Ouverture intempestive d'ie

Bonsoir

On va rechercher d'où vient ce soucis :)

1/ Télécharge sur le Bureau HijackThis

http://download.hijackthis.eu/HJTInstall.exe

* Double-clique sur dessus pour l'installer

* Laisse le s'installer par défaut
C:\Program Files\Trend Micro\HijackThis

* accepte la licence

* Ferme Hijackthis en cliquant sur la croix-rouge.

2/ Télécharge sur ton Bureau DSS (ex Comboscan) de Deckard:

(choisis enregistrer, puis Bureau comme emplacement)

http://deckard.geekstogo.com/dss.exe

* Ferme toutes les applications en cours.

* Double-clic sur comboscan.exe pour lancer l'outil.

* Une fenêtre s'ouvre, invitant à fermer toutes les applications, clique sur OK.

* A la fin de l'analyse, une fenêtre s'ouvre, clique sur OK.

Le rapport Comboscan.txt va s'afficher, copie le dans ta prochaine réponse.
Si un rapport complémentaire a été créé, poste le aussi dans ta réponse.

@+

alors voici les deux rapports:
le premier:Deckard's System Scanner v20071014.68
Run by krom on 2008-07-28 22:09:04
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

-- Last 5 Restore Point(s) --
12: 2008-07-28 20:07:07 UTC - RP221 - Deckard's System Scanner Restore Point
11: 2008-07-28 11:36:05 UTC - RP220 - Point de vérification système
10: 2008-07-27 11:09:08 UTC - RP219 - Point de vérification système
9: 2008-07-26 09:27:41 UTC - RP218 - Point de vérification système
8: 2008-07-25 02:02:15 UTC - RP217 - Point de vérification système

-- First Restore Point --
1: 2008-07-17 13:38:53 UTC - RP210 - Point de vérification système

Backed up registry hives.
Performed disk cleanup.

-- HijackThis (run as krom.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:09:41, on 28/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\cba\pds.exe
C:\Program Files\LaCie\SAFE Hard Drive\SafeService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\ams_ii\hndlrsvc.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\system32\ams_ii\iao.exe
C:\WINDOWS\system32\cba\xfr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\krom\Bureau\dss.exe
C:\DOCUME~1\krom\Bureau\RACCOU~1\krom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: (no name) - {34C8CE47-AFB1-488C-8171-BD4387A64FB1} - (no file)
O2 - BHO: (no name) - {43BA7CD5-3D74-4B5F-B4E0-98CAE75E778D} - C:\WINDOWS\system32\awtqpNDs.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {551F1BC2-007B-40AF-8C73-9DB98340CFF1} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {77101F03-2624-4151-AF16-9B49FB542411} - C:\WINDOWS\system32\nnnopQkH.dll (file missing)
O2 - BHO: {94ebe7bd-4cdd-bdda-7bc4-70ab118774a9} - {9a477811-ba07-4cb7-addb-ddc4db7ebe49} - C:\WINDOWS\system32\ytnsgc.dll (file missing)
O2 - BHO: (no name) - {A260787B-911C-49A1-AE73-EC76A3CEC27E} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: (no name) - {D8CDE8E1-7A3C-4BCA-BDC1-86F2761AE24A} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [PC Booster] C:\Program Files\inKline Global\PC Booster\PCBooster.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [Second bat creative peak] C:\Documents and Settings\All Users\Application Data\Axis Readme Second Bat\idol program.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Else bore] C:\DOCUME~1\krom\APPLIC~1\INTERN~1\Flag Grid.exe
O4 - HKCU\..\Run: [BitTorrent] "E:\bitTorent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [eMuleAutoStart] E:\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin9.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
O20 - Winlogon Notify: fccbYrrp - C:\WINDOWS\
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Basics Service - Seagate Technology LLC - C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel Alert Handler - Intel® Corporation - C:\WINDOWS\system32\ams_ii\hndlrsvc.exe
O23 - Service: Intel Alert Originator - Intel® Corporation - C:\WINDOWS\system32\ams_ii\iao.exe
O23 - Service: Intel File Transfer - Intel® Corporation - C:\WINDOWS\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\cba\pds.exe
O23 - Service: LaCie Safe Hard Drive Enabler - LaCie - C:\Program Files\LaCie\SAFE Hard Drive\SafeService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

Ok c'est partit

Télécharge LOP S&D d'Eric71 ici https://sites.google.com/site/eric71mespages/lop.sd.exe

Double-clique dessus pour lancer l'installation.
Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
Séléctionne la langue souhaitée , puis choisis l'Option 2 ( Suppression )
Patiente jusqu'à la fin du scan.
Poste le rapport généré (situé aussi ici C:\lopR.txt )

( Si le Bureau ne réapparaît pas, lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

Le voici;

--------------------\\ Lop S&D 4.2.2-4 XP/Vista

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : krom ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 29/07/2008 | 15:00:36,48 ] [ PC : KROM-51E31825C2 ]
[ MAJ : 25-07-2008 | 17:45 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

Supprime! - C:\WINDOWS\Tasks\B0077F68929CF63C.job
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat\idol program.exe
Supprime! - C:\DOCUME~1\krom\APPLIC~1\intern~1\Flag Grid.exe
Supprime! - C:\DOCUME~1\krom\APPLIC~1\intern~1\second sign fork.exe
Supprime! - C:\DOCUME~1\krom\APPLIC~1\intern~1\ujaawvig.exe
Echec ! - C:\Program Files\intern~1\Connection Wizard
Supprime! - C:\Program Files\intern~1\HMMAPI.DLL
Supprime! - C:\Program Files\intern~1\iedw.exe
Supprime! - C:\Program Files\intern~1\IEXPLORE.EXE
Echec ! - C:\Program Files\intern~1\MUI
Supprime! - C:\Program Files\intern~1\PLUGINS
Supprime! - C:\Program Files\intern~1\SIGNUP
Supprime! - C:\DOCUME~1\krom\MENUDM~1\PROGRA~1\3wPlayer\3wPlayer.lnk
Supprime! - C:\DOCUME~1\krom\MENUDM~1\PROGRA~1\3wPlayer\HomePage.lnk
Supprime! - C:\DOCUME~1\krom\MENUDM~1\PROGRA~1\3wPlayer\Uninstall.lnk
Supprime! - C:\WINDOWS\Prefetch\3WPLAYER-2.0.0.0-SETUP.EXE-12BD9864.pf
Supprime! - C:\WINDOWS\Prefetch\3WPLAYER.EXE-1D88EBDF.pf
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat
Supprime! - C:\DOCUME~1\krom\APPLIC~1\intern~1
Echec ! - C:\Program Files\intern~1
Supprime! - C:\DOCUME~1\krom\MENUDM~1\PROGRA~1\3wPlayer
Echec ! - C:\Program Files\INTERN~1
RestaurÚ! - Fichier Hosts

\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE ///////////////////////////

Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat\idol program.exe
Echec ! - C:\Program Files\intern~1\Connection Wizard
Echec ! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat
Echec ! - C:\Program Files\intern~1
Echec ! - C:\Program Files\INTERN~1

//////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[29/02/2008|16:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/03/2008|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[09/05/2008|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[09/05/2008|20:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[25/07/2008|00:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat
[06/06/2008|20:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[06/02/2008|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[24/04/2008|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eXPert PDF
[23/04/2008|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eXPert PDF 4
[24/04/2008|21:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eXPert PDF Jobs
[06/02/2008|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[29/07/2008|14:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[20/03/2008|21:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[20/03/2008|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[30/04/2008|14:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[07/06/2008|16:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab
[04/06/2008|17:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Lab Setup Files
[27/05/2008|20:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[01/05/2008|18:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[10/07/2008|12:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
[21/06/2008|13:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microgaming
[27/02/2008|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[29/02/2008|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
[06/02/2008|21:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
[02/06/2008|17:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Seagate
[06/02/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[04/06/2008|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[02/06/2008|21:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[06/02/2008|21:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
[20/04/2008|13:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[06/02/2008|19:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[11/05/2008|20:57] C:\DOCUME~1\DEFAUL~1\APPLIC~1\MetaProducts
[06/02/2008|19:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[15/05/2008|19:33] C:\DOCUME~1\krom\APPLIC~1\AccurateRip
[29/02/2008|16:25] C:\DOCUME~1\krom\APPLIC~1\Adobe
[07/04/2008|19:02] C:\DOCUME~1\krom\APPLIC~1\Anuman Interactive
[28/07/2008|19:46] C:\DOCUME~1\krom\APPLIC~1\BitTorrent
[27/06/2008|20:51] C:\DOCUME~1\krom\APPLIC~1\CDR
[20/07/2008|14:36] C:\DOCUME~1\krom\APPLIC~1\CDRusersDB.v12
[30/05/2008|20:34] C:\DOCUME~1\krom\APPLIC~1\DAEMON Tools
[13/02/2008|23:58] C:\DOCUME~1\krom\APPLIC~1\DeepBurner
[13/05/2008|23:24] C:\DOCUME~1\krom\APPLIC~1\DeskSoft
[06/02/2008|19:44] C:\DOCUME~1\krom\APPLIC~1\desktop.ini
[06/02/2008|22:23] C:\DOCUME~1\krom\APPLIC~1\DivX
[27/06/2008|16:37] C:\DOCUME~1\krom\APPLIC~1\dvdcss
[24/04/2008|21:24] C:\DOCUME~1\krom\APPLIC~1\eXPert PDF Editor
[14/04/2008|10:19] C:\DOCUME~1\krom\APPLIC~1\FileZilla
[06/02/2008|20:18] C:\DOCUME~1\krom\APPLIC~1\Google
[20/04/2008|14:05] C:\DOCUME~1\krom\APPLIC~1\Help
[06/02/2008|19:25] C:\DOCUME~1\krom\APPLIC~1\Identities
[06/02/2008|19:27] C:\DOCUME~1\krom\APPLIC~1\InstallShield
[06/06/2008|19:15] C:\DOCUME~1\krom\APPLIC~1\Jetico Personal Firewall
[30/04/2008|14:13] C:\DOCUME~1\krom\APPLIC~1\LaCie
[27/06/2008|16:19] C:\DOCUME~1\krom\APPLIC~1\LogoMaker
[20/06/2008|19:29] C:\DOCUME~1\krom\APPLIC~1\Macromedia
[27/04/2008|21:56] C:\DOCUME~1\krom\APPLIC~1\Magic Academy
[01/05/2008|18:58] C:\DOCUME~1\krom\APPLIC~1\Malwarebytes
[06/05/2008|20:25] C:\DOCUME~1\krom\APPLIC~1\MetaProducts
[14/07/2008|11:05] C:\DOCUME~1\krom\APPLIC~1\Microsoft
[11/03/2008|19:23] C:\DOCUME~1\krom\APPLIC~1\Mozilla
[29/02/2008|16:38] C:\DOCUME~1\krom\APPLIC~1\Nero
[20/03/2008|21:30] C:\DOCUME~1\krom\APPLIC~1\Notepad++
[21/03/2008|19:57] C:\DOCUME~1\krom\APPLIC~1\Nvu
[15/07/2008|14:54] C:\DOCUME~1\krom\APPLIC~1\OpenOffice.org2
[08/02/2008|10:15] C:\DOCUME~1\krom\APPLIC~1\Opera
[27/06/2008|20:52] C:\DOCUME~1\krom\APPLIC~1\questdb.v12
[05/06/2008|19:00] C:\DOCUME~1\krom\APPLIC~1\QuickZip45.ini
[11/02/2008|19:17] C:\DOCUME~1\krom\APPLIC~1\Real
[27/04/2008|21:17] C:\DOCUME~1\krom\APPLIC~1\ScreenSeven
[06/02/2008|21:38] C:\DOCUME~1\krom\APPLIC~1\Sony Ericsson
[30/04/2008|21:39] C:\DOCUME~1\krom\APPLIC~1\Steganos
[14/07/2008|22:01] C:\DOCUME~1\krom\APPLIC~1\streamripper
[06/02/2008|21:33] C:\DOCUME~1\krom\APPLIC~1\Sun
[06/02/2008|22:19] C:\DOCUME~1\krom\APPLIC~1\Teleca
[21/06/2008|14:09] C:\DOCUME~1\krom\APPLIC~1\ubi.com
[04/04/2008|23:16] C:\DOCUME~1\krom\APPLIC~1\VCOM
[06/02/2008|20:36] C:\DOCUME~1\krom\APPLIC~1\vlc
[26/07/2008|20:30] C:\DOCUME~1\krom\APPLIC~1\Winamp
[11/02/2008|18:59] C:\DOCUME~1\krom\APPLIC~1\WinPatrol
[29/02/2008|16:13] C:\DOCUME~1\krom\APPLIC~1\WinRAR

[20/04/2008|14:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[12/07/2008|13:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
[06/02/2008|19:21] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[09/05/2008 20:25][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[29/07/2008 12:44][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[07/07/2008|19:00] C:\Program Files\7-Zip
[10/07/2008|13:12] C:\Program Files\Adobe
[06/02/2008|21:32] C:\Program Files\AIDA32 - Enterprise System Information
[27/02/2008|18:23] C:\Program Files\Alcohol Soft
[10/05/2008|19:27] C:\Program Files\AML Products
[09/05/2008|20:25] C:\Program Files\Apple Software Update
[09/02/2008|18:17] C:\Program Files\Aspyr
[11/02/2008|18:56] C:\Program Files\Astonsoft
[12/07/2008|11:20] C:\Program Files\AviSynth 2.5
[03/03/2008|18:22] C:\Program Files\BillP Studios
[09/04/2008|17:37] C:\Program Files\BitTorrent
[30/04/2008|21:28] C:\Program Files\Cannon Smash
[07/02/2008|20:38] C:\Program Files\CCleaner
[06/02/2008|19:19] C:\Program Files\ComPlus Applications
[04/06/2008|17:29] C:\Program Files\Conduit
[03/06/2008|18:17] C:\Program Files\DAEMON Tools Lite
[06/02/2008|19:31] C:\Program Files\DIFX
[06/05/2008|20:04] C:\Program Files\DivX
[11/05/2008|20:57] C:\Program Files\Download Express
[11/04/2008|16:09] C:\Program Files\Driver-Soft
[26/05/2008|22:41] C:\Program Files\Extreme Tux Racer
[27/06/2008|16:03] C:\Program Files\Fichiers communs
[10/07/2008|12:29] C:\Program Files\Folder Marker
[03/03/2008|18:22] C:\Program Files\GameSpy Arcade
[02/03/2008|18:53] C:\Program Files\Google
[17/06/2008|19:18] C:\Program Files\IdiomaX
[26/03/2008|21:13] C:\Program Files\IKEA HomePlanner
[15/05/2008|19:33] C:\Program Files\Illustrate
[20/03/2008|21:32] C:\Program Files\IncrediMail
[22/04/2008|21:53] C:\Program Files\inKline Global
[10/07/2008|13:57] C:\Program Files\InstallShield Installation Information
[29/07/2008|15:01] C:\Program Files\Internet Explorer
[25/07/2008|00:29] C:\Program Files\InternetMeet
[13/04/2008|15:52] C:\Program Files\Java
[05/06/2008|21:59] C:\Program Files\Jetico
[04/06/2008|17:32] C:\Program Files\Kaspersky Lab
[30/04/2008|14:06] C:\Program Files\LaCie
[27/05/2008|20:43] C:\Program Files\Lavasoft
[22/07/2008|22:31] C:\Program Files\Malwarebytes' Anti-Malware
[07/02/2008|20:43] C:\Program Files\Messenger
[06/02/2008|19:21] C:\Program Files\microsoft frontpage
[24/06/2008|10:30] C:\Program Files\Microsoft Office
[27/02/2008|18:55] C:\Program Files\Microsoft.NET
[04/04/2008|17:41] C:\Program Files\MOVAVI
[06/02/2008|19:20] C:\Program Files\Movie Maker
[29/07/2008|14:56] C:\Program Files\Mozilla Firefox
[06/02/2008|19:19] C:\Program Files\MSN Gaming Zone
[02/06/2008|17:09] C:\Program Files\MSXML 6.0
[06/02/2008|19:20] C:\Program Files\NetMeeting
[20/03/2008|21:30] C:\Program Files\Notepad++
[21/03/2008|19:56] C:\Program Files\Nvu
[05/03/2008|19:09] C:\Program Files\OCCT
[06/02/2008|19:19] C:\Program Files\Online Services
[13/04/2008|15:53] C:\Program Files\OpenOffice.org 2.3
[13/04/2008|15:54] C:\Program Files\OpenOffice.org 2.4
[12/07/2008|11:12] C:\Program Files\Opera
[21/03/2008|21:27] C:\Program Files\Outlook Express
[30/04/2008|21:08] C:\Program Files\OXXOGames
[17/07/2008|13:20] C:\Program Files\Piratrax
[27/02/2008|17:45] C:\Program Files\PSCS2Updater
[06/02/2008|23:50] C:\Program Files\Pyro Studios
[07/02/2008|20:38] C:\Program Files\QuickZip4
[07/07/2008|19:24] C:\Program Files\RamBoost XP
[06/02/2008|19:33] C:\Program Files\Realtek
[11/04/2008|16:08] C:\Program Files\RFA
[02/06/2008|17:10] C:\Program Files\Seagate
[03/03/2008|18:22] C:\Program Files\Services en ligne
[07/02/2008|20:39] C:\Program Files\Sony Ericsson
[04/06/2008|21:25] C:\Program Files\Spybot - Search & Destroy
[27/06/2008|16:03] C:\Program Files\Stardock
[17/06/2008|19:19] C:\Program Files\Studio V5
[04/06/2008|19:13] C:\Program Files\Symantec
[29/07/2008|12:44] C:\Program Files\Symantec AntiVirus
[20/06/2008|19:24] C:\Program Files\Ubi Soft
[21/06/2008|14:09] C:\Program Files\ubi.com
[20/06/2008|18:54] C:\Program Files\Ubisoft
[06/02/2008|19:25] C:\Program Files\Uninstall Information
[27/06/2008|17:37] C:\Program Files\USB Vibration
[08/02/2008|00:34] C:\Program Files\Vbteam
[04/04/2008|23:16] C:\Program Files\VCOM
[06/02/2008|20:26] C:\Program Files\VideoLAN
[05/06/2008|18:03] C:\Program Files\Vietcong2
[14/05/2008|22:27] C:\Program Files\Virtual Creatures
[14/04/2008|18:36] C:\Program Files\Virtualis
[23/04/2008|11:31] C:\Program Files\Visagesoft
[26/05/2008|19:19] C:\Program Files\Walaber's Trampoline
[07/05/2008|17:50] C:\Program Files\Winamp
[29/02/2008|16:34] C:\Program Files\Windows Media Player
[06/02/2008|19:19] C:\Program Files\Windows NT
[06/02/2008|19:20] C:\Program Files\WindowsUpdate
[29/02/2008|16:13] C:\Program Files\WinRAR
[06/02/2008|19:21] C:\Program Files\xerox
[30/04/2008|15:30] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[01/03/2008|20:00] C:\Program Files\Fichiers communs\Adobe
[27/02/2008|18:55] C:\Program Files\Fichiers communs\DESIGNER
[17/06/2008|19:19] C:\Program Files\Fichiers communs\IdiomaX Shared
[17/06/2008|19:18] C:\Program Files\Fichiers communs\IdiomaX Uninstall
[01/05/2008|14:27] C:\Program Files\Fichiers communs\InstallShield
[06/02/2008|21:33] C:\Program Files\Fichiers communs\Java
[20/03/2008|21:31] C:\Program Files\Fichiers communs\Microsoft Shared
[06/02/2008|19:20] C:\Program Files\Fichiers communs\MSSoap
[06/02/2008|19:44] C:\Program Files\Fichiers communs\ODBC
[21/06/2008|14:09] C:\Program Files\Fichiers communs\PocketSoft
[06/02/2008|19:20] C:\Program Files\Fichiers communs\Services
[06/02/2008|21:38] C:\Program Files\Fichiers communs\Sony Ericsson Shared
[06/02/2008|19:44] C:\Program Files\Fichiers communs\SpeechEngines
[27/06/2008|16:03] C:\Program Files\Fichiers communs\Stardock
[04/06/2008|19:13] C:\Program Files\Fichiers communs\Symantec Shared
[06/02/2008|19:19] C:\Program Files\Fichiers communs\System
[06/02/2008|22:18] C:\Program Files\Fichiers communs\Teleca Shared
[27/06/2008|21:47] C:\Program Files\Fichiers communs\Wise Installation Wizard

--------------------\\ Process

( 38 Processus )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat\idol program.exe
C:\Program Files\intern~1
C:\Program Files\intern~1\Connection Wizard
C:\Program Files\intern~1\hmmapi.dll
C:\Program Files\intern~1\iedw.exe
C:\Program Files\intern~1\iexplore.exe

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-29 15:01:59
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

=> C:\DOCUME~1\krom\Mes documents\programme\Adobe Photoshop CS2 v9.0 FR avec Crack et Keygen.htm
=> C:\DOCUME~1\krom\Mes documents\programme\Adobe.Photoshop.CS2.(v9.0).FR.Officielle.Incl-Crack.et.Keygen.par.eMule-Paradise.com.rar
=> C:\DOCUME~1\krom\Mes documents\programme\Architecte 3D (Plan Interieur Maison Architecture) Crack Chouette.rar
=> C:\DOCUME~1\krom\Mes documents\programme\O&O Defrag 10.0.1670 Francais Keygen.rar
=> C:\DOCUME~1\krom\Mes documents\programme\Serial + crack activation Adobe Photoshop CS2 9.0 FR.zip

[F:5][D:1]-> C:\DOCUME~1\krom\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\krom\Cookies
[F:96][D:4]-> C:\DOCUME~1\krom\LOCALS~1\TEMPOR~1\content.IE5

--------------------\\ Fin du rapport a 15:02:32,98

Merci, c'est grave?
je viens de touver des trojans sur le PC je les ai nettoyés juste avant, donc peut etre que ....
et encore merci de ton coup de main.
krom

Bonsoir

Il faut que tu supprime ces cracks
=> C:\DOCUME~1\krom\Mes documents\programme\Adobe Photoshop CS2 v9.0 FR avec Crack et Keygen.htm
=> C:\DOCUME~1\krom\Mes documents\programme\Adobe.Photoshop.CS2.(v9.0).FR.Officielle.Incl-Crack.et.Keygen.par.eMule-Paradise.com.rar
=> C:\DOCUME~1\krom\Mes documents\programme\Architecte 3D (Plan Interieur Maison Architecture) Crack Chouette.rar
=> C:\DOCUME~1\krom\Mes documents\programme\O&O Defrag 10.0.1670 Francais Keygen.rar
=> C:\DOCUME~1\krom\Mes documents\programme\Serial + crack activation Adobe Photoshop CS2 9.0 FR.zip

ensuite

Télécharge Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et sauvegarde le sur ton bureau et pas ailleurs!

Avant de lancer le téléchargement
Clique droit sur le lien et tu choisis "enregistrer la cible du lien sous"
et tu le renomme par outil

=> /!\déconnecte toi d'internet et ferme toutes tes applications./!\

=>/!\ désactive tes protections (antivirus, parefeu,antispyware) provisoirement et seulement le temps de l'utilisation de ComboFix,/!\

=> Double-clic sur outil,

=> /!\Ne touche à rien tant que le scan n'est pas terminé.Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi./!\

=> Attends que combofix ait terminé, un rapport sera créé.

=> réactive ton parefeu, ton antivirus, la garde de ton antispyware

=> copie/colle le rapport C:\ComboFix.txt

=> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

@+