Problèmer Pop-up

Problème Pop-Up

Voilà le rapport ...


Logfile of HijackThis v1.99.1
Scan saved at 20:35:51, on 24/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchosts.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Firebird\bin\ibguard.exe
C:\Program Files\Firebird\bin\ibserver.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\outlook\outlook.exe
C:\WINDOWS\system32\winlog.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Ipwindows\ipwins.exe
C:\Program Files\webHancer\Programs\whagent.exe
C:\WINDOWS\system32\nfomon\nfomon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\vidmon\vidmon.exe
C:\Program Files\Fichiers communs\{16052D60-07E3-1036-0820-040406220021}\Update.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SteamKeyFr\SteamKeyFr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\SSEMBL~1\winspool.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
C:\WINDOWS\twain_32\A4S2600X\WATCH.exe
C:\Program Files\TextBridge Classic 2.0\Ereg\REMIND32.EXE
C:\DOCUME~1\SABRI\LOCALS~1\Temp\b130.exe
C:\Program Files\InetGet2\apcsetup.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Documents and Settings\SABRI\Bureau\Scanner.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\FICHIE~1\{36052~1\Bar888.dll
O2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dll
O2 - BHO: (no name) - {E73F7B11-CBF8-C455-F1D5-B7DEBFC00A98} - C:\WINDOWS\system32\hnayqdfi.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Sonerie Toolbar - {157B91D9-D643-403b-92FE-FB48DA68D6C4} - C:\PROGRA~1\SONNER~1\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Need2Find Bar - {4D1C4E89-A32A-416B-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\1.bin\ND2FNBAR.DLL
O3 - Toolbar: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\FICHIE~1\{36052~1\Bar888.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Lwinst Run Profiler] .\Lwtest.exe /detect /quiet /launch ".\Lwpevntm.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
O4 - HKLM\..\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto
O4 - HKLM\..\Run: [winlog] winlog.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [BaitDriveBirdSeek] C:\Documents and Settings\All Users\Application Data\insidebinbaitdrive\load up.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - HKLM\..\Run: [webHancer Agent] C:\Program Files\webHancer\Programs\whagent.exe
O4 - HKLM\..\Run: [Nfo] C:\WINDOWS\system32\nfomon\nfomon.exe
O4 - HKLM\..\Run: [vidmon] C:\WINDOWS\system32\vidmon\vidmon.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\RunServices: [winlog] winlog.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [storeowns] C:\DOCUME~1\SABRI\APPLIC~1\DRIVET~1\DogOne.exe
O4 - HKCU\..\Run: [SteamKeyFr] "C:\Program Files\SteamKeyFr\SteamKeyFr.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Valve\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Asrr] "C:\WINDOWS\system32\SSEMBL~1\winspool.exe" -vt yazb
O4 - HKCU\..\Run: [Mjzjkoc] "C:\Documents and Settings\SABRI\Mes documents\?racle\?canregw.exe" 99001396
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Watch.lnk = C:\WINDOWS\twain_32\A4S2600X\WATCH.exe
O4 - Startup: reminder-Enregistrement du produit ScanSoft.lnk = C:\Program Files\TextBridge Classic 2.0\Ereg\REMIND32.EXE
O4 - Global Startup: Photo Express Calendar Checker SE.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?114fa832077142b58d11f9335223fc0d
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?114fa832077142b58d11f9335223fc0d
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by WebHancer
O10 - Hijacked Internet access by WebHancer
O10 - Hijacked Internet access by WebHancer
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe (file missing)
O23 - Service: Client IP-IPX - Unknown owner - C:\WINDOWS\system32\svchosts.exe" -e mc-110-12-0000140 (file missing)
O23 - Service: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Firebird Guardian Service (InterBaseGuardian) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Firebird Server (InterBaseServer) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

Okay, pas de souci

oui je c'est que j'ai besoin d'un anti-virus, mais a se sujet la mon ordi a un souci de se coté la !
il ne veut plus m'installer d'anti-virus je ne c'est pas pourquoi je ne comprend pas :s donc si tu a la réponse a cette question et que tu peut m'aidez je l'installe tout de suite

dsl..je donne le bon truc .....

merde dsl tromper de sujet :s

tu dezippes avec ce logiciel http://prdownloads.sourceforge.net [...] e?download

Bon..lis bien ceci http://www.softastuces.com/tuto/co [...] /index.php

puis
installe ce logiciel http://www.clubic.com/lancer-le-te [...] inrar.html

puis lis ceci:
http://www.softastuces.com/tuto/co [...] ession.php
et fais pareil ..ok?

oui c'est exactement se que j'ai fais

et donc....? qu'est-ce qu'il y a ? où est le problème?

je n'arive pas a aller la ou tu ma dit pour fair " install "

oui c'est se que j'ai fais

exactement

alors voilà le rapport de SDfix :

SDFix: Version 1.68

Run by SABRI - 24/02/2007 @ 21:54:26,09

Microsoft Windows XP [version 5.1.2600]

Running From: C:\Documents and Settings\SABRI\Bureau\SDFix

Safe Mode:
Checking Services:

Name:
Client IP-IPX

Path:
"C:\WINDOWS\system32\svchosts.exe" -e mc-110-12-0000140

Client IP-IPX Deleted

Restoring Windows Registry Entries
Restoring Default Hosts File


Rebooting...

Normal Mode:
Checking Files:

Below files will be copied to Backups folder then removed:

C:\WINDOWS\system32\netstat.com - Deleted
C:\WINDOWS\system32\svchosts.exe - Deleted
C:\WINDOWS\system32\taskkill.com - Deleted
C:\WINDOWS\system32\winlog.exe - Deleted



ADS Check:

C:\WINDOWS\system32
No streams found.


Final Check:

Remaining Services:
------------------


Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\mdb34\\counter-strike\\hl.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\mdb34\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\anakin18\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\anakin18\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\Shareaza\\Shareaza.exe"="C:\\Program Files\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"C:\\Program Files\\BitComet\\BitComet.exe"="C:\\Program Files\\BitComet\\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\\Program Files\\mIRC\\mirc.exe"="C:\\Program Files\\mIRC\\mirc.exe:*:Enabled:mIRC"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\WINDOWS\\AdobeR.exe"="C:\\WINDOWS\\AdobeR.exe:*:Enabled:AdobeR"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Valve\\Steam\\SteamApps\\halflife2powa\\counter-strike source\\hl2.exe"="C:\\Program Files\\Valve\\Steam\\SteamApps\\halflife2powa\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*isabled:LimeWire"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*isabled:LimeWire swarmed installer"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*isabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*isabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*isabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*isabled:Windows Messenger"
"C:\\Program Files\\MessengerDiscovery\\MessengerDiscovery Live.exe"="C:\\Program Files\\MessengerDiscovery\\MessengerDiscovery Live.exe:*:Enabled:MessengerDiscovery Live the Windows Live Messenger addon"
"C:\\Program Files\\MessengerDiscovery\\Loader.exe"="C:\\Program Files\\MessengerDiscovery\\Loader.exe:*:Enabled:Loader"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"


Remaining Files:
---------------

Backups Folder: - C:\DOCUME~1\SABRI\Bureau\SDFix\backups\backups.zip


Checking For Files with Hidden Attributes :

C:\WINDOWS\system32\ping.com
C:\WINDOWS\system32\tracert.com
C:\WINDOWS\system32\tasklist.com
C:\WINDOWS\system32\regedit.com
C:\WINDOWS\system32\cmd.com
C:\Program Files\MSN Messenger\WINHTTP.dll
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP119\A0048206.DLL
C:\WINDOWS\system32\?ssembly\winspool.exe
C:\Documents and Settings\SABRI\Bureau\AdobeR.exe
C:\Program Files\Fichiers communs\Yazzle1396OinAdmin.exe
C:\Program Files\Fichiers communs\Yazzle1396OinUninstaller.exe
C:\Program Files\Fichiers communs\Yazzle1122OinAdmin.exe
C:\Program Files\Fichiers communs\Yazzle1122OinUninstaller.exe
C:\Program Files\outlook\outlook.exe
C:\Program Files\MessengerDiscovery\SpellCHK.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP110\A0043825.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP110\A0043826.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP111\A0045387.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP111\A0045388.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP111\A0045469.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP111\A0045471.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP112\A0045576.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP112\A0045577.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP112\A0045603.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP112\A0045604.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP114\A0046596.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP114\A0046597.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP119\A0048198.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP119\A0048199.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP119\A0048278.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP119\A0048279.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP122\A0053085.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP123\A0056377.exe
C:\System Volume Information\_restore{17095EB8-413E-40E1-BD69-A6414AEEC720}\RP123\A0056378.exe
C:\WINDOWS\Temp\uveaslbt.TMP
C:\WINDOWS\Temp\wzot5ifs.TMP

Add/Remove Programs List:

7-Zip 4.42
ATI - Utilitaire de d‚sinstallation du logiciel
Peer Points Manager
ATI Display Driver
avast! Antivirus
BitComet 0.75
C-Media 3D Audio
eMule
Firebird 1.0.2
HijackThis 1.99.1
Ahead InCD
IpWins
Correctif Windows XP - KB873339
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB888302
Correctif Windows XP - KB890859
Correctif Windows XP - KB891781
LiveUpdate 1.90 (Symantec Corporation)
Messenger Plus! Live & Sponsor
MessengerDiscovery Live 1.1.0155
mIRC
Mozilla Firefox (2.0.0.2)
Messenger Plus! 3 & Sponsor
Mustek 1200 ED Plus v2.0
My Web Search (Smiley Central)
Need2Find Bar
Nero OEM
Ahead NeroVision Express
Ahead NeroMediaPlayer
Outerinfo
Adobe Flash Player 9 ActiveX
SiS 900 PCI Fast Ethernet Adapter Driver
Skype 2.5
Sonnerie Toolbar
StyleXP (remove only)
TeamSpeak 2 RC2
TextBridge Classic 2.0
Ulead Photo Express 2.0 SE
Virtual DJ - Atomix Productions
VideoLAN VLC media player 0.7.2
WebDP 2.07
webHancer Customer Companion
Winamp (remove only)
Windows Live OneCare safety scanner
Windows Live Toolbar
Archiveur WinRAR
Yahoo! Toolbar
Yahoo! Toolbar
OIN
OIN
Microsoft Word 2000
Steam(TM)
ATI Control Panel
Extension MSN pour Windows Live Toolbar
AutoUpdate
Windows Live Sign-in Assistant
Google Toolbar for Internet Explorer
Need for SpeedT Carbon
J2SE Runtime Environment 5.0 Update 3
J2SE Runtime Environment 5.0 Update 11
Kit de Connexion Alice ADSL
ATI HydraVision
iTunes
QuickTime
Sonic Foundry ACID 4.0a
DivX
Zune Desktop Theme
DivX Player
Apple Software Update
SteamKeyFr
D‚tecteur de flux Windows Live Toolbar
Navigation par onglets (Windows Live Toolbar)
Windows Live Toolbar
Counter-Strike(TM)
Windows Live Messenger

Finished

une fois pour toutes! mets le sur ton bureau! ça sera plus utile que d'en avoir 5 ou 6
---> Télécharger HijackThis

->Le mettre dans un dossier dédié
( sur le bureau par exemple, dossier nommé HijackThis)
->Dézipper le dans le dossier
->Clique Droit sur Hijackthis :
-> Choisir " Renommer "
-> Taper Scanner.exe puis valider

-> Lancer l'application
-> Choisir l'option "Do a system scan and save a logfile"
-> Le Bloc-Notes s'ouvre :
-> Edition / Sélectionner Tout
-> Edition / Copier
-> Copier/coller dans le prochain message
AIDE SUR http://www.malekal.com/tutorial_HijackThis.html

ok analyse en cours.....

Okay

Okay Mec

efface ton adresse mais je l'ai c bon efface là..le spam existe !

ok c'est bon je les enlever
euuuhhh pour la clé de lisence ?

ok

une license ne se télécharge pas, elle s'achète!
(ça c'est pour les antivirus payants, pas la peine d'en prendre un payant, prend un grauit)
Télécharge avast (gratuit et performant) ici:
http://www.01net.com/outils/telech [...] 25899.html
Installe-le, je te conseille de faire un scan global après de le mettre à jour.

Ce que tu tiens là c'est vraiment un cas affreux
mywebsearch, need2find, et bcp d'autres

pas vraiment
c'est pas une variante de lop?
PS: sinon j'ai trouvé dans le net que l'éditeur de ce malware propose son outil de désinstallation...

BIgSiLaB tu est la ?