[PLEASE HELP]Voici mon log HiJackThis
Forum Sécurité - Virus : [PLEASE HELP]Voici mon log HiJackThis
Problemes services.exe smss.exe winlogon.exe explorer.exe ..
Voila elle est jolie ma liste non ?
BOn j'arrete de rigoler ... j'ai toujours un de ces messages d'erreurs au démarrage ...
mon ordi qui redemarre tout seul a des moments ...
donc j'ai fait moulte scan avec ad aware / anti virus .... ca m'a enlevé pas mal de choses deja ... mais bon c'était les petits problemes du quotidien ceux la ...
alors voila j'ai parcouru le orum et j'ai vu qu'il serait preférable de joindre un log HiJacKTHis ce que je fai immédiatement
-----------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 20:43:58, on 22/01/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\winnt\System32\smss.exe
C:\winnt\system32\winlogon.exe
C:\winnt\system32\services.exe
C:\winnt\system32\lsass.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\svchost.exe
C:\winnt\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\AMD\Cool'n'Quiet\GemServ.exe
C:\winnt\system32\hidserv.exe
C:\Program Files\AMD\Cool'n'Quiet\gemback.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Network Monitor\netmon.exe
C:\winnt\system32\regsvc.exe
C:\winnt\system32\MSTask.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\winnt\system32\stisvc.exe
C:\winnt\System32\WBEM\WinMgmt.exe
C:\winnt\system32\svchost.exe
C:\winnt\system32\rundll32.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\services.exe
C:\winnt\Explorer.EXE
C:\winnt\system32\qmkehkb.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\winnt\SOUNDMAN.EXE
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe
C:\program files\powerstrip\pstrip.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\Documents and Settings\All Users\Application Data\creativewavemessshim\poke this.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\IDOLEG~1\longmemo.exe
C:\winnt\services.exe
C:\winnt\services.exe
C:\winnt\services.exe
C:\winnt\system32\drwtsn32.exe
C:\winnt\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jrtetjpcqwqagckzvythy.c [...] qm3V0E.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=212.184.18.211:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [¢ª¸ï0/4»}¥ Uw‡ 5_C:\Program Files\ISTsvc\istsvc.exe] C:\WINNT\wborrw.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [TotalRecorderScheduler] "C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe"
O4 - HKLM\..\Run: [BlockChecker] C:\Program Files\Block Checker\block-checker.exe
O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [REV] e:\program files\valve\steam\games\steamapps\supa_krew@hotmail.com\counter-strike\Revolution_Script.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [mess shim 4 scr] C:\Documents and Settings\All Users\Application Data\creativewavemessshim\poke this.exe
O4 - HKLM\..\Run: [dapgdl] C:\WINNT\system32\bdttdk.exe r
O4 - HKLM\..\RunServices: [IE Runtimes] winis.exe
O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /reboot{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /z
O4 - HKCU\..\Run: [MessengerDiscovery] C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
O4 - HKCU\..\Run: [CLOCKMFCD] C:\DOCUME~1\ADMINI~1\APPLIC~1\IDOLEG~1\longmemo.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Hide IP] C:\Program Files\Hide IP\hideip.exe
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Image Transfer.lnk = C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Download with NetPumper - C:\Program Files\NetPumper\AddUrl.htm
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/bina [...] b32846.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{59AB782E-8940-4EEA-85E7-66447922D14B}: NameServer = 194.117.200.15
O20 - Winlogon Notify: Explorer - C:\WINNT\system32\swmpsnap.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\winnt\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINNT\bWlsdTBuZQ\command.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\winnt\System32\dmadmin.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: AMD PowerNow! (tm) Technology Service (GemServ) - Advanced Micro Devices - C:\Program Files\AMD\Cool'n'Quiet\GemServ.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: Trend Micro Personal Firewall (PccPfw) - Unknown owner - C:\Program Files\Trend Micro\Internet Security\PccPfw.exe (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINNT\svcproc.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Unknown owner - C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe (file missing)
O23 - Service: Trend Micro Proxy Service (tmproxy) - Unknown owner - C:\Program Files\Trend Micro\Internet Security\tmproxy.exe (file missing)
-----------------------------------------------------------
hummm ... je previens ke niveau virus et tout ca je ne suis pas tres expérimenté.
La possibilité de formatage est a éviter jai mon jury artistique Mercredi et tous mes taffs sont sur le PC !!!
Mais la vu comment mon pc rame .... je peux quasi plus rien faire !!
Et le Ad-watch Event Log tourne et en stop facil 2 a la seconde !! 
une malédiction s'est abbatue sur moi ???
voili voilou ... merci pour vos conseils
bonen soirée.
hey salut a toi 
je suis dsl du tps de ma reponses mais j'ai preféré foutre toutes mes donnée sur mon DD externe et aller travailler chez ma copine pr mes jurys parce que javais peur ke mon pc parte trop en sucette ...
donc la je viens de rentrer .. et g vu ta réponse donc voila jai fait tout ce que tu m'a dis de faire ..
et ya services.exe dans les processus ki utilise 99% charge CPU je suis obligé de le mettre en priorité basse sinon mon ordi ne lance plus aucune tache !! et les pages internet ne saffiche meme plus ...
bref apres avoir effectué l2mfix
voici les fichier text ke tu ma demandé :
-alors celui ci c report.txt
L2MFIX find log 010406
These are the registry keys present
**********************************************************************************
Winlogon/notify:
**********************************************************************************
useragent:
**********************************************************************************
Shell Extension key:
**********************************************************************************
HKEY ROOT CLASSIDS:
**********************************************************************************
Files Found are not all bad files:
C:\WINNT\SYSTEM32\
ati2cqag.dll Sat 29 Oct 2005 3:16:02 A.... 237.568 232,00 K
ati2dvag.dll Sat 29 Oct 2005 4:12:48 A.... 247.296 241,50 K
ati2edxx.dll Sat 29 Oct 2005 4:07:36 A.... 40.960 40,00 K
ati2evxx.dll Sat 29 Oct 2005 4:07:28 A.... 47.616 46,50 K
ati3duag.dll Sat 29 Oct 2005 3:58:48 A.... 2.491.808 2,38 M
atiddc.dll Sat 29 Oct 2005 4:06:00 A.... 53.248 52,00 K
atidemgr.dll Sat 29 Oct 2005 6:13:40 A.... 258.048 252,00 K
atiiiexx.dll Sat 29 Oct 2005 6:52:18 A.... 307.200 300,00 K
atikvmag.dll Sat 29 Oct 2005 3:40:32 A.... 151.552 148,00 K
atioglx1.dll Sat 29 Oct 2005 5:32:26 A.... 6.684.672 6,38 M
atioglxx.dll Sat 29 Oct 2005 4:27:22 A.... 4.866.048 4,64 M
atipdlxx.dll Sat 29 Oct 2005 4:08:00 A.... 110.592 108,00 K
atitvo32.dll Sat 29 Oct 2005 3:21:16 A.... 17.408 17,00 K
ativvaxx.dll Sat 29 Oct 2005 3:52:58 A.... 603.040 588,91 K
bassmod.dll Sun 20 Nov 2005 12:21:12 A.... 14.848 14,50 K
cmdlin~2.dll Wed 30 Nov 2005 11:55:46 A.... 43.520 42,50 K
enl0l1~1.dll Thu 26 Jan 2006 21:06:08 ..S.R 234.272 228,78 K
i2600c~1.dll Thu 26 Jan 2006 1:56:44 ..S.R 234.817 229,31 K
jt8607~1.dll Sun 22 Jan 2006 20:41:40 ..S.R 234.959 229,45 K
kpdla.dll Thu 26 Jan 2006 13:44:08 ..S.R 234.272 228,78 K
oemdspif.dll Sat 29 Oct 2005 4:07:50 A.... 77.824 76,00 K
openal32.dll Mon 14 Nov 2005 23:38:30 A.... 86.016 84,00 K
p0p6la~1.dll Sun 22 Jan 2006 18:36:38 ..S.R 235.942 230,41 K
pncrt.dll Sat 19 Nov 2005 14:22:10 A.... 278.528 272,00 K
pndx5016.dll Sat 19 Nov 2005 14:22:10 A.... 6.656 6,50 K
pndx5032.dll Sat 19 Nov 2005 14:22:10 A.... 5.632 5,50 K
qvut.dll Tue 24 Jan 2006 12:19:24 ..S.R 234.817 229,31 K
rmoc3260.dll Sat 19 Nov 2005 14:22:12 A.... 176.167 172,04 K
uodmxfrm.dll Thu 26 Jan 2006 21:07:14 ..S.R 234.817 229,31 K
vft32.dll Sun 22 Jan 2006 18:18:32 A.... 5.120 5,00 K
wrap_oal.dll Mon 14 Nov 2005 23:38:30 A.... 262.144 256,00 K
x264vfw.dll Sun 4 Dec 2005 19:33:50 A.... 370.176 361,50 K
32 items found: 32 files (7 H/S), 0 directories.
Total of file sizes: 19.087.583 bytes 18,20 M
Locate .tmp files:
No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C s'appelle stem6
Le num‚ro de s‚rie du volume est 98DE-CDD4
R‚pertoire de C:\winnt\System32
26/01/2006 21:07 234.817 uodmxfrm.dll
26/01/2006 21:06 234.272 enl0l13m1.dll
26/01/2006 13:44 234.272 kpdla.dll
26/01/2006 01:56 234.817 i2600cjmefoa0.dll
24/01/2006 12:19 234.817 qvut.dll
22/01/2006 20:41 234.959 jt8607lse.dll
22/01/2006 18:36 235.942 p0p6la7s1d.dll
04/12/2005 22:39 10.856 KGyGaAvL.sys
29/11/2005 18:39 <DIR> dllcache
19/10/2005 09:43 8 DD31937765.sys
25/12/2004 01:27 56 7D649BC6B3.sys
10 fichier(s) 1.654.816 octets
1 R‚p(s) 3.528.134.656 octets libres
celui ci log.txt
L2mfix 010406
Creating Account.
La commande s'est termin‚e correctement.
Adding Administrative privleges.
Checking for L2MFix account(0=no 1=yes):
1
Granting SeDebugPrivilege to L2MFIX ... successful
Running From:
C:\winnt\system32
Killing Processes!
Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 244 'smss.exe'
Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 296 'winlogon.exe'
Killing PID 296 'winlogon.exe'
Error 0x5 : Accès refusé.
Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 1428 'explorer.exe'
Killing PID 1428 'explorer.exe'
Error 0x5 : Accès refusé.
Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 1236 'rundll32.exe'
Killing PID 1236 'rundll32.exe'
Error 0x5 : Accès refusé.
Restoring Sedebugprivilege:
Granting SeDebugPrivilege to Administrateurs ... successful
Scanning First Pass. Please Wait!
First Pass Completed
Second Pass Scanning
Second pass Completed!
1 fichier(s) copi‚(s).
1 fichier(s) copi‚(s).
1 fichier(s) copi‚(s).
1 fichier(s) copi‚(s).
1 fichier(s) copi‚(s).
Deleting: C:\winnt\system32\jt8607lse.dll
Successfully Deleted: C:\winnt\system32\jt8607lse.dll
Deleting: C:\winnt\system32\kpdla.dll
Successfully Deleted: C:\winnt\system32\kpdla.dll
Deleting: C:\winnt\system32\p0p6la7s1d.dll
Successfully Deleted: C:\winnt\system32\p0p6la7s1d.dll
Deleting: C:\winnt\system32\qvut.dll
Successfully Deleted: C:\winnt\system32\qvut.dll
Deleting: C:\winnt\system32\uodmxfrm.dll
Successfully Deleted: C:\winnt\system32\uodmxfrm.dll
msg11?.dll
0 fichier(s) copi‚(s).
Restoring Windows Update Certificates.:
The following Is the Current Export of the Winlogon notify key:
****************************************************************************
The following are the files found:
****************************************************************************
C:\winnt\system32\jt8607lse.dll
C:\winnt\system32\kpdla.dll
C:\winnt\system32\p0p6la7s1d.dll
C:\winnt\system32\qvut.dll
C:\winnt\system32\uodmxfrm.dll
Registry Entries that were Deleted:
Please verify that the listing looks ok.
If there was something deleted wrongly there are backups in the backreg folder.
****************************************************************************
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
REGEDIT4
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
****************************************************************************
Desktop.ini Contents:
****************************************************************************
****************************************************************************
Checking for L2MFix account(0=no 1=yes):
0
Zipping up files for submission:
adding: dlls/jt8607lse.dll (152 bytes security) (deflated 5%)
adding: dlls/kpdla.dll (152 bytes security) (deflated 4%)
adding: dlls/p0p6la7s1d.dll (152 bytes security) (deflated 5%)
adding: dlls/qvut.dll (152 bytes security) (deflated 5%)
adding: dlls/uodmxfrm.dll (152 bytes security) (deflated 5%)
zip warning: name not matched: backregs\*.reg
zip error: Nothing to do! (backup.zip)
et voici mon log HighJackThis
Logfile of HijackThis v1.99.1
Scan saved at 0:09:36, on 27/01/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\winnt\System32\smss.exe
C:\winnt\system32\winlogon.exe
C:\winnt\system32\services.exe
C:\winnt\system32\lsass.exe
C:\winnt\system32\Ati2evxx.exe
C:\winnt\system32\svchost.exe
C:\winnt\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\AMD\Cool'n'Quiet\GemServ.exe
C:\Program Files\AMD\Cool'n'Quiet\gemback.exe
C:\winnt\system32\hidserv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Network Monitor\netmon.exe
C:\winnt\system32\regsvc.exe
C:\winnt\system32\MSTask.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\winnt\system32\stisvc.exe
C:\winnt\System32\WBEM\WinMgmt.exe
C:\winnt\system32\svchost.exe
C:\winnt\system32\rundll32.exe
C:\winnt\services.exe
C:\winnt\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe
C:\program files\powerstrip\pstrip.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\winnt\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Documents and Settings\All Users\Application Data\creativewavemessshim\poke this.exe
C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
C:\DOCUME~1\ADMINI~1\APPLIC~1\IDOLEG~1\longmemo.exe
C:\winnt\system32\ctfmon.exe
C:\winnt\services.exe
C:\winnt\services.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jrtetjpcqwqagckzvythy.c [...] qm3V0E.htm
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TotalRecorderScheduler] "C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe"
O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"
O4 - HKLM\..\Run: [REV] e:\program files\valve\steam\games\steamapps\supa_krew@hotmail.com\counter-strike\Revolution_Script.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [dapgdl] C:\WINNT\system32\bdttdk.exe r
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [¢ª¸ï0/4»}¥ Uw‡ 5_C:\Program Files\ISTsvc\istsvc.exe] C:\WINNT\wborrw.exe
O4 - HKLM\..\Run: [BlockChecker] C:\Program Files\Block Checker\block-checker.exe
O4 - HKLM\..\Run: [mess shim 4 scr] C:\Documents and Settings\All Users\Application Data\creativewavemessshim\poke this.exe
O4 - HKLM\..\RunServices: [IE Runtimes] winis.exe
O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /reboot{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /z
O4 - HKCU\..\Run: [MessengerDiscovery] C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
O4 - HKCU\..\Run: [CLOCKMFCD] C:\DOCUME~1\ADMINI~1\APPLIC~1\IDOLEG~1\longmemo.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Hide IP] C:\Program Files\Hide IP\hideip.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Image Transfer.lnk = C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{59AB782E-8940-4EEA-85E7-66447922D14B}: NameServer = 194.117.200.15
O20 - Winlogon Notify: Internet Settings - C:\WINNT\system32\kt86l7ls1.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\winnt\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINNT\bWlsdTBuZQ\command.exe (file missing)
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\winnt\System32\dmadmin.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: AMD PowerNow! (tm) Technology Service (GemServ) - Advanced Micro Devices - C:\Program Files\AMD\Cool'n'Quiet\GemServ.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: Trend Micro Personal Firewall (PccPfw) - Unknown owner - C:\Program Files\Trend Micro\Internet Security\PccPfw.exe (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINNT\svcproc.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Unknown owner - C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe (file missing)
O23 - Service: Trend Micro Proxy Service (tmproxy) - Unknown owner - C:\Program Files\Trend Micro\Internet Security\tmproxy.exe (file missing)
..... bon je vois que c'est pas fini meme que la situation s'est empirée 
en espérant recevoir une reponse
je vous di un grand merci en tout cas car sans un forum comme le votre je serai completement pommé ...
a tout a lheure
hihi 
et en effet ya lm2fix qui m'a dit que j'étai infecté et ma renvoyé a la ligne 020 egalement ...
le pb c que je ne peux eliminer ce probleme mon pc ne démarre pas en mode sans echec
hummm ... je vien de telecharer l'uninstaller.exe mais ils me demande de rentrer my uninstall Key ...
ett je nai vu aucune trace de cette clé lol ???
edit je suis bete c bon je l'ai je rdemarre jespere que ca fonctionne ! 
SVP qqun pourrait m'aider ?
je suis sur qu'au plus j'attends au moins c bon pour mon pc ^^ nan ?
