Aide pour rapport hijackthis

Salut,

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix.txt

merci de m'aider
voici le rapport demandé

ComboFix 08-09-20.05 - Densa 2008-09-21 9:16:36.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.598 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Densa\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Densa\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\ktd32.atm
C:\WINDOWS\system32\otnjvtmx.dll
C:\WINDOWS\system32\rodbygrf.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-08-21 au 2008-09-21 ))))))))))))))))))))))))))))))))))))
.

2008-09-21 08:06 . 2008-09-21 08:06 <REP> d-------- C:\Program Files\Trend Micro
2008-09-20 19:28 . 2008-09-20 19:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-09-20 15:26 . 2008-09-20 15:26 <REP> d-------- C:\WINDOWS\system32\AlertModule
2008-09-20 15:26 . 2004-08-23 14:49 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe
2008-09-20 15:26 . 2005-10-06 14:55 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll
2008-09-20 15:19 . 2008-09-20 15:19 <REP> d-------- C:\Program Files\SAGEM
2008-09-20 07:48 . 2008-09-20 07:48 <REP> d-------- C:\Program Files\inKline Global
2008-09-16 21:36 . 2008-09-16 21:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-09-15 19:09 . 2008-06-14 19:33 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-09-15 19:06 . 2008-04-11 21:05 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll
2008-09-15 18:50 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\system32\fr
2008-09-15 18:50 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\system32\bits
2008-09-15 18:50 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\l2schemas
2008-09-15 18:48 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-09-15 18:43 . 2008-09-15 18:43 <REP> d-------- C:\WINDOWS\EHome
2008-09-11 18:49 . 2008-09-11 18:49 268 --ah----- C:\sqmdata14.sqm
2008-09-11 18:49 . 2008-09-11 18:49 244 --ah----- C:\sqmnoopt14.sqm
2008-09-11 18:49 . 2008-09-11 18:49 136 --ah----- C:\sqmnoopt15.sqm
2008-09-05 21:18 . 2004-08-04 00:38 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-08-31 21:17 . 2008-09-20 15:13 <REP> d-------- C:\Program Files\IKEA HomePlanner
2008-08-26 00:47 . 2008-08-26 00:47 268 --ah----- C:\sqmdata13.sqm
2008-08-26 00:47 . 2008-08-26 00:47 244 --ah----- C:\sqmnoopt13.sqm
2008-08-25 22:13 . 2008-08-25 22:13 268 --ah----- C:\sqmdata12.sqm
2008-08-25 22:13 . 2008-08-25 22:13 244 --ah----- C:\sqmnoopt12.sqm

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-21 07:21 --------- d-----w C:\Program Files\Wanadoo
2008-09-20 17:28 --------- d-----w C:\Program Files\Apple Software Update
2008-09-20 14:32 2,560 ----a-w C:\WINDOWS\_MSRSTRT.EXE
2008-09-20 14:31 --------- d-----w C:\Program Files\Logitech
2008-09-20 14:30 --------- d-----w C:\Program Files\Java
2008-09-20 13:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-20 13:15 --------- d-----w C:\Program Files\Yahoo!
2008-09-16 19:50 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-09-15 19:02 --------- d-----w C:\Program Files\MpcStar
2008-09-15 17:11 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-09-15 16:23 --------- d-----w C:\Documents and Settings\Densa\Application Data\BASE BOLD MAGS
2008-09-15 14:33 --------- d-----w C:\Program Files\eMule
2008-09-09 22:04 38,528 ----a-w C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-09 22:03 17,200 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-08-17 09:39 --------- d-----w C:\Documents and Settings\Densa\Application Data\Ahead
2008-08-15 23:44 --------- d-----w C:\Documents and Settings\Densa\Application Data\TigerPlayer
2008-08-15 23:41 --------- d-----w C:\Program Files\QuickTime
2008-08-11 20:41 --------- d-----w C:\Program Files\BitComet
2008-08-03 08:19 --------- d-----w C:\Program Files\Singles
2008-06-18 12:56 502,276 ----a-w C:\Program Files\ClientRegistry.blob
2008-06-18 12:29 74,141 ----a-w C:\Program Files\AppUpdateStats.blob
2008-06-13 08:25 13,519 ----a-w C:\Program Files\GameOverlayUI.exe.log
2008-06-13 08:22 864 ----a-w C:\Program Files\GameOverlayRenderer.dll.log
2008-06-10 08:41 540,672 ----a-w C:\Program Files\mss32_s.dll
2008-06-10 08:40 234,744 ----a-w C:\Program Files\GameOverlayRenderer.dll
2008-06-10 08:40 112,128 ----a-w C:\Program Files\CSERHelper.dll
2008-06-10 08:40 1,039,192 ----a-w C:\Program Files\dbghelp.dll
2008-06-10 08:40 1,012,984 ----a-w C:\Program Files\GameOverlayUI.exe
2008-06-05 13:47 27,359 ----a-w C:\Program Files\INSTALL.LOG
2008-03-24 12:21 73,896 ----a-w C:\Documents and Settings\Densa\Application Data\GDIPFONTCACHEV1.DAT
2003-08-21 10:41 61,440 ----a-w C:\Program Files\dbg.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"Free Uploader Oe Integration"="C:\Program Files\Free Download Manager\FUM\fumoei.exe" [2007-06-10 40960]
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 122880]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 196608]
"BitComet"="C:\Program Files\BitComet\BitComet.exe" [2008-07-17 2599224]
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2005-08-09 1961984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 86016]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-03-14 257088]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 217088]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 458752]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 221184]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]
"NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072]
"QuickTime Task"="C:\Program Files\MpcStar\Codecs\QuickTime\QTSystem\qttask.exe" [2008-08-16 282624]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 32768]
"nwiz"="nwiz.exe" [2006-10-22 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]

C:\Documents and Settings\Densa\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.tscc"= C:\PROGRA~1\MpcStar\Codecs\tscc\tsccvid.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\BitComet\\BitComet.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"18332:TCP"= 18332:TCP:BitComet 18332 TCP
"18332:UDP"= 18332:UDP:BitComet 18332 UDP
"18373:TCP"= 18373:TCP:BitComet 18373 TCP
"18373:UDP"= 18373:UDP:BitComet 18373 UDP

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
S3 HabuFltr;Habu Mouse;C:\WINDOWS\system32\drivers\habu.sys [2006-08-14 23552]
S3 SetupNTGLM7X;SetupNTGLM7X;I:\NTGLM7X.sys [ ]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fc8c1cbb-5d31-11dc-9a59-0017315550b9}]
\Shell\AutoRun\command - J:\LaunchU3.exe -a
.
Contenu du dossier 'Tâches planifiées'
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{07727549-C507-4930-8723-736F95F670FB} - (no file)
BHO-{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - (no file)
BHO-{7C4CF671-5689-43E6-8C84-B5F7877C0020} - (no file)
BHO-{8991BE1D-0613-4F53-BDEA-76650C809E40} - (no file)
BHO-{A781E14C-0CED-4E1D-9B5C-4F4453553983} - (no file)
BHO-{C6405B56-7D1D-417D-827A-05F72F31E711} - (no file)
BHO-{EA0A4319-5072-4260-B4F0-90B3C95F8296} - (no file)
Toolbar-{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - (no file)
WebBrowser-{1D1B60FD-B21F-4B9A-8A5F-64E8544828D7} - (no file)

.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\Densa\Application Data\Mozilla\Firefox\Profiles\554ftbdy.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://google.atcomet.com/b/
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 09:20:49
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
.
**************************************************************************
.
Heure de fin: 2008-09-21 9:25:06 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-09-21 07:25:02

Avant-CF: 10ÿ310ÿ021ÿ120 octets libres
Après-CF: 10,298,486,784 octets libres

183 --- E O F --- 2008-09-16 20:06:06

/!\ Seul valinette peut suivre cette procédure /!\

1/

---> Clique sur Démarrer, Exécuter, tape notepad clique sur OK.

---> Copie le texte ci-dessous par sélection puis Ctrl+C :

KillAll::

File::
C:\sqmdata16.sqm
C:\sqmnoopt16.sqm
C:\sqmnoopt15.sqm
C:\sqmdata15.sqm
C:\sqmnoopt14.sqm
C:\sqmdata14.sqm
C:\sqmnoopt13.sqm
C:\sqmdata13.sqm
C:\sqmdata12.sqm
C:\sqmdata11.sqm
C:\sqmnoopt12.sqm
C:\sqmnoopt11.sqm
C:\sqmdata10.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt09.sqm
C:\sqmnoopt08.sqm
C:\sqmdata09.sqm
C:\sqmdata08.sqm
C:\sqmnoopt07.sqm
C:\sqmdata07.sqm
C:\sqmnoopt06.sqm
C:\sqmdata06.sqm
C:\sqmnoopt05.sqm
C:\sqmdata05.sqm
C:\sqmdata04.sqm
C:\sqmdata03.sqm
C:\sqmdata02.sqm
C:\sqmdata01.sqm
C:\sqmdata00.sqm
C:\sqmnoopt04.sqm
C:\sqmnoopt03.sqm
C:\sqmnoopt02.sqm
C:\sqmnoopt01.sqm
C:\sqmnoopt00.sqm

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=-
"LVCOMSX"=-
"QuickTime Task"=-
"nwiz"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fc8c1cbb-5d31-11dc-9a59-0017315550b9}]

---> Colle la sélection dans le bloc-notes

---> Enregistre ce fichier sur le bureau (Impératif)

---> Nom du fichier : CFScript
---> Type du fichier : tous les fichiers
---> Clique sur Enregistrer
---> Quitte le bloc-notes

2/

---> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

[*] Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

[*] Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
Ne touche à rien tant que le scan n'est pas terminé.

[*] Une fois le scan achevé, un rapport va s'afficher : poste-le

[*] Si le fichier ne s'ouvre pas, il se trouve ici C:\ComboFix.txt

merci encore,
tout d'abord avant le rapport il y a eu un message du style disque windows et j'ai donc annulé et voici le nouveau rapport :

ComboFix 08-09-20.05 - Densa 2008-09-21 9:48:05.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.647 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Densa\Bureau\ComboFix.exe
Commutateurs utilisés :: C:\Documents and Settings\Densa\Bureau\CFScript.txt
* Un nouveau point de restauration a été créé

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\sqmdata00.sqm
C:\sqmdata01.sqm
C:\sqmdata02.sqm
C:\sqmdata03.sqm
C:\sqmdata04.sqm
C:\sqmdata05.sqm
C:\sqmdata06.sqm
C:\sqmdata07.sqm
C:\sqmdata08.sqm
C:\sqmdata09.sqm
C:\sqmdata10.sqm
C:\sqmdata11.sqm
C:\sqmdata12.sqm
C:\sqmdata13.sqm
C:\sqmdata14.sqm
C:\sqmdata15.sqm
C:\sqmdata16.sqm
C:\sqmnoopt00.sqm
C:\sqmnoopt01.sqm
C:\sqmnoopt02.sqm
C:\sqmnoopt03.sqm
C:\sqmnoopt04.sqm
C:\sqmnoopt05.sqm
C:\sqmnoopt06.sqm
C:\sqmnoopt07.sqm
C:\sqmnoopt08.sqm
C:\sqmnoopt09.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\sqmnoopt12.sqm
C:\sqmnoopt13.sqm
C:\sqmnoopt14.sqm
C:\sqmnoopt15.sqm
C:\sqmnoopt16.sqm
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\sqmdata00.sqm
C:\sqmdata01.sqm
C:\sqmdata02.sqm
C:\sqmdata03.sqm
C:\sqmdata04.sqm
C:\sqmdata05.sqm
C:\sqmdata06.sqm
C:\sqmdata07.sqm
C:\sqmdata08.sqm
C:\sqmdata09.sqm
C:\sqmdata10.sqm
C:\sqmdata11.sqm
C:\sqmdata12.sqm
C:\sqmdata13.sqm
C:\sqmdata14.sqm
C:\sqmnoopt00.sqm
C:\sqmnoopt01.sqm
C:\sqmnoopt02.sqm
C:\sqmnoopt03.sqm
C:\sqmnoopt04.sqm
C:\sqmnoopt05.sqm
C:\sqmnoopt06.sqm
C:\sqmnoopt07.sqm
C:\sqmnoopt08.sqm
C:\sqmnoopt09.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\sqmnoopt12.sqm
C:\sqmnoopt13.sqm
C:\sqmnoopt14.sqm
C:\sqmnoopt15.sqm

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-08-21 au 2008-09-21 ))))))))))))))))))))))))))))))))))))
.

2008-09-21 08:06 . 2008-09-21 08:06 <REP> d-------- C:\Program Files\Trend Micro
2008-09-20 19:28 . 2008-09-20 19:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-09-20 15:26 . 2008-09-20 15:26 <REP> d-------- C:\WINDOWS\system32\AlertModule
2008-09-20 15:26 . 2004-08-23 14:49 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe
2008-09-20 15:26 . 2005-10-06 14:55 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll
2008-09-20 15:19 . 2008-09-20 15:19 <REP> d-------- C:\Program Files\SAGEM
2008-09-20 07:48 . 2008-09-20 07:48 <REP> d-------- C:\Program Files\inKline Global
2008-09-16 21:36 . 2008-09-16 21:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-09-15 19:09 . 2008-06-14 19:33 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-09-15 19:06 . 2008-04-11 21:05 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll
2008-09-15 18:50 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\system32\fr
2008-09-15 18:50 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\system32\bits
2008-09-15 18:50 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\l2schemas
2008-09-15 18:48 . 2008-09-15 18:50 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-09-15 18:43 . 2008-09-15 18:43 <REP> d-------- C:\WINDOWS\EHome
2008-09-05 21:18 . 2004-08-04 00:38 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-08-31 21:17 . 2008-09-20 15:13 <REP> d-------- C:\Program Files\IKEA HomePlanner

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-21 07:52 --------- d-----w C:\Program Files\Wanadoo
2008-09-20 17:28 --------- d-----w C:\Program Files\Apple Software Update
2008-09-20 14:32 2,560 ----a-w C:\WINDOWS\_MSRSTRT.EXE
2008-09-20 14:31 --------- d-----w C:\Program Files\Logitech
2008-09-20 14:30 --------- d-----w C:\Program Files\Java
2008-09-20 13:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-20 13:15 --------- d-----w C:\Program Files\Yahoo!
2008-09-16 19:50 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-09-15 19:02 --------- d-----w C:\Program Files\MpcStar
2008-09-15 17:11 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-09-15 16:23 --------- d-----w C:\Documents and Settings\Densa\Application Data\BASE BOLD MAGS
2008-09-15 14:33 --------- d-----w C:\Program Files\eMule
2008-09-09 22:04 38,528 ----a-w C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-09 22:03 17,200 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-08-17 09:39 --------- d-----w C:\Documents and Settings\Densa\Application Data\Ahead
2008-08-15 23:44 --------- d-----w C:\Documents and Settings\Densa\Application Data\TigerPlayer
2008-08-15 23:41 --------- d-----w C:\Program Files\QuickTime
2008-08-11 20:41 --------- d-----w C:\Program Files\BitComet
2008-08-03 08:19 --------- d-----w C:\Program Files\Singles
2008-06-18 12:56 502,276 ----a-w C:\Program Files\ClientRegistry.blob
2008-06-18 12:29 74,141 ----a-w C:\Program Files\AppUpdateStats.blob
2008-06-13 08:25 13,519 ----a-w C:\Program Files\GameOverlayUI.exe.log
2008-06-13 08:22 864 ----a-w C:\Program Files\GameOverlayRenderer.dll.log
2008-06-10 08:41 540,672 ----a-w C:\Program Files\mss32_s.dll
2008-06-10 08:40 234,744 ----a-w C:\Program Files\GameOverlayRenderer.dll
2008-06-10 08:40 112,128 ----a-w C:\Program Files\CSERHelper.dll
2008-06-10 08:40 1,039,192 ----a-w C:\Program Files\dbghelp.dll
2008-06-10 08:40 1,012,984 ----a-w C:\Program Files\GameOverlayUI.exe
2008-06-05 13:47 27,359 ----a-w C:\Program Files\INSTALL.LOG
2008-03-24 12:21 73,896 ----a-w C:\Documents and Settings\Densa\Application Data\GDIPFONTCACHEV1.DAT
2003-08-21 10:41 61,440 ----a-w C:\Program Files\dbg.dll
.

((((((((((((((((((((((((((((( snapshot@2008-09-21_ 9.24.04.73 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-09-21 07:50:49 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_634.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"Free Uploader Oe Integration"="C:\Program Files\Free Download Manager\FUM\fumoei.exe" [2007-06-10 40960]
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 122880]
"BitComet"="C:\Program Files\BitComet\BitComet.exe" [2008-07-17 2599224]
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2005-08-09 1961984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 86016]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-03-14 257088]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 217088]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 458752]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]
"NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 32768]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]

C:\Documents and Settings\Densa\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.tscc"= C:\PROGRA~1\MpcStar\Codecs\tscc\tsccvid.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\BitComet\\BitComet.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"18332:TCP"= 18332:TCP:BitComet 18332 TCP
"18332:UDP"= 18332:UDP:BitComet 18332 UDP
"18373:TCP"= 18373:TCP:BitComet 18373 TCP
"18373:UDP"= 18373:UDP:BitComet 18373 UDP

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
S3 HabuFltr;Habu Mouse;C:\WINDOWS\system32\drivers\habu.sys [2006-08-14 23552]
S3 SetupNTGLM7X;SetupNTGLM7X;I:\NTGLM7X.sys [ ]
.
Contenu du dossier 'Tâches planifiées'
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 09:51:45
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
.
**************************************************************************
.
Heure de fin: 2008-09-21 9:57:59 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-09-21 07:57:56
ComboFix2.txt 2008-09-21 07:25:07

Avant-CF: 10ÿ276ÿ651ÿ008 octets libres
Après-CF: 10,263,515,136 octets libres

221 --- E O F --- 2008-09-16 20:06:06

Ok bien.

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

voici le rapport demandé, tout ceci me fais un peu peur :

--------------------\\ Lop S&D 4.2.4-4 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Densa ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080920-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total : 39 Go Free : 9 Go
D:\ (Local Disk) - NTFS - Total : 150 Go Free : 16 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [1] ( 21/09/2008|10:05 )

--------------------\\ Listing des dossiers dans APPLIC~1

[22/01/2008|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[22/01/2008|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[20/09/2008|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[19/04/2007|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[27/03/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[02/02/2008|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[28/02/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[18/11/2007|20:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eMule
[16/01/2008|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[29/05/2007|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[31/05/2007|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lectra
[17/07/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[20/11/2007|02:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mess Blue Poke Slow
[16/09/2008|21:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[30/07/2008|00:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[28/02/2007|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
[22/11/2007|00:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[16/07/2008|19:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns
[17/07/2008|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[10/07/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[09/03/2007|22:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[26/02/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[24/03/2007|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!

[22/01/2008|18:56] C:\DOCUME~1\Densa\APPLIC~1\Adobe
[13/05/2008|19:34] C:\DOCUME~1\Densa\APPLIC~1\AdobeUM
[17/08/2008|11:39] C:\DOCUME~1\Densa\APPLIC~1\Ahead
[19/04/2007|20:32] C:\DOCUME~1\Densa\APPLIC~1\Apple Computer
[27/03/2008|22:12] C:\DOCUME~1\Densa\APPLIC~1\Azureus
[15/09/2008|18:23] C:\DOCUME~1\Densa\APPLIC~1\BASE BOLD MAGS
[02/04/2008|17:17] C:\DOCUME~1\Densa\APPLIC~1\BitTorrent
[04/03/2007|15:40] C:\DOCUME~1\Densa\APPLIC~1\CyberLink
[21/11/2007|23:02] C:\DOCUME~1\Densa\APPLIC~1\eMule
[04/03/2007|20:00] C:\DOCUME~1\Densa\APPLIC~1\Help
[15/08/2007|10:06] C:\DOCUME~1\Densa\APPLIC~1\HP
[28/02/2007|10:47] C:\DOCUME~1\Densa\APPLIC~1\Identities
[28/02/2007|12:20] C:\DOCUME~1\Densa\APPLIC~1\Lavasoft
[31/05/2007|18:05] C:\DOCUME~1\Densa\APPLIC~1\Lectra
[28/12/2007|20:23] C:\DOCUME~1\Densa\APPLIC~1\LimeWire
[28/02/2007|11:36] C:\DOCUME~1\Densa\APPLIC~1\Macromedia
[17/07/2008|13:27] C:\DOCUME~1\Densa\APPLIC~1\Malwarebytes
[07/09/2008|08:57] C:\DOCUME~1\Densa\APPLIC~1\Microsoft
[28/02/2007|12:11] C:\DOCUME~1\Densa\APPLIC~1\Mozilla
[18/06/2008|14:27] C:\DOCUME~1\Densa\APPLIC~1\OpenOffice.org2
[19/08/2008|21:44] C:\DOCUME~1\Densa\APPLIC~1\Real
[08/03/2007|20:15] C:\DOCUME~1\Densa\APPLIC~1\Screenshot Sender
[10/07/2008|13:16] C:\DOCUME~1\Densa\APPLIC~1\Simply Super Software
[01/03/2007|14:06] C:\DOCUME~1\Densa\APPLIC~1\Sun
[10/06/2008|10:56] C:\DOCUME~1\Densa\APPLIC~1\teamspeak2
[16/08/2008|01:44] C:\DOCUME~1\Densa\APPLIC~1\TigerPlayer
[19/10/2007|12:48] C:\DOCUME~1\Densa\APPLIC~1\U3
[16/07/2008|21:28] C:\DOCUME~1\Densa\APPLIC~1\Uniblue
[22/11/2007|01:07] C:\DOCUME~1\Densa\APPLIC~1\vlc
[04/11/2007|13:02] C:\DOCUME~1\Densa\APPLIC~1\Yahoo!

[28/02/2007|10:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[14/08/2007|09:26] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[20/09/2008 19:28][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[21/09/2008 09:50][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/01/2008|17:59] C:\Program Files\Adobe
[28/02/2007|12:25] C:\Program Files\Ahead
[30/05/2007|13:52] C:\Program Files\AKVIS
[28/02/2007|11:45] C:\Program Files\Alwil Software
[18/06/2008|09:43] C:\Program Files\appcache
[20/09/2008|19:28] C:\Program Files\Apple Software Update
[26/10/2007|13:23] C:\Program Files\ArcSoft
[27/03/2008|22:13] C:\Program Files\Azureus
[14/04/2008|20:29] C:\Program Files\BASE BOLD MAGS
[10/06/2008|10:40] C:\Program Files\bin
[11/08/2008|22:41] C:\Program Files\BitComet
[27/08/2007|20:40] C:\Program Files\Bonjour
[17/06/2008|19:00] C:\Program Files\Circle Developement
[28/02/2007|10:39] C:\Program Files\ComPlus Applications
[05/06/2008|19:36] C:\Program Files\config
[28/02/2007|12:22] C:\Program Files\CyberLink
[05/05/2008|21:48] C:\Program Files\dl
[17/07/2008|20:48] C:\Program Files\DNA
[21/11/2007|23:52] C:\Program Files\download-boosters
[15/09/2008|16:33] C:\Program Files\eMule
[01/12/2007|20:28] C:\Program Files\Emule Speed Booster
[21/09/2008|09:48] C:\Program Files\Fichiers communs
[10/04/2008|21:56] C:\Program Files\Free Download Manager
[10/06/2008|22:14] C:\Program Files\friends
[11/01/2008|23:28] C:\Program Files\Full Tilt Poker
[08/01/2008|20:50] C:\Program Files\Google
[10/06/2008|10:41] C:\Program Files\Graphics
[29/05/2007|19:45] C:\Program Files\Hewlett-Packard
[29/05/2007|19:45] C:\Program Files\HP
[20/09/2008|15:13] C:\Program Files\IKEA HomePlanner
[20/09/2008|07:48] C:\Program Files\inKline Global
[20/09/2008|15:19] C:\Program Files\InstallShield Installation Information
[15/08/2008|01:52] C:\Program Files\Internet Explorer
[19/04/2007|20:36] C:\Program Files\iPod
[19/04/2007|20:36] C:\Program Files\iTunes
[20/09/2008|16:30] C:\Program Files\Java
[02/09/2007|18:42] C:\Program Files\KC Softwares
[28/02/2007|12:20] C:\Program Files\Lavasoft
[20/09/2008|16:31] C:\Program Files\Logitech
[05/06/2008|15:57] C:\Program Files\logs
[18/06/2008|15:06] C:\Program Files\MaCuisineLapeyre
[15/09/2008|19:11] C:\Program Files\Malwarebytes' Anti-Malware
[15/09/2008|18:52] C:\Program Files\Messenger
[16/09/2008|21:50] C:\Program Files\Messenger Plus! Live
[12/04/2007|20:24] C:\Program Files\Micro Application
[18/10/2007|06:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[11/10/2007|23:28] C:\Program Files\microsoft frontpage
[18/06/2008|15:20] C:\Program Files\Microsoft Office
[01/02/2008|19:38] C:\Program Files\Microsoft.NET
[08/07/2008|18:49] C:\Program Files\mIRC
[15/09/2008|18:50] C:\Program Files\Movie Maker
[21/09/2008|09:58] C:\Program Files\Mozilla Firefox
[15/09/2008|21:02] C:\Program Files\MpcStar
[04/07/2007|15:44] C:\Program Files\MSN
[28/02/2007|10:38] C:\Program Files\MSN Gaming Zone
[24/02/2008|10:33] C:\Program Files\Multi_Media
[15/09/2008|18:48] C:\Program Files\NetMeeting
[19/08/2007|13:19] C:\Program Files\NVIDIA Corporation
[28/02/2007|10:39] C:\Program Files\Online Services
[24/02/2008|10:33] C:\Program Files\Online_TV
[18/06/2008|15:27] C:\Program Files\OpenOffice.org 2.3
[15/09/2008|18:48] C:\Program Files\Outlook Express
[19/05/2007|19:36] C:\Program Files\PhotoFiltre
[22/01/2008|18:11] C:\Program Files\PhotoFiltre Studio
[19/12/2007|16:17] C:\Program Files\Picasa2
[19/08/2007|13:19] C:\Program Files\Plug-Ins
[19/08/2007|13:19] C:\Program Files\Presets
[10/06/2008|10:40] C:\Program Files\Public
[16/08/2008|01:41] C:\Program Files\QuickTime
[10/06/2008|10:40] C:\Program Files\resource
[20/09/2008|15:19] C:\Program Files\SAGEM
[19/03/2008|16:33] C:\Program Files\Secured IE
[24/02/2008|10:33] C:\Program Files\Secured_eMule
[28/02/2007|16:48] C:\Program Files\Securitoo
[18/06/2008|15:24] C:\Program Files\SEE Electrical
[28/02/2007|10:40] C:\Program Files\Services en ligne
[24/02/2008|10:33] C:\Program Files\Share_Accelerator_MM
[03/08/2008|10:19] C:\Program Files\Singles
[05/06/2008|15:57] C:\Program Files\skins
[17/07/2008|13:25] C:\Program Files\Spybot - Search & Destroy
[05/06/2008|16:01] C:\Program Files\SteamApps
[28/02/2007|18:28] C:\Program Files\Teamspeak2_RC2
[21/09/2008|08:06] C:\Program Files\Trend Micro
[28/02/2007|10:47] C:\Program Files\Uninstall Information
[19/04/2007|20:26] C:\Program Files\VideoLAN
[21/09/2008|10:03] C:\Program Files\Wanadoo
[16/10/2007|21:55] C:\Program Files\Windows Live
[31/08/2007|13:47] C:\Program Files\Windows Live Safety Center
[20/11/2007|02:30] C:\Program Files\Windows Media Connect 2
[15/09/2008|18:48] C:\Program Files\Windows Media Player
[15/09/2008|18:48] C:\Program Files\Windows NT
[28/02/2007|10:40] C:\Program Files\WindowsUpdate
[23/07/2007|16:22] C:\Program Files\WinRAR
[28/02/2007|10:42] C:\Program Files\xerox
[20/09/2008|15:15] C:\Program Files\Yahoo!
[01/01/2008|20:05] C:\Program Files\Zapu

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/01/2008|17:57] C:\Program Files\Fichiers communs\Adobe
[22/01/2008|17:50] C:\Program Files\Fichiers communs\Adobe Systems Shared
[28/02/2007|12:25] C:\Program Files\Fichiers communs\Ahead
[02/06/2008|20:58] C:\Program Files\Fichiers communs\Bcgsoft
[19/10/2007|18:35] C:\Program Files\Fichiers communs\Designer
[09/07/2007|19:53] C:\Program Files\Fichiers communs\InstallShield
[31/05/2007|18:02] C:\Program Files\Fichiers communs\Lectra
[28/02/2007|16:44] C:\Program Files\Fichiers communs\Logitech
[27/08/2007|20:29] C:\Program Files\Fichiers communs\Macrovision Shared
[30/07/2008|00:06] C:\Program Files\Fichiers communs\Microsoft Shared
[10/11/2007|20:45] C:\Program Files\Fichiers communs\Motorola Shared
[28/02/2007|10:40] C:\Program Files\Fichiers communs\MSSoap
[28/02/2007|12:27] C:\Program Files\Fichiers communs\Nero
[28/02/2007|10:57] C:\Program Files\Fichiers communs\NVIDIA Shared
[28/02/2007|11:32] C:\Program Files\Fichiers communs\ODBC
[28/02/2007|10:40] C:\Program Files\Fichiers communs\Services
[28/02/2007|11:32] C:\Program Files\Fichiers communs\SpeechEngines
[15/09/2008|18:48] C:\Program Files\Fichiers communs\System
[09/11/2007|13:47] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 53 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns
C:\Program Files\Circle Developement
C:\Program Files\Multi_Media
C:\Program Files\Multi_Media\INSTALL.LOG
C:\Program Files\Multi_Media\tbMul0.dll
C:\Program Files\Multi_Media\tbMult.dll
C:\Program Files\Multi_Media\toolbar.cfg
C:\Program Files\Multi_Media\UNWISE.EXE

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 10:06:33
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 137

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack
C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 + Manuels + Crack
C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 - Installation
C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 - Installation\data3.cab
C:\DOCUME~1\Densa\Mes documents\Schemaplic 3.0 + Manuels + Crack.rar
C:\DOCUME~1\Densa\Mes documents\Adobe Photoshop CS3 Extended+patch FR+kegen.HwC\Keygen

[F:2][D:1]-> C:\DOCUME~1\Densa\LOCALS~1\Temp
[F:21][D:0]-> C:\DOCUME~1\Densa\Cookies
[F:9][D:3]-> C:\DOCUME~1\Densa\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 21/09/2008|10:07 - Option : [1]

--------------------\\ Fin du rapport a 10:07:24

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

merci, merci
voici le nouveau rapport :

--------------------\\ Lop S&D 4.2.4-4 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Densa ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 080920-0] 4.8.1229 (Activated)
C:\ (Local Disk) - NTFS - Total : 39 Go Free : 9 Go
D:\ (Local Disk) - NTFS - Total : 150 Go Free : 16 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
Option : [2] ( 21/09/2008|10:16 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Program Files\Multi_Media\INSTALL.LOG
Supprime! - C:\Program Files\Multi_Media\tbMul0.dll
Supprime! - C:\Program Files\Multi_Media\tbMult.dll
Supprime! - C:\Program Files\Multi_Media\toolbar.cfg
Supprime! - C:\Program Files\Multi_Media\UNWISE.EXE
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Software rule flag owns
Supprime! - C:\Program Files\Circle Developement
Supprime! - C:\Program Files\Multi_Media

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[22/01/2008|17:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[22/01/2008|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[20/09/2008|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[19/04/2007|20:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[27/03/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[02/02/2008|23:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[28/02/2007|12:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[18/11/2007|20:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eMule
[16/01/2008|20:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[29/05/2007|19:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[31/05/2007|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lectra
[17/07/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[20/11/2007|02:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mess Blue Poke Slow
[16/09/2008|21:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[30/07/2008|00:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[28/02/2007|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NVIDIA
[22/11/2007|00:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[17/07/2008|14:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[10/07/2008|13:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[09/03/2007|22:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[26/02/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[24/03/2007|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!

[22/01/2008|18:56] C:\DOCUME~1\Densa\APPLIC~1\Adobe
[13/05/2008|19:34] C:\DOCUME~1\Densa\APPLIC~1\AdobeUM
[17/08/2008|11:39] C:\DOCUME~1\Densa\APPLIC~1\Ahead
[19/04/2007|20:32] C:\DOCUME~1\Densa\APPLIC~1\Apple Computer
[27/03/2008|22:12] C:\DOCUME~1\Densa\APPLIC~1\Azureus
[15/09/2008|18:23] C:\DOCUME~1\Densa\APPLIC~1\BASE BOLD MAGS
[02/04/2008|17:17] C:\DOCUME~1\Densa\APPLIC~1\BitTorrent
[04/03/2007|15:40] C:\DOCUME~1\Densa\APPLIC~1\CyberLink
[21/11/2007|23:02] C:\DOCUME~1\Densa\APPLIC~1\eMule
[04/03/2007|20:00] C:\DOCUME~1\Densa\APPLIC~1\Help
[15/08/2007|10:06] C:\DOCUME~1\Densa\APPLIC~1\HP
[28/02/2007|10:47] C:\DOCUME~1\Densa\APPLIC~1\Identities
[28/02/2007|12:20] C:\DOCUME~1\Densa\APPLIC~1\Lavasoft
[31/05/2007|18:05] C:\DOCUME~1\Densa\APPLIC~1\Lectra
[28/12/2007|20:23] C:\DOCUME~1\Densa\APPLIC~1\LimeWire
[28/02/2007|11:36] C:\DOCUME~1\Densa\APPLIC~1\Macromedia
[17/07/2008|13:27] C:\DOCUME~1\Densa\APPLIC~1\Malwarebytes
[07/09/2008|08:57] C:\DOCUME~1\Densa\APPLIC~1\Microsoft
[28/02/2007|12:11] C:\DOCUME~1\Densa\APPLIC~1\Mozilla
[18/06/2008|14:27] C:\DOCUME~1\Densa\APPLIC~1\OpenOffice.org2
[19/08/2008|21:44] C:\DOCUME~1\Densa\APPLIC~1\Real
[08/03/2007|20:15] C:\DOCUME~1\Densa\APPLIC~1\Screenshot Sender
[10/07/2008|13:16] C:\DOCUME~1\Densa\APPLIC~1\Simply Super Software
[01/03/2007|14:06] C:\DOCUME~1\Densa\APPLIC~1\Sun
[10/06/2008|10:56] C:\DOCUME~1\Densa\APPLIC~1\teamspeak2
[16/08/2008|01:44] C:\DOCUME~1\Densa\APPLIC~1\TigerPlayer
[19/10/2007|12:48] C:\DOCUME~1\Densa\APPLIC~1\U3
[16/07/2008|21:28] C:\DOCUME~1\Densa\APPLIC~1\Uniblue
[22/11/2007|01:07] C:\DOCUME~1\Densa\APPLIC~1\vlc
[04/11/2007|13:02] C:\DOCUME~1\Densa\APPLIC~1\Yahoo!

[28/02/2007|10:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[14/08/2007|09:26] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[20/09/2008 19:28][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[21/09/2008 09:50][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/01/2008|17:59] C:\Program Files\Adobe
[28/02/2007|12:25] C:\Program Files\Ahead
[30/05/2007|13:52] C:\Program Files\AKVIS
[28/02/2007|11:45] C:\Program Files\Alwil Software
[18/06/2008|09:43] C:\Program Files\appcache
[20/09/2008|19:28] C:\Program Files\Apple Software Update
[26/10/2007|13:23] C:\Program Files\ArcSoft
[27/03/2008|22:13] C:\Program Files\Azureus
[14/04/2008|20:29] C:\Program Files\BASE BOLD MAGS
[10/06/2008|10:40] C:\Program Files\bin
[11/08/2008|22:41] C:\Program Files\BitComet
[27/08/2007|20:40] C:\Program Files\Bonjour
[28/02/2007|10:39] C:\Program Files\ComPlus Applications
[05/06/2008|19:36] C:\Program Files\config
[28/02/2007|12:22] C:\Program Files\CyberLink
[05/05/2008|21:48] C:\Program Files\dl
[17/07/2008|20:48] C:\Program Files\DNA
[21/11/2007|23:52] C:\Program Files\download-boosters
[15/09/2008|16:33] C:\Program Files\eMule
[01/12/2007|20:28] C:\Program Files\Emule Speed Booster
[21/09/2008|09:48] C:\Program Files\Fichiers communs
[10/04/2008|21:56] C:\Program Files\Free Download Manager
[10/06/2008|22:14] C:\Program Files\friends
[11/01/2008|23:28] C:\Program Files\Full Tilt Poker
[08/01/2008|20:50] C:\Program Files\Google
[10/06/2008|10:41] C:\Program Files\Graphics
[29/05/2007|19:45] C:\Program Files\Hewlett-Packard
[29/05/2007|19:45] C:\Program Files\HP
[20/09/2008|15:13] C:\Program Files\IKEA HomePlanner
[20/09/2008|07:48] C:\Program Files\inKline Global
[20/09/2008|15:19] C:\Program Files\InstallShield Installation Information
[15/08/2008|01:52] C:\Program Files\Internet Explorer
[19/04/2007|20:36] C:\Program Files\iPod
[19/04/2007|20:36] C:\Program Files\iTunes
[20/09/2008|16:30] C:\Program Files\Java
[02/09/2007|18:42] C:\Program Files\KC Softwares
[28/02/2007|12:20] C:\Program Files\Lavasoft
[20/09/2008|16:31] C:\Program Files\Logitech
[05/06/2008|15:57] C:\Program Files\logs
[18/06/2008|15:06] C:\Program Files\MaCuisineLapeyre
[15/09/2008|19:11] C:\Program Files\Malwarebytes' Anti-Malware
[15/09/2008|18:52] C:\Program Files\Messenger
[16/09/2008|21:50] C:\Program Files\Messenger Plus! Live
[12/04/2007|20:24] C:\Program Files\Micro Application
[18/10/2007|06:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[11/10/2007|23:28] C:\Program Files\microsoft frontpage
[18/06/2008|15:20] C:\Program Files\Microsoft Office
[01/02/2008|19:38] C:\Program Files\Microsoft.NET
[08/07/2008|18:49] C:\Program Files\mIRC
[15/09/2008|18:50] C:\Program Files\Movie Maker
[21/09/2008|09:58] C:\Program Files\Mozilla Firefox
[15/09/2008|21:02] C:\Program Files\MpcStar
[04/07/2007|15:44] C:\Program Files\MSN
[28/02/2007|10:38] C:\Program Files\MSN Gaming Zone
[15/09/2008|18:48] C:\Program Files\NetMeeting
[19/08/2007|13:19] C:\Program Files\NVIDIA Corporation
[28/02/2007|10:39] C:\Program Files\Online Services
[24/02/2008|10:33] C:\Program Files\Online_TV
[18/06/2008|15:27] C:\Program Files\OpenOffice.org 2.3
[15/09/2008|18:48] C:\Program Files\Outlook Express
[19/05/2007|19:36] C:\Program Files\PhotoFiltre
[22/01/2008|18:11] C:\Program Files\PhotoFiltre Studio
[19/12/2007|16:17] C:\Program Files\Picasa2
[19/08/2007|13:19] C:\Program Files\Plug-Ins
[19/08/2007|13:19] C:\Program Files\Presets
[10/06/2008|10:40] C:\Program Files\Public
[16/08/2008|01:41] C:\Program Files\QuickTime
[10/06/2008|10:40] C:\Program Files\resource
[20/09/2008|15:19] C:\Program Files\SAGEM
[19/03/2008|16:33] C:\Program Files\Secured IE
[24/02/2008|10:33] C:\Program Files\Secured_eMule
[28/02/2007|16:48] C:\Program Files\Securitoo
[18/06/2008|15:24] C:\Program Files\SEE Electrical
[28/02/2007|10:40] C:\Program Files\Services en ligne
[24/02/2008|10:33] C:\Program Files\Share_Accelerator_MM
[03/08/2008|10:19] C:\Program Files\Singles
[05/06/2008|15:57] C:\Program Files\skins
[17/07/2008|13:25] C:\Program Files\Spybot - Search & Destroy
[05/06/2008|16:01] C:\Program Files\SteamApps
[28/02/2007|18:28] C:\Program Files\Teamspeak2_RC2
[21/09/2008|08:06] C:\Program Files\Trend Micro
[28/02/2007|10:47] C:\Program Files\Uninstall Information
[19/04/2007|20:26] C:\Program Files\VideoLAN
[21/09/2008|10:03] C:\Program Files\Wanadoo
[16/10/2007|21:55] C:\Program Files\Windows Live
[31/08/2007|13:47] C:\Program Files\Windows Live Safety Center
[20/11/2007|02:30] C:\Program Files\Windows Media Connect 2
[15/09/2008|18:48] C:\Program Files\Windows Media Player
[15/09/2008|18:48] C:\Program Files\Windows NT
[28/02/2007|10:40] C:\Program Files\WindowsUpdate
[23/07/2007|16:22] C:\Program Files\WinRAR
[28/02/2007|10:42] C:\Program Files\xerox
[20/09/2008|15:15] C:\Program Files\Yahoo!
[01/01/2008|20:05] C:\Program Files\Zapu

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/01/2008|17:57] C:\Program Files\Fichiers communs\Adobe
[22/01/2008|17:50] C:\Program Files\Fichiers communs\Adobe Systems Shared
[28/02/2007|12:25] C:\Program Files\Fichiers communs\Ahead
[02/06/2008|20:58] C:\Program Files\Fichiers communs\Bcgsoft
[19/10/2007|18:35] C:\Program Files\Fichiers communs\Designer
[09/07/2007|19:53] C:\Program Files\Fichiers communs\InstallShield
[31/05/2007|18:02] C:\Program Files\Fichiers communs\Lectra
[28/02/2007|16:44] C:\Program Files\Fichiers communs\Logitech
[27/08/2007|20:29] C:\Program Files\Fichiers communs\Macrovision Shared
[30/07/2008|00:06] C:\Program Files\Fichiers communs\Microsoft Shared
[10/11/2007|20:45] C:\Program Files\Fichiers communs\Motorola Shared
[28/02/2007|10:40] C:\Program Files\Fichiers communs\MSSoap
[28/02/2007|12:27] C:\Program Files\Fichiers communs\Nero
[28/02/2007|10:57] C:\Program Files\Fichiers communs\NVIDIA Shared
[28/02/2007|11:32] C:\Program Files\Fichiers communs\ODBC
[28/02/2007|10:40] C:\Program Files\Fichiers communs\Services
[28/02/2007|11:32] C:\Program Files\Fichiers communs\SpeechEngines
[15/09/2008|18:48] C:\Program Files\Fichiers communs\System
[09/11/2007|13:47] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 51 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-21 10:17:15
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 137

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack
C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 + Manuels + Crack
C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 - Installation
C:\DOCUME~1\Densa\Bureau\document IRTS\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 + Manuels + Crack\Schemaplic 3.0 - Installation\data3.cab
C:\DOCUME~1\Densa\Mes documents\Schemaplic 3.0 + Manuels + Crack.rar
C:\DOCUME~1\Densa\Mes documents\Adobe Photoshop CS3 Extended+patch FR+kegen.HwC\Keygen

[F:2][D:1]-> C:\DOCUME~1\Densa\LOCALS~1\Temp
[F:21][D:0]-> C:\DOCUME~1\Densa\Cookies
[F:12][D:3]-> C:\DOCUME~1\Densa\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 21/09/2008|10:07 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 21/09/2008|10:18 - Option : [2]

--------------------\\ Fin du rapport a 10:18:06

---> Supprime Lop S&D

---> Télécharge OTMoveIt2 à partir du lien ci-dessous :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

---> Enregistre le fichier sur le Bureau.

---> Double-clique sur le fichier OTMoveIt2.exe pour lancer l'outil.
Assure-toi que la case Unregister Dll's and Ocx's soit bien cochée.

---> Copie l'intégralité du texte ci-dessous et colle-le dans la fenêtre intitulée Paste List Of Files/Folders to Move.

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mess Blue Poke Slow\
C:\DOCUME~1\Densa\APPLIC~1\BASE BOLD MAGS\
C:\Program Files\BASE BOLD MAGS\

---> Clique sur MoveIt! pour lancer la suppression.
Lorsqu'un résultat apparaît dans le cadre Results, clique sur Exit.

Note : Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES.

---> Poste le rapport de OTMoveIt qui se trouve dans C:\_OTMoveIt\MovedFiles.

voici ce que vous m'avez demandé :

File/Folder not found.
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Mess Blue Poke Slow moved successfully.
C:\DOCUME~1\Densa\APPLIC~1\BASE BOLD MAGS moved successfully.
C:\Program Files\BASE BOLD MAGS moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09212008_102718

Normalement, les pubs CiD sont supprimées.

maintenant faut il que je redémarre, désolé de vous accaparez mais tout ceci est du chinois pour moi,merci

Redémarre et poste un nouveau rapport HijackThis.

voici nouveau rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:45:24, on 21/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\system32\LVComsX.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Free Download Manager\FUM\fumoei.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll
O2 - BHO: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file)
O2 - BHO: (no name) - {4596013b-6c31-408b-a266-deae5c086dc2} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file)
O3 - Toolbar: (no name) - {4596013b-6c31-408b-a266-deae5c086dc2} - (no file)
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Free Uploader Oe Integration] C:\Program Files\Free Download Manager\FUM\fumoei.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll/206 (file missing)
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

---> Relance HijackThis et choisis Do a system scan only

---> Coche les cases qui sont devant les lignes suivantes :

O2 - BHO: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file)

O2 - BHO: (no name) - {4596013b-6c31-408b-a266-deae5c086dc2} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file)

O3 - Toolbar: (no name) - {4596013b-6c31-408b-a266-deae5c086dc2} - (no file)

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

---> Redémarre ton PC et poste un nouveau rapport HijackThis

voici nouveau rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:01:30, on 21/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Free Download Manager\FUM\fumoei.exe
C:\Program Files\BitComet\BitComet.exe
C:\WINDOWS\system32\LVComsX.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Free Uploader Oe Integration] C:\Program Files\Free Download Manager\FUM\fumoei.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll/206 (file missing)
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Pour finir :

---> Télécharge CCleaner (N'installe pas la Yahoo Toolbar) :
https://www.ccleaner.com/ccleaner/download

---> Lance-le. Va dans "Options" puis "Avancé", tu décoches la case "Effacer uniquement les fichiers etc...". Tu vas dans "Nettoyeur", tu fais "Analyse". Une fois terminé, tu lances le nettoyage. Puis tu vas dans "Registre", tu fais "Chercher des erreurs". Une fois terminé, tu répares toutes les erreurs sans sauvegarder la base de registre.

---> Télécharge Tools Cleaner sur ton bureau.
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
Clique sur Recherche et laisse le scan agir.
Clique sur Suppression pour finaliser.
Tu peux, si tu le souhaites, te servir des Options facultatives.
Clique sur Quitter pour obtenir le rapport.
Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php

---> Je te conseille également de remplacer Avast par Antivir

dois je maintenant effectuer une restauration de fichier ?
voici le rapport tools cleaner :

[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Densa\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Densa\Bureau\OtMoveIt2.exe: trouvé !
C:\Documents and Settings\Densa\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\Densa\Mes documents\Valérie DENSA\HJTInstall.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

Point de restauration crée !
Fichiers temporaires nettoyés !
Corbeille vidée!
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Densa\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Densa\Bureau\OtMoveIt2.exe: supprimé !
C:\Documents and Settings\Densa\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\Densa\Mes documents\Valérie DENSA\HJTInstall.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Tu peux supprimer ComboFix et Tools Cleaner.

"dois je maintenant effectuer une restauration de fichier ? "
---> Comment ça ?

vous me parlez de désactiver puis réactiver la restauration de fichier pour purger dois je le faire maintenant ? merci de m'aider et de prendre le temps