Raport HijackThis

Bonjour,
je colle un rapport HijackThis car j ai pas mal de page de pub qui s' ouvres et on ma dit de faire un rapport HijackThis mes sa ne m 'aide pas beaucoup car je ne sait pas qu'est qui qui faux que je supprime si quelqu'un pouvez m'aidez sa serait sympa et merci .comment faire pour savoir lire un rapport HijackThis
Configuration: Windows XP
Firefox 3.0.5
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:03:28, on 27/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\USBStorage\USBDetector.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\RFA Platinum\rfagent.exe
C:\Program Files\CyberLink\PCM4Everio\EverioService.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\documents and settings\compaq_propriétaire.nom-47d5a5b94ad\local settings\application data\vdsbqgve.exe
C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [USBDetector] C:\USBStorage\USBDetector.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [rfagent] "C:\Program Files\RFA Platinum\rfagent.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [EverioService] "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [vdsbqgve] "c:\documents and settings\compaq_propriétaire.nom-47d5a5b94ad\local settings\application data\vdsbqgve.exe" vdsbqgve
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PCTimeWatch (PTWsvc) - MainSoft - C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 9097 bytes

9 réponses

  1. salut ,

    telecharge malwarebytes-anti-malware

    http://www.commentcamarche.net/telecharger/telecharger 34055379 malwarebytes anti malware

    une fois instaler fait une mise a jour puis un scan complet , ensuite suprime de ce qu'il ta trouver ,redemard ton pc et c'est regler ;)

    bon courage ,
    1. bonjour et merci de ton aide frankky
    2. @canelle44Bonjour

      Tu peux poster le rapport MBAM -- Stp
      Merci

      Tu as plusieurs infections

      ++
    3. @^^Marie^^bonjour ^^marie^^et merci de vouloir m'aider vMalwarebytes' Anti-Malware 1.33
      Version de la base de données: 1698
      Windows 5.1.2600 Service Pack 3

      28/01/2009 13:27:41
      mbam-log-2009-01-28 (13-27-41).txt

      Type de recherche: Examen complet (C:\|D:\|L:\|)
      Eléments examinés: 176890
      Temps écoulé: 1 hour(s), 48 minute(s), 26 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 0
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 1

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\Documents and Settings\Compaq_Propriétaire.NOM-47D5A5B94AD\Application Data\Desktopicon\eBayShortcuts.exe (Trojan.Agent) -> Quarantined and deleted successfully.
      oila le rapport
  2. je te poste le rapport Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:28:42, on 28/01/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\USBStorage\USBDetector.exe
    C:\Program Files\Eset\nod32kui.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\RFA Platinum\rfagent.exe
    C:\Program Files\CyberLink\PCM4Everio\EverioService.exe
    C:\WINDOWS\PixArt\PAC207\Monitor.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - (no file)
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
    O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [USBDetector] C:\USBStorage\USBDetector.exe
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [rfagent] "C:\Program Files\RFA Platinum\rfagent.exe"
    O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
    O4 - HKLM\..\Run: [EverioService] "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"
    O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - Global Startup: e-Carte Bleue La Banque Postale.lnk = C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PCTimeWatch (PTWsvc) - MainSoft - C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    1. Salut

      Important! Désactive ton antivirus / antispyware résident / TeaTimer de Spybot (si présent et actif)

      Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
      ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )
      https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

      * Lance l'installation du programme en exécutant le fichier téléchargé.
      * Double-clique maintenant sur le raccourci de Toolbar-S&D.
      * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
      * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
      * Poste le rapport généré. (C:\TB.txt)

      1. salut tu est sure que je ne risque rien si je désactive mon antivirus sa me fait peur de le desactivé .
      2. salut je te cole mon rapport
        -----------\\ ToolBar S&D 1.2.8 XP/Vista

        Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
        X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 2800+ )
        BIOS : Rev. 3.11
        USER : Compaq_Propriétaire ( Administrator )
        BOOT : Normal boot
        Antivirus : ESET NOD32 antivirus system 2.70 2.70 (Activated)
        A:\ (USB)
        C:\ (Local Disk) - NTFS - Total:70 Go (Free:31 Go)
        D:\ (Local Disk) - FAT32 - Total:4 Go (Free:1 Go)
        E:\ (CD or DVD)
        F:\ (CD or DVD)
        G:\ (USB) - FAT32 - Total:1949 Mo (Free:1 Go)
        H:\ (USB)
        J:\ (CD or DVD)
        L:\ (Local Disk) - NTFS - Total:298 Go (Free:269 Go)

        "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
        Option : [1] ( 28/01/2009|22:06 )

        -----------\\ Recherche de Fichiers / Dossiers ...

        C:\Program Files\DAEMON Tools Toolbar
        C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
        C:\Program Files\DAEMON Tools Toolbar\Resources
        C:\Program Files\DAEMON Tools Toolbar\uninst.exe
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome.manifest
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\install.rdf
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome\dttoolbar.jar
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
        C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.xpt
        C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
        C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\az.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
        C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
        C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
        C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
        C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioE.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioG.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioL.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioN.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\RadioW.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\style.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
        C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
        C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_a.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_ie.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_m.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_y.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\logger.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIE.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_a.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_m.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_y.xml
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\allow.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\block.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\dontsend.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbardropdownmenu.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsHelprolloverbase.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_bg.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_dp.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm2rolloverbase.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarstextrollover.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX16.ico
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX48.ico
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\send.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eg.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_emoticons.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eyeglass.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_gear.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_images.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_kiwee.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_msnlogo.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_news.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_text.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_videos.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_webshots.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_winks.bmp
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\X.bmp
        C:\Program Files\Kiwee Toolbar
        C:\Program Files\Kiwee Toolbar\2.8.167
        C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\AolIMToolbar.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox
        C:\Program Files\Kiwee Toolbar\2.8.167\FlashCOM.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIMToolbar.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.tlb
        C:\Program Files\Kiwee Toolbar\2.8.167\kiweetoolbar.zip
        C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe
        C:\Program Files\Kiwee Toolbar\2.8.167\mfc80u.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.CRT.manifest
        C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.MFC.manifest
        C:\Program Files\Kiwee Toolbar\2.8.167\msimg32.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\msvcp80.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\msvcr80.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\RemoteLib.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome.manifest
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\firefox.xpi
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\install.rdf
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome\kiweetoolbar.jar
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.js
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.xpt
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\KiweeSearchHistory.js
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.js
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.xpt
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences\defaults.js
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\manifest.mf
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.rsa
        C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.sf
        C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar
        C:\DOCUME~1\COMPAQ~1\APPLIC~1\SmartShopper
        C:\DOCUME~1\COMPAQ~1\APPLIC~1\SmartShopper\cs
        C:\DOCUME~1\COMPAQ~1\APPLIC~1\SmartShopper\cs\Config.xml
        C:\DOCUME~1\COMPAQ~1\APPLIC~1\SmartShopper\cs\dwld
        C:\WINDOWS\iun6002.exe
        C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml

        -----------\\ Extensions

        (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

        (Compaq_Propri‚taire) - {0b38152b-1b20-484d-a11f-5e04a9b0661f} => winamptoolbar
        (Compaq_Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
        (Compaq_Propri‚taire) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
        (Compaq_Propri‚taire) - {a841a1c1-4687-4285-89fe-e9df6c5ed4c6} => toox.com
        (Compaq_Propri‚taire) - {ec00a80a-cf74-494d-9115-3ffb5c793dfc} => jeanmarctemplet

        (Compaq_Propri‚taire.NOM-47D5A5B94AD) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\WINDOWS\\pchealth\\helpctr\\System\\panels\\blank.htm"
        "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
        "Search Page"="https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8"
        "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF"
        "Default_Search_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop"
        "Search Bar"="http://www.bing.com/spresults.aspx"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
        "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Start Page"="https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF"
        "Search Bar"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop"
        "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60341"
        "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341"

        --------------------\\ Recherche d'autres infections

        --------------------\\ Cracks & Keygens ..

        C:\DOCUME~1\COMPAQ~1.NOM\Bureau\Wondershare.Photo.Collage.Studio.Crack.rar
        C:\DOCUME~1\COMPAQ~1.NOM\Mes documents\mes documents\44 jeux Zylom Game Deluxe + crack.txt
        C:\DOCUME~1\COMPAQ~1.NOM\Recent\Wondershare.Photo.Collage.Studio.Crack.lnk

        1 - "C:\ToolBar SD\TB_1.txt" - 28/01/2009|22:05 - Option : [1]
        2 - "C:\ToolBar SD\TB_2.txt" - 28/01/2009|22:07 - Option : [1]

        -----------\\ Fin du rapport a 22:07:01,28
    2. Bonjour

      C:\DOCUME~1\COMPAQ~1.NOM\Bureau\Wondershare.Photo.Collage.Studio.Crack.rar
      C:\DOCUME~1\COMPAQ~1.NOM\Mes documents\mes documents\44 jeux Zylom Game Deluxe + crack.txt
      C:\DOCUME~1\COMPAQ~1.NOM\Recent\Wondershare.Photo.Collage.Studio.Crack.lnk

      Supprime tes cracks si tu veux avoir un PC sain

      Relance Toolbar-S&D
      Important! Désactive ton antivirus / antispyware résident / TeaTimer de Spybot (si présent et actif)
      en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
      ! Ne ferme pas la fenêtre lors de la suppression !
      Un rapport sera généré, poste son contenu ici.

      NOTE :
      Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
      Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
      Tape explorer puis valide.

      + 1 log hijackthis

      ++
      1. salut je te poste un log hijackthis Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 12:09:17, on 29/01/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\USBStorage\USBDetector.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\RFA Platinum\rfagent.exe
        C:\Program Files\CyberLink\PCM4Everio\EverioService.exe
        C:\WINDOWS\PixArt\PAC207\Monitor.exe
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\e-Carte Bleue La Banque Postale\ecbl-lbp.exe
        C:\WINDOWS\System32\FTRTSVC.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\Eset\nod32krn.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\Program Files\CyberLink\Shared Files\RichVideo.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\WINDOWS\system32\dllhost.exe
        C:\WINDOWS\explorer.exe
        C:\Program Files\ESET\nod32kui.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
        O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - (no file)
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
        O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
        O4 - HKLM\..\Run: [rfagent] "C:\Program Files\RFA Platinum\rfagent.exe"
        O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
        O4 - HKLM\..\Run: [EverioService] "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"
        O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
        O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: PCTimeWatch (PTWsvc) - MainSoft - C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    3. Bonjour

      En premier je t'ai demande Relance Toolbar-S&D pour faire l'option 2

      ++
      1. je te poste l rapport de l option 2
        -----------\\ ToolBar S&D 1.2.8 XP/Vista

        Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
        X86-based PC ( Uniprocessor Free : AMD Sempron(tm) 2800+ )
        BIOS : Rev. 3.11
        USER : Compaq_Propriétaire ( Administrator )
        BOOT : Normal boot
        Antivirus : ESET NOD32 antivirus system 2.70 2.70 (Activated)
        A:\ (USB)
        C:\ (Local Disk) - NTFS - Total:70 Go (Free:30 Go)
        D:\ (Local Disk) - FAT32 - Total:4 Go (Free:1 Go)
        E:\ (CD or DVD)
        F:\ (CD or DVD)
        J:\ (CD or DVD)

        "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
        Option : [2] ( 29/01/2009|16:34 )

        -----------\\ SUPPRESSION

        Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
        Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
        Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config
        Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images
        Supprime! - C:\Program Files\Kiwee Toolbar\2.8.167
        Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar
        Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\SmartShopper\cs
        Supprime! - C:\WINDOWS\iun6002.exe
        Supprime! - C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
        Supprime! - C:\Program Files\DAEMON Tools Toolbar
        Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar
        Supprime! - C:\Program Files\Kiwee Toolbar
        Supprime! - C:\DOCUME~1\COMPAQ~1\APPLIC~1\SmartShopper

        -----------\\ Recherche de Fichiers / Dossiers ...

        -----------\\ Extensions

        (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

        (Compaq_Propri‚taire) - {0b38152b-1b20-484d-a11f-5e04a9b0661f} => winamptoolbar
        (Compaq_Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
        (Compaq_Propri‚taire) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
        (Compaq_Propri‚taire) - {a841a1c1-4687-4285-89fe-e9df6c5ed4c6} => toox.com
        (Compaq_Propri‚taire) - {ec00a80a-cf74-494d-9115-3ffb5c793dfc} => jeanmarctemplet

        (Compaq_Propri‚taire.NOM-47D5A5B94AD) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\WINDOWS\\pchealth\\helpctr\\System\\panels\\blank.htm"
        "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
        "Search Page"="https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8"
        "Default_Page_URL"="https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF"
        "Default_Search_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop"
        "Search Bar"="http://www.bing.com/spresults.aspx"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
        "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Start Page"="https://www.msn.com/fr-fr/"
        "Search Bar"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop"
        "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60341"
        "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341"

        --------------------\\ Recherche d'autres infections

        --------------------\\ Cracks & Keygens ..

        C:\DOCUME~1\COMPAQ~1.NOM\Bureau\Wondershare.Photo.Collage.Studio.Crack.rar
        C:\DOCUME~1\COMPAQ~1.NOM\Mes documents\mes documents\44 jeux Zylom Game Deluxe + crack.txt

        1 - "C:\ToolBar SD\TB_1.txt" - 28/01/2009|22:05 - Option : [1]
        2 - "C:\ToolBar SD\TB_2.txt" - 28/01/2009|22:07 - Option : [1]
        3 - "C:\ToolBar SD\TB_3.txt" - 29/01/2009|16:36 - Option : [2]

        -----------\\ Fin du rapport a 16:36:45,53
    4. RE

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\COMPAQ~1.NOM\Bureau\Wondershare.Photo.Collage.Studio.Crack.rar
      C:\DOCUME~1\COMPAQ~1.NOM\Mes documents\mes documents\44 jeux Zylom Game Deluxe + crack.txt


      Relance un log hijackthis -- stp

      1. salut je te copie le log hijackthis Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 16:04:15, on 30/01/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\RUNDLL32.EXE
        C:\Program Files\Eset\nod32kui.exe
        C:\WINDOWS\System32\FTRTSVC.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\Eset\nod32krn.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\Program Files\CyberLink\Shared Files\RichVideo.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/...
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.live.com/sphome.aspx
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/...
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.live.com/sphome.aspx
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60341
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
        O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - (no file)
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
        O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
        O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: PCTimeWatch (PTWsvc) - MainSoft - C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
        O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
    5. BONSOIR ^^Marie^^ non pour l instant je n est pas de souci et je te remercie pour ton aides.