Trojan vundo comment s'en debarrassé???

dr troy sache antivir est efficace pour l instant j ai bien dit pour l instant mais que le meilleur antivirus c est toi.
donc fait attention a ce que tu fais.

1) Télécharge Malwarebytes' Anti-Malware.

*Télécharge et installe Malwarebyte's Anti-Malware
*http://www.malwarebytes.org/mbam/program/mbam-setup.exe
*A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée. >>> clique sur OK
*Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur ton Bureau.
*Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur OK
*Laisse les Mises à jour se télécharger

*** Referme le programme ***

2) Redémarre en "Mode sans échec"

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm

Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

3) Scan avec Malwarebyte's Anti-Malware

*Lance Malwarebyte's Anti-Malware
*Puis vs dans l'onglet "Recherche" puis coche "Exécuter un examen complet" puis "Rechercher sélectionne tes disques durs" puis clique sur "Lancer l’examen"
*A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
*Suppression des éléments détectés >>>> clique sur Supprimer la sélection
*S'il t'es demandé de redémarrer >>> clique sur "Yes"

*--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.

Salut,

es-tu déja allé voir dans la rubrique Astuces
http://www.commentcamarche.net/faq/sujet 6862 supprimer le trojan vundo virtumonde

Perso, je te conseille de faire également un scan et désinfection avec Malwarebytes Antimalware (MBAM)
Colle le rapport ici
https://www.pcparadise.fr

Une personne sur ce site a témoigné avoir éliminé Vundo avec Superantispyware. A toi de tester si tu le souhaites
https://www.malekal.com/tutoriel-et-guide-superantispyware/

Bonne chance

Zor

Merci de m'avoir répondu,
Voilà j'ai fait ce que vous m'avait dit,ça a pris une bonne heure, et je poste le rapport maintenant.

Malwarebytes' Anti-Malware 1.14
Version de la base de données: 808

20:44:10 31/05/2008
mbam-log-5-31-2008 (20-44-03).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 104646
Temps écoulé: 1 hour(s), 2 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 10

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CA5O2D17 (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CA7KI2DK (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CACTEPJK (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CAL86LTR (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CA2ROH03 (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAC1AL8H (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAE7G963 (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CA2NWDAN (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CA4HO5GR (Trojan.Vundo) -> No action taken.
D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAYJK9AN (Trojan.Vundo) -> No action taken.

Voilà merci

Ok merci mais je supprime en mode sans echec obligatoirement ,ou en mode normal cela va quand meme?

voilà j'ai tout supprimé,je n'ai plus eu d'alerte depuis que j'ai commencé la procedure (3-4 heures) ,cela veut il dire que vundo a été éliminé ou il reste encore des choses à faire?

ok zorinho ,je verrait ça.
Et pour boy94,je ferais le scan demain car ce soir je n'est pas le temps vu que cela dure plusieurs heures.
En tout cas merci beaucoup de votre aide!!!

Rebonsoir,j'ai fait le scan en ligne et je pense que vundo est encore présent.
Voilà le rapport:

BitDefender Online Scanner

Scan report generated at: Sun, Jun 01, 2008 - 21:57:11

Scan path: C:\;D:\;E:\;

Statistics

Time

01:36:48

Files

609112

Folders

7978

Boot Sectors

4

Archives

7314

Packed Files

12126

Results

Identified Viruses

10

Infected Files

35

Suspect Files

0

Warnings

0

Disinfected

0

Deleted Files

35

Engines Info

Virus Definitions

1255532

Engine build

AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins

16

Archive plugins

42

Unpack plugins

7

E-mail plugins

6

System plugins

5

Scan Settings

First Action

Disinfect

Second Action

Delete

Heuristics

Yes

Enable Warnings

Yes

Scanned Extensions

*;

Exclude Extensions

Scan Emails

Yes

Scan Archives

Yes

Scan Packed

Yes

Scan Files

Yes

Scan Boot

Yes

Scanned File

Status

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024632.dll

Infected with: Trojan.Vundo.EOC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024632.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024633.dll

Infected with: Trojan.Vundo.EOC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024633.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024634.dll

Infected with: Trojan.Vundo.EPA

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024634.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024635.dll

Infected with: Trojan.Vundo.EOC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024635.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024637.dll

Infected with: Trojan.Vundo.EOC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024637.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024638.dll

Infected with: Trojan.Vundo.EPA

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024638.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024639.dll

Infected with: Trojan.Vundo.EPA

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024639.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024640.dll

Infected with: Trojan.Vundo.EOC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024640.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024641.dll

Infected with: Trojan.Vundo.EPC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024641.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024643.dll

Infected with: Trojan.Vundo.EPC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024643.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024644.dll

Infected with: Trojan.Vundo.EPA

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024644.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024645.dll

Infected with: Trojan.Vundo.EOC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024645.dll

Deleted

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024646.dll

Infected with: Trojan.Vundo.EPC

C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP109\A0024646.dll

Deleted

D:\Documents and Settings\AISSA BEN\Bureau\virtualdj.exe

Infected with: Backdoor.Pcclient.GV

D:\Documents and Settings\AISSA BEN\Bureau\virtualdj.exe

Deleted

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asm.exe

Detected with: Adware.Altnet.U

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asm.exe

Deleted

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab

Update failed

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asmps.dll

Detected with: Application.Altnetbde.D

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asmps.dll

Disinfection failed

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asmps.dll

Deleted

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab

Update failed

D:\Documents and Settings\Aïssa\Local Settings\Temp\temp.dll

Detected with: Adware.BHO.WRF

D:\Documents and Settings\Aïssa\Local Settings\Temp\temp.dll

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temp\_addon.exe=>(NSIS o)=>zlib_nsis0001

Detected with: Adware.BHO.WRF

D:\Documents and Settings\Aïssa\Local Settings\Temp\_addon.exe=>(NSIS o)=>zlib_nsis0001

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temp\_addon.exe=>(NSIS o)

Update failed

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\BEOSC11I\CA5WUTHN

Infected with: Trojan.Vundo.EPC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\BEOSC11I\CA5WUTHN

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\BEOSC11I\CAGPYDHI

Infected with: Trojan.Vundo.EOC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\BEOSC11I\CAGPYDHI

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\BEOSC11I\CAKHKPKR

Infected with: Trojan.Vundo.EPA

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\BEOSC11I\CAKHKPKR

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CA0LA9XM

Infected with: Trojan.Vundo.EPA

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CA0LA9XM

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CA4PGLS3

Infected with: Trojan.Vundo.EOC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CA4PGLS3

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CAB265NZ

Infected with: Trojan.Vundo.EOC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CAB265NZ

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CADS2T9B

Infected with: Trojan.Vundo.EPA

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CADS2T9B

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CAEJ4VLY

Infected with: Trojan.Vundo.EPC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\CAEJ4VLY

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CACHAHLQ

Infected with: Trojan.Vundo.EPA

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CACHAHLQ

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAG98HCZ

Infected with: Trojan.Vundo.EOC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAG98HCZ

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAGLWDKB

Infected with: Trojan.Vundo.EPC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAGLWDKB

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAO5IV4N

Infected with: Trojan.Vundo.EPA

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\CAO5IV4N

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\setup[1].exe=>(NSIS o)=>zlib_nsis0001

Detected with: Adware.BHO.WRF

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\setup[1].exe=>(NSIS o)=>zlib_nsis0001

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\setup[1].exe=>(NSIS o)

Update failed

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAY7GD89

Infected with: Trojan.Vundo.EOC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAY7GD89

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAYR8HUZ

Infected with: Trojan.Vundo.EOC

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAYR8HUZ

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAZQIHBB

Infected with: Trojan.Vundo.EPA

D:\Documents and Settings\Aïssa\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\CAZQIHBB

Deleted

D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP110\A0025801.exe

Infected with: Backdoor.Pcclient.GV

D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP110\A0025801.exe

Deleted

voilà

Et je reposte un Hijackthis

C:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\Aïssa\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {DF6C2EF2-EF76-4C0C-9A2A-6403D330050E} - C:\WINDOWS\system32\opnkHxUm.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe

Salut

Voilà j'ai fait ce que tu m'a dit ,mais quand tu me dit "cocher les lignes suivantes" dans le rapport hijackthis,c'est bien les cocher et ensuite appuyer sur "fix checked" parce que je ne savait pas trop quoi faire aprés les avoirs cochées donc j'ai cliqué sur fix checked.

Voilà le nouveau rapport bitdefender

Scanner

Scan report generated at: Mon, Jun 02, 2008 - 19:06:12

Scan path: C:\;D:\;E:\;

Statistics

Time

01:23:04

Files

597358

Folders

7217

Boot Sectors

4

Archives

7252

Packed Files

11689

Results

Identified Viruses

3

Infected Files

3

Suspect Files

0

Warnings

0

Disinfected

0

Deleted Files

3

Engines Info

Virus Definitions

1255627

Engine build

AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins

16

Archive plugins

42

Unpack plugins

7

E-mail plugins

6

System plugins

5

Scan Settings

First Action

Disinfect

Second Action

Delete

Heuristics

Yes

Enable Warnings

Yes

Scanned Extensions

*;

Exclude Extensions

Scan Emails

Yes

Scan Archives

Yes

Scan Packed

Yes

Scan Files

Yes

Scan Boot

Yes

Scanned File

Status

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asm.exe

Detected with: Adware.Altnet.U

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asm.exe

Deleted

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab

Update failed

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asmps.dll

Detected with: Application.Altnetbde.D

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asmps.dll

Disinfection failed

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab=>asmps.dll

Deleted

D:\Documents and Settings\AISSA BEN\Local Settings\Temp\asmfiles.cab

Update failed

D:\Documents and Settings\Aïssa\Local Settings\Temp\_addon.exe=>(NSIS o)=>zlib_nsis0001

Detected with: Adware.BHO.WRF

D:\Documents and Settings\Aïssa\Local Settings\Temp\_addon.exe=>(NSIS o)=>zlib_nsis0001

Deleted

D:\Documents and Settings\Aïssa\Local Settings\Temp\_addon.exe=>(NSIS o)

Update failed

Et le nouveau rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:25:54, on 02/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\QuickTime\QTTask.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\APPS\SMP\SmpSys.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\Aïssa\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe

c est bien un bon antivirus et un vrai pare feu, je suis sur que tu utilises le pare feu windows.

a ce moment il en faut un vrai.
si tu comprends l anglais tu as comodo pro firewall 3 ou amor online.
sinon kerio(je crois en francais)et zone alarm.

avoir un vrai pare feu c est pas du luxe.

Ok merci bien,je vais changé et prendre antivir et faire le scan en mode sans echec et posté le rapport, et surement changé de pare feu comme me la conseillé totobetourne.
Par ailleur,j'utilise mozilla firefox comme navigateur,je le trouve mieux qu'IE.
Mon ordi sinon se comporte comme avant quand il n'était pas infecté et je n'ai plus de d'alerte au virus.
Merci beaucoup pour tout.

C'est bon j'ai ANTIVIR, il ne me reste plus que le scan(je posterais le rapport),et j'espere dire au revoir au virus.
Merci encore