Suppression Trojan

Salut !!

tu as quelques infections...

Télécharger sur le bureau malware bytes : http://ww.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware?thread

= double-clic sur mbam-setup pour lancer l'installation
= Installer simplement sans rien modifier
= Quand le programme lancé ==> faire une mise à jour ensuite cocher Exécuter un examen complet
= Clic Rechercher
= Eventuellement décocher les disque à ne pas analyser
= Clic Lancer l'examen
= En fin de scan , si infection trouvée
==> Clic Afficher résultat
= Fermer vos applications en cours
= Vérifier si tout est coché et clic Supprimer la sélection

un rapport s'ouvre le copier et le coller dans la réponse

Puis redémarrer le pc !!

ensuite :

télécharge a-squared free 3.5 à cette adresse : https://www.emsisoft.com/fr/

fais la mise à jour et analyses.

ensuite refais un nouveau rapport hijackthis stp

connais tu le nom exact du virus??

voici le rapport :
Malwarebytes' Anti-Malware 1.19
Version de la base de données: 922
Windows 6.0.6000

15:18:04 05/07/2008
mbam-log-7-5-2008 (15-18-04).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 163848
Temps écoulé: 1 hour(s), 37 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\mysearchnow.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\www.mysearchnow.com (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

voici le rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:58:51, on 05/07/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\vVX1000.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Users\Mali\Program Files\DNA\btdna.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fmsger%2ftabs%2f_pictos%2fcoca%2fPictoCoke02.png%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "c:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [BDWizReg] "C:\Program Files\BitDefender\BitDefender 2008\bdwizreg.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_SC810.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Mali\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Error mail] "C:\ProgramData\Upload Bags Bags.90b2o0f"
O4 - HKCU\..\Run: [dart dumb beep ball] "C:\ProgramData\Exit Coal Ooze.2v00brf"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [] (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - Global Startup: StupAssist.lnk = C:\Program Files\Common Files\Nikon\Utilities\StupAssist.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\Mali\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe

Et non je ne connais pas le nom du virus
Mon antivirus ( avast ) me dit que j'ai un virus nommé : trojan win32 {other}

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.

Télécharge OTMoveIt : http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
Double-clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve en citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.

c:\program files\search settings\searchsettings.exe
c:\program files\search settings\kb127\searchsettings.dll

clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre "Results".
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

ensuite :

Fix.reg

Ouvre le bloc-notes (click droit sur le bureau > dans l´arborescence choisie nouveau et nouveau fichier texte) et fais un copier coller de ce qui est en citation ci-dessous (copie tout d'un trait-sans les barres(x)) :

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]
"{E312764E-7706-43F1-8DAB-FCDD2B1E416D}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SearchSettings"=-

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Note : Regedit4 est sur la premiere ligne dans le bloc note et il y a une ligne blanche a la fin.
Puis click sur "fichier"/"enregistrer sous" :
dans : sur le bureau
Nom du fichier : fix.reg
Type de fichier : "tous les fichiers"
clique sur "enregistrer"

ca doit ressembler a ca une fois enrregistré :

http://img520.imageshack.us/img520/4251/screenshot005ps2.png

double clique sur fix.reg => tu dois obligatoirement avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?"
Si c'est bien le cas, clique sur "oui"

ensuite refais un nouveau rapport hijackthis stp

et je vois 3 antivirus dans ton rapport lol pourquoi??

Ne jamais installer 2 ou plusieurs antivirus sur le meme pc car ca crée des conflits entres les 2 (les 3 dans ton cas).

Lequel utilises-tu pour le moment ??

le monsieur dit vrai 1 seul anti virus

Mh mon antivirus est Avast

voici le premier rapport

c:\program files\search settings\searchsettings.exe moved successfully.
c:\program files\search settings\kb127\searchsettings.dll unregistered successfully.
File move failed. c:\program files\search settings\kb127\searchsettings.dll scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07052008_225158

alors vas désinstaller bitdefender...

et désinstalle aussi norton avec cet outil :

norton removal tools : ftp://ftp.symantec.com/public/francais/removal_tools/Norton_Removal_Tool.exe

ensuite fais ce que je t ai demandé en message 6 stp

ok...si tu es entrain de faire le fix.reg, fais le et ensuite redémarre ton pc

et ensuite refais un nouveau rapport hijackthis stp

après avoir desinstaller norton et bitdefender
J'ai relancer OT...
Voici le rapport :
c:\program files\search settings\searchsettings.exe moved successfully.
c:\program files\search settings\kb127\searchsettings.dll unregistered successfully.
File move failed. c:\program files\search settings\kb127\searchsettings.dll scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07052008_225158

Files moved on Reboot...
c:\program files\search settings\kb127\searchsettings.dll unregistered successfully.
c:\program files\search settings\kb127\searchsettings.dll moved successfully.

voici le dernier rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:00:06, on 06/07/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\vVX1000.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\DNA\btdna.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fmsger%2ftabs%2f_pictos%2fcoca%2fPictoCoke02.png%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_SC810.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Error mail] "C:\ProgramData\Upload Bags Bags.90b2o0f"
O4 - HKCU\..\Run: [dart dumb beep ball] "C:\ProgramData\Exit Coal Ooze.2v00brf"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [] (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\Mali\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

Ca a l air bon, je ne vois plus d infections

relance hijackthis en cliquant sur scan only et coches ces lignes :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - HKCU\..\Run: [Error mail] "C:\ProgramData\Upload Bags Bags.90b2o0f"
O4 - HKCU\..\Run: [dart dumb beep ball] "C:\ProgramData\Exit Coal Ooze.2v00brf"

puis tu cliques sur fix checked.

fais aussi ta mise à jour de java : https://www.java.com/fr/download/manual.jsp

est ce que tu as encore ton probleme de trojan ??

merci merci beaucoup
Je ne pense plus avoir de problèmes ( mon antivirus ne me dit rien en tout cas )
Cependant il y parfois des fenetres qui s'ouvre ( leur adresse commence par CID: ) et je ne sais pas comment les enmpecher de venir...
Encore merci

Salut !!

ok fais ceci :

Télécharger et enregistrer sur le Bureau LopSD : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

= Double-clic Lop S&D
= Faire l'installation
Fermer toutes les applications
= Le lancer par un double-clic sur le raccourci qui est sur le bureau
Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur
= Taper F pour français , puis presser entrée
= Taper 1
= Presser Entrée
= Le PC va redémarrer
Note= si l'antivirus annonce une infection dans TEMP , l'ignorer
= Attendre l'apparition du rapport
Copier le rapport et le coller dans la réponse
le rapport se trouve aussi à C:\lopR
---------
Relancer Lop S&D

= Choisir cette fois 2

note:
Si le Bureau ne réapparait pas
= Presser Ctrl Alt Suppr
= Dans Fichier => Nouvelle tâche
=> Ecrire: explorer => entrée

voici le rapport

-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : Mali ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 06/07/2008 | 23:08:41,34 ] [ PC : PC-DE-MALI ]
[ MAJ : 06-07-2008 | 10:55 ]
[ UAC => 0 ]

-------------[ Listing des dossiers dans Roaming ]------------

[26/12/2007|20:30] C:\Users\Mali\AppData\Roaming\Adobe\Online Services
[24/12/2007|12:59] C:\Users\Mali\AppData\Roaming\Adobe\Linguistics
[15/12/2007|18:17] C:\Users\Mali\AppData\Roaming\Adobe\Acrobat
[15/12/2007|18:08] C:\Users\Mali\AppData\Roaming\Adobe\Flash Player
[15/12/2007|17:49] C:\Users\Mali\AppData\Roaming\Adobe\Photoshop Album

[06/07/2008|12:02] C:\Users\Mali\AppData\Roaming\Apple Computer\iTunes
[05/07/2008|00:28] C:\Users\Mali\AppData\Roaming\Apple Computer\QuickTime

[06/09/2007|23:10] C:\Users\Mali\AppData\Roaming\CyberLink\PowerCinema

[07/02/2008|18:14] C:\Users\Mali\AppData\Roaming\DivX\DivX Codec
[07/02/2008|18:13] C:\Users\Mali\AppData\Roaming\DivX\DivX Player

[17/05/2008|19:49] C:\Users\Mali\AppData\Roaming\eMule\config

[14/09/2007|20:01] C:\Users\Mali\AppData\Roaming\EPSON\Creativity Suite

[06/07/2008|14:24] C:\Users\Mali\AppData\Roaming\Google\Local Search History

[05/07/2008|01:31] C:\Users\Mali\AppData\Roaming\Grisoft\AVG Antispyware 7.5

[07/09/2007|18:12] C:\Users\Mali\AppData\Roaming\Identities\{8E2448D2-6652-48D2-BAAC-C5768F8D5AFD}
[05/09/2007|21:04] C:\Users\Mali\AppData\Roaming\Identities\{3BF791E0-4E9F-4917-9102-BADC83B50870}

[12/09/2007|16:36] C:\Users\Mali\AppData\Roaming\InstallShield\ISEngine12.0

[05/07/2008|00:40] C:\Users\Mali\AppData\Roaming\Kazaa Lite\db

[10/02/2008|15:13] C:\Users\Mali\AppData\Roaming\Leadertech\PowerRegister

[05/07/2008|01:30] C:\Users\Mali\AppData\Roaming\Macromedia\Flash Player

[05/07/2008|13:37] C:\Users\Mali\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware

[05/07/2008|00:40] C:\Users\Mali\AppData\Roaming\Microsoft\Windows Media Encoder
[05/07/2008|00:40] C:\Users\Mali\AppData\Roaming\Microsoft\Office
[01/07/2008|23:57] C:\Users\Mali\AppData\Roaming\Microsoft\Templates
[01/07/2008|23:33] C:\Users\Mali\AppData\Roaming\Microsoft\Services Windows Live
[28/06/2008|13:42] C:\Users\Mali\AppData\Roaming\Microsoft\Windows Photo Gallery
[01/06/2008|18:56] C:\Users\Mali\AppData\Roaming\Microsoft\Word
[28/05/2008|17:55] C:\Users\Mali\AppData\Roaming\Microsoft\UProof
[24/03/2008|19:22] C:\Users\Mali\AppData\Roaming\Microsoft\MSN Messenger
[02/03/2008|22:38] C:\Users\Mali\AppData\Roaming\Microsoft\OIS
[12/02/2008|19:26] C:\Users\Mali\AppData\Roaming\Microsoft\Pack Emoticones Love
[07/11/2007|12:52] C:\Users\Mali\AppData\Roaming\Microsoft\Proof
[01/11/2007|19:40] C:\Users\Mali\AppData\Roaming\Microsoft\WLTB Custom Buttons
[22/10/2007|17:12] C:\Users\Mali\AppData\Roaming\Microsoft\Media Player
[04/10/2007|17:37] C:\Users\Mali\AppData\Roaming\Microsoft\IdentityCRL
[26/09/2007|19:22] C:\Users\Mali\AppData\Roaming\Microsoft\Excel
[26/09/2007|14:50] C:\Users\Mali\AppData\Roaming\Microsoft\Document Building Blocks
[26/09/2007|14:50] C:\Users\Mali\AppData\Roaming\Microsoft\AddIns
[22/09/2007|19:06] C:\Users\Mali\AppData\Roaming\Microsoft\Crypto
[22/09/2007|13:00] C:\Users\Mali\AppData\Roaming\Microsoft\Internet Explorer
[10/09/2007|17:22] C:\Users\Mali\AppData\Roaming\Microsoft\Network
[09/09/2007|22:44] C:\Users\Mali\AppData\Roaming\Microsoft\HTML Help
[09/09/2007|21:03] C:\Users\Mali\AppData\Roaming\Microsoft\Windows
[07/09/2007|22:52] C:\Users\Mali\AppData\Roaming\Microsoft\eHome
[07/09/2007|20:59] C:\Users\Mali\AppData\Roaming\Microsoft\preuve
[05/09/2007|21:04] C:\Users\Mali\AppData\Roaming\Microsoft\SystemCertificates
[05/09/2007|21:04] C:\Users\Mali\AppData\Roaming\Microsoft\Protect
[05/09/2007|21:03] C:\Users\Mali\AppData\Roaming\Microsoft\Credentials

[27/04/2008|20:19] C:\Users\Mali\AppData\Roaming\MySpace\IM

[21/09/2007|17:05] C:\Users\Mali\AppData\Roaming\Nikon\PictureProject

[13/01/2008|00:47] C:\Users\Mali\AppData\Roaming\Notepad++\plugins

[05/07/2008|00:04] C:\Users\Mali\AppData\Roaming\PC Tools\Spyware Doctor

[06/07/2008|23:08] C:\Users\Mali\AppData\Roaming\Skype\littlechoub

[12/05/2008|11:23] C:\Users\Mali\AppData\Roaming\vlc\cache

[07/02/2008|18:07] C:\Users\Mali\AppData\Roaming\Yahoo!\Companion

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[06/07/2008 22:38][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[06/07/2008 23:08][--ah-----] C:\Windows\tasks\SA.DAT
[06/07/2008 23:07][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[06/05/2007|21:22] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[20/02/2008|09:47] C:\ProgramData\Adobe
[19/01/2008|18:30] C:\ProgramData\Apple
[19/01/2008|18:38] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[05/07/2008|01:17] C:\ProgramData\Bold Meow Dart Dumb
[05/09/2007|21:00] C:\ProgramData\Bureau
[04/07/2008|23:40] C:\ProgramData\CheckPoint
[06/05/2007|21:34] C:\ProgramData\CyberLink
[21/09/2007|17:03] C:\ProgramData\Dance
[02/11/2006|15:02] C:\ProgramData\Desktop
[21/09/2007|17:03] C:\ProgramData\Desktop Pictures
[02/11/2006|15:02] C:\ProgramData\Documents
[29/09/2007|18:16] C:\ProgramData\eMule
[21/09/2007|17:10] C:\ProgramData\EnterNHelp
[12/09/2007|16:17] C:\ProgramData\EPSON
[05/09/2007|21:14] C:\ProgramData\eSobi
[24/06/2008|22:43] C:\ProgramData\Exit Coal Ooze.2v00brf
[05/09/2007|21:00] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[14/10/2007|13:48] C:\ProgramData\Google
[05/07/2008|01:31] C:\ProgramData\Grisoft
[05/07/2008|13:37] C:\ProgramData\Malwarebytes
[05/09/2007|21:00] C:\ProgramData\Menu D‚marrer
[22/09/2007|21:17] C:\ProgramData\Messenger Plus!
[28/10/2007|21:16] C:\ProgramData\Microsoft
[06/07/2008|11:31] C:\ProgramData\Microsoft Help
[05/09/2007|21:00] C:\ProgramData\ModŠles
[21/09/2007|17:04] C:\ProgramData\Nikon
[21/06/2008|17:32] C:\ProgramData\PKP_DLds.DAT
[21/06/2008|17:32] C:\ProgramData\PKP_DLec.DAT
[05/07/2008|14:10] C:\ProgramData\proxy dash
[17/05/2008|20:32] C:\ProgramData\Skype
[02/11/2006|15:02] C:\ProgramData\Start Menu
[05/07/2008|00:47] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[12/09/2007|16:40] C:\ProgramData\UDL
[21/09/2007|17:10] C:\ProgramData\Ultima_T15
[04/06/2008|14:41] C:\ProgramData\Upload Bags Bags.0h5swxm
[06/07/2008|15:57] C:\ProgramData\Upload Bags Bags.4jwf05y
[02/01/2008|11:52] C:\ProgramData\Upload Bags Bags.63zce
[24/06/2008|22:42] C:\ProgramData\Upload Bags Bags.90b2o0f
[06/07/2008|16:19] C:\ProgramData\Upload Bags Bags.9mvoll
[22/12/2007|17:21] C:\ProgramData\Upload Bags Bags.blh3wim
[06/07/2008|15:36] C:\ProgramData\Upload Bags Bags.gc6ipvn
[24/02/2008|22:57] C:\ProgramData\Upload Bags Bags.ikvf9
[06/07/2008|15:14] C:\ProgramData\Upload Bags Bags.n3f6z8g
[06/07/2008|14:52] C:\ProgramData\Upload Bags Bags.nu03m
[06/07/2008|11:30] C:\ProgramData\Upload Bags Bags.o1e1ql
[06/07/2008|11:56] C:\ProgramData\Upload Bags Bags.ow3xm
[26/12/2007|12:22] C:\ProgramData\Upload Bags Bags.q3s7ff8
[30/03/2008|11:58] C:\ProgramData\Upload Bags Bags.rj3m0sp
[06/07/2008|14:30] C:\ProgramData\Upload Bags Bags.ruzou
[06/01/2008|23:57] C:\ProgramData\Upload Bags Bags.viwgf
[15/01/2008|21:57] C:\ProgramData\Upload Bags Bags.xictxr
[27/04/2008|10:05] C:\ProgramData\Upload Bags Bags.y9b3b
[24/06/2008|22:42] C:\ProgramData\Upload Bags Bags.zrv5arf
[09/06/2008|20:22] C:\ProgramData\WLInstaller
[07/02/2008|18:09] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[06/05/2007|21:33] C:\Program Files\Acer Arcade Live
[20/06/2007|21:08] C:\Program Files\Acer Inc
[06/05/2007|21:22] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[29/06/2008|17:33] C:\Program Files\Adobe
[12/05/2008|11:27] C:\Program Files\adslTV
[19/09/2007|15:11] C:\Program Files\Alwil Software
[07/02/2008|18:39] C:\Program Files\Any Video Converter
[05/06/2008|17:36] C:\Program Files\Apple Software Update
[21/09/2007|16:59] C:\Program Files\ArcSoft
[05/07/2008|16:47] C:\Program Files\a-squared Free
[20/06/2007|21:04] C:\Program Files\ATI
[20/06/2007|21:06] C:\Program Files\ATI Technologies
[05/07/2008|23:30] C:\Program Files\BitDefender
[27/04/2008|11:08] C:\Program Files\BitTorrent
[19/01/2008|18:36] C:\Program Files\Bonjour
[05/07/2008|01:26] C:\Program Files\CCleaner
[05/07/2008|13:52] C:\Program Files\Circle Developement
[05/07/2008|00:36] C:\Program Files\CleanUp!
[05/07/2008|01:52] C:\Program Files\Common Files
[06/05/2007|21:30] C:\Program Files\CyberLink
[02/06/2008|21:23] C:\Program Files\Dealio
[21/09/2007|22:55] C:\Program Files\desktop.ini
[28/06/2008|17:29] C:\Program Files\DivX
[27/04/2008|11:08] C:\Program Files\DNA
[04/07/2008|23:25] C:\Program Files\Driver-Soft
[05/07/2008|00:39] C:\Program Files\eMule
[04/05/2008|20:16] C:\Program Files\epson
[06/05/2007|21:34] C:\Program Files\eSobi
[05/09/2007|21:00] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[21/09/2007|16:19] C:\Program Files\FileZilla Client
[19/09/2007|14:45] C:\Program Files\FreeBot
[14/10/2007|13:48] C:\Program Files\Google
[05/07/2008|01:31] C:\Program Files\Grisoft
[02/04/2008|17:58] C:\Program Files\InstallShield Installation Information
[11/06/2008|23:06] C:\Program Files\Internet Explorer
[03/04/2008|18:58] C:\Program Files\iPod
[06/07/2008|11:41] C:\Program Files\Ipod Video Converter
[03/04/2008|18:58] C:\Program Files\iTunes
[06/07/2008|11:17] C:\Program Files\Java
[26/09/2007|18:37] C:\Program Files\Kazaa Lite K++
[05/07/2008|13:37] C:\Program Files\Malwarebytes' Anti-Malware
[30/03/2008|11:58] C:\Program Files\Messenger Plus! Live
[21/09/2007|22:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[21/10/2007|13:04] C:\Program Files\Microsoft LifeCam
[06/05/2007|21:22] C:\Program Files\Microsoft Office
[29/09/2007|13:08] C:\Program Files\Microsoft SQL Server Compact Edition
[06/05/2007|21:22] C:\Program Files\Microsoft Works
[06/05/2007|21:20] C:\Program Files\Microsoft.NET
[02/11/2006|14:42] C:\Program Files\Movie Maker
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[21/09/2007|17:05] C:\Program Files\MSXML 4.0
[11/12/2007|22:42] C:\Program Files\MySpace
[06/05/2007|21:18] C:\Program Files\NewTech Infosystems
[21/09/2007|17:03] C:\Program Files\Nikon
[13/01/2008|00:47] C:\Program Files\Notepad++
[02/03/2008|22:54] C:\Program Files\PhotoFiltre
[03/04/2008|18:54] C:\Program Files\QuickTime
[06/05/2007|21:05] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[29/06/2008|16:26] C:\Program Files\Safari
[05/07/2008|22:51] C:\Program Files\Search Settings
[17/05/2008|20:32] C:\Program Files\Skype
[05/07/2008|01:18] C:\Program Files\Spyware Doctor
[06/07/2008|11:18] C:\Program Files\Sun
[05/07/2008|01:58] C:\Program Files\Trend Micro
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[02/06/2008|20:56] C:\Program Files\WinAVI MP4 Converter
[21/09/2007|22:52] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[21/09/2007|22:52] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[27/02/2008|21:39] C:\Program Files\Windows Live
[31/10/2007|13:25] C:\Program Files\Windows Live Toolbar
[21/09/2007|22:52] C:\Program Files\Windows Mail
[21/09/2007|22:52] C:\Program Files\Windows Media Player
[05/09/2007|21:00] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[09/01/2008|16:18] C:\Program Files\Windows Sidebar
[09/02/2008|15:02] C:\Program Files\WinRAR
[07/02/2008|18:24] C:\Program Files\Xvid
[07/02/2008|18:07] C:\Program Files\Yahoo!
[04/07/2008|23:40] C:\Program Files\Zone Labs

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[20/02/2008|09:48] C:\Program Files\Common Files\Adobe
[19/01/2008|18:30] C:\Program Files\Common Files\Apple
[05/07/2008|01:54] C:\Program Files\Common Files\BitDefender
[06/05/2007|21:20] C:\Program Files\Common Files\DESIGNER
[12/09/2007|16:42] C:\Program Files\Common Files\InstallShield
[17/11/2007|16:35] C:\Program Files\Common Files\Java
[06/05/2007|21:17] C:\Program Files\Common Files\LightScribe
[02/06/2008|21:20] C:\Program Files\Common Files\microsoft shared
[06/05/2007|21:17] C:\Program Files\Common Files\muvee Technologies
[06/05/2007|21:18] C:\Program Files\Common Files\NewTech Infosystems
[21/09/2007|17:05] C:\Program Files\Common Files\Nikon
[07/02/2008|18:08] C:\Program Files\Common Files\PX Storage Engine
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[17/05/2008|20:32] C:\Program Files\Common Files\Skype
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[05/07/2008|23:32] C:\Program Files\Common Files\Symantec Shared
[21/09/2007|22:52] C:\Program Files\Common Files\System
[13/11/2007|20:47] C:\Program Files\Common Files\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 56

iexplore.exe ~ [2564]
iexplore.exe ~ [3156]

----------------------[ Recherche avec S_Lop ]---------------------

C:\ProgramData\Exit Coal Ooze.2v00brf
C:\ProgramData\Upload Bags Bags.0h5swxm
C:\ProgramData\Upload Bags Bags.4jwf05y
C:\ProgramData\Upload Bags Bags.63zce
C:\ProgramData\Upload Bags Bags.90b2o0f
C:\ProgramData\Upload Bags Bags.9mvoll
C:\ProgramData\Upload Bags Bags.blh3wim
C:\ProgramData\Upload Bags Bags.gc6ipvn
C:\ProgramData\Upload Bags Bags.ikvf9
C:\ProgramData\Upload Bags Bags.n3f6z8g
C:\ProgramData\Upload Bags Bags.nu03m
C:\ProgramData\Upload Bags Bags.o1e1ql
C:\ProgramData\Upload Bags Bags.ow3xm
C:\ProgramData\Upload Bags Bags.q3s7ff8
C:\ProgramData\Upload Bags Bags.rj3m0sp
C:\ProgramData\Upload Bags Bags.ruzou
C:\ProgramData\Upload Bags Bags.viwgf
C:\ProgramData\Upload Bags Bags.xictxr
C:\ProgramData\Upload Bags Bags.y9b3b
C:\ProgramData\Upload Bags Bags.zrv5arf
C:\ProgramData\Exit Coal Ooze.2v00brf
C:\ProgramData\Upload Bags Bags.63zce
C:\ProgramData\Upload Bags Bags.90b2o0f
C:\ProgramData\Upload Bags Bags.blh3wim
C:\ProgramData\Upload Bags Bags.gc6ipvn
C:\ProgramData\Upload Bags Bags.o1e1ql
C:\ProgramData\Upload Bags Bags.ow3xm
C:\ProgramData\Upload Bags Bags.q3s7ff8
C:\ProgramData\Upload Bags Bags.rj3m0sp
C:\ProgramData\Upload Bags Bags.zrv5arf

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\ProgramData\proxy dash
C:\ProgramData\proxy dash\adovdxka.exe
C:\ProgramData\proxy dash\aqnilazd.exe
C:\ProgramData\proxy dash\funkpollmix.exe
C:\ProgramData\proxy dash\gkjxcsdp.exe
C:\ProgramData\proxy dash\idolmapi01gram.exe
C:\ProgramData\proxy dash\jwytrpxn.exe
C:\ProgramData\proxy dash\nfacigwg.exe
C:\ProgramData\proxy dash\tkshwlml.exe
C:\ProgramData\proxy dash\wgpchgoa.exe
C:\Program Files\Circle Developement
C:\Windows\Prefetch\FUNKPOLLMIX.EXE-4A23B90C.pf
C:\Users\Mali\AppData\Roaming\MICROS~1\Windows\Cookies\mali@www.adserver5[1].txt
C:\Users\Mali\AppData\Roaming\MICROS~1\Windows\Cookies\mali@adopt.euroclick[2].txt

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Error mail"="\"C:\\ProgramData\\Upload Bags Bags.9mvoll\""

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-06 23:10:12
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

Relancer Lop S&D

= Choisir cette fois 2

note:
Si le Bureau ne réapparait pas
= Presser Ctrl Alt Suppr
= Dans Fichier => Nouvelle tâche
=> Ecrire: explorer => entrée

ensuite dis moi comment ton pc se comporte...as tu encore des pubs??

pour l'instant je n'ai plus de pub
Merci beaucoup