Svp de l aide!! rapports hicjack+fixnavilog

Merci j oublirais jamais votre aide:

voila le rapport:



-------------- UsbFix V2.413.4 ---------------

* User : le maitre - RANIA
* Outils mis a jours le 11/12/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 21:17:24 le 16/12/2008
* Windows Xp - Internet Explorer 7.0.5730.11


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Documents and Settings\hatem\Local Settings\Temp\is-LF406.tmp\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\DOCUME~1\hatem\LOCALS~1\Temp\1.tmp\b2e.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe


--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe


+- Listing des fichiers présents :

[22/11/2003 09:29][--a--c---] C:\AUTOEXEC.BAT
[23/03/2006 02:41][-rahs----] C:\NTDETECT.COM
[24/03/2006 12:40][-rahsc---] C:\boot.ini
[16/12/2008 19:05][--a--c---] C:\fixnavi.txt
[16/12/2008 19:05][--a--c---] C:\UsbFix.txt
[22/11/2003 09:29][--a--c---] C:\CONFIG.SYS
[22/11/2003 09:29][--a--c---] C:\IO.SYS
[22/11/2003 09:29][--a--c---] C:\MSDOS.SYS
[22/11/2003 09:29][--a--c---] C:\pagefile.sys

--------------- [ Registre / Startup ] ----------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Prev Search Page"="http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/*https://fr.yahoo.com/?p=us"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
PHIME2002ASync=C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A=C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
MSPY2002=C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
IMJPMIG8.1=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
IMEKRMIG6.1=C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
EPSON Stylus C42 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------

Supprimé ! - [11/12/2008 08:06][--a------] C:\WINDOWS\system32\tmp.reg
Supprimé ! - [11/12/2008 08:06][--a------] C:\WINDOWS\system32\tmp.txt

--------------- [ Resumé ] ----------------

-> /!\ Le resultat doit etre interprété par un spécialiste /!\

[22/11/2003 09:29][--a--c---] C:\AUTOEXEC.BAT
[23/03/2006 02:41][-rahs----] C:\NTDETECT.COM
[24/03/2006 12:40][-rahsc---] C:\boot.ini
[12/12/2008 00:25][--a------] E:\RSIT.exe

--------------- ! Fin du rapport ! ----------------

rapport lop:


--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 1.70GHz )
BIOS : Default System BIOS
USER : le maitre ( Administrator )
BOOT : Normal boot
Antivirus : Norton AntiVirus 2003 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:38 Go (Free:5 Go)
D:\ (CD or DVD)
E:\ (USB) - FAT - Total:1910 Mo (Free:1 Go)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 2008-12-17|11:09 )

--------------------\\ Listing des dossiers dans APPLIC~1

[2006-03-24|12:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[2008-12-04|08:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Spyware Terminator
[2008-12-07|12:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\tazebama

[2008-12-17|10:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\~0
[2008-04-10|13:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[2006-10-25|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[2008-12-05|16:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[2006-12-22|11:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[2008-12-06|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[2008-12-07|05:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[2008-04-03|17:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[2004-07-11|12:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[2007-10-06|07:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sage Software
[2004-11-27|08:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[2008-12-03|04:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[2006-03-23|18:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[2008-12-07|00:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[2008-12-07|04:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller


[2008-12-11|08:36] C:\DOCUME~1\hatem\APPLIC~1\Adobe
[2008-12-11|08:36] C:\DOCUME~1\hatem\APPLIC~1\Macromedia
[2008-12-16|18:52] C:\DOCUME~1\hatem\APPLIC~1\Malwarebytes
[2008-12-16|18:12] C:\DOCUME~1\hatem\APPLIC~1\Microsoft
[2008-12-16|18:04] C:\DOCUME~1\hatem\APPLIC~1\Real
[2008-12-17|09:25] C:\DOCUME~1\hatem\APPLIC~1\Uniblue




[2007-12-29|07:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[2006-06-27|23:29] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[2007-02-03|04:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec



--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[2008-10-30 19:50][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2008-12-17 10:10][--ah-----] C:\WINDOWS\tasks\SA.DAT
[2001-08-28 07:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-08-30|13:28] C:\Program Files\Adobe
[2005-04-17|12:28] C:\Program Files\Aladdin Systems
[2006-03-27|03:11] C:\Program Files\Alwil Software
[2007-04-26|19:56] C:\Program Files\Apple Software Update
[2005-06-24|18:14] C:\Program Files\ArcSoft
[2004-02-21|02:28] C:\Program Files\Ariss
[2008-12-06|07:04] C:\Program Files\AutoPatcher
[2003-11-22|10:26] C:\Program Files\Avance Sound Manager
[2008-12-05|16:11] C:\Program Files\Avira
[2008-12-03|18:26] C:\Program Files\AvRack
[2008-12-06|04:08] C:\Program Files\CCleaner
[2007-10-06|07:03] C:\Program Files\Common Files
[2005-11-03|02:59] C:\Program Files\Creative
[2003-02-19|00:19] C:\Program Files\DIFX
[2004-05-05|10:02] C:\Program Files\EPSON
[2008-11-19|06:21] C:\Program Files\Fichiers communs
[2008-12-08|06:58] C:\Program Files\Free Download Manager
[2008-12-05|09:41] C:\Program Files\Google
[2008-12-06|00:47] C:\Program Files\Internet Explorer
[2007-10-02|07:38] C:\Program Files\Intuit
[2003-12-11|04:39] C:\Program Files\Java
[2008-03-30|15:51] C:\Program Files\Macrogaming
[2007-11-14|00:40] C:\Program Files\Macromedia
[2008-12-06|03:32] C:\Program Files\Malwarebytes' Anti-Malware
[2003-11-26|23:49] C:\Program Files\MathType
[2008-12-07|05:19] C:\Program Files\Messenger Plus! Live
[2008-03-15|14:07] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2003-11-22|09:29] C:\Program Files\microsoft frontpage
[2007-10-12|19:16] C:\Program Files\Microsoft Office
[2008-12-06|07:48] C:\Program Files\Movie Maker
[2007-10-12|19:15] C:\Program Files\MSECache
[2003-11-22|09:23] C:\Program Files\MSN Gaming Zone
[2007-10-08|14:43] C:\Program Files\MSXML 4.0
[2005-08-08|11:51] C:\Program Files\MTBWINST
[2003-11-22|11:07] C:\Program Files\Mustek 1200 UB Plus
[2008-12-06|07:48] C:\Program Files\NetMeeting
[2006-04-03|11:49] C:\Program Files\nouf.org
[2008-12-06|07:48] C:\Program Files\Outlook Express
[2008-02-18|03:57] C:\Program Files\QO Labs
[2008-12-05|23:54] C:\Program Files\QuickTime
[2006-05-08|07:01] C:\Program Files\Quranzu1
[2007-11-16|01:24] C:\Program Files\Real
[2006-03-24|11:47] C:\Program Files\Registry Cleaner Trial
[2003-11-22|10:24] C:\Program Files\S3Inc
[2007-10-06|06:39] C:\Program Files\Seagate Software
[2003-11-22|09:27] C:\Program Files\Services en ligne
[2008-11-18|06:07] C:\Program Files\Simple Comptable Standard 2007 - Version d'essai
[2004-07-05|05:19] C:\Program Files\Skype
[2004-11-27|08:59] C:\Program Files\Sony
[2008-12-07|05:21] C:\Program Files\Spyware Terminator
[2008-12-03|04:24] C:\Program Files\Symantec
[2008-12-07|13:31] C:\Program Files\Trend Micro
[2007-10-06|06:55] C:\Program Files\Uninstall Information
[2008-12-17|05:06] C:\Program Files\UsbFix
[2003-11-22|10:30] C:\Program Files\VIA Technologies, Inc
[2008-03-26|01:39] C:\Program Files\Viewpoint
[2007-10-06|07:04] C:\Program Files\WebEx
[2008-12-05|16:17] C:\Program Files\WinAce
[2008-12-06|00:42] C:\Program Files\WinClamAVShield
[2008-03-14|16:57] C:\Program Files\Windows Live
[2007-11-14|01:04] C:\Program Files\Windows Media Components
[2007-12-22|03:10] C:\Program Files\Windows Media Connect 2
[2008-12-06|07:49] C:\Program Files\Windows Media Player
[2008-11-03|09:00] C:\Program Files\Windows NT
[2004-08-29|08:32] C:\Program Files\WindowsUpdate
[2008-12-08|08:31] C:\Program Files\WinRAR
[2008-03-30|23:03] C:\Program Files\winsim
[2008-12-07|00:40] C:\Program Files\WinZip
[2003-11-26|23:51] C:\Program Files\Wolfram Research
[2003-11-22|09:29] C:\Program Files\xerox
[2004-05-03|07:11] C:\Program Files\Zone Labs

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[2008-04-10|13:34] C:\Program Files\Fichiers communs\Adobe
[2007-10-06|06:40] C:\Program Files\Fichiers communs\AnswerWorks 5.0
[2003-11-29|18:06] C:\Program Files\Fichiers communs\Designer
[2005-06-24|18:37] C:\Program Files\Fichiers communs\InstallShield
[2003-12-11|04:11] C:\Program Files\Fichiers communs\Java
[2005-02-08|10:07] C:\Program Files\Fichiers communs\Mathematica
[2008-04-16|01:08] C:\Program Files\Fichiers communs\Microsoft Shared
[2003-11-22|09:25] C:\Program Files\Fichiers communs\MSSoap
[2003-11-22|02:35] C:\Program Files\Fichiers communs\ODBC
[2007-11-16|01:22] C:\Program Files\Fichiers communs\Real
[2003-11-22|11:41] C:\Program Files\Fichiers communs\Services
[2004-11-27|09:00] C:\Program Files\Fichiers communs\Sony Shared
[2003-11-22|02:35] C:\Program Files\Fichiers communs\SpeechEngines
[2008-06-13|17:13] C:\Program Files\Fichiers communs\SWF Studio
[2008-12-03|12:31] C:\Program Files\Fichiers communs\Symantec Shared
[2008-11-03|09:00] C:\Program Files\Fichiers communs\System
[2008-12-07|05:09] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[2007-11-16|01:25] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 31 Processes )

iexplore.exe ~ [PID:2436]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-17 11:14:19
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\hatem\Bureau\parabole\le programme\KeyGen
C:\DOCUME~1\hatem\Bureau\parabole\le programme\KeyGen\keygenpatch.exe
C:\DOCUME~1\hatem\Recent\Crack.lnk


[F:75][D:4]-> C:\DOCUME~1\hatem\LOCALS~1\Temp
[F:68][D:0]-> C:\DOCUME~1\hatem\Cookies
[F:1078][D:5]-> C:\DOCUME~1\hatem\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 2008-12-17|11:17 - Option : [1]

--------------------\\ Fin du rapport a 11:17:18

Rapport:

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\DOCUME~1\ADMINI~1\APPLIC~1\tazebama moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\hatem\LOCALS~1\Temp\is-LF406.tmp\sp_rsser.exe scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12172008_113005

Files moved on Reboot...
C:\DOCUME~1\hatem\LOCALS~1\Temp\is-LF406.tmp\sp_rsser.exe moved successfully.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

il est entrain de scanner. je v vous copier a la fin le resultat ...

Je tiens a signaler que je sens une amelioration mais de temps en temps comme d habitude des fenetrres qui veulent fermer toutes seules et le curseur qui commence a bouger c encore la...

Voila le scan est fini...

il n ya rien a signaler...

qu est ce que je fais apres?

le probleme des fenetres qui veulent fermer, puis le curseur qui commence a bouger et tjr la....

Voila le dernier de nouveau rapport hijack:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:08, on 2008-12-17
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Documents and Settings\hatem\Local Settings\Temp\is-LF406.tmp\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\hatem\Local Settings\Temporary Internet Files\Content.IE5\EW302QAG\rmmabez[1].exe
C:\WINDOWS\System32\rsvp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.aljazeera.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC1.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: Yahoo! Checkers - http://download.games.yahoo.com/games/clients/y/kt4_x.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C1C1E797-C8FE-49DE-AEE0-709BAB4BE914}: NameServer = 132.208.250.1 132.208.250.101
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Pacsptisvr.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Unknown owner - C:\Documents and Settings\hatem\Local Settings\Temp\is-LF406.tmp\sp_rsser.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

j ai fai la pro0cedure mais je trouve pas le rapport ds le c, le pc ca demarre apres les 10 etapes mais je n arrive pas a trouver le rapport ....

ComboFix 08-12-16.03 - le maitre 2008-12-16 22:17:03.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1256.966.1036.18.223.63 [GMT -5:00]
Running from: C:\Documents and Settings\hatem\Bureau\ComboFix.exe

[COLOR=RED][B]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/B][/COLOR]
.
j ai trouver ca ds c/combfix/comfix.txt

Rapport malware:(execution rapide)

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1472
Windows 5.1.2600 Service Pack 3

2008-12-17 11:15:21
mbam-log-2008-12-17 (11-15-21).txt

Type de recherche: Examen rapide
Eléments examinés: 64969
Temps écoulé: 20 minute(s), 40 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)