Win32:TratBHO [Trj] encore

wello -  
Bonjour,
j'ai un petit problème avec le virus Win32:TratBHO [Trj] sur mon rodi et j'arrive pas e faire partir. pourrai-je avoir un peu d'aide svp
Configuration: Windows XP
Firefox 2.0.0.14

16 réponses

Résumé de la discussion

Une infection par Win32:TratBHO [Trj] est évoquée sur Windows XP avec des difficultés de suppression et une analyse antivirus détaillée. Le rapport Malwarebytes' Anti-Malware 1.11 répertorie 43 fichiers infectés et plusieurs clés ou valeurs du registre, notamment des composants FakeAlert, Adware.MyWebSearch et Trojan.Agent. D'autres échanges évoquent des actions à entreprendre et des résultats variables, certains préconisant une approche guidée par des outils système et l'usage éventuel d'Internet Explorer. Important point: plusieurs éléments infectés se trouvent dans les restaurations système (System Volume Information), ce qui complexifie la suppression et peut nécessiter une purge ciblée après restauration.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Salt quel est ton antivirus,anti-spywareet pare-feu ?
    0
    1. wello
      mon antivirus c avast et apres mes parefeu c celui de windows. j'ai fai les scan Hijackthis et combofix
      0
      1. wello
        ComboFix 08-05-01.3 - Romain RIVIERE 2008-05-03 16:28:50.2 - NTFSx86
        Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.552 [GMT 2:00]
        Endroit: C:\Documents and Settings\Romain RIVIERE\Bureau\ComboFix.exe

        [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
        .

        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        ---- Previous Run -------
        .
        C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
        C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.url
        C:\Documents and Settings\All Users\Menu Démarrer\Security Troubleshooting.url
        C:\Documents and Settings\Romain RIVIERE\Application Data\macromedia\Flash Player\#SharedObjects\52U9Q7LY\iforex.com
        C:\Documents and Settings\Romain RIVIERE\Application Data\macromedia\Flash Player\#SharedObjects\52U9Q7LY\iforex.com\Emerp\Events\flash_object.swf\user_data.sol
        C:\Documents and Settings\Romain RIVIERE\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com
        C:\Documents and Settings\Romain RIVIERE\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com\settings.sol
        c:\Documents and Settings\Romain RIVIERE\Local Settings\Application Data\peglgcsqe.dat
        c:\Documents and Settings\Romain RIVIERE\Local Settings\Application Data\peglgcsqe_nav.dat
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Application Data\peglgcsqe_navps.dat
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA.cfg
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA0.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA1.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA2.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA3.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA4.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA5.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA6.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA7.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA8.che
        C:\Documents and Settings\Romain RIVIERE\Local Settings\Temporary Internet Files\MUZAoDA9.che
        C:\Program Files\myglobalsearch
        C:\Program Files\myglobalsearch\bar\1.bin\M9PLUGIN.DLL
        C:\Program Files\myglobalsearch\bar\1.bin\MGSBAR.DLL
        C:\WINDOWS\qadovnel.dll
        C:\WINDOWS\system32\aybeg.bak1
        C:\WINDOWS\system32\aybeg.ini
        C:\WINDOWS\system32\bsva-egihsg52.exe
        C:\WINDOWS\system32\emesx.dll
        C:\WINDOWS\system32\fhhkj.bak1
        C:\WINDOWS\system32\fhhkj.ini
        C:\WINDOWS\system32\rqtss.bak1
        C:\WINDOWS\system32\rqtss.ini
        C:\WINDOWS\system32\smp
        C:\WINDOWS\system32\smp\msrc.exe
        C:\WINDOWS\system32\utstv.bak1
        C:\WINDOWS\system32\utstv.ini
        C:\WINDOWS\system32\xxyayYsr.dll
        C:\WINDOWS\xbaqktfv.exe

        .
        ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        -------\Legacy_PERFORMANCE_MONITOR

        ((((((((((((((((((((((((((((( Fichiers créés 2008-04-03 to 2008-05-03 ))))))))))))))))))))))))))))))))))))
        .

        2008-05-03 16:24 . 2008-05-03 16:24 106,496 --a------ C:\WINDOWS\system32\mlgxszkx.exe
        2008-05-03 15:52 . 2008-05-03 15:52 <REP> d-------- C:\Program Files\Trend Micro
        2008-05-01 20:57 . 2008-05-01 20:57 102,400 --a------ C:\WINDOWS\system32\pslupqvu.exe
        2008-05-01 15:09 . 2008-05-01 15:00 691,545 --a------ C:\WINDOWS\unins000.exe
        2008-05-01 15:09 . 2008-05-01 15:09 2,564 --a------ C:\WINDOWS\unins000.dat
        2008-04-30 23:34 . 2008-04-30 23:34 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\hulqpyvc
        2008-04-30 23:33 . 2008-04-30 23:33 94,208 --a------ C:\WINDOWS\system32\zsxsfqzg.exe
        2008-04-17 00:06 . 2008-04-27 18:04 <REP> d-------- C:\Program Files\TrackMania Nations ESWC
        2008-04-11 23:26 . 2008-04-11 23:26 <REP> d-------- C:\Program Files\Focus home Interactive
        2008-04-04 22:50 . 2008-04-04 22:50 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
        2008-04-04 22:46 . 2008-04-04 22:49 <REP> d--h----- C:\Program Files\Zero G Registry
        2008-04-04 22:45 . 2008-04-04 22:45 <REP> d--h----- C:\Documents and Settings\Romain RIVIERE\InstallAnywhere

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-05-01 15:37 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
        2008-05-01 14:47 --------- d-----w C:\Program Files\Spybot - Search & Destroy
        2008-04-24 14:15 --------- d-----w C:\Program Files\SmartCom
        2008-04-20 15:59 --------- d-----w C:\Program Files\DivX
        2008-04-16 17:36 --------- d--h--w C:\Program Files\InstallShield Installation Information
        2008-04-16 17:32 --------- d-----w C:\Documents and Settings\Romain RIVIERE\Application Data\My Games
        2008-04-11 04:36 --------- d-----w C:\Program Files\Messenger Plus! Live
        2008-03-31 21:25 831,488 ----a-w C:\WINDOWS\system32\divx_xx0a.dll
        2008-03-31 21:25 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
        2008-03-31 21:25 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
        2008-03-31 21:25 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
        2008-03-31 21:25 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
        2008-03-31 21:25 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
        2008-03-30 08:30 --------- dc----w C:\Documents and Settings\All Users\Application Data\InstallShield
        2008-03-30 08:23 --------- d-----w C:\Program Files\gPotato.eu
        2008-03-30 08:23 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
        2008-03-24 10:27 --------- d-----w C:\Program Files\OpenOffice.org 2.3
        2008-03-24 10:26 --------- d-----w C:\Program Files\Java
        2008-03-21 20:30 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
        2008-03-21 20:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
        2008-03-21 20:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
        2008-03-21 20:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
        2008-03-21 20:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
        2008-03-21 20:28 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
        2008-03-21 20:28 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
        2008-03-21 20:28 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
        2008-03-21 20:28 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
        2008-03-21 20:28 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
        2008-03-21 20:28 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
        2008-03-21 20:28 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
        2008-03-21 20:28 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
        2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
        2008-03-15 12:23 --------- d-----w C:\Program Files\Canon
        2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
        2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
        2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
        2006-10-07 11:02 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
        2007-12-01 15:22 594,944 ----a-w C:\Program Files\mozilla firefox\plugins\MannequinPlayer2.dll
        .

        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        REGEDIT4
        *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 16:08 65536]
        "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 12:00 15360]
        "eMuleAutoStart"="C:\Program Files\eMule\emule.exe" [ ]
        "Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2007-02-05 05:05 4354048]
        "idol barb"="C:\DOCUME~1\ROMAIN~1\APPLIC~1\ENCMATH\send axis.exe" [ ]
        "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
        "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-04-01 18:35 3587120]
        "qloreiag"="C:\WINDOWS\system32\zsxsfqzg.exe" [2008-04-30 23:33 94208]
        "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
        "mnjxghoi"="C:\WINDOWS\system32\pslupqvu.exe" [2008-05-01 20:57 102400]
        "jbfgbsat"="C:\WINDOWS\system32\mlgxszkx.exe" [2008-05-03 16:24 106496]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-07-19 20:09 94208]
        "igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-07-19 20:06 77824]
        "igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-07-19 20:10 114688]
        "LtMoh"="C:\Program Files\ltmoh\Ltmoh.exe" [2003-09-06 19:16 184320]
        "AGRSMMSG"="AGRSMMSG.exe" [2004-12-22 10:10 88358 C:\WINDOWS\agrsmmsg.exe]
        "Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2004-03-24 07:40 196608]
        "CeEKEY"="C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe" [2005-09-06 14:04 671744]
        "TPNF"="C:\Program Files\TOSHIBA\TouchPad\TPTray.exe" [2005-08-25 19:11 53248]
        "HWSetup"="C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe" [2004-05-01 13:45 28672]
        "SVPWUTIL"="C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe" [2004-05-01 13:45 65536]
        "Zooming"="ZoomingHook.exe" [2005-06-06 09:58 24576 C:\WINDOWS\system32\ZoomingHook.exe]
        "TCtryIOHook"="TCtrlIOHook.exe" [2005-08-22 16:49 28672 C:\WINDOWS\system32\TCtrlIOHook.exe]
        "TPSMain"="TPSMain.exe" [2005-08-12 11:14 266240 C:\WINDOWS\system32\TPSMain.exe]
        "SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 09:24 118784]
        "TFncKy"="TFncKy.exe" []
        "PadTouch"="C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe" [2005-08-30 12:31 1077328]
        "Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-04-05 16:25 73728]
        "NDSTray.exe"="NDSTray.exe" []
        "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-05-31 05:33 122941]
        "CFSServ.exe"="CFSServ.exe" []
        "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 12:52 221184]
        "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20 866584]
        "vptray"="C:\Program Files\NavNT\vptray.exe" [2001-09-26 18:06 73728]
        "SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [2005-01-24 19:58 81920]
        "SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-09-20 09:23 132624]
        "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-12-11 11:56 286720]
        "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
        "ISUSPM Startup"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" [ ]
        "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-08-11 15:30 81920]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
        "Spybot - Search & Destroy"="C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" [2008-01-28 11:43 5146448]

        [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
        "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 12:00 15360]
        "DWQueuedReporting"="C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 15:38 39264]

        C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
        Bluetooth Monitor.lnk - C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe [2007-03-25 13:17:18 65536]
        Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
        Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 22:05:56 65588]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
        "AllowLegacyWebView"= 1 (0x1)
        "AllowUnhashedWebView"= 1 (0x1)

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
        "2UkcP6q1p9"= C:\Documents and Settings\All Users\Application Data\hulqpyvc\rcfgbejq.exe

        [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
        "{88485281-8b4b-4f8d-9ede-82e29a064277}"= C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 17:51 192512]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cbxxwtt]
        cbxxwtt.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\hggdbya]
        hggdbya.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\jkkkhgh]
        jkkkhgh.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\mljklih]
        mljklih.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pmnmmml]
        pmnmmml.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qommnkk]
        qommnkk.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\urqpmml]
        urqpmml.dll

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\xxywutq]
        xxywutq.dll

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
        "%windir%\\system32\\sessmgr.exe"=
        "C:\\Program Files\\Messenger\\msmsgs.exe"=
        "C:\\Program Files\\Toshiba\\ConfigFree\\CFXFER.exe"=
        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
        "C:\\Program Files\\Toshiba\\Accessibility\\TAccessibility.exe"=
        "C:\\Program Files\\Shareaza\\Shareaza.exe"=
        "C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
        "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
        "C:\\WINDOWS\\system32\\muzapp.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
        "C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=

        R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
        R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
        S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2007-11-24 15:35]
        S3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-03-24 16:36]

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
        \Shell\AutoRun\command - E:\LaunchU3.exe -a

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6cb8e260-e1bc-11db-be9a-000fb0e24785}]
        \Shell\AutoRun\command - E:\autorun.exe

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7cdbab40-b9fe-11dc-802c-00166f63b368}]
        \Shell\AutoRun\command - E:\LaunchU3.exe -a

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{acd768b0-586d-11dc-bf85-00166f63b368}]
        \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL

        .
        Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
        "2008-04-21 10:48:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
        - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
        "2008-05-03 14:25:34 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
        - C:\Program Files\Windows Defender\MpCmdRun.exe
        .
        **************************************************************************

        catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-05-03 16:31:18
        Windows 5.1.2600 Service Pack 2 NTFS

        Balayage processus cachés ...

        Balayage caché autostart entries ...

        Balayage des fichiers cachés ...

        Scan terminé avec succès
        Les fichiers cachés: 0

        **************************************************************************
        .
        --------------------- DLLs a chargé sous des processus courants ---------------------

        PROCESS: C:\WINDOWS\system32\winlogon.exe
        -> C:\WINDOWS\system32\NavLogon.dll
        .
        Temps d'accomplissement: 2008-05-03 16:33:08
        ComboFix-quarantined-files.txt 2008-05-03 14:32:37

        Pre-Run: 37,730,488,320 octets libres
        Post-Run: 37,723,545,600 octets libres

        240 --- E O F --- 2008-05-02 04:40:35
        0
        1. wello
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 16:30, on 2008-05-03
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16640)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Windows Defender\MsMpEng.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Documents and Settings\All Users\Application Data\hulqpyvc\rcfgbejq.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\WINDOWS\system32\igfxpers.exe
          C:\Program Files\ltmoh\Ltmoh.exe
          C:\WINDOWS\AGRSMMSG.exe
          C:\Program Files\Apoint2K\Apoint.exe
          C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
          C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
          C:\WINDOWS\system32\ZoomingHook.exe
          C:\WINDOWS\system32\TCtrlIOHook.exe
          C:\WINDOWS\system32\TPSMain.exe
          C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
          C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
          C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
          C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
          C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
          C:\WINDOWS\system32\dla\tfswctrl.exe
          C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
          C:\WINDOWS\system32\LVCOMSX.EXE
          C:\Program Files\Windows Defender\MSASCui.exe
          C:\Program Files\NavNT\vptray.exe
          C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
          C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
          C:\WINDOWS\system32\TPSBattM.exe
          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
          C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
          C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
          C:\Program Files\Apoint2K\Apntex.exe
          C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
          C:\Program Files\Shareaza\Shareaza.exe
          C:\WINDOWS\system32\mlgxszkx.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
          C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          C:\WINDOWS\system32\CF6774.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          C:\WINDOWS\system32\CF6774.exe
          C:\WINDOWS\explorer.exe
          C:\WINDOWS\system32\CF6774.exe
          C:\ComboFix\pv.cfexe
          C:\ComboFix\findstr.cfexe
          C:\ComboFix\mtee.cfexe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file)
          O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
          O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
          O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
          O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
          O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
          O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
          O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
          O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
          O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
          O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
          O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
          O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
          O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
          O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
          O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
          O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
          O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
          O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
          O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
          O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
          O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
          O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
          O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
          O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
          O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
          O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
          O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
          O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
          O4 - HKCU\..\Run: [idol barb] C:\DOCUME~1\ROMAIN~1\APPLIC~1\ENCMATH\send axis.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
          O4 - HKCU\..\Run: [qloreiag] C:\WINDOWS\system32\zsxsfqzg.exe
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKCU\..\Run: [mnjxghoi] C:\WINDOWS\system32\pslupqvu.exe
          O4 - HKCU\..\Run: [jbfgbsat] C:\WINDOWS\system32\mlgxszkx.exe
          O4 - HKLM\..\Policies\Explorer\Run: [2UkcP6q1p9] C:\Documents and Settings\All Users\Application Data\hulqpyvc\rcfgbejq.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Bluetooth Monitor.lnk = ?
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
          O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
          O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
          O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
          O20 - Winlogon Notify: cbxxwtt - cbxxwtt.dll (file missing)
          O20 - Winlogon Notify: hggdbya - hggdbya.dll (file missing)
          O20 - Winlogon Notify: jkkkhgh - jkkkhgh.dll (file missing)
          O20 - Winlogon Notify: mljklih - mljklih.dll (file missing)
          O20 - Winlogon Notify: pmnmmml - pmnmmml.dll (file missing)
          O20 - Winlogon Notify: qommnkk - qommnkk.dll (file missing)
          O20 - Winlogon Notify: urqpmml - urqpmml.dll (file missing)
          O20 - Winlogon Notify: xxywutq - xxywutq.dll (file missing)
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
          O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
          O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
          O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
          O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
          O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
          O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
          0
          1. Utilisateur anonyme
            Re alors désinstalle tous tes logiciel de sécurité. Et installe AntiVir,Malwarebytes Anti-Malware et Kerio.

            AntiVir: https://www.01net.com/outils/telecharger/windows/Securite/antivirus-antitrojan/fiches/tele13198.html
            Tutoriel AntiVir: https://www.malekal.com/avira-free-security-antivirus-gratuit/

            Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
            Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm

            Kerio: https://www.01net.com/outils/telecharger/windows/Securite/firewall/fiches/tele22418.html
            Tutoriel Kerio: https://forums.cnetfrance.fr

            PS: TU LES INSTALLES SEULEMENT ET TU NE FAIS PAS D'ANALYSE. TU FAIS UNE MISE A JOUR A ANTIVIR ET MALWAREBYTES ANTI-MALWARE. VOILA FAIT VITE.
            0
        3. wello
          ok merci. je te dit si le problème est résolu ou non. Merci d'avance.
          0
          1. Utilisateur anonyme
            Ne fais aucune analyse sans mon accord.
            0
        4. wello
          J'ai tout installer et redémarrer mon PC je fais quoi maintenant?
          0
          1. wello
            J'ai tous les virus qui était bloqué par avast qui on besoin d'une autororisation sur Antivir. je met move in Quarantaine ou denied acess?
            0
            1. Utilisateur anonyme
              Alors déjà je t'ai dit de supprimer tous les autres logiciel de sécurité que t'as tu garde juste AntiVir,Malwarebytes Anti-Malware et Kerio. Et si il détecte un virus tu clique sur "delete"

              Tu fais un scan en mode sans échec avec AntiVir. Tu lances le scan et si il détecte un virus (normalement oui) tu cliques sur "delete" et "apply sélection to all following détections. (pour qu'il le supprimes automatiquement). A la fin du scan tu cliques sur "report" tu redémarre en mode normal puis tu me postes le rapport.

              Mode sans Echec:

              Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
              Sélectionner "Mode sans échec" et appuie sur [Entrée]
              Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
              Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm

              Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

              PS: JE TE CONSEILLE D'ENREGISTRER CE MESSAGE DANS TON BUREAU OU CAS OU.
              0
          2. wello
            Avira AntiVir Personal
            Report file date: samedi 3 mai 2008 18:14

            Scanning for 1248213 virus strains and unwanted programs.

            Licensed to: Avira AntiVir PersonalEdition Classic
            Serial number: 0000149996-ADJIE-0001
            Platform: Windows XP
            Windows version: (Service Pack 2) [5.1.2600]
            Boot mode: Save mode
            Username: Romain RIVIERE
            Computer name: YOUR-AB6CD29F8E

            Version information:
            BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
            AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
            AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
            LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
            LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
            ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
            ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
            ANTIVIR2.VDF : 7.0.3.197 1260032 Bytes 22/04/2008 15:22:59
            ANTIVIR3.VDF : 7.0.3.243 276992 Bytes 02/05/2008 15:23:02
            Engineversion : 8.1.0.37
            AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
            AESCRIPT.DLL : 8.1.0.28 233851 Bytes 03/05/2008 15:23:30
            AESCN.DLL : 8.1.0.15 119157 Bytes 03/05/2008 15:23:28
            AERDL.DLL : 8.1.0.20 418165 Bytes 03/05/2008 15:23:22
            AEPACK.DLL : 8.1.1.4 364918 Bytes 03/05/2008 15:23:16
            AEOFFICE.DLL : 8.1.0.18 192890 Bytes 03/05/2008 15:23:12
            AEHEUR.DLL : 8.1.0.21 1196407 Bytes 03/05/2008 15:23:10
            AEHELP.DLL : 8.1.0.14 115063 Bytes 03/05/2008 15:23:06
            AEGEN.DLL : 8.1.0.18 299381 Bytes 03/05/2008 15:23:05
            AEEMU.DLL : 8.1.0.5 430450 Bytes 07/04/2008 15:34:43
            AECORE.DLL : 8.1.0.27 168310 Bytes 03/05/2008 15:23:03
            AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
            AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
            AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
            AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
            AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
            AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
            SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
            SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
            NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
            RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
            RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

            Configuration settings for the scan:
            Jobname..........................: Complete system scan
            Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
            Logging..........................: low
            Primary action...................: interactive
            Secondary action.................: ignore
            Scan master boot sector..........: on
            Scan boot sector.................: on
            Boot sectors.....................: C:,
            Scan memory......................: on
            Process scan.....................: on
            Scan registry....................: on
            Search for rootkits..............: off
            Scan all files...................: Intelligent file selection
            Scan archives....................: on
            Recursion depth..................: 20
            Smart extensions.................: on
            Macro heuristic..................: on
            File heuristic...................: medium

            Start of the scan: samedi 3 mai 2008 18:14

            The scan of running processes will be started
            Scan process 'avscan.exe' - '1' Module(s) have been scanned
            Scan process 'avcenter.exe' - '1' Module(s) have been scanned
            Scan process 'explorer.exe' - '1' Module(s) have been scanned
            Scan process 'svchost.exe' - '1' Module(s) have been scanned
            Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
            Scan process 'svchost.exe' - '1' Module(s) have been scanned
            Scan process 'svchost.exe' - '1' Module(s) have been scanned
            Scan process 'lsass.exe' - '1' Module(s) have been scanned
            Scan process 'services.exe' - '1' Module(s) have been scanned
            Scan process 'winlogon.exe' - '1' Module(s) have been scanned
            Scan process 'csrss.exe' - '1' Module(s) have been scanned
            Scan process 'smss.exe' - '1' Module(s) have been scanned
            12 processes with 12 modules were scanned

            Starting master boot sector scan:
            Master boot sector HD0
            [INFO] No virus was found!

            Start scanning boot sectors:
            Boot sector 'C:\'
            [INFO] No virus was found!

            Starting to scan the registry.
            C:\Documents and Settings\All Users\Application Data\hulqpyvc\rcfgbejq.exe
            [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
            [NOTE] The file was deleted!

            The registry was scanned ( '59' files ).

            Starting the file scan:

            Begin scan in 'C:\'
            C:\pagefile.sys
            [WARNING] The file could not be opened!
            C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Quarantine\{00000BF6-0000-0000-7B22-11E66E24FC91}\DATA.CAB
            [0] Archive type: CAB (Microsoft)
            --> RESOURCE1
            [1] Archive type: HIDDEN
            --> FIL\C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\TEMP\AVSCAN-20080503-181442-3060A284\00000000-39A2EBC6.av$
            [DETECTION] Contains detection pattern of the dropper DR/SaveNow.Z.25
            [NOTE] The file was deleted!
            C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Quarantine\{00002A3A-0000-0000-B5A8-A9E83CEFD432}\DATA.CAB
            [0] Archive type: CAB (Microsoft)
            --> RESOURCE1
            [1] Archive type: HIDDEN
            --> FIL\C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\TEMP\AVSCAN-20080503-181442-3060A284\00000000-3B63AD17.av$
            [DETECTION] Contains detection pattern of the dropper DR/SaveNow.Z.25
            [NOTE] The file was deleted!
            C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Quarantine\{00004518-0000-0000-1CDD-620FCF4DCB71}\DATA.CAB
            [0] Archive type: CAB (Microsoft)
            --> RESOURCE7
            [1] Archive type: HIDDEN
            --> MEM\AV00000158.AV$
            [DETECTION] Is the Trojan horse TR/Pakes.akr.1
            [NOTE] The file was deleted!
            C:\QooBox\Quarantine\C\WINDOWS\qadovnel.dll.vir
            [DETECTION] Is the Trojan horse TR/Vapsup.ept.1
            [NOTE] The file was deleted!
            C:\WINDOWS\system32\drivers\sptd.sys
            [WARNING] The file could not be opened!

            End of the scan: samedi 3 mai 2008 19:17
            Used time: 1:02:57 min

            The scan has been done completely.

            7428 Scanning directories
            313599 Files were scanned
            5 viruses and/or unwanted programs were found
            0 Files were classified as suspicious:
            5 files were deleted
            0 files were repaired
            0 files were moved to quarantine
            0 files were renamed
            2 Files cannot be scanned
            313594 Files not concerned
            7882 Archives were scanned
            2 Warnings
            5 Notes
            0
            1. Utilisateur anonyme
              ok maintenant fais ceci:

              2) Redémarre en "Mode sans échec"

              Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
              Sélectionner "Mode sans échec" et appuie sur [Entrée]
              Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
              Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm

              Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

              3) Scan avec Malwarebyte's Anti-Malware

              Lance Malwarebyte's Anti-Malware
              Onglet "Recherche" >>> coche Executer un exame complet >>> Rechercher sélectionne tes disques durs puis clique sur Lancer l’examen
              A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
              Suppression des éléments détectés >>>> clique sur Supprimer la sélection
              S'il t'es demandé de redémarrer >>> clique sur "Yes"

              --> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.
              0
          3. wello
            dsl j'ai été un peu long. voici le rapport du scan

            Malwarebytes' Anti-Malware 1.11
            Version de la base de données: 599

            Type de recherche: Examen complet (C:\|D:\|)
            Eléments examinés: 92198
            Temps écoulé: 1 hour(s), 38 minute(s), 25 second(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 4
            Valeur(s) du Registre infectée(s): 2
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 0
            Fichier(s) infecté(s): 43

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{37b85a2b-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Audio-Video Enhance (Trojan.Zlob) -> No action taken.
            HKEY_CURRENT_USER\Software\The Weather Channel (Adware.Hotbar) -> No action taken.

            Valeur(s) du Registre infectée(s):
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0e1230f8-ea50-42a9-983c-d22abc2eeb4c} (Fake.Dropped.Malware) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{37b85a29-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> No action taken.

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            (Aucun élément nuisible détecté)

            Fichier(s) infecté(s):
            C:\System Volume Information\_restore{ECB3AD12-64E1-4857-9A37-361E4DEA76A5}\RP497\A0089884.exe (Trojan.FakeAlert) -> No action taken.
            C:\System Volume Information\_restore{ECB3AD12-64E1-4857-9A37-361E4DEA76A5}\RP497\A0089885.exe (Trojan.FakeAlert) -> No action taken.
            C:\System Volume Information\_restore{ECB3AD12-64E1-4857-9A37-361E4DEA76A5}\RP497\A0089886.exe (Trojan.FakeAlert) -> No action taken.
            C:\System Volume Information\_restore{ECB3AD12-64E1-4857-9A37-361E4DEA76A5}\RP497\A0089892.exe (Trojan.FakeAlert) -> No action taken.
            C:\WINDOWS\system32\akttzn.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\anticipator.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\awtoolb.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\bdn.com (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\dpcproxy.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\hoproxy.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\hxiwlgpm.dat (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\hxiwlgpm.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\medup012.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\msgp.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\msnbho.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\mssecu.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\msvchost.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\mtr2.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\mwin32.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\netode.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\newsd32.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\ps1.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\psof1.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\psoft1.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\regc64.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\regm64.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\Rundl1.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\sncntr.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\ssurf022.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\ssvchost.com (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\ssvchost.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\sysreq.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\taack.dat (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\taack.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\temp#01.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\thun.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\thun32.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\VBIEWER.OCX (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\vbsys2.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\vcatchpi.dll (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\winlogonpc.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\winsystem.exe (Trojan.Agent) -> No action taken.
            C:\WINDOWS\system32\WINWGPX.EXE (Trojan.Agent) -> No action taken.
            0
            1. Utilisateur anonyme
              As tu supprimé tous les fichiers infecté.
              0
          4. wello
            je vien de le faire mais pas en mode sans échec.
            0
            1. Utilisateur anonyme
              ok mais maintenant fais un scan en ligne avec Internet Explorer: http://www.bitdefender.fr/scan_fr/scan8/ie.html
              0
          5. wello
            et apres?
            0
            1. Utilisateur anonyme
              Ok tu as fini le scan.
              0
          6. wello
            non ca a pas marché. J'ai essayer plusieurs fois ca ne marche toujours pas
            0
            1. Utilisateur anonyme
              Il faut le faire avec Internet Explorer.
              0
          7. wello
            oui je sais mais ca mettait 28h donc j'ai arrêter
            0
            1. Utilisateur anonyme
              Comment sa fessais.
              0
          8. wello
            ya pas d'autre possibilité?
            0
            1. Utilisateur anonyme
              Non poste moi un rapport HijackThis.
              0
          9. wello
            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 15:02:54, on 04/05/2008
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.16640)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\Windows Defender\MsMpEng.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            C:\WINDOWS\system32\drivers\CDAC11BA.EXE
            C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\WINDOWS\system32\hkcmd.exe
            C:\WINDOWS\system32\igfxpers.exe
            C:\Program Files\ltmoh\Ltmoh.exe
            C:\WINDOWS\AGRSMMSG.exe
            C:\Program Files\Apoint2K\Apoint.exe
            C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
            C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
            C:\WINDOWS\system32\ZoomingHook.exe
            C:\WINDOWS\system32\TCtrlIOHook.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\WINDOWS\system32\TPSMain.exe
            C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
            C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
            C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
            C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
            C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
            C:\WINDOWS\system32\dla\tfswctrl.exe
            C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
            C:\WINDOWS\system32\LVCOMSX.EXE
            C:\Program Files\Windows Defender\MSASCui.exe
            C:\Program Files\NavNT\vptray.exe
            C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
            C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
            C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
            C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
            C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
            C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
            C:\WINDOWS\system32\TPSBattM.exe
            C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
            C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe
            C:\Program Files\Apoint2K\Apntex.exe
            C:\Program Files\Shareaza\Shareaza.exe
            C:\Program Files\Messenger\msmsgs.exe
            C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
            C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
            C:\Program Files\Windows Live\Messenger\usnsvc.exe
            C:\WINDOWS\system32\igfxsrvc.exe
            C:\Program Files\Microsoft Office\Office\WINWORD.EXE
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
            C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
            C:\WINDOWS\system32\wuauclt.exe
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
            O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
            O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
            O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
            O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
            O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
            O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
            O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
            O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
            O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
            O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
            O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
            O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
            O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
            O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
            O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
            O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
            O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
            O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
            O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
            O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
            O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
            O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
            O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
            O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
            O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
            O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
            O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
            O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
            O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
            O4 - HKCU\..\Run: [idol barb] C:\DOCUME~1\ROMAIN~1\APPLIC~1\ENCMATH\send axis.exe
            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
            O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
            O4 - HKCU\..\Run: [qloreiag] C:\WINDOWS\system32\zsxsfqzg.exe
            O4 - HKCU\..\Run: [mnjxghoi] C:\WINDOWS\system32\pslupqvu.exe
            O4 - HKCU\..\Run: [jbfgbsat] C:\WINDOWS\system32\mlgxszkx.exe
            O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
            O4 - Global Startup: Bluetooth Monitor.lnk = ?
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
            O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
            O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
            O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
            O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
            O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
            O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
            O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
            O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
            O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
            O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
            O20 - Winlogon Notify: cbxxwtt - cbxxwtt.dll (file missing)
            O20 - Winlogon Notify: hggdbya - hggdbya.dll (file missing)
            O20 - Winlogon Notify: jkkkhgh - jkkkhgh.dll (file missing)
            O20 - Winlogon Notify: mljklih - mljklih.dll (file missing)
            O20 - Winlogon Notify: pmnmmml - pmnmmml.dll (file missing)
            O20 - Winlogon Notify: qommnkk - qommnkk.dll (file missing)
            O20 - Winlogon Notify: urqpmml - urqpmml.dll (file missing)
            O20 - Winlogon Notify: xxywutq - xxywutq.dll (file missing)
            O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
            O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
            O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
            O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
            O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
            O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
            O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
            O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
            0
            1. wello
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 15:02:54, on 04/05/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16640)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Windows Defender\MsMpEng.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
              C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\WINDOWS\system32\hkcmd.exe
              C:\WINDOWS\system32\igfxpers.exe
              C:\Program Files\ltmoh\Ltmoh.exe
              C:\WINDOWS\AGRSMMSG.exe
              C:\Program Files\Apoint2K\Apoint.exe
              C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
              C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
              C:\WINDOWS\system32\ZoomingHook.exe
              C:\WINDOWS\system32\TCtrlIOHook.exe
              C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
              C:\WINDOWS\system32\TPSMain.exe
              C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
              C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
              C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
              C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
              C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
              C:\WINDOWS\system32\dla\tfswctrl.exe
              C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
              C:\WINDOWS\system32\LVCOMSX.EXE
              C:\Program Files\Windows Defender\MSASCui.exe
              C:\Program Files\NavNT\vptray.exe
              C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
              C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
              C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
              C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
              C:\WINDOWS\system32\TPSBattM.exe
              C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
              C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe
              C:\Program Files\Apoint2K\Apntex.exe
              C:\Program Files\Shareaza\Shareaza.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
              C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\WINDOWS\system32\igfxsrvc.exe
              C:\Program Files\Microsoft Office\Office\WINWORD.EXE
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
              O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
              O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
              O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
              O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
              O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
              O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
              O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
              O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
              O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
              O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
              O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
              O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
              O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
              O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
              O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
              O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
              O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
              O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
              O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
              O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
              O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
              O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
              O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
              O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
              O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
              O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
              O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
              O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
              O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
              O4 - HKCU\..\Run: [idol barb] C:\DOCUME~1\ROMAIN~1\APPLIC~1\ENCMATH\send axis.exe
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
              O4 - HKCU\..\Run: [qloreiag] C:\WINDOWS\system32\zsxsfqzg.exe
              O4 - HKCU\..\Run: [mnjxghoi] C:\WINDOWS\system32\pslupqvu.exe
              O4 - HKCU\..\Run: [jbfgbsat] C:\WINDOWS\system32\mlgxszkx.exe
              O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
              O4 - Global Startup: Bluetooth Monitor.lnk = ?
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
              O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
              O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
              O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
              O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
              O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
              O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
              O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
              O20 - Winlogon Notify: cbxxwtt - cbxxwtt.dll (file missing)
              O20 - Winlogon Notify: hggdbya - hggdbya.dll (file missing)
              O20 - Winlogon Notify: jkkkhgh - jkkkhgh.dll (file missing)
              O20 - Winlogon Notify: mljklih - mljklih.dll (file missing)
              O20 - Winlogon Notify: pmnmmml - pmnmmml.dll (file missing)
              O20 - Winlogon Notify: qommnkk - qommnkk.dll (file missing)
              O20 - Winlogon Notify: urqpmml - urqpmml.dll (file missing)
              O20 - Winlogon Notify: xxywutq - xxywutq.dll (file missing)
              O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
              O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
              O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
              O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
              O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
              O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
              O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
              0

              Discussions similaires

              Problème avec "PUADIManager:Win32/OfferCore
              Knaki

              3 réponses
              PUADlManager:Win32/OfferCore
              tenmalade

              2 réponses
              PUADlManager:Win32/OfferCore
              bernardarrad

              3 réponses
              PUA:Win32/InstallCore detecté par windows sécurité
              thetib

              11 réponses
              Pb Windows 7, .EXE n'est pas app win32 valide
              Witeric

              15 réponses