Rapport bitdefender ->suis-je infectée?

salut Darius

peut tu créer ton propre, topic avec les soucis rencontrés, depuis quand , etc.....ton raprort hijack !

1/ hijack

Télécharge HijackThis ici:
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

Dézippe le dans un dossier prévu à cet effet.
Par exemple C:\hijackthis < Enregistre le bien dans c : !
Démo : (Merci a Balltrap34 pour cette réalisation)
http://perso.orange.fr/rginformatique/section%20virus/Hijenr.gif

Lance le puis:
clique sur "do a system scan and save logfile" (cf démo)
faire un copier coller du log entier sur le forum

Démo : (Merci a Balltrap34 pour cette réalisation)

http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

2/ netoie tes cookies via Ccleanrt (tu peut l'utiliser 1/2 x/semaine ! cv'est déjà bien ! telecharge ici:
Téléchargement :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

¤ Lance CCleaner.

Suppression des fichiers temporaires

Va dans la section "Options" situé dans la marge gauche. Décoche Avancé. Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur Analyse
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur Lancer le Nettoyage

Suppression des incohérence du registre

• Clique sur l'icône Erreurs situés dans la marge à gauche.
• Puis clique sur Analyser les erreurs
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur Corriger les erreurs.

Si tu n'est pas sur de ce que tu fais, tu peux choisir de sauvegarder les entrées cochées pour les restaurer ultérieurement

Aussi tu vius le fgzbre de scan en ligne est tres utile alors passe le lorsque tu as du temps dans ta semaine

on voiq des choses meme si on croit que tout est OK

dis moi où tu en es!!, ti log hijack bienvenue^^

bizoux

bonjour, voila je vous explique je vien de faire un scan avec bitdefender online, et voici le raport !!! puis je savoir si je cour un risque !!! merci de bien vouloir répondre !!!

Time
03:26:45

Files
235457

Folders
4728

Boot Sectors
2

Archives
1293

Packed Files
11046

Results

Identified Viruses
1

Infected Files
2

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
2

Engines Info

Virus Definitions
702226

Engine build
AVCORE v1.0 (build 2411) (i386) (Jul 9 2007 12:10:22)

Scan plugins
14

Archive plugins
37

Unpack plugins
6

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Documents and Settings\Admin\Shared\(US Special Release) Download Accelerator Pro [CRACKED] nysay album Special Edition.zip=>setup.exe=>(NSIS o)=>zlib_nsis0003
Infected with: Trojan.Agent.AZT

C:\Documents and Settings\Admin\Shared\(US Special Release) Download Accelerator Pro [CRACKED] nysay album Special Edition.zip=>setup.exe=>(NSIS o)=>zlib_nsis0003
Deleted

C:\Documents and Settings\Admin\Shared\(US Special Release) Download Accelerator Pro [CRACKED] nysay album Special Edition.zip=>setup.exe=>(NSIS o)
Update failed

C:\Documents and Settings\Admin\Shared\nysay album.zip=>setup.exe=>(NSIS o)=>zlib_nsis0003
Infected with: Trojan.Agent.AZT

C:\Documents and Settings\Admin\Shared\nysay album.zip=>setup.exe=>(NSIS o)=>zlib_nsis0003
Deleted

C:\Documents and Settings\Admin\Shared\nysay album.zip=>setup.exe=>(NSIS o)
Update failed

C:\Documents and Settings\Franck\Application Data\LimeWire\fileurns.bak
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\fileurns.cache
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\filters.props
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\gnutella.net
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\installation.props
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\library.dat
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\limewire.props
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\pub1.key
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\public.key
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\questions.props
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\responses.cache
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\secureMessage.key
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\simpp.xml
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\spam.dat
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\tables.props
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\01_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\02_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\03_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\04_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\05_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\chat.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\dir_closed.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\dir_open.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\forward_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\forward_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\kill.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\kill_on.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\lime.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\logo.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\notsearching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\pause_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\pause_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\play_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\play_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\question.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\rewind_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\rewind_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\searching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\splash.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\splashpro.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\stop_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\stop_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\theme.txt
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme\warning.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>01_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>02_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>03_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>04_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>05_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>chat.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>dir_closed.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>dir_open.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>forward_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>forward_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>kill.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>kill_on.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>lime.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>logo.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>notsearching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>pause_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>pause_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>play_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>play_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>question.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>rewind_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>rewind_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>searching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>splash.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>splashpro.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>stop_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>stop_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>theme.txt
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\black_theme.lwtp=>warning.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\01_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\02_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\03_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\04_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\05_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\chat.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\dir_closed.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\dir_open.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\forward_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\forward_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\kill.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\logo.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\notsearching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\pause_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\pause_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\play_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\play_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\question.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\rewind_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\rewind_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\search.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\searching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\splash.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\splashpro.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\stop_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\stop_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\theme.txt
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme\warning.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>01_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>02_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>03_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>04_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>05_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>chat.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>dir_closed.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>dir_open.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>forward_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>forward_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>kill.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>logo.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>notsearching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>pause_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>pause_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>play_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>play_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>question.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>rewind_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>rewind_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>search.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>searching.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>splash.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>splashpro.png
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>stop_dn.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>stop_up.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>theme.txt
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\classic_theme.lwtp=>warning.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\01_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\02_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\03_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\04_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\05_star.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\chat.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\dir_closed.gif
Clean

C:\Documents and Settings\Franck\Application Data\LimeWire\themes\limewire_theme\dir_open.gif
Clean

salut vous deux

Mais tu n'as pas a être désolée ^^ as tu passé Ccleaner, AVG, question de faire 1 ti nettoyage depuis?

Bizoux

pour plus de renseignement
Adware Hotbar
ajoute des habillages graphiques aux barres d'outils, d'internet explorer,de Outlook et express
il envoye des informations sur les habitudes de navigation etc
par intermédiare de ActiveX
donc fait bien attention au comportement de ton pc,dans les jours a venir, malgré tout

bonjour
virus 1
fichier infecté 1
désinfecté 1, c'est a dire que
donc ton pc n'est pas infecté
je te conseille d'avoir Bitdefender comme antivirus

++

Bonjour,
me revoilà (partie en vacances deso), donc voici mon log Hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 15:59:30, on 3/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par Belgacom Skynet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {36ADA89D-2440-4DC4-820A-3A05E8630935} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Fichiers communs\Symantec Shared\SymProbe.exe -r "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Vaderetro Outlook] "C:\PROGRA~1\GOTOSO~1\VADERE~1\VrMoRegister.exe -s"
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=https://www.proximus.be/pickx
O16 - DPF: Dexia Netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
O16 - DPF: YExplorer1_8US.CAB - http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by19fd.bay19.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

Sommes-nous infecté?
merci bcp et bonne soirée.

salut

Télécharge HijackThis ici:
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

Dézippe le dans un dossier prévu à cet effet.
Par exemple C:\hijackthis < Enregistre le bien dans c : !
Démo : (Merci a Balltrap34 pour cette réalisation)
http://perso.orange.fr/rginformatique/section%20virus/Hijenr.gif

Lance le puis:
clique sur "do a system scan and save logfile" (cf démo)
faire un copier coller du log entier sur le forum

bizz

quelqu'un pour m'aider?
merci