Message lié virus

RE , Voila le log :

FPort v2.0 - TCP/IP Process to Port Mapper
Copyright 2000 by Foundstone, Inc.
https://www.mcafee.com/en-us/index.html

Pid Process Port Proto Path
3628 -> 1066 TCP
1136 -> 135 TCP
3528 StarWindService-> 3260 TCP C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
3528 StarWindService-> 3261 TCP C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
0 System -> 1113 TCP
0 System -> 139 TCP
0 System -> 1684 TCP
1836 firefox -> 1122 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1129 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1132 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1146 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1150 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1155 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1157 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1278 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1312 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1836 firefox -> 1326 TCP C:\Program Files\Mozilla Firefox\firefox.exe
264 mcnasvc -> 6646 TCP c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
428 mcproxy -> 1123 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1124 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1130 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1131 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1133 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1134 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1147 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1149 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1151 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1152 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1153 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1154 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1156 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1158 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1159 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1160 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1280 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1281 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1313 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1315 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1328 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1329 TCP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
5608 msnmsgr -> 1148 TCP C:\Program Files\Windows Live\Messenger\msnmsgr.exe
1252 svchost -> 1203 TCP C:\WINDOWS\System32\svchost.exe
2384 tcpsvcs -> 13 TCP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 17 TCP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 19 TCP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 7 TCP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 9 TCP C:\WINDOWS\System32\tcpsvcs.exe

1136 -> 161 UDP
3528 StarWindService-> 1026 UDP C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
3528 StarWindService-> 500 UDP C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
4 System -> 1107 UDP
0 System -> 1125 UDP
0 System -> 123 UDP
0 System -> 137 UDP
0 System -> 138 UDP
0 System -> 1434 UDP
0 System -> 3544 UDP
0 System -> 4500 UDP
264 mcnasvc -> 1028 UDP c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
428 mcproxy -> 1049 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1142 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1202 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 123 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 13033 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 14058 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 1900 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
428 mcproxy -> 6646 UDP c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
1252 svchost -> 1900 UDP C:\WINDOWS\System32\svchost.exe
2384 tcpsvcs -> 13 UDP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 17 UDP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 19 UDP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 7 UDP C:\WINDOWS\System32\tcpsvcs.exe
2384 tcpsvcs -> 9 UDP C:\WINDOWS\System32\tcpsvcs.exe

PsList 1.26 - Process Information Lister
Copyright (C) 1999-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

Process information for WOWGAMER:

Name Pid Pri Thd Hnd VM WS Priv
Idle 0 0 1 0 0 16 0
System 4 8 85 1116 1904 240 0
smss 724 11 3 21 3828 420 172
csrss 820 13 13 906 67716 4788 1928
winlogon 844 13 16 430 57292 4304 7460
services 900 9 18 402 23572 3828 2176
HWAPI 208 8 8 220 56612 5216 10720
mcmscsvc 252 8 10 264 60508 1888 3832
McNASvc 264 8 12 393 74864 10108 4900
mcods 308 8 9 214 46892 872 3196
mcpromgr 360 8 15 458 87612 3172 10288
McProxy 428 8 35 463 83220 8944 6696
RedirSvc 468 8 9 182 33028 5156 2892
Mcshield 528 13 30 301 109196 23308 31708
mcsysmon 616 8 20 310 76780 7600 4652
MpfSrv 796 8 19 410 78008 7040 6444
mps 916 8 14 354 66808 1404 7700
svchost 1080 8 19 220 68416 5308 3408
mpsevh 2932 8 7 223 56676 268 3476
mcagent 3272 8 6 253 65056 2276 4088
msksrver 1088 8 10 271 64248 5476 5452
svchost 1136 8 10 514 42608 4668 2204
MsMpEng 1208 8 18 289 63476 21488 17488
svchost 1252 8 87 1554 152736 32756 23476
svchost 1296 8 5 106 37888 3524 2600
sqlservr 1356 8 26 301 1404820 1236 34820
svchost 1424 8 6 90 35948 3516 1508
spoolsv 1584 8 11 151 51860 6132 4164
svchost 1664 8 16 235 46860 5912 3220
aawservice 1696 8 7 77 109884 25940 23580
Ad-Watch2007 2592 8 12 157 176084 58920 58356
BTNtService 1724 8 5 79 35148 2556 1896
DKService 1744 8 5 95 42416 3892 1348
wmpnetwk 1760 8 15 223 70100 8208 5764
svchost 1800 8 8 93 43036 3588 1760
MBackMonitor 1852 8 16 243 119412 26428 20872
nvsvc32 2332 8 3 111 27568 3824 2360
tcpsvcs 2384 8 2 113 35108 3396 1280
SAService 2448 8 10 280 75816 8360 7056
slee503 2484 8 2 22 9196 912 268
snmp 2600 8 5 215 22516 3904 1596
sqlbrowser 2900 8 7 69 13916 2388 812
sqlwriter 3460 8 4 82 21812 3588 1060
StarWindService 3528 8 3 72 13672 2296 720
alg 3628 8 6 104 38308 3648 1272
svchost 3676 8 7 138 44900 4724 2868
ULCDRSvr 3820 8 2 21 8180 868 228
svchost 3992 8 11 389 77856 14488 11528
usnsvc 4924 8 7 97 21156 2768 980
lsass 912 9 21 495 52016 1528 5112
explorer 2928 8 9 342 95840 29048 21104
firefox 1836 8 16 310 122248 53964 42424
MSASCui 2720 8 17 343 52612 8004 5140
SiteAdv 2740 8 5 224 68044 10280 6428
realsched 3436 8 5 114 43416 176 1116
GoogleToolbarNotifier 3892 8 5 190 51704 1384 3080
ctfmon 4004 8 1 89 38076 3776 1020
msnmsgr 5608 8 41 808 183072 9768 36380
cmd 5668 8 1 21 14568 2004 1612
pslist 4440 13 2 104 18436 1948 972

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
explorer.exe pid: 2928
Command line: C:\WINDOWS\Explorer.EXE

Base Size Version Path
0x01000000 0xf2000 6.00.2900.3156 C:\WINDOWS\Explorer.EXE
0x7c800000 0x105000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll
0x75f10000 0xfd000 6.00.2900.2995 C:\WINDOWS\system32\BROWSEUI.dll
0x77ef0000 0x47000 5.01.2600.3159 C:\WINDOWS\system32\GDI32.dll
0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.dll
0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll
0x77f40000 0x7c000 6.00.2900.2995 C:\WINDOWS\system32\SHLWAPI.dll
0x770e0000 0x8b000 5.01.2600.3139 C:\WINDOWS\system32\OLEAUT32.dll
0x77720000 0x1b4000 6.00.2900.2987 C:\WINDOWS\system32\SHDOCVW.dll
0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll
0x44080000 0xcd000 7.00.6000.16512 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x43e00000 0x45000 7.00.6000.16512 C:\WINDOWS\system32\iertutil.dll
0x7c9d0000 0xc58000 6.00.2900.3051 C:\WINDOWS\system32\SHELL32.dll
0x77390000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76920000 0x8000 5.01.2600.2751 C:\WINDOWS\system32\LINKINFO.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x44360000 0x5cb000 7.00.6000.16512 C:\WINDOWS\system32\ieframe.dll
0x5f800000 0x16000 1.01.1593.0000 C:\PROGRA~1\WIFD1F~1\MpShHook.dll
0x78130000 0x9b000 8.00.50727.0163 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
0x7c420000 0x87000 8.00.50727.0163 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll
0x44160000 0x136000 7.00.6000.16512 C:\WINDOWS\system32\urlmon.dll
0x02060000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
0x10000000 0x6000 2.05.0000.6172 C:\Program Files\SiteAdvisor\6172\saHook.dll
0x01700000 0x2c000 C:\Program Files\WinRAR\rarext.dll
0x00b80000 0xf000 1.00.0000.1004 C:\Program Files\SUPERAntiSpyware\SASCTXMN.DLL
0x64000000 0x2e000 2004.11.0023.0001 C:\PROGRA~1\Yahoo!\Common\ymmapi.dll
0x00b90000 0x8000 2.00.0000.0002 C:\Program Files\TuneUp Utilities 2007\SDShelEx-win32.dll
0x1c000000 0x6000 1.02.0001.0000 C:\Program Files\Notepad++\nppcm.dll
0x60700000 0x32000 11.02.0121.0000 c:\program files\mcafee\virusscan\mcodsax.dll
0x14490000 0x14000 13.03.0002.0101 c:\program files\mcafee\virusscan\scriptcl.dll
0x63380000 0x78000 5.07.0000.5730 C:\WINDOWS\system32\JScript.dll
0x73300000 0x65000 5.07.0000.5730 C:\WINDOWS\system32\VBScript.dll
0x77210000 0xb1000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL
0x02ee0000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
0x41f00000 0x7000 1.00.0000.3845 C:\WINDOWS\system32\asfsipc.dll
0x60980000 0x7000 3.01.4000.1823 C:\WINDOWS\system32\MSISIP.DLL
0x74e10000 0x10000 5.06.0000.8820 C:\WINDOWS\System32\wshext.dll
0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL
0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL
0x59000000 0xe000 5.06.0000.6626 C:\WINDOWS\System32\wshFR.DLL

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

No matching processes were found.

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
winlogon.exe pid: 844
Command line: winlogon.exe

Base Size Version Path
0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe
0x7c800000 0x105000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll
0x77680000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll
0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.dll
0x77ef0000 0x47000 5.01.2600.3159 C:\WINDOWS\system32\GDI32.dll
0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll
0x7c9d0000 0xc58000 6.00.2900.3051 C:\WINDOWS\system32\SHELL32.dll
0x77f40000 0x7c000 6.00.2900.2995 C:\WINDOWS\system32\SHLWAPI.dll
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x77390000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x776a0000 0x24000 6.00.2900.3051 C:\WINDOWS\system32\SHSVCS.dll
0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll
0x77210000 0xb1000 5.01.2600.3019 C:\WINDOWS\system32\sxs.dll
0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll
0x01330000 0x3b000 1.07.0017.0000 C:\WINDOWS\system32\WgaLogon.dll
0x770e0000 0x8b000 5.01.2600.3139 C:\WINDOWS\system32\OLEAUT32.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll
0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
services.exe pid: 900
Command line: C:\WINDOWS\system32\services.exe

Base Size Version Path
0x7c800000 0x105000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll
0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.dll
0x77ef0000 0x47000 5.01.2600.3159 C:\WINDOWS\system32\GDI32.dll
0x77680000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll
0x7dbc0000 0x21000 5.01.2600.2744 C:\WINDOWS\system32\umpnpmgr.dll
0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll
0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll
0x47260000 0xf000 5.01.2600.3008 C:\WINDOWS\AppPatch\AcAdProc.dll
Le volume dans le lecteur C s'appelle PRESARIO
Le numéro de série du volume est 8CB0-F0DC

Répertoire de C:\Program Files

24/09/2007 17:19 <REP> .
24/09/2007 17:19 <REP> ..
12/05/2007 15:17 <REP> 3B Software
27/05/2007 17:56 <REP> A-Ray Scanner
04/09/2007 08:05 <REP> Adobe
01/01/2007 15:09 <REP> Alcohol Soft
19/01/2007 17:01 <REP> Apple Software Update
28/02/2007 16:42 <REP> Astase
28/07/2007 13:22 <REP> Atlence
27/08/2007 12:44 <REP> Autorun Créator
30/07/2007 14:11 <REP> AviSynth 2.5
06/06/2007 16:04 <REP> AxBx
13/01/2007 15:09 <REP> AZPR
27/08/2007 12:44 <REP> Azureus
02/01/2007 12:29 <REP> Blowfish Advanced CS
17/09/2007 19:01 <REP> CamStudio
14/10/2006 15:53 <REP> CCleaner
27/08/2007 12:37 <REP> CleanUp!
12/05/2007 15:17 <REP> Common Files
22/07/2007 13:16 <REP> CursorXP
12/05/2007 15:17 <REP> DIFX
14/01/2007 12:50 <REP> Diskeeper Corporation
17/04/2007 13:59 <REP> EA GAMES
23/09/2006 11:23 <REP> Easy Internet signup
16/12/2006 16:03 <REP> Editeur
17/09/2007 18:48 <REP> eMule
04/09/2007 08:07 <REP> Executive Software
20/06/2007 18:32 <REP> Fake Webcam
12/05/2007 15:17 <REP> FBM Software
07/09/2007 18:30 <REP> Fichiers communs
12/09/2007 22:01 <REP> FLVPlayer
22/12/2006 19:53 <REP> Free
20/08/2007 18:29 <REP> GBA
15/05/2007 18:20 <REP> GenerateurMotPasse20
06/09/2007 17:57 <REP> GIMP-2.0
28/02/2007 16:42 <REP> Google
03/06/2007 09:55 <REP> Grisoft
16/09/2007 14:11 <REP> GUILD WARS
21/03/2007 11:09 <REP> Hewlett-Packard
23/08/2007 17:03 <REP> Hijackthis Version Française
18/05/2007 19:50 <REP> HP
05/11/2006 21:54 <REP> INk
03/08/2007 13:11 <REP> Intel
15/08/2007 17:13 <REP> Internet Explorer
03/12/2006 10:04 <REP> InterVideo
30/07/2007 14:59 <REP> IVCsoft
06/08/2006 19:45 <REP> IVT Corporation
13/01/2007 19:55 <REP> Jasc Software Inc
04/09/2007 08:05 <REP> Java
28/07/2007 16:27 <REP> JeffProd
16/02/2007 20:07 <REP> jv16 PowerTools
28/06/2006 16:05 <REP> K-Lite Codec Pack
08/08/2007 20:15 <REP> Lavasoft
12/05/2007 15:17 <REP> Maido Production
26/09/2007 12:18 <REP> McAfee
23/03/2007 09:31 <REP> McAfee.com
11/06/2007 19:58 <REP> Messenger
10/06/2007 13:18 <REP> Messenger Plus! Live
19/04/2007 17:18 <REP> Microsoft Baseline Security Analyzer 2
08/05/2007 20:35 <REP> Microsoft CAPICOM 2.1.0.2
01/01/2004 09:56 <REP> microsoft frontpage
11/06/2007 19:46 <REP> Microsoft Office
05/11/2006 15:36 <REP> Microsoft Reader
29/05/2007 13:42 <REP> Microsoft SQL Server
27/05/2007 20:05 <REP> Microsoft Visual Studio 8
24/09/2007 17:33 <REP> Microsoft Works
27/05/2007 19:17 <REP> Microsoft.NET
30/08/2007 12:11 <REP> MIKSOFT
22/08/2006 09:41 <REP> Motherboard Monitor 5
28/08/2007 19:08 <REP> Movie Maker
24/09/2007 17:33 <REP> Mozilla Firefox
06/05/2007 21:47 <REP> MP3 Player Utilities
17/04/2007 13:44 <REP> MSBuild
01/01/2004 09:51 <REP> MSN Gaming Zone
17/06/2007 20:22 <REP> MSN Messenger
10/10/2006 08:30 <REP> MSXML 4.0
07/05/2007 19:40 <REP> MSXML 6.0
25/08/2007 14:25 <REP> Navilog1
12/05/2007 15:17 <REP> NeoDivx Suite
27/05/2007 19:01 <REP> Nero
24/08/2006 16:07 <REP> NetMeeting
16/05/2007 19:03 <REP> Nokia
19/08/2007 17:36 <REP> Notepad++
08/05/2007 11:49 <REP> Nvu
13/06/2007 10:02 <REP> Outlook Express
14/04/2007 13:05 <REP> PC Connectivity Solution
19/02/2007 20:58 <REP> Philips
06/09/2007 18:23 <REP> PhotoFiltre Studio
01/01/2004 12:43 <REP> Presario PC Help
26/06/2007 16:58 <REP> PythonForDelphi
18/01/2007 21:32 <REP> QuickTime
27/08/2006 18:55 <REP> Real
07/05/2007 19:44 <REP> Realtek AC97
01/01/2004 12:14 <REP> RecordNow!
17/04/2007 13:39 <REP> Reference Assemblies
24/09/2007 17:33 <REP> RogueRemover FREE
28/08/2007 19:23 <REP> RootKit Hook Analyzer
28/12/2006 11:53 <REP> Safer Networking
23/08/2006 13:40 <REP> Samsung
16/05/2007 18:33 <REP> SanDisk
01/01/2004 12:49 <REP> Services en ligne
12/05/2007 15:17 <REP> Siber Systems
07/05/2007 19:46 <REP> sisagp
07/09/2007 17:35 <REP> SiteAdvisor
29/05/2007 18:47 <REP> Skype
01/01/2004 12:14 <REP> Sonic
03/06/2007 11:33 <REP> Sophos
06/08/2007 12:49 <REP> Speed Gear 5
14/09/2007 16:27 <REP> Spybot - Search & Destroy
23/09/2006 17:13 <REP> Stardock
28/05/2007 09:34 <REP> StartClock
04/06/2007 19:00 <REP> Steganos Secure FileSharing 6
26/05/2007 10:43 <REP> StuffPlug3
28/07/2007 16:29 <REP> Super X Studios
15/09/2007 13:18 <REP> SUPERAntiSpyware
26/02/2007 19:44 <REP> SuperCopier2
27/07/2007 13:12 <REP> SupraASCIIArt
06/03/2007 09:15 <REP> Teamspeak2_RC2
03/06/2007 11:21 <REP> Teamspeak2_RC2serveur
05/07/2007 11:08 <REP> Total Video Converter
17/08/2007 12:25 <REP> TuneUp Utilities 2007
04/09/2007 14:10 <REP> Tweak-XP Pro 4
03/08/2007 13:02 <REP> Ulead Systems
23/08/2007 16:48 <REP> unCDcopy
07/05/2007 08:02 <REP> Unlocker
11/02/2007 15:12 <REP> UxTheme Multipatcher Fr
25/09/2007 19:08 <REP> Warcraft III
27/07/2007 14:20 <REP> Windows Defender
05/11/2006 21:59 <REP> Windows Journal Viewer
17/06/2007 20:21 <REP> Windows Live
31/10/2006 09:46 <REP> Windows Live Favorites
02/09/2007 17:17 <REP> Windows Live Safety Center
31/10/2006 09:47 <REP> Windows Live Toolbar
03/08/2007 13:03 <REP> Windows Media Components
25/12/2006 20:11 <REP> Windows Media Connect 2
16/05/2007 18:30 <REP> Windows Media Player
15/10/2006 12:11 <REP> Windows NT
16/12/2006 14:39 <REP> WinRAR
22/09/2007 23:32 <REP> World of Warcraft
17/08/2007 12:26 <REP> WowCartographe
01/01/2004 09:56 <REP> xerox
18/04/2007 20:46 <REP> Xilisoft
19/05/2007 12:43 <REP> xp-AntiSpy
17/12/2006 13:05 <REP> Yahoo!
30/07/2007 14:11 <REP> YouTUBE (TM) movie downloader
29/04/2007 10:33 <REP> Zeb-Utility
0 fichier(s) 0 octets
147 Rép(s) 58 431 082 496 octets libres
Le volume dans le lecteur C s'appelle PRESARIO
Le numéro de série du volume est 8CB0-F0DC

Répertoire de C:\

28/06/2007 14:36 401 720 HijackThis.exe

Répertoire de C:\

28/06/2007 14:36 401 720 HijackThis.exe
2 fichier(s) 803 440 octets
0 Rép(s) 58 431 078 400 octets libres
C:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Nokia_PC_Suite_683_rel_14_1_fre.exe
C:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstCCD.exe
C:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCS.exe
C:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCSFEMsi.exe
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\ExItem1136_norton$20internet$20security_6.0.4_french\SysDect.exe
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\ExItem2702_symnet$20consumer_5.0.2_english\Message.exe
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\ExItem2702_symnet$20consumer_5.0.2_english\setup.exe
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\ExItem2717_symnet$20consumer_5.4.4_english\Message.exe
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\ExItem2717_symnet$20consumer_5.4.4_english\setup.exe
C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe
C:\Documents and Settings\All Users\Documents\mozilla-firefox_mozilla_firefox_2.0.0.2_francais_11003.exe
C:\Documents and Settings\All Users\Documents\firefox\firefox.exe
C:\Documents and Settings\All Users\Documents\firefox\updater.exe
C:\Documents and Settings\All Users\Documents\firefox\xpicleanup.exe
C:\Documents and Settings\All Users\Documents\firefox\extensions\talkback@mozilla.org\components\talkback.exe
C:\Documents and Settings\All Users\Documents\firefox\plugins\GetFlash.exe
C:\Documents and Settings\All Users\Documents\firefox\plugins\NPSWF32_FlashUtil.exe
C:\Documents and Settings\All Users\Documents\firefox\uninstall\helper.exe
C:\Documents and Settings\All Users\Documents\ie\iexplore.exe
C:\Documents and Settings\All Users\Documents\ie\Connection Wizard\icwconn1.exe
C:\Documents and Settings\All Users\Documents\ie\Connection Wizard\icwconn2.exe
C:\Documents and Settings\All Users\Documents\ie\Connection Wizard\icwrmind.exe
C:\Documents and Settings\All Users\Documents\ie\Connection Wizard\icwtutor.exe
C:\Documents and Settings\All Users\Documents\ie\Connection Wizard\inetwiz.exe
C:\Documents and Settings\All Users\Documents\ie\Connection Wizard\isignup.exe
C:\Documents and Settings\Papa\Local Settings\Temporary Internet Files\Content.IE5\1SBPZ2IN\hi2world[1].exe
C:\Documents and Settings\Propriétaire\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe
C:\Documents and Settings\Propriétaire\Application Data\Macromedia\Flash Player\#SharedObjects\5Z9777Q2\localhost\Program Files\FLVPlayer\flvplayer.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{6815FCDD-401D-481E-BA88-31B4754C2B46}\ARPPRODUCTICON.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}\ARPPRODUCTICON.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{D4D396EF-D7E9-4E90-9D9D-4DE3CECD49E6}\_20B26A1D28AC433C64FBC3.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{D4D396EF-D7E9-4E90-9D9D-4DE3CECD49E6}\_6861E5621911569F45DED1.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{D4D396EF-D7E9-4E90-9D9D-4DE3CECD49E6}\_8E2776DDFF80C17F789CA8.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{D4D396EF-D7E9-4E90-9D9D-4DE3CECD49E6}\_A31668C709212989E5B874.exe
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Installer\{D4D396EF-D7E9-4E90-9D9D-4DE3CECD49E6}\_C564528ED20BD80CD076E3.exe
C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\88nbxcw2.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\setupmconfig.exe
C:\Documents and Settings\Propriétaire\Bureau\AtomicGenerator.exe
C:\Documents and Settings\Propriétaire\Bureau\camstudio_camstudio_2.0_francais_10618.exe
C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
C:\Documents and Settings\Propriétaire\Bureau\MC_2.1.3 Fixed.exe
C:\Documents and Settings\Propriétaire\Bureau\messpatch-g5-851238601.exe
C:\Documents and Settings\Propriétaire\Bureau\spybotsd15.exe
C:\Documents and Settings\Propriétaire\Bureau\1.21nocd\1.21nocd\worldedit.exe
C:\Documents and Settings\Propriétaire\Bureau\Blog\decocreator\decocreator2.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\catchme.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\diff.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\dumphive.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\FilesInfoCmd.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\find2.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\Fport.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\grep.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\KProcCheck.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\LFiles.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\LISTDLLS.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\md5sums.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\pslist.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\streams.exe
C:\Documents and Settings\Propriétaire\Bureau\DiagHelp\swreg.exe
C:\Documents and Settings\Propriétaire\Bureau\Fichier original War3 !\war3.exe
C:\Documents and Settings\Propriétaire\Bureau\Fichier original War3 !\worldedit.exe
C:\Documents and Settings\Propriétaire\Bureau\Logiciel\avsvideotools.exe
C:\Documents and Settings\Propriétaire\Bureau\Logiciel\Navilog1.exe
C:\Documents and Settings\Propriétaire\Bureau\Logiciel\RegSeeker\RegSeeker.exe
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\MBSA\2.0\Cache\WindowsUpdateAgent20-x86.exe
C:\Documents and Settings\Propriétaire\Local Settings\Apps\2.0\PKZTM2BE.3GV\8Q85VAHR.9Q7\zebb..tion_4e93cf4ea346e16c_0001.0000_b99e074f38a6e717\ZebBench.exe

_ _ _ _ _ _ _ _ _ _ _ _ _ _
FIN DU LOG ! A+

lol ok

Merci de bien lire et suivre attentivement ce qui est écrit car tu dois appuyer sur une touche lors du scan.. si tu ne le fais pas le rapport ne sera pas entier et tu devras recommencer donc :

- Télécharge http://www.malekal.com/download/DiagHelp.zip sur ton bureau
- Ne double-clic pas dessus !! Fais un clic droit sur le fichier et extraire tout
- Un nouveau dossier chercher va être créé DiagHelp
- Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
- Une fenêtre va s'ouvrir, choisis [b]l'option 2[/b]
- L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande
- Copie/colle le contenu du bloc-note qui s'ouvre, pour cela :
-- Dans le bloc-note, cliquez sur le menu Edition / Selectionner tout
-- A nouveau menu Edition / copier
-- Dans un nouveau message ici, faire un clic droit / coller

A+

Re, lol ok ! Ne t'inquiete pas execut.reg c'est moi qui l'avais telecharger il m'avais servit je te post quand meme le log :-) :

REGEDIT4

// Restaure les exécutables.
// Suivre les instructions de cette page pour utilisation :
http://kiwin.free.fr/stockreg/execut.htm

// Edité par KiWin@free.fr

[HKEY_CLASSES_ROOT\.exe]
"Content Type"="application/x-msdownload"
@="exefile"

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile]
"EditFlags"=hex:d8,07,00,00
@="Application"

[HKEY_CLASSES_ROOT\exefile\shell]
@=""

[HKEY_CLASSES_ROOT\exefile\shell\open]
@=""
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

Voila ! A+++

Ok, nan j y joue pas désolé lol

C:\execut.reg << clique droit dessu et choisis modifier, copie colle le rapport.

a+

Re, voila le log comboFix :

ComboFix 07-08-17.2 - "Propri‚taire" 2007-09-22 18:39:34.5 - NTFSx86
Microsoft Windows XP dition familiale 5.1.2600.2.1252.1.1036.18.622 [GMT 2:00]

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-09-22 18:08 --------- d-------- C:\Program Files\Warcraft III (Lol si tu y joue mon seudo est FrDarkmort)
2007-09-22 12:33 --------- d-------- C:\Program Files\McAfee
2007-09-17 18:48 --------- d-------- C:\Program Files\eMule
2007-09-16 14:11 --------- d-------- C:\Program Files\GUILD WARS
2007-09-15 20:35 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-15 13:18 --------- d-------- C:\Program Files\SUPERAntiSpyware
2007-09-09 10:24 --------- d-------- C:\Program Files\Microsoft Works
2007-09-08 18:30 --------- d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-09-07 17:35 --------- d-------- C:\Program Files\SiteAdvisor
2007-09-07 17:34 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\SiteAdvisor
2007-09-06 17:57 --------- d-------- C:\Program Files\GIMP-2.0
2007-09-04 13:42 737280 --a--c--- C:\WINDOWS\iun6002.exe
2007-09-04 08:07 --------- d-------- C:\Program Files\Executive Software
2007-09-02 17:17 --------- d-------- C:\Program Files\Windows Live Safety Center
2007-09-02 17:11 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Azureus
2007-08-28 19:23 --------- d-------- C:\Program Files\RootKit Hook Analyzer
2007-08-28 19:08 --------- d-------- C:\Program Files\Movie Maker
2007-08-28 18:56 65294 --a--c--- C:\WINDOWS\BricoPackUninst.cmd
2007-08-28 18:34 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\teamspeak2
2007-08-27 12:44 --------- d-------- C:\Program Files\Azureus
2007-08-27 12:44 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Vidalia
2007-08-23 16:48 --------- d-------- C:\Program Files\unCDcopy
2007-08-20 18:29 --------- d-------- C:\Program Files\GBA
2007-08-19 17:36 --------- d-------- C:\Program Files\Notepad++
2007-08-19 17:36 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Notepad++
2007-08-17 12:26 --------- d-------- C:\Program Files\WowCartographe
2007-08-17 12:25 --------- d-------- C:\Program Files\TuneUp Utilities 2007
2007-08-17 12:25 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
2007-08-17 12:10 2322176 --a------ C:\WINDOWS\system32\TUKernel.exe
2007-08-09 18:57 --------- d-------- C:\Program Files\World of Warcraft
2007-08-08 20:15 --------- d-------- C:\Program Files\Lavasoft
2007-08-08 20:13 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
2007-08-06 12:49 --------- d-------- C:\Program Files\Speed Gear 5
2007-08-03 13:14 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Ulead Systems
2007-08-03 13:11 --------- d-------- C:\Program Files\Intel
2007-08-03 13:03 --------- d-------- C:\Program Files\Windows Media Components
2007-08-03 13:02 --------- d-------- C:\Program Files\Ulead Systems
2007-08-03 13:02 --------- d-------- C:\Program Files\Fichiers communs\Ulead Systems
2007-08-03 13:02 --------- d-------- C:\Program Files\Fichiers communs\InstallShield
2007-08-01 15:39 --------- d-------- C:\Program Files\Fichiers communs\MAGIX Shared
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 68440 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 14:59 --------- d-------- C:\Program Files\IVCsoft
2007-07-30 14:11 --------- d-------- C:\Program Files\YouTUBE (TM) movie downloader
2007-07-30 14:11 --------- d-------- C:\Program Files\AviSynth 2.5
2007-07-28 16:29 --------- d-------- C:\Program Files\Super X Studios
2007-07-28 16:27 --------- d-------- C:\Program Files\JeffProd
2007-07-28 13:22 --------- d-------- C:\Program Files\Fichiers communs\Atlence
2007-07-28 13:22 --------- d-------- C:\Program Files\Atlence
2007-07-27 14:20 --------- d-------- C:\Program Files\Windows Defender
2007-07-27 13:12 --------- d-------- C:\Program Files\SupraASCIIArt
2007-07-22 13:16 --------- d-------- C:\Program Files\CursorXP
2007-07-08 12:42 570 --a------ C:\execut.reg
2007-06-26 08:09 1104896 --a------ C:\WINDOWS\system32\msxml3.dll
2005-05-12 00:36 12288 --a--c--- C:\WINDOWS\Fonts.\RandFont.dll
--------- C:\Program Files\Hijackthis Version Française
--------- C:\Program Files\Autorun Créator

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [2007-01-08 12:22]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6172\SiteAdv.exe" [2006-10-02 21:09]
"Ad-Watch"="C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe" [2007-08-01 17:16]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 13:22]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"System settings protector"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-14 16:16]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"=1 (0x1)
"NoInstrumentation"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"=1 (0x1)
"NoInstrumentation"=1 (0x1)
"NoSharedDocuments"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CursorXP"="C:\Program Files\CursorXP\CursorXP.exe" -s

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" -H

R2 Dnscache;Client DNS;C:\WINDOWS\System32\svchost.exe -k NetworkService
R2 SLEE_503_DRIVER;Steganos Live Encryption Engine (Version 503) [Driver];\??\C:\WINDOWS\system32\drivers\SLEE503.sys
R2 SQLBrowser;SQL Server Browser;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
R2 SQLWriter;Enregistreur VSS SQL Server;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe -k netsvcs
S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter.sys
S3 p2pgasvc;Authentification de groupe réseau homologue;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 p2pimsvc;Gestionnaire d'identité réseau homologue;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 p2psvc;Réseau homologue;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 PNRPSvc;Protocole de résolution de noms d'homologues;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 RSPSC;RSPSC;C:\WINDOWS\system32\drivers\rspsc.sys
S3 tap0801;TAP-Win32 Adapter V8;C:\WINDOWS\system32\DRIVERS\tap0801.sys
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc p2psvc p2pimsvc p2pgasvc PNRPSvc

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f0e459b3-dbde-11db-8e0c-000c76c10064}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
Open(&0)\command- Recycled\ctfmon.exe

Contents of the 'Scheduled Tasks' folder
2007-09-21 15:15:01 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
2007-03-23 07:15:15 C:\WINDOWS\Tasks\McDefragTask.job - c:\program files\mcafee\mqc\QcConsol.exe
2007-03-23 07:15:13 C:\WINDOWS\Tasks\McQcTask.job - c:\program files\mcafee\mqc\QcConsol.exe
2007-09-22 14:59:04 C:\WINDOWS\Tasks\MP Scheduled Scan.job - C:\Program Files\Windows Defender\MpCmdRun.exe
2007-09-22 15:59:04 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-22 18:44:51
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-09-22 18:47:06
C:\ComboFix-quarantined-files.txt ... 2007-09-22 18:46
C:\ComboFix2.txt ... 2007-09-16 11:22
C:\ComboFix3.txt ... 2007-08-28 12:41

--- E O F ---

Ok remet un combofix, j ai peut etre raté l'essentiel ;)

a+

Hélas , le probleme est toujours la ! Jespere qu'on trouvera une solution !
Je vais essayer de mon côté de faire des recherches !

A+

C'est ok, ou en sont les soucis

a+

Re ! ^^ Voila le résultat du scan , rien de grave je suppose ? :

Scan taken on 18 Sep 2007 14:48:12 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing

Merci !

ok lol

Vas sur le site https://virusscan.jotti.org/
- Clic en haut à droite sur "Parcourir", navigue dans les dossiers et sélectionne ce fichier : C:\WINDOWS\iun6002.exe
- Clic sur submit toujours en haut à droite
- Le scan va se lancer, ça va prendre un petit instant
- En bas, tu as le résultat du scan, copie/colle le résultat complet du scan ici.
Aide : https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId662799

En re ! J'ai effectuer un scan avec un anti-rootkit , sa a peut-etre rien a voir mais il m'a trouvé des choses s'il te plaît est-ce que tu peux me l'analyser(le log) , il n'est pas très long le voila :

Service name Syscall Address Hooked Module Product Company Description
---------------------------------------------------------------------------------------------------------------------------------------------------------
NtClose, ZwClose 25 0xF74D4C58 YES Vax347b.sys Plug and Play BIOS Extension
NtCreateKey, ZwCreateKey 41 0xF74D4C10 YES Vax347b.sys Plug and Play BIOS Extension
NtCreatePagingFile, ZwCreatePagingFile 45 0xF74C8C70 YES Vax347b.sys Plug and Play BIOS Extension
NtEnumerateKey, ZwEnumerateKey 71 0xF74C94FE YES Vax347b.sys Plug and Play BIOS Extension
NtEnumerateValueKey, ZwEnumerateValueKey 73 0xF74D4D50 YES Vax347b.sys Plug and Play BIOS Extension
NtOpenKey, ZwOpenKey 119 0xF74D4BD4 YES Vax347b.sys Plug and Play BIOS Extension
NtQueryKey, ZwQueryKey 160 0xF74C951E YES Vax347b.sys Plug and Play BIOS Extension
NtQueryValueKey, ZwQueryValueKey 177 0xF74D4CA6 YES Vax347b.sys Plug and Play BIOS Extension
NtSetSystemPowerState, ZwSetSystemPowerState 241 0xF74D44F0 YES Vax347b.sys Plug and Play BIOS Extension
NtSetValueKey, ZwSetValueKey 247 0xF750C148 YES sptd.sys

Merci ! PS: C'est pas grave si tu ne l'analyse pas :-) !

Re , Voila le log Combo Fix Suivi de HijackThis :

ComboFix 07-08-17.2 - "Propri‚taire" 2007-09-16 11:15:09.4 - NTFSx86
Microsoft Windows XP dition familiale 5.1.2600.2.1252.1.1036.18.648 [GMT 2:00]

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-09-15 20:35 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-15 13:18 --------- d-------- C:\Program Files\SUPERAntiSpyware
2007-09-14 20:52 --------- d-------- C:\Program Files\eMule
2007-09-14 16:27 --------- d-------- C:\Program Files\McAfee
2007-09-09 10:24 --------- d-------- C:\Program Files\Microsoft Works
2007-09-08 18:30 --------- d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-09-07 17:35 --------- d-------- C:\Program Files\SiteAdvisor
2007-09-07 17:34 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\SiteAdvisor
2007-09-06 17:57 --------- d-------- C:\Program Files\GIMP-2.0
2007-09-04 13:42 737280 --a--c--- C:\WINDOWS\iun6002.exe
2007-09-04 08:07 --------- d-------- C:\Program Files\Executive Software
2007-09-02 17:17 --------- d-------- C:\Program Files\Windows Live Safety Center
2007-09-02 17:11 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Azureus
2007-08-28 19:23 --------- d-------- C:\Program Files\RootKit Hook Analyzer
2007-08-28 19:08 --------- d-------- C:\Program Files\Movie Maker
2007-08-28 18:56 65294 --a--c--- C:\WINDOWS\BricoPackUninst.cmd
2007-08-28 18:34 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\teamspeak2
2007-08-27 12:47 --------- d-------- C:\Program Files\GUILD WARS
2007-08-27 12:44 --------- d-------- C:\Program Files\Azureus
2007-08-27 12:44 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Vidalia
2007-08-23 16:48 --------- d-------- C:\Program Files\unCDcopy
2007-08-19 17:36 --------- d-------- C:\Program Files\Notepad++
2007-08-19 17:36 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Notepad++
2007-08-17 12:26 --------- d-------- C:\Program Files\WowCartographe
2007-08-17 12:25 --------- d-------- C:\Program Files\TuneUp Utilities 2007
2007-08-17 12:25 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
2007-08-17 12:10 2322176 --a------ C:\WINDOWS\system32\TUKernel.exe
2007-08-09 18:57 --------- d-------- C:\Program Files\World of Warcraft
2007-08-08 20:15 --------- d-------- C:\Program Files\Lavasoft
2007-08-08 20:13 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
2007-08-06 12:49 --------- d-------- C:\Program Files\Speed Gear 5
2007-08-03 16:54 --------- d-------- C:\Program Files\autorun
2007-08-03 13:14 --------- d-------- C:\DOCUME~1\PROPRI~1\APPLIC~1\Ulead Systems
2007-08-03 13:11 --------- d-------- C:\Program Files\Intel
2007-08-03 13:03 --------- d-------- C:\Program Files\Windows Media Components
2007-08-03 13:02 --------- d-------- C:\Program Files\Ulead Systems
2007-08-03 13:02 --------- d-------- C:\Program Files\Fichiers communs\Ulead Systems
2007-08-03 13:02 --------- d-------- C:\Program Files\Fichiers communs\InstallShield
2007-08-01 15:39 --------- d-------- C:\Program Files\Fichiers communs\MAGIX Shared
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 68440 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 14:59 --------- d-------- C:\Program Files\IVCsoft
2007-07-30 14:11 --------- d-------- C:\Program Files\YouTUBE (TM) movie downloader
2007-07-30 14:11 --------- d-------- C:\Program Files\AviSynth 2.5
2007-07-28 16:29 --------- d-------- C:\Program Files\Super X Studios
2007-07-28 16:27 --------- d-------- C:\Program Files\JeffProd
2007-07-28 13:22 --------- d-------- C:\Program Files\Fichiers communs\Atlence
2007-07-28 13:22 --------- d-------- C:\Program Files\Atlence
2007-07-27 14:20 --------- d-------- C:\Program Files\Windows Defender
2007-07-27 13:12 --------- d-------- C:\Program Files\SupraASCIIArt
2007-07-22 13:16 --------- d-------- C:\Program Files\CursorXP
2007-07-08 12:42 570 --a------ C:\execut.reg
2007-06-26 08:09 1104896 --a------ C:\WINDOWS\system32\msxml3.dll
2007-06-19 15:32 282112 --a------ C:\WINDOWS\system32\gdi32.dll
2005-05-12 00:36 12288 --a--c--- C:\WINDOWS\Fonts.\RandFont.dll
--------- C:\Program Files\Hijackthis Version Française
--------- C:\Program Files\Autorun Créator

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [2007-01-08 12:22]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6172\SiteAdv.exe" [2006-10-02 21:09]
"Ad-Watch"="C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe" [2007-08-01 17:16]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 13:22]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"System settings protector"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-14 16:16]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"=1 (0x1)
"NoInstrumentation"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"=1 (0x1)
"NoInstrumentation"=1 (0x1)
"NoSharedDocuments"=1 (0x1)
"NoActiveDesktop"=00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CursorXP"="C:\Program Files\CursorXP\CursorXP.exe" -s

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" -H

R2 Dnscache;Client DNS;C:\WINDOWS\System32\svchost.exe -k NetworkService
R2 SLEE_503_DRIVER;Steganos Live Encryption Engine (Version 503) [Driver];\??\C:\WINDOWS\system32\drivers\SLEE503.sys
R2 SQLBrowser;SQL Server Browser;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
R2 SQLWriter;Enregistreur VSS SQL Server;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe -k netsvcs
S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter.sys
S3 p2pgasvc;Authentification de groupe réseau homologue;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 p2pimsvc;Gestionnaire d'identité réseau homologue;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 p2psvc;Réseau homologue;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 PNRPSvc;Protocole de résolution de noms d'homologues;C:\WINDOWS\System32\svchost.exe -k p2psvc
S3 RSPSC;RSPSC;C:\WINDOWS\system32\drivers\rspsc.sys
S3 tap0801;TAP-Win32 Adapter V8;C:\WINDOWS\system32\DRIVERS\tap0801.sys
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc p2psvc p2pimsvc p2pgasvc PNRPSvc

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f0e459b3-dbde-11db-8e0c-000c76c10064}]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
Open(&0)\command- Recycled\ctfmon.exe

*Newly Created Service* - USNJSVC

Contents of the 'Scheduled Tasks' folder
2007-09-14 15:15:01 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
2007-03-23 07:15:15 C:\WINDOWS\Tasks\McDefragTask.job - c:\program files\mcafee\mqc\QcConsol.exe
2007-03-23 07:15:13 C:\WINDOWS\Tasks\McQcTask.job - c:\program files\mcafee\mqc\QcConsol.exe
2007-09-16 09:11:54 C:\WINDOWS\Tasks\MP Scheduled Scan.job - C:\Program Files\Windows Defender\MpCmdRun.exe
2007-09-15 19:59:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-16 11:21:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-09-16 11:22:50
C:\ComboFix-quarantined-files.txt ... 2007-09-16 11:22
C:\ComboFix2.txt ... 2007-08-28 12:41
C:\ComboFix3.txt ... 2007-08-26 18:29

--- E O F ---
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:13 , on 16/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\SiteAdvisor\6172\SAService.exe
C:\WINDOWS\system32\SLEE503.exe
C:\WINDOWS\System32\snmp.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://qfr10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = IE by Papa !
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6172\SiteAdv.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6172\SiteAdv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [System settings protector] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Afficher cette page dans Firefox - file://C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\88nbxcw2.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O8 - Extra context menu item: Ouvrir la cible dans Firefox - file://C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\88nbxcw2.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: Ouvrir une &nouvelle fenêtre - C:\Documents and Settings\Propriétaire\Application Data\TuneUp Software\TuneUp Utilities\Web\tuofinw.htm
O8 - Extra context menu item: Recherche &Google - C:\Documents and Settings\Propriétaire\Application Data\TuneUp Software\TuneUp Utilities\Web\gsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} -
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} -
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by116w.bay116.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://MASQUER.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6172\SAService.exe
O23 - Service: Steganos Live Encryption Engine (Version 503) [Service] (SLEE_503_SERVICE) - Unknown owner - C:\WINDOWS\system32\SLEE503.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O24 - Desktop Component 0: (no name) - http://www.absolute3d.net/Images/Grandes/Feu/43.jpg

Ok

remet un hijackthis + un combofix

a+

Re,

Il est bien supprimer mais il est revenut !!! J'ai fait comme tu m'as dit j'ai regarder dans Hijackthis apres pour voir si il a bien été supprimer mais lors du redemmarrage le message s'affiche !!! Alors j'ai Reregarder dans hijackthis et il est revenue !!!

Merci de ton aide ! Jespere qu'on réussira à le détruire!

A+

Re

Ouvre le bloc note et copie/colle ceci: (regedit4 sur la 1ere ligne)

REGEDIT4 

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 

Puis enregistrer sous et dans:
Nom du fichier, met bureau.reg
Type : sélectionne "tous les fichiers"
clique sur enregistrer

Double clique sur bureau.reg et accepte la fusion avec le registre.

regarde s il est supprimé

a+

Re !
Tu a surement raison ! Je sur que sa va marcher si jarrive à le supprimer !
Mais malheuresement , au redemmarage toujours pareil , Pourquoi ?!
Parce-que en refaisant un scan Hijackthis ceci:

O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\

Est réapparu !!! Est-ce à cause de mes logiciel de protection registre ? Ou peut-etre est-ce à cause d'un virus ?

Merci A+ !

Fixe ceci pour voir:
O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\

A+

Re,
Voila un nouveau log HijackThis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:49 , on 08/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\SiteAdvisor\6172\SAService.exe
C:\WINDOWS\system32\SLEE503.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\MPS\mpsevh.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Works\wkswp.exe
C:\Program Files\Microsoft Works\MSWorks.exe
C:\Program Files\Microsoft Works\wkgdcach.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Steganos Secure FileSharing 6\sfs.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://qfr10.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6172\SiteAdv.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6172\SiteAdv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
O4 - HKCU\..\Run: [System settings protector] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Afficher cette page dans Firefox - file://C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\88nbxcw2.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O8 - Extra context menu item: Ouvrir la cible dans Firefox - file://C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\88nbxcw2.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: Ouvrir une &nouvelle fenêtre - C:\Documents and Settings\Propriétaire\Application Data\TuneUp Software\TuneUp Utilities\Web\tuofinw.htm
O8 - Extra context menu item: Recherche &Google - C:\Documents and Settings\Propriétaire\Application Data\TuneUp Software\TuneUp Utilities\Web\gsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\WINDOWS\System32\shdocvw.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} -
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} -
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by116w.bay116.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://akilan0.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\WINDOWS\
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6172\SAService.exe
O23 - Service: Steganos Live Encryption Engine (Version 503) [Service] (SLEE_503_SERVICE) - Unknown owner - C:\WINDOWS\system32\SLEE503.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O24 - Desktop Component 0: (no name) - http://www.absolute3d.net/Images/Grandes/Feu/43.jpg

Hummm, peut etre une piste.

remet un hijackthis

a+

Re,
J'ai essayer de trouver des infos sur mon probleme mais je ne trouve pas quelque chose de très clair .
Ce message s'affiche apres le chargement de windows mais avant l'écran de sessions !
Ce message je ne pense qui soit du genre Publicité mais personnelement je pense que soit il est du à un probleme dans le system ou dût à un virus qui à fait n'importe quoi ! Ce message est dans une langue totalement imcompréemsible ! Mais à force de chercher dans le registre avec Tune Up Registry editor j'ai trouver quelque chose d'interressant , j'ai trouver cette clé :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings

Dedans il y a :

"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,7a,68,71,4d,d6,bc,fb,42,81,51,47,58,1d,15,68,be,04,00,\
00,00,04,00,00,00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,\
00,30,aa,ac,ed,c7,e6,b3,02,bf,59,53,46,7d,80,93,19,00,00,00,00,\
04,80,00,00,a0,00,00,00,10,00,00,00,dc,e8,dc,1d,ba,10,80,44,19,\
3f,db,91,79,d9,e7,f0,b0,01,00,00,df,fd,79,32,83,84,4a,c3,c6,66,\
f1,6b,a1,81,f5,a1,da,b4,a0,14,a9,66,ac,0e,e0,4d,53,c8,c4,f2,37,\
5b,d1,f0,48,ac,8e,c6,6e,fd,14,cf,ae,3b,a0,b0,ac,c2,27,12,d1,fc,\
5f,6a,5c,b3,20,55,53,7d,c2,21,15,7f,ad,8f,12,b0,a2,8a,72,9f,2c,\
f8,c9,9a,f4,18,bf,8e,31,35,bf,fb,e0,35,58,6e,70,8b,00,05,3b,37,\
9b,38,66,ab,bb,df,40,e9,d8,80,2f,7c,50,fc,b1,b6,72,20,e4,97,aa,\
7d,62,7c,18,d7,3d,0b,00,80,b2,f1,a7,24,66,0f,5d,2f,3a,dc,ba,83,\
24,5d,1e,2b,b4,aa,ed,21,9d,85,41,43,e8,8b,d8,4a,fb,cb,7d,35,5b,\
e8,26,bc,c5,93,65,40,70,c0,39,6f,d2,b6,4e,a1,a9,96,4d,2e,c3,e4,\
4a,93,21,28,aa,32,90,4c,db,72,df,1c,fb,2b,20,d7,6c,86,bd,89,53,\
f0,e2,7a,2c,7a,c9,46,0b,ec,25,f3,bd,3a,aa,56,3c,5e,13,df,cb,df,\
1d,b9,7d,c6,e3,9c,9e,84,3f,a4,a5,ea,a1,3b,82,20,b4,cd,4a,26,1a,\
2e,ec,7d,81,e6,73,1d,a0,eb,21,dd,4c,e6,95,e9,df,93,06,99,e4,a0,\
51,fe,05,1a,91,ff,60,0e,c4,5e,9d,61,c6,df,c7,1e,7e,09,47,10,fe,\
5c,82,96,c6,24,b9,f2,74,4c,b5,ca,c2,d0,e5,81,20,98,12,34,c3,56,\
e2,68,6d,39,3f,b2,9e,18,4e,3b,87,a5,f1,63,b7,75,4f,91,fe,71,e5,\
6b,52,10,75,b2,da,fd,35,c5,5f,48,0b,3c,fb,79,37,21,b9,a9,e1,35,\
ec,b3,ad,4f,67,66,d8,2c,40,94,0d,9e,8c,b2,71,7d,00,cc,75,6b,f4,\
d3,91,8f,85,90,7a,84,f9,43,53,5a,19,84,41,d4,cd,76,ab,ce,3e,3c,\
29,4a,57,39,52,e1,f7,3a,93,84,e3,bf,90,cc,95,b4,60,68,7d,52,73,\
42,de,9c,82,4d,db,15,e6,48,7b,4a,1a,6b,9a,a2,9e,aa,25,53,0f,04,\
d0,b9,14,00,00,00,dd,52,6d,85,ed,46,a2,4a,05,c5,21,36,01,6b,89,\
45,82,3f,6b,c8

Et a coté de sa (je n'arrirve pas à copier coller) il y a des mort à caractere bizarre que je ne comprend pas et CES MOTS sont contenue dans le message !!! Jespere que tu pourras éclairé tous sa !
Merci beaucoup , A+ !