDOWS\system32\pxcpyi64.exe
2007-01-30 07:03:34 129784 -----n--- C:\WINDOWS\system32\pxafs.dll
2007-01-30 07:03:26 200704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-01-30 07:03:26 1044480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-01-30 06:56:56 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2007-01-30 06:56:56 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2007-01-30 06:56:54 53248 --a------ C:\WINDOWS\system32\dpuGUI10.dll
2007-01-30 06:56:52 57344 --a------ C:\WINDOWS\system32\dpv11.dll
2007-01-30 06:56:52 344064 --a------ C:\WINDOWS\system32\dpus11.dll
2007-01-30 06:56:52 593920 --a------ C:\WINDOWS\system32\dpuGUI11.dll
2007-01-30 06:56:52 294912 --a------ C:\WINDOWS\system32\dpu11.dll
2007-01-30 06:56:52 294912 --a------ C:\WINDOWS\system32\dpu10.dll

-- Registry Dump ---------------------------------------------------------------

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NMBgMonitor.exe\""
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.1128.5462\\GoogleToolbarNotifier.exe"
"updateMgr"="\"C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe\" AcRdB7_0_8 -reboot 1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SoundMan"="SOUNDMAN.EXE"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"WooCnxMon"="C:\\PROGRA~1\\Wanadoo\\CnxMon.exe"
"Demon"="C:\\PROGRA~1\\MESSAG~1\\Demon.exe"
"WOOWATCH"="C:\\PROGRA~1\\Wanadoo\\Watch.exe"
"WOOTASKBARICON"="C:\\PROGRA~1\\Wanadoo\\TaskbarIcon.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"VirtualCloneDrive"="\"C:\\Program Files\\Elaborate Bytes\\VirtualCloneDrive\\VCDDaemon.exe\" /s"
"EPSON Stylus DX6000 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIBIE.EXE /FU \"C:\\WINDOWS\\TEMP\\E_S91.tmp\" /EF \"HKLM\""
"MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\""
"NeroFilterCheck"="C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroCheck.exe"
"WindowsHive"="C:\\WINDOWS\\system32\\rpcc.exe"
"InfoData"="rundll32.exe \"C:\\WINDOWS\\system32\\pqjxkwfi.dll\",realset"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{26FAFD75-1005-41F6-978D-178C00165C0B}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Windows update loader"="C:\\Windows\\xpupdate.exe"
"Brave-Sentry"="C:\\Program Files\\BraveSentry\\BraveSentry.exe"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Windows update loader"="C:\\Windows\\xpupdate.exe"
"Brave-Sentry"="C:\\Program Files\\BraveSentry\\BraveSentry.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"Wallpaper"=""

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\system]
"Wallpaper"=""

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktop"=dword:00000000
"ForceActiveDesktopOn"=dword:00000001

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktop"=dword:00000000
"ForceActiveDesktopOn"=dword:00000001

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

-- End of ComboScan: finished at 2007-04-27 at 09:35:39 ------------------------

là ca doit etre bon
PS: jai du faire une restauration du systeme ce matin car plus rien ne fonctionnait :s

SVP jai besoin daide...

Grrr