Ordi infecté par

Bonjour à tous,

Depuis quelques jours, Avast détecte sur mon poste win32.
J'ai fait un peu le tour des forums à ce sujet et j'ai lancé un Ccleaner et un AVG anti-spyware en mode sans échec.
J'ai le rapport de AVG et aussi un rapport Hijackthis seulement je suis personnellement incapable d'en tirer des conclusions et donc de résoudre le problème.
Je rêve donc qu'une ame charitable me donne quelques conseils.

Merci beaucoup pour votre solidarité.

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 12:23:15 08/04/2008

+ Résultat de l'analyse:

[828] VM_13140000 -> Backdoor.Bandok.bd : Nettoyé et sauvegardé (mise en quarantaine).
[972] VM_13140000 -> Backdoor.Bandok.bd : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{1609C2F3-A122-443D-A28F-F4E4600BFFAF}\RP412\A0087129.dll -> Downloader.Agent.lxt : Nettoyé et sauvegardé (mise en quarantaine).
E:\System Volume Information\_restore{1609C2F3-A122-443D-A28F-F4E4600BFFAF}\RP387\A0070767.exe -> Not-A-Virus.Downloader.Win32.AdvancedCleaner.c : Nettoyé et sauvegardé (mise en quarantaine).
:mozilla.136:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.181:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.188:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.199:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.34:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.35:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.36:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.37:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.132:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
:mozilla.33:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.69:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.38:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.39:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.40:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.85:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.185:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.86:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.87:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.88:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.83:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.180:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.124:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.125:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.126:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.127:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.10:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.12:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.13:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.9:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.21:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.22:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.23:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.24:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
:mozilla.172:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.46:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.47:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.48:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.49:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.50:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.51:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.52:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.53:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.73:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.74:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.75:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.76:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.134:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.78:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.81:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.82:C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\14zm4h1w.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

Fin du rapport

------------------------------------------------------------------------------------------------------------------------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:27:25, on 08/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {C5AF49A2-94F3-42BD-F434-2604812C897D} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Alcohol Toolbar - {DC59A0D4-0ED6-4A73-B356-1B977F2A7725} - C:\Program Files\Alcohol Toolbar\v3.0.0.0\AudioGizmo_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1142969704\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [*aliceeadsl] C:\WINDOWS\system32\aliceeadsl.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [aliceeadsl] C:\WINDOWS\system32\aliceeadsl.exe
O4 - HKCU\..\Policies\Explorer\Run: [Windows Security Tool] WinSecure.exe
O4 - HKCU\..\Policies\Explorer\Run: [NTSpool] NTSpool.exe
O4 - HKCU\..\Policies\Explorer\Run: [NT Security Service] NTSecurity.exe
O4 - HKCU\..\Policies\Explorer\Run: [Printing Utilities] spolsv.exe
O4 - HKCU\..\Policies\Explorer\Run: [Windows Security Check] MicroSecure.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: HPAiODevice(hp psc 700 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &eBay Search - res://E:\Programmes Nicolas\barre outil ebay\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01347765-1965-426B-91A4-AA6BB342B9A3} - http://www.1-click.com/common/files/installer-hidden-test.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/fr/check/qdiagh.cab?326
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: crehcjid - crehcjid.dll (file missing)
O20 - Winlogon Notify: h @ - h @ (file missing)
O22 - SharedTaskScheduler: jhsf8d984jief8dsfus98jkefn - {C5AF49A2-94F3-42BD-F434-2604812C897D} - (no file)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 7011 bytes

Configuration: Windows XP
Internet Explorer 7.0