Problème avec "svchost.exe"

Salut,

- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.

Merci 1000 fois pour votre disponibilité et la rapidité de votre réponse...

voilà le contenu du bloc notes :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:24:36, on 24/07/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\Ahead\InCD\InCD.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\aop8jub5.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\hphmon05.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avscan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Amd\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar6.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar6.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [aop8jub5] C:\WINDOWS\System32\aop8jub5.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] D:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [avgnt] "D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [neufbox_reminder] "C:\Program Files\Kit ADSL\Wizard\PostInstall_Checker.exe" -r
O4 - HKCU\..\Run: [eq start] C:\DOCUME~1\Amd\APPLIC~1\RDRDRI~1\Five Platform.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\Run: [Microsoft Update] wuamgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Microsoft Update] wuamgrd.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'indexation (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O24 - Desktop Component 0: (no name) - https://images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/1278fb8b-c7f0-4bf3-8dbb-0b5a780536f5/djc2mj-659117f9-0768-446f-844e-8cfbccacbfa8.jpg/v1/fill/w_563,h_729,q_75,strp/old_sweet_memories_by_loganart.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi8xMjc4ZmI4Yi1jN2YwLTRiZjMtOGRiYi0wYjVhNzgwNTM2ZjUvZGpjMm1qLTY1OTExN2Y5LTA3NjgtNDQ2Zi04NDRlLThjZmJjY2FjYmZhOC5qcGciLCJ3aWR0aCI6Ijw9NTYzIiwiaGVpZ2h0IjoiPD03MjkifV1dfQ.j9YMIKtNfjqrHwXIGfN9kwV5Q5Y8ct7jXsanlngxQ78

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Si tu as un problème pour utiliser Lop S&D, regarde dans le tutorial :
http://bibou0007.com/outils-specifiques-f78/tutorial-lop-sd-t956.htm#11431

Voilà, c'est fait !

--------------------\\ Lop S&D 4.2.2-3 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 1 ]
[ USER : Amd ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 24/07/2008 | 2:34:52,80 ] [ PC : XP ]
[ MAJ : 22-07-2008 | 17:35 ]

--------------------\\ Listing des dossiers dans Application Data

[06/09/2003|03:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[24/06/2008|02:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[21/07/2008|15:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[21/07/2008|15:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[06/09/2003|03:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[19/09/2006|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/04/2007|01:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[18/05/2004|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[11/02/2006|08:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/04/2007|01:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
[15/05/2004|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/06/2008|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[24/11/2003|05:04] C:\DOCUME~1\Amd\APPLIC~1\ACD Systems
[24/06/2008|02:57] C:\DOCUME~1\Amd\APPLIC~1\Adobe
[15/09/2003|13:02] C:\DOCUME~1\Amd\APPLIC~1\Ahead
[22/01/2007|01:56] C:\DOCUME~1\Amd\APPLIC~1\BitDownload
[20/08/2004|22:55] C:\DOCUME~1\Amd\APPLIC~1\Creative
[06/09/2003|03:22] C:\DOCUME~1\Amd\APPLIC~1\desktop.ini
[15/04/2008|19:01] C:\DOCUME~1\Amd\APPLIC~1\FileZilla
[17/04/2008|18:49] C:\DOCUME~1\Amd\APPLIC~1\FMZilla
[10/10/2005|20:26] C:\DOCUME~1\Amd\APPLIC~1\GDIPFONTCACHEV1.DAT
[19/09/2006|03:55] C:\DOCUME~1\Amd\APPLIC~1\Google
[17/09/2007|14:40] C:\DOCUME~1\Amd\APPLIC~1\Help
[04/09/2005|01:27] C:\DOCUME~1\Amd\APPLIC~1\Hewlett-Packard
[05/11/2005|01:10] C:\DOCUME~1\Amd\APPLIC~1\Macromedia
[31/07/2006|21:37] C:\DOCUME~1\Amd\APPLIC~1\Media Player Classic
[10/09/2006|11:25] C:\DOCUME~1\Amd\APPLIC~1\Microsoft
[15/09/2003|13:01] C:\DOCUME~1\Amd\APPLIC~1\NeroVision
[06/04/2007|02:37] C:\DOCUME~1\Amd\APPLIC~1\NetMedia Providers
[14/03/2005|07:40] C:\DOCUME~1\Amd\APPLIC~1\Publish Providers
[03/03/2007|11:02] C:\DOCUME~1\Amd\APPLIC~1\rdr drive
[20/06/2008|13:27] C:\DOCUME~1\Amd\APPLIC~1\Real
[04/04/2007|01:25] C:\DOCUME~1\Amd\APPLIC~1\Sonic Foundry
[01/04/2007|00:24] C:\DOCUME~1\Amd\APPLIC~1\Sun
[09/09/2003|04:56] C:\DOCUME~1\Amd\APPLIC~1\Symantec
[24/09/2006|14:41] C:\DOCUME~1\Amd\APPLIC~1\SystemDoctor 2006 Free
[15/08/2005|16:36] C:\DOCUME~1\Amd\APPLIC~1\Ulead Systems
[22/10/2006|23:44] C:\DOCUME~1\Amd\APPLIC~1\update.log
[07/02/2007|03:50] C:\DOCUME~1\Amd\APPLIC~1\vlc
[22/10/2006|23:53] C:\DOCUME~1\Amd\APPLIC~1\WinAntiVirus Pro 2006

[06/09/2003|03:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[06/09/2003|02:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/06/2008|14:11] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[21/07/2008|15:32] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[24/07/2008 02:00][--ah-----] C:\WINDOWS\tasks\8471F34A9CE29F36.job
[24/07/2008 01:16][--a------] C:\WINDOWS\tasks\HP Usg Daily.job
[18/07/2008 17:15][--a------] C:\WINDOWS\tasks\1-Click Maintenance.job
[18/07/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[24/07/2008 02:31][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[18/07/2008 17:30][--a------] C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
[21/07/2008 16:13][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( 8471F34A9CE29F36.job )=( c:\docume~1\amd\applic~1\rdrdri~1\RemoteDartAxis.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[06/09/2003|03:34] C:\Program Files\ACD Systems
[07/03/2006|23:13] C:\Program Files\Adobe
[15/09/2003|13:04] C:\Program Files\Ahead
[09/09/2003|08:14] C:\Program Files\Antares Audio Technologies
[09/09/2003|08:05] C:\Program Files\Arboretum Systems
[15/01/2004|05:04] C:\Program Files\CDex_140b9
[06/09/2003|17:24] C:\Program Files\C-Media 3D Audio
[22/10/2006|23:44] C:\Program Files\Common Files
[29/10/2004|15:57] C:\Program Files\Creative
[22/10/2004|03:51] C:\Program Files\CtDriverInstTemp
[22/10/2004|03:51] C:\Program Files\CWebCam
[09/09/2003|07:48] C:\Program Files\DigiDesign
[29/09/2003|03:55] C:\Program Files\directx
[13/06/2004|23:42] C:\Program Files\DSPFX Virtual Pack
[09/09/2003|08:56] C:\Program Files\FaSoft
[01/04/2007|00:25] C:\Program Files\Fichiers communs
[07/05/2004|04:21] C:\Program Files\Friendly Technologies
[17/02/2007|15:29] C:\Program Files\Google
[04/09/2005|01:05] C:\Program Files\Hewlett-Packard
[04/09/2005|01:16] C:\Program Files\HP
[04/04/2007|01:14] C:\Program Files\InstallShield Installation Information
[14/07/2005|20:01] C:\Program Files\Internet Explorer
[06/05/2006|03:56] C:\Program Files\Kit ADSL
[06/09/2003|03:37] C:\Program Files\Ligos
[06/09/2003|02:36] C:\Program Files\microsoft frontpage
[06/09/2003|03:49] C:\Program Files\Microsoft Office
[20/09/2005|23:47] C:\Program Files\MIKSOFT
[09/10/2004|01:11] C:\Program Files\ModemAdsl
[15/08/2005|20:05] C:\Program Files\MOVAVI
[15/01/2005|01:54] C:\Program Files\Movie Maker
[13/08/2004|02:49] C:\Program Files\MSN Apps
[06/09/2003|02:31] C:\Program Files\MSN Gaming Zone
[22/02/2007|02:25] C:\Program Files\MSN Messenger
[15/10/2003|17:44] C:\Program Files\Native Instruments
[15/01/2005|01:54] C:\Program Files\NetMeeting
[10/08/2006|00:29] C:\Program Files\Norton SystemWorks
[09/09/2003|09:06] C:\Program Files\Orion
[14/04/2006|22:09] C:\Program Files\Outlook Express
[09/09/2003|05:26] C:\Program Files\PhonoXone
[09/09/2003|08:15] C:\Program Files\Qtools
[06/09/2003|03:36] C:\Program Files\SereneScreen
[09/05/2004|07:40] C:\Program Files\Services en ligne
[14/05/2004|04:38] C:\Program Files\Sonic Foundry
[14/05/2004|04:37] C:\Program Files\Sonic Foundry Setup
[09/09/2003|08:50] C:\Program Files\Sonitus-fx
[13/05/2004|17:38] C:\Program Files\SoundForge
[09/09/2003|07:58] C:\Program Files\SpectralDesign
[09/09/2003|09:05] C:\Program Files\Steinberg
[15/05/2004|00:53] C:\Program Files\Symantec
[26/09/2006|04:03] C:\Program Files\SystemDoctor 2006 Free
[09/09/2003|09:04] C:\Program Files\TCWorks
[09/09/2003|08:04] C:\Program Files\Terzoid WaveShop
[09/09/2003|08:13] C:\Program Files\Timeworks
[22/01/2007|15:40] C:\Program Files\TIMI-SOFT
[14/07/2005|20:01] C:\Program Files\Uninstall Information
[09/09/2003|08:12] C:\Program Files\Wave Arts
[09/09/2003|08:50] C:\Program Files\Waves
[15/08/2005|16:17] C:\Program Files\Windows Media Components
[20/02/2006|03:33] C:\Program Files\Windows Media Player
[15/01/2005|01:54] C:\Program Files\Windows NT
[11/08/2004|17:25] C:\Program Files\WindowsUpdate
[01/05/2008|18:03] C:\Program Files\WinRAR
[06/09/2003|02:36] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[06/09/2003|03:34] C:\Program Files\Fichiers communs\ACD Systems
[07/03/2006|23:14] C:\Program Files\Fichiers communs\Adobe
[15/01/2005|05:30] C:\Program Files\Fichiers communs\Adobe Systems Shared
[15/09/2003|12:56] C:\Program Files\Fichiers communs\Ahead
[06/09/2003|03:50] C:\Program Files\Fichiers communs\Designer
[14/08/2005|08:20] C:\Program Files\Fichiers communs\DeskShare Shared
[05/10/2004|15:42] C:\Program Files\Fichiers communs\element5 Shared
[07/05/2004|04:21] C:\Program Files\Fichiers communs\FTL Shared
[15/08/2005|16:17] C:\Program Files\Fichiers communs\InstallShield
[20/02/2005|20:56] C:\Program Files\Fichiers communs\Macromedia
[20/02/2005|20:57] C:\Program Files\Fichiers communs\Macromedia Shared
[04/09/2006|14:00] C:\Program Files\Fichiers communs\Microsoft Shared
[06/09/2003|02:33] C:\Program Files\Fichiers communs\MSSoap
[16/08/2004|16:36] C:\Program Files\Fichiers communs\NSV
[06/09/2003|03:22] C:\Program Files\Fichiers communs\ODBC
[12/05/2005|06:14] C:\Program Files\Fichiers communs\Real
[06/07/2004|15:23] C:\Program Files\Fichiers communs\Services
[06/09/2003|03:22] C:\Program Files\Fichiers communs\SpeechEngines
[15/05/2004|16:12] C:\Program Files\Fichiers communs\Symantec Shared
[14/04/2006|22:09] C:\Program Files\Fichiers communs\System
[22/10/2006|23:26] C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006
[15/08/2005|20:01] C:\Program Files\Fichiers communs\Wise Installation Wizard
[12/05/2005|06:14] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 44 Processus )

iexplore.exe ~ [2584]
iexplore.exe ~ [3684]
iexplore.exe ~ [2144]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\Amd\APPLIC~1\RDRDRI~1

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Amd\APPLIC~1\rdrdri~1
C:\DOCUME~1\Amd\APPLIC~1\BitDownload
C:\DOCUME~1\Amd\APPLIC~1\BitDownload\Data
C:\DOCUME~1\Amd\Cookies\amd@adopt.euroclick[2].txt
C:\WINDOWS\Tasks\8471F34A9CE29F36.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Drv store dale]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\Amd\\APPLIC~1\\RDRDRI~1\\Five Platform.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eq start"="C:\\DOCUME~1\\Amd\\APPLIC~1\\RDRDRI~1\\Five Platform.exe"
"eq start"="C:\\DOCUME~1\\Amd\\APPLIC~1\\RDRDRI~1\\Five Platform.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-24 02:35:44
Windows 5.1.2600 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 62

--------------------\\ Recherche d'autres infections

C:\WINDOWS\Pack.epk
[b]==> EGDACCESS <==/b

[F:2][D:1]-> C:\DOCUME~1\Amd\LOCALS~1\Temp
[F:56][D:0]-> C:\DOCUME~1\Amd\Cookies
[F:3241][D:13]-> C:\DOCUME~1\Amd\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 2:53:00,67

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Mission accomplie :

--------------------\\ Lop S&D 4.2.2-3 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 1 ]
[ USER : Amd ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 24/07/2008 | 3:11:31,63 ] [ PC : XP ]
[ MAJ : 22-07-2008 | 17:35 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Echec ! - C:\DOCUME~1\Amd\APPLIC~1\BitDownload\Data
Supprime! - C:\DOCUME~1\Amd\Cookies\amd@adopt.euroclick[2].txt
Supprime! - C:\WINDOWS\Tasks\8471F34A9CE29F36.job
Supprime! - C:\DOCUME~1\Amd\APPLIC~1\rdrdri~1
Supprime! - C:\DOCUME~1\Amd\APPLIC~1\BitDownload

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\DOCUME~1\Amd\APPLIC~1\WinAntiVirus Pro 2006

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans Application Data

[06/09/2003|03:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
[24/06/2008|02:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[21/07/2008|15:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avg7
[21/07/2008|15:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[06/09/2003|03:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[19/09/2006|00:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[04/04/2007|01:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[18/05/2004|16:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[11/02/2006|08:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/04/2007|01:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SmartSound Software Inc
[15/05/2004|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/06/2008|14:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[24/11/2003|05:04] C:\DOCUME~1\Amd\APPLIC~1\ACD Systems
[24/06/2008|02:57] C:\DOCUME~1\Amd\APPLIC~1\Adobe
[15/09/2003|13:02] C:\DOCUME~1\Amd\APPLIC~1\Ahead
[20/08/2004|22:55] C:\DOCUME~1\Amd\APPLIC~1\Creative
[06/09/2003|03:22] C:\DOCUME~1\Amd\APPLIC~1\desktop.ini
[15/04/2008|19:01] C:\DOCUME~1\Amd\APPLIC~1\FileZilla
[17/04/2008|18:49] C:\DOCUME~1\Amd\APPLIC~1\FMZilla
[10/10/2005|20:26] C:\DOCUME~1\Amd\APPLIC~1\GDIPFONTCACHEV1.DAT
[19/09/2006|03:55] C:\DOCUME~1\Amd\APPLIC~1\Google
[17/09/2007|14:40] C:\DOCUME~1\Amd\APPLIC~1\Help
[04/09/2005|01:27] C:\DOCUME~1\Amd\APPLIC~1\Hewlett-Packard
[05/11/2005|01:10] C:\DOCUME~1\Amd\APPLIC~1\Macromedia
[31/07/2006|21:37] C:\DOCUME~1\Amd\APPLIC~1\Media Player Classic
[10/09/2006|11:25] C:\DOCUME~1\Amd\APPLIC~1\Microsoft
[15/09/2003|13:01] C:\DOCUME~1\Amd\APPLIC~1\NeroVision
[06/04/2007|02:37] C:\DOCUME~1\Amd\APPLIC~1\NetMedia Providers
[14/03/2005|07:40] C:\DOCUME~1\Amd\APPLIC~1\Publish Providers
[20/06/2008|13:27] C:\DOCUME~1\Amd\APPLIC~1\Real
[04/04/2007|01:25] C:\DOCUME~1\Amd\APPLIC~1\Sonic Foundry
[01/04/2007|00:24] C:\DOCUME~1\Amd\APPLIC~1\Sun
[09/09/2003|04:56] C:\DOCUME~1\Amd\APPLIC~1\Symantec
[24/09/2006|14:41] C:\DOCUME~1\Amd\APPLIC~1\SystemDoctor 2006 Free
[15/08/2005|16:36] C:\DOCUME~1\Amd\APPLIC~1\Ulead Systems
[22/10/2006|23:44] C:\DOCUME~1\Amd\APPLIC~1\update.log
[07/02/2007|03:50] C:\DOCUME~1\Amd\APPLIC~1\vlc

[06/09/2003|03:22] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[06/09/2003|02:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[20/06/2008|14:11] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[21/07/2008|15:32] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[24/07/2008 01:16][--a------] C:\WINDOWS\tasks\HP Usg Daily.job
[18/07/2008 17:15][--a------] C:\WINDOWS\tasks\1-Click Maintenance.job
[18/07/2008 17:15][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[24/07/2008 03:11][--a------] C:\WINDOWS\tasks\Symantec NetDetect.job
[18/07/2008 17:30][--a------] C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
[21/07/2008 16:13][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[06/09/2003|03:34] C:\Program Files\ACD Systems
[07/03/2006|23:13] C:\Program Files\Adobe
[15/09/2003|13:04] C:\Program Files\Ahead
[09/09/2003|08:14] C:\Program Files\Antares Audio Technologies
[09/09/2003|08:05] C:\Program Files\Arboretum Systems
[15/01/2004|05:04] C:\Program Files\CDex_140b9
[06/09/2003|17:24] C:\Program Files\C-Media 3D Audio
[22/10/2006|23:44] C:\Program Files\Common Files
[29/10/2004|15:57] C:\Program Files\Creative
[22/10/2004|03:51] C:\Program Files\CtDriverInstTemp
[22/10/2004|03:51] C:\Program Files\CWebCam
[09/09/2003|07:48] C:\Program Files\DigiDesign
[29/09/2003|03:55] C:\Program Files\directx
[13/06/2004|23:42] C:\Program Files\DSPFX Virtual Pack
[09/09/2003|08:56] C:\Program Files\FaSoft
[01/04/2007|00:25] C:\Program Files\Fichiers communs
[07/05/2004|04:21] C:\Program Files\Friendly Technologies
[17/02/2007|15:29] C:\Program Files\Google
[04/09/2005|01:05] C:\Program Files\Hewlett-Packard
[04/09/2005|01:16] C:\Program Files\HP
[04/04/2007|01:14] C:\Program Files\InstallShield Installation Information
[14/07/2005|20:01] C:\Program Files\Internet Explorer
[06/05/2006|03:56] C:\Program Files\Kit ADSL
[06/09/2003|03:37] C:\Program Files\Ligos
[06/09/2003|02:36] C:\Program Files\microsoft frontpage
[06/09/2003|03:49] C:\Program Files\Microsoft Office
[20/09/2005|23:47] C:\Program Files\MIKSOFT
[09/10/2004|01:11] C:\Program Files\ModemAdsl
[15/08/2005|20:05] C:\Program Files\MOVAVI
[15/01/2005|01:54] C:\Program Files\Movie Maker
[13/08/2004|02:49] C:\Program Files\MSN Apps
[06/09/2003|02:31] C:\Program Files\MSN Gaming Zone
[22/02/2007|02:25] C:\Program Files\MSN Messenger
[15/10/2003|17:44] C:\Program Files\Native Instruments
[15/01/2005|01:54] C:\Program Files\NetMeeting
[10/08/2006|00:29] C:\Program Files\Norton SystemWorks
[09/09/2003|09:06] C:\Program Files\Orion
[14/04/2006|22:09] C:\Program Files\Outlook Express
[09/09/2003|05:26] C:\Program Files\PhonoXone
[09/09/2003|08:15] C:\Program Files\Qtools
[06/09/2003|03:36] C:\Program Files\SereneScreen
[09/05/2004|07:40] C:\Program Files\Services en ligne
[14/05/2004|04:38] C:\Program Files\Sonic Foundry
[14/05/2004|04:37] C:\Program Files\Sonic Foundry Setup
[09/09/2003|08:50] C:\Program Files\Sonitus-fx
[13/05/2004|17:38] C:\Program Files\SoundForge
[09/09/2003|07:58] C:\Program Files\SpectralDesign
[09/09/2003|09:05] C:\Program Files\Steinberg
[15/05/2004|00:53] C:\Program Files\Symantec
[26/09/2006|04:03] C:\Program Files\SystemDoctor 2006 Free
[09/09/2003|09:04] C:\Program Files\TCWorks
[09/09/2003|08:04] C:\Program Files\Terzoid WaveShop
[09/09/2003|08:13] C:\Program Files\Timeworks
[22/01/2007|15:40] C:\Program Files\TIMI-SOFT
[14/07/2005|20:01] C:\Program Files\Uninstall Information
[09/09/2003|08:12] C:\Program Files\Wave Arts
[09/09/2003|08:50] C:\Program Files\Waves
[15/08/2005|16:17] C:\Program Files\Windows Media Components
[20/02/2006|03:33] C:\Program Files\Windows Media Player
[15/01/2005|01:54] C:\Program Files\Windows NT
[11/08/2004|17:25] C:\Program Files\WindowsUpdate
[01/05/2008|18:03] C:\Program Files\WinRAR
[06/09/2003|02:36] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[06/09/2003|03:34] C:\Program Files\Fichiers communs\ACD Systems
[07/03/2006|23:14] C:\Program Files\Fichiers communs\Adobe
[15/01/2005|05:30] C:\Program Files\Fichiers communs\Adobe Systems Shared
[15/09/2003|12:56] C:\Program Files\Fichiers communs\Ahead
[06/09/2003|03:50] C:\Program Files\Fichiers communs\Designer
[14/08/2005|08:20] C:\Program Files\Fichiers communs\DeskShare Shared
[05/10/2004|15:42] C:\Program Files\Fichiers communs\element5 Shared
[07/05/2004|04:21] C:\Program Files\Fichiers communs\FTL Shared
[15/08/2005|16:17] C:\Program Files\Fichiers communs\InstallShield
[20/02/2005|20:56] C:\Program Files\Fichiers communs\Macromedia
[20/02/2005|20:57] C:\Program Files\Fichiers communs\Macromedia Shared
[04/09/2006|14:00] C:\Program Files\Fichiers communs\Microsoft Shared
[06/09/2003|02:33] C:\Program Files\Fichiers communs\MSSoap
[16/08/2004|16:36] C:\Program Files\Fichiers communs\NSV
[06/09/2003|03:22] C:\Program Files\Fichiers communs\ODBC
[12/05/2005|06:14] C:\Program Files\Fichiers communs\Real
[06/07/2004|15:23] C:\Program Files\Fichiers communs\Services
[06/09/2003|03:22] C:\Program Files\Fichiers communs\SpeechEngines
[15/05/2004|16:12] C:\Program Files\Fichiers communs\Symantec Shared
[14/04/2006|22:09] C:\Program Files\Fichiers communs\System
[22/10/2006|23:26] C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006
[15/08/2005|20:01] C:\Program Files\Fichiers communs\Wise Installation Wizard
[12/05/2005|06:14] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 42 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-24 03:12:26
Windows 5.1.2600 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 62

--------------------\\ Recherche d'autres infections

C:\WINDOWS\Pack.epk
[b]==> EGDACCESS <==/b

[F:2][D:1]-> C:\DOCUME~1\Amd\LOCALS~1\Temp
[F:57][D:0]-> C:\DOCUME~1\Amd\Cookies
[F:3560][D:13]-> C:\DOCUME~1\Amd\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 3:15:18,25

- Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le bureau :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

- Double-clique sur Navilog1.exe afin de lancer l'installation

- Si le fix ne lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le bureau

- Appuie sur F ou f puis valide par Entrée

- Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options

- Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix

- Patiente jusqu'au message : *** Analyse Termine le ..... ***

- Le scan fini, le bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse

- Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.

Mon antivirus detecte un pb avec le lien que tu m'as envoyé !

Antivir n'aime pas Navilog1 donc désactive-le.

ok mais c'est quoi le "DR/Tool.Reboot.F.108" qu'il détecte ?
ça me fait flipper ça "reboot" !

:D

C'est Navilog1 que Antivir détecte comme un virus.

Ok,

voici donc le rapport de Navilog1 :

Search Navipromo version 3.6.1 commencé le 24/07/2008 à 3:34:43,13

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Amd"

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2800.1106
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Amd\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Amd\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\Amd\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier Navipromo trouvé

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Amd\locals~1\applic~1" *

*** Recherche fichiers ***

C:\WINDOWS\pack.epk trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\mc trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\Amd\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

*** Analyse terminée le 24/07/2008 à 3:42:03,56 ***

Fais l'option 2 et poste le rapport.

Ayé ! (avec petit stress au redémarrage!) :

Clean Navipromo version 3.6.1 commencé le 24/07/2008 à 3:48:44,74

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Amd"

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO

Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2800.1106
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\Amd\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Amd\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Amd\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Amd\menudm~1\progra~1" ***

*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Amd\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

* Dans "C:\Documents and Settings\Amd\locals~1\applic~1" *

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 24/07/2008 à 3:56:36,14 ***

Oui car Antivir s'est réactivé au démarrage.

Désinstalle Lop S&D et Navilog1.

- Télécharge et installe MalwareByte's Anti-Malware :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

- Mets-le à jour

- Redémarre en mode sans échec (Recommandé) :
https://www.malekal.com/demarrer-windows-mode-sans-echec/

- Choisis ta session habituelle

- Fais un scan complet avec MalwareByte's Anti-Malware

- Supprime tout ce que le logiciel trouve, enregistre le rapport

- Redémarre en mode normal et poste le rapport ici

Tutorial :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

voilà (c'était long alors je suis allée dormir pendant le scan ;) !) :
Malwarebytes' Anti-Malware 1.23
Version de la base de données: 985
Windows 5.1.2600 Service Pack 1

15:23:52 24/07/2008
mbam-log-7-24-2008 (15-23-52).txt

Type de recherche: Examen complet (C:\|D:\|I:\|)
Eléments examinés: 129298
Temps écoulé: 2 hour(s), 53 minute(s), 15 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 4
Fichier(s) infecté(s): 53

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\winantivirus pro 2006 (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\AMeOpt (Adware.NetOptimizer) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\AMeOpt (Adware.NetOptimizer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DyFuCA (Adware.NetOptimizer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kapabout (Adware.NetOptimizer) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BootStera (Rogue.WinAntivirus) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006 (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
C:\Program Files\SystemDoctor 2006 Free (Rogue.SystemDoctor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Amd\Application Data\SystemDoctor 2006 Free (Rogue.SystemDoctor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Amd\Application Data\SystemDoctor 2006 Free\Logs (Rogue.SystemDoctor) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\ide21201.vxd (Adware.Winad) -> Quarantined and deleted successfully.
C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006\WapCHK.dll (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
C:\Program Files\SystemDoctor 2006 Free\st.dat (Rogue.SystemDoctor) -> Quarantined and deleted successfully.
C:\Documents and Settings\Amd\Application Data\SystemDoctor 2006 Free\Logs\update.log (Rogue.SystemDoctor) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\air_conditioner.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\alba.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\anyong.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\arista.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\atlas.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bellerose.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\black_widow.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bodoni_mutant.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\bomb_factory.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\broken_ghost.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\budmo_jiggler.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\cancan_de_bois.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\chopin_script.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\crackman.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\deftone_stylus.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dislexiae.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dymo.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\dymo_font_invers.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\english.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\extra_ornamental.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\formfound_com.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\hotel_coral_essex.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\labyrinth.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\madredeus.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\mens_cosme.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nadall.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\neogrey.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\north_point.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\nostalgic.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\odalisque.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\olympiques.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\parklane.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\phonetica.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\porcelain.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\q_switch_ax.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\rhumba_script.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\riotsquad.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\rough_draft.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\sf_americana_dreams.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\soupertrouper.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\spitfire.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\technoid.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\unicorn_nf.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\uni_sol.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\v5prophit.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\you_rook_marbelous.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\_ank.zip (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\didduid.ini (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\stera.job (Rogue.WinAntivirus) -> Quarantined and deleted successfully.

---> Relance MBAM, va dans Quarantaine et supprime tout

---> Poste un nouveau rapport HijackThis

Le voici :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:41:29, on 24/07/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\aop8jub5.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\hphmon05.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\wuauclt.exe
C:\program files\internet explorer\iexplore.exe
C:\Documents and Settings\Amd\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar6.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar6.dll
O3 - Toolbar: TV5 - Dictionnaires - {CEDDA62D-5FBE-4AB2-AE2E-5E069F444444} - D:\Logiciel installés\MDTV5TB.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [aop8jub5] C:\WINDOWS\System32\aop8jub5.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] D:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [avgnt] "D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [neufbox_reminder] "C:\Program Files\Kit ADSL\Wizard\PostInstall_Checker.exe" -r
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\Run: [Microsoft Update] wuamgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Microsoft Update] wuamgrd.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'indexation (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O24 - Desktop Component 0: (no name) - https://images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/1278fb8b-c7f0-4bf3-8dbb-0b5a780536f5/djc2mj-659117f9-0768-446f-844e-8cfbccacbfa8.jpg/v1/fill/w_563,h_729,q_75,strp/old_sweet_memories_by_loganart.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi8xMjc4ZmI4Yi1jN2YwLTRiZjMtOGRiYi0wYjVhNzgwNTM2ZjUvZGpjMm1qLTY1OTExN2Y5LTA3NjgtNDQ2Zi04NDRlLThjZmJjY2FjYmZhOC5qcGciLCJ3aWR0aCI6Ijw9NTYzIiwiaGVpZ2h0IjoiPD03MjkifV1dfQ.j9YMIKtNfjqrHwXIGfN9kwV5Q5Y8ct7jXsanlngxQ78

---> Relance HijackThis et choisis Do a system scan only

---> Coche les cases qui sont devant les lignes suivantes :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - (no file)

O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [aop8jub5] C:\WINDOWS\System32\aop8jub5.exe

O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

O4 - HKLM\..\Run: [HP Software Update] "D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"

O4 - HKUS\S-1-5-18\..\Run: [Microsoft Update] wuamgrd.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [Microsoft Update] wuamgrd.exe (User 'Default user')

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)

O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)

O24 - Desktop Component 0: (no name) - http://ic3.deviantart.com/fs10/i/2006/117/6/c/Old_sweet_memo­ries_by_loganart.jpg

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Télécharge OTMoveIt2 à partir du lien ci-dessous :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

---> Enregistre le fichier sur le Bureau.

---> Double-clique sur le fichier OTMoveIt2.exe pour lancer l'outil.
Assure-toi que la case Unregister Dll's and Ocx's soit bien cochée.

---> Copie l'intégralité du texte ci-dessous et colle-le dans la fenêtre intitulée Paste Standard List of Files/Folders to be moved.

C:\WINDOWS\System32\aop8jub5.exe

---> Clique sur MoveIt! pour lancer la suppression.
Lorsqu'un résultat apparaît dans le cadre Results, clique sur Exit.

Note : Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES.

---> Poste le rapport de OTMoveIt qui se trouve dans C:\_OTMoveIt\MovedFiles.

---> Poste un nouveau rapport HijackThis

Me rapport OTMoveIt2 :

C:\WINDOWS\System32\aop8jub5.exe moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07252008_150012

Le rapport HiJacktjis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:02:43, on 25/07/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\System32\hphmon05.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Amd\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar6.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar6.dll
O3 - Toolbar: TV5 - Dictionnaires - {CEDDA62D-5FBE-4AB2-AE2E-5E069F444444} - D:\Logiciel installés\MDTV5TB.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] D:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [avgnt] "D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [neufbox_reminder] "C:\Program Files\Kit ADSL\Wizard\PostInstall_Checker.exe" -r
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Logiciel installés\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'indexation (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe