Fenetre pub CID intempestive

g essayer la 1er methode mais les pub sont toujour la
et pour la 2e methode jcompren pas grand chose.je suis novice.y pas plus simple?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:06:19, on 22/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Windows\System32\oodtray.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2filovemessenger%2fmars2005%2fbetty_boop.png%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [OODefragTray] C:\Windows\system32\oodtray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /F "C:\Windows\TEMP\E_S91D9.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [BoneSeek] "C:\ProgramData\Jump Pile Pile.zvz30"
O4 - HKLM\..\Run: [Base frag grid bows] "C:\ProgramData\AXIS BARB JUGS.hfb1n"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Users\john-mel\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [eMuleAutoStart] D:\emule\eMule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\pnrpnsp.dll' missing
O13 - Gopher Prefix:
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe

voila j'ai générer le rapport
et maintenant je doit faire quoi ?

ComboFix 08-03-22.1 - john-mel 2008-03-22 22:54:55.1 - NTFSx86
Microsoft® Windows Vista™ Édition Intégrale 6.0.6000.0.1252.1.1036.18.1347 [GMT 1:00]
Endroit: C:\Users\john-mel\Desktop\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Windows\system32\drivers\asc3550p.sys

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-22 to 2008-03-22 ))))))))))))))))))))))))))))))))))))
.

2008-03-22 22:05 . 2008-03-22 22:05 <REP> d-------- C:\Program Files\Trend Micro
2008-03-22 12:38 . 2008-03-22 12:38 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-03-12 18:53 . 2008-03-12 19:05 <REP> d-------- C:\Program Files\Digital Camera
2008-03-12 18:53 . 2004-07-01 02:03 81,921 --a------ C:\Windows\System32\drivers\MPIXVID.SYS
2008-03-12 18:53 . 2004-06-29 01:16 25,575 --a------ C:\Windows\System32\drivers\USBCamAT.sys
2008-03-12 10:13 . 2007-12-16 23:50 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-03-12 10:13 . 2007-12-16 10:56 41,984 --a------ C:\Windows\System32\drivers\monitor.sys
2008-03-10 15:51 . 2008-03-10 15:58 <REP> d-------- C:\Users\john-mel\AppData\Roaming\LimeWire
2008-03-09 01:16 . 2008-03-09 01:16 <REP> d-------- C:\Users\john-mel\AppData\Roaming\MSN Pictures Displayer
2008-03-09 01:16 . 2008-03-09 01:16 <REP> d-------- C:\Program Files\MSN Pictures Displayer
2008-03-09 01:16 . 2008-03-09 01:16 446,976 --a------ C:\Windows\System32\ShellMPD.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-12 18:53 --------- d-----w C:\Program Files\Windows Mail
2008-02-21 09:48 --------- d-----w C:\ProgramData\Eggs remote dash
2008-02-21 09:48 --------- d-----w C:\ProgramData\Cast ping base frag
2008-02-21 09:48 --------- d-----w C:\Program Files\Eggs remote dash
2008-02-14 20:45 --------- d-----w C:\Program Files\DivX
2008-02-14 06:15 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-02-14 06:15 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-02-14 06:12 806,400 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-02-14 06:10 825,344 ----a-w C:\Windows\System32\wininet.dll
2008-02-14 06:10 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-14 06:09 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-14 06:09 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-01-29 16:46 --------- d-----w C:\ProgramData\Xerox
2008-01-29 16:37 --------- d-----w C:\Users\john-mel\AppData\Roaming\InstallShield
2008-01-29 15:01 --------- d-----w C:\Program Files\epson
2008-01-29 13:05 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-29 13:05 --------- d-----w C:\ProgramData\UDL
2008-01-10 05:50 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2008-01-09 10:31 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2007-12-30 12:54 184,142,366 ----a-w C:\Windows\DUMP372d.tmp
2007-12-30 12:53 58,368 ----a-w C:\Windows\System32\~tmp3436.tmp
2007-12-26 20:49 189,622,814 ----a-w C:\Windows\DUMP33c2.tmp
2007-11-22 21:20 174 --sha-w C:\Program Files\desktop.ini
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-09 11:31 1232896]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 13:58 495616]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:34 125440]
"UberIcon"="C:\Program Files\UberIcon\UberIcon Manager.exe" [2005-08-12 19:52 180224]
"ccleaner"="C:\Users\john-mel\CCleaner\CCleaner.exe" [2007-11-22 17:10 787696]
"eMuleAutoStart"="D:\emule\eMule.exe" [2007-10-06 20:37 5726208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UberIcon"="C:\Program Files\UberIcon\UberIcon Manager.exe" [2005-08-12 19:52 180224]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"OODefragTray"="C:\Windows\system32\oodtray.exe" [2007-06-28 23:01 2512128]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"BoneSeek"="C:\ProgramData\Jump Pile Pile.7va4oq" [2008-03-22 22:35 159760]
"Base frag grid bows"="C:\ProgramData\AXIS BARB JUGS.hfb1n" [2008-02-21 10:48 372752]

C:\Users\john-mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-03-09 01:16:08 4571136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2007-06-13 21:27 1006264 C:\Program Files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiSpywareOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2751909203-2038563907-3353613837-1000]
"EnableNotificationsRef"=dword:00000002

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 15:52]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-11-02 05:20]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\Windows\system32\DRIVERS\fetnd5bv.sys [2006-12-20 07:00]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 10:43]
R3 V0090VID;Creative WebCam Vista Plus;C:\Windows\system32\DRIVERS\V0090Vid.sys [2005-04-14 02:00]
S0 OemBiosDevice;Royalty OEM Bios Extension;C:\Windows\system32\drivers\royal.sys [2007-11-22 21:42]
S3 DCamUSBPremier;USB Video Camera;C:\Windows\system32\Drivers\mpixvid.sys [2004-07-01 02:03]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-11-02 05:20]
S3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;C:\Windows\system32\DRIVERS\WlanUIG.sys [2004-11-18 13:36]
S4 RTSTOR;USB Mass Storage Device;C:\Windows\system32\drivers\rtstor.sys [2007-05-11 19:09]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-22 22:56:42
Windows 6.0.6000 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-22 22:57:14
ComboFix-quarantined-files.txt 2008-03-22 21:57:11
.
2008-03-12 18:52:33 --- E O F ---

maintenant que j'ai poster le rapport
je fait quoi ?

je te remercie pour ton aide
pour l'instant les pubs ne s affiche plus j espere que cela durera.
il n' y a plus de manip a faire ? c bon mon probleme est resolu definitivement ?

g cocher les cache et cliquer sur fix checke.et sa me marque : fix 2 selected items? this will permanently delete and/or repair wath you selected. je clique sur oui ou sur non ?

ok
merci

ComboFix 08-03-22.1 - john-mel 2008-03-24 0:08:54.2 - NTFSx86
Microsoft® Windows Vista™ Édition Intégrale 6.0.6000.0.1252.1.1036.18.1149 [GMT 1:00]
Endroit: C:\Users\john-mel\Desktop\ComboFix.exe
Command switches used :: C:\Users\john-mel\Desktop\CFScript.txt
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\Eggs remote dash
C:\ProgramData\AXIS BARB JUGS.hfb1n\
C:\ProgramData\Cast ping base frag
C:\ProgramData\Cast ping base frag\BLEH FUNK.exe
C:\ProgramData\Eggs remote dash
C:\ProgramData\Eggs remote dash\ddblwwfx.exe
C:\ProgramData\Eggs remote dash\hcgzrlhm.exe
C:\ProgramData\Eggs remote dash\HOLD ADMIN.exe
C:\ProgramData\Eggs remote dash\mbuvisoc.exe
C:\ProgramData\Eggs remote dash\Moveslowbowsreadme.exe
C:\ProgramData\Eggs remote dash\sgtajimx.exe
C:\ProgramData\Eggs remote dash\swbduita.exe
C:\ProgramData\Eggs remote dash\zltysyio.exe
C:\ProgramData\Jump Pile Pile.7va4oq\

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-23 to 2008-03-23 ))))))))))))))))))))))))))))))))))))
.

2008-03-22 22:05 . 2008-03-22 22:05 <REP> d-------- C:\Program Files\Trend Micro
2008-03-22 12:38 . 2008-03-22 12:38 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-03-12 18:53 . 2008-03-12 19:05 <REP> d-------- C:\Program Files\Digital Camera
2008-03-12 18:53 . 2004-07-01 02:03 81,921 --a------ C:\Windows\System32\drivers\MPIXVID.SYS
2008-03-12 18:53 . 2004-06-29 01:16 25,575 --a------ C:\Windows\System32\drivers\USBCamAT.sys
2008-03-12 10:13 . 2007-12-16 23:50 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-03-12 10:13 . 2007-12-16 10:56 41,984 --a------ C:\Windows\System32\drivers\monitor.sys
2008-03-10 15:51 . 2008-03-10 15:58 <REP> d-------- C:\Users\john-mel\AppData\Roaming\LimeWire
2008-03-09 01:16 . 2008-03-09 01:16 <REP> d-------- C:\Users\john-mel\AppData\Roaming\MSN Pictures Displayer
2008-03-09 01:16 . 2008-03-09 01:16 <REP> d-------- C:\Program Files\MSN Pictures Displayer
2008-03-09 01:16 . 2008-03-09 01:16 446,976 --a------ C:\Windows\System32\ShellMPD.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-12 18:53 --------- d-----w C:\Program Files\Windows Mail
2008-02-14 20:45 --------- d-----w C:\Program Files\DivX
2008-02-14 06:15 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-02-14 06:15 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-02-14 06:12 806,400 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-02-14 06:10 825,344 ----a-w C:\Windows\System32\wininet.dll
2008-02-14 06:10 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-14 06:09 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-14 06:09 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-01-29 16:46 --------- d-----w C:\ProgramData\Xerox
2008-01-29 16:37 --------- d-----w C:\Users\john-mel\AppData\Roaming\InstallShield
2008-01-29 15:01 --------- d-----w C:\Program Files\epson
2008-01-29 13:05 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-29 13:05 --------- d-----w C:\ProgramData\UDL
2008-01-10 05:50 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2008-01-09 10:31 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2007-12-30 12:54 184,142,366 ----a-w C:\Windows\DUMP372d.tmp
2007-12-30 12:53 58,368 ----a-w C:\Windows\System32\~tmp3436.tmp
2007-12-26 20:49 189,622,814 ----a-w C:\Windows\DUMP33c2.tmp
2007-11-22 21:20 174 --sha-w C:\Program Files\desktop.ini
.

((((((((((((((((((((((((((((( snapshot@2008-03-22_22.56.58,06 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-03-22 20:07:19 67,584 --s-a-w C:\Windows\bootstat.dat
+ 2008-03-23 17:26:27 67,584 --s-a-w C:\Windows\bootstat.dat
- 2008-03-22 20:09:01 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-03-23 17:28:17 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-03-23 17:28:17 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
- 2008-03-22 20:08:56 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-03-23 17:28:12 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-03-23 17:28:12 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
- 2008-03-22 20:07:43 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-03-23 21:30:07 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-03-22 20:07:43 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-23 21:30:07 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-03-22 20:07:43 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-03-23 21:30:07 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-03-22 20:12:29 103,726 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-03-23 17:31:17 103,726 ----a-w C:\Windows\System32\perfc009.dat
- 2008-03-22 20:12:29 117,366 ----a-w C:\Windows\System32\perfc00C.dat
+ 2008-03-23 17:31:17 117,366 ----a-w C:\Windows\System32\perfc00C.dat
- 2008-03-22 20:12:29 609,944 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-03-23 17:31:17 609,944 ----a-w C:\Windows\System32\perfh009.dat
- 2008-03-22 20:12:30 690,594 ----a-w C:\Windows\System32\perfh00C.dat
+ 2008-03-23 17:31:17 690,594 ----a-w C:\Windows\System32\perfh00C.dat
- 2008-03-22 20:09:17 6,868 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2406158934-1422705842-4282412804-1000_UserData.bin
+ 2008-03-23 17:28:28 6,868 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2406158934-1422705842-4282412804-1000_UserData.bin
- 2008-03-22 20:09:17 67,832 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-03-23 17:28:28 67,880 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-03-22 20:09:15 27,796 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-03-23 17:28:27 27,812 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-09 11:31 1232896]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 13:58 495616]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:34 125440]
"UberIcon"="C:\Program Files\UberIcon\UberIcon Manager.exe" [2005-08-12 19:52 180224]
"ccleaner"="C:\Users\john-mel\CCleaner\CCleaner.exe" [2007-11-22 17:10 787696]
"eMuleAutoStart"="D:\emule\eMule.exe" [2007-10-06 20:37 5726208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UberIcon"="C:\Program Files\UberIcon\UberIcon Manager.exe" [2005-08-12 19:52 180224]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"OODefragTray"="C:\Windows\system32\oodtray.exe" [2007-06-28 23:01 2512128]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]

C:\Users\john-mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-03-09 01:16:08 4571136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2007-06-13 21:27 1006264 C:\Program Files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiSpywareOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2751909203-2038563907-3353613837-1000]
"EnableNotificationsRef"=dword:00000002

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 15:52]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-11-02 05:20]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\Windows\system32\DRIVERS\fetnd5bv.sys [2006-12-20 07:00]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 10:43]
R3 V0090VID;Creative WebCam Vista Plus;C:\Windows\system32\DRIVERS\V0090Vid.sys [2005-04-14 02:00]
S0 OemBiosDevice;Royalty OEM Bios Extension;C:\Windows\system32\drivers\royal.sys [2007-11-22 21:42]
S3 DCamUSBPremier;USB Video Camera;C:\Windows\system32\Drivers\mpixvid.sys [2004-07-01 02:03]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-11-02 05:20]
S3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;C:\Windows\system32\DRIVERS\WlanUIG.sys [2004-11-18 13:36]
S4 RTSTOR;USB Mass Storage Device;C:\Windows\system32\drivers\rtstor.sys [2007-05-11 19:09]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-24 00:10:54
Windows 6.0.6000 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-24 0:11:30
ComboFix-quarantined-files.txt 2008-03-23 23:11:26
ComboFix2.txt 2008-03-22 21:57:16
.
2008-03-12 18:52:33 --- E O F ---

j ai ouvert le dossier SDFix . pour lancer le script je doit cliquer sur RunThis.cmd mais moi a la place de cmd c'est ecris bat
c normal ,je peux quand meme lancer le script ?

ok

j ai appuyer sur la touche Y pour commencer le processus mais rien ne se passe !

ben je sais pas trop! comment on fait pour le mettre en mode sans echec ?

ah d accord. merci

je te poste le rapport que jai eu :


Malwarebytes' Anti-Malware 1.09
Version de la base de données: 542

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 104881
Temps écoulé: 12 minute(s), 53 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550p (Rootkit.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

j ai 3 elements en quarantaine. j en fait quoi? je dois les supprimés?

ben c est bon les pubs ne s affiche plus. c vraiment sympa de m avoir aider car sa commencer a me saouler de voir tout le temps des truc s afficher. merci
et maintenant c est fini y a plus rien a faire ?

ha oui je voulais te demander
j ai un probleme pour ouvrir mes email a partir de msn. qu est ce que je peu faire? ta une solution pour moi?

salut ,
et ben quand je clique sur boite de reception sa me met :
la connexion que vous utilisé n est pas securisée.d autre utilisateur du web pourront dorénavant accéder aux information que vous envoyer.voulez vous continuez...
ta a une solution pour moi ?