Re...Encore...des pubs intempestives!!!(resolu)...merci les helpers!!

qulqu'un peut me répondre??? le pc travaille au ralenti...c gavant

Rapport clean

Clean Navipromo version 2.0.1 commencé le 12/05/2007 à 11:03:33,98

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 10.05.2007 a 22h00 by IL-MAFIOSO

Mode suppression automatique avec prise en charge résultats Blacklight


*** Creation backups fichiers trouvés par Blacklight ***

Copie vers "C:\Program Files\navilog1\Backupnavi"


*** Suppression des fichiers trouvés avec Blacklight ***

c:\WINDOWS\system32\nwzwrama.dat supprimé !
C:\windows\system32\nwzwrama.exe supprimé !
c:\WINDOWS\system32\nwzwrama_nav.dat supprimé !
c:\WINDOWS\system32\nwzwrama_navps.dat supprimé !

** 2ème passage **

C:\WINDOWS\system32\nwzwrama.dat absent !
C:\WINDOWS\system32\nwzwrama_nav.dat absent !
C:\WINDOWS\system32\nwzwrama_navps.dat absent !
C:\WINDOWS\system32\nwzwrama_navup.dat absent !
C:\WINDOWS\system32\nwzwrama_navtmp.dat absent !
C:\WINDOWS\system32\nwzwrama_m2s.xml absent !


C:\WINDOWS\prefetch\nwzwrama*.pf trouvé !
Copie C:\WINDOWS\prefetch\nwzwrama*.pf realise avec succes !
C:\WINDOWS\prefetch\nwzwrama*.pf supprimé !

C:\WINDOWS\system32\nwzwrama.exe trouvé !
Copie C:\WINDOWS\system32\nwzwrama.exe realise avec succes !
C:\WINDOWS\system32\nwzwrama.exe erreur suppression

*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\elisa\Application Data ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\elisa\Local Settings\Temp effectué !


*** Sauvegarde du registre vers dossier Backupnavi***


sauvegarde du registre realise avec succes !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

*
**
***
****
*****
******
*******
********
C:\WINDOWS\System32\nwzwrama.exe trouvé !
Echec Copie C:\WINDOWS\system32\nwzwrama.exe vers dossier Backupnavi
C:\WINDOWS\system32\nwzwrama.exe non supprimé !
C:\WINDOWS\system32\nwzwrama.exe supprimé !


*** Nettoyage termine le 12/05/2007 à 11:04:20,71 ***

je fais quoi maintenant????...merci de me répondre...

Merci bob_ de venir à mon aide
je fais assez attention ou je vais sur le net...ma fille un peu moins hélas...je n'arrive pas à installer clean...enfin il se télécharge mais pas de zip après

Re,

Normalement tu as plus de pubs !

• Fais un scan en ligne Kaspersky avec Internet Explorer :
• Clique sur
• Clique maintenant sur J'accepte.
• Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire.
• Patiente pendant l'installation des Mises à jour.
• Choisis par la suite l'analyse du Poste de travail
• Sauvegarde puis colle le rapport généré en fin d'analyse.

AIDE : Configurer le contrôle des ActiveX

NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne.

ben les pubs sont pas parties...toujours là...et pas cool quand on a des enfants...je sais plus quoi faire maintenant...au secourssssssss!!!

rapport hijackthis...

Logfile of HijackThis v1.99.1
Scan saved at 19:20:38, on 13/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\EasyShare\C2SLoad.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Money\System\mnyexpr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Diagonal\Commun\Integrateur\Intégrateur Diagonal.exe
C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\DOCUME~1\elisa\LOCALS~1\Temp\bwgo00015629.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Click2Share] C:\Program Files\EasyShare\C2SLoad.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Global Startup: Intégrateur Diagonal 32 bits.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://mikado79.spaces.live.com//P [...] nPUpld.cab
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.servicesalacar [...] player.cab
O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxenligne.orange.fr/orang [...] Popcap.cab
O18 - Protocol: bw+0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Documents and Settings\elisa\Bureau\AVG Anti-Spyware 7.5\guard.exe (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

ok merci je le fais de suite...

Redémarre en mode sans échec

Ouvre le dossier clean, double-clique sur clean.cmd.
Choisis l'option 2 puis patiente.

Redémarre normalement.

Poste le rapport clean : C:\rapport_clean.txt

&

• Fais un scan en ligne Kaspersky avec Internet Explorer :
• Clique sur
• Clique maintenant sur J'accepte.
• Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire.
• Patiente pendant l'installation des Mises à jour.
• Choisis par la suite l'analyse du Poste de travail
• Sauvegarde puis colle le rapport généré en fin d'analyse.

AIDE : Tuto sur le scan en ligne

NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne.

Rapport clean...j'ai vachement ramé...mais bon..C'est fait..par contre à peine sur le net...des pubs pour enlever virus et pubs hard....sniffffffffff...je vais sur kaspersky

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 13/05/2007 a 20:02:42,64

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !

dernier rapport hijackthis...je ne sais plus quoi faire...pubs encore présentes comme www.spyware-secure.com et d'autres des assez hard...marre de chez marre...!!!


Logfile of HijackThis v1.99.1
Scan saved at 22:42:44, on 13/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\EasyShare\C2SLoad.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Money\System\mnyexpr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Diagonal\Commun\Integrateur\Intégrateur Diagonal.exe
C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\DOCUME~1\elisa\LOCALS~1\Temp\bwgo0000d0ec.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [Click2Share] C:\Program Files\EasyShare\C2SLoad.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Global Startup: Intégrateur Diagonal 32 bits.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://mikado79.spaces.live.com//P [...] nPUpld.cab
O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.servicesalacar [...] player.cab
O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} - http://jeuxenligne.orange.fr/orang [...] Popcap.cab
O18 - Protocol: bw+0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {3CDB9AC0-F1EF-4C6E-8984-BB199E2704B6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Documents and Settings\elisa\Bureau\AVG Anti-Spyware 7.5\guard.exe (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

Boonjour bob_ je fais ça de suite...merci

apparemment c'est quand j'exécute MSNFix qu'avast m'avertit qu'il y a un virus...!!!!

c'est bon...je te colle le rapport...toujours la pub présente...ce truc d'anti spyware et pub hard aussi...

MSN_Fix 1.28

C:\Documents and Settings\elisa\Bureau\MSNFix
Fix exécuté le 14/05/2007 - 9:23:17,28 By elisa
mode normal

************************ Recherche les fichiers présents

Aucun Fichier trouvé

************************ Recherche les dossiers présents

Aucun dossier trouvé



************************ Fichiers suspects

/!\ ces fichiers ne sont pas obligatoirement infectieux et nécessitent un avis expérimenté avant toute intervention


[C:\WINDOWS\system32\AvastSS.scr] CD183096AFEA64927C611C6F7824E9F8
[C:\WINDOWS\system32\BounceIt2.scr] E0EC3B8A2F50E28CC71DA8786520A489
[C:\WINDOWS\system32\logon.scr] 68EC87323395CCEBE12E0196F3517A57
[C:\WINDOWS\system32\PopTheBubbles2.scr] 98E874948EC09930F58C41948635E536
[C:\WINDOWS\system32\ss3dfo.scr] 44CA0873B98747BAD59140F41756BB68
[C:\WINDOWS\system32\ssbezier.scr] B57D06D63C2BAB88EF4883AEC268D66F
[C:\WINDOWS\system32\ssflwbox.scr] 06830305F553AB4922E68D392854A1F9
[C:\WINDOWS\system32\ssmarque.scr] 99F7FE08CA0FFED79182FAF292349176
[C:\WINDOWS\system32\ssmypics.scr] D074FE5ADDE2BE9A0572CDFC33418836
[C:\WINDOWS\system32\ssmyst.scr] 64364F16B2408B89C044E3B8D7E763A5
[C:\WINDOWS\system32\sspipes.scr] F997BF54EA77E5F0775BB11F70F9EB3F
[C:\WINDOWS\system32\ssstars.scr] F0832ACCCB6238C378ED5356CF7F768F
[C:\WINDOWS\system32\sstext3d.scr] 20C28E1E6DE413C559DF3221F35CCC9A



------------------------------------------------------------------------
Auteur : !aur3n7 Contact: http://246694.aceboard.fr
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

Sauvegardez ce rapport puis faites un copier/coller de ce rapport sur le forum..

Re,

Supprime ce fichier :

C:\Documents and Settings\marie\Bureau\MON ALBUM MARIE\photo album.zip

&

- Assure toi d'avoir accès aux dossiers/fichiers cachés
-> Démarrer
-> Panneau de configuration
-> Options des Dossiers, onglet Affichage :
. Clique sur Afficher les dossiers cachés
. Décoche Masquer les extensions des fichiers dont le type est connu
. Décoche Masquer les fichiers protégés du système d'exploitation

Va sur le site de VirusTotal
Clique sur Parcourir... puis ouvre:

C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe

Si tu vois ce message:
" Your file " ***.*** " is queued in position: ***. Estimated start time is between *** and *** minutes. "
Il faudra patienter un moment.

Clique ensuite sur Send. Poste le rapport en fin d'analyse.

re pubs...cette fois l'une d'elle s'appelle errorsafe...y a aussi spywaresecure...etc...plus les pubs hard...

nouveauté...mon ordi s'éteint et redemarre tout seul...ça plus les pubs qui continuent...il va partir par la fenetre celui là...

désolée de m'énerver...mais ça prend la tete ces trucs...bon je te colle le rapport gmer...merci de me dire ce que je dois faire après...


GMER 1.0.12.12244 - http://www.gmer.net
Rootkit scan 2007-05-14 13:22:57
Windows 5.1.2600 Service Pack 2


---- Kernel code sections - GMER 1.0.12 ----

? C:\WINDOWS\system32\DRIVERS\update.sys

---- User code sections - GMER 1.0.12 ----

.text C:\PROGRA~1\Wanadoo\TaskBarIcon.exe[212] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 0151200E
.text C:\PROGRA~1\Wanadoo\TaskBarIcon.exe[212] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01511DAF
.text C:\PROGRA~1\Wanadoo\TaskBarIcon.exe[212] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01511CF2
.text C:\PROGRA~1\Wanadoo\TaskBarIcon.exe[212] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 0151191B
.text C:\Documents and Settings\elisa\Bureau\gmer.exe[400] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00E2200E
.text C:\Documents and Settings\elisa\Bureau\gmer.exe[400] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00E21DAF
.text C:\Documents and Settings\elisa\Bureau\gmer.exe[400] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00E21CF2
.text C:\Documents and Settings\elisa\Bureau\gmer.exe[400] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00E2191B
.text C:\WINDOWS\system32\csrss.exe[468] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\csrss.exe[468] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\csrss.exe[468] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\csrss.exe[468] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\WINDOWS\system32\services.exe[540] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\services.exe[540] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\services.exe[540] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\services.exe[540] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\WINDOWS\system32\rundll32.exe[648] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00B5200E
.text C:\WINDOWS\system32\rundll32.exe[648] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00B51DAF
.text C:\WINDOWS\system32\rundll32.exe[648] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00B51CF2
.text C:\WINDOWS\system32\rundll32.exe[648] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00B5191B
.text C:\WINDOWS\system32\ati2evxx.exe[696] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\ati2evxx.exe[696] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\ati2evxx.exe[696] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\ati2evxx.exe[696] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\DOCUME~1\elisa\LOCALS~1\Temp\bwgo0000ce3c.exe[828] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00AC200E
.text C:\DOCUME~1\elisa\LOCALS~1\Temp\bwgo0000ce3c.exe[828] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00AC1DAF
.text C:\DOCUME~1\elisa\LOCALS~1\Temp\bwgo0000ce3c.exe[828] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00AC1CF2
.text C:\DOCUME~1\elisa\LOCALS~1\Temp\bwgo0000ce3c.exe[828] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00AC191B
.text C:\WINDOWS\system32\svchost.exe[848] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\svchost.exe[848] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\svchost.exe[848] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\svchost.exe[848] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\WINDOWS\system32\svchost.exe[884] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\svchost.exe[884] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\svchost.exe[884] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\svchost.exe[884] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[984] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 0094200E
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[984] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00941DAF
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[984] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00941CF2
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[984] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 0094191B
.text C:\Program Files\MSN Messenger\usnsvc.exe[1048] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\Program Files\MSN Messenger\usnsvc.exe[1048] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\Program Files\MSN Messenger\usnsvc.exe[1048] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\Program Files\MSN Messenger\usnsvc.exe[1048] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\WINDOWS\system32\ati2evxx.exe[1052] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00B3200E
.text C:\WINDOWS\system32\ati2evxx.exe[1052] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00B31DAF
.text C:\WINDOWS\system32\ati2evxx.exe[1052] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00B31CF2
.text C:\WINDOWS\system32\ati2evxx.exe[1052] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00B3191B
.text C:\WINDOWS\system32\nwzwrama.exe[1096] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 01DC200E
.text C:\WINDOWS\system32\nwzwrama.exe[1096] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01DC1DAF
.text C:\WINDOWS\system32\nwzwrama.exe[1096] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01DC1CF2
.text C:\WINDOWS\system32\nwzwrama.exe[1096] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 01DC191B
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1116] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 01CE200E
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1116] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01CE1DAF
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1116] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01CE1CF2
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1116] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 01CE191B
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1116] kernel32.dll!SetUnhandledExceptionFilter 7C84479D 5 Bytes JMP 004DE392 C:\Program Files\MSN Messenger\MsnMsgr.Exe
.text C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1160] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1160] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1160] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1160] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\Program Files\Alwil Software\Avast4\ashServ.exe[1208] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 024B200E
.text C:\Program Files\Alwil Software\Avast4\ashServ.exe[1208] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 024B1DAF
.text C:\Program Files\Alwil Software\Avast4\ashServ.exe[1208] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 024B1CF2
.text C:\Program Files\Alwil Software\Avast4\ashServ.exe[1208] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 024B191B
.text C:\WINDOWS\system32\spoolsv.exe[1376] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\WINDOWS\system32\spoolsv.exe[1376] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\WINDOWS\system32\spoolsv.exe[1376] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\WINDOWS\system32\spoolsv.exe[1376] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\WINDOWS\system32\csrss.exe[1408] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00ED200E
.text C:\WINDOWS\system32\csrss.exe[1408] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00ED1DAF
.text C:\WINDOWS\system32\csrss.exe[1408] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00ED1CF2
.text C:\WINDOWS\system32\csrss.exe[1408] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00ED191B
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1456] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00DD200E
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1456] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00DD1DAF
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1456] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00DD1CF2
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1456] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00DD191B
.text C:\Program Files\Microsoft Money\System\mis.exe[1500] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00ED200E
.text C:\Program Files\Microsoft Money\System\mis.exe[1500] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00ED1DAF
.text C:\Program Files\Microsoft Money\System\mis.exe[1500] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00ED1CF2
.text C:\Program Files\Microsoft Money\System\mis.exe[1500] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00ED191B
.text C:\WINDOWS\system32\ati2evxx.exe[1588] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00E4200E
.text C:\WINDOWS\system32\ati2evxx.exe[1588] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00E41DAF
.text C:\WINDOWS\system32\ati2evxx.exe[1588] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00E41CF2
.text C:\WINDOWS\system32\ati2evxx.exe[1588] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00E4191B
.text C:\WINDOWS\explorer.exe[1648] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00C5200E
.text C:\WINDOWS\explorer.exe[1648] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00C51DAF
.text C:\WINDOWS\explorer.exe[1648] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00C51CF2
.text C:\WINDOWS\explorer.exe[1648] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00C5191B
.text C:\Program Files\EasyShare\C2SLoad.exe[1784] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 0119200E
.text C:\Program Files\EasyShare\C2SLoad.exe[1784] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01191DAF
.text C:\Program Files\EasyShare\C2SLoad.exe[1784] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01191CF2
.text C:\Program Files\EasyShare\C2SLoad.exe[1784] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 0119191B
.text C:\WINDOWS\system32\rundll32.exe[1792] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00CF200E
.text C:\WINDOWS\system32\rundll32.exe[1792] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00CF1DAF
.text C:\WINDOWS\system32\rundll32.exe[1792] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00CF1CF2
.text C:\WINDOWS\system32\rundll32.exe[1792] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00CF191B
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1808] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00B5200E
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1808] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00B51DAF
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1808] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00B51CF2
.text C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe[1808] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00B5191B
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[1816] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 1000200E
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[1816] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 10001DAF
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[1816] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 10001CF2
.text C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe[1816] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 1000191B
.text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[1824] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00F0200E
.text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[1824] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00F01DAF
.text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[1824] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00F01CF2
.text C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe[1824] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00F0191B
.text C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVComS.exe[1832] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00EE200E
.text C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVComS.exe[1832] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00EE1DAF
.text C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVComS.exe[1832] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00EE1CF2
.text C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVComS.exe[1832] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00EE191B
.text C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe[1840] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00AA200E
.text C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe[1840] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00AA1DAF
.text C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe[1840] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00AA1CF2
.text C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe[1840] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00AA191B
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S4I0S2.EXE[1856] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00F2200E
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S4I0S2.EXE[1856] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00F21DAF
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S4I0S2.EXE[1856] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00F21CF2
.text C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S4I0S2.EXE[1856] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00F2191B
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1864] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 0138200E
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1864] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01381DAF
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1864] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01381CF2
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1864] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 0138191B
.text C:\WINDOWS\system32\nwzwrama.exe[1872] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 01D9200E
.text C:\WINDOWS\system32\nwzwrama.exe[1872] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01D91DAF
.text C:\WINDOWS\system32\nwzwrama.exe[1872] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01D91CF2
.text C:\WINDOWS\system32\nwzwrama.exe[1872] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 01D9191B
.text C:\WINDOWS\system32\ctfmon.exe[1888] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00BA200E
.text C:\WINDOWS\system32\ctfmon.exe[1888] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00BA1DAF
.text C:\WINDOWS\system32\ctfmon.exe[1888] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00BA1CF2
.text C:\WINDOWS\system32\ctfmon.exe[1888] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00BA191B
.text C:\Program Files\Microsoft Money\System\mnyexpr.exe[1896] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00DF200E
.text C:\Program Files\Microsoft Money\System\mnyexpr.exe[1896] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00DF1DAF
.text C:\Program Files\Microsoft Money\System\mnyexpr.exe[1896] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00DF1CF2
.text C:\Program Files\Microsoft Money\System\mnyexpr.exe[1896] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00DF191B
.text C:\Program Files\Messenger\msmsgs.exe[1912] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00F3200E
.text C:\Program Files\Messenger\msmsgs.exe[1912] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00F31DAF
.text C:\Program Files\Messenger\msmsgs.exe[1912] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00F31CF2
.text C:\Program Files\Messenger\msmsgs.exe[1912] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00F3191B
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1920] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 01CB200E
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1920] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01CB1DAF
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1920] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01CB1CF2
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1920] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 01CB191B
.text C:\Program Files\MSN Messenger\msnmsgr.exe[1920] kernel32.dll!SetUnhandledExceptionFilter 7C84479D 5 Bytes JMP 004DE392 C:\Program Files\MSN Messenger\msnmsgr.exe
.text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[1928] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 0156200E
.text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[1928] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 01561DAF
.text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[1928] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 01561CF2
.text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[1928] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 0156191B
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1936] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00EA200E
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1936] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00EA1DAF
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1936] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00EA1CF2
.text C:\Program Files\Alwil Software\Avast4\ashDisp.exe[1936] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00EA191B
.text C:\Program Files\Diagonal\Commun\Integrateur\Intégrateur Diagonal.exe[1940] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00B9200E
.text C:\Program Files\Diagonal\Commun\Integrateur\Intégrateur Diagonal.exe[1940] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00B91DAF
.text C:\Program Files\Diagonal\Commun\Integrateur\Intégrateur Diagonal.exe[1940] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00B91CF2
.text C:\Program Files\Diagonal\Commun\Integrateur\Intégrateur Diagonal.exe[1940] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00B9191B
.text C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe[1956] ntdll.dll!NtEnumerateKey 7C91D94C 5 Bytes JMP 00B8200E
.text C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe[1956] ntdll.dll!NtEnumerateValueKey 7C91D976 5 Bytes JMP 00B81DAF
.text C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe[1956] ntdll.dll!NtQueryDirectoryFile 7C91DF5E 5 Bytes JMP 00B81CF2
.text C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe[1956] ntdll.dll!NtQuerySystemInformation 7C91E1AA 5 Bytes JMP 00B8191B
.text C:\WINDOWS\system32\drivers\CDAC11BA.EXE[2312] ntdll.dll!NtEnumerateKey

ok...les pubs toujours là en tous cas...pffffffffffff snifffffffff

Tu as des pubs sur tous les sites ?

Tu pêux refaire un scan navilog option 1 ?

angeldark...le lien navilog ne fonctionne pas...ça me met page introuvable...grrrrrrrrrrrrr...

c bon...voilà le rapport merci...et après je refais hijackthis ou autre chose???...


Clean Navipromo version 2.0.1 commencé le 12/05/2007 à 15:55:41,45

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 10.05.2007 a 22h00 by IL-MAFIOSO

Mode suppression automatique avec prise en charge résultats Blacklight



*** fsbl1.txt non trouvé ***
(Assurez-vous que Blacklight n'avait rien trouvé lors de la recherche)


*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\marie\Application Data ***

...\Application Data\MessengerSkinner ...suppression...
...\Application Data\MessengerSkinner supprimé !



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\marie\Local Settings\Temp effectué !


*** Sauvegarde du registre vers dossier Backupnavi***


sauvegarde du registre realise avec succes !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

*
C:\WINDOWS\System32\nwzwrama.dat trouvé !
Copie C:\WINDOWS\system32\nwzwrama.dat realise avec succes !
C:\WINDOWS\system32\nwzwrama.dat supprimé !

**
***
****
C:\WINDOWS\System32\nwzwrama_navps.dat trouvé !
Copie C:\WINDOWS\system32\nwzwrama_navps.dat realise avec succes !
C:\WINDOWS\system32\nwzwrama_navps.dat supprimé !

*****
******

*** fsbl1.txt non trouvé ***
(Assurez-vous que Blacklight n'avait rien trouvé lors de la recherche)


*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\elisa\Application Data ***



*** Suppression fichiers ***

C:\WINDOWS\system32\nvs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\elisa\Local Settings\Temp effectué !


*** Sauvegarde du registre vers dossier Backupnavi***


sauvegarde du registre realise avec succes !


*** Nettoyage registre ***


*** Erreur : Fichier regnavi1.reg non trouve ***
Le registre n'a pas été nettoyé !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

*
C:\WINDOWS\System32\nwzwrama.dat trouvé !
Echec Copie C:\WINDOWS\system32\nwzwrama.dat vers dossier Backupnavi
C:\WINDOWS\system32\nwzwrama.dat non supprimé !
C:\WINDOWS\system32\nwzwrama.dat supprimé !

**
C:\WINDOWS\System32\nwzwrama.dat trouvé !
Echec Copie C:\WINDOWS\system32\nwzwrama.dat vers dossier Backupnavi
C:\WINDOWS\system32\nwzwrama.dat non supprimé !
C:\WINDOWS\system32\nwzwrama.dat supprimé !

***
****
C:\WINDOWS\System32\nwzwrama_navps.dat trouvé !
Echec Copie C:\WINDOWS\system32\nwzwrama_navps.dat vers dossier Backupnavi
C:\WINDOWS\system32\nwzwrama_navps.dat non supprimé !
C:\WINDOWS\system32\nwzwrama_navps.dat supprimé !

*****
******
*******
********
C:\WINDOWS\System32\nwzwrama.exe trouvé !
Echec Copie C:\WINDOWS\system32\nwzwrama.exe vers dossier Backupnavi
C:\WINDOWS\system32\nwzwrama.exe non supprimé !
C:\WINDOWS\system32\nwzwrama.exe supprimé !


*** Nettoyage termine le 14/05/2007 à 13:58:18,39 ***

je m'attendais à ta reflexion...quand j'ai ouvert navilog m'a pas donné de choix et s'est lancé tout seul j'ai été surprise car je l'avais déjà fait ce navilog et je m'attendais à avoir le choix des options...j'ai pas compris le truc là...

pour l'instant non...on va croiser les doigts... en tous cas un grand merci d'une vieille dame devant son ordi qui commençait à péter un plomb avec ces pubs...je marque résolu....merciiiiiiiiiiiiiiiiiiiiii angeldark...