Pc rame

Bonjour et merci pour votre réponse.
J'ai effectué l'opération indiquée et voici le rapport.
A plus.
Merci pour votre aide.
MLBERTET


MSNFix 1.600

C:\Documents and Settings\laurent\Bureau\MSNFix
Fix exécuté le 06/12/2007 - 11:36:28,51 By laurent
mode normal

************************ Recherche les fichiers présents

Aucun Fichier trouvé

************************ Recherche les dossiers présents

... C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP\




************************ Suppression des fichiers



************************ Suppression des dossiers

.. OK ... C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP\


************************ Nettoyage du registre



************************ Fichiers suspects

Aucun Fichier trouvé


Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 06122007_11371523.zip


------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

Rebonjour,
Merci encore de continuer à m'aider.
Bien amicalement.
ML BERTET

Voici le rapport :


SDFix: Version 1.117

Run by laurent on 06/12/2007 at 14:36

Microsoft Windows XP [version 5.1.2600]

Running From: C:\PROGRA~1\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\system32\CatRoot\TMP1.tmp - Deleted
C:\WINDOWS\system32\CatRoot\TMP2.tmp - Deleted
C:\WINDOWS\system32\CatRoot\TMP58.tmp - Deleted
C:\WINDOWS\system\smss.exe - Deleted




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-06 14:43:44
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:0a16f5d9
"s2"=dword:5b5734f3
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:bb,5e,86,a7,f0,9e,11,8d,96,29,2a,4d,ab,9c,ea,6e,4b,44,4f,a4,f1,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:bb,5e,86,a7,f0,9e,11,8d,96,29,2a,4d,ab,9c,ea,6e,4b,44,4f,a4,f1,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"RefCount"=dword:00000001

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"="C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater"
"C:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe"="C:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe:*:Enabled:Microsoft Flight Simulator"
"C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"="C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe:*:Enabled:EasyShare"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Shareaza\\Shareaza.exe"="C:\\Program Files\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"C:\\Program Files\\MaxTV\\maxtv.exe"="C:\\Program Files\\MaxTV\\maxtv.exe:*:Enabled:MaxTV Online"
"C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"="C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe:*:Enabled:Veoh Client"
"C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Enabled:DC++"
"C:\\Program Files\\PeerTV\\VLC\\vlc.exe"="C:\\Program Files\\PeerTV\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\adslTV\\adsltv.exe"="C:\\Program Files\\adslTV\\adsltv.exe:*:Enabled:adsltv"
"C:\\Program Files\\adslTV\\vlc.exe"="C:\\Program Files\\adslTV\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\TVAnts\\Tvants.exe"="C:\\Program Files\\TVAnts\\Tvants.exe:*:Enabled:TVAnts"
"C:\\Program Files\\Streamload\\MediaMax XL\\MediaMax XL.exe"="C:\\Program Files\\Streamload\\MediaMax XL\\MediaMax XL.exe:*:Disabled:MediaMax XL"
"C:\\Program Files\\Codemasters\\Race Driver 3\\RD3.exe"="C:\\Program Files\\Codemasters\\Race Driver 3\\RD3.exe:*:Disabled:RaceDriver 3 Application"
"C:\\Program Files\\WinHTTrack\\WinHTTrack.exe"="C:\\Program Files\\WinHTTrack\\WinHTTrack.exe:*:Disabled:WinHTTrack Website Copier, Web Site mirroring for professional and private purposes"
"C:\\Program Files\\SopCast\\SopCast.exe"="C:\\Program Files\\SopCast\\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\\Documents and Settings\\laurent\\Application Data\\SopCast\\adv\\SopAdver.exe"="C:\\Documents and Settings\\laurent\\Application Data\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"="C:\\WINDOWS\\system32\\usmt\\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramŠtres"
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\BitTorrent_DNA\\dna.exe"="C:\\Program Files\\BitTorrent_DNA\\dna.exe:*:Enabled:DNA"
"C:\\Program Files\\EasyBox\\apache\\apache.exe"="C:\\Program Files\\EasyBox\\apache\\apache.exe:*:Enabled:Apache HTTP Server"
"C:\\Program Files\\EasyBox\\vlc\\vlc.exe"="C:\\Program Files\\EasyBox\\vlc\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Home Jukebox\\bin\\HomeJukebox.exe"="C:\\Program Files\\Home Jukebox\\bin\\HomeJukebox.exe:*:Enabled:HomeJukebox"
"C:\\Program Files\\CounterPath\\X-Lite\\x-lite.exe"="C:\\Program Files\\CounterPath\\X-Lite\\x-lite.exe:*:Enabled:X-Lite"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Ex‚cuter une DLL en tant qu'application"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Google\\Google Talk\\googletalk.exe"="C:\\Program Files\\Google\\Google Talk\\googletalk.exe:*:Enabled:Google Talk"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

File Backups: - C:\PROGRA~1\SDFix\backups\backups.zip

Files with Hidden Attributes:

Fri 4 Feb 2005 216 ..SH. --- "C:\BOOT.BAK"
Fri 10 Mar 2006 106,496 A..H. --- "C:\Program Files\TitanTV\ATITVPIReader.exe"
Tue 7 Mar 2006 65,536 A..H. --- "C:\Program Files\TitanTV\dmcrypto.dll"
Mon 3 Apr 2006 524,288 A..H. --- "C:\Program Files\Virtools Web Player 3.5\ck2.dll"
Mon 3 Apr 2006 54,272 A..H. --- "C:\Program Files\Virtools Web Player 3.5\ckzlib.dll"
Mon 3 Apr 2006 35,328 A..H. --- "C:\Program Files\Virtools Web Player 3.5\config.dll"
Mon 3 Apr 2006 348,160 A..H. --- "C:\Program Files\Virtools Web Player 3.5\msvcr71.dll"
Mon 3 Apr 2006 69,632 A..H. --- "C:\Program Files\Virtools Web Player 3.5\nk2.dll"
Mon 3 Apr 2006 37,888 A..H. --- "C:\Program Files\Virtools Web Player 3.5\vcrypt.dll"
Mon 3 Apr 2006 51,200 A..H. --- "C:\Program Files\Virtools Web Player 3.5\virtoolsview.dll"
Mon 3 Apr 2006 364,544 A..H. --- "C:\Program Files\Virtools Web Player 3.5\vslrt.dll"
Mon 3 Apr 2006 27,136 A..H. --- "C:\Program Files\Virtools Web Player 3.5\vsutils.dll"
Mon 3 Apr 2006 274,432 A..H. --- "C:\Program Files\Virtools Web Player 3.5\vxmath.dll"
Mon 3 Apr 2006 282,624 A..H. --- "C:\Program Files\Virtools Web Player 3.5\webplayerconfig.exe"
Fri 25 Feb 2005 72,298 A..H. --- "C:\Program Files\WinASPI\unins000.exe"
Thu 5 Aug 2004 548,352 A..H. --- "C:\Program Files\Windows NT\dialer.exe"
Thu 5 Aug 2004 13,312 A..H. --- "C:\Program Files\Windows NT\htrn_jis.dll"
Thu 5 Aug 2004 28,160 A..H. --- "C:\Program Files\Windows NT\hypertrm.exe"
Thu 5 Aug 2004 28,672 A..H. --- "C:\Program Files\Windows Media Player\custsat.dll"
Sat 3 Sep 2005 4,348 A..H. --- "C:\Program Files\Windows Media Player\drmv1key.bak"
Mon 19 Dec 2005 20 A..H. --- "C:\Program Files\Windows Media Player\drmv1lic.bak"
Sat 3 Sep 2005 400 A.SH. --- "C:\Program Files\Windows Media Player\drmv2key.bak"
Mon 19 Dec 2005 0 A..H. --- "C:\Program Files\Windows Media Player\drmv2lic.bak"
Tue 29 Sep 1998 148,176 A..H. --- "C:\Program Files\Windows Media Player\dsrvui32.dll"
Tue 27 Jun 2006 410,928 ...H. --- "C:\Program Files\Windows Media Player\LegitLibM.dll"
Thu 5 Aug 2004 786,432 A..H. --- "C:\Program Files\Windows Media Player\migrate.exe"
Thu 5 Aug 2004 4,639 A..H. --- "C:\Program Files\Windows Media Player\mplayer2.exe"
Fri 3 Nov 2006 244,224 A..H. --- "C:\Program Files\Windows Media Player\mpvis.dll"
Sun 1 Aug 2004 47,616 A..H. --- "C:\Program Files\Windows Media Player\msoobci.dll"
Thu 5 Aug 2004 226,816 A..H. --- "C:\Program Files\Windows Media Player\npdrmv2.dll"
Thu 5 Aug 2004 403 A..H. --- "C:\Program Files\Windows Media Player\npdrmv2.zip"
Thu 5 Aug 2004 22,060 A..H. --- "C:\Program Files\Windows Media Player\npds.zip"
Tue 29 Nov 2005 364,544 A..H. --- "C:\Program Files\Windows Media Player\npdsplay.dll"
Thu 5 Aug 2004 10,240 A..H. --- "C:\Program Files\Windows Media Player\npwmsdrm.dll"
Tue 29 Sep 1998 245,488 A..H. --- "C:\Program Files\Windows Media Player\nsrven32.dll"
Tue 29 Sep 1998 77,456 A..H. --- "C:\Program Files\Windows Media Player\pnwrap.dll"
Tue 29 Sep 1998 65,984 A..H. --- "C:\Program Files\Windows Media Player\qnspro.dll"
Fri 3 Nov 2006 1,680,384 A..H. --- "C:\Program Files\Windows Media Player\setup_wm.exe"
Wed 18 Oct 2006 493,568 A..H. --- "C:\Program Files\Windows Media Player\wmdbexport.exe"
Wed 18 Oct 2006 241,664 A..H. --- "C:\Program Files\Windows Media Player\wmlaunch.exe"
Fri 3 Nov 2006 96,256 A..H. --- "C:\Program Files\Windows Media Player\wmpband.dll"
Wed 18 Oct 2006 25,600 A..H. --- "C:\Program Files\Windows Media Player\wmpenc.exe"
Fri 3 Nov 2006 64,000 A..H. --- "C:\Program Files\Windows Media Player\wmplayer.exe"
Fri 3 Nov 2006 918,016 A..H. --- "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Thu 5 Aug 2004 221,184 A..H. --- "C:\Program Files\Windows Media Player\wmpns.dll"
Fri 3 Nov 2006 204,288 A..H. --- "C:\Program Files\Windows Media Player\wmpnscfg.exe"
Fri 3 Nov 2006 198,144 A..H. --- "C:\Program Files\Windows Media Player\wmpnssci.dll"
Wed 18 Oct 2006 36,864 A..H. --- "C:\Program Files\Windows Media Player\wmpshare.exe"
Wed 1 Nov 2006 1,669,120 A..H. --- "C:\Program Files\Windows Media Player\wmsetsdk.exe"
Wed 18 Oct 2006 8,704 ...H. --- "C:\Program Files\Windows Media Connect 2\wmccds.exe"
Wed 18 Oct 2006 8,704 ...H. --- "C:\Program Files\Windows Media Connect 2\WMCCFG.exe"
Wed 18 Oct 2006 4,096 ...H. --- "C:\Program Files\Windows Media Connect 2\WMCCPL.dll"
Wed 18 Oct 2006 4,096 ...H. --- "C:\Program Files\Windows Media Connect 2\wmcsci.dll"
Wed 4 Oct 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak"
Fri 14 Jan 2005 2,117,632 A..H. --- "C:\Program Files\ToniArts\EasyCleaner\EasyClea.exe"
Mon 3 Apr 2006 249,856 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\3dtransfo.dll"
Mon 3 Apr 2006 147,456 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\buildingblocksaddons1.dll"
Mon 3 Apr 2006 32,256 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\cameras.dll"
Mon 3 Apr 2006 41,472 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\characters.dll"
Mon 3 Apr 2006 180,224 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\collisions.dll"
Mon 3 Apr 2006 36,352 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\controllers.dll"
Mon 5 Jun 2006 48,128 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\databaseclientmodule2.dll"
Mon 3 Apr 2006 31,744 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\downloadcomponentclient.dll"
Mon 3 Apr 2006 126,976 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\grids.dll"
Mon 3 Apr 2006 135,168 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\interface.dll"
Mon 3 Apr 2006 196,608 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\logics.dll"
Mon 3 Apr 2006 81,920 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\materials.dll"
Mon 3 Apr 2006 86,016 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\meshmodifiers.dll"
Mon 3 Apr 2006 51,712 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\narratives.dll"
Mon 3 Apr 2006 126,976 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\particlesystems.dll"
Mon 3 Apr 2006 1,310,720 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\shader.dll"
Mon 3 Apr 2006 57,344 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\sounds.dll"
Mon 3 Apr 2006 159,744 A..H. --- "C:\Program Files\Virtools Web Player 3.5\buildingblocks\visuals.dll"
Mon 3 Apr 2006 27,648 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\ckfemgr.dll"
Mon 3 Apr 2006 38,912 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\dx5inputmanager.dll"
Mon 3 Apr 2006 31,744 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\dx7soundmanager.dll"
Mon 3 Apr 2006 147,456 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\parameteroperations.dll"
Mon 3 Apr 2006 376,832 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\vslmanager.dll"
Mon 3 Apr 2006 102,400 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\vsmanager2.dll"
Mon 3 Apr 2006 19,968 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\webmanager.dll"
Mon 3 Apr 2006 41,984 A..H. --- "C:\Program Files\Virtools Web Player 3.5\managers\webservermanager.dll"
Mon 3 Apr 2006 30,720 A..H. --- "C:\Program Files\Virtools Web Player 3.5\plugins\imagereader.dll"
Mon 3 Apr 2006 114,688 A..H. --- "C:\Program Files\Virtools Web Player 3.5\plugins\jpgloader.dll"
Mon 3 Apr 2006 94,208 A..H. --- "C:\Program Files\Virtools Web Player 3.5\plugins\pngloader.dll"
Mon 3 Apr 2006 24,064 A..H. --- "C:\Program Files\Virtools Web Player 3.5\plugins\virtoolsloader.dll"
Mon 3 Apr 2006 28,672 A..H. --- "C:\Program Files\Virtools Web Player 3.5\plugins\wavreader.dll"
Mon 3 Apr 2006 815,104 A..H. --- "C:\Program Files\Virtools Web Player 3.5\renderengines\ck2_3d.dll"
Mon 3 Apr 2006 122,880 A..H. --- "C:\Program Files\Virtools Web Player 3.5\renderengines\ckdx7rasterizer.dll"
Mon 3 Apr 2006 507,904 A..H. --- "C:\Program Files\Virtools Web Player 3.5\renderengines\ckdx9rasterizer.dll"
Mon 3 Apr 2006 143,360 A..H. --- "C:\Program Files\Virtools Web Player 3.5\renderengines\ckgl15rasterizer.dll"
Wed 11 Dec 2002 186,696 A..H. --- "C:\Program Files\Windows Media Components\Encoder\dw15.exe"
Wed 11 Dec 2002 26,112 A..H. --- "C:\Program Files\Windows Media Components\Encoder\Fileinfo.dll"
Wed 11 Dec 2002 77,824 A..H. --- "C:\Program Files\Windows Media Components\Encoder\mspshell.dll"
Wed 11 Dec 2002 41,018 A..H. --- "C:\Program Files\Windows Media Components\Encoder\settmp.exe"
Wed 11 Dec 2002 150,528 A..H. --- "C:\Program Files\Windows Media Components\Encoder\StreamEditor.dll"
Wed 11 Dec 2002 132,224 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmasfdist.exe"
Wed 11 Dec 2002 163,328 A..H. --- "C:\Program Files\Windows Media Components\Encoder\WMdevctl.dll"
Wed 11 Dec 2002 178,176 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmeditor.exe"
Wed 11 Dec 2002 59,392 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmedque.dll"
Wed 11 Dec 2002 613,888 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmenc.exe"
Wed 11 Dec 2002 49,152 A..H. --- "C:\Program Files\Windows Media Components\Encoder\WMEncAgt.exe"
Wed 11 Dec 2002 1,491,456 A..H. --- "C:\Program Files\Windows Media Components\Encoder\WMEncEng.dll"
Wed 11 Dec 2002 36,352 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmencloc.dll"
Wed 11 Dec 2002 755,712 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmencres.dll"
Wed 11 Dec 2002 170,496 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmesrcwp.dll"
Wed 11 Dec 2002 929,280 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmex.dll"
Wed 11 Dec 2002 469,504 A..H. --- "C:\Program Files\Windows Media Components\Encoder\WMexfmwp.dll"
Wed 11 Dec 2002 242,176 A..H. --- "C:\Program Files\Windows Media Components\Encoder\WMEXres.dll"
Wed 11 Dec 2002 4,085,904 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmfdist.exe"
Wed 11 Dec 2002 381,952 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmprevu.dll"
Wed 11 Dec 2002 32,256 A..H. --- "C:\Program Files\Windows Media Components\Encoder\WMProEdt.exe"
Wed 11 Dec 2002 32,256 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmstreamedt.exe"
Wed 11 Dec 2002 231,056 A..H. --- "C:\Program Files\Windows Media Components\Encoder\wmstypelib.exe"
Thu 23 Oct 1997 115,200 A..H. --- "C:\Program Files\WinASPI\WinASPI\Aspichk.exe"
Thu 5 Aug 2004 218,112 A..H. --- "C:\Program Files\Windows NT\Accessoires\wordpad.exe"
Thu 5 Aug 2004 284,160 A..H. --- "C:\Program Files\Windows NT\Pinball\PINBALL.EXE"
Tue 12 Dec 2006 0 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\Cache\Indiv01.tmp"
Sat 5 Feb 2005 5,878 A..H. --- "C:\Program Files\Microsoft Office\Office\Gestionnaire Office\Off2.tmp"
Wed 11 Dec 2002 54,688 A..H. --- "C:\Program Files\Windows Media Components\Encoder\1033\dwintl.dll"
Sat 3 Sep 2005 4,348 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\Application Data\Application Data\All Users\DRM\DRMv1.bak"
Sun 12 Mar 2006 444 A..HR --- "C:\Documents and Settings\All Users.WINDOWS\Application Data\Application Data\All Users\SecuROM\Application Data\SecuROM\UserData\securom_v7_01G.bak"

Finished!

Bonsoir et encore merci,
voici le nouveau hijackthis stp
j"attends pour la suite de la procédure à effectuer.
Merci beaucoup de m'aider c'est très sympa.
ML BERTET


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:53:16, on 06/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Saitek\Software\ProfilerU.exe
C:\Program Files\Saitek\Software\SaiMfd.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\CounterPath\X-Lite\x-lite.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\laurent\Bureau\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus Photo R240 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAHE.EXE /P30 "EPSON Stylus Photo R240 Series" /O6 "USB002" /M "Stylus Photo R240"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] C:\Program Files\Saitek\Software\SaiMfd.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [PAC7311_Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [eyeBeam SIP Client] "C:\Program Files\CounterPath\X-Lite\x-lite.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444554540000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://upload.mediamax.com/404.html
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe