Internet 7.0

avast57 -  
Bonjour,

je n'arrive pas à l'installer.
Configuration: Windows XP
Internet Explorer 6.0

18 réponses

  • Votes
  • Date
  • Date décroissante
Résumé de la discussion

Une difficulté d'installation est signalée sous Windows XP avec Internet Explorer 6.0, où l'utilisateur ne parvient pas à mener l'installation et évoque des messages d'erreur nécessitant une révision du système. Plusieurs réponses suggèrent des approches variées pour l'installation, patienter, vérifier la différence entre éléments évoqués, ou revisiter le journal des logs et les configurations pour identifier une cause potentielle. D'autres échanges mentionnent des observations contextuelles et des remarques d'orthographe, sans consensus clair sur une solution unique, tandis que certains évoquent des incohérences ou des problèmes potentiels liés à la sécurité. En cas de détails supplémentaires, la meilleure pratique consiste à préciser les messages d'erreur, tester sur un autre navigateur ou envisager une réinstallation fiable, sans tirer de conclusion définitive.

Bobot (l’IA à votre service)
  1. gab1
    ne l installe pas
    installe firefox
    1. avast57 Auteur
      Bonsoir et merci!

      C'est quoi la différence?
  4. Darkgogol
    salut deja kompoZer ces remarques on peut s'en passer soit poli et soigne ton orthographe

    maintenant avast57 c'est quoi le problème exactement ??
    1. avast57 Auteur
      je n'arrive pas l installer! msg d erreur et je dois eteindre le pc
  7. Darkgogol
    tu as installer le services pack 3 ?? car il s'install automatiquement avec le SP3
    1. avast57 Auteur
      pour etre franc je ne sais pas ce que sait
  9. ^^Marie^^
    Envoie un log hijackthis

    1. avast57 Auteur
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:13:29, on 07/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Spyware Terminator\sp_rsser.exe
      C:\WINDOWS\System32\PAStiSvc.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
      C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE
      C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
      C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\HiYo\bin\HiYo.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
      D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\PROGRA~1\INCRED~1\bin\IncMail.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: EWPBrowseObject Class - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
      O4 - HKLM\..\Run: [PhilipsRemote] C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE
      O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
      O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [HiYo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
      O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
      O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
      O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
      O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
      O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
      O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
      O14 - IERESET.INF: START_PAGE_URL=https://www.google.com/?gws_rd=ssl
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
      O20 - AppInit_DLLs:
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
      O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      O24 - Desktop Component 0: (no name) - http://jackck.free.fr/images/gifs_animes/gif_23_anim.gif
      O24 - Desktop Component 1: (no name) - http://jackck.free.fr/images/gifs_animes/gif_24_anim.gif
      O24 - Desktop Component 2: (no name) - http://jackck.free.fr/images/gifs_animes/gif_06_anim.gif
      O24 - Desktop Component 3: (no name) - http://www.speakwell.com/well/2005winter/cinema/elvis.gif
      O24 - Desktop Component 4: (no name) - http://img.hebus.com/2006/06/29/060629093350_62.gif
      O24 - Desktop Component 5: (no name) - http://img.hebus.com/2004/11/12/041112235337_15.jpg
    2. avast57 Auteur
      verdict?
    3. avast57 Auteur
      Bon tant pis
      merci
  11. gab1
    moi je c est pas fair l ijack dsl mais bon marie reviendra
    1. avast57 Auteur
      c gentil merci! mais je crois qu'elle est partie (lol)
  12. gab1
    attend je vais la cherché mdr
    1. avast57 Auteur
      non je ne vais pas m'imposer non plus! merci à toi
  13. gab1
    non c est normal je lui envoyé un message j ai carrément peur si elle répond
    1. avast57 Auteur
      a ce point? faut toujours être poli avec les dames
  15. Darkgogol
    Si tu veux a tout prix avoir IE 7 install le services pack 3 de windows XP et IE7 sera installer automatiquement

    http://www.microsoft.com/downloads/details.aspx?displaylang=fr&FamilyID=2fcde6ce-b5fb-4488-8c50-fe22559d164e

    C'est un fichier iso donc soit tu le grave ou soit tu le monte sur un lecteur virtuel voili voualouuu
    1. gab1
      il me semble que sa peux abimer quelle que chose mais quoi je c est plus car je l avais fait et j ai du re formater mon pc
      1. ^^Marie^^
        Slt

        1) Affiche les fichiers et dossiers cachés …
        Pour ce faire, tu vas dans un dossier, par ex. "Mes Images".
        Ensuite, clique sur >
        Outils > Options des dossiers ...
        clique sur l' onglet « Affichage » et ...
        Ou bien
        « Outil »
        « Option Internet »
        « Avancés »
        coche ---> Afficher les fichiers et dossiers cachés
        décoche > Masquer les extensions des fichiers dont le type est connu
        décoche > Masquer les fichiers protégés du système d' exploitation (recommandé).
        « Appliquer » et « OK ».
        refaire la manip inverse en fin de désinfection

        Télécharges ComboFix à partir d'un de ces liens :
        En premier
        http://download.bleepingcomputer.com/sUBs/ComboFix.exe

        A lire
        https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

        Et important, enregistre le sur le bureau.

        Avant d'utiliser ComboFix :

        ► Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

        ► Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

        Une fois fait, sur ton bureau double-clic sur Combofix.exe.

        - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

        /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

        - En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

        - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

        ► Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

        ► Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

        1. avast57
          bonjour Marie
          je vais essayer
        2. avast57
          Voici le rapport Marie

          ComboFix 08-08-07.05 - jacky 2008-08-08 9:53:02.2 - NTFSx86
          Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.179 [GMT 2:00]
          Endroit: D:\Programmes\ComboFix.exe
          * Création d'un nouveau point de restauration

          [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
          .

          ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-08 to 2008-08-08 ))))))))))))))))))))))))))))))))))))
          .

          2008-08-07 22:13 . 2008-08-07 22:13 <REP> d-------- C:\Program Files\Trend Micro
          2008-08-07 19:51 . 2008-08-07 19:51 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
          2008-08-07 19:50 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
          2008-08-07 19:50 . 2008-08-07 19:52 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
          2008-08-07 19:48 . 2008-08-08 09:59 <REP> d-------- C:\WINDOWS\Internet Logs
          2008-08-07 19:13 . 2008-08-07 19:13 249,592 --a------ C:\WINDOWS\system32\cssdll32.dll
          2008-08-07 19:12 . 2008-08-07 19:29 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Comodo
          2008-08-07 19:12 . 2008-08-07 19:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\comodo
          2008-08-07 18:04 . 2008-08-07 18:04 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Malwarebytes
          2008-08-07 18:04 . 2008-08-07 18:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2008-08-07 16:32 . 2008-08-07 16:32 <REP> d-------- C:\Program Files\CCleaner
          2008-08-07 16:06 . 2008-08-07 16:06 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Thunderbird
          2008-08-07 15:50 . 2008-08-07 15:50 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Yahoo!
          2008-08-07 15:50 . 2008-08-07 15:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
          2008-08-04 12:50 . 2008-08-06 23:00 <REP> dr------- C:\Documents and Settings\jacky\Mes images
          2008-07-28 20:35 . 2008-07-28 20:35 <REP> d-------- C:\WINDOWS\system32\Adobe
          2008-07-28 20:35 . 2008-07-28 20:35 <REP> d-------- C:\WINDOWS\Profiles
          2008-07-28 20:35 . 2008-07-28 20:35 <REP> d-------- C:\Documents and Settings\jacky\Application Data\InterTrust
          2008-07-28 20:33 . 2005-02-22 22:58 11,776 --a------ C:\WINDOWS\system32\drivers\afc.sys
          2008-07-28 20:32 . 2008-07-28 20:32 <REP> d-------- C:\Program Files\Fichiers communs\ArcSoft
          2008-07-28 12:11 . 2008-07-28 12:14 <REP> d-------- C:\Program Files\WinMX Music
          2008-07-28 12:11 . 2008-07-28 12:15 <REP> d-------- C:\Documents and Settings\jacky\Application Data\WinMX Music
          2008-07-18 20:39 . 2008-07-18 20:39 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR
          2008-07-18 10:26 . 2008-07-18 10:26 39,348 --ah----- C:\WINDOWS\system32\mlfcache.dat
          2008-07-18 10:18 . 2008-07-18 10:18 <REP> d-------- C:\Program Files\iPod
          2008-07-18 10:17 . 2008-08-07 18:15 <REP> d-------- C:\Program Files\Bonjour
          2008-07-12 11:08 . 2008-07-12 11:08 <REP> d-------- C:\Program Files\Sun

          .
          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2008-08-08 07:37 --------- d-----w C:\Documents and Settings\jacky\Application Data\Spyware Terminator
          2008-08-08 07:23 --------- d-----w C:\Program Files\PowerArchiver
          2008-08-07 20:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
          2008-08-07 19:28 --------- d-----w C:\Program Files\eChanblard
          2008-08-07 16:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spyware Terminator
          2008-08-07 13:57 --------- d-----w C:\Program Files\DVDStyler
          2008-08-07 13:45 --------- d-----w C:\Program Files\speed-bit
          2008-08-07 12:43 --------- d-----w C:\Program Files\Yahoo!
          2008-08-06 12:46 --------- d-----w C:\Program Files\AnvSoft
          2008-08-06 10:41 --------- d-----w C:\Program Files\eMule
          2008-08-05 19:45 --------- d-----w C:\Program Files\Google
          2008-08-04 20:45 --------- d-----w C:\Program Files\CFWebAdvancedU_BOBTV.FR
          2008-08-04 20:05 --------- d-----w C:\Program Files\Spyware Terminator
          2008-07-30 12:40 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
          2008-07-28 18:35 --------- d-----w C:\Documents and Settings\jacky\Application Data\ArcSoft
          2008-07-28 18:32 --------- d--h--w C:\Program Files\InstallShield Installation Information
          2008-07-28 18:32 --------- d-----w C:\Program Files\ArcSoft
          2008-07-21 17:11 --------- d-----w C:\Program Files\Incomplete
          2008-07-21 17:08 --------- d-----w C:\Program Files\LimeWire
          2008-07-18 08:19 --------- d-----w C:\Program Files\iTunes
          2008-07-18 08:16 --------- d-----w C:\Program Files\QuickTime
          2008-07-18 08:01 --------- d-----w C:\Program Files\Safari
          2008-07-12 09:07 --------- d-----w C:\Program Files\Java
          2008-06-27 16:42 141,312 ----a-w C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
          2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
          2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
          2008-06-20 09:32 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
          2008-06-18 20:20 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia
          2008-06-18 20:20 --------- d-----w C:\Program Files\AVS4YOU
          2008-06-18 20:15 --------- d-----w C:\Documents and Settings\jacky\Application Data\AVS4YOU
          2008-06-15 10:12 --------- d-----w C:\Documents and Settings\jacky\Application Data\Megaupload
          2008-06-15 10:10 --------- d-----w C:\Program Files\Megaupload
          2008-06-14 21:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
          2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
          2007-12-08 22:12 4,802,192 ----a-w C:\Program Files\powarc1021fr.exe
          2007-12-03 21:59 47,360 ----a-w C:\Documents and Settings\jacky\Application Data\pcouffin.sys
          2007-12-01 18:17 8,176,384 ----a-w C:\Program Files\SpywareTerminatorSetup.exe
          2007-12-01 18:13 5,948,105 ----a-w C:\Program Files\WINSOS.EXE
          2007-12-01 18:02 10,780,535 ----a-w C:\Program Files\AKR.zip
          2007-11-29 18:50 4,795,040 ----a-w C:\Program Files\powarc1021frrc2.exe
          2007-11-22 20:48 22,594,856 ----a-w C:\Program Files\SkypeSetup.exe
          2007-11-21 23:31 35,674,728 ----a-w C:\Program Files\Nero-6.6.1.15a.exe
          2007-11-20 22:26 4,475,659 ----a-w C:\Program Files\AudioDVDCreator19.exe
          2007-10-18 21:32 2,442,205 ----a-w C:\Program Files\eMule047c.exe
          2007-09-23 00:17 2,452,082 ----a-w C:\Program Files\sdfree.exe
          2007-09-22 23:55 1,104,707 ----a-w C:\Program Files\SetupVirtualCloneDrive5145.exe
          2007-04-25 14:58 842,384 -c--a-w C:\Program Files\7z445.exe
          2007-01-24 19:13 22,845,992 ----a-w C:\Program Files\AdbeRdr80_fr_FR.exe
          2007-01-20 19:26 36,808,256 ----a-w C:\Program Files\iTunesSetup.exe
          .

          ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          REGEDIT4
          *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

          [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
          2008-06-25 19:13 160496 --a------ C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
          "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-03 08:47 68856]
          "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-12-30 18:34 214456]
          "NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2005-05-19 20:38 1957888]
          "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
          "Ulead AutoDetector"="C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe" [2003-11-19 14:03 45056]
          "PhilipsRemote"="C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE" [2006-01-17 13:12 745472]
          "MMTray"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe" [2006-01-17 13:12 135168]
          "mmtask"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe" [2006-01-17 13:12 53248]
          "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
          "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-02-20 09:29 185896]
          "HiYo"="C:\Program Files\HiYo\bin\HiYo.exe" [2008-05-21 12:19 143360]
          "AppleSyncNotifier"="C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 09:47 116040]
          "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-27 10:50 413696]
          "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-10 10:51 289064]
          "SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-06-27 18:42 1817600]
          "SoundMan"="SOUNDMAN.EXE" [2004-06-18 10:31 67584 C:\WINDOWS\SOUNDMAN.EXE]

          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
          "AppInit_DLLs"=

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
          "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
          "vidc.fvfw"= ffvfw.dll
          "msacm.avis"= ffvfw.dll
          "msacm.mpegacm"= mpegacm.acm
          "VIDC.JPEG"= JpegCode.dll
          "VIDC.MJPG"= JpegCode.dll
          "VIDC.HFYU"= huffyuv.dll

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
          Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

          [HKEY_LOCAL_MACHINE\software\microsoft\security center]
          "AntiVirusOverride"=dword:00000001

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
          "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
          "%windir%\\system32\\sessmgr.exe"=
          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
          "C:\\Program Files\\LimeWire\\LimeWire.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IncrediMail_Install.exe"=
          "C:\\Program Files\\eMule\\eMule.exe"=
          "C:\\WINDOWS\\system32\\dpvsetup.exe"=
          "C:\\Program Files\\Ahead\\Nero\\nero.exe"=
          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
          "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
          "C:\\Program Files\\eChanblard\\emule.exe"=
          "C:\\Program Files\\Shareaza\\Shareaza.exe"=
          "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
          "C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
          "C:\\Program Files\\iTunes\\iTunes.exe"=
          "C:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe"=

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
          "20247:TCP"= 20247:TCP:BitComet 20247 TCP
          "20247:UDP"= 20247:UDP:BitComet 20247 UDP

          R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35]
          R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-06-27 18:42]
          R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]
          R3 PAC7311;Trust WB-3300p Mini HiRes Webcam;C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2005-10-18 12:48]
          S3 DSCVc;Video Capture;C:\WINDOWS\system32\DRIVERS\CoachVc.sys [2003-11-03 17:31]
          S3 FileObjInfo;STFileDriver;C:\Documents and Settings\All Users\Application Data\Spyware Terminator\FileObjInfo.sys [2008-06-27 18:42]
          S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
          S3 QsndEnum;QSound Virtual Audio Devices Bus Enumerator;C:\WINDOWS\system32\DRIVERS\QsndEnum.sys []

          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{17e6e936-79bc-11dc-8526-001109279c45}]
          \Shell\AutoRun\command - RavMon.exe
          \Shell\explore\Command - RavMon.exe -e
          \Shell\open\Command - RavMon.exe
          .
          Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

          2008-07-28 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
          - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
          .
          .
          ------- Supplementary Scan -------
          .
          R0 -: HKCU-Main,Search Page = hxxp://www.google.com
          R0 -: HKCU-Main,Search Bar = hxxp://www.google.com/ie
          R0 -: HKLM-Main,Default_Search_URL = hxxp://www.google.com/ie
          R0 -: HKLM-Main,Start Page = hxxp://www.ustart.org
          R1 -: HKCU-Internet Settings,ProxyOverride = *.local
          R0 -: HKCU-Search,SearchAssistant = hxxp://www.google.com/ie
          R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
          R0 -: HKLM-Search,SearchAssistant = hxxp://www.google.com/ie
          O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O8 -: Easy-WebPrint Ajouter à la liste d'impressions - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
          O8 -: Easy-WebPrint Impression rapide - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
          O8 -: Easy-WebPrint Imprimer - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
          O8 -: Easy-WebPrint Prévisualiser - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
          O8 -: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
          O8 -: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm

          **************************************************************************

          catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2008-08-08 09:59:52
          Windows 5.1.2600 Service Pack 2 NTFS

          Balayage processus cach‚s ...

          Balayage cach‚ autostart entries ...

          Balayage des fichiers cach‚s ...

          Scan termin‚ avec succŠs
          Les fichiers cach‚s: 0

          **************************************************************************
          .
          ------------------------ Other Running Processes ------------------------
          .
          C:\WINDOWS\system32\ati2evxx.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          C:\Program Files\Spyware Terminator\sp_rsser.exe
          C:\WINDOWS\system32\PAStiSvc.exe
          C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          C:\WINDOWS\system32\ati2evxx.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
          C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          C:\PROGRA~1\INCRED~1\bin\ImApp.exe
          C:\Program Files\iPod\bin\iPodService.exe
          .
          **************************************************************************
          .
          Temps d'accomplissement: 2008-08-08 10:03:11 - machine was rebooted
          ComboFix-quarantined-files.txt 2008-08-08 08:03:05

          Pre-Run: 5,421,109,248 octets libres
          Post-Run: 5,922,029,568 octets libres

          227 --- E O F --- 2008-08-07 14:47:23
        3. avast57
          Voici le rapport Marie

          ComboFix 08-08-07.05 - jacky 2008-08-08 9:53:02.2 - NTFSx86
          Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.179 [GMT 2:00]
          Endroit: D:\Programmes\ComboFix.exe
          * Création d'un nouveau point de restauration

          [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
          .

          ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-08 to 2008-08-08 ))))))))))))))))))))))))))))))))))))
          .

          2008-08-07 22:13 . 2008-08-07 22:13 <REP> d-------- C:\Program Files\Trend Micro
          2008-08-07 19:51 . 2008-08-07 19:51 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
          2008-08-07 19:50 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
          2008-08-07 19:50 . 2008-08-07 19:52 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
          2008-08-07 19:48 . 2008-08-08 09:59 <REP> d-------- C:\WINDOWS\Internet Logs
          2008-08-07 19:13 . 2008-08-07 19:13 249,592 --a------ C:\WINDOWS\system32\cssdll32.dll
          2008-08-07 19:12 . 2008-08-07 19:29 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Comodo
          2008-08-07 19:12 . 2008-08-07 19:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\comodo
          2008-08-07 18:04 . 2008-08-07 18:04 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Malwarebytes
          2008-08-07 18:04 . 2008-08-07 18:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2008-08-07 16:32 . 2008-08-07 16:32 <REP> d-------- C:\Program Files\CCleaner
          2008-08-07 16:06 . 2008-08-07 16:06 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Thunderbird
          2008-08-07 15:50 . 2008-08-07 15:50 <REP> d-------- C:\Documents and Settings\jacky\Application Data\Yahoo!
          2008-08-07 15:50 . 2008-08-07 15:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
          2008-08-04 12:50 . 2008-08-06 23:00 <REP> dr------- C:\Documents and Settings\jacky\Mes images
          2008-07-28 20:35 . 2008-07-28 20:35 <REP> d-------- C:\WINDOWS\system32\Adobe
          2008-07-28 20:35 . 2008-07-28 20:35 <REP> d-------- C:\WINDOWS\Profiles
          2008-07-28 20:35 . 2008-07-28 20:35 <REP> d-------- C:\Documents and Settings\jacky\Application Data\InterTrust
          2008-07-28 20:33 . 2005-02-22 22:58 11,776 --a------ C:\WINDOWS\system32\drivers\afc.sys
          2008-07-28 20:32 . 2008-07-28 20:32 <REP> d-------- C:\Program Files\Fichiers communs\ArcSoft
          2008-07-28 12:11 . 2008-07-28 12:14 <REP> d-------- C:\Program Files\WinMX Music
          2008-07-28 12:11 . 2008-07-28 12:15 <REP> d-------- C:\Documents and Settings\jacky\Application Data\WinMX Music
          2008-07-18 20:39 . 2008-07-18 20:39 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR
          2008-07-18 10:26 . 2008-07-18 10:26 39,348 --ah----- C:\WINDOWS\system32\mlfcache.dat
          2008-07-18 10:18 . 2008-07-18 10:18 <REP> d-------- C:\Program Files\iPod
          2008-07-18 10:17 . 2008-08-07 18:15 <REP> d-------- C:\Program Files\Bonjour
          2008-07-12 11:08 . 2008-07-12 11:08 <REP> d-------- C:\Program Files\Sun

          .
          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2008-08-08 07:37 --------- d-----w C:\Documents and Settings\jacky\Application Data\Spyware Terminator
          2008-08-08 07:23 --------- d-----w C:\Program Files\PowerArchiver
          2008-08-07 20:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
          2008-08-07 19:28 --------- d-----w C:\Program Files\eChanblard
          2008-08-07 16:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spyware Terminator
          2008-08-07 13:57 --------- d-----w C:\Program Files\DVDStyler
          2008-08-07 13:45 --------- d-----w C:\Program Files\speed-bit
          2008-08-07 12:43 --------- d-----w C:\Program Files\Yahoo!
          2008-08-06 12:46 --------- d-----w C:\Program Files\AnvSoft
          2008-08-06 10:41 --------- d-----w C:\Program Files\eMule
          2008-08-05 19:45 --------- d-----w C:\Program Files\Google
          2008-08-04 20:45 --------- d-----w C:\Program Files\CFWebAdvancedU_BOBTV.FR
          2008-08-04 20:05 --------- d-----w C:\Program Files\Spyware Terminator
          2008-07-30 12:40 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
          2008-07-28 18:35 --------- d-----w C:\Documents and Settings\jacky\Application Data\ArcSoft
          2008-07-28 18:32 --------- d--h--w C:\Program Files\InstallShield Installation Information
          2008-07-28 18:32 --------- d-----w C:\Program Files\ArcSoft
          2008-07-21 17:11 --------- d-----w C:\Program Files\Incomplete
          2008-07-21 17:08 --------- d-----w C:\Program Files\LimeWire
          2008-07-18 08:19 --------- d-----w C:\Program Files\iTunes
          2008-07-18 08:16 --------- d-----w C:\Program Files\QuickTime
          2008-07-18 08:01 --------- d-----w C:\Program Files\Safari
          2008-07-12 09:07 --------- d-----w C:\Program Files\Java
          2008-06-27 16:42 141,312 ----a-w C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
          2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
          2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
          2008-06-20 09:32 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
          2008-06-18 20:20 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia
          2008-06-18 20:20 --------- d-----w C:\Program Files\AVS4YOU
          2008-06-18 20:15 --------- d-----w C:\Documents and Settings\jacky\Application Data\AVS4YOU
          2008-06-15 10:12 --------- d-----w C:\Documents and Settings\jacky\Application Data\Megaupload
          2008-06-15 10:10 --------- d-----w C:\Program Files\Megaupload
          2008-06-14 21:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
          2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
          2007-12-08 22:12 4,802,192 ----a-w C:\Program Files\powarc1021fr.exe
          2007-12-03 21:59 47,360 ----a-w C:\Documents and Settings\jacky\Application Data\pcouffin.sys
          2007-12-01 18:17 8,176,384 ----a-w C:\Program Files\SpywareTerminatorSetup.exe
          2007-12-01 18:13 5,948,105 ----a-w C:\Program Files\WINSOS.EXE
          2007-12-01 18:02 10,780,535 ----a-w C:\Program Files\AKR.zip
          2007-11-29 18:50 4,795,040 ----a-w C:\Program Files\powarc1021frrc2.exe
          2007-11-22 20:48 22,594,856 ----a-w C:\Program Files\SkypeSetup.exe
          2007-11-21 23:31 35,674,728 ----a-w C:\Program Files\Nero-6.6.1.15a.exe
          2007-11-20 22:26 4,475,659 ----a-w C:\Program Files\AudioDVDCreator19.exe
          2007-10-18 21:32 2,442,205 ----a-w C:\Program Files\eMule047c.exe
          2007-09-23 00:17 2,452,082 ----a-w C:\Program Files\sdfree.exe
          2007-09-22 23:55 1,104,707 ----a-w C:\Program Files\SetupVirtualCloneDrive5145.exe
          2007-04-25 14:58 842,384 -c--a-w C:\Program Files\7z445.exe
          2007-01-24 19:13 22,845,992 ----a-w C:\Program Files\AdbeRdr80_fr_FR.exe
          2007-01-20 19:26 36,808,256 ----a-w C:\Program Files\iTunesSetup.exe
          .

          ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          REGEDIT4
          *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

          [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
          2008-06-25 19:13 160496 --a------ C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
          "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-03 08:47 68856]
          "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-12-30 18:34 214456]
          "NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2005-05-19 20:38 1957888]
          "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
          "Ulead AutoDetector"="C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe" [2003-11-19 14:03 45056]
          "PhilipsRemote"="C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE" [2006-01-17 13:12 745472]
          "MMTray"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe" [2006-01-17 13:12 135168]
          "mmtask"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe" [2006-01-17 13:12 53248]
          "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
          "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-02-20 09:29 185896]
          "HiYo"="C:\Program Files\HiYo\bin\HiYo.exe" [2008-05-21 12:19 143360]
          "AppleSyncNotifier"="C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 09:47 116040]
          "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-27 10:50 413696]
          "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-10 10:51 289064]
          "SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-06-27 18:42 1817600]
          "SoundMan"="SOUNDMAN.EXE" [2004-06-18 10:31 67584 C:\WINDOWS\SOUNDMAN.EXE]

          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
          "AppInit_DLLs"=

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
          "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
          "vidc.fvfw"= ffvfw.dll
          "msacm.avis"= ffvfw.dll
          "msacm.mpegacm"= mpegacm.acm
          "VIDC.JPEG"= JpegCode.dll
          "VIDC.MJPG"= JpegCode.dll
          "VIDC.HFYU"= huffyuv.dll

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
          Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

          [HKEY_LOCAL_MACHINE\software\microsoft\security center]
          "AntiVirusOverride"=dword:00000001

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
          "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
          "%windir%\\system32\\sessmgr.exe"=
          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
          "C:\\Program Files\\LimeWire\\LimeWire.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IncrediMail_Install.exe"=
          "C:\\Program Files\\eMule\\eMule.exe"=
          "C:\\WINDOWS\\system32\\dpvsetup.exe"=
          "C:\\Program Files\\Ahead\\Nero\\nero.exe"=
          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
          "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
          "C:\\Program Files\\eChanblard\\emule.exe"=
          "C:\\Program Files\\Shareaza\\Shareaza.exe"=
          "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
          "C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
          "C:\\Program Files\\iTunes\\iTunes.exe"=
          "C:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe"=

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
          "20247:TCP"= 20247:TCP:BitComet 20247 TCP
          "20247:UDP"= 20247:UDP:BitComet 20247 UDP

          R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35]
          R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-06-27 18:42]
          R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]
          R3 PAC7311;Trust WB-3300p Mini HiRes Webcam;C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2005-10-18 12:48]
          S3 DSCVc;Video Capture;C:\WINDOWS\system32\DRIVERS\CoachVc.sys [2003-11-03 17:31]
          S3 FileObjInfo;STFileDriver;C:\Documents and Settings\All Users\Application Data\Spyware Terminator\FileObjInfo.sys [2008-06-27 18:42]
          S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
          S3 QsndEnum;QSound Virtual Audio Devices Bus Enumerator;C:\WINDOWS\system32\DRIVERS\QsndEnum.sys []

          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{17e6e936-79bc-11dc-8526-001109279c45}]
          \Shell\AutoRun\command - RavMon.exe
          \Shell\explore\Command - RavMon.exe -e
          \Shell\open\Command - RavMon.exe
          .
          Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

          2008-07-28 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
          - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
          .
          .
          ------- Supplementary Scan -------
          .
          R0 -: HKCU-Main,Search Page = hxxp://www.google.com
          R0 -: HKCU-Main,Search Bar = hxxp://www.google.com/ie
          R0 -: HKLM-Main,Default_Search_URL = hxxp://www.google.com/ie
          R0 -: HKLM-Main,Start Page = hxxp://www.ustart.org
          R1 -: HKCU-Internet Settings,ProxyOverride = *.local
          R0 -: HKCU-Search,SearchAssistant = hxxp://www.google.com/ie
          R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
          R0 -: HKLM-Search,SearchAssistant = hxxp://www.google.com/ie
          O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O8 -: Easy-WebPrint Ajouter à la liste d'impressions - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
          O8 -: Easy-WebPrint Impression rapide - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
          O8 -: Easy-WebPrint Imprimer - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
          O8 -: Easy-WebPrint Prévisualiser - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
          O8 -: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
          O8 -: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm

          **************************************************************************

          catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2008-08-08 09:59:52
          Windows 5.1.2600 Service Pack 2 NTFS

          Balayage processus cach‚s ...

          Balayage cach‚ autostart entries ...

          Balayage des fichiers cach‚s ...

          Scan termin‚ avec succŠs
          Les fichiers cach‚s: 0

          **************************************************************************
          .
          ------------------------ Other Running Processes ------------------------
          .
          C:\WINDOWS\system32\ati2evxx.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          C:\Program Files\Spyware Terminator\sp_rsser.exe
          C:\WINDOWS\system32\PAStiSvc.exe
          C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          C:\WINDOWS\system32\ati2evxx.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
          C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          C:\PROGRA~1\INCRED~1\bin\ImApp.exe
          C:\Program Files\iPod\bin\iPodService.exe
          .
          **************************************************************************
          .
          Temps d'accomplissement: 2008-08-08 10:03:11 - machine was rebooted
          ComboFix-quarantined-files.txt 2008-08-08 08:03:05

          Pre-Run: 5,421,109,248 octets libres
          Post-Run: 5,922,029,568 octets libres

          227 --- E O F --- 2008-08-07 14:47:23
      2. ^^Marie^^
        Re

        Pourquoi tu l'as mis en D ?

        Refais un log hijacthis

        1. avast57
          je l ai mis en d pour economiser de la place. pas bien?

          VOICI LE RLogfile of Trend Micro HijackThis v2.0.2
          Scan saved at 10:30:19, on 08/08/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          C:\Program Files\Spyware Terminator\sp_rsser.exe
          C:\WINDOWS\System32\PAStiSvc.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
          C:\WINDOWS\SOUNDMAN.EXE
          C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
          C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\HiYo\bin\HiYo.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
          D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
          C:\Program Files\IncrediMail\bin\IncMail.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
          O2 - BHO: EWPBrowseObject Class - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
          O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
          O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
          O4 - HKLM\..\Run: [PhilipsRemote] C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE
          O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
          O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [HiYo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
          O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
          O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
          O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
          O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
          O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
          O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
          O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
          O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
          O14 - IERESET.INF: START_PAGE_URL=https://www.google.com/?gws_rd=ssl
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
          O20 - AppInit_DLLs:
          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
          O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
          O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
        2. avast57
          je l ai mis en d pour economiser de la place. pas bien?

          VOICI LE RLogfile of Trend Micro HijackThis v2.0.2
          Scan saved at 10:30:19, on 08/08/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          C:\Program Files\Spyware Terminator\sp_rsser.exe
          C:\WINDOWS\System32\PAStiSvc.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
          C:\WINDOWS\SOUNDMAN.EXE
          C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
          C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\HiYo\bin\HiYo.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
          D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
          C:\Program Files\IncrediMail\bin\IncMail.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
          O2 - BHO: EWPBrowseObject Class - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
          O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
          O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
          O4 - HKLM\..\Run: [PhilipsRemote] C:\PROGRA~1\MUSICM~1\MUSICM~1\PHILIP~1.EXE
          O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
          O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [HiYo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
          O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
          O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
          O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
          O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
          O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
          O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
          O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
          O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
          O14 - IERESET.INF: START_PAGE_URL=https://www.google.com/?gws_rd=ssl
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
          O20 - AppInit_DLLs:
          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
          O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
          O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Discussions similaires

      FOTOSE (allemagne)
      lix

      13 réponses
      ATTENTION : escroquerie à la carte bleue !!
      dvrg

      80 réponses
      developement fotos!!
      dédé

      2 réponses
      internet/prelevement
      quentinois

      2 réponses