Probléme de pub

Résolu
Bonjour,je vous demande de l'aide car j'ai énormement de pub qui s'ouvre sur mon pc même quand je navigue pas sur le net..Mon pc dois avoir 2/3 mois seulement..
se sont particuliérement des pubs "CID",j'ai pourtant bloquer les fenêtre pop-up..le pare-feu est activité..
Donc voila par avance merci ;-)

--
l'homme qui a toucher a son pc n'est pas parfait
son pc lui l'était
Configuration: Windows Vista
Firefox 3.0.1

22 réponses

  1. salut.
    j'ai eu le meme probleme il y a quel que temp regarde dans ta liste de programme. tu doit avoir un logicielle au nom de "cid" machin bidul. lol si tu la tu le désinstal et cest bon!!
    0
    1. Salut,non je n'est pas dans les programmes :-s
      0
      1. Contributeur sécurité
        Bonjour

        --Télécharge le fichier d’installation d’Hijackthis en cliquant sur ce lien

        http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

        * Enregistre HJTInstall.exe sur ton bureau.

        * Double-clique sur HJTInstall.exe pour lancer le programme

        Tuto : https://www.malekal.com/tutoriel-hijackthis/
        http://pagesperso-orange.fr/rginformatique/section%20virus/Hijenr.gif
        http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm

        * Accepte la license en cliquant sur le bouton "I Accept"
        * Choisis l'option "Do a system scan and save a log file"
        * Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
        * Clique sur "Edition -> Sélectionner tout", puis sur "Edition -> Copier" pour copier tout le contenu du rapport

        * Colle le rapport que tu viens de copier sur ce forum

         
        0
        1. Alors voila :

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 20:15:58, on 28/10/2008
          Platform: Windows Vista SP1 (WinNT 6.00.1905)
          MSIE: Internet Explorer v7.00 (7.00.6001.18000)
          Boot mode: Normal

          Running processes:
          C:\Windows\system32\taskeng.exe
          C:\Windows\system32\Dwm.exe
          C:\Windows\Explorer.EXE
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\Program Files\IDT\WDM\sttray.exe
          C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
          C:\Program Files\HP\QuickPlay\QPService.exe
          C:\Program Files\Windows Defender\MSASCui.exe
          C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
          C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
          C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
          C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
          c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
          C:\Program Files\Windows Live\Contrôle parental\fssui.exe
          C:\Program Files\Windows Sidebar\sidebar.exe
          C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
          C:\Windows\ehome\ehtray.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Windows\ehome\ehmsas.exe
          C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
          C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
          C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
          C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
          C:\Windows\system32\wuauclt.exe
          C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
          C:\Program Files\Internet Explorer\IEUser.exe
          C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Windows\system32\SearchFilterHost.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O1 - Hosts: ::1 localhost
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
          O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
          O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
          O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
          O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
          O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
          O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
          O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
          O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
          O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
          O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
          O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
          O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
          O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
          O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [oozeaxis] "C:\ProgramData\Move Byte Byte.sm5ggf2"
          O4 - HKCU\..\Run: [Long Internet Team Stupid] "C:\ProgramData\Film Book Body.sdbvo1"
          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
          O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
          O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
          O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
          O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
          O13 - Gopher Prefix:
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
          O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_9a642328\aestsrv.exe
          O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
          O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
          O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
          O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
          O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
          O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
          O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
          O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
          O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
          O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
          O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
          O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
          O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
          O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
          O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
          O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
          O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
          O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_9a642328\STacSV.exe
          O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
          0
          1. Bonjour,ensuite que-dois-je faire .?
            0
            1. Je me permet de faire un petit UP car je suis vraiment embéter..
              Merci.
              0
              1. Modérateur
                Salut Romano

                Merci de faire des up sur le message initial, je te donne la procédure le temps que Toptitbal revienne :

                https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

                * Télécharger Lop S&D d'Eric71 sur le bureau.
                * Double-cliquer sur le raccourci Lop S&D ainsi crée pour lancer l'installation. (Clic droit > Exécuter en tant qu'administrateur pour Vista)
                * Séléctionner la langue souhaitée, puis choisir l'option 1 (Recherche).
                * Une fois le scan terminé, enregistrez le rapport généré qui se situera par défaut sous la racine du disque : C:\lopR.txt.

                ==> poste le rapport stp

                @+

                ;-)
                0
                1. Contributeur sécurité
                  Merci Green Day, j'avais un peu oublié ce pauvre romano effectivement, je ne sais pas pourquoi mais il n'était plus dans "Mes interventions".
                  0
                  1. Bonjour,ha je vous remercie bon je vais de suite faire ce que tu ma dis green day
                    merci
                    0
                    1. voila voila :

                      --------------------\\ Lop S&D 4.2.4-9 XP/Vista

                      Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                      X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-70 )
                      BIOS : Default System BIOS
                      USER : ROMAIN ( Administrator )
                      BOOT : Normal boot
                      Antivirus : avast! antivirus 4.8.1229 [VPS 081030-0] 4.8.1229 (Activated)
                      C:\ (Local Disk) - NTFS - Total:223 Go (Free:165 Go)
                      D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
                      E:\ (CD or DVD)

                      "C:\Lop SD" ( MAJ : 30-10-2008|21:58 )
                      Option : [1] ( 31/10/2008|10:53 )

                      [ UAC => 1 ]

                      --------------------\\ Listing des dossiers dans Local

                      [15/09/2008|14:40] C:\Users\ROMAIN\AppData\Local\Adobe
                      [08/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\AOL
                      [06/09/2008|13:24] C:\Users\ROMAIN\AppData\Local\AOL OCP
                      [05/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\Application Data
                      [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\ATI
                      [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\AtStart.txt
                      [11/09/2008|09:48] C:\Users\ROMAIN\AppData\Local\d3d9caps.dat
                      [05/10/2008|15:25] C:\Users\ROMAIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                      [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\DSwitch.txt
                      [13/09/2008|18:22] C:\Users\ROMAIN\AppData\Local\FnF4.txt
                      [12/09/2008|14:29] C:\Users\ROMAIN\AppData\Local\GDIPFONTCACHEV1.DAT
                      [12/09/2008|13:22] C:\Users\ROMAIN\AppData\Local\Google
                      [05/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\Historique
                      [30/10/2008|23:05] C:\Users\ROMAIN\AppData\Local\IconCache.db
                      [08/09/2008|13:21] C:\Users\ROMAIN\AppData\Local\IsolatedStorage
                      [16/09/2008|14:06] C:\Users\ROMAIN\AppData\Local\Microsoft
                      [12/09/2008|13:14] C:\Users\ROMAIN\AppData\Local\Mozilla
                      [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\QSwitch.txt
                      [10/09/2008|08:06] C:\Users\ROMAIN\AppData\Local\QuickPlay
                      [31/10/2008|10:53] C:\Users\ROMAIN\AppData\Local\Temp
                      [05/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\Temporary Internet Files
                      [08/09/2008|13:34] C:\Users\ROMAIN\AppData\Local\VirtualStore

                      --------------------\\ Tâches planifiées dans C:\Windows\tasks

                      [31/10/2008 10:46][--ah-----] C:\Windows\tasks\SA.DAT
                      [30/10/2008 23:06][--a------] C:\Windows\tasks\SCHEDLGU.TXT

                      --------------------\\ Listing des dossiers dans C:\ProgramData

                      [13/06/2008|04:43] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
                      [15/09/2008|14:45] C:\ProgramData\Adobe
                      [06/09/2008|13:24] C:\ProgramData\AOL
                      [06/09/2008|13:24] C:\ProgramData\AOL OCP
                      [02/11/2006|14:02] C:\ProgramData\Application Data
                      [30/07/2008|06:11] C:\ProgramData\Atheros
                      [30/07/2008|07:07] C:\ProgramData\ATI
                      [05/09/2008|13:14] C:\ProgramData\Bureau
                      [06/10/2008|14:00] C:\ProgramData\comp two long internet
                      [06/10/2008|16:28] C:\ProgramData\CyberLink
                      [02/11/2006|14:02] C:\ProgramData\Desktop
                      [02/11/2006|14:02] C:\ProgramData\Documents
                      [05/09/2008|13:14] C:\ProgramData\Favoris
                      [02/11/2006|14:02] C:\ProgramData\Favorites
                      [06/10/2008|14:00] C:\ProgramData\Film Book Body.sdbvo1
                      [30/07/2008|06:52] C:\ProgramData\Hewlett-Packard
                      [13/09/2008|18:11] C:\ProgramData\Malwarebytes
                      [05/09/2008|13:14] C:\ProgramData\Menu D‚marrer
                      [13/09/2008|21:05] C:\ProgramData\Messenger Plus!
                      [10/09/2008|12:41] C:\ProgramData\Microsoft
                      [15/10/2008|15:54] C:\ProgramData\Microsoft Help
                      [05/09/2008|13:14] C:\ProgramData\ModŠles
                      [06/10/2008|14:00] C:\ProgramData\Move Byte Byte.ec7vch
                      [06/10/2008|14:00] C:\ProgramData\Move Byte Byte.sm5ggf2
                      [13/06/2008|04:29] C:\ProgramData\muvee Technologies
                      [06/10/2008|14:01] C:\ProgramData\ObjPlay
                      [02/11/2006|14:02] C:\ProgramData\Start Menu
                      [30/10/2008|18:08] C:\ProgramData\Symantec
                      [02/11/2006|14:02] C:\ProgramData\Templates
                      [05/09/2008|13:21] C:\ProgramData\Viewpoint
                      [13/06/2008|04:05] C:\ProgramData\WildTangent
                      [10/09/2008|12:44] C:\ProgramData\WLInstaller
                      [15/09/2008|13:21] C:\ProgramData\Yahoo! Companion

                      --------------------\\ Listing des dossiers dans C:\Program Files

                      [13/06/2008|04:43] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
                      [15/09/2008|14:46] C:\Program Files\Adobe
                      [05/09/2008|13:21] C:\Program Files\AIM6
                      [30/10/2008|19:15] C:\Program Files\Alwil Software
                      [13/06/2008|04:59] C:\Program Files\AOL
                      [30/07/2008|06:13] C:\Program Files\Atheros
                      [30/07/2008|06:14] C:\Program Files\ATI
                      [30/07/2008|06:16] C:\Program Files\ATI Technologies
                      [12/09/2008|13:48] C:\Program Files\CCleaner
                      [06/10/2008|13:59] C:\Program Files\Circle Developement
                      [30/07/2008|06:11] C:\Program Files\Cisco
                      [30/10/2008|18:07] C:\Program Files\Common Files
                      [30/07/2008|07:02] C:\Program Files\CyberLink
                      [14/09/2008|12:58] C:\Program Files\directx
                      [13/06/2008|04:58] C:\Program Files\EasyBits For Kids
                      [05/09/2008|13:14] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
                      [12/09/2008|13:21] C:\Program Files\Google
                      [30/07/2008|06:19] C:\Program Files\Hewlett-Packard
                      [13/06/2008|05:09] C:\Program Files\HP
                      [13/06/2008|04:05] C:\Program Files\HP Games
                      [30/07/2008|06:22] C:\Program Files\IDT
                      [14/09/2008|12:56] C:\Program Files\InstallShield Installation Information
                      [13/06/2008|12:50] C:\Program Files\Internet Explorer
                      [13/06/2008|05:11] C:\Program Files\Java
                      [13/09/2008|19:35] C:\Program Files\Lavalys
                      [13/09/2008|18:11] C:\Program Files\Malwarebytes' Anti-Malware
                      [06/10/2008|13:59] C:\Program Files\Messenger Plus! Live
                      [02/11/2006|13:37] C:\Program Files\Microsoft Games
                      [13/06/2008|04:41] C:\Program Files\Microsoft Office
                      [13/06/2008|04:42] C:\Program Files\Microsoft Works
                      [13/06/2008|04:41] C:\Program Files\Microsoft.NET
                      [13/06/2008|12:50] C:\Program Files\Movie Maker
                      [29/10/2008|15:26] C:\Program Files\Mozilla Firefox
                      [02/11/2006|13:37] C:\Program Files\MSBuild
                      [11/09/2008|14:34] C:\Program Files\MSXML 4.0
                      [13/06/2008|04:29] C:\Program Files\muvee Technologies
                      [05/09/2008|13:21] C:\Program Files\Online Services
                      [30/07/2008|06:19] C:\Program Files\Realtek
                      [02/11/2006|13:37] C:\Program Files\Reference Assemblies
                      [30/07/2008|06:18] C:\Program Files\Synaptics
                      [28/10/2008|20:15] C:\Program Files\Trend Micro
                      [02/11/2006|14:01] C:\Program Files\Uninstall Information
                      [13/09/2008|20:57] C:\Program Files\VideoLAN
                      [05/09/2008|13:21] C:\Program Files\Viewpoint
                      [13/06/2008|12:50] C:\Program Files\Windows Calendar
                      [13/06/2008|12:50] C:\Program Files\Windows Collaboration
                      [13/06/2008|12:50] C:\Program Files\Windows Defender
                      [13/06/2008|12:50] C:\Program Files\Windows Journal
                      [10/09/2008|12:48] C:\Program Files\Windows Live
                      [15/10/2008|16:02] C:\Program Files\Windows Mail
                      [13/06/2008|12:50] C:\Program Files\Windows Media Player
                      [05/09/2008|13:14] C:\Program Files\Windows NT
                      [13/06/2008|12:50] C:\Program Files\Windows Photo Gallery
                      [13/06/2008|12:50] C:\Program Files\Windows Sidebar
                      [12/09/2008|13:48] C:\Program Files\Yahoo!

                      --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

                      [15/09/2008|14:45] C:\Program Files\Common Files\Adobe
                      [05/09/2008|13:21] C:\Program Files\Common Files\AOL
                      [13/06/2008|04:41] C:\Program Files\Common Files\DESIGNER
                      [13/06/2008|05:03] C:\Program Files\Common Files\InstallShield
                      [13/06/2008|05:09] C:\Program Files\Common Files\Java
                      [30/07/2008|06:57] C:\Program Files\Common Files\LightScribe
                      [12/09/2008|14:45] C:\Program Files\Common Files\microsoft shared
                      [13/06/2008|04:29] C:\Program Files\Common Files\muvee Technologies
                      [02/11/2006|12:18] C:\Program Files\Common Files\Services
                      [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
                      [30/10/2008|18:41] C:\Program Files\Common Files\Symantec Shared
                      [13/06/2008|12:50] C:\Program Files\Common Files\System
                      [10/09/2008|12:47] C:\Program Files\Common Files\WindowsLiveInstaller

                      --------------------\\ Process

                      ( 83 Processes )

                      iexplore.exe ~ [PID:2100]
                      iexplore.exe ~ [PID:2632]

                      --------------------\\ Recherche avec S_Lop

                      C:\ProgramData\Film Book Body.sdbvo1
                      C:\ProgramData\Move Byte Byte.ec7vch
                      C:\ProgramData\Move Byte Byte.sm5ggf2

                      --------------------\\ Recherche de Fichiers / Dossiers Lop

                      C:\ProgramData\comp two long internet
                      C:\ProgramData\comp two long internet\shim license.exe
                      C:\Program Files\Circle Developement
                      C:\Program Files\Circle Developement\Uninstall.exe

                      --------------------\\ Verification du Registre

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "Long Internet Team Stupid"="\"C:\\ProgramData\\Film Book Body.sdbvo1\""
                      "oozeaxis"="\"C:\\ProgramData\\Move Byte Byte.sm5ggf2\""

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

                      --------------------\\ Verification du fichier Hosts

                      Fichier Hosts PROPRE

                      --------------------\\ Recherche de fichiers avec Catchme

                      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2008-10-31 10:53:52
                      Windows 6.0.6001 Service Pack 1 NTFS
                      scanning hidden processes ...
                      scanning hidden files ...
                      scan completed successfully
                      hidden processes: 0
                      hidden files: 22

                      --------------------\\ Recherche d'autres infections

                      Aucune autre infection trouvée !

                      [F:147][D:7]-> C:\Users\ROMAIN\AppData\Local\Temp
                      [F:105][D:1]-> C:\Users\ROMAIN\AppData\Roaming\MICROS~1\Windows\Cookies
                      [F:219][D:6]-> C:\Users\ROMAIN\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
                      [F:5][D:3]-> C:\$Recycle.Bin

                      1 - "C:\Lop SD\LopR_1.txt" - 31/10/2008|10:55 - Option : [1]

                      --------------------\\ Fin du rapport a 10:55:05
                      [ UAC => 1 ]

                      0
                      1. Contributeur sécurité
                        Relance Lop S&D

                        * Choisis cette fois ci l'Option 2 (Suppression)
                        * Ne ferme pas la fenêtre lors de la suppression !
                        * Poste le rapport généré (C:\lopR.txt)
                        0
                        1. voila

                          --------------------\\ Lop S&D 4.2.4-9 XP/Vista

                          Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                          X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-70 )
                          BIOS : Default System BIOS
                          USER : ROMAIN ( Administrator )
                          BOOT : Normal boot
                          Antivirus : avast! antivirus 4.8.1229 [VPS 081030-0] 4.8.1229 (Activated)
                          C:\ (Local Disk) - NTFS - Total:223 Go (Free:165 Go)
                          D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
                          E:\ (CD or DVD)

                          "C:\Lop SD" ( MAJ : 30-10-2008|21:58 )
                          Option : [2] ( 31/10/2008|11:10 )

                          [ UAC => 1 ]

                          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                          Echec ! - C:\ProgramData\comp two long internet\shim license.exe
                          Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
                          Supprime! - C:\ProgramData\Film Book Body.sdbvo1
                          Supprime! - C:\ProgramData\Move Byte Byte.ec7vch
                          Supprime! - C:\ProgramData\Move Byte Byte.sm5ggf2
                          Echec ! - C:\ProgramData\comp two long internet
                          Supprime! - C:\Program Files\Circle Developement
                          -
                          [ Fichier Hosts ] .. Restaure!

                          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ DEUXIEME PASSAGE

                          Echec ! - C:\ProgramData\comp two long internet\shim license.exe
                          Echec ! - C:\ProgramData\comp two long internet

                          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                          Supprime! - C:\Program Files\Viewpoint
                          Supprime! - C:\PROGRA~2\Viewpoint

                          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                          --------------------\\ Listing des dossiers dans Local

                          [15/09/2008|14:40] C:\Users\ROMAIN\AppData\Local\Adobe
                          [08/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\AOL
                          [06/09/2008|13:24] C:\Users\ROMAIN\AppData\Local\AOL OCP
                          [05/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\Application Data
                          [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\ATI
                          [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\AtStart.txt
                          [11/09/2008|09:48] C:\Users\ROMAIN\AppData\Local\d3d9caps.dat
                          [05/10/2008|15:25] C:\Users\ROMAIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
                          [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\DSwitch.txt
                          [13/09/2008|18:22] C:\Users\ROMAIN\AppData\Local\FnF4.txt
                          [12/09/2008|14:29] C:\Users\ROMAIN\AppData\Local\GDIPFONTCACHEV1.DAT
                          [12/09/2008|13:22] C:\Users\ROMAIN\AppData\Local\Google
                          [05/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\Historique
                          [30/10/2008|23:05] C:\Users\ROMAIN\AppData\Local\IconCache.db
                          [08/09/2008|13:21] C:\Users\ROMAIN\AppData\Local\IsolatedStorage
                          [16/09/2008|14:06] C:\Users\ROMAIN\AppData\Local\Microsoft
                          [12/09/2008|13:14] C:\Users\ROMAIN\AppData\Local\Mozilla
                          [05/09/2008|13:28] C:\Users\ROMAIN\AppData\Local\QSwitch.txt
                          [10/09/2008|08:06] C:\Users\ROMAIN\AppData\Local\QuickPlay
                          [31/10/2008|11:10] C:\Users\ROMAIN\AppData\Local\Temp
                          [05/09/2008|13:18] C:\Users\ROMAIN\AppData\Local\Temporary Internet Files
                          [08/09/2008|13:34] C:\Users\ROMAIN\AppData\Local\VirtualStore

                          --------------------\\ Tâches planifiées dans C:\Windows\tasks

                          [31/10/2008 10:46][--ah-----] C:\Windows\tasks\SA.DAT
                          [30/10/2008 23:06][--a------] C:\Windows\tasks\SCHEDLGU.TXT

                          --------------------\\ Listing des dossiers dans C:\ProgramData

                          [13/06/2008|04:43] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
                          [15/09/2008|14:45] C:\ProgramData\Adobe
                          [06/09/2008|13:24] C:\ProgramData\AOL
                          [06/09/2008|13:24] C:\ProgramData\AOL OCP
                          [02/11/2006|14:02] C:\ProgramData\Application Data
                          [30/07/2008|06:11] C:\ProgramData\Atheros
                          [30/07/2008|07:07] C:\ProgramData\ATI
                          [05/09/2008|13:14] C:\ProgramData\Bureau
                          [06/10/2008|14:00] C:\ProgramData\comp two long internet
                          [06/10/2008|16:28] C:\ProgramData\CyberLink
                          [02/11/2006|14:02] C:\ProgramData\Desktop
                          [02/11/2006|14:02] C:\ProgramData\Documents
                          [05/09/2008|13:14] C:\ProgramData\Favoris
                          [02/11/2006|14:02] C:\ProgramData\Favorites
                          [30/07/2008|06:52] C:\ProgramData\Hewlett-Packard
                          [13/09/2008|18:11] C:\ProgramData\Malwarebytes
                          [05/09/2008|13:14] C:\ProgramData\Menu D‚marrer
                          [13/09/2008|21:05] C:\ProgramData\Messenger Plus!
                          [10/09/2008|12:41] C:\ProgramData\Microsoft
                          [15/10/2008|15:54] C:\ProgramData\Microsoft Help
                          [05/09/2008|13:14] C:\ProgramData\ModŠles
                          [13/06/2008|04:29] C:\ProgramData\muvee Technologies
                          [06/10/2008|14:01] C:\ProgramData\ObjPlay
                          [02/11/2006|14:02] C:\ProgramData\Start Menu
                          [30/10/2008|18:08] C:\ProgramData\Symantec
                          [02/11/2006|14:02] C:\ProgramData\Templates
                          [13/06/2008|04:05] C:\ProgramData\WildTangent
                          [10/09/2008|12:44] C:\ProgramData\WLInstaller
                          [15/09/2008|13:21] C:\ProgramData\Yahoo! Companion

                          --------------------\\ Listing des dossiers dans C:\Program Files

                          [13/06/2008|04:43] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
                          [15/09/2008|14:46] C:\Program Files\Adobe
                          [05/09/2008|13:21] C:\Program Files\AIM6
                          [30/10/2008|19:15] C:\Program Files\Alwil Software
                          [13/06/2008|04:59] C:\Program Files\AOL
                          [30/07/2008|06:13] C:\Program Files\Atheros
                          [30/07/2008|06:14] C:\Program Files\ATI
                          [30/07/2008|06:16] C:\Program Files\ATI Technologies
                          [12/09/2008|13:48] C:\Program Files\CCleaner
                          [30/07/2008|06:11] C:\Program Files\Cisco
                          [30/10/2008|18:07] C:\Program Files\Common Files
                          [30/07/2008|07:02] C:\Program Files\CyberLink
                          [14/09/2008|12:58] C:\Program Files\directx
                          [13/06/2008|04:58] C:\Program Files\EasyBits For Kids
                          [05/09/2008|13:14] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
                          [12/09/2008|13:21] C:\Program Files\Google
                          [30/07/2008|06:19] C:\Program Files\Hewlett-Packard
                          [13/06/2008|05:09] C:\Program Files\HP
                          [13/06/2008|04:05] C:\Program Files\HP Games
                          [30/07/2008|06:22] C:\Program Files\IDT
                          [14/09/2008|12:56] C:\Program Files\InstallShield Installation Information
                          [13/06/2008|12:50] C:\Program Files\Internet Explorer
                          [13/06/2008|05:11] C:\Program Files\Java
                          [13/09/2008|19:35] C:\Program Files\Lavalys
                          [13/09/2008|18:11] C:\Program Files\Malwarebytes' Anti-Malware
                          [06/10/2008|13:59] C:\Program Files\Messenger Plus! Live
                          [02/11/2006|13:37] C:\Program Files\Microsoft Games
                          [13/06/2008|04:41] C:\Program Files\Microsoft Office
                          [13/06/2008|04:42] C:\Program Files\Microsoft Works
                          [13/06/2008|04:41] C:\Program Files\Microsoft.NET
                          [13/06/2008|12:50] C:\Program Files\Movie Maker
                          [29/10/2008|15:26] C:\Program Files\Mozilla Firefox
                          [02/11/2006|13:37] C:\Program Files\MSBuild
                          [11/09/2008|14:34] C:\Program Files\MSXML 4.0
                          [13/06/2008|04:29] C:\Program Files\muvee Technologies
                          [05/09/2008|13:21] C:\Program Files\Online Services
                          [30/07/2008|06:19] C:\Program Files\Realtek
                          [02/11/2006|13:37] C:\Program Files\Reference Assemblies
                          [30/07/2008|06:18] C:\Program Files\Synaptics
                          [28/10/2008|20:15] C:\Program Files\Trend Micro
                          [02/11/2006|14:01] C:\Program Files\Uninstall Information
                          [13/09/2008|20:57] C:\Program Files\VideoLAN
                          [13/06/2008|12:50] C:\Program Files\Windows Calendar
                          [13/06/2008|12:50] C:\Program Files\Windows Collaboration
                          [13/06/2008|12:50] C:\Program Files\Windows Defender
                          [13/06/2008|12:50] C:\Program Files\Windows Journal
                          [10/09/2008|12:48] C:\Program Files\Windows Live
                          [15/10/2008|16:02] C:\Program Files\Windows Mail
                          [13/06/2008|12:50] C:\Program Files\Windows Media Player
                          [05/09/2008|13:14] C:\Program Files\Windows NT
                          [13/06/2008|12:50] C:\Program Files\Windows Photo Gallery
                          [13/06/2008|12:50] C:\Program Files\Windows Sidebar
                          [12/09/2008|13:48] C:\Program Files\Yahoo!

                          --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

                          [15/09/2008|14:45] C:\Program Files\Common Files\Adobe
                          [05/09/2008|13:21] C:\Program Files\Common Files\AOL
                          [13/06/2008|04:41] C:\Program Files\Common Files\DESIGNER
                          [13/06/2008|05:03] C:\Program Files\Common Files\InstallShield
                          [13/06/2008|05:09] C:\Program Files\Common Files\Java
                          [30/07/2008|06:57] C:\Program Files\Common Files\LightScribe
                          [12/09/2008|14:45] C:\Program Files\Common Files\microsoft shared
                          [13/06/2008|04:29] C:\Program Files\Common Files\muvee Technologies
                          [02/11/2006|12:18] C:\Program Files\Common Files\Services
                          [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
                          [30/10/2008|18:41] C:\Program Files\Common Files\Symantec Shared
                          [13/06/2008|12:50] C:\Program Files\Common Files\System
                          [10/09/2008|12:47] C:\Program Files\Common Files\WindowsLiveInstaller

                          --------------------\\ Process

                          ( 77 Processes )

                          ... OK !

                          --------------------\\ Recherche avec S_Lop

                          Aucun fichier / dossier Lop trouvé !

                          --------------------\\ Recherche de Fichiers / Dossiers Lop

                          C:\ProgramData\comp two long internet
                          C:\ProgramData\comp two long internet\shim license.exe

                          --------------------\\ Verification du Registre

                          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

                          ..... OK !

                          --------------------\\ Verification du fichier Hosts

                          Fichier Hosts PROPRE

                          --------------------\\ Recherche de fichiers avec Catchme

                          catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                          Rootkit scan 2008-10-31 11:11:07
                          Windows 6.0.6001 Service Pack 1 NTFS
                          scanning hidden processes ...
                          scanning hidden files ...
                          scan completed successfully
                          hidden processes: 0
                          hidden files: 22

                          --------------------\\ Recherche d'autres infections

                          Aucune autre infection trouvée !

                          [F:151][D:8]-> C:\Users\ROMAIN\AppData\Local\Temp
                          [F:110][D:1]-> C:\Users\ROMAIN\AppData\Roaming\MICROS~1\Windows\Cookies
                          [F:219][D:6]-> C:\Users\ROMAIN\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
                          [F:5][D:3]-> C:\$Recycle.Bin

                          1 - "C:\Lop SD\LopR_1.txt" - 31/10/2008|10:55 - Option : [1]
                          2 - "C:\Lop SD\LopR_2.txt" - 31/10/2008|11:12 - Option : [2]

                          --------------------\\ Fin du rapport a 11:12:16
                          [ UAC => 1 ]

                          et surtout merci!
                          0
                          1. Contributeur sécurité
                            OK
                            Y a t-il une amélioration sur le PC ?
                            Refais-nous un Hijackthis tout frais stp.
                            0
                            1. Alors pour ce qui est des pubs une fenétre CID c'est ouverte y'a pas longtemps mais sa va ..
                              je poste un hijackthis mais lors du début du scan un message cest afficher j'ai cliquer sur "ok" trop vite je ne sais pas de quoi il s'agit

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 20:15:58, on 28/10/2008
                              Platform: Windows Vista SP1 (WinNT 6.00.1905)
                              MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                              Boot mode: Normal

                              Running processes:
                              C:\Windows\system32\taskeng.exe
                              C:\Windows\system32\Dwm.exe
                              C:\Windows\Explorer.EXE
                              C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                              C:\Program Files\IDT\WDM\sttray.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
                              C:\Program Files\HP\QuickPlay\QPService.exe
                              C:\Program Files\Windows Defender\MSASCui.exe
                              C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                              C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                              C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                              C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                              c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                              C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                              C:\Program Files\Windows Live\Contrôle parental\fssui.exe
                              C:\Program Files\Windows Sidebar\sidebar.exe
                              C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                              C:\Windows\ehome\ehtray.exe
                              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                              C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Windows\ehome\ehmsas.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
                              C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
                              C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
                              C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                              C:\Windows\system32\wuauclt.exe
                              C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                              C:\Program Files\Internet Explorer\IEUser.exe
                              C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Windows\system32\SearchFilterHost.exe
                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                              R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O1 - Hosts: ::1 localhost
                              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                              O2 - BHO: Windows Live OneCare Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Contrôle parental\fssbho.dll
                              O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
                              O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                              O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
                              O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
                              O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
                              O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                              O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
                              O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
                              O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
                              O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                              O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
                              O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                              O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
                              O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
                              O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
                              O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                              O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                              O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                              O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                              O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                              O4 - HKCU\..\Run: [oozeaxis] "C:\ProgramData\Move Byte Byte.sm5ggf2"
                              O4 - HKCU\..\Run: [Long Internet Team Stupid] "C:\ProgramData\Film Book Body.sdbvo1"
                              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                              O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                              O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                              O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                              O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                              O13 - Gopher Prefix:
                              O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                              O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_9a642328\aestsrv.exe
                              O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
                              O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                              O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                              O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                              O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                              O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
                              O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
                              O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
                              O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                              O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
                              O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                              O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
                              O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                              O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
                              O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
                              O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
                              O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                              O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_9a642328\STacSV.exe
                              O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
                              0
                              1. Contributeur sécurité
                                On lance un nettoyage général :

                                Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

                                Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre-le sur ton Bureau à partir de ce lien :

                                http://www.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware

                                A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

                                Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

                                Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

                                Redémarre ton ordinateur en mode sans échec

                                Relance MBAM grâce au raccourci présent sur ton bureau.

                                Dans l'onglet analyse, vérifie que "Exécuter un examen complet" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

                                MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

                                A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

                                Si des malwares ont été détectés, leur liste s'affiche.
                                En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

                                MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

                                Ferme MBAM en cliquant sur Quitter.

                                Poste le rapport dans ta réponse

                                0
                                1. Alors voila aucun élements nuisible ta était détecter dans les deux modes,je te poste un rapport

                                  Malwarebytes' Anti-Malware 1.28
                                  Version de la base de données: 1145
                                  Windows 6.0.6001 Service Pack 1

                                  31/10/2008 13:59:22
                                  mbam-log-2008-10-31 (13-59-22).txt

                                  Type de recherche: Examen complet (C:\|)
                                  Eléments examinés: 141473
                                  Temps écoulé: 2 hour(s), 15 minute(s), 38 second(s)

                                  Processus mémoire infecté(s): 0
                                  Module(s) mémoire infecté(s): 0
                                  Clé(s) du Registre infectée(s): 0
                                  Valeur(s) du Registre infectée(s): 0
                                  Elément(s) de données du Registre infecté(s): 0
                                  Dossier(s) infecté(s): 0
                                  Fichier(s) infecté(s): 0

                                  Processus mémoire infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Module(s) mémoire infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Clé(s) du Registre infectée(s):
                                  (Aucun élément nuisible détecté)

                                  Valeur(s) du Registre infectée(s):
                                  (Aucun élément nuisible détecté)

                                  Elément(s) de données du Registre infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Dossier(s) infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Fichier(s) infecté(s):
                                  (Aucun élément nuisible détecté)
                                  0
                                  1. Contributeur sécurité
                                    OK, où en sont tes problèmes ?
                                    0
                                    1. Ben écoute apparament je n'est plus de pub
                                      je dirais demain si j'ai encore des pubs ;-)
                                      Merci Merci =)
                                      0
                                      1. Bonsoir,bon Merci je n'est plus de pubs
                                        Grand merci ;-)
                                        0
                                        • 1
                                        • 2