Message Warning! Spyware detected,,,,

Bonjour,
J ai le message d erreur Warning !Spyware detected,,,j aurait besoin d aide SVP,Merci d avance,,
Configuration: Windows Vista
Firefox 3.0.1

24 réponses

  1. Modérateur
    No action taken. ---> Alors ce n'est pas le bon rapport.
    1. Modérateur
      Salut,

      - Télécharge HijackThis V 2.02 (HijackThis Installer) :
      http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

      - Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

      - Clique sur Install ensuite sur I Accept

      - Clique sur Do a scan system and save log file

      - Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.
      1. Deja merci beaucoup,voila le log file,

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 20:18:21, on 2008-08-01
        Platform: Windows Vista SP1 (WinNT 6.00.1905)
        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
        Boot mode: Normal

        Running processes:
        C:\Program Files\DigitalPersona\Bin\DpAgent.exe
        C:\Windows\system32\taskeng.exe
        C:\Windows\system32\Dwm.exe
        C:\Windows\Explorer.EXE
        C:\Windows\System32\rundll32.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\QuickPlay\QPService.exe
        C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
        C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
        C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
        C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
        C:\Program Files\Alwil Software\Avast4\ashDisp.exe
        C:\Program Files\Windows Sidebar\sidebar.exe
        C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
        C:\Windows\ehome\ehtray.exe
        C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
        C:\Program Files\Palm\Hotsync.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
        C:\Windows\System32\rundll32.exe
        C:\Windows\ehome\ehmsas.exe
        C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
        C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
        C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
        C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Internet Explorer\IEUser.exe
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
        C:\Windows\system32\SearchFilterHost.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.canoe.ca/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=notebook
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
        R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
        O1 - Hosts: ::1 localhost
        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
        O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
        O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
        O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
        O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
        O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
        O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
        O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
        O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
        O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
        O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
        O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
        O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [hcwemMON] hcwemMON.exe
        O4 - HKLM\..\Run: [lphcrvlj0eja3] C:\Windows\system32\lphcrvlj0eja3.exe
        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
        O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
        O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
        O4 - HKCU\..\Run: [DLL execute] temp.exe
        O4 - HKCU\..\Run: [lphcrvlj0eja3] C:\Windows\system32\lphcrvlj0eja3.exe
        O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        O4 - HKCU\..\RunServices: [DLL execute] temp.exe
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
        O4 - Startup: Palm Registration.lnk = C:\Program Files\Palm\register.exe
        O4 - Global Startup: Bluetooth.lnk = ?
        O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
        O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
        O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O13 - Gopher Prefix:
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
        O21 - SSODL: wnslvxtf - {773C0021-3815-4900-9FA2-2F73F6DC754B} - (no file)
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
        O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
        O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
        O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
        O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
        O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
        O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
        1. Modérateur
          ---> Désactive l'UAC le temps de la désinfection :
          https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html

          Important : Désactive TeaTimer, le résident de Spybot, il va gêner la désinfection en empêchant la modification des BHO.

          ---> Démarre Spybot, clique sur Mode, coche Mode avancé
          ---> A gauche, clique sur Outils, puis sur Résident
          ---> Décoche la case devant Résident "TeaTimer" :
          http://apu.mabul.org/up/5/apu-5-gpdx9e06cwz2dypom2q7n6nc.jpg
          ---> Quitte Spybot

          Note : Je te conseille de ne pas le réactiver, il a été incapable d'empêcher l'infection de ton PC.

          - Télécharge et installe MalwareByte's Anti-Malware :
          http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

          - Mets-le à jour

          - Redémarre en mode sans échec (Recommandé) :
          https://www.malekal.com/demarrer-windows-mode-sans-echec/

          - Choisis ta session habituelle

          - Fais un scan complet avec MalwareByte's Anti-Malware

          - Supprime tout ce que le logiciel trouve, enregistre le rapport

          - Redémarre en mode normal et poste le rapport ici

          Tutorial :
          https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
          1. s cuse pour le délai,pas vite vite,et merci,sa va bien a date

            Malwarebytes' Anti-Malware 1.24
            Version de la base de données: 1015
            Windows 6.0.6001 Service Pack 1

            20:50:32 2008-08-01
            mbam-log-8-1-2008 (20-50-28).txt

            Type de recherche: Examen rapide
            Eléments examinés: 35320
            Temps écoulé: 2 minute(s), 28 second(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 10
            Valeur(s) du Registre infectée(s): 9
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 24
            Fichier(s) infecté(s): 122

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            HKEY_CLASSES_ROOT\bhonew.bhoapp (Trojan.BHO) -> No action taken.
            HKEY_CLASSES_ROOT\bhonew.bhoapp.1 (Trojan.BHO) -> No action taken.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> No action taken.
            HKEY_CLASSES_ROOT\Interface\{4937d5d1-2039-409a-bd83-fec9b39b2356} (Trojan.BHO) -> No action taken.
            HKEY_CLASSES_ROOT\Interface\{caf9d798-c659-4b9b-8e19-ee27c3d04ee7} (Trojan.BHO) -> No action taken.
            HKEY_CLASSES_ROOT\Typelib\{15c7d7ad-a87a-4c0d-9d8b-637fcd3488ef} (Trojan.BHO) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webvideo (Trojan.FakeAlert) -> No action taken.

            Valeur(s) du Registre infectée(s):
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphcrvlj0eja3 (Trojan.Agent) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphcrvlj0eja3 (Trojan.Agent) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\wnslvxtf (Trojan.FakeAlert) -> No action taken.
            HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> No action taken.
            HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> No action taken.
            HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> No action taken.
            HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> No action taken.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\General\backupwallpaper (Hijack.Wallpaper) -> No action taken.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\General\wallpaper (Hijack.Wallpaper) -> No action taken.

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            C:\Program Files\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
            C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Packages (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
            C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Packages (Rogue.Multiple) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008 (Rogue.AntivirusXP2008) -> No action taken.

            Fichier(s) infecté(s):
            C:\Windows\System32\lphcrvlj0eja3.exe (Trojan.Agent) -> No action taken.
            C:\Windows\endq.exe (Trojan.FakeAlert) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt1120.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt1177.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt1563.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt1676.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt18D5.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt1CA2.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt20FA.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt236.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt249A.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt25BC.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt2A38.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt2BE.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt2C10.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt2EAA.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt305D.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt333B.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt383E.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt3A03.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt3B8D.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt3EB9.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt41E9.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt41FC.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt43CE.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt43EA.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt45CD.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt48A.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt4CD5.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt4CFB.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt4EC9.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt5343.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt554C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt56A3.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt5766.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt5942.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt5BCE.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt5CD1.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt62FD.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt6565.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt6A86.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt6B5E.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt6E13.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt708.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt70AC.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt76E8.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt7715.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt7A8.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt7DB4.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt7E89.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt81F9.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt8257.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt8306.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt83DB.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt8409.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt8779.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt8915.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt896C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt8ADA.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt9147.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt91BD.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt91E3.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt9351.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt9B84.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt9C16.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.tt9F1.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttA621.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttA7E7.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttA9C0.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttABE3.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttB310.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttB4FF.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttB64C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttB9A0.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttBC7F.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttBF8A.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttC022.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttC103.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttC22C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttC542.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttC57C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttC71C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttCA14.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttCD0C.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttCF25.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttD046.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttD301.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttD506.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttD5AB.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttD869.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttD9E5.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttDE60.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttE1CD.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttE1EF.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttE54D.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttE7A4.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttE8A8.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttEE6.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttF12E.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttF140.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttF236.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttF4A1.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttF685.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttFCA.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttFD94.tmp (Rogue.Installer) -> No action taken.
            C:\Users\Mario\AppData\Local\Temp\.ttFDB9.tmp (Rogue.Installer) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\database.dat (Rogue.Multiple) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\license.txt (Rogue.Multiple) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\MFC71.dll (Rogue.Multiple) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\MFC71ENU.DLL (Rogue.Multiple) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\msvcp71.dll (Rogue.Multiple) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\msvcr71.dll (Rogue.Multiple) -> No action taken.
            C:\Program Files\rhcvvlj0eja3\rhcvvlj0eja3.exe.local (Rogue.Multiple) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk (Rogue.AntivirusXP2008) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk (Rogue.AntivirusXP2008) -> No action taken.
            C:\Windows\grswptdl.exe (Trojan.FakeAlert) -> No action taken.
            C:\Windows\System32\blphcrvlj0eja3.scr (Trojan.FakeAlert) -> No action taken.
            C:\Windows\System32\phcrvlj0eja3.bmp (Trojan.FakeAlert) -> No action taken.
            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008.lnk (Rogue.AntivirusXP) -> No action taken.
            1. c est fait,j ai supprimer la sélection,et c est sa le rapport,

              Malwarebytes' Anti-Malware 1.24
              Version de la base de données: 1015
              Windows 6.0.6001 Service Pack 1

              20:50:32 2008-08-01
              mbam-log-8-1-2008 (20-50-28).txt

              Type de recherche: Examen rapide
              Eléments examinés: 35320
              Temps écoulé: 2 minute(s), 28 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 10
              Valeur(s) du Registre infectée(s): 9
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 24
              Fichier(s) infecté(s): 122

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              HKEY_CLASSES_ROOT\bhonew.bhoapp (Trojan.BHO) -> No action taken.
              HKEY_CLASSES_ROOT\bhonew.bhoapp.1 (Trojan.BHO) -> No action taken.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> No action taken.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> No action taken.
              HKEY_CLASSES_ROOT\Interface\{4937d5d1-2039-409a-bd83-fec9b39b2356} (Trojan.BHO) -> No action taken.
              HKEY_CLASSES_ROOT\Interface\{caf9d798-c659-4b9b-8e19-ee27c3d04ee7} (Trojan.BHO) -> No action taken.
              HKEY_CLASSES_ROOT\Typelib\{15c7d7ad-a87a-4c0d-9d8b-637fcd3488ef} (Trojan.BHO) -> No action taken.
              HKEY_LOCAL_MACHINE\SOFTWARE\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webvideo (Trojan.FakeAlert) -> No action taken.

              Valeur(s) du Registre infectée(s):
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphcrvlj0eja3 (Trojan.Agent) -> No action taken.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphcrvlj0eja3 (Trojan.Agent) -> No action taken.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\wnslvxtf (Trojan.FakeAlert) -> No action taken.
              HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> No action taken.
              HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> No action taken.
              HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> No action taken.
              HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> No action taken.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\General\backupwallpaper (Hijack.Wallpaper) -> No action taken.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\General\wallpaper (Hijack.Wallpaper) -> No action taken.

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              C:\Program Files\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
              C:\Users\Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Packages (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3 (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
              C:\Users\Maitre Mario\AppData\Roaming\rhcvvlj0eja3\Quarantine\Packages (Rogue.Multiple) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008 (Rogue.AntivirusXP2008) -> No action taken.

              Fichier(s) infecté(s):
              C:\Windows\System32\lphcrvlj0eja3.exe (Trojan.Agent) -> No action taken.
              C:\Windows\endq.exe (Trojan.FakeAlert) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt1120.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt1177.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt1563.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt1676.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt18D5.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt1CA2.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt20FA.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt236.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt249A.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt25BC.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt2A38.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt2BE.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt2C10.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt2EAA.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt305D.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt333B.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt383E.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt3A03.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt3B8D.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt3EB9.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt41E9.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt41FC.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt43CE.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt43EA.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt45CD.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt48A.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt4CD5.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt4CFB.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt4EC9.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt5343.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt554C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt56A3.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt5766.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt5942.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt5BCE.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt5CD1.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt62FD.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt6565.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt6A86.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt6B5E.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt6E13.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt708.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt70AC.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt76E8.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt7715.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt7A8.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt7DB4.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt7E89.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt81F9.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt8257.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt8306.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt83DB.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt8409.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt8779.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt8915.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt896C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt8ADA.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt9147.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt91BD.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt91E3.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt9351.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt9B84.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt9C16.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.tt9F1.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttA621.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttA7E7.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttA9C0.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttABE3.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttB310.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttB4FF.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttB64C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttB9A0.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttBC7F.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttBF8A.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttC022.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttC103.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttC22C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttC542.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttC57C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttC71C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttCA14.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttCD0C.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttCF25.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttD046.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttD301.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttD506.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttD5AB.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttD869.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttD9E5.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttDE60.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttE1CD.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttE1EF.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttE54D.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttE7A4.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttE8A8.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttEE6.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttF12E.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttF140.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttF236.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttF4A1.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttF685.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttFCA.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttFD94.tmp (Rogue.Installer) -> No action taken.
              C:\Users\Mario\AppData\Local\Temp\.ttFDB9.tmp (Rogue.Installer) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\database.dat (Rogue.Multiple) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\license.txt (Rogue.Multiple) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\MFC71.dll (Rogue.Multiple) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\MFC71ENU.DLL (Rogue.Multiple) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\msvcp71.dll (Rogue.Multiple) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\msvcr71.dll (Rogue.Multiple) -> No action taken.
              C:\Program Files\rhcvvlj0eja3\rhcvvlj0eja3.exe.local (Rogue.Multiple) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk (Rogue.AntivirusXP2008) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk (Rogue.AntivirusXP2008) -> No action taken.
              C:\Windows\grswptdl.exe (Trojan.FakeAlert) -> No action taken.
              C:\Windows\System32\blphcrvlj0eja3.scr (Trojan.FakeAlert) -> No action taken.
              C:\Windows\System32\phcrvlj0eja3.bmp (Trojan.FakeAlert) -> No action taken.
              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antivirus XP 2008.lnk (Rogue.AntivirusXP) -> No action taken.
              1. esce que je le refait,en mode sans échec ou je peut le faire en mode normal
                1. Modérateur
                  En mode sans échec et scan complet, ça va peut-être te prendre 2-3h mais c'est mieux.
                  1. j ai faite l scan en mode normal,rien de découvert,voila le rapport

                    Malwarebytes' Anti-Malware 1.24
                    Version de la base de données: 1015
                    Windows 6.0.6001 Service Pack 1

                    21:12:32 2008-08-01
                    mbam-log-8-1-2008 (21-12-32).txt

                    Type de recherche: Examen rapide
                    Eléments examinés: 37799
                    Temps écoulé: 2 minute(s), 42 second(s)

                    Processus mémoire infecté(s): 0
                    Module(s) mémoire infecté(s): 0
                    Clé(s) du Registre infectée(s): 0
                    Valeur(s) du Registre infectée(s): 0
                    Elément(s) de données du Registre infecté(s): 0
                    Dossier(s) infecté(s): 0
                    Fichier(s) infecté(s): 0

                    Processus mémoire infecté(s):
                    (Aucun élément nuisible détecté)

                    Module(s) mémoire infecté(s):
                    (Aucun élément nuisible détecté)

                    Clé(s) du Registre infectée(s):
                    (Aucun élément nuisible détecté)

                    Valeur(s) du Registre infectée(s):
                    (Aucun élément nuisible détecté)

                    Elément(s) de données du Registre infecté(s):
                    (Aucun élément nuisible détecté)

                    Dossier(s) infecté(s):
                    (Aucun élément nuisible détecté)

                    Fichier(s) infecté(s):
                    (Aucun élément nuisible détecté)
                    1. voila le nouveau rapport hijack

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 21:20:14, on 2008-08-01
                      Platform: Windows Vista SP1 (WinNT 6.00.1905)
                      MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                      Boot mode: Normal

                      Running processes:
                      C:\Program Files\DigitalPersona\Bin\DpAgent.exe
                      C:\Windows\system32\taskeng.exe
                      C:\Windows\system32\Dwm.exe
                      C:\Windows\Explorer.EXE
                      C:\Windows\System32\rundll32.exe
                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      C:\Program Files\HP\QuickPlay\QPService.exe
                      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                      C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                      C:\Program Files\Windows Defender\MSASCui.exe
                      C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                      C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                      C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                      C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
                      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                      C:\Windows\hcwemMON.exe
                      C:\Program Files\Windows Sidebar\sidebar.exe
                      C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                      C:\Windows\ehome\ehtray.exe
                      C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
                      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      C:\Windows\System32\rundll32.exe
                      C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
                      C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                      C:\Program Files\Palm\Hotsync.exe
                      C:\Windows\ehome\ehmsas.exe
                      C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
                      C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
                      C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
                      C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Windows\system32\NOTEPAD.EXE
                      C:\Windows\system32\prevhost.exe
                      C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
                      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.canoe.ca/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                      R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                      R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                      O1 - Hosts: ::1 localhost
                      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                      O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
                      O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                      O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
                      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                      O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                      O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
                      O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
                      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                      O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                      O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
                      O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKLM\..\Run: [hcwemMON] hcwemMON.exe
                      O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                      O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                      O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
                      O4 - HKCU\..\Run: [DLL execute] temp.exe
                      O4 - HKCU\..\RunServices: [DLL execute] temp.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                      O4 - Startup: Palm Registration.lnk = C:\Program Files\Palm\register.exe
                      O4 - Global Startup: Bluetooth.lnk = ?
                      O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                      O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
                      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                      O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                      O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O13 - Gopher Prefix:
                      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                      O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
                      O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
                      O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                      O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
                      O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
                      O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
                      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                      O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                      1. j ai effacer les traces de norton

                        voila le nouveau rapport

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 21:38:28, on 2008-08-01
                        Platform: Windows Vista SP1 (WinNT 6.00.1905)
                        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                        Boot mode: Normal

                        Running processes:
                        C:\Program Files\DigitalPersona\Bin\DpAgent.exe
                        C:\Windows\system32\taskeng.exe
                        C:\Windows\system32\Dwm.exe
                        C:\Windows\Explorer.EXE
                        C:\Windows\System32\rundll32.exe
                        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                        C:\Program Files\HP\QuickPlay\QPService.exe
                        C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                        C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Program Files\Windows Defender\MSASCui.exe
                        C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                        C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                        C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
                        C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                        C:\Windows\hcwemMON.exe
                        C:\Program Files\Windows Sidebar\sidebar.exe
                        C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                        C:\Windows\ehome\ehtray.exe
                        C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
                        C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                        C:\Program Files\Palm\Hotsync.exe
                        C:\Windows\ehome\ehmsas.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
                        C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
                        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                        C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
                        C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                        C:\Program Files\Mozilla Firefox\firefox.exe
                        C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.canoe.ca/
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                        R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                        R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                        O1 - Hosts: ::1 localhost
                        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                        O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                        O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                        O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
                        O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                        O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                        O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                        O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
                        O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                        O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                        O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
                        O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
                        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                        O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                        O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                        O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
                        O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                        O4 - HKLM\..\Run: [hcwemMON] hcwemMON.exe
                        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                        O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                        O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
                        O4 - HKCU\..\Run: [DLL execute] temp.exe
                        O4 - HKCU\..\RunServices: [DLL execute] temp.exe
                        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                        O4 - Startup: Palm Registration.lnk = C:\Program Files\Palm\register.exe
                        O4 - Global Startup: Bluetooth.lnk = ?
                        O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                        O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
                        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                        O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                        O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                        O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                        O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                        O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O13 - Gopher Prefix:
                        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
                        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                        O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
                        O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
                        O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                        O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                        O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
                        O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
                        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                        O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                        1. sa semble correct mon affaire,j ai pu le fond d écran pis j ai pu le message anitivirus found ,,,,
                          Merci beaucoup de ton aide,vraiment apprécier ,

                          Bye
                          1. Modérateur
                            ---> Mets à jour Java :
                            https://www.java.com/fr/download/manual.jsp

                            ---> Redémarre en mode sans échec :
                            https://www.malekal.com/demarrer-windows-mode-sans-echec/

                            ---> Relance HijackThis et choisis Do a system scan only

                            ---> Coche les cases qui sont devant les lignes suivantes :

                            O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

                            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

                            O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

                            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

                            O4 - HKCU\..\Run: [DLL execute] temp.exe

                            O4 - HKCU\..\RunServices: [DLL execute] temp.exe

                            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

                            ---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

                            ---> Redémarre en mode normal et poste un dernier rapport HijackThis
                            1. c est fait,voila le rapport

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 21:38:28, on 2008-08-01
                              Platform: Windows Vista SP1 (WinNT 6.00.1905)
                              MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                              Boot mode: Normal

                              Running processes:
                              C:\Program Files\DigitalPersona\Bin\DpAgent.exe
                              C:\Windows\system32\taskeng.exe
                              C:\Windows\system32\Dwm.exe
                              C:\Windows\Explorer.EXE
                              C:\Windows\System32\rundll32.exe
                              C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                              C:\Program Files\HP\QuickPlay\QPService.exe
                              C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                              C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                              C:\Windows\System32\rundll32.exe
                              C:\Program Files\Windows Defender\MSASCui.exe
                              C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                              C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                              C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                              C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                              C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
                              C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                              C:\Windows\hcwemMON.exe
                              C:\Program Files\Windows Sidebar\sidebar.exe
                              C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                              C:\Windows\ehome\ehtray.exe
                              C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
                              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
                              C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                              C:\Program Files\Palm\Hotsync.exe
                              C:\Windows\ehome\ehmsas.exe
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
                              C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
                              C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                              C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
                              C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.canoe.ca/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                              R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                              R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                              O1 - Hosts: ::1 localhost
                              O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                              O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                              O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                              O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
                              O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                              O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                              O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                              O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                              O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
                              O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                              O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                              O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
                              O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
                              O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                              O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                              O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                              O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                              O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
                              O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              O4 - HKLM\..\Run: [hcwemMON] hcwemMON.exe
                              O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                              O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                              O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                              O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
                              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                              O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
                              O4 - HKCU\..\Run: [DLL execute] temp.exe
                              O4 - HKCU\..\RunServices: [DLL execute] temp.exe
                              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                              O4 - Startup: Palm Registration.lnk = C:\Program Files\Palm\register.exe
                              O4 - Global Startup: Bluetooth.lnk = ?
                              O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                              O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
                              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                              O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                              O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                              O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                              O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                              O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O13 - Gopher Prefix:
                              O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
                              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                              O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
                              O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
                              O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                              O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                              O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
                              O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
                              O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                              O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                              1. Modérateur
                                C'est le rapport de tout à l'heure, il m'en faut un nouveau.
                                1. voila se que j obtient en faisant un rapport,

                                  Logfile of Trend Micro HijackThis v2.0.2
                                  Scan saved at 15:50:31, on 2008-08-02
                                  Platform: Windows Vista SP1 (WinNT 6.00.1905)
                                  MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                                  Boot mode: Normal

                                  Running processes:
                                  C:\Program Files\DigitalPersona\Bin\DpAgent.exe
                                  C:\Windows\system32\taskeng.exe
                                  C:\Windows\system32\Dwm.exe
                                  C:\Windows\Explorer.EXE
                                  C:\Windows\System32\rundll32.exe
                                  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                  C:\Program Files\HP\QuickPlay\QPService.exe
                                  C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                                  C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                                  C:\Program Files\Windows Defender\MSASCui.exe
                                  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                                  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                                  C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
                                  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                  C:\Program Files\Windows Sidebar\sidebar.exe
                                  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                                  C:\Windows\ehome\ehtray.exe
                                  C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
                                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                  C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
                                  C:\Program Files\Palm\Hotsync.exe
                                  C:\Windows\System32\rundll32.exe
                                  C:\Windows\ehome\ehmsas.exe
                                  C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
                                  C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
                                  C:\Windows\system32\SearchFilterHost.exe
                                  C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
                                  C:\Program Files\Mozilla Firefox\firefox.exe
                                  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.canoe.ca/
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=notebook
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                  R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                                  R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                                  O1 - Hosts: ::1 localhost
                                  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                  O2 - BHO: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                  O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                                  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
                                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                                  O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
                                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                  O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files\Freecorder\tbFree.dll
                                  O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                                  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                  O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
                                  O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                                  O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                                  O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
                                  O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
                                  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                                  O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                                  O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                                  O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
                                  O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [hcwemMON] hcwemMON.exe
                                  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                                  O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                                  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                                  O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
                                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                  O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
                                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                  O4 - Startup: Palm Registration.lnk = C:\Program Files\Palm\register.exe
                                  O4 - Global Startup: Bluetooth.lnk = ?
                                  O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
                                  O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
                                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                                  O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                                  O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
                                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                                  O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                                  O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                                  O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                  O13 - Gopher Prefix:
                                  O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
                                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-ca.cab
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                  O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                                  O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
                                  O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
                                  O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                  O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                                  O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
                                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                                  O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
                                  O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
                                  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                                  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                                  • 1
                                  • 2