Problème internet explorer

Bonjour,

J'ai un problème avec internet explorer: quand j'accede au gestionnaire des taches, je vois que plusieurs internexplorer.exe s'affichent, alors que je n'ai pas ouvert une seule fenetre internetexplorer ...
Voici mon rapport Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:30:21, on 13/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Documents and Settings\DOMINIQUE\Bureau\HiJackThis\scanner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.orange.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.bing.com/search?form=MO0035&q=open+set+file
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: XBTP05231 - {031F120A-BBAF-45d8-B306-375F2A6B9398} - C:\PROGRA~1\ALCOHO~1\ALCOHO~2\a120_tb.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\awtrspn.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A62011ED-56FA-4C89-8159-446EFAF50A34} - C:\WINDOWS\system32\ddayy.dll
O2 - BHO: (no name) - {C6039E6C-BDE9-4de5-BB40-768CAA584FDC} - C:\WINDOWS\system32\gujuadho.dll
O3 - Toolbar: Alcohol Soft - Alcohol 120% Toolbar - {1CE4EE89-2D5C-4361-AF3B-D902AB545381} - C:\Program Files\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll (file missing)
O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll (file missing)
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [close surf mail dupe] D:\Documents and Settings\All Users\Application Data\Tick Find Close Surf\Book City.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [CopyFast] D:\DOCUME~1\DOMINI~1\APPLIC~1\COMPKN~1\Regs flap.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - Winlogon Notify: awtrspn - awtrspn.dll (file missing)
O20 - Winlogon Notify: ddayy - C:\WINDOWS\system32\ddayy.dll

--
End of file - 6918 bytes

D'autre part, j'ai aussi un problème de pub: CID s'affiche sans cesse, je n'arrive pas à l'enlever...
Si quelqu'un pouvait m'aider à enlever tout ca, ca serait pas mal ...
Merci d'avance
Configuration: Windows XP
Internet Explorer 6.0

3 réponses

  1. Contributeur sécurité
    Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

    O2 - BHO: XBTP05231 - {031F120A-BBAF-45d8-B306-375F2A6B9398} - C:\PROGRA~1\ALCOHO~1\ALCOHO~2\a120_tb.dll (file missing)

    O3 - Toolbar: Alcohol Soft - Alcohol 120% Toolbar - {1CE4EE89-2D5C-4361-AF3B-D902AB545381} - C:\Program Files\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll (file missing)
    O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll (file missing)

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O20 - Winlogon Notify: awtrspn - awtrspn.dll (file missing)

    ______________

    tu as quel antivirus?

    si tu n'en as pas installe antivir et colle moi un rapport:

    https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)

    ou alors colle un raport d'un scan en ligne

    colle le rapport d'un scan en ligne
    avec un des suivants:

    bitdefender en ligne :
    http://www.bitdefender.fr/scan_fr/scan8/ie.html

    Panda en ligne :
    http://pandasoftware.fr
    1. Salut Jlp,
      Voici les rapports que tu m'as demandé de coller ...
      Voici le rapport VBG ...

      [01/15/2008, 19:09:38] - VirtumundoBeGone v1.5 ( "D:\Documents and Settings\DOMINIQUE\Bureau\VirtumundoBeGone.exe" )
      [01/15/2008, 19:11:17] - Detected System Information:
      [01/15/2008, 19:11:17] - Windows Version: 5.1.2600, Service Pack 2
      [01/15/2008, 19:11:17] - Current Username: DOMINIQUE (Admin)
      [01/15/2008, 19:11:17] - Windows is in NORMAL mode.
      [01/15/2008, 19:11:17] - Searching for Browser Helper Objects:
      [01/15/2008, 19:11:17] - BHO 1: {02478D38-C3F9-4efb-9B51-7695ECA05670} ()
      [01/15/2008, 19:11:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [01/15/2008, 19:11:17] - No filename found. Continuing.
      [01/15/2008, 19:11:17] - BHO 2: {031F120A-BBAF-45d8-B306-375F2A6B9398} (XBTP05231 Class)
      [01/15/2008, 19:11:17] - BHO 3: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
      [01/15/2008, 19:11:17] - BHO 4: {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} (VMN Toolbar)
      [01/15/2008, 19:11:17] - BHO 5: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
      [01/15/2008, 19:11:17] - BHO 6: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
      [01/15/2008, 19:11:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [01/15/2008, 19:11:17] - No filename found. Continuing.
      [01/15/2008, 19:11:17] - BHO 7: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
      [01/15/2008, 19:11:18] - BHO 8: {99B9A5DD-30C2-4E73-A848-BDC8F3F4DBC6} ()
      [01/15/2008, 19:11:18] - WARNING: BHO has no default name. Checking for Winlogon reference.
      [01/15/2008, 19:11:18] - Checking for HKLM\...\Winlogon\Notify\ddayy
      [01/15/2008, 19:11:18] - Key not found: HKLM\...\Winlogon\Notify\ddayy, continuing.
      [01/15/2008, 19:11:18] - Finished Searching Browser Helper Objects
      [01/15/2008, 19:11:18] - Finishing up...
      [01/15/2008, 19:11:18] - Nothing found! Exiting...

      Voici le rapport combofix ...

      ComboFix 08-01-15.4 - DOMINIQUE 2008-01-15 19:21:24.1 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.551 [GMT 1:00]
      Running from: D:\Documents and Settings\DOMINIQUE\Bureau\ComboFix.exe
      * Created a new restore point
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\WINDOWS\cookies.ini
      C:\WINDOWS\system32\ddayy.dll
      C:\WINDOWS\system32\mcrh.tmp
      D:\Documents and Settings\DOMINIQUE\Application Data\macromedia\Flash Player\#SharedObjects\NTCYL4EA\iforex.com
      D:\Documents and Settings\DOMINIQUE\Application Data\macromedia\Flash Player\#SharedObjects\NTCYL4EA\iforex.com\Emerp\Events\flash_object.swf\user_data.sol
      D:\Documents and Settings\DOMINIQUE\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com
      D:\Documents and Settings\DOMINIQUE\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com\settings.sol

      .
      ((((((((((((((((((((((((((((( Fichiers créés 2007-12-15 to 2008-01-15 ))))))))))))))))))))))))))))))))))))
      .

      2008-01-15 19:18 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
      2008-01-15 18:15 . 2008-01-15 18:15 <REP> d----c--- C:\VundoFix Backups
      2008-01-07 15:29 . 2008-01-07 15:29 <REP> d-------- C:\Program Files\comp knob more
      2007-12-31 18:28 . 2007-12-31 18:28 244 --ah-c--- C:\sqmnoopt00.sqm
      2007-12-31 18:28 . 2007-12-31 18:28 232 --ah-c--- C:\sqmdata00.sqm
      2007-12-31 14:51 . 2007-12-31 14:59 <REP> d-------- D:\Documents and Settings\DOMINIQUE\Application Data\DivX
      2007-12-31 11:12 . 2007-11-29 23:30 129,784 --------- C:\WINDOWS\system32\pxafs.dll
      2007-12-31 11:12 . 2007-11-29 23:30 120,056 --------- C:\WINDOWS\system32\pxcpyi64.exe
      2007-12-31 11:12 . 2007-11-29 23:30 118,520 --------- C:\WINDOWS\system32\pxinsi64.exe
      2007-12-31 11:12 . 2007-11-29 23:30 9,464 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
      2007-12-31 11:12 . 2007-11-29 23:30 9,336 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
      2007-12-31 10:29 . 2007-12-31 10:29 14 --a------ C:\WINDOWS\system32\SystemInfo32.sys
      2007-12-31 10:28 . 2007-12-31 10:28 <REP> d-------- D:\Documents and Settings\All Users\Application Data\DVD X Studios
      2007-12-31 10:28 . 2008-01-04 16:59 <REP> d-------- C:\Program Files\DVD X Player 4.1 Professionnel
      2007-12-29 15:06 . 2007-12-31 05:56 <REP> d-------- D:\Documents and Settings\DOMINIQUE\Shared
      2007-12-29 15:06 . 2007-12-29 15:47 <REP> d-------- D:\Documents and Settings\DOMINIQUE\Incomplete
      2007-12-29 15:05 . 2007-12-31 08:31 <REP> d-------- D:\Documents and Settings\DOMINIQUE\Application Data\LimeWire
      2007-12-26 18:13 . 2007-12-26 18:29 <REP> d-------- D:\Documents and Settings\ESTELLE\Application Data\comp knob more
      2007-12-26 18:07 . 2007-12-26 18:07 <REP> d-------- D:\Documents and Settings\ESTELLE\Application Data\Teleca
      2007-12-26 18:07 . 2007-12-26 18:07 <REP> d-------- D:\Documents and Settings\ESTELLE\Application Data\Sony Ericsson
      2007-12-23 14:15 . 2007-12-23 14:15 <REP> d-------- C:\WINDOWS\system32\AlertModule
      2007-12-18 19:55 . 2007-12-18 19:55 <REP> d-------- C:\Program Files\Sony
      2007-12-16 00:22 . 2007-12-16 00:22 <REP> d-------- D:\Documents and Settings\DOMINIQUE\Application Data\Viewpoint

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-01-15 17:47 --------- d-----w C:\Program Files\Wanadoo
      2008-01-15 17:47 --------- d-----w C:\Program Files\Steam
      2008-01-15 17:15 --------- d-----w C:\Program Files\MSN Messenger
      2008-01-14 20:35 --------- d-----w C:\Program Files\eMule
      2008-01-13 19:36 --------- d-----w D:\Documents and Settings\DOMINIQUE\Application Data\vmntoolbar
      2008-01-07 14:30 --------- d-----w D:\Documents and Settings\DOMINIQUE\Application Data\comp knob more
      2008-01-07 14:29 --------- d-----w D:\Documents and Settings\All Users\Application Data\Tick Find Close Surf
      2007-12-31 10:12 --------- d-----w C:\Program Files\DivX
      2007-12-13 19:21 --------- d-----w D:\Documents and Settings\DOMINIQUE\Application Data\Teleca
      2007-12-13 19:11 --------- d-----w C:\Program Files\Fichiers communs\Teleca Shared
      2007-12-13 19:09 --------- d-----w D:\Documents and Settings\DOMINIQUE\Application Data\Sony Ericsson
      2007-12-13 19:09 --------- d-----w D:\Documents and Settings\All Users\Application Data\Teleca
      2007-12-13 19:09 --------- d-----w D:\Documents and Settings\All Users\Application Data\Sony Ericsson
      2007-12-13 19:08 --------- d-----w C:\Program Files\Sony Ericsson
      2007-12-13 19:08 --------- d-----w C:\Program Files\Fichiers communs\Sony Ericsson Shared
      2007-12-04 01:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
      2007-12-04 01:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
      2007-12-04 01:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
      2007-12-04 01:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
      2007-11-29 22:30 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
      2007-11-29 22:30 43,528 ------w C:\WINDOWS\system32\drivers\pxhelp20.sys
      2007-11-29 22:30 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
      2007-11-29 22:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
      2007-11-29 22:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
      2007-11-29 22:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
      2007-11-29 22:28 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
      2007-11-28 21:55 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
      2007-11-28 21:53 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
      2007-11-28 21:53 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
      2007-11-28 21:53 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
      2007-11-28 21:53 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
      2007-11-28 21:53 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
      2007-11-28 21:53 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
      2007-11-28 21:52 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
      2007-11-25 12:52 --------- d-----w D:\Documents and Settings\CLEMENT\Application Data\comp knob more
      2007-11-23 07:44 --------- d-----w C:\Program Files\Yahoo!
      2007-11-22 21:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2007-11-22 21:56 --------- d-----w C:\Program Files\Logitech
      2007-11-14 07:28 450,560 ------w C:\WINDOWS\system32\dllcache\jscript.dll
      2007-11-07 09:28 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll
      2007-11-07 09:28 728,576 ------w C:\WINDOWS\system32\dllcache\lsasrv.dll
      2007-10-30 17:20 360,064 ------w C:\WINDOWS\system32\dllcache\tcpip.sys
      2007-10-30 10:18 3,079,680 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
      2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
      2007-10-29 22:43 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll
      2007-10-29 22:23 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
      2007-10-25 16:56 8,510,976 ------w C:\WINDOWS\system32\dllcache\shell32.dll
      2007-10-20 05:01 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
      2007-10-20 05:01 227,328 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll
      2007-06-26 09:10 239,715 ----a-w D:\Documents and Settings\DOMINIQUE\services.exe
      2007-02-08 21:22 14,993,976 ----a-w C:\Program Files\GoogleEarthWin.exe
      2006-12-11 21:16 3,534,076 ----a-w C:\Program Files\eMule0.47c-Installer.exe
      2006-05-21 02:16 370,176 ----a-w C:\Program Files\samp.exe
      .

      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Steam"="C:\Program Files\Steam\Steam.exe" [2007-11-30 09:22 1266936]
      "CopyFast"="D:\DOCUME~1\DOMINI~1\APPLIC~1\COMPKN~1\Regs flap.exe" [2008-01-07 15:29 410624]
      "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 14:50 122880]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-10-21 14:21 98304]
      "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-10-21 14:26 180269]
      "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-05-28 10:14 528384]
      "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49 20480]

      Et enfin voici mon rapport Hijackthis... visiblement je n'ai plus de fenetre CID qui s'ouvrent ! Merci !

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:28:39, on 15/01/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
      C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
      C:\PROGRA~1\Wanadoo\ComComp.exe
      C:\PROGRA~1\Wanadoo\Toaster.exe
      C:\PROGRA~1\Wanadoo\Inactivity.exe
      C:\PROGRA~1\Wanadoo\PollingModule.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
      C:\PROGRA~1\Wanadoo\Watch.exe
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\WINDOWS\explorer.exe
      C:\WINDOWS\system32\notepad.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.bing.com/search?form=MO0035&q=open+set+file
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      O2 - BHO: XBTP05231 - {031F120A-BBAF-45d8-B306-375F2A6B9398} - C:\PROGRA~1\ALCOHO~1\ALCOHO~2\a120_tb.dll (file missing)
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O3 - Toolbar: Alcohol Soft - Alcohol 120% Toolbar - {1CE4EE89-2D5C-4361-AF3B-D902AB545381} - C:\Program Files\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll (file missing)
      O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll (file missing)
      O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
      O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
      O4 - HKLM\..\Run: [close surf mail dupe] D:\Documents and Settings\All Users\Application Data\Tick Find Close Surf\Book City.exe
      O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
      O4 - HKCU\..\Run: [CopyFast] D:\DOCUME~1\DOMINI~1\APPLIC~1\COMPKN~1\Regs flap.exe
      O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
      O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
      O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
      O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O20 - Winlogon Notify: awtrspn - awtrspn.dll (file missing)
      1. Contributeur sécurité
        slt,

        dans DEMARRER puis PANNEAU DE CONFIGURATION puis AJOUT /SUPPRESSION DE PROGRAMME

        cherche quelque chose comme CID et msn plus et desinstalle les
        si tu doit réinstaller msn plus fait le sans les sponsor surtout

        __________________________

        scan avec vundofix (colle le rapport)

        Téléchargez VundoFix -> http://www.atribune.org/ccount/click.php?id=4

        Double cliquez VundoFix.exe pour l'exécuter.
        Quand VundoFix s'ouvre, cliquez sur le bouton Scan for Vundo.
        Une fois le scan fini, cliquez sur le bouton Remove Vundo.
        Vous recevrez un avertissement vous demandant si vous voulez effacer ces
        fichiers répondez en cliquant sur YES
        Une fois que vous avez cliqué yes, votre bureau deviendra vide au moment où il
        enlève Vundo.

        Quand c'est fini, il vous sera demandé de redémarrer votre ordinateur, cliquez
        OK.

        _____________________________
        puis :

        virtumondebegone (colle le rapport)

        http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

        _______________________________

        combofix (colle le rapport)
        http://download.bleepingcomputer.com/sUBs/ComboFix.exe
        _______________________________
        recolle un rapport hijackhtis et dis tes soucis