Navigation impossible sur Internet :Spyware??

Question

Bonjour,
ca fait pas mal de temps que je recoit enormement de fenetres intempestives. J'ai installé des anti Spyware les uns après les autres qui ont pu détecter pas mal de spyware et trojan mais le probleme n'a jamais été résolu.
Depuis 2 jours je ne peux même plus surfer sur Internet. La page internet recherche mais rien ne se passe.
Je suis obligée de me connecter en mode sans échec pour pouvoir aller sur Internet.
J'ai fait une analyse  HijackThis. J'avoue que je ne comprend pas grand chose a ce qu'il se passe et je voudrais trouver une solution qui règle une fois pour toute mon problème.

Merci d'avance.
Voici le rapport de l'analyse  HijackThis  : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:37:56, on 25/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\VirusScan\ScnCfg32.Exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Piolet] C:\Program Files\Piolet\Piolet.exe SILENT
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [646875b5] rundll32.exe "C:\WINDOWS\system32\yyyhdofx.dll",b
O4 - HKLM\..\Run: [BM675b4629] Rundll32.exe "C:\WINDOWS\system32\kgagjmfg.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe"  -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skypec4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ????????????????????
?L?9?9?9?9?C?9?? spblby.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

geoffrey5 · Answer

Salut !!

commence par faire ceci stp :

&#x25B6; Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau

(c est le numéro 6 en bas de la page) :  
 

&#x25B6; Lance l'installation du programme en exécutant le fichier téléchargé. 
&#x25B6; Double-clique maintenant sur le raccourci de Toolbar-S&D. 
&#x25B6; Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
&#x25B6; Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
&#x25B6; Poste le rapport généré. (C:\TB.txt)

abaddon06 · Answer

commence par lancé un scan o démarage avec avast vu ke c ton antivirus

geoffrey5 · Answer

avast ne peut rien faire contre ce genre d infection

QueEn B · Answer

j'ai lancé la recherche avec la toolbar sd et voila le rapport : 
   -----------\  ToolBar S&D 1.2.1   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor         1.50GHz )
   BIOS : BIOS Version 1.20
   USER : YEHOUDITH ANKRI ( Not Administrator ! )
   BOOT : Fail-safe with network boot
   Antivirus : Avira AntiVir PersonalEdition  6.39.1.147
   (Activated)
   Firewall  : Bitdefender Firewall 8.0 (Not Activated)
   C:\ (Local Disk) - NTFS - Total : 55 Go Free : 13 Go
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 24-09-2008|21:50 )
   Option : [1] ( 25/09/2008|22:57 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio
   C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio\kb123
   C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio\kb124
   C:\DOCUME~1\musik\APPLIC~1\Dealio
   C:\DOCUME~1\musik\APPLIC~1\Dealio\kb123
   C:\Program Files\Piolet
   C:\Program Files\Piolet\Cache.dat
   C:\Program Files\Piolet\contacts.dat
   C:\Program Files\Piolet\contactsR.dat
   C:\Program Files\Piolet\default.m3u
   C:\Program Files\Piolet\diCrHash.dll
   C:\Program Files\Piolet\DOWNLD2.DAT
   C:\Program Files\Piolet\downloads.dat
   C:\Program Files\Piolet\EBCRYPT.DLL
   C:\Program Files\Piolet\fmod.dll
   C:\Program Files\Piolet\fmod_dsp_lowpass.dll
   C:\Program Files\Piolet\INSTALL.LOG
   C:\Program Files\Piolet\loading.gif
   C:\Program Files\Piolet\loading.htm
   C:\Program Files\Piolet\My Shared Folder
   C:\Program Files\Piolet\MyFiles.dat
   C:\Program Files\Piolet\MyFiles.dat.lst
   C:\Program Files\Piolet\NCTAudioBurner.dll
   C:\Program Files\Piolet\NCTAudioFile.dll
   C:\Program Files\Piolet\NCTAudioInformation.dll
   C:\Program Files\Piolet\NCTAudioPlayer.dll
   C:\Program Files\Piolet\NCTAudioVisualization.dll
   C:\Program Files\Piolet\Piolet.exe
   C:\Program Files\Piolet\Piolet.exe.Manifest
   C:\Program Files\Piolet\Piolet.sw2
   C:\Program Files\Piolet\Settings.ini
   C:\Program Files\Piolet\SmartUI2.ocx
   C:\Program Files\Piolet\Softwrap.dll
   C:\Program Files\Piolet\TaskKiller.exe
   C:\Program Files\Piolet\UNWISE.EXE
   C:\DOCUME~1\YEHOUD~1\Bureau\PioletSetup(2).exe
   C:\WINDOWS\Prefetch\PIOLET.EXE-09372A35.pf
   C:\DOCUME~1\YEHOUD~1\MENUDM~1\PROGRA~1\Piolet
   C:\WINDOWS\System32\f3PSSavr.scr
   C:\Program Files\MSN Messengeriched20.dll

   -----------\  Extensions

   (michele ZERDOUN) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (musik) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (YEHOUDITH ANKRI) - {0648699b-b886-4011-99d4-04f1de459696} => blackaqua-5.69-fx
   (YEHOUDITH ANKRI) - {082b6fe0-310a-11db-a98b-0800200c9a66} => arctic_glow-2.4.4.1-fx
   (YEHOUDITH ANKRI) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (YEHOUDITH ANKRI) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (YEHOUDITH ANKRI) - {7affbfae-c4e2-4915-8c0f-00fa3ec610a1} => aoltoolbar
   (YEHOUDITH ANKRI) - {a02c0c70-605c-11da-8cd6-0800200c9a66} => pimpzilla-3.49-fx
   (YEHOUDITH ANKRI) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
   (YEHOUDITH ANKRI) - {e213bb8f-8ebd-11db-96b7-005056c00008} => myFireFox


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\system32	DfMnnmp.ini
   C:\WINDOWS\system32	DfMnnmp.ini2
   [b]==> VUNDO <==/b
 



   1 - "C:\ToolBar SD\TB_1.txt" - 25/09/2008|23:04 - Option : [1]

   -----------\  Fin du rapport a 23:04:55,23

geoffrey5 · Answer

ok maintenant :

&#x25B6; Relance Toolbar-S&D en double-cliquant sur le raccourci.
&#x25B6; Tape sur "2" puis valide en appuyant sur "Entrée". 
 /!\ Ne ferme pas la fenêtre lors de la suppression ! 
&#x25B6; Un rapport sera généré, poste son contenu ici. 

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches. 
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..." 
Tape explorer puis valide.


ensuite :


&#x25B6; Télécharger malwarebytes 
 
&#x25B6; Voici un tuto pour bien l installer et bien l utiliser : 

https://www.androidworld.fr/

aide toi bien du tuto pour supprimer correctement ce qu il aura trouvé
 

Après l analyse, redémarrer le pc et poste le rapport !!

Et refais un nouveau rapport hijackthis stp

QueEn B · Answer

Voila le nouveau rapport donné :

   -----------\  ToolBar S&D 1.2.1   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor         1.50GHz )
   BIOS : BIOS Version 1.20
   USER : YEHOUDITH ANKRI ( Not Administrator ! )
   BOOT : Fail-safe with network boot
   Antivirus : Avira AntiVir PersonalEdition  6.39.1.147
   (Activated)
   Firewall  : Bitdefender Firewall 8.0 (Not Activated)
   C:\ (Local Disk) - NTFS - Total : 55 Go Free : 13 Go
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 24-09-2008|21:50 )
   Option : [2] ( 25/09/2008|23:09 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio\kb123
   Supprime! - C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio\kb124
   Supprime! - C:\DOCUME~1\musik\APPLIC~1\Dealio\kb123
   Supprime! - C:\Program Files\Piolet\Cache.dat
   Supprime! - C:\Program Files\Piolet\contacts.dat
   Supprime! - C:\Program Files\Piolet\contactsR.dat
   Supprime! - C:\Program Files\Piolet\default.m3u
   Supprime! - C:\Program Files\Piolet\diCrHash.dll
   Supprime! - C:\Program Files\Piolet\DOWNLD2.DAT
   Supprime! - C:\Program Files\Piolet\downloads.dat
   Supprime! - C:\Program Files\Piolet\EBCRYPT.DLL
   Supprime! - C:\Program Files\Piolet\fmod.dll
   Supprime! - C:\Program Files\Piolet\fmod_dsp_lowpass.dll
   Supprime! - C:\Program Files\Piolet\INSTALL.LOG
   Supprime! - C:\Program Files\Piolet\loading.gif
   Supprime! - C:\Program Files\Piolet\loading.htm
   Supprime! - C:\Program Files\Piolet\My Shared Folder
   Supprime! - C:\Program Files\Piolet\MyFiles.dat
   Supprime! - C:\Program Files\Piolet\MyFiles.dat.lst
   Supprime! - C:\Program Files\Piolet\NCTAudioBurner.dll
   Supprime! - C:\Program Files\Piolet\NCTAudioFile.dll
   Supprime! - C:\Program Files\Piolet\NCTAudioInformation.dll
   Supprime! - C:\Program Files\Piolet\NCTAudioPlayer.dll
   Supprime! - C:\Program Files\Piolet\NCTAudioVisualization.dll
   Supprime! - C:\Program Files\Piolet\Piolet.exe
   Supprime! - C:\Program Files\Piolet\Piolet.exe.Manifest
   Supprime! - C:\Program Files\Piolet\Piolet.sw2
   Supprime! - C:\Program Files\Piolet\Settings.ini
   Supprime! - C:\Program Files\Piolet\SmartUI2.ocx
   Supprime! - C:\Program Files\Piolet\Softwrap.dll
   Supprime! - C:\Program Files\Piolet\TaskKiller.exe
   Supprime! - C:\Program Files\Piolet\UNWISE.EXE
   Supprime! - C:\DOCUME~1\YEHOUD~1\Bureau\PioletSetup(2).exe
   Supprime! - C:\WINDOWS\Prefetch\PIOLET.EXE-09372A35.pf
   Supprime! - C:\DOCUME~1\YEHOUD~1\MENUDM~1\PROGRA~1\Piolet
   Supprime! - C:\WINDOWS\System32\f3PSSavr.scr
   Supprime! - C:\Program Files\MSN Messengeriched20.dll
   Supprime! - C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio
   Supprime! - C:\DOCUME~1\musik\APPLIC~1\Dealio
   Supprime! - C:\Program Files\Piolet

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (michele ZERDOUN) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (musik) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (YEHOUDITH ANKRI) - {0648699b-b886-4011-99d4-04f1de459696} => blackaqua-5.69-fx
   (YEHOUDITH ANKRI) - {082b6fe0-310a-11db-a98b-0800200c9a66} => arctic_glow-2.4.4.1-fx
   (YEHOUDITH ANKRI) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
   (YEHOUDITH ANKRI) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
   (YEHOUDITH ANKRI) - {7affbfae-c4e2-4915-8c0f-00fa3ec610a1} => aoltoolbar
   (YEHOUDITH ANKRI) - {a02c0c70-605c-11da-8cd6-0800200c9a66} => pimpzilla-3.49-fx
   (YEHOUDITH ANKRI) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
   (YEHOUDITH ANKRI) - {e213bb8f-8ebd-11db-96b7-005056c00008} => myFireFox


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\system32	DfMnnmp.ini
   C:\WINDOWS\system32	DfMnnmp.ini2
   [b]==> VUNDO <==/b
 



   1 - "C:\ToolBar SD\TB_1.txt" - 25/09/2008|23:04 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 25/09/2008|23:21 - Option : [2]

   -----------\  Fin du rapport a 23:21:19,01

geoffrey5 · Answer

ok maintenant fais malwarebytes stp

aide toi bien du tuto pour supprimer tout ce qu il aura trouvé

QueEn B · Answer

Alors voila l'analyse malwarebytes c'est enfin terminée..
Voici le rapport : 
Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1205
Windows 5.1.2600 Service Pack 2

26/09/2008 00:09:40
mbam-log-2008-09-26 (00-09-40).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 118249
Temps écoulé: 38 minute(s), 23 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 5
Clé(s) du Registre infectée(s): 43
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 23

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\pmnnMfDt.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\yyqfyoxb.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\vtUklkHB.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\mfxudaoy.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32	gpswh.dll (Trojan.Vundo.H) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{434e7224-7cde-41a1-9290-6ad19790f6ae} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vtuklkhb (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{434e7224-7cde-41a1-9290-6ad19790f6ae} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4ddf699c-e27a-4cc6-ad1e-3dd599ad6b8f} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4ddf699c-e27a-4cc6-ad1e-3dd599ad6b8f} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{df0053c3-ff29-4b77-9d30-4203ac64f7d4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{df0053c3-ff29-4b77-9d30-4203ac64f7d4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\videoegg.activexloader (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\videoegg.activexloader.1 (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e282c728-189d-419e-8ee2-1601f4b39ba5} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e1a63484-a022-4d42-830a-fbd411514440} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{dc3a04ee-cdd7-4407-915c-a5502f97eecd} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{db8cce99-59c6-4552-8bfc-058feb38d6ce} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d17726cc-d4dd-4c4a-9671-471d56e413b5} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c5041fd9-4819-4dc4-b20e-c950b5b03d2a} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bb187c0d-6f53-4f3e-9590-98fd3a7364a2} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{af2e62b6-f9e1-4d4f-a10a-9dc8e6dcbcc0} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ad5915ea-b61a-4dba-b5c8-ef4b2df0a3c7} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ad0a3058-fd49-4f98-a514-fd055201835e} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a58c497b-3ee2-45e7-9594-daca6be2a0d0} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a3d06987-c35e-49e4-8fe2-ac67b9fbfb4c} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9856e2d8-ffb2-4fe5-8cad-d5ad6a35a804} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8f6a82a2-d7b1-443e-bb9f-f7dc887dd618} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{88d6cf0e-cf70-4c24-bf6e-e4e414bc649c} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{83dfb6ee-ab18-41b5-86d4-b544a141d67e} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5c29c7e4-5321-4cad-be2e-877666bed5df} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3f91eb90-ef62-44ee-a685-fac29af111cd} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1a8642f1-dc80-4edc-a39d-0fb62a58b455} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{168dc258-1455-4e61-8590-9dac2f27b675} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\VideoEgg (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videoegg.com/publisher,version=1.5 (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\VideoEgg (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MozillaPlugins\@videoegg.com/publisher,version=1.5 (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoftdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\core (Rootkit.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\646875b5 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{434e7224-7cde-41a1-9290-6ad19790f6ae} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bm675b4629 (Trojan.Agent) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\pmnnmfdt -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\pmnnmfdt  -> Delete on reboot.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\vtUklkHB.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32	gpswh.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\pmnnMfDt.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32	DfMnnmp.ini (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32	DfMnnmp.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yyqfyoxb.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\bxoyfqyy.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yyyhdofx.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\xfodhyyy.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mfxudaoy.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\Documents and Settings\YEHOUDITH ANKRI\Local Settings\Temporary Internet Files\Content.IE5\G2RDDN0C
d82m0[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\YEHOUDITH ANKRI\Local Settings\Temporary Internet Files\Content.IE5\KJI7OTTM\upd105320[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A98093AE-F09D-466F-AB9F-890A95100D41}\RP555\A0095497.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\ToolBar SD\Backup-TB\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hgGvssRH.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\clhoyves.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM675b4629.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM675b4629.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\wr.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS	mlpcert2007 (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\core.cache.dsk (Rootkit.Agent) -> Quarantined and deleted successfully.

QueEn B · Answer

Et enfin voici le rapport HijackThis apres redemarrage du PC et suppression des infections dans Malwarebytes:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:21:33, on 26/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {434E7224-7CDE-41A1-9290-6AD19790F6AE} - C:\WINDOWS\system32\vtUklkHB.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} - C:\Program Files\Outlook Express\quhabepuf.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} - C:\WINDOWS\system32\pmnnMfDt.dll (file missing)
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BM675b4629] Rundll32.exe "C:\WINDOWS\system32\clhoyves.dll",s
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe"  -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skypec4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ????????????????????
?L?9?9?9?9?C?9?? tgpswh.dll
O20 - Winlogon Notify: vtUklkHB - vtUklkHB.dll (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

geoffrey5 · Answer

dsl de te répondre si tard mais je travaillais sur une astuce pour la faq...

Pour s assurer que tu n ai plus d infections vundo, fais ceci stp :

&#x25B6; Télécharge sur le bureau Virtumundobegone 

(c est le numéro 13 en bas de la page)

&#x25B6; déconnecte internet et désactive ton antivirus le temps de la manipulation



=> Double clic sur VirtumundoBeGone.exe 
=> Clic Continue ==> clic Start 
=> Clic Oui 
=> A la fin si Vundo est présent , le PC s’éteint et redémarre 
&#x25B6; Si Ecran bleu et message : Erreur fatale .. pas de problème 
=> Poster le rapport VBG.TXT qui est sur le bureau 

ensuite refais un nouveau rapport hijackthis stp

QueEn B · Answer

Bonjour,
Désolé je nai pu faire tout ca que maintenant. Alor voila pour le rapport Virtumundobegone
Le PC ne s'est pas eteint et redemarré donc je pense pas qu'il y ai de vundo sur mon PC.



[09/28/2008, 0:03:25] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\YEHOUDITH ANKRI\Bureau\VirtumundoBeGone.exe" )
[09/28/2008, 0:03:36] - Detected System Information:
[09/28/2008, 0:03:36] -  Windows Version: 5.1.2600, Service Pack 2
[09/28/2008, 0:03:36] -  Current Username: YEHOUDITH ANKRI (Admin)
[09/28/2008, 0:03:36] -  Windows is in SAFE mode.
[09/28/2008, 0:03:36] - Searching for Browser Helper Objects:
[09/28/2008, 0:03:36] -  BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (&Yahoo! Toolbar Helper)
[09/28/2008, 0:03:36] -  BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[09/28/2008, 0:03:36] -  BHO 3: {434E7224-7CDE-41A1-9290-6AD19790F6AE} ()
[09/28/2008, 0:03:36] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:03:36] -  No filename found. Continuing.
[09/28/2008, 0:03:36] -  BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[09/28/2008, 0:03:36] -  BHO 5: {64F56FC1-1272-44CD-BA6E-39723696E350} (EoBho Class)
[09/28/2008, 0:03:36] -  BHO 6: {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} ()
[09/28/2008, 0:03:36] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:03:36] -  Checking for HKLM\...\Winlogon\Notify\quhabepuf
[09/28/2008, 0:03:36] -  Key not found: HKLM\...\Winlogon\Notify\quhabepuf, continuing.
[09/28/2008, 0:03:36] -  BHO 7: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[09/28/2008, 0:03:36] -  BHO 8: {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} ()
[09/28/2008, 0:03:36] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:03:36] -  No filename found. Continuing.
[09/28/2008, 0:03:36] - Finished Searching Browser Helper Objects
[09/28/2008, 0:03:36] - Finishing up...
[09/28/2008, 0:03:36] - Nothing found! Exiting...

[09/28/2008, 0:10:29] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\YEHOUDITH ANKRI\Bureau\VirtumundoBeGone.exe" )
[09/28/2008, 0:10:32] - Detected System Information:
[09/28/2008, 0:10:32] -  Windows Version: 5.1.2600, Service Pack 2
[09/28/2008, 0:10:32] -  Current Username: YEHOUDITH ANKRI (Admin)
[09/28/2008, 0:10:32] -  Windows is in NORMAL mode.
[09/28/2008, 0:10:32] - Searching for Browser Helper Objects:
[09/28/2008, 0:10:32] -  BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (&Yahoo! Toolbar Helper)
[09/28/2008, 0:10:32] -  BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[09/28/2008, 0:10:32] -  BHO 3: {434E7224-7CDE-41A1-9290-6AD19790F6AE} ()
[09/28/2008, 0:10:32] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:10:32] -  No filename found. Continuing.
[09/28/2008, 0:10:32] -  BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[09/28/2008, 0:10:32] -  BHO 5: {64F56FC1-1272-44CD-BA6E-39723696E350} (EoBho Class)
[09/28/2008, 0:10:32] -  BHO 6: {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} ()
[09/28/2008, 0:10:32] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:10:32] -  Checking for HKLM\...\Winlogon\Notify\quhabepuf
[09/28/2008, 0:10:32] -  Key not found: HKLM\...\Winlogon\Notify\quhabepuf, continuing.
[09/28/2008, 0:10:32] -  BHO 7: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[09/28/2008, 0:10:32] -  BHO 8: {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} ()
[09/28/2008, 0:10:32] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:10:32] -  No filename found. Continuing.
[09/28/2008, 0:10:32] - Finished Searching Browser Helper Objects
[09/28/2008, 0:10:32] - Finishing up...
[09/28/2008, 0:10:32] - Nothing found! Exiting...

QueEn B · Answer

Alors voila pour le rapport hijackthis : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:23:29, on 28/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\V0420Mon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\RSupport\RemoteCall for Skypec4skype.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {434E7224-7CDE-41A1-9290-6AD19790F6AE} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} - C:\Program Files\Outlook Express\quhabepuf.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} - (no file)
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe"  -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skypec4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ????????????????????
?L?9?9?9?9?C?9?? tgpswh.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

geoffrey5 · Answer

Salut !!

maintenant fais ceci stp :

&#x25B6; Télécharge Combofix de sUBs 

(c est le numéro 5 en bas de la page)

&#x25B6; et enregistre le sur le Bureau. 

  
&#x25B6; désactive tes protections et ferme toutes tes applications(antivirus, parefeu, garde en temps réel de l'antispyware) 


Voici le tutoriel officiel de Bleeping Computer pour savoir l utiliser :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
 

ensuite envois le rapport et refais un nouveau rapport hijackthis stp

QueEn B · Answer

Alor voila jai fait le rapport avec combofix. Le voici : ComboFix 08-09-27.01 - YEHOUDITH ANKRI 2008-09-28 0:39:58.1 - NTFSx86 Lancé depuis: C:\Documents and Settings\YEHOUDITH ANKRI\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Invit‚\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML C:\Documents and Settings\michele ZERDOUN\Cookies\michele_zerdoun@esearchvision[2].txt C:\Documents and Settings\michele ZERDOUN\Cookies\michele_zerdoun@sansendommagement[2].txt C:\Documents and Settings\musik\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\inst.exe C:\Program Files\outlook C:\Program Files\smbols~1 C: emp n3 C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\urlmsnlink.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_CORE ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-27 au 2008-09-27 )))))))))))))))))))))))))))))))))))) . 2008-09-25 23:28 . 2008-09-25 23:28 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-09-25 23:28 . 2008-09-25 23:28 d-------- C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Malwarebytes 2008-09-25 23:28 . 2008-09-25 23:28 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-09-25 23:28 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-09-25 23:28 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-09-25 23:00 . 2008-09-25 23:18 2,810 --a------ C:\Documents and Settings\Orph.egd 2008-09-25 22:56 . 2008-09-25 23:21 d-------- C:\ToolBar SD 2008-09-25 22:37 . 2008-09-25 22:37 d-------- C:\Program Files\Trend Micro 2008-09-25 22:21 . 2008-09-25 22:21 d-------- C:\Program Files\Spybot - Search & Destroy 2008-09-25 22:12 . 2008-09-25 22:16 d-------- C:\WINDOWS\BDOSCAN8 2008-09-25 21:09 . 2008-09-25 22:21 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-09-25 20:53 . 2008-09-25 20:53 d-------- C:\QUARANTINE 2008-09-24 23:00 . 2008-09-24 23:00 128,000 --a------ C:\WINDOWS\system32\vullvxvo.dll 2008-09-24 23:00 . 2008-09-24 23:00 128,000 --a------ C:\WINDOWS\system32\spblby.dll 2008-09-24 23:00 . 2008-09-24 23:00 95,232 --a------ C:\WINDOWS\system32\qqogdhyy.dll 2008-09-24 22:06 . 2008-09-24 22:06 128,000 --a------ C:\WINDOWS\system32\wfqjpagi.dll 2008-09-24 22:06 . 2008-09-24 22:06 128,000 --a------ C:\WINDOWS\system32\jhaurl.dll 2008-09-23 21:47 . 2008-09-24 21:56 885,471 ---hs---- C:\WINDOWS\system32\sttxcfdg.ini 2008-09-23 21:44 . 2008-09-23 21:44 128,000 --a------ C:\WINDOWS\system32\ztnpoz.dll 2008-09-23 21:44 . 2008-09-23 21:44 128,000 --a------ C:\WINDOWS\system32\ifpilatw.dll 2008-09-23 21:41 . 2008-09-23 21:41 95,232 --a------ C:\WINDOWS\system32\kgagjmfg.dll 2008-09-09 20:20 . 2008-09-28 00:51 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-09-09 20:20 . 2008-09-09 20:20 1,409 --a------ C:\WINDOWS\QTFont.for . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-27 22:28 --------- d-----w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Skype 2008-09-25 21:15 --------- d-----w C:\Program Files\MSN Messenger 2008-09-14 23:22 --------- d-----w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Azureus 2008-09-03 21:45 --------- d-----w C:\Program Files\DivX 2008-08-26 21:02 --------- d-----w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\GetRightToGo 2008-08-26 20:27 164 ----a-w C:\install.dat 2008-08-26 17:09 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-26 17:09 --------- d-----w C:\Program Files\FBM Software 2008-08-26 17:08 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia 2008-08-26 17:08 --------- d-----w C:\Program Files\ClamWin 2008-08-26 17:08 --------- d-----w C:\Program Files\AVS4YOU 2008-08-26 17:03 --------- d-----w C:\Program Files\Fichiers communs\AOL 2008-08-06 08:42 24,196 -c--a-w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\wklnhst.dat 2008-08-05 07:09 --------- d-----w C:\Documents and Settings\michele ZERDOUN\Application Data\Yahoo! 2008-07-23 16:48 200,704 -c--a-w C:\WINDOWS\system32\ssldivx.dll 2008-07-23 16:48 1,044,480 -c--a-w C:\WINDOWS\system32\libdivx.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll 2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll 2008-07-07 20:18 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-04-30 21:37 94,208 ----a-w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\ezplay.sys 2008-04-30 21:37 47,360 ----a-w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\pcouffin.sys 2007-10-31 19:01 2,688 -c--a-w C:\Documents and Settings\michele ZERDOUN\Application Data\wklnhst.dat 2007-05-20 11:41 54,275 -c--a-w C:\Documents and Settings\YEHOUDITH ANKRI\x.dat 2007-05-17 12:51 128 ----a-w C:\Documents and Settings\YEHOUDITH ANKRI\ps.exe 2007-01-22 20:46 774,144 -c--a-w C:\Program Files\RngInterstitial.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360] "TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD oscdspd.exe" [2005-04-11 65536] "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "Registry Cleaner"="C:\Program Files\Registry Cleaner Trial\Regclean.exe" [2006-07-18 4714496] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-09-13 22880040] "Rc4Skype Startup"="C:\Program Files\RSupport\RemoteCall for Skype c4skype.exe" [2007-05-29 683088] "Creative Live! Cam Manager"="C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe" [2007-06-07 155648] "Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 4670704] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-04-11 339968] "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-15 98394] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-15 688218] "LtMoh"="C:\Program Files\ltmoh\Ltmoh.exe" [2005-04-13 184320] "THotkey"="C:\Program Files\Toshiba\Toshiba Applet hotkey.exe" [2005-04-25 339968] "Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-04-05 73728] "PadTouch"="C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe" [2004-11-17 1077327] "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2007-09-18 249896] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" [2004-08-25 94208] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 139320] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2003-10-07 147514] "V0420Mon.exe"="C:\WINDOWS\V0420Mon.exe" [2007-04-30 32768] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 267048] "TPSMain"="TPSMain.exe" [2005-01-21 C:\WINDOWS\system32\TPSMain.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360] C:\Documents and Settings\YEHOUDITH ANKRI\Menu D‚marrer\Programmes\D‚marrage\ wkcalrem.LNK - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe [2004-07-12 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\Shareaza\Shareaza.exe"= "C:\Program Files\Azureus\Azureus.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"= "C:\Program Files\Yahoo!\Messenger\YServer.exe"= "C:\Program Files\iTunes\iTunes.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\Program Files\Skype\Phone\Skype.exe"= R3 V0420VID;Live! Cam Vista IM (VF0420);C:\WINDOWS\system32\DRIVERS\V0420Vid.sys [2007-05-31 99648] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{de6e70e4-0eaa-11dc-b38b-0011f5b87702}] \Shell\AutoRun\command - E:\LaunchU3.exe -a *Newly Created Service* - ENTDRV51 . Contenu du dossier 'Tâches planifiées' . - - - - ORPHELINS SUPPRIMES - - - - BHO-{434E7224-7CDE-41A1-9290-6AD19790F6AE} - (no file) BHO-{8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} - C:\Program Files\Outlook Express\quhabepuf.dll BHO-{DF0053C3-FF29-4B77-9D30-4203AC64F7D4} - (no file) Toolbar-SITEguard - (no file) HKLM-Run-EoEngine - (no file) HKLM-Run-EoWeather - (no file) HKLM-Run-EoSudoku - (no file) . ------- Examen supplémentaire ------- . FireFox -: Profile - C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Mozilla\Firefox\Profiles\km2m1x9e.default\ FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://fr.search.yahoo.com/search?fr=ffsp1&p= FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://fr.yahoo.com FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser ppdf32.dll FF -: plugin - C:\Program Files\DivX\DivX Content Uploader pUpload.dll FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins pitunes.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava11.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava12.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava13.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava14.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava32.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJPI150_02.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPOJI610.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins pracplug.dll FF -: plugin - C:\Program Files\Real\RealArcade\Plugins\Mozilla pracplug.dll FF -: plugin - C:\Program Files\Real\RhapsodyPlayerEngine prhapengine.dll FF -: plugin - C:\Program Files\Yahoo!\Shared pYState.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-28 00:47:38 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Skype\stillyou18\dyncontent\bundle.dat-journal C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Skype\stillyou18\config.tmp Scan terminé avec succès Fichiers cachés: 2 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\system32\acs.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\system32\ati2evxx.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\Program Files\Network Associates\Common Framework aPrdMgr.exe C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe . ************************************************************************** . Heure de fin: 2008-09-28 1:08:32 - La machine a redémarré ComboFix-quarantined-files.txt 2008-09-27 23:08:19 Avant-CF: 13ÿ937ÿ680ÿ384 octets libres Après-CF: 14,111,535,104 octets libres 214 --- E O F --- 2008-09-11 05:35:22

QueEn B · Answer

Alors voici le nouveau rapport hijackthis  : 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:15:31, on 28/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\V0420Mon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\RSupport\RemoteCall for Skypec4skype.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe"  -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skypec4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

geoffrey5 · Answer

relance hijackthis en cliquant sur scan only et coches ces lignes stp :

O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)     
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU) 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime     

puis tu cliques sur fix checked.

ensuite :

&#x25B6; Télécharge JavaRa.zip
 
&#x25B6; Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)

&#x25B6; Double-clique sur le répertoire JavaRa obtenu.

&#x25B6; Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)

&#x25B6; Clique sur Search For Updates.

&#x25B6; Sélectionne Update Using jucheck.exe puis clique sur Search.

&#x25B6; Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.

&#x25B6; Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.

&#x25B6; Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.

&#x25B6; Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.

 * Note : le rapport se trouve aussi là : ( C:\JavaRa.log )

&#x25B6; Ferme l'application. 


Je vois que tu as 2 antivirus : antivir et McAfee...lequel utilises tu ??

et est ce que tu as encore des problemes ??

je viendrai vérifier tes réponses demain dès que possible  ;-)

Bonne fin de soirée @+

QueEn B · Answer

Coucou!
En fait j'utilise plutot McAfee que Antivir.
Pour l'instant mes problemes de navigation sur Internet et fenetre intempestives semble avoir disparu :-)
Je voulais te demander en fait dans la liste de mes programmes s'affiche le programme "CID Help" j'ai lu qu'il faut supprimer ce genre de fichier mais moi quand ke clique sur supprimer ca me met que une erreur s'est produite lors de la desinstallation et que cet element est peut etre deja supprimer. Je voulais simplement te demander si tu pense que ce programme est vrement supprimé ou si il s'agit d'une erreur qui empeche la desinstallation???
Enfin voila en attendant comme demandé je te poste rapport généré par JavaRa :

Merci pour ton aide.


JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Sep 28 01:58:52 2008

Found and removed: C:\Program Files\Java\jre1.5.0_02

Found and removed: Software\JavaSoft\Java2D\1.5.0_02

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Classes\JavaPlugin.150_02

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_02

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_02

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150020}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_02

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_02\

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

------------------------------------

Finished reporting.

geoffrey5 · Answer

Salut !!

il ne faut jamais installer 2 antivirus sur le meme PC au sinon il risque d y avoir des conflits entres les 2.

Donc vas désinstaller Antivir dans ajout/suppression de programmes et fais une recherche de ton PC en tapant McAfee et supprime tout ce qu il trouvera...ensuite vide ta corbeille.

redémarre en mode sans échec et vas supprimer "CID help".

ensuite redémarre en mode normal et fais ceci pour terminer stp :

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :  

&#x25B6; Télécharge Toolscleaner sur ton Bureau : 

(c est le numéro 15 en bas de la page) 

&#x25B6; Double-clique sur ToolsCleaner2.exe et laisse le travailler 
&#x25B6; Clique sur Recherche et laisse le scan se terminer. 
&#x25B6; Clique sur Suppression pour finaliser. 
&#x25B6; Tu peux, si tu le souhaites, te servir des Options facultatives. 
&#x25B6; Clique sur Quitter, pour que le rapport puisse se créer. 
&#x25B6; Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse




Désactive et réactive la Restauration du système :
 
1 Dans la barre des tâches de Windows, clique sur Démarrer.
 
2 Clique avec le bouton droit de la souris sur Poste de travail puis clique sur Propriétés.
 
3 Dans l'onglet Restauration du système, coche "Désactiver la Restauration du système"

4 Clique sur Appliquer.
  
5 Ensuite décoche "Désactiver la restauration du systeme"

6 clique sur appliquer puis ok

7 vas créer un point de restauration en cliquant sur démarrer => tous les programmes => accessoires =>

outils systeme => restauration du systeme => créer un point de restauration => tu mets un nom

(exemple : après désinfection sur CCM) puis tu valides.


Est ce que tu as bien téléchargé la dernière version de java avant de supprimer les autres avec le programme ??

PS : les liens de toolscleaner, etc... C est mon site web si ca peut t aider  ;-)

QueEn B · Answer

Coucou!
Je suis désolée j'étais en vacance et donc je n'étais pas devant mon ordi pendant pas mal de temps
J'espere que ca te dreange pas qu'on reprenne la on en était.
En fait je t'explique j'ai fait ce que tu m'a dis. Jai bien désinstaller McAfee et supprimé tous ce qui étais donné par la reecherche mais meme en mode sans echec je ne peut pas supprimer CID Help parcque ca me met toujours que "une erreur lors de la tentative de suppression de CID Help. Cet element est peut etre deja desinstallé"
Donc je sais pas si je dois continuer a faire tout ce que tu m'a dis (telecharger toolsclleaner...) si CID Help n'est pa desinstallé..
Merci pour ta reponse!!
A+++

geoffrey5 · Answer

Salut !!

Non ca ne me dérrange pas du tout, tu as le droit de prendre des vacances  ;-)

fais ceci stp :

&#x25B6; Télécharger et enregistrer lopSD sur le Bureau 

(C est le numéro 4 en bas de la page)
 
&#x25B6; Double-clic Lop S&D
 
&#x25B6; Faire l'installation 

&#x25B6; Fermer toutes les applications 

&#x25B6; Le lancer par un double-clic sur le raccourci qui est sur le bureau 
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
 
&#x25B6; Taper F pour français , puis presser entrée 

&#x25B6; Taper 1 

&#x25B6; Presser Entrée 

&#x25B6; Le PC va redémarrer 
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
 
&#x25B6; Attendre l'apparition du rapport 
&#x25B6; Copier le rapport et le coller dans la réponse 
le rapport se trouve aussi à C:\lopR

QueEn B · Answer

Salut!!
Alors voila pour le joli rapport lopR:

   --------------------\  Lop S&D 4.2.4-5   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor         1.50GHz )
   BIOS : BIOS Version 1.20
   USER : YEHOUDITH ANKRI ( Administrator )
   BOOT : Normal boot
   Antivirus : Bitdefender Antivirus 8.0 (Not Activated)
   Firewall  : Bitdefender Firewall 8.0 (Not Activated)
   C:\ (Local Disk) - NTFS - Total : 55 Go Free : 13 Go
   D:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

   "C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
   Option : [1] ( 17/10/2008|16:47 )
 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [06/09/2005|09:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [10/09/2007|21:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
   [06/09/2005|07:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [07/09/2005|13:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [15/04/2008|01:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
   [06/09/2005|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
   [06/09/2005|08:09] C:\DOCUME~1\ADMINI~1\APPLIC~1	oshiba

   [10/12/2006|23:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [13/10/2008|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
   [06/02/2008|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [06/02/2008|00:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
   [06/12/2007|01:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [16/09/2006|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [30/04/2008|23:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [30/01/2008|01:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
   [26/06/2006|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [15/05/2008|00:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
   [26/06/2007|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD X Studios
   [29/01/2008|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\first heart program keep
   [27/05/2007|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [25/09/2008|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [07/01/2007|02:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [24/02/2008|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [14/05/2008|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [03/04/2008|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Network Associates
   [06/09/2005|06:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [01/10/2007|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [25/09/2008|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [30/01/2008|01:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\STOPzilla!
   [02/03/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [19/05/2008|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [22/02/2008|01:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [01/06/2006|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ViGUARD
   [02/07/2006|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [03/09/2006|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [15/11/2007|00:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [14/05/2008|23:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
   [14/05/2008|23:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [06/09/2005|09:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [10/09/2007|21:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [06/09/2005|07:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [07/09/2005|13:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [06/09/2005|09:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
   [06/09/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [06/09/2005|08:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1	oshiba

   [06/09/2005|09:03] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
   [06/09/2005|07:10] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [13/06/2006|18:23] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [07/09/2005|13:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
   [06/09/2005|09:21] C:\DOCUME~1\INVIT~1\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic
   [06/09/2005|09:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Symantec
   [13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Talkback
   [06/09/2005|08:09] C:\DOCUME~1\INVIT~1\APPLIC~1	oshiba

   [01/11/2007|09:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [07/05/2007|16:40] C:\DOCUME~1\MICHEL~1\APPLIC~1\.clamwin
   [05/08/2008|07:47] C:\DOCUME~1\MICHEL~1\APPLIC~1\Adobe
   [22/07/2007|10:42] C:\DOCUME~1\MICHEL~1\APPLIC~1\AdobeUM
   [01/06/2007|12:28] C:\DOCUME~1\MICHEL~1\APPLIC~1\Apple Computer
   [31/10/2007|09:51] C:\DOCUME~1\MICHEL~1\APPLIC~1\DivX
   [27/05/2007|13:05] C:\DOCUME~1\MICHEL~1\APPLIC~1\Google
   [06/09/2005|07:10] C:\DOCUME~1\MICHEL~1\APPLIC~1\Identities
   [14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Macromedia
   [17/11/2007|23:56] C:\DOCUME~1\MICHEL~1\APPLIC~1\Microsoft
   [14/06/2006|12:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Mozilla
   [06/09/2005|09:21] C:\DOCUME~1\MICHEL~1\APPLIC~1\MSN Search Toolbar
   [29/01/2008|02:20] C:\DOCUME~1\MICHEL~1\APPLIC~1\Skype
   [06/09/2005|09:04] C:\DOCUME~1\MICHEL~1\APPLIC~1\Sonic
   [07/05/2008|21:24] C:\DOCUME~1\MICHEL~1\APPLIC~1\Spyware Terminator
   [06/09/2005|09:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Symantec
   [14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Talkback
   [30/05/2007|14:39] C:\DOCUME~1\MICHEL~1\APPLIC~1\Template
   [06/09/2005|08:09] C:\DOCUME~1\MICHEL~1\APPLIC~1	oshiba
   [18/07/2007|13:29] C:\DOCUME~1\MICHEL~1\APPLIC~1\U3
   [05/08/2008|09:09] C:\DOCUME~1\MICHEL~1\APPLIC~1\Yahoo!

   [07/05/2007|16:33] C:\DOCUME~1\musik\APPLIC~1\.clamwin
   [26/07/2007|10:46] C:\DOCUME~1\musik\APPLIC~1\Adobe
   [12/08/2007|22:34] C:\DOCUME~1\musik\APPLIC~1\AdobeUM
   [13/06/2006|18:34] C:\DOCUME~1\musik\APPLIC~1\Apple Computer
   [04/05/2008|18:31] C:\DOCUME~1\musik\APPLIC~1\DivX
   [14/06/2006|13:44] C:\DOCUME~1\musik\APPLIC~1\Google
   [06/09/2005|07:10] C:\DOCUME~1\musik\APPLIC~1\Identities
   [13/06/2006|18:32] C:\DOCUME~1\musik\APPLIC~1\Macromedia
   [13/06/2006|18:51] C:\DOCUME~1\musik\APPLIC~1\Microsoft
   [13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Mozilla
   [07/10/2007|23:26] C:\DOCUME~1\musik\APPLIC~1\Mpeg Ante
   [06/09/2005|09:21] C:\DOCUME~1\musik\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\musik\APPLIC~1\Sonic
   [04/05/2008|18:25] C:\DOCUME~1\musik\APPLIC~1\Spyware Terminator
   [02/07/2006|15:06] C:\DOCUME~1\musik\APPLIC~1\Symantec
   [13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Talkback
   [06/09/2005|08:09] C:\DOCUME~1\musik\APPLIC~1	oshiba

   [24/02/2008|16:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [02/04/2006|22:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec


   [06/02/2008|00:25] C:\DOCUME~1\YEHOUD~1\APPLIC~1\acccore
   [14/05/2008|23:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Adobe
   [28/12/2006|16:23] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AdobeUM
   [30/01/2006|22:14] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Apple Computer
   [02/06/2008|21:31] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AVS4YOU
   [15/09/2008|01:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Azureus
   [30/01/2008|01:24] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Bitdefender
   [15/05/2008|00:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Creative
   [26/06/2007|23:39] C:\DOCUME~1\YEHOUD~1\APPLIC~1\DivX
   [28/12/2005|20:36] C:\DOCUME~1\YEHOUD~1\APPLIC~1\FotoWire
   [26/08/2008|23:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\GetRightToGo
   [04/01/2006|21:15] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Google
   [28/06/2007|11:12] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Help
   [06/09/2007|20:58] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Identities
   [09/01/2006|21:41] C:\DOCUME~1\YEHOUD~1\APPLIC~1\InterVideo
   [04/01/2007|00:44] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Leadertech
   [19/09/2006|22:49] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Macromedia
   [25/09/2008|23:28] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Malwarebytes
   [28/06/2007|11:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Media Player Classic
   [21/11/2007|02:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Microsoft
   [01/09/2008|22:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Mozilla
   [29/01/2008|16:05] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Mpeg Ante
   [15/05/2008|00:33] C:\DOCUME~1\YEHOUD~1\APPLIC~1\muvee Technologies
   [28/05/2006|16:19] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Real
   [30/01/2007|22:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Reallusion
   [20/08/2006|17:35] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Registry Cleaner
   [02/10/2007|22:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\RemoteCall for Skype
   [05/04/2007|18:01] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Screenshot Sender
   [17/05/2007|18:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Shareaza
   [17/10/2008|16:35] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Skype
   [06/09/2005|09:04] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sonic
   [27/04/2008|16:16] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sun
   [27/02/2006|04:34] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Symantec
   [08/05/2006|20:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Talkback
   [27/05/2007|12:59] C:\DOCUME~1\YEHOUD~1\APPLIC~1\TaoUSign
   [16/04/2006|00:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Telefun
   [26/02/2006|20:42] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Template
   [02/01/2006|01:52] C:\DOCUME~1\YEHOUD~1\APPLIC~1	oshiba
   [02/08/2007|18:05] C:\DOCUME~1\YEHOUD~1\APPLIC~1\U3
   [29/01/2008|01:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\uTorrent
   [30/04/2008|23:37] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Vso
   [14/05/2008|23:47] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Yahoo!
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [17/07/2008 09:51][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [17/10/2008 00:00][--ah-----] C:\WINDOWS	asks\A9FB06C49564857C.job
   [17/10/2008 00:00][--ah-----] C:\WINDOWS	asks\A962A84F91C15EBF.job
   [08/12/2005 16:01][--a------] C:\WINDOWS	asks\Rappel d'enregistrement 1.job
   [17/10/2008 09:03][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 12:00][-r-h-c---] C:\WINDOWS	asks\desktop.ini

   ( A962A84F91C15EBF.job )=( c:\docume~1\musik\applic~1\mpegan~1\downloadrdrjump.exe )
   ( A9FB06C49564857C.job )=( c:\docume~1\yehoud~1\applic~1\mpegan~1\downloadrdrjump.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [18/12/2007|16:40] C:\Program Files\802.11 Wireless LAN
   [03/09/2008|21:42] C:\Program Files\Adobe
   [23/03/2006|22:27] C:\Program Files\Alwil Software
   [27/05/2008|23:24] C:\Program Files\Apple Software Update
   [08/12/2005|16:01] C:\Program Files\Atheros
   [06/09/2005|07:38] C:\Program Files\ATI Technologies
   [26/08/2008|19:08] C:\Program Files\AVS4YOU
   [07/03/2006|21:23] C:\Program Files\AxBx
   [11/04/2008|23:30] C:\Program Files\Azureus
   [30/01/2008|01:19] C:\Program Files\BitDefender
   [09/03/2008|23:37] C:\Program Files\BSPlayer
   [24/07/2007|01:03] C:\Program Files\CCleaner
   [26/08/2008|19:08] C:\Program Files\ClamWin
   [06/09/2005|06:52] C:\Program Files\ComPlus Applications
   [14/05/2008|23:33] C:\Program Files\Creative
   [05/06/2006|00:03] C:\Program Files\DIFX
   [03/09/2008|23:45] C:\Program Files\DivX
   [27/01/2007|21:01] C:\Program Files\eMule
   [26/08/2008|19:09] C:\Program Files\FBM Software
   [28/09/2008|00:42] C:\Program Files\Fichiers communs
   [28/12/2005|16:20] C:\Program Files\Free.fr
   [28/05/2007|10:09] C:\Program Files\Google
   [26/08/2008|19:09] C:\Program Files\InstallShield Installation Information
   [17/10/2008|00:14] C:\Program Files\Internet Explorer
   [27/05/2008|23:54] C:\Program Files\iPod
   [03/10/2007|02:20] C:\Program Files\Iteral
   [27/05/2008|23:55] C:\Program Files\iTunes
   [27/05/2008|23:05] C:\Program Files\iTunes Library Updater
   [28/09/2008|01:58] C:\Program Files\Java
   [29/01/2008|01:08] C:\Program Files\LimeWire
   [14/05/2008|23:18] C:\Program Files\Logitech
   [06/09/2005|07:52] C:\Program Files\ltmoh
   [25/09/2008|23:28] C:\Program Files\Malwarebytes' Anti-Malware
   [16/08/2008|01:33] C:\Program Files\Messenger
   [26/06/2007|20:18] C:\Program Files\Messenger Plus! Live
   [09/05/2007|23:41] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [06/09/2005|06:55] C:\Program Files\microsoft frontpage
   [24/01/2007|21:53] C:\Program Files\Microsoft Office
   [15/11/2007|01:05] C:\Program Files\Microsoft SQL Server Compact Edition
   [01/03/2007|22:41] C:\Program Files\Microsoft Windows OneCare Live
   [29/01/2008|02:20] C:\Program Files\Microsoft Works
   [06/09/2005|06:52] C:\Program Files\Movie Maker
   [17/10/2008|16:45] C:\Program Files\Mozilla Firefox
   [09/09/2007|11:47] C:\Program Files\Mozilla Firefox 2 Beta 1
   [10/05/2007|22:38] C:\Program Files\Mpeg Ante
   [14/01/2007|20:51] C:\Program Files\MSECache
   [08/12/2005|19:58] C:\Program Files\MSN
   [06/09/2005|06:51] C:\Program Files\MSN Gaming Zone
   [25/09/2008|23:15] C:\Program Files\MSN Messenger
   [16/10/2006|09:21] C:\Program Files\MSXML 4.0
   [06/09/2005|06:52] C:\Program Files\NetMeeting
   [03/04/2008|23:01] C:\Program Files\Network Associates
   [02/03/2008|01:15] C:\Program Files\Norton AntiVirus
   [29/01/2008|15:46] C:\Program Files\Outlook Express
   [27/05/2008|23:51] C:\Program Files\QuickTime
   [22/01/2007|23:04] C:\Program Files\Real
   [06/09/2005|07:45] C:\Program Files\Realtek Sound Manager
   [20/08/2006|17:33] C:\Program Files\Registry Cleaner Trial
   [02/10/2007|01:29] C:\Program Files\RSupport
   [06/09/2005|06:53] C:\Program Files\Services en ligne
   [17/05/2007|18:11] C:\Program Files\Shareaza
   [01/10/2007|01:06] C:\Program Files\Skype
   [02/04/2008|23:50] C:\Program Files\Smart Projects
   [16/04/2006|15:13] C:\Program Files\Sonic
   [25/09/2008|22:21] C:\Program Files\Spybot - Search & Destroy
   [28/09/2008|01:57] C:\Program Files\Sun
   [06/09/2005|07:47] C:\Program Files\Synaptics
   [08/06/2006|15:54] C:\Program Files\TOSHIBA
   [25/09/2008|22:37] C:\Program Files\Trend Micro
   [07/09/2005|13:31] C:\Program Files\Uninstall Information
   [28/06/2007|11:11] C:\Program Files\VDCodecPack3.7
   [29/01/2008|00:48] C:\Program Files\WashAndGo
   [28/05/2008|23:11] C:\Program Files\WinAVI MP4 Converter
   [27/02/2008|08:16] C:\Program Files\Windows Live
   [03/06/2008|22:50] C:\Program Files\Windows Live Safety Center
   [21/11/2007|23:51] C:\Program Files\Windows Live Toolbar
   [31/10/2007|08:38] C:\Program Files\Windows Media Connect 2
   [31/10/2007|08:38] C:\Program Files\Windows Media Player
   [29/01/2008|15:46] C:\Program Files\Windows NT
   [06/09/2005|06:53] C:\Program Files\WindowsUpdate
   [16/05/2008|00:09] C:\Program Files\WinRAR
   [06/09/2005|06:55] C:\Program Files\xerox
   [14/05/2008|23:43] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [04/01/2007|01:31] C:\Program Files\Fichiers communs\Adobe
   [26/08/2008|19:03] C:\Program Files\Fichiers communs\AOL
   [06/12/2007|01:05] C:\Program Files\Fichiers communs\Apple
   [26/08/2008|19:08] C:\Program Files\Fichiers communs\AVSMedia
   [30/01/2008|15:51] C:\Program Files\Fichiers communs\BitDefender
   [03/04/2008|23:01] C:\Program Files\Fichiers communs\Cisco Systems
   [28/12/2005|20:36] C:\Program Files\Fichiers communs\FotoWire
   [28/12/2005|18:32] C:\Program Files\Fichiers communs\InstallShield
   [29/01/2008|15:41] C:\Program Files\Fichiers communs\iS3
   [06/09/2005|07:07] C:\Program Files\Fichiers communs\Java
   [27/05/2008|22:29] C:\Program Files\Fichiers communs\Logitech
   [02/06/2008|21:26] C:\Program Files\Fichiers communs\Microsoft Shared
   [06/09/2005|06:52] C:\Program Files\Fichiers communs\MSSoap
   [03/04/2008|23:01] C:\Program Files\Fichiers communs\Network Associates
   [06/09/2005|08:47] C:\Program Files\Fichiers communs\ODBC
   [29/01/2007|00:25] C:\Program Files\Fichiers communs\Real
   [06/09/2005|06:52] C:\Program Files\Fichiers communs\Services
   [01/10/2007|01:05] C:\Program Files\Fichiers communs\Skype
   [06/09/2005|08:47] C:\Program Files\Fichiers communs\SpeechEngines
   [02/03/2008|01:15] C:\Program Files\Fichiers communs\Symantec Shared
   [14/06/2007|03:45] C:\Program Files\Fichiers communs\System
   [15/11/2007|00:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 56 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   C:\DOCUME~1\musik\APPLIC~1\MPEGAN~1
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\musik\APPLIC~1\mpegan~1
   C:\DOCUME~1\YEHOUD~1\APPLIC~1\mpegan~1
   C:\Program Files\mpegan~1
   C:\WINDOWS\Tasks\A962A84F91C15EBF.job
   C:\WINDOWS\Tasks\A9FB06C49564857C.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BLUE BAT VIEW]
   "DisplayName"="CiD Help"
   "UninstallString"="C:\DOCUME~1\YEHOUD~1\APPLIC~1\MPEGAN~1\loadfour.exe -uninstall"

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-10-17 16:48:42
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 123
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:114][D:9]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\Temp
   [F:29][D:0]-> C:\DOCUME~1\YEHOUD~1\Cookies
   [F:96][D:4]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 17/10/2008|16:53 - Option : [1]

   --------------------\  Fin du rapport a 16:53:17

geoffrey5 · Answer

Salut !!

maintenant fais ceci stp :

&#x25B6; Relance Lop S&D

&#x25B6; Choisis cette fois-ci l'option 2 (Suppression)

&#x25B6; Ne ferme pas la fenêtre lors de la suppression !

&#x25B6; Poste le rapport généré (C:\lopR.txt)

* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

QueEn B · Answer

Salut!!

Alors voila j'ai fait ce que tu m'as dis.
Le nouveau rapport LopR c'est :


   --------------------\  Lop S&D 4.2.4-5   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor         1.50GHz )
   BIOS : BIOS Version 1.20
   USER : YEHOUDITH ANKRI ( Administrator )
   BOOT : Normal boot
   Antivirus : Bitdefender Antivirus 8.0 (Not Activated)
   Firewall  : Bitdefender Firewall 8.0 (Not Activated)
   C:\ (Local Disk) - NTFS - Total : 55 Go Free : 11 Go
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
   Option : [2] ( 26/10/2008| 1:41 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\WINDOWS\Tasks\A962A84F91C15EBF.job 
   Supprime! - C:\WINDOWS\Tasks\A9FB06C49564857C.job 
   Supprime! - C:\DOCUME~1\musik\APPLIC~1\mpegan~1
   Supprime! - C:\DOCUME~1\YEHOUD~1\APPLIC~1\mpegan~1
   Supprime! - C:\Program Files\mpegan~1
 
   \\\\\\\\\\\\\\\ 

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   \\\\\\\\\\\\\\\

 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [06/09/2005|09:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [10/09/2007|21:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
   [06/09/2005|07:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [07/09/2005|13:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [15/04/2008|01:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
   [06/09/2005|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
   [06/09/2005|08:09] C:\DOCUME~1\ADMINI~1\APPLIC~1	oshiba

   [10/12/2006|23:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [13/10/2008|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
   [06/02/2008|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [06/02/2008|00:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
   [06/12/2007|01:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [16/09/2006|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [30/04/2008|23:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [30/01/2008|01:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
   [26/06/2006|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
   [15/05/2008|00:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
   [26/06/2007|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD X Studios
   [29/01/2008|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\first heart program keep
   [27/05/2007|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [25/09/2008|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [07/01/2007|02:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [24/02/2008|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [14/05/2008|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [03/04/2008|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Network Associates
   [06/09/2005|06:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [01/10/2007|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
   [25/09/2008|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [30/01/2008|01:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\STOPzilla!
   [02/03/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [19/05/2008|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [01/06/2006|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ViGUARD
   [02/07/2006|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [03/09/2006|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
   [15/11/2007|00:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [14/05/2008|23:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
   [14/05/2008|23:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [06/09/2005|09:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [10/09/2007|21:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
   [06/09/2005|07:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [07/09/2005|13:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [06/09/2005|09:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
   [06/09/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [06/09/2005|08:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1	oshiba

   [06/09/2005|09:03] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
   [06/09/2005|07:10] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [13/06/2006|18:23] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [07/09/2005|13:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
   [06/09/2005|09:21] C:\DOCUME~1\INVIT~1\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic
   [06/09/2005|09:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Symantec
   [13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Talkback
   [06/09/2005|08:09] C:\DOCUME~1\INVIT~1\APPLIC~1	oshiba

   [01/11/2007|09:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [07/05/2007|16:40] C:\DOCUME~1\MICHEL~1\APPLIC~1\.clamwin
   [05/08/2008|07:47] C:\DOCUME~1\MICHEL~1\APPLIC~1\Adobe
   [22/07/2007|10:42] C:\DOCUME~1\MICHEL~1\APPLIC~1\AdobeUM
   [01/06/2007|12:28] C:\DOCUME~1\MICHEL~1\APPLIC~1\Apple Computer
   [31/10/2007|09:51] C:\DOCUME~1\MICHEL~1\APPLIC~1\DivX
   [27/05/2007|13:05] C:\DOCUME~1\MICHEL~1\APPLIC~1\Google
   [06/09/2005|07:10] C:\DOCUME~1\MICHEL~1\APPLIC~1\Identities
   [14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Macromedia
   [17/11/2007|23:56] C:\DOCUME~1\MICHEL~1\APPLIC~1\Microsoft
   [14/06/2006|12:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Mozilla
   [06/09/2005|09:21] C:\DOCUME~1\MICHEL~1\APPLIC~1\MSN Search Toolbar
   [29/01/2008|02:20] C:\DOCUME~1\MICHEL~1\APPLIC~1\Skype
   [06/09/2005|09:04] C:\DOCUME~1\MICHEL~1\APPLIC~1\Sonic
   [07/05/2008|21:24] C:\DOCUME~1\MICHEL~1\APPLIC~1\Spyware Terminator
   [06/09/2005|09:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Symantec
   [14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Talkback
   [30/05/2007|14:39] C:\DOCUME~1\MICHEL~1\APPLIC~1\Template
   [06/09/2005|08:09] C:\DOCUME~1\MICHEL~1\APPLIC~1	oshiba
   [18/07/2007|13:29] C:\DOCUME~1\MICHEL~1\APPLIC~1\U3
   [05/08/2008|09:09] C:\DOCUME~1\MICHEL~1\APPLIC~1\Yahoo!

   [07/05/2007|16:33] C:\DOCUME~1\musik\APPLIC~1\.clamwin
   [26/07/2007|10:46] C:\DOCUME~1\musik\APPLIC~1\Adobe
   [12/08/2007|22:34] C:\DOCUME~1\musik\APPLIC~1\AdobeUM
   [13/06/2006|18:34] C:\DOCUME~1\musik\APPLIC~1\Apple Computer
   [04/05/2008|18:31] C:\DOCUME~1\musik\APPLIC~1\DivX
   [14/06/2006|13:44] C:\DOCUME~1\musik\APPLIC~1\Google
   [06/09/2005|07:10] C:\DOCUME~1\musik\APPLIC~1\Identities
   [13/06/2006|18:32] C:\DOCUME~1\musik\APPLIC~1\Macromedia
   [13/06/2006|18:51] C:\DOCUME~1\musik\APPLIC~1\Microsoft
   [13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Mozilla
   [06/09/2005|09:21] C:\DOCUME~1\musik\APPLIC~1\MSN Search Toolbar
   [06/09/2005|09:04] C:\DOCUME~1\musik\APPLIC~1\Sonic
   [04/05/2008|18:25] C:\DOCUME~1\musik\APPLIC~1\Spyware Terminator
   [02/07/2006|15:06] C:\DOCUME~1\musik\APPLIC~1\Symantec
   [13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Talkback
   [06/09/2005|08:09] C:\DOCUME~1\musik\APPLIC~1	oshiba

   [24/02/2008|16:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
   [02/04/2006|22:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec


   [06/02/2008|00:25] C:\DOCUME~1\YEHOUD~1\APPLIC~1\acccore
   [14/05/2008|23:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Adobe
   [28/12/2006|16:23] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AdobeUM
   [30/01/2006|22:14] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Apple Computer
   [02/06/2008|21:31] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AVS4YOU
   [15/09/2008|01:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Azureus
   [30/01/2008|01:24] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Bitdefender
   [15/05/2008|00:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Creative
   [26/06/2007|23:39] C:\DOCUME~1\YEHOUD~1\APPLIC~1\DivX
   [28/12/2005|20:36] C:\DOCUME~1\YEHOUD~1\APPLIC~1\FotoWire
   [26/08/2008|23:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\GetRightToGo
   [04/01/2006|21:15] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Google
   [28/06/2007|11:12] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Help
   [06/09/2007|20:58] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Identities
   [09/01/2006|21:41] C:\DOCUME~1\YEHOUD~1\APPLIC~1\InterVideo
   [04/01/2007|00:44] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Leadertech
   [19/09/2006|22:49] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Macromedia
   [25/09/2008|23:28] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Malwarebytes
   [28/06/2007|11:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Media Player Classic
   [21/11/2007|02:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Microsoft
   [01/09/2008|22:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Mozilla
   [15/05/2008|00:33] C:\DOCUME~1\YEHOUD~1\APPLIC~1\muvee Technologies
   [28/05/2006|16:19] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Real
   [30/01/2007|22:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Reallusion
   [20/08/2006|17:35] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Registry Cleaner
   [02/10/2007|22:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\RemoteCall for Skype
   [05/04/2007|18:01] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Screenshot Sender
   [17/05/2007|18:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Shareaza
   [26/10/2008|01:39] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Skype
   [06/09/2005|09:04] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sonic
   [27/04/2008|16:16] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sun
   [27/02/2006|04:34] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Symantec
   [08/05/2006|20:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Talkback
   [27/05/2007|12:59] C:\DOCUME~1\YEHOUD~1\APPLIC~1\TaoUSign
   [16/04/2006|00:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Telefun
   [26/02/2006|20:42] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Template
   [02/01/2006|01:52] C:\DOCUME~1\YEHOUD~1\APPLIC~1	oshiba
   [02/08/2007|18:05] C:\DOCUME~1\YEHOUD~1\APPLIC~1\U3
   [29/01/2008|01:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\uTorrent
   [30/04/2008|23:37] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Vso
   [14/05/2008|23:47] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Yahoo!
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [17/07/2008 09:51][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [08/12/2005 16:01][--a------] C:\WINDOWS	asks\Rappel d'enregistrement 1.job
   [26/10/2008 01:03][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 12:00][-r-h-c---] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [18/12/2007|16:40] C:\Program Files\802.11 Wireless LAN
   [03/09/2008|21:42] C:\Program Files\Adobe
   [23/03/2006|22:27] C:\Program Files\Alwil Software
   [27/05/2008|23:24] C:\Program Files\Apple Software Update
   [08/12/2005|16:01] C:\Program Files\Atheros
   [06/09/2005|07:38] C:\Program Files\ATI Technologies
   [26/08/2008|19:08] C:\Program Files\AVS4YOU
   [07/03/2006|21:23] C:\Program Files\AxBx
   [11/04/2008|23:30] C:\Program Files\Azureus
   [30/01/2008|01:19] C:\Program Files\BitDefender
   [09/03/2008|23:37] C:\Program Files\BSPlayer
   [24/07/2007|01:03] C:\Program Files\CCleaner
   [26/08/2008|19:08] C:\Program Files\ClamWin
   [06/09/2005|06:52] C:\Program Files\ComPlus Applications
   [14/05/2008|23:33] C:\Program Files\Creative
   [05/06/2006|00:03] C:\Program Files\DIFX
   [03/09/2008|23:45] C:\Program Files\DivX
   [27/01/2007|21:01] C:\Program Files\eMule
   [26/08/2008|19:09] C:\Program Files\FBM Software
   [28/09/2008|00:42] C:\Program Files\Fichiers communs
   [28/12/2005|16:20] C:\Program Files\Free.fr
   [28/05/2007|10:09] C:\Program Files\Google
   [26/08/2008|19:09] C:\Program Files\InstallShield Installation Information
   [17/10/2008|00:14] C:\Program Files\Internet Explorer
   [27/05/2008|23:54] C:\Program Files\iPod
   [03/10/2007|02:20] C:\Program Files\Iteral
   [27/05/2008|23:55] C:\Program Files\iTunes
   [27/05/2008|23:05] C:\Program Files\iTunes Library Updater
   [28/09/2008|01:58] C:\Program Files\Java
   [29/01/2008|01:08] C:\Program Files\LimeWire
   [14/05/2008|23:18] C:\Program Files\Logitech
   [06/09/2005|07:52] C:\Program Files\ltmoh
   [25/09/2008|23:28] C:\Program Files\Malwarebytes' Anti-Malware
   [19/10/2008|17:38] C:\Program Files\Messenger
   [26/06/2007|20:18] C:\Program Files\Messenger Plus! Live
   [09/05/2007|23:41] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [06/09/2005|06:55] C:\Program Files\microsoft frontpage
   [24/01/2007|21:53] C:\Program Files\Microsoft Office
   [15/11/2007|01:05] C:\Program Files\Microsoft SQL Server Compact Edition
   [01/03/2007|22:41] C:\Program Files\Microsoft Windows OneCare Live
   [29/01/2008|02:20] C:\Program Files\Microsoft Works
   [19/10/2008|17:25] C:\Program Files\Movie Maker
   [26/10/2008|01:39] C:\Program Files\Mozilla Firefox
   [09/09/2007|11:47] C:\Program Files\Mozilla Firefox 2 Beta 1
   [14/01/2007|20:51] C:\Program Files\MSECache
   [08/12/2005|19:58] C:\Program Files\MSN
   [06/09/2005|06:51] C:\Program Files\MSN Gaming Zone
   [25/09/2008|23:15] C:\Program Files\MSN Messenger
   [16/10/2006|09:21] C:\Program Files\MSXML 4.0
   [19/10/2008|17:13] C:\Program Files\NetMeeting
   [03/04/2008|23:01] C:\Program Files\Network Associates
   [02/03/2008|01:15] C:\Program Files\Norton AntiVirus
   [19/10/2008|17:12] C:\Program Files\Outlook Express
   [19/10/2008|16:48] C:\Program Files\QuickTime
   [22/01/2007|23:04] C:\Program Files\Real
   [06/09/2005|07:45] C:\Program Files\Realtek Sound Manager
   [20/08/2006|17:33] C:\Program Files\Registry Cleaner Trial
   [02/10/2007|01:29] C:\Program Files\RSupport
   [06/09/2005|06:53] C:\Program Files\Services en ligne
   [17/05/2007|18:11] C:\Program Files\Shareaza
   [01/10/2007|01:06] C:\Program Files\Skype
   [02/04/2008|23:50] C:\Program Files\Smart Projects
   [16/04/2006|15:13] C:\Program Files\Sonic
   [25/09/2008|22:21] C:\Program Files\Spybot - Search & Destroy
   [28/09/2008|01:57] C:\Program Files\Sun
   [06/09/2005|07:47] C:\Program Files\Synaptics
   [08/06/2006|15:54] C:\Program Files\TOSHIBA
   [25/09/2008|22:37] C:\Program Files\Trend Micro
   [07/09/2005|13:31] C:\Program Files\Uninstall Information
   [28/06/2007|11:11] C:\Program Files\VDCodecPack3.7
   [29/01/2008|00:48] C:\Program Files\WashAndGo
   [28/05/2008|23:11] C:\Program Files\WinAVI MP4 Converter
   [27/02/2008|08:16] C:\Program Files\Windows Live
   [03/06/2008|22:50] C:\Program Files\Windows Live Safety Center
   [21/11/2007|23:51] C:\Program Files\Windows Live Toolbar
   [31/10/2007|08:38] C:\Program Files\Windows Media Connect 2
   [19/10/2008|17:12] C:\Program Files\Windows Media Player
   [29/01/2008|15:46] C:\Program Files\Windows NT
   [06/09/2005|06:53] C:\Program Files\WindowsUpdate
   [16/05/2008|00:09] C:\Program Files\WinRAR
   [06/09/2005|06:55] C:\Program Files\xerox
   [14/05/2008|23:43] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [04/01/2007|01:31] C:\Program Files\Fichiers communs\Adobe
   [26/08/2008|19:03] C:\Program Files\Fichiers communs\AOL
   [19/10/2008|16:46] C:\Program Files\Fichiers communs\Apple
   [26/08/2008|19:08] C:\Program Files\Fichiers communs\AVSMedia
   [30/01/2008|15:51] C:\Program Files\Fichiers communs\BitDefender
   [03/04/2008|23:01] C:\Program Files\Fichiers communs\Cisco Systems
   [28/12/2005|20:36] C:\Program Files\Fichiers communs\FotoWire
   [28/12/2005|18:32] C:\Program Files\Fichiers communs\InstallShield
   [29/01/2008|15:41] C:\Program Files\Fichiers communs\iS3
   [06/09/2005|07:07] C:\Program Files\Fichiers communs\Java
   [27/05/2008|22:29] C:\Program Files\Fichiers communs\Logitech
   [02/06/2008|21:26] C:\Program Files\Fichiers communs\Microsoft Shared
   [06/09/2005|06:52] C:\Program Files\Fichiers communs\MSSoap
   [03/04/2008|23:01] C:\Program Files\Fichiers communs\Network Associates
   [06/09/2005|08:47] C:\Program Files\Fichiers communs\ODBC
   [29/01/2007|00:25] C:\Program Files\Fichiers communs\Real
   [06/09/2005|06:52] C:\Program Files\Fichiers communs\Services
   [01/10/2007|01:05] C:\Program Files\Fichiers communs\Skype
   [06/09/2005|08:47] C:\Program Files\Fichiers communs\SpeechEngines
   [02/03/2008|01:15] C:\Program Files\Fichiers communs\Symantec Shared
   [19/10/2008|17:12] C:\Program Files\Fichiers communs\System
   [15/11/2007|00:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 54 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-10-26 01:42:52
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 123
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:154][D:11]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\Temp
   [F:32][D:0]-> C:\DOCUME~1\YEHOUD~1\Cookies
   [F:107][D:4]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 17/10/2008|16:53 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 26/10/2008| 1:47 - Option : [2]

   --------------------\  Fin du rapport a  1:47:53

geoffrey5 · Answer

Salut !!

maintenant fais ceci stp :

&#x25B6; Télécharger SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau. 

(c est le numéro 8 en bas de la page)

 
&#x25B6; Double cliquer sur SDFix.exe et choisir Install pour l'extraire dans un dossier dédié sur ton disque C:.
 
/!\ Démarre en mode sans échec : après le bip et avant le logo windows tapoter sur la touche F8 (ou F5): menu M.S.E.. 

&#x25B6; Choisir son compte, pas celui de l'Administrateur ou autre. 

Dérouler la liste des instructions ci-dessous :
 
• Ouvrir le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script. 
• Appuyer sur Y pour commencer le processus de nettoyage. 
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer. 
• Appuyer sur une touche pour redémarrer le PC. 
• Le système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers. 
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished. 
• Appuyer sur une touche pour finir l'exécution du script et charger les icônes du Bureau. 
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt. 
• Enfin, copier/coller le contenu du fichier Report.txt dans la prochaine réponse sur le forum

Navigation impossible sur Internet :Spyware??

24 réponses

Votre réponse

Discussions similaires

Newsletters