Virus sur internet

Badseb777 -  
Bonjour,
Quand je surfe sur internet,j'ai souvent des rapport d'erreur qui viennent comme ça, nottament quand je mets juste une lettre dans la barre de recherche google de IE.
C'est rapport d'erreur me propose de faire un débogage, mais rien y fait.
Alors voila un rapport hitjackthis, en espérant trouver une solution.
Merci bcp

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:37, on 2008-09-11
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\DOSPRN\DOSprn.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Creative\Shared Files\CTDevSrv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
C:\WINDOWS\System32\svchost.exe
c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\ApvxdWin.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\WebProxy.exe
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.topchretien.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8800
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5448D50B-9E39-077A-6FC6-01FB725F0C6D} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {7F959B2D-BA27-4D9E-BC2F-5F82DB73D85A} - C:\WINDOWS\System32\urqPjJCs.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [60d39b1b] rundll32.exe "C:\WINDOWS\System32\cenixywh.dll",b
O4 - HKLM\..\Run: [XoftSpy] C:\Program Files\XoftSpy\XoftSpy.exe -s
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [SpriteService] "C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [CTZDetec.exe] C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe
O4 - HKLM\..\Policies\Explorer\Run: [8PJYJytgMp] C:\WINDOWS\TEMP\win25.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: DOSPRN.lnk = C:\Program Files\DOSPRN\DOSprn.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O20 - Winlogon Notify: winbyq32 - winbyq32.dll (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe

--
End of file - 12365 bytes
Configuration: Windows XP
Internet Explorer 7.0

27 réponses

Résumé de la discussion

Des rapports d'erreur apparaissent fréquemment lors de la navigation, notamment lorsqu'une lettre est saisie dans la barre d'adresse d'Internet Explorer, et ils proposent un débogage sans résoudre le problème. Le fichier HijackThis inclus montre une liste détaillée de processus, modules et pages par défaut manipulés, notamment des paramètres proxy et des composants publicitaires ou potentiellement malveillants. Plusieurs éléments laissent penser une compromission du navigateur, comme ProxyServer, des BHO indétectés, des extensions associées à des outils publicitaires et des services Panda et Google Update actifs. Des solutions recommandées incluent la suppression des éléments suspects, la vérification des paramètres réseau et la désactivation des autoruns malveillants, ainsi que l'utilisation d'un antivirus à jour.

Bobot (l’IA à votre service)
  1. Destrio5 Modérateur
    Tu ne peux pas le désinstaller puis réinstaller proprement ?
    1. badseb777
      oui mais c'est comme sur internet.
      Si je redémarre l'ordi le problème n'apparait plus au même moments.
      Et la je n'ai plus de soucis avec panda.
      Mais quand je crois que le problème est partit, pouf le revoila...
      Enfin, merci encore pour ton aide
      1. badseb777
        ben maintenant plus.
        il fait comme sur internet ,de temps en temps il y a ce foutu message d'erreur qui se ramène.
        Puis quand je redémarre l'ordi, il ne vient plus au même moment.
        Et quand je crois ne plus avoir de soucis, pouf il revient.
        Enfin, merci encore quand même pour ton aide.
        3. badseb777
          Pour faire quoi??
          Parce que mon père veut pas qu'on enlève l'antivirus pour lequel il a payé un an d'abonnement!
          1. Destrio5 Modérateur
            ---> Désinstalle Panda proprement :
            http://www.pandasecurity.com/france/homeusers/support/troubleshooter/nh-PAV2008FW/06card_41209.htm?wbc_purpose=Basic&WBCMODE=PresentationUnpublished
            1. badseb777
              juste pour info avant le scan, je n'arrive plus à mettre ma protection automatique et ça ma met le même message que pour internet etc

              J'ai pu trouvé ceci en cliquant un peu partout sur le signalement d'erreur:

              Apvxdwin.exe

              Signature de l'erreur
              AppName: apvxdwin.exe AppVer: 8.1.13.0 ModName: pskcmp.dll
              ModVer: 1.4.3.31 Offset: 0000369e
              3. Destrio5 Modérateur
                Tu as encore des problèmes ou on peut passer à la dernière étape ?
                1. badseb777
                  Lu, merci encore pour ton aide :-)

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 16:28, on 2008-09-15
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
                  C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\WINDOWS\system32\RUNDLL32.EXE
                  C:\Program Files\CyberLink\PowerCinema\PCMService.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Microsoft ActiveSync\wcescomm.exe
                  C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe
                  C:\Program Files\DAEMON Tools Lite\daemon.exe
                  C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                  C:\PROGRA~1\MI3AA1~1\rapimgr.exe
                  C:\Program Files\DOSPRN\DOSprn.exe
                  C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                  C:\Program Files\Creative\Shared Files\CTDevSrv.exe
                  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\inetsrv\inetinfo.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
                  C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
                  C:\WINDOWS\System32\svchost.exe
                  c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
                  C:\Program Files\CyberLink\Shared files\RichVideo.exe
                  C:\WINDOWS\System32\tcpsvcs.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\ApvxdWin.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\WebProxy.exe
                  C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\avciman.exe
                  C:\Program Files\internet explorer\iexplore.exe
                  C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
                  C:\Documents and Settings\DORATA\Bureau\HiJackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.topchretien.com/
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
                  O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
                  O4 - HKLM\..\Run: [XoftSpy] C:\Program Files\XoftSpy\XoftSpy.exe -s
                  O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
                  O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
                  O4 - HKCU\..\Run: [SpriteService] "C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe"
                  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                  O4 - HKCU\..\Run: [CTZDetec.exe] C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - Startup: DOSPRN.lnk = C:\Program Files\DOSPRN\DOSprn.exe
                  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                  O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                  O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                  O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                  O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
                  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                  O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
                  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
                  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                  O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
                  O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
                  O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
                  O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
                  O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
                  O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
                  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
                  O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
                  1. Destrio5 Modérateur
                    ---> Relance HijackThis et choisis Do a system scan only

                    ---> Coche les cases qui sont devant les lignes suivantes :

                    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8800

                    O2 - BHO: (no name) - {5448D50B-9E39-077A-6FC6-01FB725F0C6D} - (no file)

                    O2 - BHO: (no name) - {7F959B2D-BA27-4D9E-BC2F-5F82DB73D85A} - C:\WINDOWS\System32\urqPjJCs.dll (file missing)

                    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

                    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

                    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

                    O4 - HKLM\..\Policies\Explorer\Run: [8PJYJytgMp] C:\WINDOWS\TEMP\win25.exe

                    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

                    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

                    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

                    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

                    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

                    ---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

                    ---> Redémarre ton PC et poste un nouveau rapport HijackThis
                    1. badseb777
                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 22:27, on 2008-09-14
                      Platform: Windows XP SP3 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
                      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
                      C:\WINDOWS\system32\rundll32.exe
                      C:\WINDOWS\system32\rundll32.exe
                      C:\WINDOWS\system32\RUNDLL32.EXE
                      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                      C:\Program Files\CyberLink\PowerCinema\PCMService.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Microsoft ActiveSync\wcescomm.exe
                      C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe
                      C:\Program Files\DAEMON Tools Lite\daemon.exe
                      C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe
                      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
                      C:\Program Files\DOSPRN\DOSprn.exe
                      C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                      C:\WINDOWS\system32\CTsvcCDA.exe
                      C:\Program Files\Creative\Shared Files\CTDevSrv.exe
                      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\inetsrv\inetinfo.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\nvsvc32.exe
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
                      C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
                      C:\WINDOWS\System32\svchost.exe
                      c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
                      C:\Program Files\CyberLink\Shared files\RichVideo.exe
                      C:\WINDOWS\System32\tcpsvcs.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\ApvxdWin.exe
                      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\WebProxy.exe
                      C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
                      C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
                      C:\Program Files\internet explorer\iexplore.exe
                      C:\Documents and Settings\DORATA\Bureau\HiJackThis.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.topchretien.com/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8800
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
                      O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: (no name) - {5448D50B-9E39-077A-6FC6-01FB725F0C6D} - (no file)
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: (no name) - {7F959B2D-BA27-4D9E-BC2F-5F82DB73D85A} - C:\WINDOWS\System32\urqPjJCs.dll (file missing)
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe
                      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      O4 - HKLM\..\Run: [XoftSpy] C:\Program Files\XoftSpy\XoftSpy.exe -s
                      O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
                      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
                      O4 - HKCU\..\Run: [SpriteService] "C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe"
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                      O4 - HKCU\..\Run: [CTZDetec.exe] C:\Program Files\Creative\Creative Media Lite\CTZDetec.exe
                      O4 - HKLM\..\Policies\Explorer\Run: [8PJYJytgMp] C:\WINDOWS\TEMP\win25.exe
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - Startup: DOSPRN.lnk = C:\Program Files\DOSPRN\DOSprn.exe
                      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                      O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                      O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
                      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
                      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
                      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
                      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
                      O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                      O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
                      O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
                      O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
                      O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
                      O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
                      O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
                      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
                      O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
                      2. Badseb777 Auteur
                        c'est vraiment tout ce qu'il y a
                        et j'ai attendu 1 heure depuis le début du scan jusqu'à ce que je poste le rapport
                        2. Badseb777 Auteur
                          ComboFix 08-09-11.02 - DORATA 2008-09-12 22:33:41.6 - NTFSx86
                          Microsoft Windows XP Professionnel 5.1.2600.3.1252.32.1036.18.1177 [GMT 2:00]
                          Endroit: C:\Documents and Settings\DORATA\Bureau\ComboFix.exe
                          * Création d'un nouveau point de restauration

                          [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                          .

                          (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          .
                          ---- Previous Run -------
                          .
                          C:\Documents and Settings\DORATA\Application Data\inst.exe
                          C:\Documents and Settings\DORATA\Bureaublackbird.jpg
                          C:\Documents and Settings\DORATA\BureauEditorFKWP1.5.exe
                          C:\Documents and Settings\DORATA\BureauEditorFKWP2.0.exe
                          C:\Documents and Settings\DORATA\Bureaufilemanagerclient.exe
                          C:\Documents and Settings\DORATA\Bureaufkwp1.5.exe
                          C:\Documents and Settings\DORATA\Bureaufkwp2.0.exe
                          C:\Documents and Settings\DORATA\Bureaufwebd.exe
                          C:\Documents and Settings\DORATA\BureauFWebdEditor.exe
                          C:\Documents and Settings\DORATA\BureauTrojan.Win32.BlackBird.exe
                          C:\Documents and Settings\DORATA\Cookies\dorata@2o7[2].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@indextools[1].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@nestoria[1].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@ngd.thesun.co[1].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@trackers.1st-affiliation[1].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@trafiz[1].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@tsw0[2].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@www.finanzalive[2].txt
                          C:\Documents and Settings\DORATA\Cookies\dorata@www.teloos[1].txt
                          C:\WINDOWS\BM63e0a887.txt
                          C:\WINDOWS\BM63e0a887.xml
                          C:\WINDOWS\system32\actskn43.ocx

                          .
                          ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-08-12 to 2008-09-12 ))))))))))))))))))))))))))))))))))))
                          .

                          2008-09-12 18:59 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
                          2008-09-12 18:59 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
                          2008-09-12 18:58 . 2008-09-12 18:59 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
                          2008-09-11 14:36 . 2008-09-11 14:36 <REP> d-------- C:\Program Files\Trend Micro
                          2008-09-07 13:43 . 2008-06-19 17:24 28,544 --a------ C:\WINDOWS\system32\drivers\pavboot.sys
                          2008-08-24 18:35 . 2006-03-02 14:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
                          2008-08-24 18:30 . 2008-06-14 19:33 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
                          2008-08-24 17:36 . 2008-08-24 17:36 <REP> d-------- C:\WINDOWS\system32\fr
                          2008-08-24 17:36 . 2008-08-24 17:36 <REP> d-------- C:\WINDOWS\l2schemas
                          2008-08-23 13:59 . 2008-08-23 13:59 <REP> d-------- C:\WINDOWS\Sun
                          2008-08-19 21:01 . 2008-08-19 21:01 <REP> d-------- C:\Documents and Settings\DORATA\Application Data\Apple Computer
                          2008-08-19 21:00 . 2008-08-19 21:00 <REP> d-------- C:\Program Files\QuickTime
                          2008-08-19 21:00 . 2008-08-19 21:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
                          2008-08-19 20:46 . 2008-08-19 20:46 <REP> d-------- C:\Program Files\Apple Software Update
                          2008-08-19 20:46 . 2008-08-19 20:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple
                          2008-08-13 23:13 . 2008-08-13 23:13 118 --a------ C:\WINDOWS\system32\MRT.INI
                          2008-08-13 21:42 . 2008-08-13 21:42 <REP> d-------- C:\Program Files\Fichiers communs\AVSMedia
                          2008-08-13 21:42 . 2008-08-13 23:06 <REP> d-------- C:\Program Files\AVS4YOU
                          2008-08-13 21:42 . 2008-08-13 21:42 <REP> d-------- C:\Documents and Settings\DORATA\Application Data\AVS4YOU
                          2008-08-13 21:42 . 2008-08-13 21:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\AVS4YOU
                          2008-08-13 21:42 . 2002-01-05 15:48 974,848 --a------ C:\WINDOWS\system32\mfc70.dll
                          2008-08-13 21:42 . 2002-01-05 15:40 487,424 --a------ C:\WINDOWS\system32\msvcp70.dll
                          2008-08-13 21:42 . 2003-05-22 00:50 344,064 --a------ C:\WINDOWS\system32\msvcr70.dll
                          2008-08-13 20:45 . 2008-08-13 20:45 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
                          2008-08-13 20:18 . 2000-06-23 12:46 37,916 --a------ C:\WINDOWS\WMPrfFRA.prx
                          2008-08-13 06:59 . 2008-04-11 21:05 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll

                          .
                          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          2008-09-12 20:30 1,224 ----a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG.bck
                          2008-09-12 20:30 1,224 ----a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG
                          2008-09-12 16:59 312,532 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT.bck
                          2008-09-12 16:59 312,532 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT
                          2008-09-12 16:50 13,880 ----a-w C:\WINDOWS\system32\drivers\COMFiltr.sys
                          2008-09-12 13:52 --------- d-----w C:\Documents and Settings\DORATA\Application Data\Vso
                          2008-09-11 15:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
                          2008-09-07 11:43 --------- d-----w C:\Program Files\Panda Security
                          2008-08-24 19:41 --------- d-----w C:\Program Files\MSN Messenger
                          2008-08-19 17:52 --------- d-----w C:\Documents and Settings\DORATA\Application Data\StopFlash
                          2008-08-13 18:31 --------- d-----w C:\Program Files\ASUS
                          2008-08-13 18:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
                          2008-08-13 18:17 --------- d-----w C:\Program Files\CyberLink
                          2008-08-12 14:15 --------- d-----w C:\Program Files\POPSY4
                          2008-08-11 12:49 47,360 ----a-w C:\Documents and Settings\DORATA\Application Data\pcouffin.sys
                          2008-08-11 12:49 --------- d-----w C:\Program Files\VSO
                          2008-08-11 12:48 --------- d-----w C:\Program Files\EA Sports
                          2008-08-10 15:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
                          2008-08-03 08:44 --------- d-----w C:\Program Files\Sun
                          2008-08-03 08:44 --------- d-----w C:\Program Files\Java
                          2008-08-03 08:43 --------- d-----w C:\Program Files\Fichiers communs\Java
                          2008-08-02 14:14 --------- d-----w C:\Documents and Settings\All Users\Application Data\vsosdk
                          2008-08-02 12:56 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys
                          2008-08-02 12:30 --------- d-----w C:\Program Files\Microsoft Silverlight
                          2008-07-13 14:34 --------- d-----w C:\Program Files\Handbrake
                          2008-07-13 13:29 --------- d-----w C:\Documents and Settings\DORATA\Application Data\dvdcss
                          2008-04-19 12:52 515,892 ----a-w C:\Documents and Settings\DORATA\eeepcfr[1].zip
                          2008-04-14 22:24 26,081,790 ----a-w C:\Program Files\WDM_R186.exe
                          .
                          2. Badseb777 Auteur
                            Voila

                            ça a supprimer des trucs mais mon problème est toujours la
                            merci

                            Malwarebytes' Anti-Malware 1.28
                            Version de la base de données: 1142
                            Windows 5.1.2600 Service Pack 3

                            2008-09-12 20:53:53
                            mbam-log-2008-09-12 (20-53-53).txt

                            Type de recherche: Examen complet (C:\|)
                            Eléments examinés: 122971
                            Temps écoulé: 22 minute(s), 42 second(s)

                            Processus mémoire infecté(s): 0
                            Module(s) mémoire infecté(s): 0
                            Clé(s) du Registre infectée(s): 1
                            Valeur(s) du Registre infectée(s): 1
                            Elément(s) de données du Registre infecté(s): 0
                            Dossier(s) infecté(s): 0
                            Fichier(s) infecté(s): 3

                            Processus mémoire infecté(s):
                            (Aucun élément nuisible détecté)

                            Module(s) mémoire infecté(s):
                            (Aucun élément nuisible détecté)

                            Clé(s) du Registre infectée(s):
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winbyq32 (Dialer) -> Quarantined and deleted successfully.

                            Valeur(s) du Registre infectée(s):
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\60d39b1b (Trojan.Vundo) -> Quarantined and deleted successfully.

                            Elément(s) de données du Registre infecté(s):
                            (Aucun élément nuisible détecté)

                            Dossier(s) infecté(s):
                            (Aucun élément nuisible détecté)

                            Fichier(s) infecté(s):
                            C:\WINDOWS\system32\winbyq32.dll (Dialer) -> Quarantined and deleted successfully.
                            C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
                            C:\Documents and Settings\All Users\Application Data\evcfmlox.dll (Trojan.Agent) -> Quarantined and deleted successfully.
                            1. Destrio5 Modérateur
                              ---> Fais un scan rapide avec MBAM, supprime tout ce qu'il trouve et poste le rapport :
                              http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm
                              • 1
                              • 2

                              Discussions similaires

                              FOTOSE (allemagne)
                              lix

                              13 réponses
                              ATTENTION : escroquerie à la carte bleue !!
                              dvrg

                              80 réponses
                              Info Free: Votre encours sur le service internet est supérieur à 10 €.
                              Iphone4s

                              22 réponses
                              developement fotos!!
                              dédé

                              2 réponses
                              Peut-on utiliser des ticket kadéos infini sur internet ?
                              Mnoir et blanc

                              46 réponses