Pub cid toujours présentent

Bonjour,
Mercii, voici le rapport si je me suis pas trompée

# Rapport Lopxp fait le 01/05/2008 à 10:22:26
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.06 - Maj du 05/02/2008

Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" (2912)


========== Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

2008-01-08 à 17:57:40 - Adobe
2008-03-23 à 20:34:47 - Apple Computer
2008-04-20 à 08:11:35 - Azureus
2008-04-20 à 09:25:18 - ESET
2008-04-20 à 09:43:30 - Google
2008-04-30 à 21:46:00 - Grisoft
2005-11-21 à 13:22:26 - Intel
2008-04-24 à 18:19:12 - Lavasoft
2007-09-11 à 13:11:55 - Macrovision
2008-04-30 à 22:34:39 - MailFrontier
2008-01-05 à 21:44:16 - Microsoft
2008-04-09 à 20:10:03 - Microsoft Help
2005-11-21 à 11:16:14 - SBSI
2007-09-11 à 12:16:29 - Sony Corporation
2008-03-30 à 19:40:01 - Stupid Vc Soft Defy
2008-04-20 à 09:54:50 - Symantec
2007-01-16 à 18:15:31 - VAIO Media Platform
2007-01-28 à 19:34:03 - Windows Genuine Advantage
2008-05-01 à 08:12:45 - WLInstaller
2007-07-23 à 19:56:25 - Yahoo!

+- C:\Documents and Settings\monteiro\Application Data

2007-08-04 à 08:24:30 - ABBYY
2008-01-08 à 17:57:40 - Adobe
2007-01-28 à 12:41:37 - AdobeUM
2007-09-11 à 13:16:17 - Ahead
2008-03-23 à 20:35:28 - Apple Computer
2008-04-20 à 22:24:37 - Azureus
2008-02-23 à 15:55:54 - FotoWire
2007-01-23 à 20:33:58 - Google
2008-04-30 à 21:46:13 - Grisoft
2005-11-21 à 10:49:32 - Identities
2007-08-05 à 07:21:39 - InterVideo
2007-01-20 à 21:45:46 - Leadertech
2007-01-20 à 21:41:22 - Macromedia
2008-03-01 à 10:05:46 - Microsoft
2007-07-27 à 16:46:38 - Microsoft Web Folders
2007-03-30 à 20:03:59 - Mozilla
2007-09-11 à 11:58:00 - MSNInstaller
2007-01-20 à 21:48:17 - Sonic
2007-01-20 à 21:41:26 - sony
2007-01-23 à 20:32:11 - Sony Corporation
2007-03-30 à 19:46:06 - Sun
2007-01-20 à 18:28:59 - Symantec
2007-09-11 à 12:35:07 - vlc

+- C:\Documents and Settings\monteiro\Local Settings\Application Data

2007-08-04 à 08:24:30 - ABBYY
2007-01-16 à 18:19:50 - Adobe
2007-11-15 à 20:59:00 - Ahead
2007-01-23 à 20:32:11 - Google
2007-06-17 à 09:13:37 - Identities
2008-04-28 à 18:02:19 - Logitech-LS
2008-02-29 à 21:26:53 - Microsoft
2007-06-01 à 17:48:11 - Microsoft Help
2007-03-30 à 20:03:59 - Mozilla
2008-03-02 à 10:25:23 - PCHealth
2005-11-21 à 15:37:54 - {3248F0A6-6813-11D6-A77B-00B0D0150050}

+- C:\Documents and Settings\Propri‚taire\Application Data

2007-01-16 à 18:29:55 - Symantec

========== Listing du dossier Program Files

+- C:\Program Files

2008-04-30 à 19:50:22 - a-squared Free
2007-09-11 à 13:09:17 - Adobe
2008-04-23 à 19:36:28 - Alwil Software
2005-11-21 à 11:43:57 - Apoint
2007-08-04 à 08:33:33 - ArcSoft
2005-11-21 à 10:47:05 - ComPlus Applications
2005-11-21 à 11:26:59 - CONEXANT
2007-09-11 à 12:37:20 - D-Tools
2007-11-02 à 17:08:51 - DivX
2007-08-04 à 08:35:42 - EPSON
2008-04-20 à 09:25:18 - ESET
2008-04-30 à 22:34:33 - Fichiers communs
2008-03-30 à 19:39:21 - Ford Error Hide
2007-01-28 à 12:39:01 - Free
2007-09-11 à 12:34:47 - Freeplayer
2007-09-11 à 12:55:24 - Google
2008-04-30 à 21:45:57 - Grisoft
2008-02-23 à 15:49:51 - InstallShield Installation Information
2005-11-21 à 13:21:54 - Intel
2008-04-20 à 09:24:20 - Internet Explorer
2005-11-21 à 15:52:33 - InterVideo
2008-01-08 à 19:33:42 - IrfanView
2005-11-21 à 15:50:49 - ISP
2008-03-24 à 08:26:55 - Java
2005-11-21 à 14:28:04 - LanExpress
2008-02-23 à 15:55:51 - Logitech
2008-05-01 à 08:22:37 - Lopxp
2005-11-21 à 11:20:32 - Messenger
2007-06-07 à 21:08:08 - Microsoft CAPICOM 2.1.0.2
2007-07-27 à 16:46:11 - microsoft frontpage
2007-09-11 à 12:50:22 - Microsoft Office
2007-01-16 à 18:16:59 - Microsoft SQL Server
2007-11-11 à 10:27:24 - Microsoft SQL Server Compact Edition
2007-09-11 à 12:50:15 - Microsoft Visual Studio
2007-09-11 à 12:50:54 - Microsoft Works
2007-09-11 à 12:49:16 - Microsoft.NET
2005-11-21 à 10:47:27 - Movie Maker
2008-05-01 à 08:18:31 - Mozilla Firefox
2007-09-11 à 12:50:38 - MSBuild
2007-06-01 à 17:18:14 - MSECache
2007-09-11 à 11:58:02 - MSN
2005-11-21 à 10:46:14 - MSN Gaming Zone
2007-01-28 à 19:31:43 - MSXML 4.0
2008-05-01 à 06:46:26 - Navilog1
2007-09-11 à 12:40:03 - Nero
2005-11-21 à 10:47:33 - NetMeeting
2007-09-11 à 11:59:13 - Norton Ghost
2008-04-20 à 09:22:36 - Norton Internet Security
2007-06-15 à 05:26:50 - Outlook Express
2008-03-23 à 20:34:12 - QuickTime
2007-01-16 à 18:08:29 - Raccourcis de programmes
2005-11-21 à 12:42:24 - Realtek
2007-01-16 à 18:11:59 - Roxio
2005-11-21 à 10:47:51 - Services en ligne
2007-08-04 à 08:32:01 - Smart Panel
2007-09-11 à 12:15:58 - Sony
2008-04-30 à 23:12:58 - Trend Micro
2007-01-16 à 18:17:16 - Uninstall Information
2007-07-07 à 23:25:56 - VideoLAN
2007-07-08 à 22:27:44 - Vimicro
2008-02-28 à 02:01:14 - Windows Live
2007-01-28 à 19:32:53 - Windows Media Player
2005-11-21 à 10:46:11 - Windows NT
2005-11-21 à 10:47:58 - WindowsUpdate
2007-09-11 à 12:37:59 - WinRAR
2005-11-21 à 10:49:35 - xerox
2005-11-21 à 15:53:40 - Yahoo HTML
2007-09-11 à 12:09:51 - Yahoo!
2005-11-21 à 15:53:40 - YahooMFU

========== Tâches planifiées

Aucune tâche planifiée détecté.

========== Clés registre

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"soft defy soap wave"="C:\Documents and Settings\All Users\Application Data\Stupid Vc Soft Defy\Stupid Base.exe"


========== Bloqueur popups Internet Explorer


========== Suggestion ( /!\ Nécessite une interprétation.) ==========

C:\Documents and Settings\All Users\Application Data\Stupid Vc Soft Defy
C:\Program Files\Ford Error Hide

+- Registre:

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"soft defy soap wave"=-

Bonjour

voici les deux rapports :


Rapport Tcleaner

-->- Recherche:

C:\!Killbox: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\monteiro\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\monteiro\Bureau\KillBox.exe: trouvé !
C:\Documents and Settings\monteiro\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\monteiro\Bureau\Raccourcis Bureau non utilisés\HJTInstall.exe: trouvé !
C:\Documents and Settings\monteiro\Recent\Navilog1.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\monteiro\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\monteiro\Bureau\KillBox.exe: supprimé !
C:\Documents and Settings\monteiro\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\monteiro\Bureau\Raccourcis Bureau non utilisés\HJTInstall.exe: supprimé !
C:\Documents and Settings\monteiro\Recent\Navilog1.lnk: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\!Killbox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !


Rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:57:25, on 03/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\system32\afinding.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\perfs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\routing.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\WINDOWS\system32\wserving.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5E9BBD4A-6D2F-4CC5-BD9A-7CFB141A891B} - C:\WINDOWS\system32\cbXQkJbx.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE ZSMC USB PC Camera
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [soft defy soap wave] C:\Documents and Settings\All Users\Application Data\Stupid Vc Soft Defy\Stupid Base.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [BM5796bdc3] Rundll32.exe "C:\WINDOWS\system32\ugvjfvjs.dll",s
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AFinding Service (AFinding) - Unknown owner - C:\WINDOWS\system32\afinding.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\WINDOWS\system32\perfs.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Routing Service (Routing) - Unknown owner - C:\WINDOWS\system32\routing.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: WServing Service (WServing) - Unknown owner - C:\WINDOWS\system32\wserving.exe

bonjour,

Merci mais installé un anti pub sans savoir ou se situe le problème, est ce que cela ressoudera réellement?

Merci

Re,

Merci

Voici le rapport, pour mon antivirus avast, je ne le retrouve plus dans la barre pour le reactiver


ComboFix 08-05-01.3 - monteiro 2008-05-03 10:29:11.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.484 [GMT 2:00]
Endroit: C:\Documents and Settings\monteiro\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\internet explorer\svchost.exe
C:\WINDOWS\cookies.ini
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\drmgs.sys
C:\WINDOWS\system32\fkohtgja.ini
C:\WINDOWS\system32\Indt2.sys
C:\WINDOWS\system32\ixumufah.ini
C:\WINDOWS\system32\juetxxpl.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\nmshoboa.ini
C:\WINDOWS\system32\qwgnfqid.ini
C:\WINDOWS\system32\routing.exe
C:\WINDOWS\system32\ucubqvin.ini
C:\WINDOWS\system32\umsejjrm.ini
C:\WINDOWS\system32\xbJkQXbc.ini
C:\WINDOWS\system32\xbJkQXbc.ini2

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_PERFMONS
-------\Legacy_ROUTING
-------\Service_perfmons
-------\Service_Routing


((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-03 to 2008-05-03 ))))))))))))))))))))))))))))))))))))
.

2008-05-02 00:01 . 2008-05-02 01:02 169,093 --a------ C:\WINDOWS\system32\tmp0_276277292698.bk
2008-05-01 16:30 . 2008-05-01 16:30 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-05-01 16:30 . 2008-05-01 16:30 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-05-01 10:21 . 2008-05-01 10:34 <REP> d-------- C:\Program Files\Lopxp
2008-05-01 01:12 . 2008-05-03 08:56 <REP> d-------- C:\Program Files\Trend Micro
2008-05-01 00:34 . 2008-05-01 00:34 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-05-01 00:34 . 2008-05-01 00:36 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-05-01 00:33 . 2004-04-27 05:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2008-05-01 00:32 . 2008-05-01 00:54 <REP> d-------- C:\WINDOWS\Internet Logs
2008-05-01 00:02 . 2008-05-01 00:02 93,173 --a------ C:\WINDOWS\system32\tmp0_50321040077.bk
2008-04-30 23:46 . 2008-04-30 23:46 <REP> d-------- C:\Documents and Settings\monteiro\Application Data\Grisoft
2008-04-30 23:46 . 2008-04-30 23:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-04-30 23:46 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-04-30 23:33 . 2008-04-30 23:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2008-04-30 20:35 . 2008-05-02 00:39 <REP> d-------- C:\Program Files\a-squared Free
2008-04-24 20:18 . 2008-04-24 20:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-04-23 21:36 . 2008-04-23 21:36 <REP> d-------- C:\Program Files\Alwil Software
2008-04-22 19:37 . 2008-04-30 20:16 109,747 --a------ C:\WINDOWS\BM5796bdc3.xml
2008-04-20 11:27 . 2008-03-03 14:25 5,702 --ah----- C:\WINDOWS\nod32restoretemdono.reg
2008-04-20 11:27 . 2008-03-03 18:21 568 --ah----- C:\WINDOWS\nod32fixtemdono.reg
2008-04-20 11:25 . 2008-04-20 11:25 <REP> d-------- C:\Program Files\ESET
2008-04-20 11:25 . 2008-04-20 11:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-04-20 11:02 . 2008-04-20 11:02 158,874 --a------ C:\WINDOWS\system32\tmp0_53156344571.bk
2008-04-20 10:11 . 2008-04-21 00:24 <REP> d-------- C:\Documents and Settings\monteiro\Application Data\Azureus
2008-04-20 10:11 . 2008-04-20 10:11 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2008-04-19 20:20 . 2008-04-20 11:22 <REP> d-------- C:\Program Files\Norton Internet Security

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-01 08:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-29 18:44 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-04-20 09:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-04-09 20:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-03-30 19:39 --------- d-----w C:\Program Files\Ford Error Hide
2008-03-24 08:26 --------- d-----w C:\Program Files\Java
2008-03-23 20:35 --------- d-----w C:\Documents and Settings\monteiro\Application Data\Apple Computer
2008-03-23 20:34 --------- d-----w C:\Program Files\QuickTime
2008-03-23 20:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-02-23 15:49 81,920 ------r C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5E9BBD4A-6D2F-4CC5-BD9A-7CFB141A891B}]
C:\WINDOWS\system32\cbXQkJbx.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-25 22:48 68856]
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-07-16 15:17 4670704]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2008-02-23 17:49 20480]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 15:44 196608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-09 09:56 6746112]
"RTHDCPL"="RTHDCPL.EXE" [2005-06-29 06:25 14720000 C:\WINDOWS\RTHDCPL.EXE]
"AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-04-29 07:56 45056]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2005-06-29 07:33 94208]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2005-06-29 07:33 77824]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2005-06-29 07:33 114688]
"NWEReboot"="" []
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"AdobeVersionCue"="C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe" [2003-10-22 16:33 1732608]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"BigDogPath"="C:\WINDOWS\VM_STI.exe" [2004-11-29 08:28 40960]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 18:32 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 16:24 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 16:14 217088]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-02-01 00:13 385024]
"soft defy soap wave"="C:\Documents and Settings\All Users\Application Data\Stupid Vc Soft Defy\Stupid Base.exe" [ ]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [ ]
"BM5796bdc3"="C:\WINDOWS\system32\ugvjfvjs.dll" [ ]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
VESWinlogon.dll 2005-05-20 18:42 73728 C:\WINDOWS\system32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.dvsd"= C:\PROGRA~1\FICHIE~1\SONYSH~1\VideoLib\sonydv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 7.0]
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
--a------ 2003-11-07 10:21 114688 C:\Program Files\Apoint\Apoint.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BigDogPath]
--a------ 2004-11-29 08:28 40960 C:\WINDOWS\VM_STI.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISBMgr.exe]
--a------ 2004-02-20 15:12 32768 C:\Program Files\Sony\ISB Utility\ISBMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon]
--a------ 2002-03-14 17:46 45056 C:\WINDOWS\system32\ico.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Ghost 10.0]
C:\Program Files\Norton Ghost\Agent\GhostTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDService.exe]
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SonyPowerCfg]
--a------ 2005-10-19 23:07 184320 C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-07-25 22:48 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 2]
--a------ 2005-10-11 22:36 151552 C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
--a------ 2007-07-16 15:17 4670704 C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"=
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
R2 AFinding;AFinding Service;C:\WINDOWS\system32\afinding.exe [2004-08-05 14:00]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [2002-12-17 18:55]
R2 WServing;WServing Service;C:\WINDOWS\system32\wserving.exe [2004-08-05 14:00]
S2 NOD32FiXTemDono;Eset Nod32 Boot;C:\WINDOWS\system32\regedt32.exe [2004-08-05 14:00]
S3 fbxusb;FreeBox USB Network Adapter;C:\WINDOWS\system32\DRIVERS\fbxusb.sys [2002-12-11 15:25]
S3 Image Converter video recording monitor for VAIO Entertainment;Image Converter video recording monitor for VAIO Entertainment;C:\Program Files\Sony\Image Converter 2\IcVzMon.exe [2005-07-14 20:10]
S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE [2002-12-17 18:23]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5121d4e-3e7f-11dc-9920-0013cedcaaa0}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe

.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-03 10:33:22
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Yahoo!\Messenger\Ymsgr_tray.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-05-03 10:38:50 - machine was rebooted
ComboFix-quarantined-files.txt 2008-05-03 08:38:45

Pre-Run: 33,220,476,928 octets libres
Post-Run: 33,173,794,816 octets libres

203 --- E O F --- 2008-04-09 20:10:04