Souci avec internet

Résolu
mon ordi a été formaté il y a un mois et depuis une semaine internet est lent (1 minute pour afficher une page)

comme logiciel de securité j'ai ad aware spybot avast et ccleaner.
ils disent qu'il n'y a pas de virus ni spy donc je ne comprends pas d'ou vient le probleme.
j'ai regardé plusieurs forums et je n'ai toujours pas trouvé de solutions si quelqu'un pouvait m'aider ce serait sympa

voici mon rapport hijackthis si necessaire

Logfile of HijackThis v1.99.1
Scan saved at 16:26:28, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ares\chatServer.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Ares\Ares.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Tigresse\LOCALS~1\Temp\Rar$EX47.188\HijackThis.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [Okay up user link] C:\Documents and Settings\All Users\Application Data\Once long okay up\pinggrid.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers orange adsl.lnk = ?
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
Configuration: Windows XP
Opera 9.20

13 réponses

  • Votes
  • Date
  • Date décroissante
  1. salut

    je vois que tu n'as pas de parefeu peux tu installer kério , voici 1 lien qui t'aidera a le configurer :

    http://kerio.probb.fr/Systemesd-exploitation-c1/Logiciels-et-tutoriels-gratuits-tries-par-categorie-f6/Tutoriel-pour-Kerio-4-version-gratuite-t201.htm

    aussi hijack est mal placé , regarde ce lien qui t'indiquera comment le réinstaller correctement :

    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    ensuite reposte 1 log stp

    on passera au nettoyage ensuite

    bizz
    1. slt alors g installé kerio et voici le nouveau log

      Logfile of HijackThis v1.99.1
      Scan saved at 20:11:14, on 23/05/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16441)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Ares\chatServer.exe
      C:\WINDOWS\system32\cisvc.exe
      C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
      C:\WINDOWS\system32\svchost.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      C:\Program Files\Ares\Ares.exe
      C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Opera\Opera.exe
      C:\hijackthis\HijackThis.exe
      C:\WINDOWS\system32\cidaemon.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Startup: Raccourci vers orange adsl.lnk = ?
      O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
      O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
      O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O11 - Options group: [INTERNATIONAL] International*
      O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe

      -_-_-_- merci a toi -_-_-_-
      1. Contributeur
        slt,

        désinstalle Flashget , il contient un spyware ..

        C:\Program Files\FlashGet

        ensuite :

        Télécharge et installe ce log :

        * AVG AS

        AVG anti spyware
        avg antispyware
        Met le a jour avant de lancer le scan.
        Tuto :
        http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

        ->Relance AVG AS -> "Analyse" ->"Paramètres"

        Sous la question "Comment réagir ?" :

        -> clique sur "Actions recommandées" et choisis "Quarantaines"
        -> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

        Si un fichier est infecté en fin d'analyse

        ->Clique sur "Appliquer toutes les actions "

        ->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".

        ->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici

        1. voici le rapport avg

          ---------------------------------------------------------
          AVG Anti-Spyware - Rapport d'analyse
          ---------------------------------------------------------

          + Créé à: 22:25:10 23/05/2007

          + Résultat de l'analyse:

          C:\Documents and Settings\Tigresse\Cookies\tigresse@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
          :mozilla.31:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
          :mozilla.12:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
          :mozilla.13:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
          :mozilla.80:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
          :mozilla.81:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
          :mozilla.74:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
          :mozilla.34:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
          :mozilla.39:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
          C:\Documents and Settings\gg\Cookies\gg@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
          :mozilla.31:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
          :mozilla.61:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
          :mozilla.33:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
          :mozilla.30:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
          :mozilla.62:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
          :mozilla.54:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
          C:\Documents and Settings\Famille\Cookies\famille@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
          :mozilla.15:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
          :mozilla.13:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
          :mozilla.14:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
          :mozilla.15:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
          :mozilla.16:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
          :mozilla.17:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
          :mozilla.18:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
          :mozilla.55:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
          :mozilla.56:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
          :mozilla.57:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
          :mozilla.6:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
          :mozilla.7:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
          :mozilla.8:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
          :mozilla.22:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
          :mozilla.23:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
          :mozilla.70:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
          C:\Documents and Settings\Elise\Cookies\elise@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
          C:\Documents and Settings\gg\Cookies\gg@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
          :mozilla.68:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
          :mozilla.69:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
          F:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP27\A0011871.exe -> Worm.VB.dz : Nettoyé.
          F:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP34\A0013668.exe -> Worm.VB.dz : Nettoyé.

          Fin du rapport
          1. Contributeur
            Ta resto système était infectée ...

            Ou en sont tes probs ?

            Remet un log hijack .

            a+
            1. le probleme c'est la lenteur d'internet

              voici le log

              Logfile of HijackThis v1.99.1
              Scan saved at 10:35:23, on 24/05/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16441)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\WINDOWS\system32\cisvc.exe
              C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              C:\Program Files\MSN Messenger\msnmsgr.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\WINDOWS\system32\ctfmon.exe
              c:\progra~1\intern~1\iexplore.exe
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\Program Files\MSN Messenger\usnsvc.exe
              C:\WINDOWS\system32\cidaemon.exe
              C:\Program Files\Windows Media Player\wmplayer.exe
              C:\Program Files\MSN Messenger\livecall.exe
              C:\Program Files\Ares\Ares.exe
              C:\Program Files\Opera\Opera.exe
              C:\hijackthis\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
              O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
              O4 - HKLM\..\Run: [FlashGet] "C:\Program Files\FlashGet\FlashGet.exe" /min
              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
              O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
              O4 - HKCU\..\Run: [Wait Mags] C:\DOCUME~1\Famille\APPLIC~1\THIRDP~1\internetdead.exe
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
              O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O11 - Options group: [INTERNATIONAL] International*
              O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
              O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
              O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
              O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
              1. Contributeur
                Flashget est encore installé, vire le !

                Télécharge ceci:
                http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip

                Dézippe-le (clic droit >> Extraire tout) et double clique sur le fichier lopxpMH.bat.

                Poste le contenu du rapport qui va s'ouvrir.

                a+
                1. slt, désolé pour le retard

                  flash get avait deja été supprimé et voici le rapport

                  Rapport lopxpMH2 version 2.0 fait à 9:09:27,29 le 25/05/2007
                  C:\Documents and Settings\Tigresse\Bureau

                  ******************************************
                  ## Répertoires Application Data

                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Administrateur\Application Data

                  09/05/2007 21:48 <REP> .
                  09/05/2007 21:48 <REP> ..
                  09/05/2007 21:48 <REP> Microsoft
                  09/05/2007 21:48 62 desktop.ini
                  1 fichier(s) 62 octets
                  3 Rép(s) 7 478 956 032 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data

                  09/05/2007 21:48 <REP> .
                  09/05/2007 21:48 <REP> ..
                  09/05/2007 21:48 <REP> Microsoft
                  09/05/2007 21:49 3 712 656 IconCache.db
                  1 fichier(s) 3 712 656 octets
                  3 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\All Users\Application Data

                  04/04/2007 15:45 <REP> .
                  04/04/2007 15:45 <REP> ..
                  04/04/2007 23:39 <REP> Adobe
                  16/04/2007 13:32 <REP> Apple Computer
                  04/04/2007 21:59 <REP> Downloaded Installations
                  21/05/2007 10:12 <REP> Emjysoft
                  06/04/2007 12:32 <REP> Google
                  29/04/2007 12:10 <REP> Macrovision
                  04/04/2007 21:29 <REP> Messenger Plus!
                  04/04/2007 15:45 <REP> Microsoft
                  20/05/2007 19:29 <REP> Once long okay up
                  04/04/2007 22:00 <REP> PC Suite
                  04/04/2007 22:06 <REP> Sony Ericsson
                  05/04/2007 08:35 <REP> Spybot - Search & Destroy
                  20/05/2007 12:16 <REP> TuneUp Software
                  13/04/2007 14:24 <REP> Ulead Systems
                  07/04/2007 11:35 <REP> Windows Genuine Advantage
                  11/04/2007 10:25 <REP> Windows Live Toolbar
                  04/04/2007 15:45 62 desktop.ini
                  1 fichier(s) 62 octets
                  18 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Default User\Application Data

                  04/04/2007 15:45 <REP> .
                  04/04/2007 15:45 <REP> ..
                  04/04/2007 15:45 <REP> Microsoft
                  04/04/2007 15:45 62 desktop.ini
                  1 fichier(s) 62 octets
                  3 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

                  04/04/2007 15:45 <REP> .
                  04/04/2007 15:45 <REP> ..
                  04/04/2007 13:54 <REP> Microsoft
                  0 fichier(s) 0 octets
                  3 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Elise\Application Data

                  04/04/2007 15:15 <REP> .
                  04/04/2007 15:15 <REP> ..
                  09/04/2007 10:20 <REP> Adobe
                  01/05/2007 11:33 <REP> Datalayer
                  09/04/2007 10:32 <REP> Google
                  04/04/2007 15:15 <REP> Identities
                  11/04/2007 17:33 <REP> Macromedia
                  04/04/2007 15:15 <REP> Microsoft
                  09/04/2007 10:32 <REP> Mozilla
                  25/05/2007 08:01 <REP> Opera
                  09/04/2007 10:20 <REP> PC Suite
                  09/04/2007 10:20 <REP> Real
                  09/04/2007 10:20 <REP> Webroot
                  04/04/2007 15:15 62 desktop.ini
                  1 fichier(s) 62 octets
                  13 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Elise\Local Settings\Application Data

                  04/04/2007 15:15 <REP> .
                  04/04/2007 15:15 <REP> ..
                  11/04/2007 17:48 <REP> Adobe
                  27/04/2007 17:29 <REP> Ahead
                  09/04/2007 10:32 <REP> Google
                  01/05/2007 10:22 <REP> Identities
                  04/04/2007 15:15 <REP> Microsoft
                  09/04/2007 10:32 <REP> Mozilla
                  09/04/2007 10:55 5 120 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                  09/04/2007 10:29 89 496 GDIPFONTCACHEV1.DAT
                  04/04/2007 22:09 5 906 684 IconCache.db
                  3 fichier(s) 6 001 300 octets
                  8 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Famille\Application Data

                  06/04/2007 20:20 <REP> .
                  06/04/2007 20:20 <REP> ..
                  06/04/2007 20:20 <REP> Adobe
                  22/04/2007 23:34 <REP> Ahead
                  12/04/2007 11:41 <REP> Arcsoft
                  08/04/2007 12:02 <REP> Datalayer
                  10/04/2007 09:51 <REP> GetRight
                  06/04/2007 20:24 <REP> Google
                  06/05/2007 09:13 <REP> Help
                  06/04/2007 20:20 <REP> Identities
                  22/05/2007 17:20 <REP> Lavasoft
                  06/04/2007 20:30 <REP> Macromedia
                  06/04/2007 20:20 <REP> Microsoft
                  08/04/2007 11:38 <REP> Mozilla
                  12/04/2007 13:13 <REP> Nokia
                  12/04/2007 11:34 <REP> Nokia Multimedia Player
                  22/05/2007 14:22 <REP> Opera
                  06/04/2007 20:20 <REP> PC Suite
                  06/04/2007 20:20 <REP> Real
                  16/04/2007 00:47 <REP> Sun
                  20/05/2007 19:29 <REP> third platform
                  16/04/2007 14:19 <REP> vlc
                  08/04/2007 09:05 <REP> Webroot
                  06/04/2007 20:20 62 desktop.ini
                  14/04/2007 12:19 89 496 GDIPFONTCACHEV1.DAT
                  2 fichier(s) 89 558 octets
                  23 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Famille\Local Settings\Application Data

                  06/04/2007 20:20 <REP> .
                  06/04/2007 20:20 <REP> ..
                  16/04/2007 14:07 <REP> {C0DAB3BD-FE6D-43C8-BADB-6E6D26647526}
                  10/04/2007 15:10 <REP> Adobe
                  21/04/2007 23:02 <REP> Ahead
                  08/04/2007 09:39 <REP> ApplicationHistory
                  12/05/2007 16:48 <REP> Ares
                  06/04/2007 20:24 <REP> Google
                  18/04/2007 16:31 <REP> Help
                  02/05/2007 20:07 <REP> Identities
                  06/04/2007 20:20 <REP> Microsoft
                  08/04/2007 11:38 <REP> Mozilla
                  16/04/2007 14:09 <REP> Pando
                  08/04/2007 10:53 24 064 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                  08/04/2007 09:39 130 fusioncache.dat
                  06/04/2007 20:42 89 496 GDIPFONTCACHEV1.DAT
                  06/04/2007 22:39 4 842 366 IconCache.db
                  4 fichier(s) 4 956 056 octets
                  13 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\gg\Application Data

                  18/05/2007 12:39 <REP> .
                  18/05/2007 12:39 <REP> ..
                  18/05/2007 12:40 <REP> Adobe
                  20/05/2007 10:18 <REP> Google
                  18/05/2007 12:39 <REP> Identities
                  20/05/2007 10:17 <REP> Macromedia
                  18/05/2007 12:39 <REP> Microsoft
                  20/05/2007 09:52 <REP> Mozilla
                  18/05/2007 12:39 62 desktop.ini
                  1 fichier(s) 62 octets
                  8 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\gg\Local Settings\Application Data

                  18/05/2007 12:39 <REP> .
                  18/05/2007 12:39 <REP> ..
                  18/05/2007 12:40 <REP> Ahead
                  20/05/2007 10:18 <REP> Google
                  18/05/2007 12:39 <REP> Microsoft
                  20/05/2007 09:52 <REP> Mozilla
                  18/05/2007 12:42 89 496 GDIPFONTCACHEV1.DAT
                  18/05/2007 12:48 6 291 456 IconCache.db
                  2 fichier(s) 6 380 952 octets
                  6 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\LocalService\Application Data

                  04/04/2007 13:59 <REP> .
                  04/04/2007 13:59 <REP> ..
                  08/04/2007 01:26 <REP> Google
                  04/04/2007 13:59 <REP> Microsoft
                  0 fichier(s) 0 octets
                  4 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

                  04/04/2007 13:59 <REP> .
                  04/04/2007 13:59 <REP> ..
                  06/05/2007 20:24 <REP> Adobe
                  08/04/2007 01:26 <REP> Google
                  04/04/2007 13:59 <REP> Microsoft
                  0 fichier(s) 0 octets
                  5 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\NetworkService\Application Data

                  04/04/2007 13:59 <REP> .
                  04/04/2007 13:59 <REP> ..
                  04/04/2007 13:59 <REP> Microsoft
                  0 fichier(s) 0 octets
                  3 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

                  04/04/2007 13:59 <REP> .
                  04/04/2007 13:59 <REP> ..
                  04/04/2007 13:59 <REP> Microsoft
                  0 fichier(s) 0 octets
                  3 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Tigresse\Application Data

                  04/04/2007 14:01 <REP> .
                  04/04/2007 14:01 <REP> ..
                  04/04/2007 23:41 <REP> Adobe
                  21/04/2007 21:04 <REP> Ahead
                  11/05/2007 17:50 <REP> Azureus
                  05/04/2007 13:51 <REP> Datalayer
                  19/05/2007 22:26 <REP> DeepBurner
                  21/05/2007 10:12 <REP> Emjysoft
                  06/04/2007 12:33 <REP> Google
                  04/04/2007 23:44 <REP> Help
                  04/04/2007 14:01 <REP> Identities
                  15/05/2007 20:01 <REP> Jetico Personal Firewall
                  05/04/2007 00:38 <REP> Lavasoft
                  05/04/2007 08:18 <REP> Macromedia
                  04/04/2007 14:01 <REP> Microsoft
                  04/04/2007 23:06 <REP> Mozilla
                  16/04/2007 22:40 <REP> MSNInstaller
                  05/04/2007 14:12 <REP> Nokia
                  05/04/2007 14:16 <REP> Nokia Multimedia Player
                  20/05/2007 15:24 <REP> Opera
                  04/04/2007 22:12 <REP> PC Suite
                  04/04/2007 22:12 <REP> Real
                  05/05/2007 11:32 <REP> Sun
                  20/05/2007 12:17 <REP> TuneUp Software
                  13/04/2007 14:38 <REP> Ulead Systems
                  21/05/2007 13:06 <REP> vlc
                  04/04/2007 14:01 62 desktop.ini
                  19/04/2007 19:02 89 496 GDIPFONTCACHEV1.DAT
                  2 fichier(s) 89 558 octets
                  26 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Documents and Settings\Tigresse\Local Settings\Application Data

                  04/04/2007 14:01 <REP> .
                  04/04/2007 14:01 <REP> ..
                  04/04/2007 23:40 <REP> Adobe
                  21/04/2007 21:24 <REP> Ahead
                  23/05/2007 23:00 <REP> Apple Computer
                  19/05/2007 17:01 <REP> ApplicationHistory
                  11/05/2007 18:29 <REP> Ares
                  06/04/2007 12:33 <REP> Google
                  04/04/2007 23:44 <REP> Help
                  05/04/2007 00:33 <REP> Identities
                  04/04/2007 14:01 <REP> Microsoft
                  04/04/2007 23:06 <REP> Mozilla
                  27/04/2007 09:42 <REP> Pando
                  05/04/2007 21:48 29 696 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                  19/05/2007 17:01 131 fusioncache.dat
                  04/04/2007 15:15 89 496 GDIPFONTCACHEV1.DAT
                  04/04/2007 14:04 5 364 070 IconCache.db
                  4 fichier(s) 5 483 393 octets
                  13 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

                  04/04/2007 13:58 <REP> .
                  04/04/2007 13:58 <REP> ..
                  04/04/2007 13:58 <REP> Microsoft
                  04/04/2007 13:58 62 desktop.ini
                  1 fichier(s) 62 octets
                  3 Rép(s) 7 478 890 496 octets libres
                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

                  04/04/2007 13:58 <REP> .
                  04/04/2007 13:58 <REP> ..
                  04/04/2007 13:58 <REP> Microsoft
                  0 fichier(s) 0 octets
                  3 Rép(s) 7 478 890 496 octets libres

                  ******************************************
                  Recherche des taches planifiées dans C:\WINDOWS\tasks

                  C:\WINDOWS\Tasks\AC21FBBB918A6EB7.job
                  s "€!× m : c : \ d o c u m e ~ 1 \ f a m i l l e \ a p p l i c ~ 1 \ t h i r d p ~ 1 \ H e c k m a i l m e d i a . e x e F a m i l l e 0 Î   <

                  C:\WINDOWS\Tasks\Maintenance
                  Maintenance inexploitable

                  ******************************************
                  ## Répertoires de C:\Program Files

                  Le volume dans le lecteur C s'appelle Windows
                  Le numéro de série du volume est CCA8-3FE5

                  Répertoire de C:\Program Files

                  25/05/2007 09:09 <REP> .
                  25/05/2007 09:09 <REP> ..
                  21/05/2007 21:14 <REP> 7-Zip
                  11/05/2007 12:26 <REP> Adobe
                  20/05/2007 19:28 <REP> Adverts
                  04/04/2007 21:22 <REP> Alwil Software
                  25/05/2007 09:06 <REP> Ares
                  21/05/2007 21:40 <REP> Astonsoft
                  11/05/2007 11:49 <REP> CCleaner
                  04/04/2007 13:50 <REP> ComPlus Applications
                  04/04/2007 22:01 <REP> DIFX
                  04/04/2007 23:48 <REP> directx
                  23/05/2007 16:26 <REP> Fichiers communs
                  16/04/2007 14:03 <REP> Free Audio Pack
                  06/04/2007 20:15 <REP> Google
                  23/05/2007 20:49 <REP> Grisoft
                  25/04/2007 18:25 <REP> HardwareDetection
                  04/04/2007 21:55 <REP> honestech
                  15/04/2007 15:10 <REP> ImTOO
                  22/05/2007 22:26 <REP> Internet Explorer
                  02/05/2007 12:34 <REP> Java
                  21/05/2007 21:42 <REP> Lavasoft
                  06/04/2007 22:22 <REP> Messenger
                  20/05/2007 19:28 <REP> Messenger Plus! Live
                  04/04/2007 13:55 <REP> microsoft frontpage
                  04/04/2007 15:20 <REP> Microsoft Office
                  04/04/2007 13:51 <REP> Movie Maker
                  13/04/2007 20:27 <REP> MSN
                  04/04/2007 13:50 <REP> MSN Gaming Zone
                  24/05/2007 00:01 <REP> MSN Messenger
                  06/04/2007 21:51 <REP> MSXML 4.0
                  04/04/2007 13:52 <REP> NetMeeting
                  04/04/2007 22:00 <REP> Nokia
                  04/04/2007 13:50 <REP> Online Services
                  20/05/2007 15:23 <REP> Opera
                  06/04/2007 21:49 <REP> Outlook Express
                  15/05/2007 12:01 <REP> Picasa2
                  24/04/2007 18:13 <REP> PMSSAARI
                  15/04/2007 15:10 <REP> QuickTime
                  04/04/2007 15:27 <REP> Real
                  24/04/2007 18:09 <REP> Sage
                  04/04/2007 23:27 <REP> SAGEM
                  04/04/2007 13:52 <REP> Services en ligne
                  04/04/2007 22:06 <REP> Sony Ericsson
                  21/05/2007 21:11 <REP> Soulseek-Test
                  21/05/2007 22:47 <REP> Spybot - Search & Destroy
                  23/05/2007 19:55 <REP> Sunbelt Software
                  04/04/2007 21:27 <REP> SuperCopier2
                  13/04/2007 22:14 <REP> Ulead Systems
                  20/04/2007 23:25 <REP> VIA
                  20/04/2007 23:06 <REP> VIA Technologies, Inc
                  20/04/2007 23:03 <REP> VIAudioi
                  04/04/2007 20:39 <REP> VideoLAN
                  08/04/2007 01:08 <REP> Webroot
                  04/04/2007 23:54 <REP> Windows Media Connect 2
                  06/04/2007 21:56 <REP> Windows Media Player
                  04/04/2007 13:50 <REP> Windows NT
                  09/04/2007 20:58 <REP> WinRAR
                  04/04/2007 13:55 <REP> xerox
                  0 fichier(s) 0 octets
                  59 Rép(s) 7 478 947 840 octets libres

                  ******************************************
                  ## Popups autorisées

                  * Internet Explorer

                  ! REG.EXE VERSION 3.0

                  HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow

                  * Mozilla Firefox (1 autorisé 2 interdit)

                  ******************************************
                  ## Registre

                  * [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
                  Search Bar REG_SZ http://www.google.com/toolbar/ie8/sidebar.html

                  ******************************************
                  ## Zones de sécurité

                  * HKCU Domains (4)

                  * P3P History (5)

                  ******************************************
                  ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"

                  *************** Fin du rapport ****************
                  1. Contributeur
                    ok

                    1/Telecharge ceci: Clean Up 40:
                    http://pageperso.aol.fr/balltrap34/CleanUp40.exe
                    -aide en image:(merci à Balltrap34).
                    http://perso.orange.fr/rginformatique/section%20virus/democleanup.htm

                    Déconnecte toi d'Internet et ferme tout les programmes en cours.

                    Redémarre en mode sans échec
                    Redémarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows.
                    Choisis le mode sans échec dans les options et valide avec entrée.
                    (Si F8 ne marche pas, essai F5)

                    Rend visible les fichiers cachés et système
                    panneau de configuration > options des dossiers > onglet affichage
                    Cocher la case devant " afficher les fichiers et dossiers cachés "
                    Décocher la case devant " masquer les extensions des fichiers dont le type est connu"
                    Décocher la case devant " masquer les fichiers protégés du système"
                    clic sur [Appliquer] puis sur [ok] pour valider
                    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

                    Lance hijackthis et clic sur [do a system scan only]
                    cocher la case au début des lignes suivantes:

                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp

                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

                    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

                    O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
                    O4 - HKLM\..\Run: [FlashGet] "C:\Program Files\FlashGet\FlashGet.exe" /min
                    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
                    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
                    O4 - HKCU\..\Run: [Wait Mags] C:\DOCUME~1\Famille\APPLIC~1\THIRDP~1\internetdead.exe
                    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

                    O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
                    O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

                    valider en cliquant sur le bouton [fix checked]
                    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

                    Recherche et supprime ces dossiers:
                    Supprimer les fichiers en suivant le chemin des fichiers infectés…

                    S'ils sont présents, supprime:

                    C:\Documents and Settings\Famille\Application Data\third platform

                    C:\Program Files\FlashGet

                    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

                    Ensuite fais Démarrer -> exécuter et tape cmd
                    puis [ok]

                    dans la fenêtre qui va s'ouvrir, copie et colle ceci:

                    del /a C:\WINDOWS\tasks\AC21FBBB918A6EB7.job

                    et valide en appuyant sur [entrée]
                    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

                    Ensuite :

                    -> Supprime les fichiers temporaires

                    Pour ça, exécute cleanup40 (voir démo)

                    Lance le, vérifie que tu es bien en "option standard", ensuite [cleanup] à la fin tu auras une fenêtre qui s'ouvre clique sur [oui], ton PC va redémarrer.
                    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
                    Redémarre normalement et reposte un Hijackthis sur le poste…

                    Précises moi ou en sont tes soucis…

                    A+
                    1. salut, j'ai fait ce que tu as dit et voici le nouveau log

                      Logfile of HijackThis v1.99.1
                      Scan saved at 21:43:52, on 26/05/2007
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16441)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\Program Files\Ares\chatServer.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\WINDOWS\system32\cisvc.exe
                      C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\MSN Messenger\msnmsgr.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                      C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
                      C:\Program Files\MSN Messenger\usnsvc.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                      C:\hijackthis\HijackThis.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\WINDOWS\system32\dwwin.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                      O4 - Startup: Raccourci vers orange adsl.lnk = ?
                      O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
                      O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O11 - Options group: [INTERNATIONAL] International*
                      O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                      O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
                      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
                      O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

                      la j'ai plus de souci merci beaucoup
                      mes pages s'affichent normalement
                      1. Contributeur
                        Ok ton log m'a l'air clean ..

                        - > Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
                        http://www.bitdefender.fr/bd/site/search.php#
                        Clique sur « Bitdefender scan on line » suis les instructions.
                        Démo (merci à balltrap pour cette démo) :
                        http://perso.orange.fr/rginformatique/section%20virus/defender.htm

                        Et colle le rapport.

                        a+
                        1. re,
                          voici le rapport du scan

                          BitDefender Online Scanner

                          Scan report generated at: Sun, May 27, 2007 - 22:34:35

                          Scan path: A:\;C:\;D:\;E:\;F:\;

                          Statistics

                          Time
                          02:36:05

                          Files
                          252735

                          Folders
                          5440

                          Boot Sectors
                          3

                          Archives
                          2462

                          Packed Files
                          21668

                          Results

                          Identified Viruses
                          1

                          Infected Files
                          2

                          Suspect Files
                          0

                          Warnings
                          0

                          Disinfected
                          0

                          Deleted Files
                          2

                          Engines Info

                          Virus Definitions
                          508862

                          Engine build
                          AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

                          Scan plugins
                          14

                          Archive plugins
                          38

                          Unpack plugins
                          6

                          E-mail plugins
                          6

                          System plugins
                          1

                          Scan Settings

                          First Action
                          Disinfect

                          Second Action
                          Delete

                          Heuristics
                          Yes

                          Enable Warnings
                          Yes

                          Scanned Extensions
                          *;

                          Exclude Extensions

                          Scan Emails
                          Yes

                          Scan Archives
                          Yes

                          Scan Packed
                          Yes

                          Scan Files
                          Yes

                          Scan Boot
                          Yes

                          Scanned File
                          Status

                          C:\Program Files\Adverts\uninst.exe
                          Infected with: Trojan.FatObfus.Gen

                          C:\Program Files\Adverts\uninst.exe
                          Disinfection failed

                          C:\Program Files\Adverts\uninst.exe
                          Deleted

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundattachment.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 7)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 2)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 3)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 4)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 5)
                          Clean

                          C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 6)
                          Clean

                          C:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP42\A0029820.exe
                          Infected with: Trojan.FatObfus.Gen

                          C:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP42\A0029820.exe
                          Disinfection failed

                          C:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP42\A0029820.exe
                          Deleted

                          -_-_-_-_- merci pour ton aide -_-_-_-_-