Virus et spyware au secours

bonjour a tous je suis pris d'assaut par les pub spyware- secur , navisearchet autre enplus bitdefender ma trouver le virus suivant backdoor skinyme agent a comment enlever tous ca svp merci
Configuration: Windows XP
Firefox 2.0.0.3

15 réponses

  • Votes
  • Date
  • Date décroissante
  1. voila mon rapport hijackthis si vous pouvez me d'écrire se que cela veut dire merci
    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 15:15:24, on 28/05/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\tcpsvcs.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Antipub\antipub.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
    C:\PROGRA~1\SPYWAR~1\SPYWAR~1.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\SPYWAR~1\SPYWAR~1.EXE
    C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis_v2.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60308
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
    O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S92.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\E_S30.tmp" /EF "HKCU"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Crawler Search - tbr:iemenu
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
    O18 - Protocol: bw+0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {8C95616B-3348-45E7-8767-358F36F1EE42} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: McAfee.com Personal Firewall Service (MpfService) - McAfee.com Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Service SNMP (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe
    O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
    O24 - Desktop Component 0: (no name) - http://perso.wanadoo.fr/christophe.giorg/bmwfonds2/fondbmw18small.jpg
    1. Bonjour

      Commence par faire ceci :

      A² squared : gratuit en français (fait un scan rusé et colle le rapport ici stp)
      ----> http://www.infos-du-net.com/telecharger/a-squared,0301-1233.html

      Si tu as besoin d'aide avec A-squared regarde ce tutoriel :
      --> http://redir.fr/gell

      ET

      Télécharge et installe AVG anti-spyware : mets le à jour
      Tu fais un scan complet de ton système, dès qu'il a fini.
      Si il te trouve des espions,supprime les. Enregistre le rapport et colle le ici stp

      Téléchargeable et tutoriel sur cette page :
      --> http://redir.fr/gsel

      Si tu n'arrives pas à le mettre à jour prends ici les mises à jour
      http://downloads.ewido.net/avgas-signatures-full-current.exe
      1. voila mon rapport a-sguared
        Version - a-squared Free 2.1

        Réglages Scan:

        Objets: Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
        Scan archives: Marche
        Heuristiques: Marche
        Scan ADS: Marche

        Début du scan: 29/05/2007 21:21:41

        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@2o7[1].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@adserver.aol[2].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@adtech[2].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@bluestreak[2].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@tradedoubler[2].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@weborama[2].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@zedo[1].txt Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:14 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:15 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:16 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:17 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:74 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:76 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:78 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:79 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:82 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:83 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:84 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:92 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:94 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:98 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:105 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:106 Détecter: Trace.TrackingCookie
        C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt:107 Détecter: Trace.TrackingCookie
        C:\WINDOWS\system32\Process.exe Détecter: Riskware.RiskTool.Win32.Processor.20
        C:\Program Files\Navilog1\Process.exe Détecter: Riskware.RiskTool.Win32.Processor.20

        Scanné

        Fichiers: 80972
        Traces: 116284
        Cookies: 200
        Processus: 40

        Trouver

        Fichiers: 2
        Traces: 0
        Cookies: 24
        Processus: 0
        Clés de Registre: 0

        Fin du Scan: 29/05/2007 21:43:55
        Temps du Scan: 00:22:14
    2. voila mon rapport avg merci pour l'aide
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 22:08:41 29/05/2007

      + Résultat de l'analyse:

      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
      :mozilla.91:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
      :mozilla.92:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
      :mozilla.94:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
      :mozilla.33:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
      :mozilla.126:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
      :mozilla.90:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
      :mozilla.86:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
      :mozilla.21:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.22:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.23:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.24:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.25:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.26:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.27:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      :mozilla.28:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Reliablestats : Aucune action entreprise.
      C:\Documents and Settings\Compaq_Propriétaire\Cookies\compaq_propriétaire@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
      :mozilla.108:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
      :mozilla.111:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
      :mozilla.102:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
      :mozilla.103:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
      :mozilla.104:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.
      :mozilla.105:C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\g517zxg4.default\cookies.txt -> TrackingCookie.Zedo : Aucune action entreprise.

      Fin du rapport
      1. Bien

        Clic sur démarrer, panneau de configuration ajouter/supprimer des programmes et désinstalle :

        - Desktop Messenger (inutile pour ta cam et suspect)

        ¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60308
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60308
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60308
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
        O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
        O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
        O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
        O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

        ¤ Clic sur "démarrer", "exécuter", tape: services.msc
        Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"

        - AVG Anti-Spyware Guard
        - NVIDIA Display Driver Service

        ¤ ¤ Fais ce nettoyage: à faire réguliérement

        *Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo)
        ---> http://www.infos-du-net.com/telecharger/CCleaner,0301-1039.html

        - Dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis clic en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu clic "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
        Les sauvegardes que tu aura faites, tu pourras les supprimer si ton ordinateur n'a plus de problémes.

        - Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

        Si tu as besoin d'aide avec Ccleaner, regarde ce tutoriel :
        http://redir.fr/gmll

        ¤ Télécharges Blacklight et sauvegarde le sur ton bureau.
        https://www.f-secure.com/en
        Double cliques sur " blbeta.exe " et acceptes la licence; clic sur "Scan" puis "Next"

        Un rapport, va se créer sur ton bureau "fslb-....."
        Copies et colles le contenu de ce rapport ici.

        Ne touche à rien d'autre!
        1. voila j'ai fait tout comme tu ma dit et voila le rapport blacligt
          05/30/07 19:35:54 [Info]: BlackLight Engine 1.0.61 initialized
          05/30/07 19:35:54 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          05/30/07 19:35:54 [Note]: 7019 4
          05/30/07 19:35:54 [Note]: 7005 0
          05/30/07 19:35:54 [Note]: 7006 0
          05/30/07 19:35:55 [Note]: 7011 1744
          05/30/07 19:35:55 [Note]: 7026 0
          05/30/07 19:35:55 [Note]: 7026 0
          05/30/07 19:35:55 [Note]: 7024 3
          05/30/07 19:35:55 [Info]: Hidden process: C:\windows\system32\gsrvxyqul.exe
          05/30/07 19:35:57 [Note]: FSRAW library version 1.7.1021
          05/30/07 19:38:46 [Info]: Hidden file: c:\WINDOWS\system32\gsrvxyqul.dat
          05/30/07 19:38:46 [Note]: 10002 1
          05/30/07 19:38:46 [Info]: Hidden file: C:\windows\system32\gsrvxyqul.exe
          05/30/07 19:38:46 [Note]: 10002 1
          05/30/07 19:38:46 [Info]: Hidden file: c:\WINDOWS\system32\gsrvxyqul_nav.dat
          05/30/07 19:38:46 [Note]: 10002 1
          05/30/07 19:38:47 [Info]: Hidden file: c:\WINDOWS\system32\gsrvxyqul_navps.dat
          05/30/07 19:38:47 [Note]: 10002 1
          05/30/07 19:39:20 [Note]: 2000 1012
          05/30/07 19:39:20 [Note]: 7007 0
          1. Télécharge Navipromo dans tes documents :
            http://perso.numericable.fr/~altshift/Info/Fichiers/Navipromo07.zip

            Télécharge C.C.M dans tes documents
            http://www.mediafire.com/?3xywdon0gt1
            ----

            Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..

            ----
            Décompresse Navipomo puis double clic sur Navipromo.bat Puis appuye sur la touche R pour lancer la recherche.
            Si il te trouve quelque chose appuye sur une touche pour continuer un rapport sera créé à la raine de C:\Navipromo.txt

            Ensuite double clic sur le dossier CCM pour le décompresser, tu devrais avoir les deux fichiers dans le même dossier.
            Double clic sur BFU.exe, clic sur le petit dossier jaune puis double clic sur EGDACCESS.bfu
            Coche la case "scriptfile to execute" puis clic sur "execute" et laisse-le faire son travail.
            Attends que "complete script execution" apparaisse puis clic sur Ok.

            Ensuite clic sur "save" et enregistre le rapport où tu le retrouveras facilement, redémarre ton PC en mode normal et colle ton rapport ici dès que c'est fait ;-)
            1. voila j'ai fait tou ce que tu ma dit et merci pour l'aide
              voila le rapport navipromo
              Rapport Navipromo.bat 0.71 effectué le 31/05/2007 à 18:39:55,01

              L'opération se déroule en mode sans échec sous le compte Compaq_Propri‚taire

              ** Recherche...

              1/ gsrvxyqul trouvé, recherche de gsrvxyqul*
              C:\WINDOWS\system32\gsrvxyqul.dat
              C:\WINDOWS\system32\gsrvxyqul.exe
              C:\WINDOWS\system32\gsrvxyqul_nav.dat
              C:\WINDOWS\system32\gsrvxyqul_navps.dat
              C:\WINDOWS\prefetch\GSRVXYQUL.EXE-1801E292.pf

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              gsrvxyqul REG_SZ c:\windows\system32\gsrvxyqul.exe gsrvxyqul

              ------------------
              Fin du rapport de recherche
              Adware Navipromo trouvé 1 fois avec cette méthode

              ################################################

              ** Nettoyage...

              1/ Déplacement de gsrvxyqul* vers C:\Navipromo\Backups...
              C:\WINDOWS\System32\gsrvxyqul* déplacé avec succès !
              C:\WINDOWS\prefetch\gsrvxyqul* déplacé avec succès

              ------------------
              * Suppression clés et valeurs de registre
              1 entrées de registre netttoyées

              * Backups :

              C:\Navipromo\Backups\ARPCache.reg
              C:\Navipromo\Backups\gsrvxyqul.dat
              C:\Navipromo\Backups\gsrvxyqul.exe
              C:\Navipromo\Backups\GSRVXYQUL.EXE-1801E292.pf
              C:\Navipromo\Backups\gsrvxyqul_nav.dat
              C:\Navipromo\Backups\gsrvxyqul_navps.dat
              C:\Navipromo\Backups\HKCURun.reg
              C:\Navipromo\Backups\HKLMRun.reg
              C:\Navipromo\Backups\Uninstall.reg

              Ajout d'extension .off aux backups

              ## Fin du rapport de Suppression

              -------------
              1. et voila le rapport ccm et merci encore
                BFU v1.00.9
                Windows XP SP2 (WinNT 5.01.2600 SP2)
                Script started at 18:50:12, on 31/05/2007

                Option Delete files to Recycle Bin: Yes
                Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|MC (key not found)
                Failed: RegDelValue HKCU\software\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0|ELECTRONIC GROUP (key not found)
                Failed: DllUnregister C:\WINDOWS\system32\MSWBM32.DLL|1 (file not found)
                Failed: DllUnregister C:\Program Files\MailSkinner\OESkinner.dll|1 (file not found)
                Failed: DllUnregister C:\WINDOWS\system32\HotTVPlayer.dll|1 (file not found)
                Failed: FolderDelete C:\Program Files\dialpass (folder not found)
                Failed: FolderDelete C:\Program Files\eghtmldialer (folder not found)
                Failed: FolderDelete C:\Program Files\egroup (folder not found)
                Failed: FolderDelete C:\Program Files\Instant Access (folder not found)
                Failed: FolderDelete C:\Program Files\MailSkinner (folder not found)
                Failed: FolderDelete C:\Program Files\InternetGameBox (folder not found)
                Failed: FolderDelete C:\Program Files\GoRecord2 (folder not found)
                Failed: FolderDelete C:\Program Files\GoAstro (folder not found)
                Failed: FolderDelete C:\Program Files\SudoPlanet (folder not found)
                Failed: FolderDelete C:\Program Files\WebMediaPlayer (folder not found)
                Failed: FolderDelete C:\Program Files\MessengerSkinner (folder not found)
                Failed: DllUnregister C:\WINDOWS\mslagent\2_mslagent.dll|1 (file not found)
                Failed: DllUnregister C:\WINDOWS\navmpc\2_navmpc.dll|1 (file not found)
                Failed: FolderDelete C:\WINDOWS\mslagent (folder not found)
                Failed: FolderDelete C:\WINDOWS\navmpc (folder not found)
                Failed: FolderDelete C:\WINDOWS\msskinner (folder not found)
                Failed: FolderDelete C:\WINDOWS\wintrim (folder not found)
                Failed: FolderDelete C:\WINDOWS\wincomp (folder not found)
                Failed: FolderDelete C:\WINDOWS\winmgts (folder not found)
                Failed: FolderDelete C:\WINDOWS\simcss (folder not found)
                Failed: FolderDelete C:\WINDOWS\mc (folder not found)
                Failed: FileDelete C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\~DF4AEA.tmp (operation failed)
                Failed: FolderCreate C:\WINDOWS\system32\bfubackups (folder already exists)
                Script completed.
                1. salut j'aimerai savoir si c'est fini ou si ya des truc encore a faire car j'ai plus de nouvelle merci
                  1. Bonjour

                    Tu peux supprimer ce dossier : C:\Navipromo\

                    Comment va ton PC ?
                    1. il va beaucoup mieux plus de pub qui apparait c'est nickel mais je c'est pas si c''est fini ou si il faut encore supprimer des truc cacher comme ta pu trouver merci en tou cas