Navigation impossible sur Internet :Spyware??

Salut !!

maintenant fais ceci stp :

▶ Télécharger SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.

(c est le numéro 8 en bas de la page)

▶ Double cliquer sur SDFix.exe et choisir Install pour l'extraire dans un dossier dédié sur ton disque C:.

/!\ Démarre en mode sans échec : après le bip et avant le logo windows tapoter sur la touche F8 (ou F5): menu M.S.E..

▶ Choisir son compte, pas celui de l'Administrateur ou autre.

Dérouler la liste des instructions ci-dessous :

• Ouvrir le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuyer sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuyer sur une touche pour redémarrer le PC.
• Le système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuyer sur une touche pour finir l'exécution du script et charger les icônes du Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copier/coller le contenu du fichier Report.txt dans la prochaine réponse sur le forum

Salut!!

Alors voila j'ai fait ce que tu m'as dis.
Le nouveau rapport LopR c'est :

--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.50GHz )
BIOS : BIOS Version 1.20
USER : YEHOUDITH ANKRI ( Administrator )
BOOT : Normal boot
Antivirus : Bitdefender Antivirus 8.0 (Not Activated)
Firewall : Bitdefender Firewall 8.0 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 55 Go Free : 11 Go
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [2] ( 26/10/2008| 1:41 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\WINDOWS\Tasks\A962A84F91C15EBF.job
Supprime! - C:\WINDOWS\Tasks\A9FB06C49564857C.job
Supprime! - C:\DOCUME~1\musik\APPLIC~1\mpegan~1
Supprime! - C:\DOCUME~1\YEHOUD~1\APPLIC~1\mpegan~1
Supprime! - C:\Program Files\mpegan~1

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[06/09/2005|09:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[10/09/2007|21:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[06/09/2005|07:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[07/09/2005|13:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[15/04/2008|01:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
[06/09/2005|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[06/09/2005|08:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\toshiba

[10/12/2006|23:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/10/2008|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[06/02/2008|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[06/02/2008|00:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
[06/12/2007|01:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[16/09/2006|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/04/2008|23:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[30/01/2008|01:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
[26/06/2006|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[15/05/2008|00:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
[26/06/2007|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD X Studios
[29/01/2008|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\first heart program keep
[27/05/2007|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[25/09/2008|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[07/01/2007|02:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[24/02/2008|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/05/2008|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[03/04/2008|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Network Associates
[06/09/2005|06:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[01/10/2007|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[25/09/2008|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/01/2008|01:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\STOPzilla!
[02/03/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[19/05/2008|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[01/06/2006|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ViGUARD
[02/07/2006|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[03/09/2006|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[15/11/2007|00:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[14/05/2008|23:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[14/05/2008|23:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[06/09/2005|09:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[10/09/2007|21:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[06/09/2005|07:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[07/09/2005|13:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[06/09/2005|09:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
[06/09/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[06/09/2005|08:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\toshiba

[06/09/2005|09:03] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
[06/09/2005|07:10] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[13/06/2006|18:23] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[07/09/2005|13:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
[06/09/2005|09:21] C:\DOCUME~1\INVIT~1\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic
[06/09/2005|09:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Symantec
[13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Talkback
[06/09/2005|08:09] C:\DOCUME~1\INVIT~1\APPLIC~1\toshiba

[01/11/2007|09:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/05/2007|16:40] C:\DOCUME~1\MICHEL~1\APPLIC~1\.clamwin
[05/08/2008|07:47] C:\DOCUME~1\MICHEL~1\APPLIC~1\Adobe
[22/07/2007|10:42] C:\DOCUME~1\MICHEL~1\APPLIC~1\AdobeUM
[01/06/2007|12:28] C:\DOCUME~1\MICHEL~1\APPLIC~1\Apple Computer
[31/10/2007|09:51] C:\DOCUME~1\MICHEL~1\APPLIC~1\DivX
[27/05/2007|13:05] C:\DOCUME~1\MICHEL~1\APPLIC~1\Google
[06/09/2005|07:10] C:\DOCUME~1\MICHEL~1\APPLIC~1\Identities
[14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Macromedia
[17/11/2007|23:56] C:\DOCUME~1\MICHEL~1\APPLIC~1\Microsoft
[14/06/2006|12:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Mozilla
[06/09/2005|09:21] C:\DOCUME~1\MICHEL~1\APPLIC~1\MSN Search Toolbar
[29/01/2008|02:20] C:\DOCUME~1\MICHEL~1\APPLIC~1\Skype
[06/09/2005|09:04] C:\DOCUME~1\MICHEL~1\APPLIC~1\Sonic
[07/05/2008|21:24] C:\DOCUME~1\MICHEL~1\APPLIC~1\Spyware Terminator
[06/09/2005|09:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Symantec
[14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Talkback
[30/05/2007|14:39] C:\DOCUME~1\MICHEL~1\APPLIC~1\Template
[06/09/2005|08:09] C:\DOCUME~1\MICHEL~1\APPLIC~1\toshiba
[18/07/2007|13:29] C:\DOCUME~1\MICHEL~1\APPLIC~1\U3
[05/08/2008|09:09] C:\DOCUME~1\MICHEL~1\APPLIC~1\Yahoo!

[07/05/2007|16:33] C:\DOCUME~1\musik\APPLIC~1\.clamwin
[26/07/2007|10:46] C:\DOCUME~1\musik\APPLIC~1\Adobe
[12/08/2007|22:34] C:\DOCUME~1\musik\APPLIC~1\AdobeUM
[13/06/2006|18:34] C:\DOCUME~1\musik\APPLIC~1\Apple Computer
[04/05/2008|18:31] C:\DOCUME~1\musik\APPLIC~1\DivX
[14/06/2006|13:44] C:\DOCUME~1\musik\APPLIC~1\Google
[06/09/2005|07:10] C:\DOCUME~1\musik\APPLIC~1\Identities
[13/06/2006|18:32] C:\DOCUME~1\musik\APPLIC~1\Macromedia
[13/06/2006|18:51] C:\DOCUME~1\musik\APPLIC~1\Microsoft
[13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Mozilla
[06/09/2005|09:21] C:\DOCUME~1\musik\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\musik\APPLIC~1\Sonic
[04/05/2008|18:25] C:\DOCUME~1\musik\APPLIC~1\Spyware Terminator
[02/07/2006|15:06] C:\DOCUME~1\musik\APPLIC~1\Symantec
[13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Talkback
[06/09/2005|08:09] C:\DOCUME~1\musik\APPLIC~1\toshiba

[24/02/2008|16:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[02/04/2006|22:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[06/02/2008|00:25] C:\DOCUME~1\YEHOUD~1\APPLIC~1\acccore
[14/05/2008|23:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Adobe
[28/12/2006|16:23] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AdobeUM
[30/01/2006|22:14] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Apple Computer
[02/06/2008|21:31] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AVS4YOU
[15/09/2008|01:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Azureus
[30/01/2008|01:24] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Bitdefender
[15/05/2008|00:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Creative
[26/06/2007|23:39] C:\DOCUME~1\YEHOUD~1\APPLIC~1\DivX
[28/12/2005|20:36] C:\DOCUME~1\YEHOUD~1\APPLIC~1\FotoWire
[26/08/2008|23:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\GetRightToGo
[04/01/2006|21:15] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Google
[28/06/2007|11:12] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Help
[06/09/2007|20:58] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Identities
[09/01/2006|21:41] C:\DOCUME~1\YEHOUD~1\APPLIC~1\InterVideo
[04/01/2007|00:44] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Leadertech
[19/09/2006|22:49] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Macromedia
[25/09/2008|23:28] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Malwarebytes
[28/06/2007|11:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Media Player Classic
[21/11/2007|02:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Microsoft
[01/09/2008|22:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Mozilla
[15/05/2008|00:33] C:\DOCUME~1\YEHOUD~1\APPLIC~1\muvee Technologies
[28/05/2006|16:19] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Real
[30/01/2007|22:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Reallusion
[20/08/2006|17:35] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Registry Cleaner
[02/10/2007|22:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\RemoteCall for Skype
[05/04/2007|18:01] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Screenshot Sender
[17/05/2007|18:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Shareaza
[26/10/2008|01:39] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Skype
[06/09/2005|09:04] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sonic
[27/04/2008|16:16] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sun
[27/02/2006|04:34] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Symantec
[08/05/2006|20:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Talkback
[27/05/2007|12:59] C:\DOCUME~1\YEHOUD~1\APPLIC~1\TaoUSign
[16/04/2006|00:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Telefun
[26/02/2006|20:42] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Template
[02/01/2006|01:52] C:\DOCUME~1\YEHOUD~1\APPLIC~1\toshiba
[02/08/2007|18:05] C:\DOCUME~1\YEHOUD~1\APPLIC~1\U3
[29/01/2008|01:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\uTorrent
[30/04/2008|23:37] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Vso
[14/05/2008|23:47] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[17/07/2008 09:51][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[08/12/2005 16:01][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
[26/10/2008 01:03][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 12:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[18/12/2007|16:40] C:\Program Files\802.11 Wireless LAN
[03/09/2008|21:42] C:\Program Files\Adobe
[23/03/2006|22:27] C:\Program Files\Alwil Software
[27/05/2008|23:24] C:\Program Files\Apple Software Update
[08/12/2005|16:01] C:\Program Files\Atheros
[06/09/2005|07:38] C:\Program Files\ATI Technologies
[26/08/2008|19:08] C:\Program Files\AVS4YOU
[07/03/2006|21:23] C:\Program Files\AxBx
[11/04/2008|23:30] C:\Program Files\Azureus
[30/01/2008|01:19] C:\Program Files\BitDefender
[09/03/2008|23:37] C:\Program Files\BSPlayer
[24/07/2007|01:03] C:\Program Files\CCleaner
[26/08/2008|19:08] C:\Program Files\ClamWin
[06/09/2005|06:52] C:\Program Files\ComPlus Applications
[14/05/2008|23:33] C:\Program Files\Creative
[05/06/2006|00:03] C:\Program Files\DIFX
[03/09/2008|23:45] C:\Program Files\DivX
[27/01/2007|21:01] C:\Program Files\eMule
[26/08/2008|19:09] C:\Program Files\FBM Software
[28/09/2008|00:42] C:\Program Files\Fichiers communs
[28/12/2005|16:20] C:\Program Files\Free.fr
[28/05/2007|10:09] C:\Program Files\Google
[26/08/2008|19:09] C:\Program Files\InstallShield Installation Information
[17/10/2008|00:14] C:\Program Files\Internet Explorer
[27/05/2008|23:54] C:\Program Files\iPod
[03/10/2007|02:20] C:\Program Files\Iteral
[27/05/2008|23:55] C:\Program Files\iTunes
[27/05/2008|23:05] C:\Program Files\iTunes Library Updater
[28/09/2008|01:58] C:\Program Files\Java
[29/01/2008|01:08] C:\Program Files\LimeWire
[14/05/2008|23:18] C:\Program Files\Logitech
[06/09/2005|07:52] C:\Program Files\ltmoh
[25/09/2008|23:28] C:\Program Files\Malwarebytes' Anti-Malware
[19/10/2008|17:38] C:\Program Files\Messenger
[26/06/2007|20:18] C:\Program Files\Messenger Plus! Live
[09/05/2007|23:41] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[06/09/2005|06:55] C:\Program Files\microsoft frontpage
[24/01/2007|21:53] C:\Program Files\Microsoft Office
[15/11/2007|01:05] C:\Program Files\Microsoft SQL Server Compact Edition
[01/03/2007|22:41] C:\Program Files\Microsoft Windows OneCare Live
[29/01/2008|02:20] C:\Program Files\Microsoft Works
[19/10/2008|17:25] C:\Program Files\Movie Maker
[26/10/2008|01:39] C:\Program Files\Mozilla Firefox
[09/09/2007|11:47] C:\Program Files\Mozilla Firefox 2 Beta 1
[14/01/2007|20:51] C:\Program Files\MSECache
[08/12/2005|19:58] C:\Program Files\MSN
[06/09/2005|06:51] C:\Program Files\MSN Gaming Zone
[25/09/2008|23:15] C:\Program Files\MSN Messenger
[16/10/2006|09:21] C:\Program Files\MSXML 4.0
[19/10/2008|17:13] C:\Program Files\NetMeeting
[03/04/2008|23:01] C:\Program Files\Network Associates
[02/03/2008|01:15] C:\Program Files\Norton AntiVirus
[19/10/2008|17:12] C:\Program Files\Outlook Express
[19/10/2008|16:48] C:\Program Files\QuickTime
[22/01/2007|23:04] C:\Program Files\Real
[06/09/2005|07:45] C:\Program Files\Realtek Sound Manager
[20/08/2006|17:33] C:\Program Files\Registry Cleaner Trial
[02/10/2007|01:29] C:\Program Files\RSupport
[06/09/2005|06:53] C:\Program Files\Services en ligne
[17/05/2007|18:11] C:\Program Files\Shareaza
[01/10/2007|01:06] C:\Program Files\Skype
[02/04/2008|23:50] C:\Program Files\Smart Projects
[16/04/2006|15:13] C:\Program Files\Sonic
[25/09/2008|22:21] C:\Program Files\Spybot - Search & Destroy
[28/09/2008|01:57] C:\Program Files\Sun
[06/09/2005|07:47] C:\Program Files\Synaptics
[08/06/2006|15:54] C:\Program Files\TOSHIBA
[25/09/2008|22:37] C:\Program Files\Trend Micro
[07/09/2005|13:31] C:\Program Files\Uninstall Information
[28/06/2007|11:11] C:\Program Files\VDCodecPack3.7
[29/01/2008|00:48] C:\Program Files\WashAndGo
[28/05/2008|23:11] C:\Program Files\WinAVI MP4 Converter
[27/02/2008|08:16] C:\Program Files\Windows Live
[03/06/2008|22:50] C:\Program Files\Windows Live Safety Center
[21/11/2007|23:51] C:\Program Files\Windows Live Toolbar
[31/10/2007|08:38] C:\Program Files\Windows Media Connect 2
[19/10/2008|17:12] C:\Program Files\Windows Media Player
[29/01/2008|15:46] C:\Program Files\Windows NT
[06/09/2005|06:53] C:\Program Files\WindowsUpdate
[16/05/2008|00:09] C:\Program Files\WinRAR
[06/09/2005|06:55] C:\Program Files\xerox
[14/05/2008|23:43] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[04/01/2007|01:31] C:\Program Files\Fichiers communs\Adobe
[26/08/2008|19:03] C:\Program Files\Fichiers communs\AOL
[19/10/2008|16:46] C:\Program Files\Fichiers communs\Apple
[26/08/2008|19:08] C:\Program Files\Fichiers communs\AVSMedia
[30/01/2008|15:51] C:\Program Files\Fichiers communs\BitDefender
[03/04/2008|23:01] C:\Program Files\Fichiers communs\Cisco Systems
[28/12/2005|20:36] C:\Program Files\Fichiers communs\FotoWire
[28/12/2005|18:32] C:\Program Files\Fichiers communs\InstallShield
[29/01/2008|15:41] C:\Program Files\Fichiers communs\iS3
[06/09/2005|07:07] C:\Program Files\Fichiers communs\Java
[27/05/2008|22:29] C:\Program Files\Fichiers communs\Logitech
[02/06/2008|21:26] C:\Program Files\Fichiers communs\Microsoft Shared
[06/09/2005|06:52] C:\Program Files\Fichiers communs\MSSoap
[03/04/2008|23:01] C:\Program Files\Fichiers communs\Network Associates
[06/09/2005|08:47] C:\Program Files\Fichiers communs\ODBC
[29/01/2007|00:25] C:\Program Files\Fichiers communs\Real
[06/09/2005|06:52] C:\Program Files\Fichiers communs\Services
[01/10/2007|01:05] C:\Program Files\Fichiers communs\Skype
[06/09/2005|08:47] C:\Program Files\Fichiers communs\SpeechEngines
[02/03/2008|01:15] C:\Program Files\Fichiers communs\Symantec Shared
[19/10/2008|17:12] C:\Program Files\Fichiers communs\System
[15/11/2007|00:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 54 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-26 01:42:52
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 123

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:154][D:11]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\Temp
[F:32][D:0]-> C:\DOCUME~1\YEHOUD~1\Cookies
[F:107][D:4]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 17/10/2008|16:53 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 26/10/2008| 1:47 - Option : [2]

--------------------\\ Fin du rapport a 1:47:53

Salut !!

maintenant fais ceci stp :

▶ Relance Lop S&D

▶ Choisis cette fois-ci l'option 2 (Suppression)

▶ Ne ferme pas la fenêtre lors de la suppression !

▶ Poste le rapport généré (C:\lopR.txt)

* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Salut!!
Alors voila pour le joli rapport lopR:

--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.50GHz )
BIOS : BIOS Version 1.20
USER : YEHOUDITH ANKRI ( Administrator )
BOOT : Normal boot
Antivirus : Bitdefender Antivirus 8.0 (Not Activated)
Firewall : Bitdefender Firewall 8.0 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 55 Go Free : 13 Go
D:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [1] ( 17/10/2008|16:47 )

--------------------\\ Listing des dossiers dans APPLIC~1

[06/09/2005|09:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[10/09/2007|21:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
[06/09/2005|07:10] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[07/09/2005|13:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[15/04/2008|01:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
[06/09/2005|09:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[06/09/2005|08:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\toshiba

[10/12/2006|23:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[13/10/2008|00:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
[06/02/2008|00:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[06/02/2008|00:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL OCP
[06/12/2007|01:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[16/09/2006|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[30/04/2008|23:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[30/01/2008|01:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
[26/06/2006|21:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[15/05/2008|00:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
[26/06/2007|21:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD X Studios
[29/01/2008|16:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\first heart program keep
[27/05/2007|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[25/09/2008|23:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[07/01/2007|02:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[24/02/2008|16:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[14/05/2008|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[03/04/2008|23:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Network Associates
[06/09/2005|06:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[01/10/2007|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[25/09/2008|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/01/2008|01:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\STOPzilla!
[02/03/2008|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[19/05/2008|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[22/02/2008|01:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[01/06/2006|15:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ViGUARD
[02/07/2006|14:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[03/09/2006|18:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[15/11/2007|00:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[14/05/2008|23:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo!
[14/05/2008|23:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[06/09/2005|09:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[10/09/2007|21:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
[06/09/2005|07:10] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[07/09/2005|13:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[06/09/2005|09:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sonic
[06/09/2005|09:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[06/09/2005|08:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\toshiba

[06/09/2005|09:03] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
[06/09/2005|07:10] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[13/06/2006|18:23] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
[07/09/2005|13:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
[06/09/2005|09:21] C:\DOCUME~1\INVIT~1\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Sonic
[06/09/2005|09:11] C:\DOCUME~1\INVIT~1\APPLIC~1\Symantec
[13/06/2006|18:22] C:\DOCUME~1\INVIT~1\APPLIC~1\Talkback
[06/09/2005|08:09] C:\DOCUME~1\INVIT~1\APPLIC~1\toshiba

[01/11/2007|09:15] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[07/05/2007|16:40] C:\DOCUME~1\MICHEL~1\APPLIC~1\.clamwin
[05/08/2008|07:47] C:\DOCUME~1\MICHEL~1\APPLIC~1\Adobe
[22/07/2007|10:42] C:\DOCUME~1\MICHEL~1\APPLIC~1\AdobeUM
[01/06/2007|12:28] C:\DOCUME~1\MICHEL~1\APPLIC~1\Apple Computer
[31/10/2007|09:51] C:\DOCUME~1\MICHEL~1\APPLIC~1\DivX
[27/05/2007|13:05] C:\DOCUME~1\MICHEL~1\APPLIC~1\Google
[06/09/2005|07:10] C:\DOCUME~1\MICHEL~1\APPLIC~1\Identities
[14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Macromedia
[17/11/2007|23:56] C:\DOCUME~1\MICHEL~1\APPLIC~1\Microsoft
[14/06/2006|12:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Mozilla
[06/09/2005|09:21] C:\DOCUME~1\MICHEL~1\APPLIC~1\MSN Search Toolbar
[29/01/2008|02:20] C:\DOCUME~1\MICHEL~1\APPLIC~1\Skype
[06/09/2005|09:04] C:\DOCUME~1\MICHEL~1\APPLIC~1\Sonic
[07/05/2008|21:24] C:\DOCUME~1\MICHEL~1\APPLIC~1\Spyware Terminator
[06/09/2005|09:11] C:\DOCUME~1\MICHEL~1\APPLIC~1\Symantec
[14/06/2006|12:12] C:\DOCUME~1\MICHEL~1\APPLIC~1\Talkback
[30/05/2007|14:39] C:\DOCUME~1\MICHEL~1\APPLIC~1\Template
[06/09/2005|08:09] C:\DOCUME~1\MICHEL~1\APPLIC~1\toshiba
[18/07/2007|13:29] C:\DOCUME~1\MICHEL~1\APPLIC~1\U3
[05/08/2008|09:09] C:\DOCUME~1\MICHEL~1\APPLIC~1\Yahoo!

[07/05/2007|16:33] C:\DOCUME~1\musik\APPLIC~1\.clamwin
[26/07/2007|10:46] C:\DOCUME~1\musik\APPLIC~1\Adobe
[12/08/2007|22:34] C:\DOCUME~1\musik\APPLIC~1\AdobeUM
[13/06/2006|18:34] C:\DOCUME~1\musik\APPLIC~1\Apple Computer
[04/05/2008|18:31] C:\DOCUME~1\musik\APPLIC~1\DivX
[14/06/2006|13:44] C:\DOCUME~1\musik\APPLIC~1\Google
[06/09/2005|07:10] C:\DOCUME~1\musik\APPLIC~1\Identities
[13/06/2006|18:32] C:\DOCUME~1\musik\APPLIC~1\Macromedia
[13/06/2006|18:51] C:\DOCUME~1\musik\APPLIC~1\Microsoft
[13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Mozilla
[07/10/2007|23:26] C:\DOCUME~1\musik\APPLIC~1\Mpeg Ante
[06/09/2005|09:21] C:\DOCUME~1\musik\APPLIC~1\MSN Search Toolbar
[06/09/2005|09:04] C:\DOCUME~1\musik\APPLIC~1\Sonic
[04/05/2008|18:25] C:\DOCUME~1\musik\APPLIC~1\Spyware Terminator
[02/07/2006|15:06] C:\DOCUME~1\musik\APPLIC~1\Symantec
[13/06/2006|18:31] C:\DOCUME~1\musik\APPLIC~1\Talkback
[06/09/2005|08:09] C:\DOCUME~1\musik\APPLIC~1\toshiba

[24/02/2008|16:43] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[02/04/2006|22:53] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

[06/02/2008|00:25] C:\DOCUME~1\YEHOUD~1\APPLIC~1\acccore
[14/05/2008|23:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Adobe
[28/12/2006|16:23] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AdobeUM
[30/01/2006|22:14] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Apple Computer
[02/06/2008|21:31] C:\DOCUME~1\YEHOUD~1\APPLIC~1\AVS4YOU
[15/09/2008|01:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Azureus
[30/01/2008|01:24] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Bitdefender
[15/05/2008|00:22] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Creative
[26/06/2007|23:39] C:\DOCUME~1\YEHOUD~1\APPLIC~1\DivX
[28/12/2005|20:36] C:\DOCUME~1\YEHOUD~1\APPLIC~1\FotoWire
[26/08/2008|23:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\GetRightToGo
[04/01/2006|21:15] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Google
[28/06/2007|11:12] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Help
[06/09/2007|20:58] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Identities
[09/01/2006|21:41] C:\DOCUME~1\YEHOUD~1\APPLIC~1\InterVideo
[04/01/2007|00:44] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Leadertech
[19/09/2006|22:49] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Macromedia
[25/09/2008|23:28] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Malwarebytes
[28/06/2007|11:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Media Player Classic
[21/11/2007|02:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Microsoft
[01/09/2008|22:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Mozilla
[29/01/2008|16:05] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Mpeg Ante
[15/05/2008|00:33] C:\DOCUME~1\YEHOUD~1\APPLIC~1\muvee Technologies
[28/05/2006|16:19] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Real
[30/01/2007|22:45] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Reallusion
[20/08/2006|17:35] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Registry Cleaner
[02/10/2007|22:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\RemoteCall for Skype
[05/04/2007|18:01] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Screenshot Sender
[17/05/2007|18:10] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Shareaza
[17/10/2008|16:35] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Skype
[06/09/2005|09:04] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sonic
[27/04/2008|16:16] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Sun
[27/02/2006|04:34] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Symantec
[08/05/2006|20:26] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Talkback
[27/05/2007|12:59] C:\DOCUME~1\YEHOUD~1\APPLIC~1\TaoUSign
[16/04/2006|00:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Telefun
[26/02/2006|20:42] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Template
[02/01/2006|01:52] C:\DOCUME~1\YEHOUD~1\APPLIC~1\toshiba
[02/08/2007|18:05] C:\DOCUME~1\YEHOUD~1\APPLIC~1\U3
[29/01/2008|01:02] C:\DOCUME~1\YEHOUD~1\APPLIC~1\uTorrent
[30/04/2008|23:37] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Vso
[14/05/2008|23:47] C:\DOCUME~1\YEHOUD~1\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[17/07/2008 09:51][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[17/10/2008 00:00][--ah-----] C:\WINDOWS\tasks\A9FB06C49564857C.job
[17/10/2008 00:00][--ah-----] C:\WINDOWS\tasks\A962A84F91C15EBF.job
[08/12/2005 16:01][--a------] C:\WINDOWS\tasks\Rappel d'enregistrement 1.job
[17/10/2008 09:03][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 12:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

( A962A84F91C15EBF.job )=( c:\docume~1\musik\applic~1\mpegan~1\downloadrdrjump.exe )
( A9FB06C49564857C.job )=( c:\docume~1\yehoud~1\applic~1\mpegan~1\downloadrdrjump.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[18/12/2007|16:40] C:\Program Files\802.11 Wireless LAN
[03/09/2008|21:42] C:\Program Files\Adobe
[23/03/2006|22:27] C:\Program Files\Alwil Software
[27/05/2008|23:24] C:\Program Files\Apple Software Update
[08/12/2005|16:01] C:\Program Files\Atheros
[06/09/2005|07:38] C:\Program Files\ATI Technologies
[26/08/2008|19:08] C:\Program Files\AVS4YOU
[07/03/2006|21:23] C:\Program Files\AxBx
[11/04/2008|23:30] C:\Program Files\Azureus
[30/01/2008|01:19] C:\Program Files\BitDefender
[09/03/2008|23:37] C:\Program Files\BSPlayer
[24/07/2007|01:03] C:\Program Files\CCleaner
[26/08/2008|19:08] C:\Program Files\ClamWin
[06/09/2005|06:52] C:\Program Files\ComPlus Applications
[14/05/2008|23:33] C:\Program Files\Creative
[05/06/2006|00:03] C:\Program Files\DIFX
[03/09/2008|23:45] C:\Program Files\DivX
[27/01/2007|21:01] C:\Program Files\eMule
[26/08/2008|19:09] C:\Program Files\FBM Software
[28/09/2008|00:42] C:\Program Files\Fichiers communs
[28/12/2005|16:20] C:\Program Files\Free.fr
[28/05/2007|10:09] C:\Program Files\Google
[26/08/2008|19:09] C:\Program Files\InstallShield Installation Information
[17/10/2008|00:14] C:\Program Files\Internet Explorer
[27/05/2008|23:54] C:\Program Files\iPod
[03/10/2007|02:20] C:\Program Files\Iteral
[27/05/2008|23:55] C:\Program Files\iTunes
[27/05/2008|23:05] C:\Program Files\iTunes Library Updater
[28/09/2008|01:58] C:\Program Files\Java
[29/01/2008|01:08] C:\Program Files\LimeWire
[14/05/2008|23:18] C:\Program Files\Logitech
[06/09/2005|07:52] C:\Program Files\ltmoh
[25/09/2008|23:28] C:\Program Files\Malwarebytes' Anti-Malware
[16/08/2008|01:33] C:\Program Files\Messenger
[26/06/2007|20:18] C:\Program Files\Messenger Plus! Live
[09/05/2007|23:41] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[06/09/2005|06:55] C:\Program Files\microsoft frontpage
[24/01/2007|21:53] C:\Program Files\Microsoft Office
[15/11/2007|01:05] C:\Program Files\Microsoft SQL Server Compact Edition
[01/03/2007|22:41] C:\Program Files\Microsoft Windows OneCare Live
[29/01/2008|02:20] C:\Program Files\Microsoft Works
[06/09/2005|06:52] C:\Program Files\Movie Maker
[17/10/2008|16:45] C:\Program Files\Mozilla Firefox
[09/09/2007|11:47] C:\Program Files\Mozilla Firefox 2 Beta 1
[10/05/2007|22:38] C:\Program Files\Mpeg Ante
[14/01/2007|20:51] C:\Program Files\MSECache
[08/12/2005|19:58] C:\Program Files\MSN
[06/09/2005|06:51] C:\Program Files\MSN Gaming Zone
[25/09/2008|23:15] C:\Program Files\MSN Messenger
[16/10/2006|09:21] C:\Program Files\MSXML 4.0
[06/09/2005|06:52] C:\Program Files\NetMeeting
[03/04/2008|23:01] C:\Program Files\Network Associates
[02/03/2008|01:15] C:\Program Files\Norton AntiVirus
[29/01/2008|15:46] C:\Program Files\Outlook Express
[27/05/2008|23:51] C:\Program Files\QuickTime
[22/01/2007|23:04] C:\Program Files\Real
[06/09/2005|07:45] C:\Program Files\Realtek Sound Manager
[20/08/2006|17:33] C:\Program Files\Registry Cleaner Trial
[02/10/2007|01:29] C:\Program Files\RSupport
[06/09/2005|06:53] C:\Program Files\Services en ligne
[17/05/2007|18:11] C:\Program Files\Shareaza
[01/10/2007|01:06] C:\Program Files\Skype
[02/04/2008|23:50] C:\Program Files\Smart Projects
[16/04/2006|15:13] C:\Program Files\Sonic
[25/09/2008|22:21] C:\Program Files\Spybot - Search & Destroy
[28/09/2008|01:57] C:\Program Files\Sun
[06/09/2005|07:47] C:\Program Files\Synaptics
[08/06/2006|15:54] C:\Program Files\TOSHIBA
[25/09/2008|22:37] C:\Program Files\Trend Micro
[07/09/2005|13:31] C:\Program Files\Uninstall Information
[28/06/2007|11:11] C:\Program Files\VDCodecPack3.7
[29/01/2008|00:48] C:\Program Files\WashAndGo
[28/05/2008|23:11] C:\Program Files\WinAVI MP4 Converter
[27/02/2008|08:16] C:\Program Files\Windows Live
[03/06/2008|22:50] C:\Program Files\Windows Live Safety Center
[21/11/2007|23:51] C:\Program Files\Windows Live Toolbar
[31/10/2007|08:38] C:\Program Files\Windows Media Connect 2
[31/10/2007|08:38] C:\Program Files\Windows Media Player
[29/01/2008|15:46] C:\Program Files\Windows NT
[06/09/2005|06:53] C:\Program Files\WindowsUpdate
[16/05/2008|00:09] C:\Program Files\WinRAR
[06/09/2005|06:55] C:\Program Files\xerox
[14/05/2008|23:43] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[04/01/2007|01:31] C:\Program Files\Fichiers communs\Adobe
[26/08/2008|19:03] C:\Program Files\Fichiers communs\AOL
[06/12/2007|01:05] C:\Program Files\Fichiers communs\Apple
[26/08/2008|19:08] C:\Program Files\Fichiers communs\AVSMedia
[30/01/2008|15:51] C:\Program Files\Fichiers communs\BitDefender
[03/04/2008|23:01] C:\Program Files\Fichiers communs\Cisco Systems
[28/12/2005|20:36] C:\Program Files\Fichiers communs\FotoWire
[28/12/2005|18:32] C:\Program Files\Fichiers communs\InstallShield
[29/01/2008|15:41] C:\Program Files\Fichiers communs\iS3
[06/09/2005|07:07] C:\Program Files\Fichiers communs\Java
[27/05/2008|22:29] C:\Program Files\Fichiers communs\Logitech
[02/06/2008|21:26] C:\Program Files\Fichiers communs\Microsoft Shared
[06/09/2005|06:52] C:\Program Files\Fichiers communs\MSSoap
[03/04/2008|23:01] C:\Program Files\Fichiers communs\Network Associates
[06/09/2005|08:47] C:\Program Files\Fichiers communs\ODBC
[29/01/2007|00:25] C:\Program Files\Fichiers communs\Real
[06/09/2005|06:52] C:\Program Files\Fichiers communs\Services
[01/10/2007|01:05] C:\Program Files\Fichiers communs\Skype
[06/09/2005|08:47] C:\Program Files\Fichiers communs\SpeechEngines
[02/03/2008|01:15] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|03:45] C:\Program Files\Fichiers communs\System
[15/11/2007|00:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 56 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\musik\APPLIC~1\MPEGAN~1

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\musik\APPLIC~1\mpegan~1
C:\DOCUME~1\YEHOUD~1\APPLIC~1\mpegan~1
C:\Program Files\mpegan~1
C:\WINDOWS\Tasks\A962A84F91C15EBF.job
C:\WINDOWS\Tasks\A9FB06C49564857C.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BLUE BAT VIEW]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\YEHOUD~1\\APPLIC~1\\MPEGAN~1\\loadfour.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-17 16:48:42
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 123

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:114][D:9]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\Temp
[F:29][D:0]-> C:\DOCUME~1\YEHOUD~1\Cookies
[F:96][D:4]-> C:\DOCUME~1\YEHOUD~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 17/10/2008|16:53 - Option : [1]

--------------------\\ Fin du rapport a 16:53:17

Salut !!

Non ca ne me dérrange pas du tout, tu as le droit de prendre des vacances ;-)

fais ceci stp :

▶ Télécharger et enregistrer lopSD sur le Bureau

(C est le numéro 4 en bas de la page)

▶ Double-clic Lop S&D

▶ Faire l'installation

▶ Fermer toutes les applications

▶ Le lancer par un double-clic sur le raccourci qui est sur le bureau
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur

▶ Taper F pour français , puis presser entrée

▶ Taper 1

▶ Presser Entrée

▶ Le PC va redémarrer
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer

▶ Attendre l'apparition du rapport
▶ Copier le rapport et le coller dans la réponse
le rapport se trouve aussi à C:\lopR

Coucou!
Je suis désolée j'étais en vacance et donc je n'étais pas devant mon ordi pendant pas mal de temps
J'espere que ca te dreange pas qu'on reprenne la on en était.
En fait je t'explique j'ai fait ce que tu m'a dis. Jai bien désinstaller McAfee et supprimé tous ce qui étais donné par la reecherche mais meme en mode sans echec je ne peut pas supprimer CID Help parcque ca me met toujours que "une erreur lors de la tentative de suppression de CID Help. Cet element est peut etre deja desinstallé"
Donc je sais pas si je dois continuer a faire tout ce que tu m'a dis (telecharger toolsclleaner...) si CID Help n'est pa desinstallé..
Merci pour ta reponse!!
A+++

Salut !!

il ne faut jamais installer 2 antivirus sur le meme PC au sinon il risque d y avoir des conflits entres les 2.

Donc vas désinstaller Antivir dans ajout/suppression de programmes et fais une recherche de ton PC en tapant McAfee et supprime tout ce qu il trouvera...ensuite vide ta corbeille.

redémarre en mode sans échec et vas supprimer "CID help".

ensuite redémarre en mode normal et fais ceci pour terminer stp :

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

▶ Télécharge Toolscleaner sur ton Bureau :

(c est le numéro 15 en bas de la page)

▶ Double-clique sur ToolsCleaner2.exe et laisse le travailler
▶ Clique sur Recherche et laisse le scan se terminer.
▶ Clique sur Suppression pour finaliser.
▶ Tu peux, si tu le souhaites, te servir des Options facultatives.
▶ Clique sur Quitter, pour que le rapport puisse se créer.
▶ Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

Désactive et réactive la Restauration du système :

1 Dans la barre des tâches de Windows, clique sur Démarrer.

2 Clique avec le bouton droit de la souris sur Poste de travail puis clique sur Propriétés.

3 Dans l'onglet Restauration du système, coche "Désactiver la Restauration du système"

4 Clique sur Appliquer.

5 Ensuite décoche "Désactiver la restauration du systeme"

6 clique sur appliquer puis ok

7 vas créer un point de restauration en cliquant sur démarrer => tous les programmes => accessoires =>

outils systeme => restauration du systeme => créer un point de restauration => tu mets un nom

(exemple : après désinfection sur CCM) puis tu valides.

Est ce que tu as bien téléchargé la dernière version de java avant de supprimer les autres avec le programme ??

PS : les liens de toolscleaner, etc... C est mon site web si ca peut t aider ;-)

Coucou!
En fait j'utilise plutot McAfee que Antivir.
Pour l'instant mes problemes de navigation sur Internet et fenetre intempestives semble avoir disparu :-)
Je voulais te demander en fait dans la liste de mes programmes s'affiche le programme "CID Help" j'ai lu qu'il faut supprimer ce genre de fichier mais moi quand ke clique sur supprimer ca me met que une erreur s'est produite lors de la desinstallation et que cet element est peut etre deja supprimer. Je voulais simplement te demander si tu pense que ce programme est vrement supprimé ou si il s'agit d'une erreur qui empeche la desinstallation???
Enfin voila en attendant comme demandé je te poste rapport généré par JavaRa :

Merci pour ton aide.

JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Sep 28 01:58:52 2008

Found and removed: C:\Program Files\Java\jre1.5.0_02

Found and removed: Software\JavaSoft\Java2D\1.5.0_02

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Classes\JavaPlugin.150_02

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_02

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_02

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510002

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150020}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_02

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_02\

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

------------------------------------

Finished reporting.

relance hijackthis en cliquant sur scan only et coches ces lignes stp :

O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

puis tu cliques sur fix checked.

ensuite :

▶ Télécharge JavaRa.zip

▶ Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)

▶ Double-clique sur le répertoire JavaRa obtenu.

▶ Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)

▶ Clique sur Search For Updates.

▶ Sélectionne Update Using jucheck.exe puis clique sur Search.

▶ Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.

▶ Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.

▶ Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.

▶ Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.

* Note : le rapport se trouve aussi là : ( C:\JavaRa.log )

▶ Ferme l'application.

Je vois que tu as 2 antivirus : antivir et McAfee...lequel utilises tu ??

et est ce que tu as encore des problemes ??

je viendrai vérifier tes réponses demain dès que possible ;-)

Bonne fin de soirée @+

Alors voici le nouveau rapport hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:15:31, on 28/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\V0420Mon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\RSupport\RemoteCall for Skype\rc4skype.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe" -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skype\rc4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

Alor voila jai fait le rapport avec combofix. Le voici :

ComboFix 08-09-27.01 - YEHOUDITH ANKRI 2008-09-28 0:39:58.1 - NTFSx86
Lancé depuis: C:\Documents and Settings\YEHOUDITH ANKRI\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Invit‚\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\Documents and Settings\michele ZERDOUN\Cookies\michele_zerdoun@esearchvision[2].txt
C:\Documents and Settings\michele ZERDOUN\Cookies\michele_zerdoun@sansendommagement[2].txt
C:\Documents and Settings\musik\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\inst.exe
C:\Program Files\outlook
C:\Program Files\smbols~1
C:\temp\tn3
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\urlmsnlink.dat

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_CORE

((((((((((((((((((((((((((((( Fichiers créés du 2008-08-27 au 2008-09-27 ))))))))))))))))))))))))))))))))))))
.

2008-09-25 23:28 . 2008-09-25 23:28 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-09-25 23:28 . 2008-09-25 23:28 <REP> d-------- C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Malwarebytes
2008-09-25 23:28 . 2008-09-25 23:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-09-25 23:28 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-25 23:28 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-09-25 23:00 . 2008-09-25 23:18 2,810 --a------ C:\Documents and Settings\Orph.egd
2008-09-25 22:56 . 2008-09-25 23:21 <REP> d-------- C:\ToolBar SD
2008-09-25 22:37 . 2008-09-25 22:37 <REP> d-------- C:\Program Files\Trend Micro
2008-09-25 22:21 . 2008-09-25 22:21 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-09-25 22:12 . 2008-09-25 22:16 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-09-25 21:09 . 2008-09-25 22:21 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-09-25 20:53 . 2008-09-25 20:53 <REP> d-------- C:\QUARANTINE
2008-09-24 23:00 . 2008-09-24 23:00 128,000 --a------ C:\WINDOWS\system32\vullvxvo.dll
2008-09-24 23:00 . 2008-09-24 23:00 128,000 --a------ C:\WINDOWS\system32\spblby.dll
2008-09-24 23:00 . 2008-09-24 23:00 95,232 --a------ C:\WINDOWS\system32\qqogdhyy.dll
2008-09-24 22:06 . 2008-09-24 22:06 128,000 --a------ C:\WINDOWS\system32\wfqjpagi.dll
2008-09-24 22:06 . 2008-09-24 22:06 128,000 --a------ C:\WINDOWS\system32\jhaurl.dll
2008-09-23 21:47 . 2008-09-24 21:56 885,471 ---hs---- C:\WINDOWS\system32\sttxcfdg.ini
2008-09-23 21:44 . 2008-09-23 21:44 128,000 --a------ C:\WINDOWS\system32\ztnpoz.dll
2008-09-23 21:44 . 2008-09-23 21:44 128,000 --a------ C:\WINDOWS\system32\ifpilatw.dll
2008-09-23 21:41 . 2008-09-23 21:41 95,232 --a------ C:\WINDOWS\system32\kgagjmfg.dll
2008-09-09 20:20 . 2008-09-28 00:51 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-09-09 20:20 . 2008-09-09 20:20 1,409 --a------ C:\WINDOWS\QTFont.for

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-27 22:28 --------- d-----w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Skype
2008-09-25 21:15 --------- d-----w C:\Program Files\MSN Messenger
2008-09-14 23:22 --------- d-----w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Azureus
2008-09-03 21:45 --------- d-----w C:\Program Files\DivX
2008-08-26 21:02 --------- d-----w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\GetRightToGo
2008-08-26 20:27 164 ----a-w C:\install.dat
2008-08-26 17:09 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-26 17:09 --------- d-----w C:\Program Files\FBM Software
2008-08-26 17:08 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia
2008-08-26 17:08 --------- d-----w C:\Program Files\ClamWin
2008-08-26 17:08 --------- d-----w C:\Program Files\AVS4YOU
2008-08-26 17:03 --------- d-----w C:\Program Files\Fichiers communs\AOL
2008-08-06 08:42 24,196 -c--a-w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\wklnhst.dat
2008-08-05 07:09 --------- d-----w C:\Documents and Settings\michele ZERDOUN\Application Data\Yahoo!
2008-07-23 16:48 200,704 -c--a-w C:\WINDOWS\system32\ssldivx.dll
2008-07-23 16:48 1,044,480 -c--a-w C:\WINDOWS\system32\libdivx.dll
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
2008-07-07 20:18 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-04-30 21:37 94,208 ----a-w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\ezplay.sys
2008-04-30 21:37 47,360 ----a-w C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\pcouffin.sys
2007-10-31 19:01 2,688 -c--a-w C:\Documents and Settings\michele ZERDOUN\Application Data\wklnhst.dat
2007-05-20 11:41 54,275 -c--a-w C:\Documents and Settings\YEHOUDITH ANKRI\x.dat
2007-05-17 12:51 128 ----a-w C:\Documents and Settings\YEHOUDITH ANKRI\ps.exe
2007-01-22 20:46 774,144 -c--a-w C:\Program Files\RngInterstitial.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 65536]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"Registry Cleaner"="C:\Program Files\Registry Cleaner Trial\Regclean.exe" [2006-07-18 4714496]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-09-13 22880040]
"Rc4Skype Startup"="C:\Program Files\RSupport\RemoteCall for Skype\rc4skype.exe" [2007-05-29 683088]
"Creative Live! Cam Manager"="C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe" [2007-06-07 155648]
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 4670704]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-04-11 339968]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-15 98394]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-15 688218]
"LtMoh"="C:\Program Files\ltmoh\Ltmoh.exe" [2005-04-13 184320]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2005-04-25 339968]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-04-05 73728]
"PadTouch"="C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe" [2004-11-17 1077327]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2007-09-18 249896]
"ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" [2004-08-25 94208]
"McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 139320]
"Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2003-10-07 147514]
"V0420Mon.exe"="C:\WINDOWS\V0420Mon.exe" [2007-04-30 32768]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"TPSMain"="TPSMain.exe" [2005-01-21 C:\WINDOWS\system32\TPSMain.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360]

C:\Documents and Settings\YEHOUDITH ANKRI\Menu D‚marrer\Programmes\D‚marrage\
wkcalrem.LNK - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe [2004-07-12 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Azureus\\Azureus.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 V0420VID;Live! Cam Vista IM (VF0420);C:\WINDOWS\system32\DRIVERS\V0420Vid.sys [2007-05-31 99648]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{de6e70e4-0eaa-11dc-b38b-0011f5b87702}]
\Shell\AutoRun\command - E:\LaunchU3.exe -a

*Newly Created Service* - ENTDRV51
.
Contenu du dossier 'Tâches planifiées'
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{434E7224-7CDE-41A1-9290-6AD19790F6AE} - (no file)
BHO-{8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} - C:\Program Files\Outlook Express\quhabepuf.dll
BHO-{DF0053C3-FF29-4B77-9D30-4203AC64F7D4} - (no file)
Toolbar-SITEguard - (no file)
HKLM-Run-EoEngine - (no file)
HKLM-Run-EoWeather - (no file)
HKLM-Run-EoSudoku - (no file)

.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Mozilla\Firefox\Profiles\km2m1x9e.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://fr.search.yahoo.com/search?fr=ffsp1&p=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://fr.yahoo.com
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava11.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava12.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava13.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava14.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJava32.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPJPI150_02.dll
FF -: plugin - C:\Program Files\Java\jre1.5.0_02\bin\NPOJI610.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npracplug.dll
FF -: plugin - C:\Program Files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
FF -: plugin - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll
FF -: plugin - C:\Program Files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-28 00:47:38
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Skype\stillyou18\dyncontent\bundle.dat-journal
C:\Documents and Settings\YEHOUDITH ANKRI\Application Data\Skype\stillyou18\config.tmp

Scan terminé avec succès
Fichiers cachés: 2

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
.
**************************************************************************
.
Heure de fin: 2008-09-28 1:08:32 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-09-27 23:08:19

Avant-CF: 13ÿ937ÿ680ÿ384 octets libres
Après-CF: 14,111,535,104 octets libres

214 --- E O F --- 2008-09-11 05:35:22

Salut !!

maintenant fais ceci stp :

▶ Télécharge Combofix de sUBs

(c est le numéro 5 en bas de la page)

▶ et enregistre le sur le Bureau.

▶ désactive tes protections et ferme toutes tes applications(antivirus, parefeu, garde en temps réel de l'antispyware)

Voici le tutoriel officiel de Bleeping Computer pour savoir l utiliser :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

ensuite envois le rapport et refais un nouveau rapport hijackthis stp

Alors voila pour le rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:23:29, on 28/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ACS.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\V0420Mon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\RSupport\RemoteCall for Skype\rc4skype.exe
C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {434E7224-7CDE-41A1-9290-6AD19790F6AE} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} - C:\Program Files\Outlook Express\quhabepuf.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} - (no file)
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe" -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skype\rc4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ????????????????????
?L?9?9?9?9?C?9?? tgpswh.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

Bonjour,
Désolé je nai pu faire tout ca que maintenant. Alor voila pour le rapport Virtumundobegone
Le PC ne s'est pas eteint et redemarré donc je pense pas qu'il y ai de vundo sur mon PC.

[09/28/2008, 0:03:25] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\YEHOUDITH ANKRI\Bureau\VirtumundoBeGone.exe" )
[09/28/2008, 0:03:36] - Detected System Information:
[09/28/2008, 0:03:36] - Windows Version: 5.1.2600, Service Pack 2
[09/28/2008, 0:03:36] - Current Username: YEHOUDITH ANKRI (Admin)
[09/28/2008, 0:03:36] - Windows is in SAFE mode.
[09/28/2008, 0:03:36] - Searching for Browser Helper Objects:
[09/28/2008, 0:03:36] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (&Yahoo! Toolbar Helper)
[09/28/2008, 0:03:36] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[09/28/2008, 0:03:36] - BHO 3: {434E7224-7CDE-41A1-9290-6AD19790F6AE} ()
[09/28/2008, 0:03:36] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:03:36] - No filename found. Continuing.
[09/28/2008, 0:03:36] - BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[09/28/2008, 0:03:36] - BHO 5: {64F56FC1-1272-44CD-BA6E-39723696E350} (EoBho Class)
[09/28/2008, 0:03:36] - BHO 6: {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} ()
[09/28/2008, 0:03:36] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:03:36] - Checking for HKLM\...\Winlogon\Notify\quhabepuf
[09/28/2008, 0:03:36] - Key not found: HKLM\...\Winlogon\Notify\quhabepuf, continuing.
[09/28/2008, 0:03:36] - BHO 7: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[09/28/2008, 0:03:36] - BHO 8: {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} ()
[09/28/2008, 0:03:36] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:03:36] - No filename found. Continuing.
[09/28/2008, 0:03:36] - Finished Searching Browser Helper Objects
[09/28/2008, 0:03:36] - Finishing up...
[09/28/2008, 0:03:36] - Nothing found! Exiting...

[09/28/2008, 0:10:29] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\YEHOUDITH ANKRI\Bureau\VirtumundoBeGone.exe" )
[09/28/2008, 0:10:32] - Detected System Information:
[09/28/2008, 0:10:32] - Windows Version: 5.1.2600, Service Pack 2
[09/28/2008, 0:10:32] - Current Username: YEHOUDITH ANKRI (Admin)
[09/28/2008, 0:10:32] - Windows is in NORMAL mode.
[09/28/2008, 0:10:32] - Searching for Browser Helper Objects:
[09/28/2008, 0:10:32] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (&Yahoo! Toolbar Helper)
[09/28/2008, 0:10:32] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[09/28/2008, 0:10:32] - BHO 3: {434E7224-7CDE-41A1-9290-6AD19790F6AE} ()
[09/28/2008, 0:10:32] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:10:32] - No filename found. Continuing.
[09/28/2008, 0:10:32] - BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[09/28/2008, 0:10:32] - BHO 5: {64F56FC1-1272-44CD-BA6E-39723696E350} (EoBho Class)
[09/28/2008, 0:10:32] - BHO 6: {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} ()
[09/28/2008, 0:10:32] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:10:32] - Checking for HKLM\...\Winlogon\Notify\quhabepuf
[09/28/2008, 0:10:32] - Key not found: HKLM\...\Winlogon\Notify\quhabepuf, continuing.
[09/28/2008, 0:10:32] - BHO 7: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[09/28/2008, 0:10:32] - BHO 8: {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} ()
[09/28/2008, 0:10:32] - WARNING: BHO has no default name. Checking for Winlogon reference.
[09/28/2008, 0:10:32] - No filename found. Continuing.
[09/28/2008, 0:10:32] - Finished Searching Browser Helper Objects
[09/28/2008, 0:10:32] - Finishing up...
[09/28/2008, 0:10:32] - Nothing found! Exiting...

dsl de te répondre si tard mais je travaillais sur une astuce pour la faq...

Pour s assurer que tu n ai plus d infections vundo, fais ceci stp :

▶ Télécharge sur le bureau Virtumundobegone

(c est le numéro 13 en bas de la page)

▶ déconnecte internet et désactive ton antivirus le temps de la manipulation

=> Double clic sur VirtumundoBeGone.exe
=> Clic Continue ==> clic Start
=> Clic Oui
=> A la fin si Vundo est présent , le PC s’éteint et redémarre
▶ Si Ecran bleu et message : Erreur fatale .. pas de problème
=> Poster le rapport VBG.TXT qui est sur le bureau

ensuite refais un nouveau rapport hijackthis stp

Et enfin voici le rapport HijackThis apres redemarrage du PC et suppression des infections dans Malwarebytes:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:21:33, on 26/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {434E7224-7CDE-41A1-9290-6AD19790F6AE} - C:\WINDOWS\system32\vtUklkHB.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {8ECBB8A6-5CFC-4AA8-36A5-C47BAF419053} - C:\Program Files\Outlook Express\quhabepuf.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DF0053C3-FF29-4B77-9D30-4203AC64F7D4} - C:\WINDOWS\system32\pmnnMfDt.dll (file missing)
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [THotkey] "C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [V0420Mon.exe] C:\WINDOWS\V0420Mon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BM675b4629] Rundll32.exe "C:\WINDOWS\system32\clhoyves.dll",s
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\Regclean.exe" -startminimize
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Rc4Skype Startup] "C:\Program Files\RSupport\RemoteCall for Skype\rc4skype.exe"
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Wireless Configuration Utility HW.51.lnk = C:\Program Files\802.11 Wireless LAN\802.11g Wireless Cardbus & PCI Adapter HW.51 V1.00\WlanCU.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ????????????????????
?L?9?9?9?9?C?9?? tgpswh.dll
O20 - Winlogon Notify: vtUklkHB - vtUklkHB.dll (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe

Alors voila l'analyse malwarebytes c'est enfin terminée..
Voici le rapport :
Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1205
Windows 5.1.2600 Service Pack 2

26/09/2008 00:09:40
mbam-log-2008-09-26 (00-09-40).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 118249
Temps écoulé: 38 minute(s), 23 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 5
Clé(s) du Registre infectée(s): 43
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 23

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\pmnnMfDt.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\yyqfyoxb.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\vtUklkHB.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\mfxudaoy.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\tgpswh.dll (Trojan.Vundo.H) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{434e7224-7cde-41a1-9290-6ad19790f6ae} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vtuklkhb (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{434e7224-7cde-41a1-9290-6ad19790f6ae} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4ddf699c-e27a-4cc6-ad1e-3dd599ad6b8f} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4ddf699c-e27a-4cc6-ad1e-3dd599ad6b8f} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{df0053c3-ff29-4b77-9d30-4203ac64f7d4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{df0053c3-ff29-4b77-9d30-4203ac64f7d4} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\videoegg.activexloader (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\videoegg.activexloader.1 (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e282c728-189d-419e-8ee2-1601f4b39ba5} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e1a63484-a022-4d42-830a-fbd411514440} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{dc3a04ee-cdd7-4407-915c-a5502f97eecd} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{db8cce99-59c6-4552-8bfc-058feb38d6ce} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d17726cc-d4dd-4c4a-9671-471d56e413b5} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c5041fd9-4819-4dc4-b20e-c950b5b03d2a} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bb187c0d-6f53-4f3e-9590-98fd3a7364a2} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{af2e62b6-f9e1-4d4f-a10a-9dc8e6dcbcc0} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ad5915ea-b61a-4dba-b5c8-ef4b2df0a3c7} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{ad0a3058-fd49-4f98-a514-fd055201835e} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a58c497b-3ee2-45e7-9594-daca6be2a0d0} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a3d06987-c35e-49e4-8fe2-ac67b9fbfb4c} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9856e2d8-ffb2-4fe5-8cad-d5ad6a35a804} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8f6a82a2-d7b1-443e-bb9f-f7dc887dd618} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{88d6cf0e-cf70-4c24-bf6e-e4e414bc649c} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{83dfb6ee-ab18-41b5-86d4-b544a141d67e} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5c29c7e4-5321-4cad-be2e-877666bed5df} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3f91eb90-ef62-44ee-a685-fac29af111cd} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1a8642f1-dc80-4edc-a39d-0fb62a58b455} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{168dc258-1455-4e61-8590-9dac2f27b675} (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\VideoEgg (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videoegg.com/publisher,version=1.5 (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\VideoEgg (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MozillaPlugins\@videoegg.com/publisher,version=1.5 (Adware.VideoEgg) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\core (Rootkit.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\646875b5 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{434e7224-7cde-41a1-9290-6ad19790f6ae} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bm675b4629 (Trojan.Agent) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\pmnnmfdt -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\pmnnmfdt -> Delete on reboot.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\vtUklkHB.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\tgpswh.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\pmnnMfDt.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\tDfMnnmp.ini (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\tDfMnnmp.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yyqfyoxb.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\bxoyfqyy.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yyyhdofx.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\xfodhyyy.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mfxudaoy.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\Documents and Settings\YEHOUDITH ANKRI\Local Settings\Temporary Internet Files\Content.IE5\G2RDDN0C\nd82m0[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\YEHOUDITH ANKRI\Local Settings\Temporary Internet Files\Content.IE5\KJI7OTTM\upd105320[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A98093AE-F09D-466F-AB9F-890A95100D41}\RP555\A0095497.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\ToolBar SD\Backup-TB\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hgGvssRH.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\clhoyves.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM675b4629.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM675b4629.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\wr.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\tmlpcert2007 (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\core.cache.dsk (Rootkit.Agent) -> Quarantined and deleted successfully.

ok maintenant fais malwarebytes stp

aide toi bien du tuto pour supprimer tout ce qu il aura trouvé

Voila le nouveau rapport donné :

-----------\\ ToolBar S&D 1.2.1 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Celeron(R) M processor 1.50GHz )
BIOS : BIOS Version 1.20
USER : YEHOUDITH ANKRI ( Not Administrator ! )
BOOT : Fail-safe with network boot
Antivirus : Avira AntiVir PersonalEdition 6.39.1.147
(Activated)
Firewall : Bitdefender Firewall 8.0 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 55 Go Free : 13 Go
D:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 24-09-2008|21:50 )
Option : [2] ( 25/09/2008|23:09 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio\kb123
Supprime! - C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio\kb124
Supprime! - C:\DOCUME~1\musik\APPLIC~1\Dealio\kb123
Supprime! - C:\Program Files\Piolet\Cache.dat
Supprime! - C:\Program Files\Piolet\contacts.dat
Supprime! - C:\Program Files\Piolet\contactsR.dat
Supprime! - C:\Program Files\Piolet\default.m3u
Supprime! - C:\Program Files\Piolet\diCrHash.dll
Supprime! - C:\Program Files\Piolet\DOWNLD2.DAT
Supprime! - C:\Program Files\Piolet\downloads.dat
Supprime! - C:\Program Files\Piolet\EBCRYPT.DLL
Supprime! - C:\Program Files\Piolet\fmod.dll
Supprime! - C:\Program Files\Piolet\fmod_dsp_lowpass.dll
Supprime! - C:\Program Files\Piolet\INSTALL.LOG
Supprime! - C:\Program Files\Piolet\loading.gif
Supprime! - C:\Program Files\Piolet\loading.htm
Supprime! - C:\Program Files\Piolet\My Shared Folder
Supprime! - C:\Program Files\Piolet\MyFiles.dat
Supprime! - C:\Program Files\Piolet\MyFiles.dat.lst
Supprime! - C:\Program Files\Piolet\NCTAudioBurner.dll
Supprime! - C:\Program Files\Piolet\NCTAudioFile.dll
Supprime! - C:\Program Files\Piolet\NCTAudioInformation.dll
Supprime! - C:\Program Files\Piolet\NCTAudioPlayer.dll
Supprime! - C:\Program Files\Piolet\NCTAudioVisualization.dll
Supprime! - C:\Program Files\Piolet\Piolet.exe
Supprime! - C:\Program Files\Piolet\Piolet.exe.Manifest
Supprime! - C:\Program Files\Piolet\Piolet.sw2
Supprime! - C:\Program Files\Piolet\Settings.ini
Supprime! - C:\Program Files\Piolet\SmartUI2.ocx
Supprime! - C:\Program Files\Piolet\Softwrap.dll
Supprime! - C:\Program Files\Piolet\TaskKiller.exe
Supprime! - C:\Program Files\Piolet\UNWISE.EXE
Supprime! - C:\DOCUME~1\YEHOUD~1\Bureau\PioletSetup(2).exe
Supprime! - C:\WINDOWS\Prefetch\PIOLET.EXE-09372A35.pf
Supprime! - C:\DOCUME~1\YEHOUD~1\MENUDM~1\PROGRA~1\Piolet
Supprime! - C:\WINDOWS\System32\f3PSSavr.scr
Supprime! - C:\Program Files\MSN Messenger\riched20.dll
Supprime! - C:\DOCUME~1\MICHEL~1\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\musik\APPLIC~1\Dealio
Supprime! - C:\Program Files\Piolet

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(michele ZERDOUN) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(musik) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(YEHOUDITH ANKRI) - {0648699b-b886-4011-99d4-04f1de459696} => blackaqua-5.69-fx
(YEHOUDITH ANKRI) - {082b6fe0-310a-11db-a98b-0800200c9a66} => arctic_glow-2.4.4.1-fx
(YEHOUDITH ANKRI) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(YEHOUDITH ANKRI) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
(YEHOUDITH ANKRI) - {7affbfae-c4e2-4915-8c0f-00fa3ec610a1} => aoltoolbar
(YEHOUDITH ANKRI) - {a02c0c70-605c-11da-8cd6-0800200c9a66} => pimpzilla-3.49-fx
(YEHOUDITH ANKRI) - {a45e6b3a-725d-4b20-afde-e7486bfe317c} => aluminum_kai
(YEHOUDITH ANKRI) - {e213bb8f-8ebd-11db-96b7-005056c00008} => myFireFox

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{sub_rfc1766}/srchasst/srchasst.htm"

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\tDfMnnmp.ini
C:\WINDOWS\system32\tDfMnnmp.ini2
[b]==> VUNDO <==/b

1 - "C:\ToolBar SD\TB_1.txt" - 25/09/2008|23:04 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 25/09/2008|23:21 - Option : [2]

-----------\\ Fin du rapport a 23:21:19,01

ok maintenant :

▶ Relance Toolbar-S&D en double-cliquant sur le raccourci.
▶ Tape sur "2" puis valide en appuyant sur "Entrée".
/!\ Ne ferme pas la fenêtre lors de la suppression !
▶ Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

ensuite :

▶ Télécharger malwarebytes

▶ Voici un tuto pour bien l installer et bien l utiliser :

https://www.androidworld.fr/

aide toi bien du tuto pour supprimer correctement ce qu il aura trouvé

Après l analyse, redémarrer le pc et poste le rapport !!

Et refais un nouveau rapport hijackthis stp