System Integrity Scan Wizard

Salut jlpjlp!

J'ai fait comme suggéré et voilà ce que ça donne :
Rapport Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:25:39, on 7/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Risc-Security\RISC Group\Backupia Evolution\baclient\dsmcsvc.exe
C:\Documents and Settings\All Users\Application Data\axmrmdev\itotcnqj.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\mritovkd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\MSIMN.EXE
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Program Files\Trend Micro\Eden\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.7\UIBHO.dll
O3 - Toolbar: stfngdvw - {DD37233B-913F-4402-9328-D6844BB72F59} - C:\WINDOWS\stfngdvw.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [A00F564CC9E.exe] C:\DOCUME~1\DOMINI~1\LOCALS~1\Temp\_A00F564CC9E.exe
O4 - HKCU\..\Run: [vglykcal] C:\WINDOWS\system32\mritovkd.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [Ef1tQVbfsU] C:\Documents and Settings\All Users\Application Data\axmrmdev\itotcnqj.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0550bfc4151e9abf8005/netzip/RdxIE601_fr.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fr/win/QuickTimeInstaller.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://express.foto.com/Newuploader/ImageUploader4.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version=
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://rtc1.webresponse.one.microsoft.com/media/xp/TLIEFlash.CAB
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://ofxb.axiscam.net:8888/activex/AMC.cab
O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - https://www.corel.com/fr/?red=apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX22/download/kdx.cab
O16 - DPF: {FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati Launcher) - https://www.afternic.com/forsale/tukati.com?utm_source=TDFS_DASLNC&utm_medium=DASLNC&utm_campaign=TDFS_DASLNC&traffic_type=TDFS_DASLNC&traffic_id=daslnc&
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O20 - Winlogon Notify: __c00B7840 - C:\WINDOWS\system32\__c00B7840.dat
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\SYSTEM32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dopewars server (dopewars-server) - Unknown owner - C:\Program Files\dopewars-1.5.12\dopewars.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: TSM Sheduler Agrostar - IBM Corporation - C:\Risc-Security\RISC Group\Backupia Evolution\baclient\dsmcsvc.exe

Re-Bonjour!

Voilà, j'ai suivi les indications et voici les différents rapports demandés (il a fallu le temps, mais c'est fait!) :

RAPPORT COMBOFIX :

ComboFix 08-04-06.1 - Dominique Beaudry 2008-04-07 13:57:29.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.1464 [GMT 2:00]
Endroit: C:\Documents and Settings\Dominique Beaudry\Bureau\KillBagle.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Dominique Beaudry\Bureaublackbird.jpg
C:\Documents and Settings\Dominique Beaudry\BureauEditorFKWP1.5.exe
C:\Documents and Settings\Dominique Beaudry\BureauEditorFKWP2.0.exe
C:\Documents and Settings\Dominique Beaudry\Bureaufilemanagerclient.exe
C:\Documents and Settings\Dominique Beaudry\Bureaufkwp1.5.exe
C:\Documents and Settings\Dominique Beaudry\Bureaufkwp2.0.exe
C:\Documents and Settings\Dominique Beaudry\Bureaufwebd.exe
C:\Documents and Settings\Dominique Beaudry\BureauFWebdEditor.exe
C:\Documents and Settings\Dominique Beaudry\BureauTrojan.Win32.BlackBird.exe
C:\Documents and Settings\Dominique Beaudry\Bureauvirii
C:\WINDOWS\Fonts\acrsecB.fon
C:\WINDOWS\Fonts\acrsecI.fon
C:\WINDOWS\FVProtect.exe
C:\WINDOWS\iTunesMusic.exe
C:\WINDOWS\mslagent
C:\WINDOWS\mslagent\2_mslagent.dll
C:\WINDOWS\mslagent\mslagent.exe
C:\WINDOWS\mslagent\uninstall.exe
C:\WINDOWS\system32\__c00B7840.dat
C:\WINDOWS\system32\drivers\fad.sys
C:\WINDOWS\system32akttzn.exe
C:\WINDOWS\system32anticipator.dll
C:\WINDOWS\system32awtoolb.dll
C:\WINDOWS\system32bdn.com
C:\WINDOWS\system32bsva-egihsg52.exe
C:\WINDOWS\system32dpcproxy.exe
C:\WINDOWS\system32emesx.dll
C:\WINDOWS\system32h@tkeysh@@k.dll
C:\WINDOWS\system32hoproxy.dll
C:\WINDOWS\system32hxiwlgpm.dat
C:\WINDOWS\system32hxiwlgpm.exe
C:\WINDOWS\system32medup012.dll
C:\WINDOWS\system32medup020.dll
C:\WINDOWS\system32msgp.exe
C:\WINDOWS\system32msnbho.dll
C:\WINDOWS\system32mssecu.exe
C:\WINDOWS\system32msvchost.exe
C:\WINDOWS\system32mtr2.exe
C:\WINDOWS\system32mwin32.exe
C:\WINDOWS\system32netode.exe
C:\WINDOWS\system32newsd32.exe
C:\WINDOWS\system32ps1.exe
C:\WINDOWS\system32psof1.exe
C:\WINDOWS\system32psoft1.exe
C:\WINDOWS\system32regc64.dll
C:\WINDOWS\system32regm64.dll
C:\WINDOWS\system32Rundl1.exe
C:\WINDOWS\system32smp
C:\WINDOWS\system32smp\msrc.exe
C:\WINDOWS\system32sncntr.exe
C:\WINDOWS\system32ssurf022.dll
C:\WINDOWS\system32ssvchost.com
C:\WINDOWS\system32ssvchost.exe
C:\WINDOWS\system32sysreq.exe
C:\WINDOWS\system32taack.dat
C:\WINDOWS\system32taack.exe
C:\WINDOWS\system32temp#01.exe
C:\WINDOWS\system32thun.dll
C:\WINDOWS\system32thun32.dll
C:\WINDOWS\system32VBIEWER.OCX
C:\WINDOWS\system32vbsys2.dll
C:\WINDOWS\system32vcatchpi.dll
C:\WINDOWS\system32winlogonpc.exe
C:\WINDOWS\system32winsystem.exe
C:\WINDOWS\system32WINWGPX.EXE
C:\xcrashdump.dat

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-07 to 2008-04-07 ))))))))))))))))))))))))))))))))))))
.

2008-04-07 12:27 . 2008-04-07 12:39 <REP> d-------- C:\Program Files\Navilog1
2008-04-07 12:23 . 2008-04-07 12:23 <REP> d-------- C:\Program Files\Trend Micro
2008-04-07 09:42 . 2004-03-20 00:28 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2008-04-07 09:42 . 2004-03-20 00:28 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-04-07 09:42 . 2004-03-20 00:28 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2008-04-07 09:42 . 2004-03-20 01:05 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
2008-04-07 09:42 . 2004-03-20 00:28 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2008-04-07 09:42 . 2004-03-20 00:28 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
2008-04-07 09:42 . 2004-03-20 00:28 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-04-07 09:42 . 2004-03-20 01:04 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec
2008-04-07 09:42 . 2004-03-20 01:06 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Sonic
2008-04-07 09:42 . 2004-03-20 01:05 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Jasc Software Inc
2008-04-07 09:42 . 2008-01-21 21:03 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Apple Computer
2008-04-07 09:34 . 2008-04-07 10:21 3,614 --a------ C:\WINDOWS\SYSTEM32\tmp.reg
2008-04-04 16:14 . 2008-04-04 16:14 <REP> d-------- C:\Documents and Settings\Dominique Beaudry\Application Data\TmpRecentIcons
2008-04-04 14:12 . 2008-04-04 14:12 <REP> d-------- C:\Program Files\XoftSpySE
2008-04-04 12:26 . 2008-04-04 13:34 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-04-04 12:26 . 2007-12-10 14:53 81,288 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\iksyssec.sys
2008-04-04 12:26 . 2007-12-10 14:53 66,952 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\iksysflt.sys
2008-04-04 12:26 . 2008-02-01 12:55 42,376 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\ikfilesec.sys
2008-04-04 12:26 . 2007-12-10 14:53 29,576 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\kcom.sys
2008-04-04 12:25 . 2008-04-04 12:48 <REP> d-------- C:\Program Files\Spyware Doctor
2008-04-04 12:25 . 2008-04-04 12:25 <REP> d-------- C:\Documents and Settings\Dominique Beaudry\Application Data\PC Tools
2008-04-04 11:47 . 2008-04-04 11:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-04-04 11:46 . 2008-04-04 11:46 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-04-04 11:29 . 2008-04-04 11:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\axmrmdev
2008-04-04 11:29 . 2008-04-04 11:29 98,304 --a------ C:\WINDOWS\SYSTEM32\mritovkd.exe
2008-03-17 14:34 . 2004-05-14 17:53 462,848 --a------ C:\WINDOWS\SYSTEM32\ltkrn13n.dll
2008-03-17 14:34 . 2004-05-14 17:53 450,560 --a------ C:\WINDOWS\SYSTEM32\ltimg13n.dll
2008-03-17 14:34 . 2004-05-14 17:53 401,408 --a------ C:\WINDOWS\SYSTEM32\lfcmp13n.dll
2008-03-17 14:34 . 2004-05-14 17:53 299,008 --a------ C:\WINDOWS\SYSTEM32\ltdis13n.dll
2008-03-17 14:34 . 2004-01-12 03:09 206,336 --a------ C:\WINDOWS\SYSTEM32\ltefx13n.dll
2008-03-17 14:34 . 2004-05-14 17:53 163,840 --a------ C:\WINDOWS\SYSTEM32\ltfil13n.dll
2008-03-17 14:34 . 2003-11-04 16:11 159,744 --a------ C:\WINDOWS\SYSTEM32\lfpng13n.dll
2008-03-17 14:34 . 2003-11-04 16:10 69,632 --a------ C:\WINDOWS\SYSTEM32\lfgif13n.dll
2008-03-17 14:34 . 2004-05-14 17:53 57,344 --a------ C:\WINDOWS\SYSTEM32\lfbmp13n.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-07 12:02 --------- d-----w C:\Documents and Settings\Dominique Beaudry\Application Data\Free Download Manager
2008-04-07 11:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-04-07 07:16 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-04-04 09:47 --------- d-----w C:\Program Files\Lavasoft
2008-04-04 09:47 --------- d-----w C:\Documents and Settings\Dominique Beaudry\Application Data\Lavasoft
2008-03-17 11:23 --------- d-----w C:\Program Files\Java
2008-03-06 20:32 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf
2008-03-06 20:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys
2008-03-06 20:32 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat
2008-03-06 13:34 --------- d-----w C:\Program Files\Windows Live
2008-03-06 13:31 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-06 13:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-02-25 12:12 --------- d-----w C:\Program Files\DivX
2008-02-12 09:10 --------- d-----w C:\Program Files\Geneatique2007
2008-02-12 09:09 --------- d-----w C:\Program Files\Agendis
2008-02-12 09:08 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-02-08 13:34 --------- d-----w C:\Program Files\Free Download Manager
2007-12-17 09:08 48,136 ----a-w C:\Documents and Settings\Dominique Beaudry\Application Data\GDIPFONTCACHEV1.DAT
2006-04-05 14:20 88 --sh--r C:\WINDOWS\SYSTEM32\22915CBDB0.sys
2006-04-05 14:20 3,350 --sha-w C:\WINDOWS\SYSTEM32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 23:18 443968]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2005-06-22 00:48 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2005-10-19 09:59 126976]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2003-08-06 03:04 114741]
"StorageGuard"="C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-02-13 03:01 155648]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-10-05 23:11 866584]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-06-04 20:05 116328]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2007-06-25 23:00 771440]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-10-03 16:39 185632]
"Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 18:38 583048]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-10 16:27 385024]
"PCMService"="C:\Program Files\Dell\Media Experience\PCMService.exe" [2003-08-26 21:47 204800]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\__c00B7840]
C:\WINDOWS\system32\__c00B7840.dat

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yvu9"= iyvu9_32.dll
"vidc.iv41"= ir41_32.dll
"VIDC.WMV3"= wmv9vcm.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

S2 TSM Sheduler Agrostar;TSM Sheduler Agrostar;"C:\Risc-Security\RISC Group\Backupia Evolution\baclient\dsmcsvc.exe" [2006-04-19 19:48]
S3 dopewars-server;dopewars server;C:\Program Files\dopewars-1.5.12\dopewars.exe [2006-03-27 13:59]
S3 nenum13E;nenum13E;C:\DOCUME~1\DOMINI~1\LOCALS~1\Temp\nenum13E.sys []

*Newly Created Service* - COMHOST
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-04-04 10:00:00 C:\WINDOWS\Tasks\Ad-aware 6.job"
- C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-aware.exe
"2008-01-30 07:08:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-04-07 12:08:49 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
"2008-04-01 06:52:23 C:\WINDOWS\Tasks\Norton Internet Security - Analyse système complète - Dominique Beaudry.job"


RAPPORT OTMOVEIT

File/Folder C:\DOCUME~1\DOMINI~1\LOCALS~1\Temp\_A00F564CC9E.exe not found.
C:\WINDOWS\system32\mritovkd.exe moved successfully.
C:\Documents and Settings\All Users\Application Data\axmrmdev\itotcnqj.exe moved successfully.
File/Folder C:\WINDOWS\system32\__c00B7840.dat not found.

OTMoveIt2 by OldTimer - Version 1.0.4.0 log created on 04072008_142453


RAPPORT LOPXP

# Rapport Lopxp fait le 2008-04-07 à 14:29:47
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.09 - Maj du 28/02/2008

Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome https://support.norton.com/sp/fr/fr/home/current/solutions/v58540272?HResult=0x80040001&abproduct=NIS&abversion=10.4.0.13&build=Retail&ced=true&entsrc=CED_pubweb&error=221&module=3003&src=_mi (3460)
"C:\Program Files\Internet Explorer\iexplore.exe" (3304)

========== Listing des dossiers Application Data

+- C:\Documents and Settings\Administrateur\Application Data

2008-01-21 à 19:03:58 - Apple Computer
2004-03-19 à 22:28:06 - Identities
2004-03-19 à 23:05:18 - Jasc Software Inc
2004-03-19 à 22:28:06 - Microsoft
2004-03-19 à 23:06:50 - Sonic
2004-03-19 à 22:56:59 - Sun
2004-03-19 à 23:04:33 - Symantec

+- C:\Documents and Settings\Administrateur\Local Settings\Application Data

2008-01-21 à 19:03:59 - Apple Computer
2008-04-07 à 08:07:40 - Microsoft
2004-03-19 à 22:56:43 - {7148F0A6-6813-11D6-A77B-00B0D0142000}

+- C:\Documents and Settings\Agrostar\Application Data

2008-03-10 à 12:38:34 - Adobe
2004-03-19 à 22:28:06 - Identities
2004-03-19 à 23:05:18 - Jasc Software Inc
2004-04-20 à 07:17:47 - Macromedia
2005-11-21 à 07:42:53 - Microsoft
2004-08-06 à 08:44:56 - Real
2004-03-19 à 23:06:50 - Sonic
2004-03-19 à 22:56:59 - Sun
2004-03-19 à 23:04:33 - Symantec

+- C:\Documents and Settings\Agrostar\Local Settings\Application Data

2008-02-04 à 08:01:36 - Apple Computer
2006-04-18 à 07:18:45 - Dell
2004-10-07 à 14:56:03 - Identities
2007-02-06 à 13:17:03 - Microsoft
2004-03-19 à 22:56:43 - {7148F0A6-6813-11D6-A77B-00B0D0142000}

+- C:\Documents and Settings\All Users\Application Data

2008-02-25 à 14:23:07 - Adobe
2008-01-21 à 12:02:46 - Apple
2008-01-21 à 12:06:20 - Apple Computer
2008-04-04 à 09:29:15 - axmrmdev
2006-01-19 à 08:33:15 - BVRP Software
2008-02-04 à 16:01:43 - Dell
2007-10-03 à 10:21:17 - FreeDownloadManager.ORG
2006-04-05 à 12:30:31 - InstallShield
2008-04-04 à 09:48:28 - Lavasoft
2008-04-04 à 09:47:53 - Microsoft
2004-07-08 à 09:42:42 - MSN6
2007-06-12 à 08:09:22 - MSScanAppDataDir
2006-03-01 à 12:50:28 - NFS Underground Demo
2004-04-13 à 08:35:05 - QuickTime
2004-03-19 à 23:01:04 - SBSI
2008-04-07 à 12:20:50 - Symantec
2008-04-04 à 11:34:18 - TEMP
2005-11-21 à 14:48:30 - Windows Genuine Advantage
2008-03-06 à 13:29:18 - WLInstaller

+- C:\Documents and Settings\Dominique Beaudry\Application Data

2008-02-18 à 08:56:29 - Adobe
2004-09-20 à 13:44:51 - AdobeUM
2006-06-06 à 07:13:19 - Apple Computer
2004-05-12 à 08:58:33 - Brother
2006-04-05 à 12:29:18 - Corel
2007-08-21 à 12:30:15 - dBpoweramp
2006-11-09 à 15:49:36 - DivX
2008-04-07 à 12:02:27 - Free Download Manager
2006-01-17 à 14:51:59 - Google
2006-01-23 à 13:39:51 - Help
2004-03-19 à 22:28:06 - Identities
2004-03-19 à 23:05:18 - Jasc Software Inc
2004-04-06 à 12:03:31 - Kontiki
2008-04-04 à 09:47:53 - Lavasoft
2004-03-25 à 15:56:22 - Leadertech
2006-06-01 à 10:49:39 - Macromedia
2008-02-04 à 14:58:28 - Microsoft
2004-07-08 à 09:42:52 - MSN6
2005-05-04 à 14:50:42 - NGSoft
2008-04-04 à 10:25:59 - PC Tools
2007-10-03 à 14:34:39 - Real
2006-10-02 à 09:12:48 - SecuROM
2004-05-18 à 07:40:40 - Sonic
2007-03-13 à 11:51:30 - STOIK
2004-03-19 à 22:56:59 - Sun
2006-01-31 à 07:54:22 - Symantec
2004-03-26 à 13:07:18 - Template
2008-04-04 à 14:14:00 - TmpRecentIcons
2007-10-03 à 15:12:39 - vlc
2006-03-07 à 14:52:18 - XCPCSync.OEM

+- C:\Documents and Settings\Dominique Beaudry\Local Settings\Application Data

2006-01-19 à 08:36:29 - ABBYY
2008-02-12 à 15:40:49 - Adobe
2008-01-21 à 12:03:45 - Apple
2006-06-12 à 11:12:13 - Apple Computer
2008-02-04 à 16:00:42 - ApplicationHistory
2007-12-18 à 08:08:17 - Google
2004-10-13 à 12:51:23 - Help
2004-03-25 à 11:49:24 - Identities
2008-04-07 à 08:34:26 - Microsoft
2005-06-14 à 12:32:14 - Skype
2007-04-04 à 14:13:57 - WMTools Downloaded Files
2004-03-19 à 22:56:43 - {7148F0A6-6813-11D6-A77B-00B0D0142000}

+- C:\Documents and Settings\Propri‚taire\Application Data

2004-03-25 à 10:33:45 - Symantec

========== Listing du dossier Program Files

+- C:\Program Files

2006-01-23 à 14:42:38 - $occer$oft
2006-01-19 à 08:34:21 - ABBYY FineReader 6.0
2008-02-12 à 09:02:26 - Adobe
2007-10-10 à 09:34:44 - Agenda-xp
2008-02-12 à 09:09:27 - Agendis
2008-01-21 à 12:03:40 - Apple Software Update
2005-01-20 à 12:12:32 - AxBx
2007-04-27 à 11:38:37 - Axis Communications
2008-01-21 à 12:08:25 - Bonjour
2004-03-19 à 23:02:32 - Broadcom Management Programs
2004-06-24 à 12:53:37 - Brother
2005-08-31 à 14:24:02 - CBC-Online
2007-01-26 à 13:45:50 - CCleaner
2004-03-25 à 10:09:04 - Common Files
2004-03-19 à 22:28:14 - ComPlus Applications
2006-04-05 à 12:27:36 - Corel
2006-04-05 à 11:58:16 - CorelPaintShopProX
2006-04-05 à 12:23:53 - CorelPaintShopProX_
2007-11-30 à 13:21:05 - Cossacks
2008-02-04 à 16:01:43 - Dell
2004-03-19 à 23:05:18 - Dell Computer
2006-11-28 à 09:54:13 - Dictionnaire
2006-05-10 à 10:14:24 - DIFX
2008-02-25 à 12:12:02 - DivX
2006-03-27 à 12:00:37 - dopewars-1.5.12
2006-01-19 à 08:33:29 - FaxTools
2008-04-04 à 09:46:33 - Fichiers communs
2008-02-08 à 13:34:03 - Free Download Manager
2008-02-12 à 09:10:33 - Geneatique2007
2007-12-18 à 08:07:34 - Google
2005-12-06 à 16:14:05 - Hattrick Buddy
2004-03-26 à 08:39:51 - HighMAT CD Writing Wizard
2006-02-27 à 16:04:19 - Icon Constructor 2
2007-08-21 à 11:56:50 - Illustrate
2007-03-13 à 11:50:25 - InstallShield Installation Information
2008-02-13 à 08:30:39 - Internet Explorer
2008-01-21 à 12:10:36 - iPod
2008-01-21 à 12:10:56 - iTunes
2004-03-19 à 23:05:49 - Jasc Software Inc
2008-03-17 à 11:23:58 - Java
2008-04-04 à 09:47:56 - Lavasoft
2005-11-23 à 14:12:04 - LeaguePad
2008-04-07 à 12:30:12 - Lopxp
2005-02-09 à 08:06:38 - Messenger
2007-05-09 à 13:08:35 - Microsoft CAPICOM 2.1.0.2
2005-03-08 à 13:49:14 - microsoft frontpage
2007-06-26 à 11:52:57 - Microsoft Office
2004-07-07 à 15:26:04 - Microsoft Visual Studio
2004-09-07 à 09:58:03 - Microsoft Works
2004-07-07 à 15:25:25 - Microsoft.NET
2007-02-21 à 12:51:01 - Movie Maker
2006-11-06 à 11:03:57 - MP3 WAV Converter
2007-04-04 à 14:19:56 - MPEG4 Modifier
2007-06-28 à 08:12:04 - MSBuild
2007-06-26 à 11:52:33 - MSECache
2004-03-19 à 22:28:10 - MSN
2004-03-19 à 22:28:12 - MSN Gaming Zone
2007-06-28 à 14:42:03 - MSXML 6.0
2008-04-07 à 10:39:20 - Navilog1
2004-09-21 à 10:08:15 - NetMeeting
2007-01-29 à 11:00:05 - NoAdware5.0
2007-11-22 à 08:21:06 - Norton Internet Security
2006-04-13 à 10:35:42 - OfficeUpdate11
2007-06-13 à 08:47:27 - Outlook Express
2007-06-04 à 08:15:14 - PDFCreator
2007-12-18 à 08:07:45 - Picasa2
2008-01-21 à 12:07:08 - QuickTime
2004-05-05 à 08:06:05 - Real
2007-06-28 à 08:04:26 - Reference Assemblies
2004-03-19 à 22:28:14 - Services en ligne
2004-04-08 à 10:20:18 - Snapshot Viewer
2004-03-19 à 23:02:58 - Sonic
2008-04-04 à 10:48:35 - Spyware Doctor
2007-03-13 à 11:50:26 - STOIK Imaging
2007-12-05 à 09:43:51 - Symantec
2008-04-07 à 10:23:25 - Trend Micro
2004-07-05 à 07:03:30 - Uninstall Information
2007-10-03 à 14:59:09 - VideoLAN
2006-11-06 à 12:09:15 - Windows Defender
2004-03-26 à 08:50:34 - Windows Journal Viewer
2008-03-06 à 13:34:46 - Windows Live
2006-11-06 à 14:08:33 - Windows Media Connect 2
2006-11-06 à 14:08:30 - Windows Media Player
2004-09-21 à 10:07:50 - Windows NT
2006-03-20 à 12:55:21 - WindowsUpdate
2005-03-29 à 09:11:27 - WinRAR
2004-07-01 à 12:41:34 - WinZip
2006-02-23 à 08:34:34 - WMV9_VCM
2006-01-03 à 12:11:31 - WordBiz
2004-03-19 à 22:28:18 - XEROX
2008-04-04 à 12:12:10 - XoftSpySE
2006-11-08 à 10:10:07 - Xvid
2006-05-19 à 08:49:20 - Yahoo!

========== Tâches planifiées

Ad-aware 6.job: C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-aware.exe
AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
MP Scheduled Scan.job: C:\Program Files\Windows Defender\MpCmdRun.exe Scan -RestrictPrivileges
Norton Internet Security - Analyse système complète - Dominique Beaudry.job: C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe /TASK:"C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Tasks\mycomp.sca"

========== Clés registre


========== Bloqueur popups Internet Explorer

www.fortisbanking.be
www.infotec.be
www.stib.irisnet.be
www.sncb.be
www.monlegionnaire.com
www.vw.be
snakewebman.club.fr
www.uefa.com
www.mynovozymes.com
www.bw-namur.be
dpallois.club.fr
www.agrostar.be
admit.belgacom.be
www.carrefour.com
www13.hattrick.org
www108.hattrick.org
www.clubic.com
merkur.rent-at-avis.com
www.canalplus.fr
www89.hattrick.org
PopupMgr

========== Suggestion ( /!\ Nécessite une interprétation.) ==========

+- Dossiers\Fichiers : Aucune suggestion.

+- Registre : Aucune suggestion.


- Fin du rapport -


Bonne lecture, merci et à plus tard !

Fondamentalement, depuis que j'ai effectué toutes les opérations demandées, je n'ai plus eu de souci. Plus de pop-up, plus d'alerte, etc...

J'aurais donc tendance à dire que le problème est réglé. Je colle quand même mon rapport Hijackthis ici en dessous, on ne sait jamais...

Encore merci, en tous cas!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:22, on 2008-04-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Risc-Security\RISC Group\Backupia Evolution\baclient\dsmcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Outlook Express\MSIMN.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\Eden\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.7\UIBHO.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://express.foto.com/Newuploader/ImageUploader4.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O20 - Winlogon Notify: __c00B7840 - C:\WINDOWS\system32\__c00B7840.dat (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\SYSTEM32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dopewars server (dopewars-server) - Unknown owner - C:\Program Files\dopewars-1.5.12\dopewars.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: TSM Sheduler Agrostar - IBM Corporation - C:\Risc-Security\RISC Group\Backupia Evolution\baclient\dsmcsvc.exe

On dirait que c'est résolu!
Merci beaucoup et à (pas trop, j'espère) bientôt!
;-)