Lenteur extreme d'internet explore

Bonjour,

Je viens de faire ce que tu m'as dit précédemment avec OTMoveIt3. Je n'ai pas eu de page promo antivirus qui s'est ouverte mais internet explorer me semble toujours lent.

Voici le rapport:
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
DllUnregisterServer procedure not found in c:\windows\system32\SpOrder.dll
c:\windows\system32\SpOrder.dll NOT unregistered.
c:\windows\system32\SpOrder.dll moved successfully.
c:\windows\system32\31E.tmp moved successfully.
DllUnregisterServer procedure not found in c:\windows\system32\FREGSHEX32.dll
c:\windows\system32\FREGSHEX32.dll NOT unregistered.
c:\windows\system32\FREGSHEX32.dll moved successfully.
C:\VundoFix Backups moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12182008_121036

J'attneds tes consignes pour la suite, s'il y a encore quelque chose à faire.
Merci d'avance
@+

Bonsoir,
je confirme, le virus st toujours là. Des fenetres de fausses pub pour antivirus continuent de s'ouvrir et internet est lent , trop lent!!!!!!
merci de ta réponse.
@+

Bonsoir,

En ouvrant internet explorer cette fois ci c'est virus remover 2008 qui s'est ouvert tout seul.
Voici le rapport de malwarebytes.

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1521
Windows 5.1.2600 Service Pack 3

19/12/2008 21:37:31
mbam-log-2008-12-19 (21-37-31).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 135502
Temps écoulé: 55 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

@+

Bonjour,

voici les rapports

Logfile of random's system information tool 1.05 (written by random/random)
Run by JEAN at 2008-12-20 16:00:16
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 44 GB (46%) free of 95 GB
Total RAM: 511 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:00:30, on 20/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
C:\Program Files\Norman\Npm\Bin\Zanda.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\hphmon04.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Norman\Npm\bin\ZLH.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Norman\nse\bin\NSESVC.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\JEAN.HERICHER\Bureau\RSIT.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Program Files\Trend Micro\HijackThis\JEAN.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Global Startup: e-Carte Bleue LCL.lnk = C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Messager Wanadoo - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} (KeybHunterWebInterface Class) - https://particuliers.secure.lcl.fr/v_1.0/img/akl/FormProtect.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096969103953
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/gameshell/online/fr/chainz_2/mjolauncher.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\FREGSHEX32.dll
O20 - Winlogon Notify: a4a5a673509 - C:\WINDOWS\System32\FREGSHEX32.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Program Files\Norman\nse\bin\NSESVC.EXE
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Bonsoir,

Internet a l'air plus rapide, mais toujours des fenetres antivirus qui s'ouvrent....
voici le rapport :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLS deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLS"|"" /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\a4a5a673509\\ deleted successfully.
========== FILES ==========
DllUnregisterServer procedure not found in C:\WINDOWS\System32\FREGSHEX32.dll
C:\WINDOWS\System32\FREGSHEX32.dll NOT unregistered.
C:\WINDOWS\System32\FREGSHEX32.dll moved successfully.
C:\WINDOWS\system32\4A.tmp moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\nvcbin.def.B2FDC244.TMP scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12212008_223011

Files moved on Reboot...
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\nvcbin.def.B2FDC244.TMP scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

merci @+

Bonsoir G!irly,

Internet est toujours bien plus rapide'ce qui est déjà très appréciable) mais toujours des fenetres pour antivirus qui s'ouvrent.
Voici le rapport LopR.txt :


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : JEAN ( Administrator )
BOOT : Normal boot
Antivirus : Norman Virus Control ver. 5.99 5.99 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:93 Go (Free:42 Go)
D:\ (Local Disk) - NTFS - Total:83 Go (Free:80 Go)
E:\ (Local Disk) - FAT32 - Total:9 Go (Free:5 Go)
G:\ (CD or DVD)
I:\ (USB)
J:\ (USB)
K:\ (USB)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 22/12/2008|17:25 )

--------------------\\ Listing des dossiers dans APPLIC~1

[28/02/2004|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[30/06/2008|20:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[28/02/2004|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[15/09/2006|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/12/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[05/10/2008|11:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[05/10/2008|11:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[16/04/2005|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[07/12/2008|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[13/12/2008|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[24/10/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[08/04/2004|22:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[15/08/2007|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[28/02/2004|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[03/03/2005|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panasonic
[17/08/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[27/02/2004|18:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[02/07/2008|09:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[17/12/2008|13:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/06/2008|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[30/06/2008|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[13/07/2008|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[27/08/2005|13:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[27/09/2005|16:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/07/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[28/02/2004|16:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[28/02/2004|16:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AdobeUM
[28/02/2004|15:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
[28/02/2004|16:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Cyberlink
[27/02/2004|19:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Help
[27/02/2004|18:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[28/02/2004|17:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[28/02/2004|20:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[28/02/2004|17:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[28/02/2004|16:52] C:\DOCUME~1\JEAN\APPLIC~1\Adobe
[28/02/2004|15:48] C:\DOCUME~1\JEAN\APPLIC~1\Ahead
[08/04/2004|22:00] C:\DOCUME~1\JEAN\APPLIC~1\Cyberlink
[08/04/2004|18:57] C:\DOCUME~1\JEAN\APPLIC~1\Help
[28/02/2004|17:59] C:\DOCUME~1\JEAN\APPLIC~1\Macromedia
[08/04/2004|22:00] C:\DOCUME~1\JEAN\APPLIC~1\Microsoft
[24/03/2004|15:01] C:\DOCUME~1\JEAN\APPLIC~1\MSN6
[08/04/2004|22:00] C:\DOCUME~1\JEAN\APPLIC~1\Real

[26/09/2005|16:01] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\ABBYY
[28/06/2008|22:56] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Adobe
[09/09/2004|18:06] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\AdobeUM
[07/10/2005|09:37] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Ahead
[25/03/2006|17:59] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\ArcSoft
[12/09/2007|15:29] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Big Fish Games
[24/09/2008|20:41] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Canon
[28/02/2004|16:26] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Cyberlink
[06/02/2006|11:01] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Dossier de téléchargement Share-to-Web
[06/01/2005|17:51] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Dossier de téléchargement Share-to-Web
[03/07/2005|08:52] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\eConf
[27/08/2005|13:54] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\EPSON
[16/07/2008|15:39] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\FUJIFILM
[24/09/2006|10:49] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Google
[10/12/2008|14:58] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Grisoft
[15/04/2004|09:07] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Help
[06/01/2005|17:51] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Hewlett-Packard
[28/06/2008|13:31] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Identities
[26/02/2008|16:05] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Image Zone Express
[02/07/2008|09:13] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\InstallShield
[22/02/2005|17:41] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\InterTrust
[07/12/2008|10:52] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\LimeWire
[28/02/2004|17:59] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Macromedia
[13/12/2008|17:43] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Malwarebytes
[10/12/2008|17:05] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Micro Application
[20/11/2008|17:47] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Microsoft
[09/07/2008|11:30] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\MSN6
[27/10/2007|18:45] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Printer Info Cache
[28/02/2004|17:58] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Real
[24/10/2008|20:50] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Samsung
[30/06/2008|19:23] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\ScanSoft
[02/07/2008|09:33] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Sony Corporation
[07/12/2008|13:47] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\SPORE Creature Creator
[14/10/2008|21:47] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Sun
[08/11/2006|15:52] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Teleca


[27/01/2008|16:32] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[22/04/2004|19:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

[18/12/2008|15:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[08/04/2004|21:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[30/08/2002 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
[22/12/2008 10:16][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[11/09/2006|13:41] C:\Program Files\Adobe
[28/02/2004|14:35] C:\Program Files\Ahead
[07/12/2008|12:23] C:\Program Files\Anuman Interactive
[08/04/2004|21:58] C:\Program Files\AOL 8.0a
[30/06/2008|19:20] C:\Program Files\ArcSoft
[27/02/2004|19:03] C:\Program Files\ATI Technologies
[01/07/2005|11:06] C:\Program Files\BoontyGames
[30/06/2008|19:19] C:\Program Files\Canon
[13/12/2008|20:08] C:\Program Files\CCleaner
[27/02/2004|19:11] C:\Program Files\C-Media 3D Audio
[28/02/2004|16:16] C:\Program Files\Common Files
[27/02/2004|18:28] C:\Program Files\ComPlus Applications
[28/02/2004|16:15] C:\Program Files\CyberLink
[27/09/2008|15:24] C:\Program Files\CyberQix
[29/06/2008|20:00] C:\Program Files\Diddl Screenmate
[11/08/2004|13:57] C:\Program Files\directx
[28/02/2004|14:33] C:\Program Files\DivX
[28/06/2008|22:55] C:\Program Files\e-Carte Bleue LCL
[15/09/2008|16:31] C:\Program Files\Electronic Arts
[04/11/2006|18:40] C:\Program Files\epson
[11/12/2008|19:16] C:\Program Files\Everest Poker
[29/02/2004|17:17] C:\Program Files\Excid.com Aps
[16/12/2008|17:20] C:\Program Files\Fichiers communs
[16/07/2008|15:30] C:\Program Files\FinePixViewer
[28/06/2008|13:21] C:\Program Files\Free.fr
[04/02/2007|18:21] C:\Program Files\Google
[10/12/2008|14:58] C:\Program Files\Grisoft
[24/11/2008|19:07] C:\Program Files\Hasbro Interactive
[26/11/2006|15:17] C:\Program Files\Heredis 7
[08/01/2006|14:56] C:\Program Files\Hewlett-Packard
[28/02/2004|14:16] C:\Program Files\HighMAT CD Writing Wizard
[28/02/2004|16:16] C:\Program Files\Home Cinema
[25/09/2006|16:31] C:\Program Files\HP
[12/08/2006|16:07] C:\Program Files\HP Photosmart 11
[08/04/2004|21:59] C:\Program Files\HP Photosmart 11(2)
[05/10/2008|12:02] C:\Program Files\IncrediMail
[10/12/2008|17:15] C:\Program Files\index
[07/12/2008|12:23] C:\Program Files\InstallShield Installation Information
[27/02/2004|18:45] C:\Program Files\Intel
[14/12/2008|00:29] C:\Program Files\Internet Explorer
[09/08/2008|20:51] C:\Program Files\Java
[08/02/2006|15:19] C:\Program Files\Jeux classiques
[27/10/2008|19:42] C:\Program Files\LimeWire
[19/12/2008|20:13] C:\Program Files\Malwarebytes' Anti-Malware
[28/02/2004|15:40] C:\Program Files\Medion Tools
[03/12/2004|16:50] C:\Program Files\Messager Wanadoo
[20/08/2008|19:39] C:\Program Files\Messenger
[03/02/2005|18:09] C:\Program Files\Messenger Plugin
[20/11/2008|17:47] C:\Program Files\Micro Application
[28/02/2004|14:52] C:\Program Files\Microsoft AutoRoute
[13/07/2008|23:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[28/02/2004|14:57] C:\Program Files\Microsoft Encarta
[27/02/2004|18:30] C:\Program Files\microsoft frontpage
[02/06/2004|15:47] C:\Program Files\Microsoft Games
[28/02/2004|14:51] C:\Program Files\Microsoft Money
[18/10/2004|19:46] C:\Program Files\Microsoft Office
[17/11/2004|17:21] C:\Program Files\Microsoft Picture It! 9
[18/10/2004|19:46] C:\Program Files\Microsoft Visual Studio
[02/07/2004|16:34] C:\Program Files\Microsoft Works
[28/02/2004|14:38] C:\Program Files\Microsoft Works Suite 2004
[20/08/2008|19:33] C:\Program Files\Movie Maker
[03/12/2008|18:07] C:\Program Files\MP3 Player Utilities 4.15
[09/07/2008|11:30] C:\Program Files\MSN
[27/02/2004|18:28] C:\Program Files\MSN Gaming Zone
[18/11/2006|18:52] C:\Program Files\MSXML 4.0
[28/02/2004|16:18] C:\Program Files\MUSICMATCH
[28/02/2004|15:01] C:\Program Files\muvee Technologies
[20/08/2008|19:29] C:\Program Files\NetMeeting
[22/12/2008|10:16] C:\Program Files\Norman
[28/02/2004|17:49] C:\Program Files\Nullsoft
[28/02/2004|15:25] C:\Program Files\OfficeUpdate11
[26/11/2007|14:38] C:\Program Files\Olivetti
[18/03/2007|16:46] C:\Program Files\orange
[20/08/2008|19:29] C:\Program Files\Outlook Express
[29/12/2005|14:56] C:\Program Files\Panasonic
[26/12/2004|23:16] C:\Program Files\PCFriendly
[01/12/2006|16:43] C:\Program Files\PIXELA
[21/02/2007|12:28] C:\Program Files\QuickTime
[28/02/2004|17:49] C:\Program Files\Real
[16/07/2008|15:28] C:\Program Files\REGSHAVE
[24/10/2008|20:46] C:\Program Files\Samsung
[30/06/2008|19:22] C:\Program Files\ScanSoft
[26/09/2005|16:25] C:\Program Files\ScanWizard 5
[31/03/2005|14:15] C:\Program Files\Securitoo
[17/01/2005|17:23] C:\Program Files\Services en ligne
[02/07/2008|09:24] C:\Program Files\Sony
[11/12/2008|18:50] C:\Program Files\Spybot - Search & Destroy
[20/11/2008|18:01] C:\Program Files\Tap'Touche Junior 2.0
[13/12/2008|20:53] C:\Program Files\Trend Micro
[28/02/2004|14:11] C:\Program Files\Uninstall Information
[27/02/2004|19:13] C:\Program Files\USB Wireless Keyboard Driver
[28/02/2004|17:49] C:\Program Files\Viewpoint
[19/09/2008|04:49] C:\Program Files\Wanadoo
[12/09/2006|19:04] C:\Program Files\Wanadoo Jeux
[27/01/2008|16:31] C:\Program Files\Wanadoo Messager
[28/02/2004|15:05] C:\Program Files\Winbond Electronics Corp
[27/02/2004|18:35] C:\Program Files\Windows Journal Viewer
[09/07/2008|13:22] C:\Program Files\Windows Live
[09/08/2008|21:40] C:\Program Files\Windows Media Connect 2
[20/08/2008|19:29] C:\Program Files\Windows Media Player
[20/08/2008|19:29] C:\Program Files\Windows NT
[01/07/2005|09:01] C:\Program Files\WindowsUpdate
[28/02/2004|16:16] C:\Program Files\X10 Hardware
[27/02/2004|18:30] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/02/2005|17:41] C:\Program Files\Fichiers communs\Adobe
[28/02/2004|14:34] C:\Program Files\Fichiers communs\Ahead
[03/04/2004|10:43] C:\Program Files\Fichiers communs\AOL
[08/04/2004|21:58] C:\Program Files\Fichiers communs\aolback
[26/03/2006|21:27] C:\Program Files\Fichiers communs\ArcSoft
[28/02/2004|15:05] C:\Program Files\Fichiers communs\Borland Shared
[18/10/2004|19:46] C:\Program Files\Fichiers communs\Designer
[27/10/2007|18:45] C:\Program Files\Fichiers communs\HP
[28/02/2004|15:01] C:\Program Files\Fichiers communs\InstallShield
[09/08/2008|20:43] C:\Program Files\Fichiers communs\Java
[16/04/2005|12:18] C:\Program Files\Fichiers communs\Macrovision Shared
[09/07/2008|13:22] C:\Program Files\Fichiers communs\Microsoft Shared
[27/02/2004|18:28] C:\Program Files\Fichiers communs\MSSoap
[28/02/2004|15:01] C:\Program Files\Fichiers communs\muvee Technologies
[27/02/2004|18:26] C:\Program Files\Fichiers communs\ODBC
[05/10/2007|14:44] C:\Program Files\Fichiers communs\Panasonic
[28/02/2004|17:55] C:\Program Files\Fichiers communs\Real
[30/06/2008|19:22] C:\Program Files\Fichiers communs\ScanSoft Shared
[27/02/2004|18:28] C:\Program Files\Fichiers communs\Services
[27/02/2004|18:26] C:\Program Files\Fichiers communs\SpeechEngines
[20/08/2008|19:29] C:\Program Files\Fichiers communs\System
[20/09/2007|18:19] C:\Program Files\Fichiers communs\Teleca Shared
[09/07/2008|13:21] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[12/02/2005|21:45] C:\Program Files\Fichiers communs\Wise Installation Wizard
[28/02/2004|17:55] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 59 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-22 17:27:37
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:6][D:4]-> C:\DOCUME~1\JEAN~1.HER\LOCALS~1\Temp
[F:33][D:0]-> C:\DOCUME~1\JEAN~1.HER\Cookies
[F:2579][D:5]-> C:\DOCUME~1\JEAN~1.HER\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 22/12/2008|17:29 - Option : [1]

--------------------\\ Fin du rapport a 17:29:18

Merci
Bonne soirée

Bonsoir, voici le rapport rooter :

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : JEAN ( Administrator )
BOOT : Normal boot

Antivirus : Norman Virus Control ver. 5.99 5.99 (Not Activated)


A:\ (USB)
C:\ (Local Disk) - NTFS - Total:93 Go (Free:42 Go)
D:\ (Local Disk) - NTFS - Total:83 Go (Free:80 Go)
E:\ (Local Disk) - FAT32 - Total:9 Go (Free:5 Go)
G:\ (CD or DVD)
I:\ (USB)
J:\ (USB)
K:\ (USB)
M:\ (USB)

23/12/2008|17:42

----------------------\\ Search..

No infections found !


1 - "C:\Rooter$\Rooter_1.txt" - 23/12/2008|17:43

----------------------\\ Scan completed at 17:43


Et le rapport DDS.txt

DDS (Version 1.1.0) - NTFSx86
Run by JEAN at 17:48:48,90 on 23/12/2008
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.511.158 [GMT 1:00]

AV: Norman Virus Control ver. 5.99 *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
C:\Program Files\Norman\Npm\Bin\Zanda.exe
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\hphmon04.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Norman\Npm\bin\ZLH.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Norman\nse\bin\NSESVC.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\JEAN.HERICHER\Local Settings\Temporary Internet Files\Content.IE5\QCGBCR18\dds[1].scr
C:\WINDOWS\System32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://portail.free.fr/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
uURLSearchHooks: Search Class: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - c:\progra~1\wanadoo\SEARCH~1.DLL
BHO: AcroIEHlprObj Class: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 5.0\reader\activex\AcroIEHelper.ocx
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: Programme d'aide de l'Assistant de connexion Windows Live: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\fichiers communs\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
TB: &Google: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
TB: Easy-WebPrint: {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - c:\program files\canon\easy-webprint\Toolband.dll
uRun: [MoneyAgent] "c:\program files\microsoft money\system\mnyexpr.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [EA Core] c:\program files\electronic arts\eadm\Core.exe -silent
uRun: [IncrediMail] c:\program files\incredimail\bin\IncMail.exe /c
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [WOOWATCH] c:\progra~1\wanadoo\Watch.exe
mRun: [WooCnxMon] c:\progra~1\wanadoo\CnxMon.exe
mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
mRun: [TkBellExe] "c:\program files\fichiers communs\real\update_ob\realsched.exe" -osboot
mRun: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
mRun: [Share-to-Web Namespace Daemon] c:\program files\hewlett-packard\memories disc\hp share-to-web\hpgs2wnd.exe
mRun: [PCMService] "c:\program files\home cinema\powercinema\PCMService.exe"
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [Microsoft Works Update Detection] c:\program files\fichiers communs\microsoft shared\works shared\WkUFind.exe
mRun: [ledpointer] CNYHKey.exe
mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb07.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [Dit] Dit.exe
mRun: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
mRun: [CHotkey] mHotkey.exe
mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
mRun: [HPHmon04] c:\windows\system32\hphmon04.exe
mRun: [HPHUPD04] "c:\program files\hp photosmart 11\hphinstall\unipatch\hphupd04.exe"
mRun: [WOOTASKBARICON] c:\progra~1\wanadoo\TaskbarIcon.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [OpwareSE2] "c:\program files\scansoft\omnipagese2.0\OpwareSE2.exe"
mRun: [Norman ZANDA] "c:\program files\norman\npm\bin\ZLH.EXE" /LOAD /SPLASH
mRun: [REGSHAVE] c:\program files\regshave\REGSHAVE.EXE /AUTORUN
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe"
mRun: [!AVG Anti-Spyware] "c:\program files\grisoft\avg anti-spyware 7.5\avgas.exe" /minimized
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\jean~1.her\menudm~1\progra~1\dmarra~1\outild~1.lnk - c:\program files\sony\sony picture utility\pmbcore\SPUVolumeWatcher.exe
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\e-cart~1.lnk - c:\program files\e-carte bleue lcl\ecbl-lcl.exe
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
IE: E&xporter vers Microsoft Excel - c:\progra~1\micros~4\office10\EXCEL.EXE/3000
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\canon\easy-webprint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\canon\easy-webprint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\canon\easy-webprint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\canon\easy-webprint\Resource.dll/RC_Preview.html
IE: { - c:\progra~1\messag~1\Messager Wanadoo.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {c:\progra~1\messag~1\Messager Wanadoo.exe -
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\fichiers communs\microsoft shared\web folders\PKMCDO.DLL
Notify: a4a5a673509 - c:\windows\system32\FREGSHEX32.dll
AppInit_DLLs: c:\windows\system32\FREGSHEX32.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: CShellExecuteHookImpl Object: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll

============= SERVICES / DRIVERS ===============

R0 sonyhcb;Sony Digital Imaging Base;c:\windows\system32\drivers\sonyhcb.sys [2004-4-15 6097]
R1 AVG Anti-Spyware Driver;AVG Anti-Spyware Driver;\??\c:\program files\grisoft\avg anti-spyware 7.5\guard.sys [2007-5-30 11000]
R1 AvgAsCln;AVG Anti-Spyware Clean Driver;c:\windows\system32\drivers\AvgAsCln.sys [2008-12-10 10872]
R2 AVG Anti-Spyware Guard;AVG Anti-Spyware Guard;c:\program files\grisoft\avg anti-spyware 7.5\guard.exe [2007-5-30 312880]
R2 Fswsclds;F-Secure Windows Security Center Legacy Detection Service;c:\program files\securitoo\av_fw\fswsclds.exe [2005-3-31 45056]
R2 Ndiskio;Ndiskio;\??\c:\program files\norman\nse\bin\NDISKIO.SYS [2008-7-13 20448]
R2 Norman ZANDA;Norman ZANDA;"c:\program files\norman\npm\bin\Zanda.exe" [2008-4-23 408696]
R3 CardReaderFilter;Card Reader Filter;\??\c:\windows\system32\drivers\USBCRFT.SYS [2004-2-28 13440]
R3 nsesvc;Norman Scanner Engine Service;"c:\program files\norman\nse\bin\NSESVC.EXE" -daemon [2008-7-13 322616]
R3 PhTVTune;MEDION TV-TUNER 7134 MK2/3;c:\windows\system32\drivers\PhTVTune.sys [2004-2-3 24704]
R3 PRISM_A00;PRISM 802.11g Driver;c:\windows\system32\drivers\PRISMA00.sys [2004-2-3 380736]
R3 UKBFLT;UKBFLT;c:\windows\system32\drivers\UKBFLT.sys [2004-2-27 11672]
R3 wbscr;Winbond Smartcard Reader for I/O;c:\windows\system32\drivers\wbscr.sys [2004-2-27 19928]
S3 ovt530;Webcam Deluxe;c:\windows\system32\drivers\ov530vid.sys [2006-4-10 161792]
S3 sonyhcs;Sony Digital Imaging Video;c:\windows\system32\drivers\sonyhcs.sys [2004-4-15 299923]

=============== Created Last 30 ================

2008-12-23 17:42 <DIR> -cd----- C:\Rooter$
2008-12-22 17:25 <DIR> -cd----- C:\Lop SD
2008-12-19 21:47 <DIR> --dsh--- c:\windows\system32\GroupPolicyManifest
2008-12-19 20:13 15,504 a------- c:\windows\system32\drivers\mbam.sys
2008-12-19 20:13 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2008-12-18 12:10 <DIR> -cd----- C:\_OTMoveIt
2008-12-16 17:33 9,677 a------- c:\windows\GnuHashes.ini
2008-12-16 17:24 1,531 a--sh--- c:\windows\system32\GroupPolicy000.dat
2008-12-16 17:18 <DIR> acdshr-- C:\cmdcons
2008-12-16 17:16 161,792 a------- c:\windows\SWREG.exe
2008-12-16 17:16 98,816 a------- c:\windows\sed.exe
2008-12-13 20:53 <DIR> --d----- c:\program files\Trend Micro
2008-12-13 20:08 <DIR> --d----- c:\program files\CCleaner
2008-12-13 17:43 <DIR> --d----- c:\docume~1\jean~1.her\applic~1\Malwarebytes
2008-12-13 17:43 <DIR> -cd----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2008-12-13 17:42 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2008-12-11 18:26 <DIR> -cd----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2008-12-11 18:26 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2008-12-10 17:16 63,488 a------- c:\windows\xobglu16.dll
2008-12-10 17:16 23,552 a------- c:\windows\xobglu32.dll
2008-12-10 17:16 919 a------- c:\windows\WININI.QTW
2008-12-10 17:16 227 a------- c:\windows\SYSINI.QTW
2008-12-10 17:16 165 a------- c:\windows\QTW.INI
2008-12-10 17:16 30 a------- c:\windows\RESULT.QTW
2008-12-10 17:15 87 a------- c:\windows\index.ini
2008-12-10 17:15 <DIR> --d----- c:\program files\index
2008-12-10 14:58 <DIR> --d----- c:\docume~1\jean~1.her\applic~1\Grisoft
2008-12-10 14:58 10,872 a------- c:\windows\system32\drivers\AvgAsCln.sys
2008-12-10 14:58 <DIR> -cd----- c:\docume~1\alluse~1\applic~1\Grisoft
2008-12-07 12:23 110 a------- c:\windows\CBP.INI
2008-12-07 12:23 <DIR> --d----- c:\program files\Anuman Interactive
2008-12-07 10:49 135,168 a------- c:\windows\system32\FREGSHEX32.dll
2008-12-03 18:21 72 a------- c:\windows\MediaManager.INI
2008-12-03 18:07 <DIR> --d----- c:\program files\MP3 Player Utilities 4.15
2008-11-24 19:07 <DIR> --d----- c:\program files\Hasbro Interactive

==================== Find3M ====================

2008-12-23 16:55 13,440 a------- c:\windows\system32\drivers\USBCRFT.SYS
2008-12-17 18:17 24,766 a------- c:\docume~1\jean~1.her\applic~1\wklnhst.dat
2008-12-16 17:30 440,658 a------- c:\windows\system32\perfh00C.dat
2008-12-16 17:30 62,344 a------- c:\windows\system32\perfc00C.dat
2008-12-11 21:01 4,212 ----h--- c:\windows\system32\zllictbl.dat
2008-11-13 16:35 67,792 ac------ c:\docume~1\jean~1.her\applic~1\GDIPFONTCACHEV1.DAT
2008-10-23 13:36 286,720 a------- c:\windows\system32\gdi32.dll
2008-10-16 21:18 826,368 a------- c:\windows\system32\wininet.dll
2008-10-16 14:06 268,648 a------- c:\windows\system32\mucltui.dll
2008-10-16 14:06 208,744 a------- c:\windows\system32\muweb.dll
2008-10-03 11:03 247,326 a------- c:\windows\system32\strmdll.dll
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2005-01-06 17:54 380 ac--h--- c:\docume~1\jean~1.her\applic~1\hpothb07.dat
2005-01-06 17:54 164 ac--h--- c:\documents and settings\all users\hpothb07.dat
2005-01-06 17:54 159 -c--h--- c:\documents and settings\jean.hericher\hpothb07.dat
2008-08-23 15:00 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\historique\history.ie5\mshist012008082320080824\index.dat

============= FINISH: 17:50:32,45 ===============

Merci

Bonjour,

Excuse moi, mais une question un peu bête : OAD? Je pense que cela veut dire outil d'aide au diagnostic, mais je le trouve où? J'ai recherché sur mon ordi mais je ne trouve rien qui ressemble à cela.

Merci d'avance

Bonsoir,

Je ne sais pas si ça peut t'aider mais j'ai installé antivir surmon ordinateur (il faudra d'ailleurs que tu m'aides à supprimer Norman qui n'ai plus à jour et qui s'incruste...) et il me signale un virus FREGSHEX32 qui contient le cheval de troie TR/Spy.Gen...
A bientôt

27/12/2008 ---- 17:43:14,09

Bonsoir,

Voici le rapport OAD :

Antivir n'arrive pas à supprimer le fichier apparemment. Par contre, il le détecte toutes les 10 secondes!!!! Ce qui est assez pénible!!!


----------------------------------
§§§§§§ [FREGSHEX32 ] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************

Aucune entrée détectée
*******************
[Fichier]
*******************



*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------

Avira AntiVir Personal
Date de création du fichier de rapport : samedi 27 décembre 2008 18:45

La recherche porte sur 1123826 souches de virus.

Détenteur de la licence :Avira AntiVir PersonalEdition Classic
Numéro de série : 0000149996-ADJIE-0001
Plateforme : Windows XP
Version de Windows :(Service Pack 3) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : JEAN
Nom de l'ordinateur :HERICHER

Informations de version :
BUILD.DAT : 8.2.0.52 16931 Bytes 02/12/2008 14:55:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:00
AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16
LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 16:45:55
ANTIVIR2.VDF : 7.1.1.34 2048 Bytes 24/12/2008 16:45:56
ANTIVIR3.VDF : 7.1.1.40 93184 Bytes 27/12/2008 16:42:42
Version du moteur: 8.2.0.45
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56
AESCRIPT.DLL : 8.1.1.19 336252 Bytes 26/12/2008 16:46:07
AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 15:06:41
AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:38
AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 09:41:39
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 26/12/2008 16:46:06
AEHEUR.DLL : 8.1.0.75 1524087 Bytes 26/12/2008 16:46:05
AEHELP.DLL : 8.1.2.0 119159 Bytes 26/12/2008 16:46:00
AEGEN.DLL : 8.1.1.8 323956 Bytes 26/12/2008 16:45:59
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.5.2 172405 Bytes 26/12/2008 16:45:57
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16
RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43

Configuration pour la recherche actuelle :
Nom de la tâche..................: ShlExt
Fichier de configuration.........: C:\DOCUME~1\JEAN~1.HER\LOCALS~1\Temp\96dc8867.avp
Documentation....................: bas
Action principale................: interactif
Action secondaire................: ignorer
Recherche sur les secteurs d'amorçage maître: marche
Recherche sur les secteurs d'amorçage: marche
Secteurs d'amorçage..............: C:,
Recherche dans les programmes actifs: arrêt
Recherche en cours sur l'enregistrement: arrêt
Recherche de Rootkits............: arrêt
Fichier mode de recherche........: Sélection de fichiers intelligente
Recherche sur les archives.......: marche
Limiter la profondeur de récursivité: 20
Archive Smart Extensions.........: marche
Heuristique de macrovirus........: marche
Heuristique fichier..............: moyen

Début de la recherche : samedi 27 décembre 2008 18:45

La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\Program Files\MP3 Player Utilities 4.15'


Apparemment rien de special....


Fin de la recherche : samedi 27 décembre 2008 18:45
Temps nécessaire: 00:11 Minute(s)

La recherche a été effectuée intégralement

19 Les répertoires ont été contrôlés
429 Des fichiers ont été contrôlés
0 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
0 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
0 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
0 Impossible de contrôler des fichiers
429 Fichiers non infectés
12 Les archives ont été contrôlées
0 Avertissements
0 Consignes

Bonjour G!rly et meilleurs voeux!

Depuis nos derniers messages et le passage de combofix je n'arrive pas à envoyer le rapport combofix, mes messages ne sont jamais publiés sur le forum.
De plus internet est redevenu lent.
Je ne sais pas ce qui se passe et ce que je dois faire.

Merci d'avance

Voici le rapport :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : JEAN ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:93 Go (Free:43 Go)
D:\ (Local Disk) - NTFS - Total:83 Go (Free:80 Go)
E:\ (Local Disk) - FAT32 - Total:9 Go (Free:5 Go)
G:\ (CD or DVD)
I:\ (USB)
J:\ (USB)
K:\ (USB)
M:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 05/01/2009|17:22 )

--------------------\\ Listing des dossiers dans APPLIC~1

[28/02/2004|14:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[26/12/2008|17:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[30/06/2008|20:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[28/02/2004|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[15/09/2006|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/12/2008|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[05/10/2008|11:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IM
[05/10/2008|11:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\IncrediMail
[16/04/2005|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[07/12/2008|12:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
[13/12/2008|17:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[24/10/2008|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[08/04/2004|22:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[15/08/2007|13:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[28/02/2004|15:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[03/03/2005|17:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panasonic
[17/08/2008|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\pixelStorm
[03/01/2009|15:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[27/02/2004|18:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[02/07/2008|09:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[03/01/2009|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/06/2008|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[30/06/2008|19:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[13/07/2008|18:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[27/08/2005|13:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
[27/09/2005|16:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[09/07/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[28/02/2004|16:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[28/02/2004|16:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AdobeUM
[28/02/2004|15:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Ahead
[28/02/2004|16:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Cyberlink
[27/02/2004|19:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Help
[27/02/2004|18:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[28/02/2004|17:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[28/02/2004|20:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[28/02/2004|17:58] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[28/02/2004|16:52] C:\DOCUME~1\JEAN\APPLIC~1\Adobe
[28/02/2004|15:48] C:\DOCUME~1\JEAN\APPLIC~1\Ahead
[08/04/2004|22:00] C:\DOCUME~1\JEAN\APPLIC~1\Cyberlink
[08/04/2004|18:57] C:\DOCUME~1\JEAN\APPLIC~1\Help
[28/02/2004|17:59] C:\DOCUME~1\JEAN\APPLIC~1\Macromedia
[08/04/2004|22:00] C:\DOCUME~1\JEAN\APPLIC~1\Microsoft
[24/03/2004|15:01] C:\DOCUME~1\JEAN\APPLIC~1\MSN6
[08/04/2004|22:00] C:\DOCUME~1\JEAN\APPLIC~1\Real

[26/09/2005|16:01] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\ABBYY
[28/06/2008|22:56] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Adobe
[09/09/2004|18:06] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\AdobeUM
[07/10/2005|09:37] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Ahead
[25/03/2006|17:59] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\ArcSoft
[12/09/2007|15:29] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Big Fish Games
[24/09/2008|20:41] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Canon
[28/02/2004|16:26] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Cyberlink
[06/02/2006|11:01] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Dossier de téléchargement Share-to-Web
[06/01/2005|17:51] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Dossier de téléchargement Share-to-Web
[03/07/2005|08:52] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\eConf
[27/08/2005|13:54] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\EPSON
[16/07/2008|15:39] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\FUJIFILM
[24/09/2006|10:49] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Google
[10/12/2008|14:58] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Grisoft
[15/04/2004|09:07] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Help
[06/01/2005|17:51] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Hewlett-Packard
[28/06/2008|13:31] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Identities
[26/02/2008|16:05] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Image Zone Express
[02/07/2008|09:13] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\InstallShield
[22/02/2005|17:41] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\InterTrust
[07/12/2008|10:52] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\LimeWire
[28/02/2004|17:59] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Macromedia
[13/12/2008|17:43] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Malwarebytes
[10/12/2008|17:05] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Micro Application
[20/11/2008|17:47] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Microsoft
[09/07/2008|11:30] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\MSN6
[27/10/2007|18:45] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Printer Info Cache
[28/02/2004|17:58] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Real
[24/10/2008|20:50] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Samsung
[30/06/2008|19:23] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\ScanSoft
[02/07/2008|09:33] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Sony Corporation
[14/10/2008|21:47] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Sun
[08/11/2006|15:52] C:\DOCUME~1\JEAN~1.HER\APPLIC~1\Teleca


[03/01/2009|18:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[22/04/2004|19:57] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

[03/01/2009|18:03] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[08/04/2004|21:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[30/08/2002 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini
[05/01/2009 17:15][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[11/09/2006|13:41] C:\Program Files\Adobe
[28/02/2004|14:35] C:\Program Files\Ahead
[07/12/2008|12:23] C:\Program Files\Anuman Interactive
[08/04/2004|21:58] C:\Program Files\AOL 8.0a
[30/06/2008|19:20] C:\Program Files\ArcSoft
[27/02/2004|19:03] C:\Program Files\ATI Technologies
[26/12/2008|17:41] C:\Program Files\Avira
[01/07/2005|11:06] C:\Program Files\BoontyGames
[30/06/2008|19:19] C:\Program Files\Canon
[13/12/2008|20:08] C:\Program Files\CCleaner
[03/01/2009|15:47] C:\Program Files\Clic d'Api N°17
[27/02/2004|19:11] C:\Program Files\C-Media 3D Audio
[28/02/2004|16:16] C:\Program Files\Common Files
[27/02/2004|18:28] C:\Program Files\ComPlus Applications
[28/02/2004|16:15] C:\Program Files\CyberLink
[27/09/2008|15:24] C:\Program Files\CyberQix
[30/12/2008|11:12] C:\Program Files\Diddl Screenmate
[11/08/2004|13:57] C:\Program Files\directx
[28/02/2004|14:33] C:\Program Files\DivX
[28/06/2008|22:55] C:\Program Files\e-Carte Bleue LCL
[03/01/2009|18:37] C:\Program Files\Electronic Arts
[04/11/2006|18:40] C:\Program Files\epson
[11/12/2008|19:16] C:\Program Files\Everest Poker
[29/02/2004|17:17] C:\Program Files\Excid.com Aps
[27/12/2008|19:04] C:\Program Files\Fichiers communs
[16/07/2008|15:30] C:\Program Files\FinePixViewer
[28/06/2008|13:21] C:\Program Files\Free.fr
[04/02/2007|18:21] C:\Program Files\Google
[10/12/2008|14:58] C:\Program Files\Grisoft
[24/11/2008|19:07] C:\Program Files\Hasbro Interactive
[26/11/2006|15:17] C:\Program Files\Heredis 7
[08/01/2006|14:56] C:\Program Files\Hewlett-Packard
[28/02/2004|14:16] C:\Program Files\HighMAT CD Writing Wizard
[28/02/2004|16:16] C:\Program Files\Home Cinema
[25/09/2006|16:31] C:\Program Files\HP
[12/08/2006|16:07] C:\Program Files\HP Photosmart 11
[08/04/2004|21:59] C:\Program Files\HP Photosmart 11(2)
[22/12/2008|21:55] C:\Program Files\IncrediMail
[10/12/2008|17:15] C:\Program Files\index
[07/12/2008|12:23] C:\Program Files\InstallShield Installation Information
[27/02/2004|18:45] C:\Program Files\Intel
[14/12/2008|00:29] C:\Program Files\Internet Explorer
[09/08/2008|20:51] C:\Program Files\Java
[08/02/2006|15:19] C:\Program Files\Jeux classiques
[27/10/2008|19:42] C:\Program Files\LimeWire
[19/12/2008|20:13] C:\Program Files\Malwarebytes' Anti-Malware
[28/02/2004|15:40] C:\Program Files\Medion Tools
[03/12/2004|16:50] C:\Program Files\Messager Wanadoo
[20/08/2008|19:39] C:\Program Files\Messenger
[03/02/2005|18:09] C:\Program Files\Messenger Plugin
[20/11/2008|17:47] C:\Program Files\Micro Application
[28/02/2004|14:52] C:\Program Files\Microsoft AutoRoute
[13/07/2008|23:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[28/02/2004|14:57] C:\Program Files\Microsoft Encarta
[27/02/2004|18:30] C:\Program Files\microsoft frontpage
[02/06/2004|15:47] C:\Program Files\Microsoft Games
[28/02/2004|14:51] C:\Program Files\Microsoft Money
[18/10/2004|19:46] C:\Program Files\Microsoft Office
[17/11/2004|17:21] C:\Program Files\Microsoft Picture It! 9
[18/10/2004|19:46] C:\Program Files\Microsoft Visual Studio
[02/07/2004|16:34] C:\Program Files\Microsoft Works
[28/02/2004|14:38] C:\Program Files\Microsoft Works Suite 2004
[20/08/2008|19:33] C:\Program Files\Movie Maker
[03/12/2008|18:07] C:\Program Files\MP3 Player Utilities 4.15
[09/07/2008|11:30] C:\Program Files\MSN
[27/02/2004|18:28] C:\Program Files\MSN Gaming Zone
[18/11/2006|18:52] C:\Program Files\MSXML 4.0
[28/02/2004|16:18] C:\Program Files\MUSICMATCH
[28/02/2004|15:01] C:\Program Files\muvee Technologies
[20/08/2008|19:29] C:\Program Files\NetMeeting
[05/01/2009|17:15] C:\Program Files\Norman
[28/02/2004|17:49] C:\Program Files\Nullsoft
[28/02/2004|15:25] C:\Program Files\OfficeUpdate11
[26/11/2007|14:38] C:\Program Files\Olivetti
[18/03/2007|16:46] C:\Program Files\orange
[20/08/2008|19:29] C:\Program Files\Outlook Express
[29/12/2005|14:56] C:\Program Files\Panasonic
[26/12/2004|23:16] C:\Program Files\PCFriendly
[01/12/2006|16:43] C:\Program Files\PIXELA
[03/01/2009|15:47] C:\Program Files\QuickTime
[28/02/2004|17:49] C:\Program Files\Real
[16/07/2008|15:28] C:\Program Files\REGSHAVE
[24/10/2008|20:46] C:\Program Files\Samsung
[30/06/2008|19:22] C:\Program Files\ScanSoft
[26/09/2005|16:25] C:\Program Files\ScanWizard 5
[31/03/2005|14:15] C:\Program Files\Securitoo
[17/01/2005|17:23] C:\Program Files\Services en ligne
[02/07/2008|09:24] C:\Program Files\Sony
[11/12/2008|18:50] C:\Program Files\Spybot - Search & Destroy
[20/11/2008|18:01] C:\Program Files\Tap'Touche Junior 2.0
[13/12/2008|20:53] C:\Program Files\Trend Micro
[28/02/2004|14:11] C:\Program Files\Uninstall Information
[27/02/2004|19:13] C:\Program Files\USB Wireless Keyboard Driver
[19/09/2008|04:49] C:\Program Files\Wanadoo
[12/09/2006|19:04] C:\Program Files\Wanadoo Jeux
[27/01/2008|16:31] C:\Program Files\Wanadoo Messager
[28/02/2004|15:05] C:\Program Files\Winbond Electronics Corp
[27/02/2004|18:35] C:\Program Files\Windows Journal Viewer
[09/07/2008|13:22] C:\Program Files\Windows Live
[09/08/2008|21:40] C:\Program Files\Windows Media Connect 2
[20/08/2008|19:29] C:\Program Files\Windows Media Player
[20/08/2008|19:29] C:\Program Files\Windows NT
[01/07/2005|09:01] C:\Program Files\WindowsUpdate
[28/02/2004|16:16] C:\Program Files\X10 Hardware
[27/02/2004|18:30] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/02/2005|17:41] C:\Program Files\Fichiers communs\Adobe
[28/02/2004|14:34] C:\Program Files\Fichiers communs\Ahead
[03/04/2004|10:43] C:\Program Files\Fichiers communs\AOL
[08/04/2004|21:58] C:\Program Files\Fichiers communs\aolback
[26/03/2006|21:27] C:\Program Files\Fichiers communs\ArcSoft
[28/02/2004|15:05] C:\Program Files\Fichiers communs\Borland Shared
[18/10/2004|19:46] C:\Program Files\Fichiers communs\Designer
[27/10/2007|18:45] C:\Program Files\Fichiers communs\HP
[28/02/2004|15:01] C:\Program Files\Fichiers communs\InstallShield
[09/08/2008|20:43] C:\Program Files\Fichiers communs\Java
[16/04/2005|12:18] C:\Program Files\Fichiers communs\Macrovision Shared
[03/01/2009|18:06] C:\Program Files\Fichiers communs\Microsoft Shared
[27/02/2004|18:28] C:\Program Files\Fichiers communs\MSSoap
[28/02/2004|15:01] C:\Program Files\Fichiers communs\muvee Technologies
[27/02/2004|18:26] C:\Program Files\Fichiers communs\ODBC
[05/10/2007|14:44] C:\Program Files\Fichiers communs\Panasonic
[28/02/2004|17:55] C:\Program Files\Fichiers communs\Real
[30/06/2008|19:22] C:\Program Files\Fichiers communs\ScanSoft Shared
[27/02/2004|18:28] C:\Program Files\Fichiers communs\Services
[27/02/2004|18:26] C:\Program Files\Fichiers communs\SpeechEngines
[20/08/2008|19:29] C:\Program Files\Fichiers communs\System
[20/09/2007|18:19] C:\Program Files\Fichiers communs\Teleca Shared
[09/07/2008|13:21] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[12/02/2005|21:45] C:\Program Files\Fichiers communs\Wise Installation Wizard
[28/02/2004|17:55] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 57 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-05 17:28:07
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:18][D:8]-> C:\DOCUME~1\JEAN~1.HER\LOCALS~1\Temp
[F:114][D:0]-> C:\DOCUME~1\JEAN~1.HER\Cookies
[F:2386][D:8]-> C:\DOCUME~1\JEAN~1.HER\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 22/12/2008|17:29 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 23/12/2008|17:40 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - 05/01/2009|17:30 - Option : [1]

--------------------\\ Fin du rapport a 17:30:37

Voici le rapport OTMoveIT3 :

========== PROCESSES ==========
Process explorer.exe killed successfully.
Unable to kill process: FREGSHEX32.dll
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\a4a5a673509\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows\\AppInit_DLLS deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows\\"AppInit_DLLS"|"" /E : value set successfully!
========== FILES ==========
DllUnregisterServer procedure not found in c:\windows\System32\FREGSHEX32.dll
c:\windows\System32\FREGSHEX32.dll NOT unregistered.
c:\windows\System32\FREGSHEX32.dll moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\nvcbin.def.B2FDC244.TMP scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 01052009_175627

Files moved on Reboot...
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\nvcbin.def.B2FDC244.TMP scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

Ci joint le rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:12:12, on 05/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
C:\Program Files\Norman\Npm\Bin\Zanda.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
C:\Program Files\Norman\nse\bin\NSESVC.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\hphmon04.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Norman\Npm\bin\ZLH.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\Memories Disc\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Global Startup: e-Carte Bleue LCL.lnk = C:\Program Files\e-Carte Bleue LCL\ecbl-lcl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Messager Wanadoo - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} (KeybHunterWebInterface Class) - https://particuliers.secure.lcl.fr/v_1.0/img/akl/FormProtect.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096969103953
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/gameshell/online/fr/chainz_2/mjolauncher.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\FREGSHEX32.dll
O20 - Winlogon Notify: a4a5a673509 - C:\WINDOWS\System32\FREGSHEX32.dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\Bin\Elogsvc.exe
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Program Files\Norman\nse\bin\NSESVC.EXE
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Merci la modération ;-)
voila flato`
j´espère que l´on va progresser`

Le problème c'est que je n'arrive pas à désinstaller Norman. Si je vais dans ajout suppression de programme , la manip se fait il disparait de là mais il est toujours sur le micro et toujours actif!!!! Sinon, ça fait longtemps qu'il ne serait plus là!!
Sais-tu comment faire,