comment supprimer : "win32:Trojan-gen "

Question

Bonjour,
voila j'ai chopé un virus"win32:Trojan-gen" , mais avast n'arrive pas à le supprimer comment faire ??
Quelqu'un peut il m'aidez svp?
Voici l'évaluation du log de "hijackthis"
merci d avance

Logfile of HijackThis v1.99.1
Scan saved at 16:04:54, on 10/08/2008
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\WService.EXE
C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\pspvideo9\pspVideo9.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\braviax.exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Apps\ActivBoard
hksrv.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\System32\DRIVERS\WtSrv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\NOEMIE\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Microsoft Update Machine] wuamgrd.exe
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [braviax] C:\WINDOWS\System32\braviax.exe
O4 - HKLM\..\RunServices: [Microsoft Update Machine] wuamgrd.exe
O4 - HKCU\..\Run: [Update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup
O4 - HKCU\..\Run: [PreAnnotate] C:\WINDOWS\System32\PreAnntt.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [four wait] C:\DOCUME~1\NOEMIE\APPLIC~1\AntiTons\Surf Mags.exe
O4 - HKCU\..\Run: [braviax] C:\WINDOWS\System32\braviax.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=www.packardbell.fr/center
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5054F860-748D-4840-B7B4-DDDB428421AF} - http://ipdata.phoneaccess.com/dialer/1/cab/fr/phoneaccess.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {88C51E90-8E9C-4C96-8A45-574D88B63FAF} - http://acceso.masminutos.com/laaplicacion.cab
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: bw+0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: Web Event Logger - {79FEACFF-FFCE-815E-A900-316290B5B738} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard
hksrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\DRIVERS\WtSrv.exe

kduc · Answer

Sallut,

(si ce n’ est déjà fait) Télécharge CCleaner :
http://www.filehippo.com/download_ccleaner.html
("Download Latest Version", sur la droite) et laisse-toi guider.
Ne coche pas >> "Ajouter la barre d' outils Yahoo".
Laisse-le s’ installer tel que …

Affiche les fichiers et dossiers cachés … 
Pour ce faire, tu vas dans un dossier, par ex. "Mes Images". 
Ensuite, clique sur > Outils > Options des dossiers ...  
clique sur l' onglet « Affichage » et ... 
coche --> Afficher les fichiers et dossiers cachés 
décoche > Masquer les extensions des fichiers dont le type est connu 
décoche > Masquer les fichiers protégés du système d' exploitation (recommandé). 
« Appliquer » et « OK ».

Ensuite, va dans > Démarrer > Poste de travail > C:\

et supprime le(s) fichier(s)/dossier(s)/programme(s) en [s]gras/s, ci-dessous, si tu le(s) trouves.

C:\WINDOWS\System32\braviax.exe <--

Vide la Corbeille. 

Remet les fichiers et dossiers cachés comme tu les as trouvés !

Lance CCleaner ...
Clique sur > Analyse > Lancer le nettoyage, puis sur OK dans la fenêtre qui s' affiche.  
(re)Lance le nettoyage et (re)confirme par OK. 

---------
Fais un scan avec Malwarebytes Anti-malware
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam
... et poste le rapport.

PS : pour supprimer les infections, choisis l'option Supprimer la sélection
ou clique sur le bouton Remove Selected (si tu fais avec la version anglaise) en bas à gauche.

---------
Télécharge LopxpMH2
http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip 
Enregistrer la cible ci-dessus (du lien) sous... et enregistre-le sur 
ton bureau. 
Dézippe-le (clic droit >> Extraire ici) et double clique sur lopxpMH.bat 
(ou lopxpMH2).

Poste le contenu du rapport qui va s'ouvrir.

51agost · Answer

voila le rapport sur lopR:


   --------------------\  Lop S&D 4.2.2-6  XP/Vista

   [ Windows XP (NT 5.1) Build 2600 ]
   [ USER : NOEMIE ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 10/08/2008 | 16:36:33,24 ] [ PC : SN4733787192 ]
   [ MAJ : 09-08-2008 | 21:15 ]
 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [09/08/2008|14:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast
   [23/10/2002|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [23/10/2002|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [22/10/2006|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [22/10/2006|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [13/01/2006|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Anti-Virus Personal
   [05/02/2006|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [05/01/2007|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [04/04/2004|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
   [05/06/2004|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NFS Underground
   [23/10/2006|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [23/10/2002|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [22/10/2006|10:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [28/12/2003|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation

   [23/10/2002|20:52] C:\DOCUME~1\AURELIE\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\AURELIE\APPLIC~1\desktop.ini
   [26/11/2003|21:44] C:\DOCUME~1\AURELIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [29/11/2003|15:03] C:\DOCUME~1\AURELIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [30/04/2003|21:42] C:\DOCUME~1\AURELIE\APPLIC~1\GDIPFONTCACHEV1.DAT
   [15/12/2002|18:16] C:\DOCUME~1\AURELIE\APPLIC~1\Help
   [23/10/2002|20:44] C:\DOCUME~1\AURELIE\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\AURELIE\APPLIC~1\InterTrust
   [14/02/2008|00:05] C:\DOCUME~1\AURELIE\APPLIC~1\Microsoft
   [24/02/2004|16:19] C:\DOCUME~1\AURELIE\APPLIC~1\Sony Corporation
   [22/04/2003|18:48] C:\DOCUME~1\AURELIE\APPLIC~1\VERITAS

   [23/10/2002|20:52] C:\DOCUME~1\AURELIEN\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\AURELIEN\APPLIC~1\desktop.ini
   [27/11/2003|16:11] C:\DOCUME~1\AURELIEN\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [27/11/2003|16:31] C:\DOCUME~1\AURELIEN\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [27/11/2003|16:23] C:\DOCUME~1\AURELIEN\APPLIC~1\GDIPFONTCACHEV1.DAT
   [19/04/2004|20:16] C:\DOCUME~1\AURELIEN\APPLIC~1\Help
   [31/05/2005|10:43] C:\DOCUME~1\AURELIEN\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\AURELIEN\APPLIC~1\InterTrust
   [25/12/2005|18:03] C:\DOCUME~1\AURELIEN\APPLIC~1\Lavasoft
   [20/12/2005|23:42] C:\DOCUME~1\AURELIEN\APPLIC~1\Macromedia
   [24/02/2008|11:52] C:\DOCUME~1\AURELIEN\APPLIC~1\Microsoft
   [17/08/2004|10:47] C:\DOCUME~1\AURELIEN\APPLIC~1\Sony Corporation
   [16/08/2003|13:34] C:\DOCUME~1\AURELIEN\APPLIC~1\VERITAS

   [23/10/2002|20:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [23/10/2002|20:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
   [23/10/2002|20:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [06/04/2003|10:32] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [31/05/2005|10:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
   [23/10/2002|20:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [17/04/2008|09:32] C:\DOCUME~1\NOEMIE\APPLIC~1\Adobe
   [09/08/2008|14:27] C:\DOCUME~1\NOEMIE\APPLIC~1\AntiTons
   [23/10/2002|20:33] C:\DOCUME~1\NOEMIE\APPLIC~1\desktop.ini
   [20/03/2005|12:06] C:\DOCUME~1\NOEMIE\APPLIC~1\DIMAGE
   [22/11/2003|15:58] C:\DOCUME~1\NOEMIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [22/11/2003|16:00] C:\DOCUME~1\NOEMIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [23/10/2006|11:01] C:\DOCUME~1\NOEMIE\APPLIC~1\FotoWire
   [18/11/2006|15:59] C:\DOCUME~1\NOEMIE\APPLIC~1\GDIPFONTCACHEV1.DAT
   [18/12/2002|18:32] C:\DOCUME~1\NOEMIE\APPLIC~1\Help
   [09/11/2007|16:49] C:\DOCUME~1\NOEMIE\APPLIC~1\Hewlett-PackardHP Photosmart 2570 series1161506868_API.log
   [09/11/2007|16:49] C:\DOCUME~1\NOEMIE\APPLIC~1\Hewlett-PackardHP Photosmart 2570 series1161506868_PROTOCOL.log
   [09/11/2007|16:49] C:\DOCUME~1\NOEMIE\APPLIC~1\Hewlett-PackardHP Photosmart 2570 series1161506868_UI.log
   [09/11/2007|16:45] C:\DOCUME~1\NOEMIE\APPLIC~1\HP
   [23/10/2002|20:44] C:\DOCUME~1\NOEMIE\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\NOEMIE\APPLIC~1\InterTrust
   [27/12/2005|17:29] C:\DOCUME~1\NOEMIE\APPLIC~1\Lavasoft
   [01/06/2005|15:26] C:\DOCUME~1\NOEMIE\APPLIC~1\Macromedia
   [22/10/2006|10:53] C:\DOCUME~1\NOEMIE\APPLIC~1\Microsoft
   [06/08/2005|23:50] C:\DOCUME~1\NOEMIE\APPLIC~1\MP3Chansons
   [10/08/2008|11:37] C:\DOCUME~1\NOEMIE\APPLIC~1\MSN6
   [28/12/2003|18:10] C:\DOCUME~1\NOEMIE\APPLIC~1\Sony Corporation
   [30/03/2003|21:09] C:\DOCUME~1\NOEMIE\APPLIC~1\VERITAS
   [31/03/2006|18:09] C:\DOCUME~1\NOEMIE\APPLIC~1\vlc
   [24/02/2006|19:00] C:\DOCUME~1\NOEMIE\APPLIC~1\XnView

   [23/10/2002|20:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
   [23/10/2002|20:44] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\InterTrust
   [23/10/2002|20:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft

   [15/07/2008|18:22] C:\DOCUME~1\sylvie\APPLIC~1\Adobe
   [15/07/2008|18:26] C:\DOCUME~1\sylvie\APPLIC~1\AntiTons
   [31/12/2005|19:43] C:\DOCUME~1\sylvie\APPLIC~1\Babylon
   [23/10/2002|20:33] C:\DOCUME~1\sylvie\APPLIC~1\desktop.ini
   [22/11/2003|19:46] C:\DOCUME~1\sylvie\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [23/11/2003|11:37] C:\DOCUME~1\sylvie\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [13/05/2005|17:28] C:\DOCUME~1\sylvie\APPLIC~1\GDIPFONTCACHEV1.DAT
   [04/04/2004|12:14] C:\DOCUME~1\sylvie\APPLIC~1\Help
   [23/10/2002|20:44] C:\DOCUME~1\sylvie\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\sylvie\APPLIC~1\InterTrust
   [04/08/2003|11:08] C:\DOCUME~1\sylvie\APPLIC~1\Macromedia
   [12/02/2007|09:52] C:\DOCUME~1\sylvie\APPLIC~1\Microsoft
   [14/02/2005|17:41] C:\DOCUME~1\sylvie\APPLIC~1\MSN6
   [27/01/2004|16:12] C:\DOCUME~1\sylvie\APPLIC~1\Sony Corporation
   [24/08/2003|17:17] C:\DOCUME~1\sylvie\APPLIC~1\VERITAS
 
   --------------------\  Tâches planifiées dans C:\WINDOWS\tasks

   [10/08/2008 16:00][--a------] C:\WINDOWS\tasks\HPpromotions journeysoftware.job
   [10/08/2008 16:32][--ah-----] C:\WINDOWS\tasks\SA.DAT
   [28/08/2001 12:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

   --------------------\  MsgPlus SPONSOR INSTALLED !

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]

   --------------------\  Listing des dossiers dans C:\Program Files

   [22/03/2003|17:40] C:\Program Files\Adobe
   [13/02/2008|22:46] C:\Program Files\Ahead
   [05/08/2005|19:37] C:\Program Files\Alexis The Last Fighter
   [29/12/2006|13:01] C:\Program Files\Alwil Software
   [14/12/2002|19:59] C:\Program Files\AND
   [21/06/2008|10:20] C:\Program Files\AntiTons
   [22/11/2004|20:30] C:\Program Files\Astral Entertainment
   [23/10/2002|20:55] C:\Program Files\Audioneer
   [05/05/2007|20:47] C:\Program Files\AviSynth 2.5
   [25/12/2007|20:15] C:\Program Files\AVS4YOU
   [23/10/2002|20:54] C:\Program Files\BackWeb
   [05/08/2005|19:40] C:\Program Files\BigJig
   [14/03/2005|16:35] C:\Program Files\Borland
   [02/01/2005|13:22] C:\Program Files\Canon
   [03/03/2006|12:54] C:\Program Files\CCleaner
   [09/08/2008|17:01] C:\Program Files\Circle Developement
   [05/05/2007|20:31] C:\Program Files\Common Files
   [23/10/2002|20:38] C:\Program Files\ComPlus Applications
   [05/08/2005|19:42] C:\Program Files\Crossword SOS
   [23/10/2002|21:04] C:\Program Files\CyberLink
   [14/03/2005|15:54] C:\Program Files\Derelict Software
   [23/12/2002|16:05] C:\Program Files\DesignPro 2000
   [20/03/2005|12:04] C:\Program Files\DiMAGE Viewer
   [15/12/2002|13:06] C:\Program Files\directx
   [13/02/2008|22:43] C:\Program Files\Disney Interactive
   [14/02/2008|00:07] C:\Program Files\DivX
   [05/08/2005|19:43] C:\Program Files\Domino Dilemma
   [21/10/2006|18:38] C:\Program Files\EHMINSTALL
   [29/03/2005|16:22] C:\Program Files\Eidos Interactive
   [13/02/2008|22:43] C:\Program Files\eMule
   [23/10/2002|20:54] C:\Program Files\eSkin
   [29/10/2006|10:48] C:\Program Files\EZFace
   [06/08/2005|21:35] C:\Program Files\Fakeanoid
   [13/02/2008|22:44] C:\Program Files\Fichiers communs
   [05/08/2005|19:44] C:\Program Files\Funny Figures Game v3.0
   [06/08/2005|21:09] C:\Program Files\GJGames
   [15/12/2002|14:55] C:\Program Files\greenstreet
   [14/12/2002|19:13] C:\Program Files\GTInteractive
   [23/10/2002|21:00] C:\Program Files\HandyBits
   [07/11/2005|21:34] C:\Program Files\Hemera Products
   [22/10/2006|10:40] C:\Program Files\Hewlett-Packard
   [22/10/2006|10:47] C:\Program Files\HP
   [13/02/2008|22:44] C:\Program Files\IKEA HomePlanner
   [13/02/2008|22:43] C:\Program Files\InstallShield Installation Information
   [27/05/2008|18:43] C:\Program Files\Internet Explorer
   [14/12/2002|19:54] C:\Program Files\JavaSoft
   [10/05/2006|14:25] C:\Program Files\KODAK
   [06/08/2005|20:59] C:\Program Files\KPI Games
   [25/12/2005|18:02] C:\Program Files\Lavasoft
   [23/10/2006|11:01] C:\Program Files\Logitech
   [06/08/2005|20:58] C:\Program Files\LottoWhiz 2000
   [11/11/2005|14:58] C:\Program Files\Messenger
   [14/04/2008|09:52] C:\Program Files\Messenger Plus! Live
   [02/10/2006|20:16] C:\Program Files\MessengerPlus! 3
   [07/05/2007|17:20] C:\Program Files\Microsoft ActiveSync
   [23/10/2002|20:41] C:\Program Files\microsoft frontpage
   [22/03/2003|17:40] C:\Program Files\Microsoft Games
   [23/10/2002|21:00] C:\Program Files\Microsoft Money
   [23/10/2002|20:58] C:\Program Files\Microsoft Office
   [23/10/2002|20:58] C:\Program Files\Microsoft Visual Studio
   [26/12/2006|10:54] C:\Program Files\MioNet
   [05/01/2006|10:17] C:\Program Files\Montorgueil
   [23/10/2002|20:39] C:\Program Files\Movie Maker
   [23/10/2002|20:37] C:\Program Files\MSN
   [11/02/2005|15:24] C:\Program Files\MSN Apps
   [23/10/2002|20:37] C:\Program Files\MSN Gaming Zone
   [14/04/2008|09:52] C:\Program Files\MSN Messenger
   [23/10/2006|15:01] C:\Program Files\MSXML 4.0
   [05/05/2006|15:22] C:\Program Files\NetMeeting
   [25/02/2007|10:32] C:\Program Files\OrangeHSS
   [23/10/2002|20:38] C:\Program Files\Outlook Express
   [06/08/2005|20:54] C:\Program Files\PacBomber
   [06/08/2005|21:38] C:\Program Files\PaintDefense
   [06/08/2005|20:53] C:\Program Files\Passage3
   [23/10/2002|21:05] C:\Program Files\PenSuite
   [20/06/2006|18:49] C:\Program Files\PopCap Games
   [25/12/2006|14:24] C:\Program Files\pspvideo9
   [14/02/2008|00:11] C:\Program Files\QuickTime
   [23/10/2002|20:56] C:\Program Files\Real
   [27/01/2004|10:50] C:\Program Files\Red Storm Entertainment
   [09/03/2007|19:07] C:\Program Files\SAGEM
   [23/10/2002|20:53] C:\Program Files\SBApps
   [05/08/2005|19:50] C:\Program Files\Scramble
   [09/03/2007|18:51] C:\Program Files\Securitoo
   [05/08/2005|19:50] C:\Program Files\Serious Backgammon
   [23/10/2002|20:37] C:\Program Files\Services en ligne
   [03/01/2003|19:19] C:\Program Files\Sierra On-Line
   [28/12/2003|18:06] C:\Program Files\Sony
   [28/12/2005|16:42] C:\Program Files\SYSTRAN
   [18/08/2004|18:26] C:\Program Files\Thumbs.db
   [02/10/2005|14:38] C:\Program Files\Toshiba
   [14/03/2005|16:43] C:\Program Files\Twilight
   [22/11/2004|20:58] C:\Program Files\Twinno Software
   [14/12/2002|19:07] C:\Program Files\Ulead Systems
   [23/10/2002|20:44] C:\Program Files\Uninstall Information
   [07/05/2007|17:19] C:\Program Files\ViaMichelin
   [31/03/2006|18:08] C:\Program Files\VideoLAN
   [23/10/2002|21:01] C:\Program Files\Virtual CD v4 SDK
   [25/02/2007|10:20] C:\Program Files\Wanadoo
   [03/02/2006|19:34] C:\Program Files\Wanadoo Jeux
   [22/11/2004|20:34] C:\Program Files\WarnerBrosOnline
   [14/02/2008|20:00] C:\Program Files\Windows Live
   [21/04/2006|12:25] C:\Program Files\Windows Media Player
   [23/10/2002|20:37] C:\Program Files\Windows NT
   [29/04/2006|11:07] C:\Program Files\WindowsUpdate
   [20/06/2006|18:51] C:\Program Files\WinRAR
   [23/10/2002|20:41] C:\Program Files\xerox
   [14/02/2008|00:11] C:\Program Files\XnView
   [03/03/2006|12:54] C:\Program Files\Yahoo!
   [21/03/2007|21:15] C:\Program Files\Zuma Deluxe

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [22/03/2003|17:40] C:\Program Files\Fichiers communs\Adobe
   [25/12/2007|20:15] C:\Program Files\Fichiers communs\AVSMedia
   [23/10/2002|20:58] C:\Program Files\Fichiers communs\Designer
   [24/03/2004|17:44] C:\Program Files\Fichiers communs\DirectX
   [22/10/2006|10:08] C:\Program Files\Fichiers communs\EPSON
   [23/04/2006|12:07] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
   [23/10/2006|11:01] C:\Program Files\Fichiers communs\FotoWire
   [25/02/2007|10:20] C:\Program Files\Fichiers communs\France Telecom
   [15/12/2002|14:55] C:\Program Files\Fichiers communs\greenstreet
   [22/11/2003|15:57] C:\Program Files\Fichiers communs\Hewlett-Packard
   [22/10/2006|10:44] C:\Program Files\Fichiers communs\HP
   [20/03/2005|12:05] C:\Program Files\Fichiers communs\InstallShield
   [23/10/2006|10:59] C:\Program Files\Fichiers communs\Logitech
   [16/09/2007|15:02] C:\Program Files\Fichiers communs\Microsoft Shared
   [23/10/2002|20:38] C:\Program Files\Fichiers communs\MSSoap
   [23/10/2002|20:33] C:\Program Files\Fichiers communs\ODBC
   [18/11/2005|18:46] C:\Program Files\Fichiers communs\Panda Software
   [23/10/2002|20:56] C:\Program Files\Fichiers communs\Real
   [23/10/2002|20:39] C:\Program Files\Fichiers communs\Services
   [22/10/2006|10:45] C:\Program Files\Fichiers communs\Sonic Shared
   [28/12/2003|18:04] C:\Program Files\Fichiers communs\Sony Shared
   [23/10/2002|20:33] C:\Program Files\Fichiers communs\SpeechEngines
   [17/11/2004|17:57] C:\Program Files\Fichiers communs\System
   [02/11/2005|19:34] C:\Program Files\Fichiers communs\Teknum Systems
   [18/08/2004|18:26] C:\Program Files\Fichiers communs\Thumbs.db
   [23/10/2002|20:56] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared

   --------------------\  Process

   ( 57 Processus )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast
   C:\Program Files\Circle Developement
   C:\DOCUME~1\NOEMIE\Cookies\noemie@advertising[1].txt
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts MODIFIE

   127.0.0.1 bin.errorprotector.com ## added by CiD
   127.0.0.1 br.errorsafe.com ## added by CiD
   127.0.0.1 br.winantivirus.com ## added by CiD
   127.0.0.1 br.winfixer.com ## added by CiD
   127.0.0.1 cdn.drivecleaner.com ## added by CiD
   127.0.0.1 cdn.errorsafe.com ## added by CiD
   127.0.0.1 cdn.winsoftware.com ## added by CiD
   127.0.0.1 de.errorsafe.com ## added by CiD
   127.0.0.1 de.winantivirus.com ## added by CiD
   127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
   127.0.0.1 download.cdn.errorsafe.com ## added by CiD
   127.0.0.1 download.cdn.winsoftware.com ## added by CiD
   127.0.0.1 download.errorsafe.com ## added by CiD
   127.0.0.1 download.systemdoctor.com ## added by CiD
   127.0.0.1 download.winantispyware.com ## added by CiD
   127.0.0.1 download.windrivecleaner.com ## added by CiD
   127.0.0.1 download.winfixer.com ## added by CiD
   127.0.0.1 drivecleaner.com ## added by CiD
   127.0.0.1 dynamique.drivecleaner.com ## added by CiD
   127.0.0.1 errorprotector.com ## added by CiD
   127.0.0.1 errorsafe.com ## added by CiD
   127.0.0.1 es.winantivirus.com ## added by CiD
   127.0.0.1 fr.winantivirus.com ## added by CiD
   127.0.0.1 fr.winfixer.com ## added by CiD
   127.0.0.1 go.drivecleaner.com ## added by CiD
   127.0.0.1 go.errorsafe.com ## added by CiD
   127.0.0.1 go.winantispyware.com ## added by CiD
   127.0.0.1 go.winantivirus.com ## added by CiD
   127.0.0.1 hk.winantivirus.com ## added by CiD
   127.0.0.1 instlog.errorsafe.com ## added by CiD
   127.0.0.1 instlog.winantivirus.com ## added by CiD
   127.0.0.1 instlog.winfixer.com ## added by CiD
   127.0.0.1 jsp.drivecleaner.com ## added by CiD
   127.0.0.1 kb.errorsafe.com ## added by CiD
   127.0.0.1 kb.winantivirus.com ## added by CiD
   127.0.0.1 nl.errorsafe.com ## added by CiD
   127.0.0.1 se.errorsafe.com ## added by CiD
   127.0.0.1 secure.drivecleaner.com ## added by CiD
   127.0.0.1 secure.errorsafe.com ## added by CiD
   127.0.0.1 secure.winantispam.com ## added by CiD
   127.0.0.1 secure.winantispy.com ## added by CiD
   127.0.0.1 secure.winantivirus.com ## added by CiD
   127.0.0.1 support.winantivirus.com ## added by CiD
   127.0.0.1 trial.updates.winsoftware.com ## added by CiD
   127.0.0.1 ulog.winantivirus.com ## added by CiD
   127.0.0.1 utils.errorsafe.com ## added by CiD
   127.0.0.1 utils.winantivirus.com ## added by CiD
   127.0.0.1 utils.winfixer.com ## added by CiD
   127.0.0.1 winantispyware.com ## added by CiD
   127.0.0.1 winantivirus.com ## added by CiD
   127.0.0.1 winfixer.com ## added by CiD
   127.0.0.1 winfixer2006.com ## added by CiD
   127.0.0.1 winsoftware.com ## added by CiD
   127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
   127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
   127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
   127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
   127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
   127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
   127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

   -> 72 [ 70 ## added by CiD ]

   /!\ 1 Not 127.0.0.1  !!

   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-08-10 16:28:40
   Windows 5.1.2600  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-08-10 16:37:11
   Windows 5.1.2600  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   C:\WINDOWS\System32\CatRoot2\tmp.edb
   scan completed successfully
   hidden processes: 0
   hidden files: 145
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   => C:\DOCUME~1\NOEMIE\Mes documents\Ma musique\musique boud1\NERO 6.3.0.0 FR Pack 1-2-3-4-5 Complet et Keygen ( Burning ROM - Vision Express 2 - InCD - Media Player .zip
   => C:\DOCUME~1\NOEMIE\Mes documents\Mes fichiers re‡us\[PC Game] Zuma d_\Zuma Deluxe! v1.0 (crack).exe


   [F:10][D:2]-> C:\DOCUME~1\NOEMIE\LOCALS~1\Temp
   [F:135][D:0]-> C:\DOCUME~1\NOEMIE\Cookies
   [F:4978][D:20]-> C:\DOCUME~1\NOEMIE\LOCALS~1\TEMPOR~1\content.IE5

   --------------------\  Fin du rapport a 16:39:45,68

Utilisateur anonyme · Answer

Relance Lop S&D 


* Choisis cette fois ci l'Option 2 (Suppression) 
* Ne ferme pas la fenêtre lors de la suppression ! 
* Poste le rapport généré (C:\lopR.txt)

51agost · Answer

a yé voila le 2éme rapport 
merci

   --------------------\  Lop S&D 4.2.2-6  XP/Vista

   [ Windows XP (NT 5.1) Build 2600 ]
   [ USER : NOEMIE ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 10/08/2008 | 16:58:03,59 ] [ PC : SN4733787192 ]
   [ MAJ : 09-08-2008 | 21:15 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\NOEMIE\Cookies\noemie@advertising[1].txt
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast
   Supprime! - C:\Program Files\Circle Developement
   RestaurÚ! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [23/10/2002|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [23/10/2002|20:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [22/10/2006|10:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
   [22/10/2006|10:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
   [13/01/2006|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kaspersky Anti-Virus Personal
   [05/02/2006|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [05/01/2007|14:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [04/04/2004|12:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
   [05/06/2004|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NFS Underground
   [23/10/2006|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [23/10/2002|20:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [22/10/2006|10:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
   [28/12/2003|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation

   [23/10/2002|20:52] C:\DOCUME~1\AURELIE\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\AURELIE\APPLIC~1\desktop.ini
   [26/11/2003|21:44] C:\DOCUME~1\AURELIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [29/11/2003|15:03] C:\DOCUME~1\AURELIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [30/04/2003|21:42] C:\DOCUME~1\AURELIE\APPLIC~1\GDIPFONTCACHEV1.DAT
   [15/12/2002|18:16] C:\DOCUME~1\AURELIE\APPLIC~1\Help
   [23/10/2002|20:44] C:\DOCUME~1\AURELIE\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\AURELIE\APPLIC~1\InterTrust
   [14/02/2008|00:05] C:\DOCUME~1\AURELIE\APPLIC~1\Microsoft
   [24/02/2004|16:19] C:\DOCUME~1\AURELIE\APPLIC~1\Sony Corporation
   [22/04/2003|18:48] C:\DOCUME~1\AURELIE\APPLIC~1\VERITAS

   [23/10/2002|20:52] C:\DOCUME~1\AURELIEN\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\AURELIEN\APPLIC~1\desktop.ini
   [27/11/2003|16:11] C:\DOCUME~1\AURELIEN\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [27/11/2003|16:31] C:\DOCUME~1\AURELIEN\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [27/11/2003|16:23] C:\DOCUME~1\AURELIEN\APPLIC~1\GDIPFONTCACHEV1.DAT
   [19/04/2004|20:16] C:\DOCUME~1\AURELIEN\APPLIC~1\Help
   [31/05/2005|10:43] C:\DOCUME~1\AURELIEN\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\AURELIEN\APPLIC~1\InterTrust
   [25/12/2005|18:03] C:\DOCUME~1\AURELIEN\APPLIC~1\Lavasoft
   [20/12/2005|23:42] C:\DOCUME~1\AURELIEN\APPLIC~1\Macromedia
   [24/02/2008|11:52] C:\DOCUME~1\AURELIEN\APPLIC~1\Microsoft
   [17/08/2004|10:47] C:\DOCUME~1\AURELIEN\APPLIC~1\Sony Corporation
   [16/08/2003|13:34] C:\DOCUME~1\AURELIEN\APPLIC~1\VERITAS

   [23/10/2002|20:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [23/10/2002|20:44] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\InterTrust
   [23/10/2002|20:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [06/04/2003|10:32] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [31/05/2005|10:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
   [23/10/2002|20:33] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [17/04/2008|09:32] C:\DOCUME~1\NOEMIE\APPLIC~1\Adobe
   [09/08/2008|14:27] C:\DOCUME~1\NOEMIE\APPLIC~1\AntiTons
   [23/10/2002|20:33] C:\DOCUME~1\NOEMIE\APPLIC~1\desktop.ini
   [20/03/2005|12:06] C:\DOCUME~1\NOEMIE\APPLIC~1\DIMAGE
   [22/11/2003|15:58] C:\DOCUME~1\NOEMIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [22/11/2003|16:00] C:\DOCUME~1\NOEMIE\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [23/10/2006|11:01] C:\DOCUME~1\NOEMIE\APPLIC~1\FotoWire
   [18/11/2006|15:59] C:\DOCUME~1\NOEMIE\APPLIC~1\GDIPFONTCACHEV1.DAT
   [18/12/2002|18:32] C:\DOCUME~1\NOEMIE\APPLIC~1\Help
   [09/11/2007|16:49] C:\DOCUME~1\NOEMIE\APPLIC~1\Hewlett-PackardHP Photosmart 2570 series1161506868_API.log
   [09/11/2007|16:49] C:\DOCUME~1\NOEMIE\APPLIC~1\Hewlett-PackardHP Photosmart 2570 series1161506868_PROTOCOL.log
   [09/11/2007|16:49] C:\DOCUME~1\NOEMIE\APPLIC~1\Hewlett-PackardHP Photosmart 2570 series1161506868_UI.log
   [09/11/2007|16:45] C:\DOCUME~1\NOEMIE\APPLIC~1\HP
   [23/10/2002|20:44] C:\DOCUME~1\NOEMIE\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\NOEMIE\APPLIC~1\InterTrust
   [27/12/2005|17:29] C:\DOCUME~1\NOEMIE\APPLIC~1\Lavasoft
   [01/06/2005|15:26] C:\DOCUME~1\NOEMIE\APPLIC~1\Macromedia
   [22/10/2006|10:53] C:\DOCUME~1\NOEMIE\APPLIC~1\Microsoft
   [06/08/2005|23:50] C:\DOCUME~1\NOEMIE\APPLIC~1\MP3Chansons
   [10/08/2008|11:37] C:\DOCUME~1\NOEMIE\APPLIC~1\MSN6
   [28/12/2003|18:10] C:\DOCUME~1\NOEMIE\APPLIC~1\Sony Corporation
   [30/03/2003|21:09] C:\DOCUME~1\NOEMIE\APPLIC~1\VERITAS
   [31/03/2006|18:09] C:\DOCUME~1\NOEMIE\APPLIC~1\vlc
   [24/02/2006|19:00] C:\DOCUME~1\NOEMIE\APPLIC~1\XnView

   [23/10/2002|20:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
   [23/10/2002|20:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\desktop.ini
   [23/10/2002|20:44] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\InterTrust
   [23/10/2002|20:33] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft

   [15/07/2008|18:22] C:\DOCUME~1\sylvie\APPLIC~1\Adobe
   [15/07/2008|18:26] C:\DOCUME~1\sylvie\APPLIC~1\AntiTons
   [31/12/2005|19:43] C:\DOCUME~1\sylvie\APPLIC~1\Babylon
   [23/10/2002|20:33] C:\DOCUME~1\sylvie\APPLIC~1\desktop.ini
   [22/11/2003|19:46] C:\DOCUME~1\sylvie\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web
   [23/11/2003|11:37] C:\DOCUME~1\sylvie\APPLIC~1\Dossier de t‚l‚chargement Share-to-Web 
   [13/05/2005|17:28] C:\DOCUME~1\sylvie\APPLIC~1\GDIPFONTCACHEV1.DAT
   [04/04/2004|12:14] C:\DOCUME~1\sylvie\APPLIC~1\Help
   [23/10/2002|20:44] C:\DOCUME~1\sylvie\APPLIC~1\Identities
   [23/10/2002|20:52] C:\DOCUME~1\sylvie\APPLIC~1\InterTrust
   [04/08/2003|11:08] C:\DOCUME~1\sylvie\APPLIC~1\Macromedia
   [12/02/2007|09:52] C:\DOCUME~1\sylvie\APPLIC~1\Microsoft
   [14/02/2005|17:41] C:\DOCUME~1\sylvie\APPLIC~1\MSN6
   [27/01/2004|16:12] C:\DOCUME~1\sylvie\APPLIC~1\Sony Corporation
   [24/08/2003|17:17] C:\DOCUME~1\sylvie\APPLIC~1\VERITAS
 
   --------------------\  Tâches planifiées dans C:\WINDOWS\tasks

   [10/08/2008 16:00][--a------] C:\WINDOWS\tasks\HPpromotions journeysoftware.job
   [10/08/2008 16:53][--ah-----] C:\WINDOWS\tasks\SA.DAT
   [28/08/2001 12:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

   --------------------\  MsgPlus SPONSOR INSTALLED !

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MsgPlus! Plugin]

   --------------------\  Listing des dossiers dans C:\Program Files

   [22/03/2003|17:40] C:\Program Files\Adobe
   [13/02/2008|22:46] C:\Program Files\Ahead
   [05/08/2005|19:37] C:\Program Files\Alexis The Last Fighter
   [29/12/2006|13:01] C:\Program Files\Alwil Software
   [14/12/2002|19:59] C:\Program Files\AND
   [21/06/2008|10:20] C:\Program Files\AntiTons
   [22/11/2004|20:30] C:\Program Files\Astral Entertainment
   [23/10/2002|20:55] C:\Program Files\Audioneer
   [05/05/2007|20:47] C:\Program Files\AviSynth 2.5
   [25/12/2007|20:15] C:\Program Files\AVS4YOU
   [23/10/2002|20:54] C:\Program Files\BackWeb
   [05/08/2005|19:40] C:\Program Files\BigJig
   [14/03/2005|16:35] C:\Program Files\Borland
   [02/01/2005|13:22] C:\Program Files\Canon
   [03/03/2006|12:54] C:\Program Files\CCleaner
   [05/05/2007|20:31] C:\Program Files\Common Files
   [23/10/2002|20:38] C:\Program Files\ComPlus Applications
   [05/08/2005|19:42] C:\Program Files\Crossword SOS
   [23/10/2002|21:04] C:\Program Files\CyberLink
   [14/03/2005|15:54] C:\Program Files\Derelict Software
   [23/12/2002|16:05] C:\Program Files\DesignPro 2000
   [20/03/2005|12:04] C:\Program Files\DiMAGE Viewer
   [15/12/2002|13:06] C:\Program Files\directx
   [13/02/2008|22:43] C:\Program Files\Disney Interactive
   [14/02/2008|00:07] C:\Program Files\DivX
   [05/08/2005|19:43] C:\Program Files\Domino Dilemma
   [21/10/2006|18:38] C:\Program Files\EHMINSTALL
   [29/03/2005|16:22] C:\Program Files\Eidos Interactive
   [13/02/2008|22:43] C:\Program Files\eMule
   [23/10/2002|20:54] C:\Program Files\eSkin
   [29/10/2006|10:48] C:\Program Files\EZFace
   [06/08/2005|21:35] C:\Program Files\Fakeanoid
   [13/02/2008|22:44] C:\Program Files\Fichiers communs
   [05/08/2005|19:44] C:\Program Files\Funny Figures Game v3.0
   [06/08/2005|21:09] C:\Program Files\GJGames
   [15/12/2002|14:55] C:\Program Files\greenstreet
   [14/12/2002|19:13] C:\Program Files\GTInteractive
   [23/10/2002|21:00] C:\Program Files\HandyBits
   [07/11/2005|21:34] C:\Program Files\Hemera Products
   [22/10/2006|10:40] C:\Program Files\Hewlett-Packard
   [22/10/2006|10:47] C:\Program Files\HP
   [13/02/2008|22:44] C:\Program Files\IKEA HomePlanner
   [13/02/2008|22:43] C:\Program Files\InstallShield Installation Information
   [27/05/2008|18:43] C:\Program Files\Internet Explorer
   [14/12/2002|19:54] C:\Program Files\JavaSoft
   [10/05/2006|14:25] C:\Program Files\KODAK
   [06/08/2005|20:59] C:\Program Files\KPI Games
   [25/12/2005|18:02] C:\Program Files\Lavasoft
   [23/10/2006|11:01] C:\Program Files\Logitech
   [06/08/2005|20:58] C:\Program Files\LottoWhiz 2000
   [11/11/2005|14:58] C:\Program Files\Messenger
   [14/04/2008|09:52] C:\Program Files\Messenger Plus! Live
   [02/10/2006|20:16] C:\Program Files\MessengerPlus! 3
   [07/05/2007|17:20] C:\Program Files\Microsoft ActiveSync
   [23/10/2002|20:41] C:\Program Files\microsoft frontpage
   [22/03/2003|17:40] C:\Program Files\Microsoft Games
   [23/10/2002|21:00] C:\Program Files\Microsoft Money
   [23/10/2002|20:58] C:\Program Files\Microsoft Office
   [23/10/2002|20:58] C:\Program Files\Microsoft Visual Studio
   [26/12/2006|10:54] C:\Program Files\MioNet
   [05/01/2006|10:17] C:\Program Files\Montorgueil
   [23/10/2002|20:39] C:\Program Files\Movie Maker
   [23/10/2002|20:37] C:\Program Files\MSN
   [11/02/2005|15:24] C:\Program Files\MSN Apps
   [23/10/2002|20:37] C:\Program Files\MSN Gaming Zone
   [14/04/2008|09:52] C:\Program Files\MSN Messenger
   [23/10/2006|15:01] C:\Program Files\MSXML 4.0
   [05/05/2006|15:22] C:\Program Files\NetMeeting
   [25/02/2007|10:32] C:\Program Files\OrangeHSS
   [23/10/2002|20:38] C:\Program Files\Outlook Express
   [06/08/2005|20:54] C:\Program Files\PacBomber
   [06/08/2005|21:38] C:\Program Files\PaintDefense
   [06/08/2005|20:53] C:\Program Files\Passage3
   [23/10/2002|21:05] C:\Program Files\PenSuite
   [20/06/2006|18:49] C:\Program Files\PopCap Games
   [25/12/2006|14:24] C:\Program Files\pspvideo9
   [14/02/2008|00:11] C:\Program Files\QuickTime
   [23/10/2002|20:56] C:\Program Files\Real
   [27/01/2004|10:50] C:\Program Files\Red Storm Entertainment
   [09/03/2007|19:07] C:\Program Files\SAGEM
   [23/10/2002|20:53] C:\Program Files\SBApps
   [05/08/2005|19:50] C:\Program Files\Scramble
   [09/03/2007|18:51] C:\Program Files\Securitoo
   [05/08/2005|19:50] C:\Program Files\Serious Backgammon
   [23/10/2002|20:37] C:\Program Files\Services en ligne
   [03/01/2003|19:19] C:\Program Files\Sierra On-Line
   [28/12/2003|18:06] C:\Program Files\Sony
   [28/12/2005|16:42] C:\Program Files\SYSTRAN
   [18/08/2004|18:26] C:\Program Files\Thumbs.db
   [02/10/2005|14:38] C:\Program Files\Toshiba
   [14/03/2005|16:43] C:\Program Files\Twilight
   [22/11/2004|20:58] C:\Program Files\Twinno Software
   [14/12/2002|19:07] C:\Program Files\Ulead Systems
   [23/10/2002|20:44] C:\Program Files\Uninstall Information
   [07/05/2007|17:19] C:\Program Files\ViaMichelin
   [31/03/2006|18:08] C:\Program Files\VideoLAN
   [23/10/2002|21:01] C:\Program Files\Virtual CD v4 SDK
   [25/02/2007|10:20] C:\Program Files\Wanadoo
   [03/02/2006|19:34] C:\Program Files\Wanadoo Jeux
   [22/11/2004|20:34] C:\Program Files\WarnerBrosOnline
   [14/02/2008|20:00] C:\Program Files\Windows Live
   [21/04/2006|12:25] C:\Program Files\Windows Media Player
   [23/10/2002|20:37] C:\Program Files\Windows NT
   [29/04/2006|11:07] C:\Program Files\WindowsUpdate
   [20/06/2006|18:51] C:\Program Files\WinRAR
   [23/10/2002|20:41] C:\Program Files\xerox
   [14/02/2008|00:11] C:\Program Files\XnView
   [03/03/2006|12:54] C:\Program Files\Yahoo!
   [21/03/2007|21:15] C:\Program Files\Zuma Deluxe

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [22/03/2003|17:40] C:\Program Files\Fichiers communs\Adobe
   [25/12/2007|20:15] C:\Program Files\Fichiers communs\AVSMedia
   [23/10/2002|20:58] C:\Program Files\Fichiers communs\Designer
   [24/03/2004|17:44] C:\Program Files\Fichiers communs\DirectX
   [22/10/2006|10:08] C:\Program Files\Fichiers communs\EPSON
   [23/04/2006|12:07] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
   [23/10/2006|11:01] C:\Program Files\Fichiers communs\FotoWire
   [25/02/2007|10:20] C:\Program Files\Fichiers communs\France Telecom
   [15/12/2002|14:55] C:\Program Files\Fichiers communs\greenstreet
   [22/11/2003|15:57] C:\Program Files\Fichiers communs\Hewlett-Packard
   [22/10/2006|10:44] C:\Program Files\Fichiers communs\HP
   [20/03/2005|12:05] C:\Program Files\Fichiers communs\InstallShield
   [23/10/2006|10:59] C:\Program Files\Fichiers communs\Logitech
   [16/09/2007|15:02] C:\Program Files\Fichiers communs\Microsoft Shared
   [23/10/2002|20:38] C:\Program Files\Fichiers communs\MSSoap
   [23/10/2002|20:33] C:\Program Files\Fichiers communs\ODBC
   [18/11/2005|18:46] C:\Program Files\Fichiers communs\Panda Software
   [23/10/2002|20:56] C:\Program Files\Fichiers communs\Real
   [23/10/2002|20:39] C:\Program Files\Fichiers communs\Services
   [22/10/2006|10:45] C:\Program Files\Fichiers communs\Sonic Shared
   [28/12/2003|18:04] C:\Program Files\Fichiers communs\Sony Shared
   [23/10/2002|20:33] C:\Program Files\Fichiers communs\SpeechEngines
   [17/11/2004|17:57] C:\Program Files\Fichiers communs\System
   [02/11/2005|19:34] C:\Program Files\Fichiers communs\Teknum Systems
   [18/08/2004|18:26] C:\Program Files\Fichiers communs\Thumbs.db
   [23/10/2002|20:56] C:\Program Files\Fichiers communs\TVNavigTechnologies Shared

   --------------------\  Process

   ( 56 Processus )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-08-10 16:58:44
   Windows 5.1.2600  NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 144
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   => C:\DOCUME~1\NOEMIE\Mes documents\Ma musique\musique boud1\NERO 6.3.0.0 FR Pack 1-2-3-4-5 Complet et Keygen ( Burning ROM - Vision Express 2 - InCD - Media Player .zip
   => C:\DOCUME~1\NOEMIE\Mes documents\Mes fichiers re‡us\[PC Game] Zuma d_\Zuma Deluxe! v1.0 (crack).exe


   [F:14][D:2]-> C:\DOCUME~1\NOEMIE\LOCALS~1\Temp
   [F:134][D:0]-> C:\DOCUME~1\NOEMIE\Cookies
   [F:5054][D:20]-> C:\DOCUME~1\NOEMIE\LOCALS~1\TEMPOR~1\content.IE5

   --------------------\  Fin du rapport a 17:01:21,29

Utilisateur anonyme · Answer

Telecharge malwarebytes 

-> http://www.malwarebytes.org/mbam/program/mbam-setup.exe 

Tu l´instale; le programme va se mettre automatiquement a jour. 

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression". 

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet". 

Puis click sur "rechercher". 

Laisse le scanner le pc... 

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum. 

Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log

51agost · Answer

ca fai bientot 2 heures que j'ai lancé le scan et c'est toujours pas fini c normal??

Utilisateur anonyme · Answer

ça peut parfois etre long ...

51agost · Answer

Le scan vient de se terminer voila le résultat 
Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1036
Windows 5.1.2600 

19:34:45 10/08/2008
mbam-log-8-10-2008 (19-34-45).txt

Type de recherche: Examen complet (A:\|C:\|Q:\|R:\|)
Eléments examinés: 168377
Temps écoulé: 2 hour(s), 11 minute(s), 6 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\c48d3b9bca9b3a5a04bc26f729ee0c6e389dde2e (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{88c51e90-8e9c-4c96-8a45-574d88b63faf} (Trojan.Perfiler) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\2c5eceb3d45147eb99fa51120e7c7adebe213de6 (Adware.123Mania) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates\TrustedPublisher\Certificates\a6a50b0ebf885a7dd4fb6927f1388592138fffe6 (Adware.123Mania) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8c875948-9c60-4381-9248-0df180542d53} (Adware.Hotbar) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Update Machine (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Microsoft Update Machine (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Montorgueil (Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Montorgueil\murespourjeunes (Dialer) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\NOEMIE\Local Settings\Temporary Internet Files\Content.IE5\G581MB4P\Install[1].exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Program Files\Montorgueil\14.04888 (Dialer) -> Quarantined and deleted successfully.
C:\Program Files\Montorgueil\murespourjeunes\murespourjeunes.ico (Dialer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\sysruww.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Security Troubleshooting.url (Rogue.Link) -> Quarantined and deleted successfully.

Utilisateur anonyme · Answer

réouvre malewarebyte
va sur quarantaine
supprime tout


ensuite refais un scan hijackthis et post le rapport stp

51agost · Answer

a yé 19 éléments supprimé et voila le résultat avec hijackthis
merci

Logfile of HijackThis v1.99.1
Scan saved at 19:41:48, on 10/08/2008
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard
hksrv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\System32\DRIVERS\WtSrv.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\WService.EXE
C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\NOEMIE\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKCU\..\Run: [Update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup
O4 - HKCU\..\Run: [PreAnnotate] C:\WINDOWS\System32\PreAnntt.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [four wait] C:\DOCUME~1\NOEMIE\APPLIC~1\AntiTons\Surf Mags.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=www.packardbell.fr/center
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5054F860-748D-4840-B7B4-DDDB428421AF} - http://ipdata.phoneaccess.com/dialer/1/cab/fr/phoneaccess.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: bw+0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {7EBD242B-D69F-4DFB-A2C3-1941C49770C1} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: Web Event Logger - {79FEACFF-FFCE-815E-A900-316290B5B738} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard
hksrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\DRIVERS\WtSrv.exe

Utilisateur anonyme · Answer

ok désinstal : Desktop Messenger

ensuite :

Télécharge ToolsCleaner sur ton bureau. 
--> 
ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
http://pc-system.fr/ 

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 


ensuite :

Télécharge ceci: (by Moe) : 
http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe 

Double clic sur Lopxpsetup.exe pour lancer l'installation 
Au menu, choisir l'option 1 
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! 
Une rapport sera alors crée, à copie/colle en entier sur le forum.

51agost · Answer

le rapport de toolscleaners
C:\Documents and Settings\NOEMIE\Bureau\Lop S&D.lnk: supprimé !
C:\Documents and Settings\NOEMIE\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\NOEMIE\Bureau\hijackthis\HijackThis.exe: supprimé !
C:\Documents and Settings\NOEMIE\Recent\HijackThis.lnk: supprimé !
C:\Lop SD\Lop S&D.lnk: supprimé !
C:\Lop SD: supprimé !
C:\Documents and Settings\NOEMIE\Bureau\HijackThis: supprimé !
C:\Documents and Settings\NOEMIE\Menu Démarrer\Programmes\Lop S&D: supprimé !

51agost · Answer

le rapport de Lopxpsetup
merci

# Rapport Lopxp fait le 10/08/2008 à 20:17:34
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.10 - Maj du 11/04/2008

  Killing 'iexplore.exe'
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding (1232)

========== Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

 2002-10-23 à 19:04:47 - CyberLink 
 2006-10-22 à 08:47:47 - HP 
 2006-01-13 à 17:38:04 - Kaspersky Anti-Virus Personal
 2008-08-10 à 15:14:48 - Malwarebytes 
 2006-02-05 à 15:48:20 - Messenger Plus!
 2007-01-05 à 12:12:06 - Microsoft 
 2004-04-04 à 10:33:50 - MSN6 
 2004-06-05 à 09:00:54 - NFS Underground
 2006-10-23 à 08:56:30 - QuickTime 
 2002-10-23 à 18:46:50 - SBSI 
 2006-10-22 à 08:45:33 - Sonic 
 2003-12-28 à 16:05:06 - Sony Corporation

+- C:\Documents and Settings\AURELIE\Application Data

 2002-10-23 à 18:52:39 - Adobe 
 2003-11-26 à 19:44:20 - Dossier de téléchargement Share-to-Web
 2003-11-29 à 13:03:20 - Dossier de téléchargement Share-to-Web 
 2002-12-15 à 16:16:21 - Help 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2008-02-13 à 22:05:04 - Microsoft 
 2004-02-24 à 14:19:59 - Sony Corporation
 2003-04-22 à 16:48:51 - VERITAS 

+- C:\Documents and Settings\AURELIE\Local Settings\Application Data

 2008-02-13 à 22:05:15 - ApplicationHistory 
 2002-12-15 à 16:16:21 - Help 
 2008-02-13 à 22:05:23 - HP 
 2004-02-23 à 08:49:50 - Identities 
 2008-02-13 à 22:05:43 - IsolatedStorage 
 2004-02-23 à 12:07:24 - Microsoft 
 2008-02-13 à 22:04:39 - Toshiba 

+- C:\Documents and Settings\AURELIEN\Application Data

 2002-10-23 à 18:52:39 - Adobe 
 2003-11-27 à 14:11:43 - Dossier de téléchargement Share-to-Web
 2003-11-27 à 14:31:03 - Dossier de téléchargement Share-to-Web 
 2004-04-19 à 18:16:45 - Help 
 2005-05-31 à 08:43:06 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2005-12-25 à 16:03:00 - Lavasoft 
 2005-12-20 à 21:42:57 - Macromedia 
 2008-02-24 à 09:52:43 - Microsoft 
 2004-08-17 à 08:47:02 - Sony Corporation
 2003-08-16 à 11:34:10 - VERITAS 

+- C:\Documents and Settings\AURELIEN\Local Settings\Application Data

 2008-02-24 à 09:58:47 - ApplicationHistory 
 2003-01-03 à 17:19:40 - Help 
 2008-02-24 à 09:53:09 - HP 
 2006-05-13 à 08:48:38 - Identities 
 2008-02-24 à 09:53:14 - IsolatedStorage 
 2008-02-24 à 09:53:51 - Microsoft 
 2005-11-11 à 10:15:55 - Panda Software
 2005-10-02 à 12:58:58 - Toshiba 

+- C:\Documents and Settings\NOEMIE\Application Data

 2008-04-17 à 07:32:28 - Adobe 
 2008-08-09 à 12:27:56 - AntiTons 
 2005-03-20 à 10:06:50 - DIMAGE 
 2003-11-22 à 13:58:03 - Dossier de téléchargement Share-to-Web
 2003-11-22 à 14:00:56 - Dossier de téléchargement Share-to-Web 
 2006-10-23 à 09:01:57 - FotoWire 
 2002-12-18 à 16:32:04 - Help 
 2007-11-09 à 14:45:53 - HP 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2005-12-27 à 15:29:38 - Lavasoft 
 2005-06-01 à 13:26:23 - Macromedia 
 2008-08-10 à 15:14:54 - Malwarebytes 
 2006-10-22 à 08:53:08 - Microsoft 
 2005-08-06 à 21:50:29 - MP3Chansons 
 2008-08-10 à 09:37:50 - MSN6 
 2003-12-28 à 16:10:51 - Sony Corporation
 2003-03-30 à 19:09:14 - VERITAS 
 2006-03-31 à 16:09:20 - vlc 
 2006-02-24 à 17:00:40 - XnView 

+- C:\Documents and Settings\NOEMIE\Local Settings\Application Data

 2006-10-21 à 16:21:10 - .SIPPS 
 2008-08-10 à 17:54:10 - ApplicationHistory 
 2004-11-11 à 08:10:27 - Help 
 2006-10-22 à 08:53:12 - HP 
 2003-04-12 à 11:30:27 - Identities 
 2006-10-22 à 08:53:28 - IsolatedStorage 
 2006-10-23 à 09:23:04 - Logitech-LS 
 2008-08-10 à 11:32:30 - Microsoft 
 2005-11-18 à 09:03:25 - Panda Software
 2005-10-02 à 12:48:39 - Toshiba 

+- C:\Documents and Settings\Propri‚taire\Application Data

 2002-10-23 à 18:52:39 - Adobe 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2002-10-23 à 18:33:24 - Microsoft 

+- C:\Documents and Settings\Propri‚taire\Local Settings\Application Data

 2002-10-23 à 18:44:20 - Microsoft 

+- C:\Documents and Settings\sylvie\Application Data

 2008-07-15 à 16:22:41 - Adobe 
 2008-07-15 à 16:26:26 - AntiTons 
 2005-12-31 à 17:43:46 - Babylon 
 2003-11-22 à 17:46:25 - Dossier de téléchargement Share-to-Web
 2003-11-23 à 09:37:49 - Dossier de téléchargement Share-to-Web 
 2004-04-04 à 10:14:55 - Help 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2003-08-04 à 09:08:18 - Macromedia 
 2007-02-12 à 07:52:05 - Microsoft 
 2005-02-14 à 15:41:21 - MSN6 
 2004-01-27 à 14:12:19 - Sony Corporation
 2003-08-24 à 15:17:06 - VERITAS 

+- C:\Documents and Settings\sylvie\Local Settings\Application Data

 2008-07-15 à 16:31:23 - ApplicationHistory 
 2005-12-31 à 17:37:48 - Babylon 
 2002-12-22 à 12:19:41 - Help 
 2007-02-12 à 07:53:06 - HP 
 2005-12-31 à 17:52:56 - Identities 
 2007-02-12 à 07:53:40 - IsolatedStorage 
 2004-12-04 à 12:50:00 - Microsoft 
 2005-11-18 à 09:03:57 - Panda Software
 2005-10-10 à 08:47:49 - Toshiba 

========== Listing du dossier Program Files

+- C:\Program Files

 2003-03-22 à 15:40:39 - Adobe 
 2008-02-13 à 20:46:22 - Ahead 
 2005-08-05 à 17:37:13 - Alexis The Last Fighter
 2006-12-29 à 11:01:55 - Alwil Software
 2002-12-14 à 17:59:49 - AND 
 2008-06-21 à 08:20:41 - AntiTons 
 2004-11-22 à 18:30:41 - Astral Entertainment
 2002-10-23 à 18:55:23 - Audioneer 
 2007-05-05 à 18:47:47 - AviSynth 2.5
 2007-12-25 à 18:15:48 - AVS4YOU 
 2002-10-23 à 18:54:00 - BackWeb 
 2005-08-05 à 17:40:37 - BigJig 
 2005-03-14 à 14:35:21 - Borland 
 2005-01-02 à 11:22:52 - Canon 
 2006-03-03 à 10:54:34 - CCleaner 
 2007-05-05 à 18:31:47 - Common Files
 2002-10-23 à 18:38:26 - ComPlus Applications
 2005-08-05 à 17:42:36 - Crossword SOS
 2002-10-23 à 19:04:45 - CyberLink 
 2005-03-14 à 13:54:32 - Derelict Software
 2002-12-23 à 14:05:54 - DesignPro 2000
 2005-03-20 à 10:04:42 - DiMAGE Viewer
 2002-12-15 à 11:06:38 - directx 
 2008-02-13 à 20:43:08 - Disney Interactive
 2008-02-13 à 22:07:47 - DivX 
 2005-08-05 à 17:43:36 - Domino Dilemma
 2006-10-21 à 16:38:10 - EHMINSTALL 
 2005-03-29 à 14:22:14 - Eidos Interactive
 2008-02-13 à 20:43:32 - eMule 
 2002-10-23 à 18:54:22 - eSkin 
 2006-10-29 à 08:48:59 - EZFace 
 2005-08-06 à 19:35:32 - Fakeanoid 
 2008-02-13 à 20:44:06 - Fichiers communs
 2005-08-05 à 17:44:38 - Funny Figures Game v3.0
 2005-08-06 à 19:09:01 - GJGames 
 2002-12-15 à 12:55:29 - greenstreet 
 2002-12-14 à 17:13:18 - GTInteractive 
 2002-10-23 à 19:00:03 - HandyBits 
 2005-11-07 à 19:34:12 - Hemera Products
 2006-10-22 à 08:40:39 - Hewlett-Packard 
 2006-10-22 à 08:47:48 - HP 
 2008-02-13 à 20:44:05 - IKEA HomePlanner
 2008-08-10 à 18:10:19 - InstallShield Installation Information
 2008-05-27 à 16:43:59 - Internet Explorer
 2002-12-14 à 17:54:25 - JavaSoft 
 2006-05-10 à 12:25:49 - KODAK 
 2005-08-06 à 18:59:27 - KPI Games
 2005-12-25 à 16:02:54 - Lavasoft 
 2008-08-10 à 18:09:58 - Logitech 
 2008-08-10 à 18:19:19 - Lopxp 
 2005-08-06 à 18:58:16 - LottoWhiz 2000
 2008-08-10 à 17:34:39 - Malwarebytes' Anti-Malware
 2005-11-11 à 12:58:28 - Messenger 
 2008-04-14 à 07:52:48 - Messenger Plus! Live
 2006-10-02 à 18:16:00 - MessengerPlus! 3
 2007-05-07 à 15:20:54 - Microsoft ActiveSync
 2002-10-23 à 18:41:24 - microsoft frontpage
 2003-03-22 à 15:40:58 - Microsoft Games
 2002-10-23 à 19:00:50 - Microsoft Money
 2002-10-23 à 18:58:03 - Microsoft Office
 2002-10-23 à 18:58:29 - Microsoft Visual Studio
 2006-12-26 à 08:54:12 - MioNet 
 2002-10-23 à 18:39:08 - Movie Maker
 2002-10-23 à 18:37:44 - MSN 
 2005-02-11 à 13:24:29 - MSN Apps
 2002-10-23 à 18:37:40 - MSN Gaming Zone
 2008-04-14 à 07:52:47 - MSN Messenger
 2006-10-23 à 13:01:11 - MSXML 4.0
 2006-05-05 à 13:22:17 - NetMeeting 
 2007-02-25 à 08:32:19 - OrangeHSS 
 2002-10-23 à 18:38:58 - Outlook Express
 2005-08-06 à 18:54:28 - PacBomber 
 2005-08-06 à 19:38:38 - PaintDefense 
 2005-08-06 à 18:53:53 - Passage3 
 2002-10-23 à 19:05:12 - PenSuite 
 2006-06-20 à 16:49:12 - PopCap Games
 2006-12-25 à 12:24:55 - pspvideo9 
 2008-02-13 à 22:11:03 - QuickTime 
 2002-10-23 à 18:56:53 - Real 
 2004-01-27 à 08:50:39 - Red Storm Entertainment
 2007-03-09 à 17:07:13 - SAGEM 
 2002-10-23 à 18:53:22 - SBApps 
 2005-08-05 à 17:50:44 - Scramble 
 2007-03-09 à 16:51:12 - Securitoo 
 2005-08-05 à 17:50:03 - Serious Backgammon
 2002-10-23 à 18:37:52 - Services en ligne
 2003-01-03 à 17:19:58 - Sierra On-Line
 2003-12-28 à 16:06:55 - Sony 
 2005-12-28 à 14:42:38 - SYSTRAN 
 2005-10-02 à 12:38:49 - Toshiba 
 2005-03-14 à 14:43:13 - Twilight 
 2004-11-22 à 18:58:16 - Twinno Software
 2002-12-14 à 17:07:24 - Ulead Systems
 2002-10-23 à 18:44:22 - Uninstall Information
 2007-05-07 à 15:19:49 - ViaMichelin 
 2006-03-31 à 16:08:00 - VideoLAN 
 2002-10-23 à 19:01:00 - Virtual CD v4 SDK
 2007-02-25 à 08:20:51 - Wanadoo 
 2006-02-03 à 17:34:23 - Wanadoo Jeux
 2004-11-22 à 18:34:01 - WarnerBrosOnline 
 2008-02-14 à 18:00:28 - Windows Live
 2006-04-21 à 10:25:21 - Windows Media Player
 2002-10-23 à 18:37:38 - Windows NT
 2006-04-29 à 09:07:16 - WindowsUpdate 
 2006-06-20 à 16:51:59 - WinRAR 
 2002-10-23 à 18:41:24 - xerox 
 2008-02-13 à 22:11:27 - XnView 
 2006-03-03 à 10:54:30 - Yahoo! 
 2007-03-21 à 19:15:45 - Zuma Deluxe

========== Tâches planifiées

HPpromotions journeysoftware.job: C:\Program Files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe /N "journeysoftware" -r

========== Clés registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"four wait"="C:\DOCUME~1\NOEMIE\APPLIC~1\AntiTons\Surf Mags.exe"


========== Bloqueur popups Internet Explorer

Blocage des popups non géré par cette version du navigateur.

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========

C:\Documents and Settings\NOEMIE\Application Data\AntiTons
C:\Documents and Settings\sylvie\Application Data\AntiTons
C:\Program Files\AntiTons

+- Registre:

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"four wait"=-




- Fin du rapport -

Utilisateur anonyme · Answer

ouvre la commande executer : 

demarrer executer 

ou touche windows + r 

ensuite copie/colle ce texte avec les guillemets c est important : 


"%programfiles%\Lopxp\Lopxp.bat" /Fixme 


clic sur ok 


Répond oui si on te demande la confirmation de la suppression d'un fichier. 

Poste le rapport.

51agost · Answer

a yé il m'a demandé de supprimer 3 "choses" j'ai dis yes à chaque fois;
voila le rapport:


# Rapport Lopxp fait le 10/08/2008 à 20:41:35
# Exécuté dans : C:\Program Files\Lopxp
# Version 3.10 - Maj du 11/04/2008


========== FixLog ==========


+- C:\Documents and Settings\NOEMIE\Application Data\AntiTons
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Documents and Settings\sylvie\Application Data\AntiTons
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- C:\Program Files\AntiTons
Choix utilisateur : Suppression acceptée.
Déplacé avec succès.

+- Registre :
Nettoyage effectué.

+- Fichiers temporaires :
Nettoyage effectué.


========== Listing des dossiers Application Data

+- C:\Documents and Settings\All Users\Application Data

 2002-10-23 à 19:04:47 - CyberLink 
 2006-10-22 à 08:47:47 - HP 
 2006-01-13 à 17:38:04 - Kaspersky Anti-Virus Personal
 2008-08-10 à 15:14:48 - Malwarebytes 
 2006-02-05 à 15:48:20 - Messenger Plus!
 2007-01-05 à 12:12:06 - Microsoft 
 2004-04-04 à 10:33:50 - MSN6 
 2004-06-05 à 09:00:54 - NFS Underground
 2006-10-23 à 08:56:30 - QuickTime 
 2002-10-23 à 18:46:50 - SBSI 
 2006-10-22 à 08:45:33 - Sonic 
 2003-12-28 à 16:05:06 - Sony Corporation

+- C:\Documents and Settings\AURELIE\Application Data

 2002-10-23 à 18:52:39 - Adobe 
 2003-11-26 à 19:44:20 - Dossier de téléchargement Share-to-Web
 2003-11-29 à 13:03:20 - Dossier de téléchargement Share-to-Web 
 2002-12-15 à 16:16:21 - Help 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2008-02-13 à 22:05:04 - Microsoft 
 2004-02-24 à 14:19:59 - Sony Corporation
 2003-04-22 à 16:48:51 - VERITAS 

+- C:\Documents and Settings\AURELIE\Local Settings\Application Data

 2008-02-13 à 22:05:15 - ApplicationHistory 
 2002-12-15 à 16:16:21 - Help 
 2008-02-13 à 22:05:23 - HP 
 2004-02-23 à 08:49:50 - Identities 
 2008-02-13 à 22:05:43 - IsolatedStorage 
 2004-02-23 à 12:07:24 - Microsoft 
 2008-02-13 à 22:04:39 - Toshiba 

+- C:\Documents and Settings\AURELIEN\Application Data

 2002-10-23 à 18:52:39 - Adobe 
 2003-11-27 à 14:11:43 - Dossier de téléchargement Share-to-Web
 2003-11-27 à 14:31:03 - Dossier de téléchargement Share-to-Web 
 2004-04-19 à 18:16:45 - Help 
 2005-05-31 à 08:43:06 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2005-12-25 à 16:03:00 - Lavasoft 
 2005-12-20 à 21:42:57 - Macromedia 
 2008-02-24 à 09:52:43 - Microsoft 
 2004-08-17 à 08:47:02 - Sony Corporation
 2003-08-16 à 11:34:10 - VERITAS 

+- C:\Documents and Settings\AURELIEN\Local Settings\Application Data

 2008-02-24 à 09:58:47 - ApplicationHistory 
 2003-01-03 à 17:19:40 - Help 
 2008-02-24 à 09:53:09 - HP 
 2006-05-13 à 08:48:38 - Identities 
 2008-02-24 à 09:53:14 - IsolatedStorage 
 2008-02-24 à 09:53:51 - Microsoft 
 2005-11-11 à 10:15:55 - Panda Software
 2005-10-02 à 12:58:58 - Toshiba 

+- C:\Documents and Settings\NOEMIE\Application Data

 2008-04-17 à 07:32:28 - Adobe 
 2005-03-20 à 10:06:50 - DIMAGE 
 2003-11-22 à 13:58:03 - Dossier de téléchargement Share-to-Web
 2003-11-22 à 14:00:56 - Dossier de téléchargement Share-to-Web 
 2006-10-23 à 09:01:57 - FotoWire 
 2002-12-18 à 16:32:04 - Help 
 2007-11-09 à 14:45:53 - HP 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2005-12-27 à 15:29:38 - Lavasoft 
 2005-06-01 à 13:26:23 - Macromedia 
 2008-08-10 à 15:14:54 - Malwarebytes 
 2006-10-22 à 08:53:08 - Microsoft 
 2005-08-06 à 21:50:29 - MP3Chansons 
 2008-08-10 à 09:37:50 - MSN6 
 2003-12-28 à 16:10:51 - Sony Corporation
 2003-03-30 à 19:09:14 - VERITAS 
 2006-03-31 à 16:09:20 - vlc 
 2006-02-24 à 17:00:40 - XnView 

+- C:\Documents and Settings\NOEMIE\Local Settings\Application Data

 2006-10-21 à 16:21:10 - .SIPPS 
 2008-08-10 à 17:54:10 - ApplicationHistory 
 2004-11-11 à 08:10:27 - Help 
 2006-10-22 à 08:53:12 - HP 
 2003-04-12 à 11:30:27 - Identities 
 2006-10-22 à 08:53:28 - IsolatedStorage 
 2006-10-23 à 09:23:04 - Logitech-LS 
 2008-08-10 à 11:32:30 - Microsoft 
 2005-11-18 à 09:03:25 - Panda Software
 2005-10-02 à 12:48:39 - Toshiba 

+- C:\Documents and Settings\Propri‚taire\Application Data

 2002-10-23 à 18:52:39 - Adobe 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2002-10-23 à 18:33:24 - Microsoft 

+- C:\Documents and Settings\Propri‚taire\Local Settings\Application Data

 2002-10-23 à 18:44:20 - Microsoft 

+- C:\Documents and Settings\sylvie\Application Data

 2008-07-15 à 16:22:41 - Adobe 
 2005-12-31 à 17:43:46 - Babylon 
 2003-11-22 à 17:46:25 - Dossier de téléchargement Share-to-Web
 2003-11-23 à 09:37:49 - Dossier de téléchargement Share-to-Web 
 2004-04-04 à 10:14:55 - Help 
 2002-10-23 à 18:44:36 - Identities 
 2002-10-23 à 18:52:39 - InterTrust 
 2003-08-04 à 09:08:18 - Macromedia 
 2007-02-12 à 07:52:05 - Microsoft 
 2005-02-14 à 15:41:21 - MSN6 
 2004-01-27 à 14:12:19 - Sony Corporation
 2003-08-24 à 15:17:06 - VERITAS 

+- C:\Documents and Settings\sylvie\Local Settings\Application Data

 2008-07-15 à 16:31:23 - ApplicationHistory 
 2005-12-31 à 17:37:48 - Babylon 
 2002-12-22 à 12:19:41 - Help 
 2007-02-12 à 07:53:06 - HP 
 2005-12-31 à 17:52:56 - Identities 
 2007-02-12 à 07:53:40 - IsolatedStorage 
 2004-12-04 à 12:50:00 - Microsoft 
 2005-11-18 à 09:03:57 - Panda Software
 2005-10-10 à 08:47:49 - Toshiba 

========== Listing du dossier Program Files

+- C:\Program Files

 2003-03-22 à 15:40:39 - Adobe 
 2008-02-13 à 20:46:22 - Ahead 
 2005-08-05 à 17:37:13 - Alexis The Last Fighter
 2006-12-29 à 11:01:55 - Alwil Software
 2002-12-14 à 17:59:49 - AND 
 2004-11-22 à 18:30:41 - Astral Entertainment
 2002-10-23 à 18:55:23 - Audioneer 
 2007-05-05 à 18:47:47 - AviSynth 2.5
 2007-12-25 à 18:15:48 - AVS4YOU 
 2002-10-23 à 18:54:00 - BackWeb 
 2005-08-05 à 17:40:37 - BigJig 
 2005-03-14 à 14:35:21 - Borland 
 2005-01-02 à 11:22:52 - Canon 
 2006-03-03 à 10:54:34 - CCleaner 
 2007-05-05 à 18:31:47 - Common Files
 2002-10-23 à 18:38:26 - ComPlus Applications
 2005-08-05 à 17:42:36 - Crossword SOS
 2002-10-23 à 19:04:45 - CyberLink 
 2005-03-14 à 13:54:32 - Derelict Software
 2002-12-23 à 14:05:54 - DesignPro 2000
 2005-03-20 à 10:04:42 - DiMAGE Viewer
 2002-12-15 à 11:06:38 - directx 
 2008-02-13 à 20:43:08 - Disney Interactive
 2008-02-13 à 22:07:47 - DivX 
 2005-08-05 à 17:43:36 - Domino Dilemma
 2006-10-21 à 16:38:10 - EHMINSTALL 
 2005-03-29 à 14:22:14 - Eidos Interactive
 2008-02-13 à 20:43:32 - eMule 
 2002-10-23 à 18:54:22 - eSkin 
 2006-10-29 à 08:48:59 - EZFace 
 2005-08-06 à 19:35:32 - Fakeanoid 
 2008-02-13 à 20:44:06 - Fichiers communs
 2005-08-05 à 17:44:38 - Funny Figures Game v3.0
 2005-08-06 à 19:09:01 - GJGames 
 2002-12-15 à 12:55:29 - greenstreet 
 2002-12-14 à 17:13:18 - GTInteractive 
 2002-10-23 à 19:00:03 - HandyBits 
 2005-11-07 à 19:34:12 - Hemera Products
 2006-10-22 à 08:40:39 - Hewlett-Packard 
 2006-10-22 à 08:47:48 - HP 
 2008-02-13 à 20:44:05 - IKEA HomePlanner
 2008-08-10 à 18:10:19 - InstallShield Installation Information
 2008-05-27 à 16:43:59 - Internet Explorer
 2002-12-14 à 17:54:25 - JavaSoft 
 2006-05-10 à 12:25:49 - KODAK 
 2005-08-06 à 18:59:27 - KPI Games
 2005-12-25 à 16:02:54 - Lavasoft 
 2008-08-10 à 18:09:58 - Logitech 
 2008-08-10 à 18:42:15 - Lopxp 
 2005-08-06 à 18:58:16 - LottoWhiz 2000
 2008-08-10 à 17:34:39 - Malwarebytes' Anti-Malware
 2005-11-11 à 12:58:28 - Messenger 
 2008-04-14 à 07:52:48 - Messenger Plus! Live
 2006-10-02 à 18:16:00 - MessengerPlus! 3
 2007-05-07 à 15:20:54 - Microsoft ActiveSync
 2002-10-23 à 18:41:24 - microsoft frontpage
 2003-03-22 à 15:40:58 - Microsoft Games
 2002-10-23 à 19:00:50 - Microsoft Money
 2002-10-23 à 18:58:03 - Microsoft Office
 2002-10-23 à 18:58:29 - Microsoft Visual Studio
 2006-12-26 à 08:54:12 - MioNet 
 2002-10-23 à 18:39:08 - Movie Maker
 2002-10-23 à 18:37:44 - MSN 
 2005-02-11 à 13:24:29 - MSN Apps
 2002-10-23 à 18:37:40 - MSN Gaming Zone
 2008-04-14 à 07:52:47 - MSN Messenger
 2006-10-23 à 13:01:11 - MSXML 4.0
 2006-05-05 à 13:22:17 - NetMeeting 
 2007-02-25 à 08:32:19 - OrangeHSS 
 2002-10-23 à 18:38:58 - Outlook Express
 2005-08-06 à 18:54:28 - PacBomber 
 2005-08-06 à 19:38:38 - PaintDefense 
 2005-08-06 à 18:53:53 - Passage3 
 2002-10-23 à 19:05:12 - PenSuite 
 2006-06-20 à 16:49:12 - PopCap Games
 2006-12-25 à 12:24:55 - pspvideo9 
 2008-02-13 à 22:11:03 - QuickTime 
 2002-10-23 à 18:56:53 - Real 
 2004-01-27 à 08:50:39 - Red Storm Entertainment
 2007-03-09 à 17:07:13 - SAGEM 
 2002-10-23 à 18:53:22 - SBApps 
 2005-08-05 à 17:50:44 - Scramble 
 2007-03-09 à 16:51:12 - Securitoo 
 2005-08-05 à 17:50:03 - Serious Backgammon
 2002-10-23 à 18:37:52 - Services en ligne
 2003-01-03 à 17:19:58 - Sierra On-Line
 2003-12-28 à 16:06:55 - Sony 
 2005-12-28 à 14:42:38 - SYSTRAN 
 2005-10-02 à 12:38:49 - Toshiba 
 2005-03-14 à 14:43:13 - Twilight 
 2004-11-22 à 18:58:16 - Twinno Software
 2002-12-14 à 17:07:24 - Ulead Systems
 2002-10-23 à 18:44:22 - Uninstall Information
 2007-05-07 à 15:19:49 - ViaMichelin 
 2006-03-31 à 16:08:00 - VideoLAN 
 2002-10-23 à 19:01:00 - Virtual CD v4 SDK
 2007-02-25 à 08:20:51 - Wanadoo 
 2006-02-03 à 17:34:23 - Wanadoo Jeux
 2004-11-22 à 18:34:01 - WarnerBrosOnline 
 2008-02-14 à 18:00:28 - Windows Live
 2006-04-21 à 10:25:21 - Windows Media Player
 2002-10-23 à 18:37:38 - Windows NT
 2006-04-29 à 09:07:16 - WindowsUpdate 
 2006-06-20 à 16:51:59 - WinRAR 
 2002-10-23 à 18:41:24 - xerox 
 2008-02-13 à 22:11:27 - XnView 
 2006-03-03 à 10:54:30 - Yahoo! 
 2007-03-21 à 19:15:45 - Zuma Deluxe

========== Tâches planifiées

HPpromotions journeysoftware.job: C:\Program Files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe /N "journeysoftware" -r

========== Clés registre


========== Bloqueur popups Internet Explorer

Blocage des popups non géré par cette version du navigateur.

==========    Suggestion ( /!\ Nécessite une interprétation.)    ==========


+- Registre : Aucune suggestion.


- Fin du rapport -

Utilisateur anonyme · Answer

Télécharge HijackThis ici : 

->  http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe 

-> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation 

-> Clique sur Install ensuite sur I Accept 

-> Clique sur Do a scan system and save log file 

-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

51agost · Answer

voila le contenu:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:50:51, on 10/08/2008
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\WService.EXE
C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\pspvideo9\pspVideo9.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Apps\ActivBoard
hksrv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\WINDOWS\System32
vsvc32.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\System32\DRIVERS\WtSrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [ActivSurf] C:\apps\ActivSurf\4448364\Program\backweb-4448364.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKCU\..\Run: [Update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup
O4 - HKCU\..\Run: [PreAnnotate] C:\WINDOWS\System32\PreAnntt.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [Microsoft Update Machine] wuamgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Microsoft Update Machine] wuamgrd.exe (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=www.packardbell.fr/center
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5054F860-748D-4840-B7B4-DDDB428421AF} - http://ipdata.phoneaccess.com/dialer/1/cab/fr/phoneaccess.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O21 - SSODL: Web Event Logger - {79FEACFF-FFCE-815E-A900-316290B5B738} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard
hksrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\DRIVERS\WtSrv.exe

Utilisateur anonyme · Answer

réouvre hijackthis
fais scan only
coches ces lignes :

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing) 
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file) 


O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab 
O16 - DPF: {5054F860-748D-4840-B7B4-DDDB428421AF} - http://ipdata.phoneaccess.com/dialer/1/cab/fr/phoneaccess.cab 
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/ 
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab 
O21 - SSODL: Web Event Logger - {79FEACFF-FFCE-815E-A900-316290B5B738} - (no file) 


tu les coches et tu clic sur fix checked 


ensuite :

regarde ceci concernant avast : 

antivir vs avast : 

-> http://forum.malekal.com/ftopic3528.php 


alors je te conseille de le desinstaller et d´installer antivir a la place 

Telecharge et instales l'antivirus Antivir Personal Edition Classic : 

->https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html

tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59 

Pour désinstaller Avast telecharge cet outil

https://www.avast.com/fr-fr/uninstall-utility


ensuite met internet explorer a jours : 

IE 7 : ftp://ftp.telecharger.com/01net/IE7Setup.exe


ensuite :

Télécharge ToolsCleaner sur ton bureau. 
--> 
ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
http://pc-system.fr/ 

# Clique sur Recherche et laisse le scan agir ... 
# Clique sur Suppression pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 


et fais ceci :

Désactive et réactive ta restauration system

Tuto xp : http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

51agost · Answer

voila plus de virus, nikel merci bien pour le coup de main c vraiment cool!!

Utilisateur anonyme · Answer

de rien

@++

pense a mettre resolu

Comment supprimer : "win32:Trojan-gen "

21 réponses

Discussions similaires

Newsletters