Spyware

Résolu
tetard75 -  
Bonjour,
j'ai depuis quelques jours un spyware sur mon pc.J'ai essayé de le supprimer a l'aide de spybot, de smitfraudfix etc...
Mais je n'arrive aps à m'en debarasser et mon wallpaper a été remplacé apr une alerte sur fond bleu:"Warning:spyware threat has been detected on your pc".
Le gestionnaire de staches a aussi ete desactive et window m'envoie sur windows privacy protection pour que j'achete un antivirus.
J'espere que quelqu'un pourra repondre a mon probleme
merci d'avance
Configuration: Windows XP
Internet Explorer 6.0

12 réponses

  2. tetard75 Auteur
    voila le rapport de toolscleaner:
    et encore une fois merci beaucoup!!!

    -->- Recherche:

    C:\Qoobox: trouvé !
    C:\Documents and Settings\pierrot\Bureau\ComboFix.exe: trouvé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\VirtumundoBeGone.exe: trouvé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\HijackThis.exe: trouvé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\SmitFraudFix.exe: trouvé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\SmitFraudfix: trouvé !

    ---------------------------------
    -->- Suppression:

    C:\Documents and Settings\pierrot\Bureau\ComboFix.exe: supprimé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\VirtumundoBeGone.exe: supprimé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\HijackThis.exe: supprimé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\SmitFraudFix.exe: supprimé !
    C:\Qoobox: supprimé !
    C:\Documents and Settings\pierrot\Bureau\antivirus\SmitFraudfix: supprimé !
    1. geoffrey5 Contributeur sécurité
      ca a l air bon, je ne vois plus aucunes infections..

      relance hijackthis en cliquant sur scan only et coches ces lignes :

      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

      puis tu cliques sur fix checked.

      ensuite :

      Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

      Télécharge toolscleaner sur ton Bureau : http://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe
      * Double-clique sur ToolsCleaner2.bat et laisse le travailler
      * Clique sur Recherche et laisse le scan se terminer.
      * Clique sur Suppression pour finaliser.
      * Tu peux, si tu le souhaites, te servir des Options facultatives.
      * Clique sur Quitter, pour que le rapport puisse se créer.
      * Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

      Si tu n as plus de problemes tu peux mettre résolu en haut de ton topic ;)
      1. tetard75 Auteur
        et voici le rapport hijackthis:

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 17:08:54, on 24/06/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\System32\LVCOMSX.EXE
        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
        C:\WINDOWS\system32\RUNDLL32.EXE
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\DNA\btdna.exe
        C:\Program Files\Google\Google Updater\GoogleUpdater.exe
        C:\Program Files\a-squared Free\a2service.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\system32\WgaTray.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\WINDOWS\system32\wuauclt.exe
        C:\WINDOWS\system32\wuauclt.exe
        C:\Documents and Settings\pierrot\Bureau\antivirus\HiJackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
        O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
        O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
        O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
        O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
        O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
        O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        2. geoffrey5 Contributeur sécurité
          je vérifierai ton rapport hijackthis plus tard car je dois partir...@+
          1. geoffrey5 Contributeur sécurité
            ok...fais le reste, j attends tes rapports
            1. tetard75 Auteur
              ca y'est plus de fond d'ecran etrange ni d'alertes windows ni de blocage de gestionnaire des taches.
              merci!!!!!!!!!
              et voila le rapport comme promis

              ComboFix 08-06-20.4 - pierrot 2008-06-24 16:27:24.1 - NTFSx86
              Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.512 [GMT 2:00]
              Endroit: C:\Documents and Settings\pierrot\Bureau\ComboFix.exe
              * Création d'un nouveau point de restauration

              [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
              .

              (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
              .

              C:\WINDOWS\BMf346240a.xml
              C:\WINDOWS\explorer.exe.tmp
              C:\WINDOWS\pskt.ini
              C:\WINDOWS\system32\dbdgcktx.dll
              C:\WINDOWS\system32\hljwugsf.bin
              C:\WINDOWS\system32\mcrh.tmp
              C:\WINDOWS\system32\ntrpswqu.ini
              C:\WINDOWS\system32\srCefMoq.ini
              C:\WINDOWS\system32\srCefMoq.ini2

              .
              ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
              .

              -------\Legacy_CLBDRIVER
              -------\Service_clbdriver

              ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-24 to 2008-06-24 ))))))))))))))))))))))))))))))))))))
              .

              2008-07-01 23:06 . 2001-08-28 14:00 4,224 --a------ C:\WINDOWS\system32\beep.sys
              2008-06-24 15:10 . 2008-06-24 15:10 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
              2008-06-24 15:10 . 2008-06-24 15:10 <REP> d-------- C:\Documents and Settings\pierrot\Application Data\Malwarebytes
              2008-06-24 15:10 . 2008-06-24 15:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
              2008-06-24 15:10 . 2008-06-19 17:48 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
              2008-06-24 15:10 . 2008-06-19 17:47 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
              2008-06-23 22:10 . 2008-06-23 22:10 82 --a------ C:\WINDOWS\wininit.ini
              2008-06-23 21:04 . 2008-06-23 21:04 8,192 --ahs---- C:\WINDOWS\system32\Thumbs.db
              2008-06-23 20:54 . 2008-06-23 21:14 <REP> d-------- C:\fixwareout
              2008-06-23 19:04 . 2008-06-23 19:43 <REP> d-------- C:\WINDOWS\BDOSCAN8
              2008-06-23 18:46 . 2008-06-23 18:46 <REP> d--h----- C:\WINDOWS\system32\GroupPolicy
              2008-06-23 17:34 . 2008-06-23 17:34 <REP> d-------- C:\Program Files\Lavasoft
              2008-06-23 17:33 . 2008-06-23 17:33 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
              2008-06-23 17:33 . 2008-06-23 17:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
              2008-06-23 16:39 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
              2008-06-23 16:39 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
              2008-06-23 16:39 . 2008-05-29 09:35 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
              2008-06-23 16:39 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe
              2008-06-23 16:39 . 2008-06-15 15:28 81,920 --a------ C:\WINDOWS\system32\IEDFix.C.exe
              2008-06-23 16:39 . 2008-05-23 18:21 81,920 --a------ C:\WINDOWS\system32\404Fix.exe
              2008-06-23 16:39 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
              2008-06-23 16:39 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
              2008-06-23 16:39 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
              2008-06-23 16:39 . 2008-06-23 21:34 2,510 --a------ C:\WINDOWS\system32\tmp.reg
              2008-06-19 15:07 . 2005-12-19 00:28 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
              2008-06-19 15:07 . 2005-12-19 00:28 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
              2008-06-19 15:07 . 2005-12-19 00:34 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
              2008-06-19 15:07 . 2005-12-19 00:28 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
              2008-06-19 15:07 . 2005-12-19 00:28 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
              2008-06-19 15:07 . 2008-06-19 15:56 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
              2008-06-19 15:07 . 2005-12-19 00:28 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
              2008-06-19 15:07 . 2008-06-19 15:07 <REP> d-------- C:\Documents and Settings\Administrateur
              2008-06-04 20:06 . 2008-06-04 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
              2008-05-27 21:40 . 2008-05-27 21:40 <REP> d-------- C:\Program Files\DNA
              2008-05-27 21:40 . 2008-05-27 21:40 <REP> d-------- C:\Program Files\BitTorrent
              2008-05-27 21:40 . 2008-06-24 16:31 <REP> d-------- C:\Documents and Settings\pierrot\Application Data\DNA
              2008-05-27 21:40 . 2008-07-01 23:11 <REP> d-------- C:\Documents and Settings\pierrot\Application Data\BitTorrent

              .
              (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
              .
              2008-06-23 18:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
              2008-06-19 10:59 --------- d-----w C:\Program Files\a-squared Free
              2008-06-16 22:35 --------- d-----w C:\Documents and Settings\pierrot\Application Data\dvdcss
              2008-06-03 15:20 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
              2008-05-30 20:29 --------- d-----w C:\Documents and Settings\pierrot\Application Data\OpenOffice.org2
              2008-05-27 19:41 --------- d-----w C:\Program Files\Azureus
              2008-05-27 15:36 --------- d-----w C:\Program Files\Java
              2008-05-23 17:31 --------- d-----w C:\Program Files\LimeWire
              2008-05-23 15:32 --------- d--h--w C:\Program Files\InstallShield Installation Information
              2008-05-18 19:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
              2008-05-18 14:07 --------- d-----w C:\Documents and Settings\pierrot\Application Data\skypePM
              2008-05-16 09:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe
              2008-05-07 15:16 --------- d-----w C:\Program Files\Symantec
              2008-05-07 15:16 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
              2008-05-07 14:46 --------- d-----w C:\Program Files\Alwil Software
              2008-05-07 14:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
              2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
              2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
              2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
              2008-04-25 12:21 --------- d-----w C:\Program Files\Fichiers communs\Adobe
              2007-05-20 12:43 94,080 ----a-w C:\Documents and Settings\pierrot\Application Data\ezplay.sys
              2007-05-20 12:43 87,608 ----a-w C:\Documents and Settings\pierrot\Application Data\ezpinst.exe
              2007-05-20 12:43 47,360 ----a-w C:\Documents and Settings\pierrot\Application Data\pcouffin.sys
              .

              ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              REGEDIT4
              *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-01 14:38 68856]
              "BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-05-27 21:40 289088]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "LVCOMSX"="C:\WINDOWS\System32\LVCOMSX.EXE" [2004-10-08 12:52 221184]
              "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
              "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-10-29 17:50 4620288]
              "nwiz"="nwiz.exe" [2004-10-29 17:50 921600 C:\WINDOWS\system32\nwiz.exe]
              "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-10-29 17:50 86016]
              "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-03-28 23:37 413696]
              "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
              "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]

              [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
              "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]
              "ALUAlert"="C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe" [ ]

              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
              --a------ 2004-10-13 18:24 1694208 C:\Program Files\Messenger\msmsgs.exe

              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
              "%windir%\\system32\\sessmgr.exe"=
              "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
              "C:\\Program Files\\MSN Messenger\\livecall.exe"=
              "C:\\Program Files\\iTunes\\iTunes.exe"=
              "C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
              "C:\\Program Files\\LimeWire\\LimeWire.exe"=
              "C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
              "C:\\Program Files\\DNA\\btdna.exe"=
              "C:\\Program Files\\BitTorrent\\bittorrent.exe"=
              "C:\\Program Files 2\\condition zero\\czero.exe"=

              R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
              R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
              S2 .EsetTrialReset;Eset Trial Reset;C:\WINDOWS\system32\regedt32.exe [2001-08-28 14:00]
              S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2006-09-17 14:24]
              S3 jfdcd;jfdcd;C:\DOCUME~1\pierrot\LOCALS~1\Temp\jfdcd.sys []

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
              \Shell\AutoRun\command - E:\Setup\rsrc\Autorun.exe
              \Shell\dinstall\command - E:\Directx\dxsetup.exe

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5a18b03c-c45c-11dc-bb41-0015f2d65aec}]
              \Shell\AutoRun\command - F:\stub.exe

              .
              Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
              "2008-06-24 14:38:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
              - C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
              .
              **************************************************************************

              catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2008-06-24 16:33:08
              Windows 5.1.2600 Service Pack 2 NTFS

              Balayage processus cach‚s ...

              Balayage cach‚ autostart entries ...

              Balayage des fichiers cach‚s ...

              Scan termin‚ avec succŠs
              Les fichiers cach‚s: 0

              **************************************************************************
              .
              ------------------------ Other Running Processes ------------------------
              .
              C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\a-squared Free\a2service.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\WgaTray.exe
              C:\WINDOWS\system32\rundll32.exe
              C:\Program Files\Google\Google Updater\GoogleUpdater.exe
              C:\Program Files\iPod\bin\iPodService.exe
              .
              **************************************************************************
              .
              Temps d'accomplissement: 2008-06-24 16:41:20 - machine was rebooted
              ComboFix-quarantined-files.txt 2008-06-24 14:41:16

              Pre-Run: 4,481,593,344 octets libres
              Post-Run: 4,432,084,992 octets libres

              169
              1. tetard75 Auteur
                desole j'avais oublier de supprimer la selection quand je t'ai envoyé le premier rapport.
                et au fait merci de m'aider dans mon probleme.

                Malwarebytes' Anti-Malware 1.18
                Version de la base de données: 885

                16:16:45 24/06/2008
                mbam-log-6-24-2008 (16-16-45).txt

                Type de recherche: Examen complet (C:\|)
                Eléments examinés: 115144
                Temps écoulé: 56 minute(s), 18 second(s)

                Processus mémoire infecté(s): 1
                Module(s) mémoire infecté(s): 0
                Clé(s) du Registre infectée(s): 28
                Valeur(s) du Registre infectée(s): 2
                Elément(s) de données du Registre infecté(s): 3
                Dossier(s) infecté(s): 0
                Fichier(s) infecté(s): 59

                Processus mémoire infecté(s):
                C:\WINDOWS\system32\iftuyszv.exe (Trojan.FakeAlert) -> Unloaded process successfully.

                Module(s) mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Clé(s) du Registre infectée(s):
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5321e378-ffad-4999-8c62-03ca8155f0b3} (Trojan.BHO) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00110011-4b0b-44d5-9718-90c88817369b} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{086ae192-23a6-48d6-96ec-715f53797e85} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{150fa160-130d-451f-b863-b655061432ba} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{17da0c9e-4a27-4ac5-bb75-5d24b8cdb972} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb1} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2d38a51a-23c9-48a1-a33c-48675aa2b494} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2e9caff6-30c7-4208-8807-e79d4ec6f806} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{467faeb2-5f5b-4c81-bae0-2a4752ca7f4e} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{587dbf2d-9145-4c9e-92c2-1f953da73773} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6cc1c91a-ae8b-4373-a5b4-28ba1851e39a} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{79369d5c-2903-4b7a-ade2-d5e0dee14d24} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{799a370d-5993-4887-9df7-0a4756a77d00} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{98dbbf16-ca43-4c33-be80-99e6694468a4} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a55581dc-2cdb-4089-8878-71a080b22342} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b847676d-72ac-4393-bfff-43a1eb979352} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bc97b254-b2b9-4d40-971d-78e0978f5f26} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf021f40-3e14-23a5-cba2-717765721306} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e2ddf680-9905-4dee-8c64-0a5de7fe133c} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e3eebbe8-9cab-4c76-b26a-747e25ebb4c6} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e7afff2a-1b57-49c7-bf6b-e5123394c970} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fcaddc14-bd46-408a-9842-cdbe1c6d37eb} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fd9bc004-8331-4457-b830-4759ff704c22} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

                Valeur(s) du Registre infectée(s):
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{57a52e74-004c-464b-96cc-4dfe5366ea02} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\Wallpaper (Hijack.Desktop) -> Quarantined and deleted successfully.

                Elément(s) de données du Registre infecté(s):
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: c:\windows\system32\iftuyszv.exe -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\iftuyszv.exe,) Good: (userinit.exe) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

                Dossier(s) infecté(s):
                (Aucun élément nuisible détecté)

                Fichier(s) infecté(s):
                C:\WINDOWS\system32\iftuyszv.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                C:\System Volume Information\_restore{86064834-8B2C-404A-9087-0B2DA51C1C8C}\RP668\A0110659.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\System Volume Information\_restore{86064834-8B2C-404A-9087-0B2DA51C1C8C}\RP670\A0113050.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
                C:\WINDOWS\explore.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\iexplorer.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\x.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\y.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\xxxvideo.hta (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\default.htm (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\svchost32.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\loader.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\internet.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
                C:\WINDOWS\accesss.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\astctl32.ocx (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\avpcc.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\clrssn.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\cpan.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\ctfmon32.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\ctrlpan.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\directx32.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\dnsrelay.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\editpad.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\explorer32.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\funniest.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\funny.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\gfmnaaa.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\helpcvs.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\iedll.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\inetinf.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\msconfd.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\msspi.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\mssys.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\msupdate.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\mswsc10.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\mswsc20.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\mtwirl32.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\notepad32.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\olehelp.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\qttasks.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\quicken.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\rundll16.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\rundll32.vbe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\searchword.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\sistem.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\svcinit.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\systeem.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\systemcritical.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\time.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\users32.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\waol.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\win32e.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\win64.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\winajbm.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\window.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\winmgnt.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\xplugin.dll (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
                C:\WINDOWS\system32\drivers\clbdriver.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
                C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
                1. tetard75
                  Malwarebytes' Anti-Malware 1.18
                  Version de la base de données: 885

                  16:11:17 24/06/2008
                  mbam-log-6-24-2008 (16-11-13).txt

                  Type de recherche: Examen complet (C:\|)
                  Eléments examinés: 115144
                  Temps écoulé: 56 minute(s), 18 second(s)

                  Processus mémoire infecté(s): 1
                  Module(s) mémoire infecté(s): 0
                  Clé(s) du Registre infectée(s): 28
                  Valeur(s) du Registre infectée(s): 2
                  Elément(s) de données du Registre infecté(s): 3
                  Dossier(s) infecté(s): 0
                  Fichier(s) infecté(s): 59

                  Processus mémoire infecté(s):
                  C:\WINDOWS\system32\iftuyszv.exe (Trojan.FakeAlert) -> No action taken.

                  Module(s) mémoire infecté(s):
                  (Aucun élément nuisible détecté)

                  Clé(s) du Registre infectée(s):
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5321e378-ffad-4999-8c62-03ca8155f0b3} (Trojan.BHO) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00110011-4b0b-44d5-9718-90c88817369b} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{086ae192-23a6-48d6-96ec-715f53797e85} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{150fa160-130d-451f-b863-b655061432ba} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{17da0c9e-4a27-4ac5-bb75-5d24b8cdb972} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb1} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2d38a51a-23c9-48a1-a33c-48675aa2b494} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2e9caff6-30c7-4208-8807-e79d4ec6f806} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{467faeb2-5f5b-4c81-bae0-2a4752ca7f4e} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{587dbf2d-9145-4c9e-92c2-1f953da73773} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6cc1c91a-ae8b-4373-a5b4-28ba1851e39a} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{79369d5c-2903-4b7a-ade2-d5e0dee14d24} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{799a370d-5993-4887-9df7-0a4756a77d00} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{98dbbf16-ca43-4c33-be80-99e6694468a4} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a55581dc-2cdb-4089-8878-71a080b22342} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b847676d-72ac-4393-bfff-43a1eb979352} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bc97b254-b2b9-4d40-971d-78e0978f5f26} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf021f40-3e14-23a5-cba2-717765721306} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e2ddf680-9905-4dee-8c64-0a5de7fe133c} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e3eebbe8-9cab-4c76-b26a-747e25ebb4c6} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e7afff2a-1b57-49c7-bf6b-e5123394c970} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fcaddc14-bd46-408a-9842-cdbe1c6d37eb} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fd9bc004-8331-4457-b830-4759ff704c22} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880} (Fake.Dropped.Malware) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.

                  Valeur(s) du Registre infectée(s):
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{57a52e74-004c-464b-96cc-4dfe5366ea02} (Trojan.FakeAlert) -> No action taken.
                  HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\Wallpaper (Hijack.Desktop) -> No action taken.

                  Elément(s) de données du Registre infecté(s):
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: c:\windows\system32\iftuyszv.exe -> No action taken.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\iftuyszv.exe,) Good: (userinit.exe) -> No action taken.
                  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.

                  Dossier(s) infecté(s):
                  (Aucun élément nuisible détecté)

                  Fichier(s) infecté(s):
                  C:\WINDOWS\system32\iftuyszv.exe (Trojan.FakeAlert) -> No action taken.
                  C:\System Volume Information\_restore{86064834-8B2C-404A-9087-0B2DA51C1C8C}\RP668\A0110659.exe (Trojan.Agent) -> No action taken.
                  C:\System Volume Information\_restore{86064834-8B2C-404A-9087-0B2DA51C1C8C}\RP670\A0113050.dll (Trojan.Vundo) -> No action taken.
                  C:\WINDOWS\explore.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\iexplorer.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\x.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\y.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\xxxvideo.hta (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\default.htm (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\svchost32.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\loader.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\internet.exe (Trojan.Agent) -> No action taken.
                  C:\WINDOWS\cookies.ini (Malware.Trace) -> No action taken.
                  C:\WINDOWS\accesss.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\astctl32.ocx (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\avpcc.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\clrssn.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\cpan.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\ctfmon32.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\ctrlpan.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\directx32.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\dnsrelay.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\editpad.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\explorer32.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\funniest.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\funny.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\gfmnaaa.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\helpcvs.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\iedll.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\inetinf.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\msconfd.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\msspi.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\mssys.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\msupdate.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\mswsc10.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\mswsc20.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\mtwirl32.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\notepad32.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\olehelp.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\qttasks.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\quicken.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\rundll16.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\rundll32.vbe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\searchword.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\sistem.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\svcinit.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\systeem.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\systemcritical.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\time.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\users32.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\waol.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\win32e.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\win64.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\winajbm.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\window.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\winmgnt.exe (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\xplugin.dll (Fake.Dropped.Malware) -> No action taken.
                  C:\WINDOWS\system32\drivers\clbdriver.sys (Rootkit.Agent) -> No action taken.
                  C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> No action taken.
                  1. geoffrey5 Contributeur sécurité
                    Salut !!

                    commence par ceci :

                    Télécharger sur le bureau malware bytes : http://ww.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware?thread

                    = double-clic sur mbam-setup pour lancer l'installation
                    = Installer simplement sans rien modifier
                    = Quand le programme lancé ==> faire une mise à jour ensuite cocher Exécuter un examen complet
                    = Clic Rechercher
                    = Eventuellement décocher les disque à ne pas analyser
                    = Clic Lancer l'examen
                    = En fin de scan , si infection trouvée
                    ==> Clic Afficher résultat
                    = Fermer vos applications en cours
                    = Vérifier si tout est coché et clic Supprimer la sélection

                    un rapport s'ouvre le copier et le coller dans la réponse

                    Puis redémarrer le pc !!

                    Ensuite :

                    télécharge combofix (par sUBs) ici :

                    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                    et enregistre le sur le Bureau.

                    déconnecte toi d'internet et ferme toutes tes applications.

                    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

                    double-clique sur combofix.exe et suis les instructions

                    à la fin, il va produire un rapport C:\ComboFix.txt

                    réactive ton parefeu, ton antivirus, la garde de ton antispyware

                    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

                    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                    Tu as un tutoriel complet ici :

                    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

                    ensuite :

                    ta version hijackthis n est pas à jour...suis le premier message pour le télécharger (désinstalle l autre avant)

                    une fois installé, fais un nouveau rapport
                    1. tetard75
                      Logfile of HijackThis v1.99.1
                      Scan saved at 14:06:09, on 24/06/2008
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\WINDOWS\system32\iftuyszv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\System32\LVCOMSX.EXE
                      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                      C:\WINDOWS\system32\RUNDLL32.EXE
                      C:\Program Files\QuickTime\qttask.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      C:\Program Files\DNA\btdna.exe
                      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                      C:\Program Files\a-squared Free\a2service.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      C:\WINDOWS\system32\nvsvc32.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\Program Files\iPod\bin\iPodService.exe
                      C:\WINDOWS\system32\wscntfy.exe
                      C:\WINDOWS\system32\WgaTray.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Documents and Settings\pierrot\Bureau\antivirus\HijackThis.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\iftuyszv.exe,
                      O2 - BHO: (no name) - {00110011-4b0b-44d5-9718-90c88817369b} - (no file)
                      O2 - BHO: (no name) - {086ae192-23a6-48d6-96ec-715f53797e85} - (no file)
                      O2 - BHO: (no name) - {150fa160-130d-451f-b863-b655061432ba} - (no file)
                      O2 - BHO: (no name) - {17da0c9e-4a27-4ac5-bb75-5d24b8cdb972} - (no file)
                      O2 - BHO: (no name) - {1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb1} - (no file)
                      O2 - BHO: (no name) - {1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2} - (no file)
                      O2 - BHO: (no name) - {28EAE392-110C-4B80-A318-57A19698D90E} - (no file)
                      O2 - BHO: (no name) - {2d38a51a-23c9-48a1-a33c-48675aa2b494} - (no file)
                      O2 - BHO: (no name) - {2e9caff6-30c7-4208-8807-e79d4ec6f806} - (no file)
                      O2 - BHO: (no name) - {467faeb2-5f5b-4c81-bae0-2a4752ca7f4e} - (no file)
                      O2 - BHO: (no name) - {5321e378-ffad-4999-8c62-03ca8155f0b3} - (no file)
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: (no name) - {587dbf2d-9145-4c9e-92c2-1f953da73773} - (no file)
                      O2 - BHO: (no name) - {6cc1c91a-ae8b-4373-a5b4-28ba1851e39a} - (no file)
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O2 - BHO: (no name) - {79369d5c-2903-4b7a-ade2-d5e0dee14d24} - (no file)
                      O2 - BHO: (no name) - {799a370d-5993-4887-9df7-0a4756a77d00} - (no file)
                      O2 - BHO: {747098e8-e594-084a-9544-7b72e6e7f2f7} - {7f2f7e6e-27b7-4459-a480-495e8e890747} - C:\WINDOWS\system32\dbdgcktx.dll
                      O2 - BHO: (no name) - {98dbbf16-ca43-4c33-be80-99e6694468a4} - (no file)
                      O2 - BHO: (no name) - {a55581dc-2cdb-4089-8878-71a080b22342} - (no file)
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                      O2 - BHO: (no name) - {b847676d-72ac-4393-bfff-43a1eb979352} - (no file)
                      O2 - BHO: (no name) - {bc97b254-b2b9-4d40-971d-78e0978f5f26} - (no file)
                      O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765721306} - (no file)
                      O2 - BHO: (no name) - {e2ddf680-9905-4dee-8c64-0a5de7fe133c} - (no file)
                      O2 - BHO: (no name) - {e3eebbe8-9cab-4c76-b26a-747e25ebb4c6} - (no file)
                      O2 - BHO: (no name) - {e7afff2a-1b57-49c7-bf6b-e5123394c970} - (no file)
                      O2 - BHO: (no name) - {fcaddc14-bd46-408a-9842-cdbe1c6d37eb} - (no file)
                      O2 - BHO: (no name) - {fd9bc004-8331-4457-b830-4759ff704c22} - (no file)
                      O2 - BHO: (no name) - {ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880} - (no file)
                      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
                      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
                      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
                      O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                      O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
                      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                      1. geoffrey5 Contributeur sécurité
                        Salut !!

                        Télécharge hijackthis : http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

                        -une fois installé, le renommer scan.exe
                        -Double-clic dessus
                        - Clic sur "Do a system scan and save the log"
                        - copier le rapport, le coller dans la réponse