virus coriace......................

j'ai le logiciel hijackthis,voici son resultat.....
j y comprends rien!!!!

Logfile of HijackThis v1.99.1
Scan saved at 01:47:22, on 09/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
C:\Program Files\Softwin\BitDefender8\bdoesrv.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\Program Files\Softwin\BitDefender8\bdswitch.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~1.tmp.exe
C:\WINDOWS\System32\algs.exe
C:\WINDOWS\System32\phpotmwmp.exe
C:\WINDOWS\etb\pokapoka75.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~7.tmp.exe
C:\Program Files\Sitecom\Sitecom Wireless Network PC Card 54G WL-112\Installer\WINXP\WLANUTL.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~B.tmp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\OpenOffice.org1.1.0\program\soffice.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~C.tmp.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~D.tmp.exe
C:\WINDOWS\System32\winjava.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender8\vsserv.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\chris\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.easysearch4you.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.easysearch4you.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.easysearch4you.com/sp2.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 255.255.255.255 ar.atwola.com atdmt.com avp.ch avp.com avp.ru awaps.net ca.com dispatch.mcafee.com download.mcafee.com download.microsoft.com downloads.microsoft.com engine.awaps.net f-secure.com ftp.f-secure.com ftp.sophos.com go.microsoft.com liveupdate.symantec.com mast.mcafee.com mcafee.com msdn.microsoft.com my-etrust.com nai.com networkassociates.com office.microsoft.com phx.corporate-ir.net secure.nai.com securityresponse.symantec.com service1.symantec.com sophos.com spd.atdmt.com support.microsoft.com symantec.com update.symantec.com updates.symantec.com us.mcafee.com vil.nai.com viruslist.ru windowsupdate.microsoft.com www.avp.ch www.avp.com www.avp.ru www.awaps.net www.ca.com www.f-secure.com www.kaspersky.ru www.mcafee.com www.my-etrust.com www.nai.com www.networkassociates.com www.sophos.com www.symantec.com www.trendmicro.com www.viruslist.com www.viruslist.ru www3.ca.com
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] C:\Program Files\Softwin\BitDefender8\\bdoesrv.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender8\bdnagent.exe
O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender8\\bdswitch.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Application Layer Gateway Service] C:\WINDOWS\System32\algs.exe
O4 - HKLM\..\Run: [zyuph] C:\WINDOWS\System32\qkkgznan.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [System service75] C:\WINDOWS\etb\pokapoka75.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: OpenOffice.org 1.1.0.lnk = C:\Program Files\OpenOffice.org1.1.0\program\quickstart.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Sitecom WL-112 Utility.lnk = C:\Program Files\Sitecom\Sitecom Wireless Network PC Card 54G WL-112\Installer\WINXP\WLANUTL.exe
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (file missing)
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe (file missing)
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Enables Java Support (Java) - Unknown owner - C:\WINDOWS\System32\winjava.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender8\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

merci d'avance

avant tous merci man c est vraiment super de ta part
j'aimerais savoir comment tu sais ligne qui ne vont pas......
dans se que tu m 'a disde fair y a deux truc que j ai pas touver :
C:\WINDOWS\System32\qkkgznan.exe
O23 - Service: Enables Java Support (Java) - Unknown owner - C:\WINDOWS\System32\winjava.exe

voila le nouveau rapport:

Logfile of HijackThis v1.99.1
Scan saved at 13:45:16, on 09/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
C:\Program Files\Softwin\BitDefender8\bdoesrv.exe
C:\Program Files\Softwin\BitDefender8\bdnagent.exe
C:\Program Files\Softwin\BitDefender8\bdswitch.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
C:\WINDOWS\System32\vcbkhgwpjfyw.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Sitecom\Sitecom Wireless Network PC Card 54G WL-112\Installer\WINXP\WLANUTL.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~2.tmp.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~5.tmp.exe
C:\Program Files\Softwin\BitDefender8\vsserv.exe
D:\eMule\emule.exe
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\chris\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 255.255.255.255 ar.atwola.com atdmt.com avp.ch avp.com avp.ru awaps.net ca.com dispatch.mcafee.com download.mcafee.com download.microsoft.com downloads.microsoft.com engine.awaps.net f-secure.com ftp.f-secure.com ftp.sophos.com go.microsoft.com liveupdate.symantec.com mast.mcafee.com mcafee.com msdn.microsoft.com my-etrust.com nai.com networkassociates.com office.microsoft.com phx.corporate-ir.net secure.nai.com securityresponse.symantec.com service1.symantec.com sophos.com spd.atdmt.com support.microsoft.com symantec.com update.symantec.com updates.symantec.com us.mcafee.com vil.nai.com viruslist.ru windowsupdate.microsoft.com www.avp.ch www.avp.com www.avp.ru www.awaps.net www.ca.com www.f-secure.com www.kaspersky.ru www.mcafee.com www.my-etrust.com www.nai.com www.networkassociates.com www.sophos.com www.symantec.com www.trendmicro.com www.viruslist.com www.viruslist.ru www3.ca.com
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] C:\Program Files\Softwin\BitDefender8\\bdoesrv.exe
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender8\bdnagent.exe
O4 - HKLM\..\Run: [BDSwitchAgent] C:\Program Files\Softwin\BitDefender8\\bdswitch.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [zyuph] C:\WINDOWS\System32\llsceu.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpyBlocs] C:\Program Files\eBlocs\SpyBlocs\GLF25.exe
O4 - Startup: OpenOffice.org 1.1.0.lnk = C:\Program Files\OpenOffice.org1.1.0\program\crashrep.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Sitecom WL-112 Utility.lnk = C:\Program Files\Sitecom\Sitecom Wireless Network PC Card 54G WL-112\Installer\WINXP\WLANUTL.exe
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (file missing)
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe (file missing)
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender8\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

voilou merci

voila ce que tu m'a demander

1)rapport panda
Incident Statut Analyse

Virus:Trj/Qhost.AD Désinfecté C:\Documents and Settings\chris\Application Data\SB\cache\aaee99c1bfb876ee1f52c1880fe3cea0
Virus:W32/Bobax.BM.worm Désinfecté C:\Documents and Settings\chris\Local Settings\Temp\~DF2.tmp
Virus:W32/Baxbo.A Désinfecté C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Virus:W32/Baxbo.A Désinfecté C:\Program Files\OpenOffice.org1.1.0\program\crashrep.exe
Virus:W32/Baxbo.A Désinfecté C:\Program Files\Sitecom\Sitecom Wireless Network PC Card 54G WL-112\Installer\WINXP\WLANUTL.exe
Virus:W32/Bobax.BM.worm Désinfecté C:\RECYCLER\S-1-5-21-329068152-1677128483-725345543-1003\Dc2.tmp
Virus:Trj/Qhost.AD Désinfecté C:\WINDOWS\system32\drivers\etc\hosts
Virus:W32/Sdbot.ftp Désinfecté C:\WINDOWS\system32\i
Virus:W32/Bobax.BM.worm Désinfecté C:\WINDOWS\system32\nbojjt.exe
Virus:Trj/Dropper.KQ Désinfecté C:\WINDOWS\system32\wllwtr.RB0
2)rapport ewido
---------------------------------------------------------
ewido security suite - Rapport de scan
---------------------------------------------------------

+ Créé le: 21:00:16, 09/10/2005
+ Somme de contrôle: E006B870

+ Résultats du scan:

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Nettoyer et sauvegarder
HKU\S-1-5-21-329068152-1677128483-725345543-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Nettoyer et sauvegarder
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Spyware.Alexa : Erreur durant le nettoyage
C:\Documents and Settings\chris\Application Data\SB\cache\03abc204402b081112ccd3a6d5ac6433 -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\0da6f811f42cbf86b7cd10f526d88fb9 -> Spyware.Cookie.Masterstats : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\12197c45348566e6a16c379ec6180e4d -> Spyware.Cookie.Liveperson : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\13cc494510fc8da223e9490ff07b3a0e -> Spyware.Cookie.Trafic : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\141f1cd7f146de3e2fde8c95c120fda9 -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\164ddbe1797a2dfa3e303e06675eacd4 -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\1ca03893512162a19d71eddc8ce26a0f -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\1d994f33c13785e30b1cc9ae93d52bd7 -> Spyware.Cookie.Tribalfusion : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\1ec361f7b4027bff91d3832bb270ac49 -> Spyware.Cookie.Burstnet : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\1f76806614e7873f6063de4303d56f4e -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\23854738c8b49d41b5f1170310c2f234 -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\26d723ed47b0599868e3e64044589e97 -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\295ae7bdd06a95a6ed1ae0697d82d28e -> Spyware.Cookie.Trafficmp : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\2af50887aaec371a3d92954f62a4b21f -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\2d99821fda1e6b398e25967f439b2cda -> Spyware.Cookie.Xxxcounter : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\2f0dce2789c9bcb60326539a14a918cf -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\300867ce5c68ef8a7f8ece6a8a37895e -> Spyware.Cookie.Adviva : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\30803cbaff00594f4f4e1cf318aac631 -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\35d86906f808087ccb135371dfbdba16 -> Spyware.Cookie.Spylog : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\377be26327a5bb4f61fadad19bf29bdb -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\3af8679625578b71fe8497a32be9d9d0 -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\4020f2e43eec85e939f102ca50e39256 -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\41031f22604c8acbcf97cc043d094166 -> Spyware.Cookie.Adbrite : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\44a78135204aa3ae103c6df8e80344ba -> Spyware.Cookie.Hitslink : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\4b40780702b9b578be392cfd608f51c9 -> Spyware.Cookie.Sexcounter : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\58398fd17219671586158c3a86bab099 -> Spyware.Cookie.Estat : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\5a84a587d58d5f3a9995020abd45668d -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\65d805b39cceac7ab40b887a0d1ec6fd -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\6a48c1a3675380d72a28829df16ba3e0 -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\6b142a65107835fef814b33855fbcded -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\7af2ee0b5b55f0f23be4d3f7e7c24f50 -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\7ec1ca3e63f702982b75c8f418d5d251 -> Spyware.Cookie.Casinotropez : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\881a479178611c7981ab812f452e0abc -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\882a8f1e708eda0255432bfa8805b56a -> Spyware.Cookie.Serving-sys : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\89c6ac90d884d76bb86ac4f277083b01 -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\8d80aa935fb5c0199b61c084f94dde6a -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\9012ae1b0c2e45c85e922cb77057fe20 -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\90fce2efb38bf085a640412bc77d4818 -> Spyware.Cookie.Com : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\97b16a0b0643bfa02a34d1b4b7ac5db9 -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\97e0c180ac2e794a76b68a1c57a084a2 -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\99f33a0688f1ea76b1e385d609a34922 -> Spyware.Cookie.Statcounter : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\a2783b5424c2a3d72d84514928fa0673 -> Spyware.Cookie.Bfast : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\abd98476453a3515edda7603030cbbea -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\b1d7b50562577b43c707a3156f185361 -> Spyware.Cookie.Casinotropez : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\b24065b83ba2c364f24f7a3656923095 -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\b6581d3396f79c77c448976bc5c72089 -> Spyware.Cookie.Ivwbox : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\b9aa13e4e79e5df289ac05829ec38fbe -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\ba6f324e6dad2805e21c62de0dfbb99c -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\bd171f61ddc9acb26d004990b698414f -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\be1c3e48bfdd1209ab9364571c28c374 -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\bf3ad6a8bdbef73b1fca7f6cc82b35a6 -> Spyware.Cookie.Serving-sys : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\c08f72a7fb71bbccb5e9740123a67e0f -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\c0b43cdffc1d7a2e8c6f8d9d2ebabfc9 -> Spyware.Cookie.Paypopup : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\c27c0952ae455fd0cf4f3361d13acb19 -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\c2df27136e4a6753135061937c3c24b6 -> Spyware.Cookie.Revenue : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\ca6f68a7d2850d6ce7dbb56b4d5d2910 -> Spyware.Cookie.Sexlist : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\cf89d06dd04cff2b3a20fb79544eca71 -> Spyware.Cookie.Falkag : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\d047e6f9a354cd452586ef1da43a776a -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\d0dbbf844f4a98c393a0e2a37c035c6c -> Spyware.Cookie.Findwhat : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\d14bdc0ce54a9fd325032490e6d4df27 -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\da89ea04f0654e817fe8ca850fc756ba -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\e1f88444102cd37ae409e865c337f11e -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\e5ef2d5d82b1404ffaa0290676f68fce -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\ebb6f080335ef4de661b2b8122651a8e -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\efc0a30a519931da5195ee90e18d99b7 -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\f0e1e81755b7856ecbf2526f654a5797 -> Spyware.Cookie.Webtrendslive : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\f2957cf7f8a04b32937eec7f4dcb3446 -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\f74d982a564ce1b52c9026a2151ea733 -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\f8afe13b240058642a9a7a336075b5d1 -> Spyware.Cookie.Paycounter : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\f969ff9c472ce19adf61b70de828a7a4 -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\fc0be2658635ae495d496f19bd836c08 -> Spyware.Cookie.Sextracker : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Application Data\SB\cache\fd44023473a6b58e406805ade346f22c -> Spyware.Cookie.Esomniture : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@247realmedia[1].txt -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@adtech[2].txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@atdmt[2].txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@doubleclick[2].txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@estat[1].txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@fl01.ct2.comclick[1].txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@tradedoubler[1].txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@weborama[1].txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
C:\Documents and Settings\chris\Cookies\chris@www.smartadserver[1].txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
C:\RECYCLER\S-1-5-21-329068152-1677128483-725345543-1003\Dc1.exe -> Worm.Bobic.n : Nettoyer et sauvegarder
C:\WINDOWS\France.exe -> Dialer.Generic : Nettoyer et sauvegarder
C:\WINDOWS\system32\eqihvwgilo.exe -> Worm.Bobic.n : Nettoyer et sauvegarder

3)rapport HijackThis

Logfile of HijackThis v1.99.1
Scan saved at 22:45:08, on 09/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\DOCUME~1\chris\LOCALS~1\Temp\~1.tmp.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\chris\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 255.255.255.255 ar.atwola.com atdmt.com avp.ch avp.com avp.ru awaps.net ca.com dispatch.mcafee.com download.mcafee.com download.microsoft.com downloads.microsoft.com engine.awaps.net f-secure.com ftp.f-secure.com ftp.sophos.com go.microsoft.com liveupdate.symantec.com mast.mcafee.com mcafee.com msdn.microsoft.com my-etrust.com nai.com networkassociates.com office.microsoft.com phx.corporate-ir.net secure.nai.com securityresponse.symantec.com service1.symantec.com sophos.com spd.atdmt.com support.microsoft.com symantec.com update.symantec.com updates.symantec.com us.mcafee.com vil.nai.com viruslist.ru windowsupdate.microsoft.com www.avp.ch www.avp.com www.avp.ru www.awaps.net www.ca.com www.f-secure.com www.kaspersky.ru www.mcafee.com www.my-etrust.com www.nai.com www.networkassociates.com www.sophos.com www.symantec.com www.trendmicro.com www.viruslist.com www.viruslist.ru www3.ca.com
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [zyuph] C:\WINDOWS\System32\qobbxqmf.exe
O4 - HKLM\..\RunOnce: [Panda_cleaner_206668] C:\WINDOWS\System32\ActiveScan\pavdr.exe 206668
O4 - HKLM\..\RunOnce: [Panda_cleaner_206742] C:\WINDOWS\System32\ActiveScan\pavdr.exe 206742
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpyBlocs] C:\Program Files\eBlocs\SpyBlocs\GLF25.exe
O4 - Startup: OpenOffice.org 1.1.0.lnk = C:\Program Files\OpenOffice.org1.1.0\program\crashrep.exe
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activ [...] asinst.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (file missing)
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe (file missing)
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

merci