Toujours des fenêtres de pubs :@

fanny -  
Bonjour,

Comment virer les fenêtres de pub qui se ramène toujours sur mon pc svp ? :@ ça m'en met partout depuis 10 minutes alors que j'avais rien avant ;-(

thanks

27 réponses

Résumé de la discussion

Un problème de fenêtres de pub récurrentes et une possible infection par malware surviennent après une activité douteuse, déclenchant des échanges sur les méthodes de nettoyage et de sécurisation du PC. Des solutions promeuvent l'utilisation d'outils comme HijackThis pour nettoyer, la désactivation puis restauration du système, la création de points de restauration et des scans avec Malwarebytes, suivis d'un remplacement d'antivirus. D'autres réponses détaillent des rapports techniques et des suivis de suppression, notamment des éléments détectés dans les dossiers Application Data et Run, et la recommandation de supprimer Lopxp et Lop S&D. En cas de doute, un nouveau rapport HijackThis est suggéré après un nettoyage partiel et l'éventuelle réévaluation des infections détectées, afin de suivre l'évolution de la situation.

Bobot (l’IA à votre service)
  1. Destrio5 Modérateur
    Salut,

    - Télécharge HijackThis V 2.02 (HijackThis Installer) :
    http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

    - Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

    - Clique sur Install ensuite sur I Accept

    - Clique sur Do a scan system and save log file

    - Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.
    0
    1. fanny
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 14:23:40, on 26/09/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Wanadoo\EspaceWanadoo.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\Wanadoo\ComComp.exe
      C:\Program Files\Wanadoo\Watch.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66006
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [meet great active lies] C:\Documents and Settings\All Users\Application Data\soft chic meet great\Curb Exit.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [BITSUP] C:\DOCUME~1\_FANNY~1\APPLIC~1\HOPEME~1\film dumb.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
      O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
      O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {DB7BF79A-FC51-4B5A-92BC-A65731174380} (InstantAction Game Launcher) - http://ww38.instantaction.com/download/iaplayer.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} -
      O17 - HKLM\System\CCS\Services\Tcpip\..\{86E414E2-3289-43CB-AC80-967CD8D9FE9A}: NameServer = 80.10.246.1 81.253.149.2
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - Unknown owner - C:\Program Files\Securitoo\av_fw\fswsclds.exe (file missing)
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      0
      1. Destrio5 Modérateur
        C'est une infection Lop/Swizzor.

        ---> Télécharge Lop S&D sur ton Bureau
        https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
        ---> Double-clique dessus pour lancer l'installation
        ---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
        ---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
        ---> Patiente jusqu'à la fin du scan
        ---> Poste le rapport généré (C:\lopR.txt)
        0
        1. fanny
          # Rapport Lopxp fait le 26/09/2008 à 14:28:02
          # Exécuté dans : C:\Program Files\Lopxp
          # Version 3.10 - Maj du 11/04/2008

          Killing 'iexplore.exe'
          "C:\Program Files\Internet Explorer\iexplore.exe" (3116)
          "C:\Program Files\Internet Explorer\iexplore.exe" (3308)

          ========== Listing des dossiers Application Data

          +- C:\Documents and Settings\All Users\Application Data

          2007-08-26 à 11:39:58 - Microsoft
          2007-08-26 à 11:52:36 - CyberLink
          2007-08-26 à 17:59:50 - MSN6
          2007-08-26 à 18:27:46 - SBT
          2007-08-27 à 19:00:28 - Windows Live Toolbar
          2007-08-28 à 21:42:24 - Google
          2007-08-30 à 20:32:56 - DVD X Studios
          2007-09-14 à 19:06:54 - Messenger Plus!
          2007-09-26 à 18:40:56 - Adobe
          2007-10-14 à 23:53:16 - AOL Downloads
          2007-10-14 à 23:59:36 - Viewpoint
          2007-10-14 à 23:59:44 - AOL
          2007-10-14 à 23:59:46 - AOL OCP
          2008-05-19 à 12:38:10 - Skype
          2008-06-24 à 13:52:14 - Spybot - Search & Destroy
          2008-09-18 à 14:40:50 - SweetIM
          2008-09-18 à 18:29:04 - Windows Genuine Advantage
          2008-09-20 à 20:19:36 - WLInstaller
          2008-09-23 à 09:38:10 - Malwarebytes
          2008-09-23 à 21:11:50 - Downloaded Installations
          2008-09-26 à 11:36:10 - soft chic meet great

          +- C:\Documents and Settings\Alexandre\Application Data

          2007-08-26 à 11:48:54 - Identities
          2007-08-26 à 11:50:16 - InterTrust
          2007-08-26 à 11:50:16 - Adobe
          2007-08-26 à 11:53:08 - Sun
          2007-08-26 à 11:39:58 - Microsoft
          2007-08-28 à 10:35:10 - Macromedia
          2007-08-29 à 10:09:56 - Google
          2007-08-30 à 11:55:14 - Hewlett-Packard
          2007-09-01 à 10:15:52 - Mozilla
          2007-09-28 à 15:18:34 - WinRAR
          2008-06-04 à 17:33:08 - Help
          2008-08-18 à 15:01:40 - LimeWire
          2008-09-08 à 17:29:34 - vlc
          2008-09-10 à 15:32:58 - Viewpoint

          +- C:\Documents and Settings\Alexandre\Local Settings\Application Data

          2007-08-26 à 11:47:38 - Microsoft
          2007-08-26 à 11:52:58 - {7148F0A6-6813-11D6-A77B-00B0D0142010}
          2007-08-29 à 10:09:56 - Google
          2007-09-01 à 10:15:52 - Mozilla
          2007-11-07 à 12:42:56 - Identities
          2008-06-04 à 17:33:08 - Help

          ========== Listing du dossier Program Files

          +- C:\Program Files

          2007-08-26 à 11:40:22 - Fichiers communs
          2007-08-26 à 11:43:02 - Windows NT
          2007-08-26 à 11:43:02 - MSN
          2007-08-26 à 11:43:08 - MSN Gaming Zone
          2007-08-26 à 11:43:10 - Messenger
          2007-08-26 à 11:43:14 - Windows Media Player
          2007-08-26 à 11:43:14 - Services en ligne
          2007-08-26 à 11:43:14 - WindowsUpdate
          2007-08-26 à 11:43:40 - ComPlus Applications
          2007-08-26 à 11:43:58 - Internet Explorer
          2007-08-26 à 11:43:58 - Outlook Express
          2007-08-26 à 11:43:58 - NetMeeting
          2007-08-26 à 11:44:00 - Movie Maker
          2007-08-26 à 11:45:16 - microsoft frontpage
          2007-08-26 à 11:45:16 - xerox
          2007-08-26 à 11:48:52 - Uninstall Information
          2007-08-26 à 11:49:24 - InstallShield Installation Information
          2007-08-26 à 11:49:24 - AvRack
          2007-08-26 à 11:49:26 - Realtek Sound Manager
          2007-08-26 à 11:49:56 - Generic
          2007-08-26 à 11:50:16 - Adobe
          2007-08-26 à 11:51:42 - NewTech Infosystems
          2007-08-26 à 11:52:34 - CyberLink
          2007-08-26 à 11:52:58 - Java
          2007-08-26 à 17:05:10 - Wanadoo
          2007-08-26 à 17:05:36 - Wanadoo Messager
          2007-08-26 à 17:06:02 - Thomson
          2008-09-24 à 22:12:34 - Lavalys
          2008-05-04 à 20:46:48 - MSN Reaper
          2007-08-26 à 18:16:54 - Hewlett-Packard
          2008-05-11 à 18:40:20 - CCleaner
          2007-08-26 à 18:22:44 - Microsoft Office
          2008-05-11 à 18:40:26 - Yahoo!
          2007-08-26 à 18:27:46 - Snapshot Viewer
          2008-08-09 à 21:27:22 - Sun
          2007-08-27 à 19:00:00 - MSN Messenger
          2007-08-27 à 19:00:26 - Windows Live Toolbar
          2007-08-27 à 19:00:48 - WinRAR
          2008-06-24 à 13:50:46 - Blender Foundation
          2008-08-16 à 13:26:16 - WordBiz
          2007-08-27 à 19:03:22 - eMule
          2008-08-17 à 20:16:54 - LimeWire
          2007-08-27 à 19:40:36 - Google
          2007-08-29 à 19:54:10 - EA GAMES
          2008-06-24 à 13:52:14 - Spybot - Search & Destroy
          2008-09-08 à 14:24:08 - VideoLAN
          2008-09-18 à 15:16:08 - Trend Micro
          2008-09-18 à 15:41:48 - Lopxp
          2007-08-31 à 10:13:46 - Mozilla Firefox
          2008-09-23 à 09:38:08 - Malwarebytes' Anti-Malware
          2008-09-23 à 21:10:40 - Windows Media Connect 2
          2008-09-24 à 22:14:10 - Winamp
          2008-09-25 à 17:44:18 - Sony Ericsson
          2008-09-26 à 11:35:18 - Circle Developement
          2008-09-26 à 11:35:46 - hopemessbook
          2007-09-14 à 23:34:56 - QuickTime
          2007-09-25 à 20:46:40 - Alwil Software
          2007-10-14 à 23:59:34 - Viewpoint
          2007-11-09 à 20:19:00 - UxTheme Multipatcher Fr
          2008-02-01 à 14:57:40 - Stardock
          2008-02-25 à 19:22:00 - Messenger Plus! Live
          2008-02-25 à 19:22:00 - Windows Live
          2008-03-03 à 15:17:24 - XnView
          2008-03-03 à 23:28:30 - PhotoFiltre

          ========== Tâches planifiées

          Check Updates for Windows Live Toolbar.job: C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
          FRU Task #Hewlett-Packard#hp psc 1200 series#1188474788.job: C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe -I "#Hewlett-Packard#hp psc 1200 series#1188474788"

          ========== Clés registre

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "meet great active lies"="C:\Documents and Settings\All Users\Application Data\soft chic meet great\Curb Exit.exe"

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "BITSUP"="C:\DOCUME~1\_FANNY~1\APPLIC~1\HOPEME~1\film dumb.exe"

          ========== Bloqueur popups Internet Explorer

          Blocage des popups non géré par cette version du navigateur.

          ========== Suggestion ( /!\ Nécessite une interprétation.) ==========

          C:\Program Files\Circle Developement

          +- Registre:

          REGEDIT4

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "meet great active lies"=-

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "BITSUP"=-

          - Fin du rapport -
          0
          2. Destrio5 Modérateur
            Je n'ai pas demandé ce rapport.
            0
            2. Destrio5 Modérateur
              Suis ma procédure.
              0
              1. fanny
                ah merde j'ai ouvert le mauvais programme :s quand j'ouvre lopsd j'ai des "impossible de trouver..."
                0
                1. fanny
                  voilà c'est ça ?

                  --------------------\\ Lop S&D 4.2.4-4 XP/Vista

                  "C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
                  Option : [1] ( 26/09/2008|14:37 )

                  --------------------\\ Listing des dossiers dans APPLIC~1

                  [26/08/2007|13:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
                  [26/08/2007|13:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
                  [26/08/2007|13:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
                  [26/08/2007|13:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
                  [26/08/2007|13:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

                  [26/09/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                  [15/10/2007|01:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
                  [15/10/2007|01:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
                  [15/10/2007|01:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
                  [26/08/2007|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
                  [23/09/2008|23:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
                  [30/08/2007|22:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD X Studios
                  [28/08/2007|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
                  [23/09/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
                  [14/09/2007|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
                  [26/08/2007|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                  [26/08/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
                  [26/08/2007|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
                  [19/05/2008|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
                  [26/09/2008|13:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great
                  [24/06/2008|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
                  [18/09/2008|16:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
                  [15/10/2007|01:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
                  [18/09/2008|20:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
                  [27/08/2007|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
                  [20/09/2008|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

                  [26/08/2007|13:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

                  [26/08/2007|13:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

                  [26/08/2007|13:50] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Adobe
                  [29/08/2007|12:09] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Google
                  [04/06/2008|19:33] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Help
                  [30/08/2007|13:55] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Hewlett-Packard
                  [26/08/2007|13:48] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Identities
                  [26/08/2007|13:50] C:\DOCUME~1\ALEXAN~1\APPLIC~1\InterTrust
                  [18/08/2008|17:01] C:\DOCUME~1\ALEXAN~1\APPLIC~1\LimeWire
                  [28/08/2007|12:35] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Macromedia
                  [26/08/2007|13:39] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Microsoft
                  [01/09/2007|12:15] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Mozilla
                  [26/08/2007|13:53] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Sun
                  [10/09/2008|17:32] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Viewpoint
                  [08/09/2008|19:29] C:\DOCUME~1\ALEXAN~1\APPLIC~1\vlc
                  [28/09/2007|17:18] C:\DOCUME~1\ALEXAN~1\APPLIC~1\WinRAR

                  --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                  [26/09/2008 13:55][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1188474788.job
                  [26/09/2008 14:25][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
                  [26/09/2008 13:32][--ah-----] C:\WINDOWS\tasks\SA.DAT
                  [28/08/2001 20:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                  --------------------\\ Listing des dossiers dans C:\Program Files

                  [26/08/2007|13:50] C:\Program Files\Adobe
                  [25/09/2007|22:46] C:\Program Files\Alwil Software
                  [26/08/2007|13:49] C:\Program Files\AvRack
                  [24/06/2008|15:50] C:\Program Files\Blender Foundation
                  [11/05/2008|20:40] C:\Program Files\CCleaner
                  [26/09/2008|13:35] C:\Program Files\Circle Developement
                  [26/08/2007|13:43] C:\Program Files\ComPlus Applications
                  [26/08/2007|13:52] C:\Program Files\CyberLink
                  [29/08/2007|21:54] C:\Program Files\EA GAMES
                  [27/08/2007|21:03] C:\Program Files\eMule
                  [26/08/2007|13:40] C:\Program Files\Fichiers communs
                  [26/08/2007|13:49] C:\Program Files\Generic
                  [27/08/2007|21:40] C:\Program Files\Google
                  [26/08/2007|20:16] C:\Program Files\Hewlett-Packard
                  [26/09/2008|13:35] C:\Program Files\hopemessbook
                  [26/08/2007|13:49] C:\Program Files\InstallShield Installation Information
                  [26/08/2007|13:43] C:\Program Files\Internet Explorer
                  [26/08/2007|13:52] C:\Program Files\Java
                  [25/09/2008|00:12] C:\Program Files\Lavalys
                  [17/08/2008|22:16] C:\Program Files\LimeWire
                  [18/09/2008|17:41] C:\Program Files\Lopxp
                  [23/09/2008|11:38] C:\Program Files\Malwarebytes' Anti-Malware
                  [26/08/2007|13:43] C:\Program Files\Messenger
                  [25/02/2008|21:22] C:\Program Files\Messenger Plus! Live
                  [26/08/2007|13:45] C:\Program Files\microsoft frontpage
                  [26/08/2007|20:22] C:\Program Files\Microsoft Office
                  [26/08/2007|13:44] C:\Program Files\Movie Maker
                  [31/08/2007|12:13] C:\Program Files\Mozilla Firefox
                  [26/08/2007|13:43] C:\Program Files\MSN
                  [26/08/2007|13:43] C:\Program Files\MSN Gaming Zone
                  [27/08/2007|21:00] C:\Program Files\MSN Messenger
                  [04/05/2008|22:46] C:\Program Files\MSN Reaper
                  [26/08/2007|13:43] C:\Program Files\NetMeeting
                  [26/08/2007|13:51] C:\Program Files\NewTech Infosystems
                  [26/08/2007|13:43] C:\Program Files\Outlook Express
                  [04/03/2008|01:28] C:\Program Files\PhotoFiltre
                  [15/09/2007|01:34] C:\Program Files\QuickTime
                  [26/08/2007|13:49] C:\Program Files\Realtek Sound Manager
                  [26/08/2007|13:43] C:\Program Files\Services en ligne
                  [26/08/2007|20:27] C:\Program Files\Snapshot Viewer
                  [25/09/2008|19:44] C:\Program Files\Sony Ericsson
                  [24/06/2008|15:52] C:\Program Files\Spybot - Search & Destroy
                  [01/02/2008|16:57] C:\Program Files\Stardock
                  [09/08/2008|23:27] C:\Program Files\Sun
                  [26/08/2007|19:06] C:\Program Files\Thomson
                  [18/09/2008|17:16] C:\Program Files\Trend Micro
                  [26/08/2007|13:48] C:\Program Files\Uninstall Information
                  [09/11/2007|22:19] C:\Program Files\UxTheme Multipatcher Fr
                  [08/09/2008|16:24] C:\Program Files\VideoLAN
                  [15/10/2007|01:59] C:\Program Files\Viewpoint
                  [26/08/2007|19:05] C:\Program Files\Wanadoo
                  [26/08/2007|19:05] C:\Program Files\Wanadoo Messager
                  [25/09/2008|00:14] C:\Program Files\Winamp
                  [25/02/2008|21:22] C:\Program Files\Windows Live
                  [27/08/2007|21:00] C:\Program Files\Windows Live Toolbar
                  [23/09/2008|23:10] C:\Program Files\Windows Media Connect 2
                  [26/08/2007|13:43] C:\Program Files\Windows Media Player
                  [26/08/2007|13:43] C:\Program Files\Windows NT
                  [26/08/2007|13:43] C:\Program Files\WindowsUpdate
                  [27/08/2007|21:00] C:\Program Files\WinRAR
                  [16/08/2008|15:26] C:\Program Files\WordBiz
                  [26/08/2007|13:45] C:\Program Files\xerox
                  [03/03/2008|17:17] C:\Program Files\XnView
                  [11/05/2008|20:40] C:\Program Files\Yahoo!

                  --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                  [26/08/2007|13:50] C:\Program Files\Fichiers communs\Adobe
                  [26/08/2007|20:24] C:\Program Files\Fichiers communs\Designer
                  [26/08/2007|20:17] C:\Program Files\Fichiers communs\Hewlett-Packard
                  [26/08/2007|13:49] C:\Program Files\Fichiers communs\InstallShield
                  [26/08/2007|13:52] C:\Program Files\Fichiers communs\Java
                  [26/08/2007|13:40] C:\Program Files\Fichiers communs\Microsoft Shared
                  [26/08/2007|13:44] C:\Program Files\Fichiers communs\MSSoap
                  [26/08/2007|13:40] C:\Program Files\Fichiers communs\ODBC
                  [26/08/2007|13:44] C:\Program Files\Fichiers communs\Services
                  [26/08/2007|13:40] C:\Program Files\Fichiers communs\SpeechEngines
                  [26/08/2007|13:43] C:\Program Files\Fichiers communs\System
                  [20/09/2008|22:19] C:\Program Files\Fichiers communs\WindowsLiveInstaller

                  --------------------\\ Process

                  ( 29 Processes )

                  ... OK !

                  --------------------\\ Recherche avec S_Lop

                  C:\DOCUME~1\_FANNY~1\LOCALS~1\Temp\bis4.exe

                  --------------------\\ Recherche de Fichiers / Dossiers Lop

                  C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook
                  C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook\film dumb.exe
                  C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook\wtwpriyi.exe
                  C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook\Software bone dupe funk.exe
                  C:\Program Files\hopemessbook
                  C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great
                  C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\Curb Exit.exe
                  C:\Program Files\Circle Developement
                  C:\Program Files\Circle Developement\Uninstall.exe
                  C:\DOCUME~1\_FANNY~1\Cookies\• fanny •@32vegas[1].txt
                  C:\DOCUME~1\_FANNY~1\Cookies\• fanny •@banner.32vegas[2].txt

                  --------------------\\ Verification du Registre

                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "meet great active lies"="C:\\Documents and Settings\\All Users\\Application Data\\soft chic meet great\\Curb Exit.exe"

                  --------------------\\ Verification du fichier Hosts

                  Fichier Hosts MODIFIE

                  127.0.0.1 bin.errorprotector.com ## added by CiD
                  127.0.0.1 br.errorsafe.com ## added by CiD
                  127.0.0.1 br.winantivirus.com ## added by CiD
                  127.0.0.1 br.winfixer.com ## added by CiD
                  127.0.0.1 cdn.drivecleaner.com ## added by CiD
                  127.0.0.1 cdn.errorsafe.com ## added by CiD
                  127.0.0.1 cdn.winsoftware.com ## added by CiD
                  127.0.0.1 de.errorsafe.com ## added by CiD
                  127.0.0.1 de.winantivirus.com ## added by CiD
                  127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
                  127.0.0.1 download.cdn.errorsafe.com ## added by CiD
                  127.0.0.1 download.cdn.winsoftware.com ## added by CiD
                  127.0.0.1 download.errorsafe.com ## added by CiD
                  127.0.0.1 download.systemdoctor.com ## added by CiD
                  127.0.0.1 download.winantispyware.com ## added by CiD
                  127.0.0.1 download.windrivecleaner.com ## added by CiD
                  127.0.0.1 download.winfixer.com ## added by CiD
                  127.0.0.1 drivecleaner.com ## added by CiD
                  127.0.0.1 dynamique.drivecleaner.com ## added by CiD
                  127.0.0.1 errorprotector.com ## added by CiD
                  127.0.0.1 errorsafe.com ## added by CiD
                  127.0.0.1 es.winantivirus.com ## added by CiD
                  127.0.0.1 fr.winantivirus.com ## added by CiD
                  127.0.0.1 fr.winfixer.com ## added by CiD
                  127.0.0.1 go.drivecleaner.com ## added by CiD
                  127.0.0.1 go.errorsafe.com ## added by CiD
                  127.0.0.1 go.winantispyware.com ## added by CiD
                  127.0.0.1 go.winantivirus.com ## added by CiD
                  127.0.0.1 hk.winantivirus.com ## added by CiD
                  127.0.0.1 instlog.errorsafe.com ## added by CiD
                  127.0.0.1 instlog.winantivirus.com ## added by CiD
                  127.0.0.1 instlog.winfixer.com ## added by CiD
                  127.0.0.1 jsp.drivecleaner.com ## added by CiD
                  127.0.0.1 kb.errorsafe.com ## added by CiD
                  127.0.0.1 kb.winantivirus.com ## added by CiD
                  127.0.0.1 nl.errorsafe.com ## added by CiD
                  127.0.0.1 se.errorsafe.com ## added by CiD
                  127.0.0.1 secure.drivecleaner.com ## added by CiD
                  127.0.0.1 secure.errorsafe.com ## added by CiD
                  127.0.0.1 secure.winantispam.com ## added by CiD
                  127.0.0.1 secure.winantispy.com ## added by CiD
                  127.0.0.1 secure.winantivirus.com ## added by CiD
                  127.0.0.1 support.winantivirus.com ## added by CiD
                  127.0.0.1 trial.updates.winsoftware.com ## added by CiD
                  127.0.0.1 ulog.winantivirus.com ## added by CiD
                  127.0.0.1 utils.errorsafe.com ## added by CiD
                  127.0.0.1 utils.winantivirus.com ## added by CiD
                  127.0.0.1 utils.winfixer.com ## added by CiD
                  127.0.0.1 winantispyware.com ## added by CiD
                  127.0.0.1 winantivirus.com ## added by CiD
                  127.0.0.1 winfixer.com ## added by CiD
                  127.0.0.1 winfixer2006.com ## added by CiD
                  127.0.0.1 winsoftware.com ## added by CiD
                  127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
                  127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
                  127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
                  127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
                  127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
                  127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
                  127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
                  127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
                  127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
                  127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

                  -> 8694 [ 70 ## added by CiD ]

                  --------------------\\ Recherche de fichiers avec Catchme

                  catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2008-09-26 14:39:43
                  Windows 5.1.2600 Service Pack 3 FAT NTAPI
                  scanning hidden processes ...
                  scanning hidden files ...
                  scan completed successfully
                  hidden processes: 0
                  hidden files: 0

                  --------------------\\ Recherche d'autres infections

                  Aucune autre infection trouvée !

                  [F:12][D:5]-> C:\DOCUME~1\_FANNY~1\LOCALS~1\Temp
                  [F:10][D:0]-> C:\DOCUME~1\_FANNY~1\Cookies
                  [F:222][D:4]-> C:\DOCUME~1\_FANNY~1\LOCALS~1\TEMPOR~1\content.IE5
                  [F:8][D:0]-> C:\Recycled

                  1 - "C:\Lop SD\LopR_1.txt" - 26/09/2008|14:40 - Option : [1]

                  --------------------\\ Fin du rapport a 14:40:39
                  0
                  3. Destrio5 Modérateur
                    Je n'avais pas vu le rapport.

                    ---> Relance Lop S&D
                    ---> Choisis cette fois-ci l'option 2 (Suppression)
                    ---> Ne ferme pas la fenêtre lors de la suppression !
                    ---> Poste le rapport généré (C:\lopR.txt)
                    0
                    1. fanny
                      ouki, voilou..

                      --------------------\\ Lop S&D 4.2.4-4 XP/Vista

                      "C:\Lop SD" ( MAJ : 19-09-2008|22:20 )
                      Option : [2] ( 26/09/2008|14:47 )

                      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                      Supprime! - C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook\film dumb.exe
                      Supprime! - C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook\wtwpriyi.exe
                      Supprime! - C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook\Software bone dupe funk.exe
                      Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\Curb Exit.exe
                      Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
                      Supprime! - C:\DOCUME~1\_FANNY~1\Cookies\• fanny •@32vegas[1].txt
                      Supprime! - C:\DOCUME~1\_FANNY~1\Cookies\• fanny •@banner.32vegas[2].txt
                      Supprime! - C:\DOCUME~1\_FANNY~1\LOCALS~1\Temp\bis4.exe
                      Supprime! - C:\DOCUME~1\_FANNY~1\APPLIC~1\hopemessbook
                      Supprime! - C:\Program Files\hopemessbook
                      Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great
                      Supprime! - C:\Program Files\Circle Developement
                      -
                      [ Fichier Hosts ] .. Restaure!

                      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                      Supprime! - C:\Program Files\Viewpoint
                      Supprime! - C:\DOCUME~1\_FANNY~1\APPLIC~1\Viewpoint
                      Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

                      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                      --------------------\\ Listing des dossiers dans APPLIC~1

                      [26/08/2007|13:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
                      [26/08/2007|13:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
                      [26/08/2007|13:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
                      [26/08/2007|13:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
                      [26/08/2007|13:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

                      [26/09/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                      [15/10/2007|01:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
                      [15/10/2007|01:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL Downloads
                      [15/10/2007|01:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
                      [26/08/2007|13:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
                      [23/09/2008|23:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
                      [30/08/2007|22:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD X Studios
                      [28/08/2007|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
                      [23/09/2008|11:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
                      [14/09/2007|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
                      [26/08/2007|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                      [26/08/2007|19:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
                      [26/08/2007|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBT
                      [19/05/2008|14:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
                      [24/06/2008|15:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
                      [18/09/2008|16:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
                      [18/09/2008|20:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
                      [27/08/2007|21:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
                      [20/09/2008|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

                      [26/08/2007|13:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

                      [26/08/2007|13:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

                      [26/08/2007|13:50] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Adobe
                      [29/08/2007|12:09] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Google
                      [04/06/2008|19:33] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Help
                      [30/08/2007|13:55] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Hewlett-Packard
                      [26/08/2007|13:48] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Identities
                      [26/08/2007|13:50] C:\DOCUME~1\ALEXAN~1\APPLIC~1\InterTrust
                      [18/08/2008|17:01] C:\DOCUME~1\ALEXAN~1\APPLIC~1\LimeWire
                      [28/08/2007|12:35] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Macromedia
                      [26/08/2007|13:39] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Microsoft
                      [01/09/2007|12:15] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Mozilla
                      [26/08/2007|13:53] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Sun
                      [10/09/2008|17:32] C:\DOCUME~1\ALEXAN~1\APPLIC~1\Viewpoint
                      [08/09/2008|19:29] C:\DOCUME~1\ALEXAN~1\APPLIC~1\vlc
                      [28/09/2007|17:18] C:\DOCUME~1\ALEXAN~1\APPLIC~1\WinRAR

                      --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                      [26/09/2008 13:55][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1188474788.job
                      [26/09/2008 14:25][--a------] C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
                      [26/09/2008 13:32][--ah-----] C:\WINDOWS\tasks\SA.DAT
                      [28/08/2001 20:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                      --------------------\\ Listing des dossiers dans C:\Program Files

                      [26/08/2007|13:50] C:\Program Files\Adobe
                      [25/09/2007|22:46] C:\Program Files\Alwil Software
                      [26/08/2007|13:49] C:\Program Files\AvRack
                      [24/06/2008|15:50] C:\Program Files\Blender Foundation
                      [11/05/2008|20:40] C:\Program Files\CCleaner
                      [26/08/2007|13:43] C:\Program Files\ComPlus Applications
                      [26/08/2007|13:52] C:\Program Files\CyberLink
                      [29/08/2007|21:54] C:\Program Files\EA GAMES
                      [27/08/2007|21:03] C:\Program Files\eMule
                      [26/08/2007|13:40] C:\Program Files\Fichiers communs
                      [26/08/2007|13:49] C:\Program Files\Generic
                      [27/08/2007|21:40] C:\Program Files\Google
                      [26/08/2007|20:16] C:\Program Files\Hewlett-Packard
                      [26/08/2007|13:49] C:\Program Files\InstallShield Installation Information
                      [26/08/2007|13:43] C:\Program Files\Internet Explorer
                      [26/08/2007|13:52] C:\Program Files\Java
                      [25/09/2008|00:12] C:\Program Files\Lavalys
                      [17/08/2008|22:16] C:\Program Files\LimeWire
                      [18/09/2008|17:41] C:\Program Files\Lopxp
                      [23/09/2008|11:38] C:\Program Files\Malwarebytes' Anti-Malware
                      [26/08/2007|13:43] C:\Program Files\Messenger
                      [25/02/2008|21:22] C:\Program Files\Messenger Plus! Live
                      [26/08/2007|13:45] C:\Program Files\microsoft frontpage
                      [26/08/2007|20:22] C:\Program Files\Microsoft Office
                      [26/08/2007|13:44] C:\Program Files\Movie Maker
                      [31/08/2007|12:13] C:\Program Files\Mozilla Firefox
                      [26/08/2007|13:43] C:\Program Files\MSN
                      [26/08/2007|13:43] C:\Program Files\MSN Gaming Zone
                      [27/08/2007|21:00] C:\Program Files\MSN Messenger
                      [04/05/2008|22:46] C:\Program Files\MSN Reaper
                      [26/08/2007|13:43] C:\Program Files\NetMeeting
                      [26/08/2007|13:51] C:\Program Files\NewTech Infosystems
                      [26/08/2007|13:43] C:\Program Files\Outlook Express
                      [04/03/2008|01:28] C:\Program Files\PhotoFiltre
                      [15/09/2007|01:34] C:\Program Files\QuickTime
                      [26/08/2007|13:49] C:\Program Files\Realtek Sound Manager
                      [26/08/2007|13:43] C:\Program Files\Services en ligne
                      [26/08/2007|20:27] C:\Program Files\Snapshot Viewer
                      [25/09/2008|19:44] C:\Program Files\Sony Ericsson
                      [24/06/2008|15:52] C:\Program Files\Spybot - Search & Destroy
                      [01/02/2008|16:57] C:\Program Files\Stardock
                      [09/08/2008|23:27] C:\Program Files\Sun
                      [26/08/2007|19:06] C:\Program Files\Thomson
                      [18/09/2008|17:16] C:\Program Files\Trend Micro
                      [26/08/2007|13:48] C:\Program Files\Uninstall Information
                      [09/11/2007|22:19] C:\Program Files\UxTheme Multipatcher Fr
                      [08/09/2008|16:24] C:\Program Files\VideoLAN
                      [26/08/2007|19:05] C:\Program Files\Wanadoo
                      [26/08/2007|19:05] C:\Program Files\Wanadoo Messager
                      [25/09/2008|00:14] C:\Program Files\Winamp
                      [25/02/2008|21:22] C:\Program Files\Windows Live
                      [27/08/2007|21:00] C:\Program Files\Windows Live Toolbar
                      [23/09/2008|23:10] C:\Program Files\Windows Media Connect 2
                      [26/08/2007|13:43] C:\Program Files\Windows Media Player
                      [26/08/2007|13:43] C:\Program Files\Windows NT
                      [26/08/2007|13:43] C:\Program Files\WindowsUpdate
                      [27/08/2007|21:00] C:\Program Files\WinRAR
                      [16/08/2008|15:26] C:\Program Files\WordBiz
                      [26/08/2007|13:45] C:\Program Files\xerox
                      [03/03/2008|17:17] C:\Program Files\XnView
                      [11/05/2008|20:40] C:\Program Files\Yahoo!

                      --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                      [26/08/2007|13:50] C:\Program Files\Fichiers communs\Adobe
                      [26/08/2007|20:24] C:\Program Files\Fichiers communs\Designer
                      [26/08/2007|20:17] C:\Program Files\Fichiers communs\Hewlett-Packard
                      [26/08/2007|13:49] C:\Program Files\Fichiers communs\InstallShield
                      [26/08/2007|13:52] C:\Program Files\Fichiers communs\Java
                      [26/08/2007|13:40] C:\Program Files\Fichiers communs\Microsoft Shared
                      [26/08/2007|13:44] C:\Program Files\Fichiers communs\MSSoap
                      [26/08/2007|13:40] C:\Program Files\Fichiers communs\ODBC
                      [26/08/2007|13:44] C:\Program Files\Fichiers communs\Services
                      [26/08/2007|13:40] C:\Program Files\Fichiers communs\SpeechEngines
                      [26/08/2007|13:43] C:\Program Files\Fichiers communs\System
                      [20/09/2008|22:19] C:\Program Files\Fichiers communs\WindowsLiveInstaller

                      --------------------\\ Process

                      ( 29 Processes )

                      ... OK !

                      --------------------\\ Recherche avec S_Lop

                      Aucun fichier / dossier Lop trouvé !

                      --------------------\\ Recherche de Fichiers / Dossiers Lop

                      Aucun fichier / dossier Lop trouvé !

                      --------------------\\ Verification du Registre

                      ..... OK !

                      --------------------\\ Verification du fichier Hosts

                      Fichier Hosts PROPRE

                      --------------------\\ Recherche de fichiers avec Catchme

                      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2008-09-26 14:49:09
                      Windows 5.1.2600 Service Pack 3 FAT NTAPI
                      scanning hidden processes ...
                      scanning hidden files ...
                      scan completed successfully
                      hidden processes: 0
                      hidden files: 0

                      --------------------\\ Recherche d'autres infections

                      Aucune autre infection trouvée !

                      [F:12][D:5]-> C:\DOCUME~1\_FANNY~1\LOCALS~1\Temp
                      [F:8][D:0]-> C:\DOCUME~1\_FANNY~1\Cookies
                      [F:222][D:4]-> C:\DOCUME~1\_FANNY~1\LOCALS~1\TEMPOR~1\content.IE5
                      [F:8][D:0]-> C:\Recycled

                      1 - "C:\Lop SD\LopR_1.txt" - 26/09/2008|14:40 - Option : [1]
                      2 - "C:\Lop SD\LopR_2.txt" - 26/09/2008|14:49 - Option : [2]

                      --------------------\\ Fin du rapport a 14:49:59
                      0
                      1. Destrio5 Modérateur
                        ---> Tu peux supprimer Lopxp et Lop S&D

                        ---> Poste un nouveau rapport HijackThis
                        0
                        1. fanny
                          ah.. ? il faut les supprimer lopxp et lop s&d ? ..

                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 14:55:08, on 26/09/2008
                          Platform: Windows XP SP3 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\System32\Ati2evxx.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\Program Files\Wanadoo\EspaceWanadoo.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\Program Files\Wanadoo\ComComp.exe
                          C:\Program Files\Wanadoo\Watch.exe
                          C:\Program Files\Mozilla Firefox\firefox.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66006
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                          O4 - HKCU\..\Run: [BITSUP] C:\DOCUME~1\_FANNY~1\APPLIC~1\HOPEME~1\film dumb.exe
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
                          O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
                          O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                          O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
                          O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
                          O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
                          O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                          O16 - DPF: {DB7BF79A-FC51-4B5A-92BC-A65731174380} (InstantAction Game Launcher) - http://ww38.instantaction.com/download/iaplayer.cab
                          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                          O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} -
                          O17 - HKLM\System\CCS\Services\Tcpip\..\{86E414E2-3289-43CB-AC80-967CD8D9FE9A}: NameServer = 80.10.246.1 81.253.149.2
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - Unknown owner - C:\Program Files\Securitoo\av_fw\fswsclds.exe (file missing)
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
                          0
                          1. Destrio5 Modérateur
                            "ah.. ? il faut les supprimer lopxp et lop s&d ? .."
                            ---> On n'en a plus l'utilité.

                            ---> Mets à jour Internet Explorer :
                            http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr

                            ---> Télécharge CCleaner (N'installe pas la Yahoo Toolbar) :
                            https://www.ccleaner.com/ccleaner/download

                            ---> Lance-le. Va dans "Options" puis "Avancé", tu décoches la case "Effacer uniquement les fichiers etc...". Tu vas dans "Nettoyeur", tu fais "Analyse". Une fois terminé, tu lances le nettoyage. Puis tu vas dans "Registre", tu fais "Chercher des erreurs". Une fois terminé, tu répares toutes les erreurs sans sauvegarder la base de registre.

                            ---> Poste un nouveau rapport HijackThis
                            0
                            1. fanny
                              Bah ouais mais si j'le laisse dans mon pc ça fait rien j'veux dire :o internet explorer j'y arrive pas ça marche jamais, donc comme j'men sert pas j'cherche plu à l'faire ˆˆ

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 15:03:20, on 26/09/2008
                              Platform: Windows XP SP3 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\System32\Ati2evxx.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              C:\Program Files\Wanadoo\EspaceWanadoo.exe
                              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              C:\Program Files\Wanadoo\ComComp.exe
                              C:\Program Files\Wanadoo\Watch.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66006
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
                              O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
                              O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                              O14 - IERESET.INF: START_PAGE_URL=http://www.01net.com/telecharger/
                              O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
                              O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                              O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
                              O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                              O16 - DPF: {DB7BF79A-FC51-4B5A-92BC-A65731174380} (InstantAction Game Launcher) - http://ww38.instantaction.com/download/iaplayer.cab
                              O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                              O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} -
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{86E414E2-3289-43CB-AC80-967CD8D9FE9A}: NameServer = 80.10.246.1 81.253.149.2
                              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
                              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - Unknown owner - C:\Program Files\Securitoo\av_fw\fswsclds.exe (file missing)
                              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
                              0
                              1. Destrio5 Modérateur
                                Ok, pour finir :

                                ---> Désinstalle HijackThis

                                ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
                                http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

                                ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
                                https://www.vulgarisation-informatique.com/creer-point-restauration.php

                                ---> Je te conseille également de remplacer Avast par Antivir

                                ---> Fais un scan rapide avec MBAM, supprime tout ce qu'il trouve et poste le rapport :
                                http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm
                                0
                                1. fanny
                                  En fait, le problème c'est que j'ai fais n'importe quoi dans mon pc il y a quelques jours et quand je vais sur "restaurer le système" j'ai le droit à une page.. blanche.. avec rien dessus :s
                                  0
                                  1. fanny
                                    mais je peux faire le scan quand même sans aucun risque ou vaut mieux pas ?
                                    0
                                    • 1
                                    • 2

                                    Discussions similaires

                                    Problème de clavier, des fenêtre s'ouvrent !!
                                    Lyon691D

                                    5 réponses
                                    Clavier ouvre raccourcis
                                    angellee

                                    11 réponses
                                    Caler une adresse au niveau de la fenêtre d'une enveloppe
                                    ®omain

                                    15 réponses
                                    Mon pc ouvre des fenêtres et le clavier écrit
                                    Louise19

                                    3 réponses
                                    publicité intempestive
                                    alost

                                    5 réponses