Supprimer trojans.

Bonjour, voila je suis debutant en informatique et je souhaite nettoyer un peu mon pc de trojans car depuis quelques jours des pages web souvrent a chaque nouvelle page que j'ouvre sur internet. Ma connexion internet est également très ralentie. Si quelqu'un a quelques conseils ils seront les bienvenus. Merci
Configuration: Windows XP
Internet Explorer 7.0

9 réponses

  1. salut

    telecharge hijackthis puis fait un scan et colle moi le log ici
    1. Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:22:39, on 30/12/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16574)
      Boot mode: Normal

      Running processes:
      C:\windows\System32\smss.exe
      C:\windows\system32\winlogon.exe
      C:\windows\system32\services.exe
      C:\windows\system32\lsass.exe
      C:\windows\system32\svchost.exe
      C:\windows\System32\svchost.exe
      C:\windows\system32\spoolsv.exe
      D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
      C:\WINDOWS\System32\FTRTSVC.exe
      C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
      C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
      C:\windows\system32\nvsvc32.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\windows\system32\svchost.exe
      C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
      C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
      C:\windows\system32\wscntfy.exe
      C:\windows\Explorer.EXE
      C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
      C:\windows\SOUNDMAN.EXE
      D:\Programmes\Imprimante HP PSC1500\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe
      D:\Programmes\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
      C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
      C:\windows\system32\rundll32.exe
      D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\avgas.exe
      C:\windows\system32\ctfmon.exe
      C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
      C:\PROGRA~1\Wanadoo\ComComp.exe
      C:\PROGRA~1\Wanadoo\PollingModule.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      D:\Bureautique\daemon tools\daemon.exe
      C:\PROGRA~1\Wanadoo\Watch.exe
      D:\Programmes\Imprimante HP PSC1500\Digital Imaging\bin\hpqtra08.exe
      D:\Bureautique\WinZip\WZQKPICK.EXE
      D:\Programmes\Imprimante HP PSC1500\Digital Imaging\bin\hpqSTE08.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      H:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [HP Software Update] D:\Programmes\Imprimante HP PSC1500\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe"
      O4 - HKLM\..\Run: [WINCINEMAMGR] D:\Programmes\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Programmes\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [zohqtcvi] rundll32.exe "C:\Program Files\ujuhuzup\yrmhszir.dll",Init
      O4 - HKLM\..\Run: [ahgbalqb] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ahgbalqb.dll"
      O4 - HKLM\..\Run: [srejwtut] rundll32.exe "C:\Program Files\srejwtut\gnylkvkh.dll",Init
      O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\windows\system32\drvfom.dll,startup
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [cxubqnyx] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\cxubqnyx.dll"
      O4 - HKLM\..\Run: [e839571c] rundll32.exe "C:\windows\system32\urklgjfw.dll",b
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
      O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [DAEMON Tools] "D:\Bureautique\daemon tools\daemon.exe" -lang 1033
      O4 - HKCU\..\Run: [Steam] H:\jeux videos\Counter Strike condition zero\stream\Steam.exe -silent
      O4 - HKLM\..\Policies\Explorer\Run: [dNk0IK9xEw] rundll32.exe "C:\windows\system32\ndaTqsVqrX.dll",DllCleanServer
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\Imprimante HP PSC1500\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Programmes\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: WinZip Quick Pick.lnk = D:\Bureautique\WinZip\WZQKPICK.EXE
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\BUREAU~1\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - H:\jeux videos\Pokerparty\PartyPoker\RunApp.exe (file missing)
      O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - H:\jeux videos\Pokerparty\PartyPoker\RunApp.exe (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: DomainService - Unknown owner - C:\windows\system32\pbpdslgr.exe (file missing)
      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
      O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
      O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Microsoft System Management - Unknown owner - C:\WINDOWS\system32\system.exe (file missing)
      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
      O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
      O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
      1. d'apres le rapport tu as 8 virus et tu n'a pas d'antivirus coches les lignes:

        O4 - HKLM\..\Run: [zohqtcvi] rundll32.exe "C:\Program Files\ujuhuzup\yrmhszir.dll",Init

        O4 - HKLM\..\Run: [ahgbalqb] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\ahgbalqb.dll"

        O4 - HKLM\..\Run: [srejwtut] rundll32.exe "C:\Program Files\srejwtut\gnylkvkh.dll",Init

        O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\windows\system32\drvfom.dll,startup

        04 - HKLM\..\Run: [cxubqnyx] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\cxubqnyx.dll"

        O4 - HKLM\..\Run: [e839571c] rundll32.exe "C:\windows\system32\urklgjfw.dll",b

        O4 - HKLM\..\Policies\Explorer\Run: [dNk0IK9xEw] rundll32.exe "C:\windows\system32\ndaTqsVqrX.dll",DllCleanServer

        O23 - Service: DomainService - Unknown owner - C:\windows\system32\pbpdslgr.exe (file missing)

        puis clic sur fixcheked puis remet moi un log hijackthis
        1. Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 13:37:48, on 30/12/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16574)
          Boot mode: Normal

          Running processes:
          C:\windows\System32\smss.exe
          C:\windows\system32\winlogon.exe
          C:\windows\system32\services.exe
          C:\windows\system32\lsass.exe
          C:\windows\system32\svchost.exe
          C:\windows\System32\svchost.exe
          C:\windows\system32\spoolsv.exe
          C:\windows\Explorer.EXE
          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
          C:\windows\SOUNDMAN.EXE
          D:\Programmes\Imprimante HP PSC1500\HP Software Update\HPWuSchd2.exe
          C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe
          D:\Programmes\InterVideo\Common\Bin\WinCinemaMgr.exe
          C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
          C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
          D:\Programmes\Reader\Reader_sl.exe
          D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\avgas.exe
          D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\guard.exe
          C:\windows\system32\ctfmon.exe
          C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
          D:\Bureautique\daemon tools\daemon.exe
          C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
          C:\PROGRA~1\Wanadoo\ComComp.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\PROGRA~1\Wanadoo\PollingModule.exe
          C:\WINDOWS\system32\CTsvcCDA.EXE
          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
          C:\WINDOWS\System32\FTRTSVC.exe
          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
          C:\windows\system32\nvsvc32.exe
          C:\WINDOWS\system32\HPZipm12.exe
          C:\windows\system32\svchost.exe
          C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
          H:\HijackThis.exe
          D:\Programmes\Imprimante HP PSC1500\Digital Imaging\bin\hpqtra08.exe
          D:\Bureautique\WinZip\WZQKPICK.EXE
          C:\windows\system32\wscntfy.exe
          D:\Programmes\Imprimante HP PSC1500\Digital Imaging\bin\hpqSTE08.exe
          C:\PROGRA~1\Wanadoo\Watch.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
          O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [HP Software Update] D:\Programmes\Imprimante HP PSC1500\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe"
          O4 - HKLM\..\Run: [WINCINEMAMGR] D:\Programmes\InterVideo\Common\Bin\WinCinemaMgr.exe
          O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
          O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Programmes\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
          O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
          O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
          O4 - HKCU\..\Run: [DAEMON Tools] "D:\Bureautique\daemon tools\daemon.exe" -lang 1033
          O4 - HKCU\..\Run: [Steam] H:\jeux videos\Counter Strike condition zero\stream\Steam.exe -silent
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\Imprimante HP PSC1500\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Programmes\InterVideo\Common\Bin\WinCinemaMgr.exe
          O4 - Global Startup: WinZip Quick Pick.lnk = D:\Bureautique\WinZip\WZQKPICK.EXE
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\BUREAU~1\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - H:\jeux videos\Pokerparty\PartyPoker\RunApp.exe (file missing)
          O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - H:\jeux videos\Pokerparty\PartyPoker\RunApp.exe (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
          O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Bureautique\AVG antispyware\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
          O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
          O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Microsoft System Management - Unknown owner - C:\WINDOWS\system32\system.exe (file missing)
          O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
          O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
          O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
          O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
          1. tu na pu rien d'apres le rapport

            telecharge spyware terminator puis spybot puis ad-aware mes les a jours puis fait un scan et supprime tous se qu ils trouvent
            puis va dans poste de travaille clic droit sur ton disque dur proprieter netoyage de disque selectionne tous puis fait suivant
            1. Jai juste une pub qui s'affiche tout le temps c'est bouygues telecom.
              Merci pour tout