Voila depuis peu de temps je suis arcélé par les fenetre de publicité comme System doctor , Error safe, ou des trucs dans le genre. j'ai beaucoup regardé le forum avant de venir posté et j'ai ocnstater que chaque cas etait très different alors je m'en remet a votre savoir pour me sauver du formatage
Merci d'avance !!!!!

Bonjour , telecharge Hijackthis sur ton Bureau
 
lance le programme , clique do a system scan and save a logfile
 
copie / colle le rapport généré dans ta reponse

daccord je fais ca tout de suite

Logfile of HijackThis v1.99.1
Scan saved at 01:14:54, on 27/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
 
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\cpwvoexo.dll",realset
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Meteo Fusion] "C:\Program Files\Eggiz\Meteo Fusion\Meteo Fusion.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} - http://appdirectory.messenger.msn. [...] gWXMSN.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

C'est du Vundo
 
Télécharge VundoFix sur ton Bureau
 
Double-clique VundoFix.exe pour le lancer
lorsque il se lance à nouveau , clique sur Scan for Vundo
à la fin du scan , clique sur Remove Vundo
il te demandera si tu veux supprimer les fichiers , clique sur YES
 
ton Bureau va disparaitre lors de la suppression des fichiers
 
ensuite , il va t'annoncer que ton PC va s'éteindre , clique OK
 
Redémarre ton PC
 
Copie/colle le rapport ( C:\vundofix.txt )
et un nouveau rapport HijackThis
 
Il est possible que VundoFix ne puisse pas supprimer un fichier , dans ce cas, il se relancera au prochain redémarrage , il suffit de recommencer à partir de clique sur Scan for Vundo

pour vundo :
 
 
VundoFix V6.4.1
 
Checking Java version...
 
Java version is 1.5.0.4
Old versions of java are exploitable and should be removed.
 
Java version is 1.5.0.6
Old versions of java are exploitable and should be removed.
 
Java version is 1.5.0.8
Old versions of java are exploitable and should be removed.
 
Java version is 1.5.0.9
Old versions of java are exploitable and should be removed.
 
Java version is 1.5.0.10
 
Java version is 1.5.0.11
 
Scan started at 01:17:43 27/05/2007
 
Listing files found while scanning....
 
C:\WINDOWS\system32\cpwvoexo.dll
C:\WINDOWS\system32\fxutvyki.dll
C:\WINDOWS\system32\gonutiwc.dll
C:\WINDOWS\system32\hggebyw.dll
C:\WINDOWS\system32\ijllm.bak1
C:\WINDOWS\system32\ijllm.bak2
C:\WINDOWS\system32\ijllm.ini
C:\WINDOWS\system32\ijllm.ini2
C:\WINDOWS\system32\ijllm.tmp
C:\WINDOWS\system32\mllji.dll
C:\WINDOWS\system32\oxeovwpc.ini
C:\WINDOWS\system32\pqstv.ini
C:\WINDOWS\system32\tgycppmi.dll
C:\WINDOWS\system32\vtsqp.dll
 
Beginning removal...
 
 Attempting to delete C:\WINDOWS\system32\cpwvoexo.dll
C:\WINDOWS\system32\cpwvoexo.dll Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\fxutvyki.dll
C:\WINDOWS\system32\fxutvyki.dll Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\gonutiwc.dll
C:\WINDOWS\system32\gonutiwc.dll Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\hggebyw.dll
C:\WINDOWS\system32\hggebyw.dll Could not be deleted.
 
 Attempting to delete C:\WINDOWS\system32\ijllm.bak1
C:\WINDOWS\system32\ijllm.bak1 Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\ijllm.bak2
C:\WINDOWS\system32\ijllm.bak2 Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\ijllm.ini
C:\WINDOWS\system32\ijllm.ini Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\ijllm.ini2
C:\WINDOWS\system32\ijllm.ini2 Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\ijllm.tmp
C:\WINDOWS\system32\ijllm.tmp Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\mllji.dll
C:\WINDOWS\system32\mllji.dll Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\oxeovwpc.ini
C:\WINDOWS\system32\oxeovwpc.ini Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\pqstv.ini
C:\WINDOWS\system32\pqstv.ini Has been deleted!
 
 Attempting to delete C:\WINDOWS\system32\vtsqp.dll
C:\WINDOWS\system32\vtsqp.dll Has been deleted!
 
Performing Repairs to the registry.
Done!
 
 
 
pour Hijack :
 
Logfile of HijackThis v1.99.1
Scan saved at 01:26:33, on 27/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
 
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Eggiz\Meteo Fusion\Meteo Fusion.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {48DAAC77-0DE7-42D7-9792-B9E4BF95A651} - C:\WINDOWS\system32\mllji.dll (file missing)
O2 - BHO: (no name) - {4B646AFB-9341-4330-8FD1-C32485AEE619} - C:\WINDOWS\system32\aqrwghns.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {BB04C3D8-2C22-4F6A-82A3-AA1B17D38E40} - C:\WINDOWS\system32\hggebyw.dll (file missing)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Meteo Fusion] "C:\Program Files\Eggiz\Meteo Fusion\Meteo Fusion.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} - http://appdirectory.messenger.msn. [...] gWXMSN.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

pour le moment plus de pubs et certains problemes de connection se sont réglés !
c'est fini ?

Vundofix à fait du ménage , mais il en reste  
 
Télécharge ComboFix  
 
Engegistre le sur ton Bureau
 
Double clique combofix.exe ( le .exe peut ne pas apparaitre )
 
Pour demarrer , tape sur la touche Y , attend la fin du scan
 
Un rapport est généré , Copie / Colle le dans ta réponse
 
Tu peux aussi trouver ce rapport ici : C:\Combofix.txt
 
Je verrais la suite demain , fais le scan Combofix et installe un Antivirus
( je n'en vois pas d'installé ! )
regarde ici :
http://www.infos-du-net.com/forum/ [...] ordinateur
je te conseille plutot Antivir ( je trouves Avast moins bon )

rho t'es génial ! @demain bonne nuit ! et merci pour tout ... moi en atendant je vais faire tout ca

"Administrateur" - 2007-05-27  1:37:50    Service Pack 2  
ComboFix 07-05.26.3.V - Running from: "C:\Program Files\Mozilla Firefox\"
 
 
((((((((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
 
 
"C:\WINDOWS\system32\rlls.dll"
 
 
(((((((((((((((((((((((((((((((   Files Created from 2007-04-27 to 2007-05-27  ))))))))))))))))))))))))))))))))))
 
 
2007-05-27 01:17 <REP> d-------- C:\VundoFix Backups
2007-05-27 00:33 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-05-27 00:12 <REP> d-------- C:\WINDOWS\system32\bfubackups
2007-05-26 16:26 7,700,480 --a------ C:\WINDOWS\system32\nvcpl.dll
2007-05-26 00:48 50,745 --a------ C:\WINDOWS\system32\aqrwghns.dll
2007-05-25 01:23 926,241 --a------ C:\WINDOWS\system32\model.dat
2007-05-25 01:23 729,088 --a------ C:\WINDOWS\system32\LDPackage.dll
2007-05-25 01:23 53,248 --a------ C:\WINDOWS\system32\silc_dll.dll
2007-05-25 00:24 <REP> d-------- C:\Documents and Settings\ADMINI~1\.thumbnails
2007-05-25 00:24 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\gtk-2.0
2007-05-25 00:24 <REP> d-------- C:\DOCUME~1\ADMINI~1\.thumbnails
2007-05-25 00:23 <REP> d-------- C:\Documents and Settings\ADMINI~1\.gimp-2.2
2007-05-25 00:23 <REP> d-------- C:\DOCUME~1\ADMINI~1\.gimp-2.2
2007-05-25 00:17 <REP> d-------- C:\Program Files\Gimp
2007-05-24 21:45 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-05-24 21:45 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-05-24 21:42 <REP> d-------- C:\Program Files\Picasa2
2007-05-24 20:44 <REP> d-------- C:\Program Files\Eggiz
2007-05-24 19:50 249,856 --a------ C:\WINDOWS\system32\rlxf.dll
2007-05-24 19:41 <REP> d-------- C:\Program Files\Samurize
2007-05-24 19:29 598 --a------ C:\WINDOWS\system32\ML.DLL
2007-05-24 19:09 102,400 --a------ C:\WINDOWS\system32\unzip32.dll
2007-05-24 19:09 <REP> d-------- C:\Program Files\Weather Watcher
2007-05-24 12:57 <REP> d-------- C:\Program Files\RocketDock
2007-05-24 00:09 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\FastStone
2007-05-23 18:30 <REP> d-------- C:\Program Files\UxTheme Multipatcher Fr
2007-05-22 04:19 36,864 --------- C:\WINDOWS\system32\wbsys.dll
2007-05-22 04:19 20,480 --a------ C:\WINDOWS\system32\wbload.dll
2007-05-22 03:36 <REP> d-------- C:\WINDOWS\Packs
2007-05-22 03:35 163,712 --a------ C:\WINDOWS\system32\drivers\vidstub.sys
2007-05-22 03:35 <REP> d-------- C:\Program Files\Stardock
2007-05-22 03:35 <REP> d-------- C:\Program Files\Fichiers communs\Stardock
2007-05-22 02:29 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\GRETECH
2007-05-22 02:24 <REP> d-------- C:\Program Files\GRETECH
2007-05-22 02:03 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Media Player Classic
2007-05-22 02:02 765,952 --a------ C:\WINDOWS\system32\xvidcore.dll
2007-05-22 02:02 217,088 --a------ C:\WINDOWS\system32\yv12vfw.dll
2007-05-22 02:02 180,224 --a------ C:\WINDOWS\system32\xvidvfw.dll
2007-05-22 02:02 10,752 --a------ C:\WINDOWS\system32\ff_vfw.dll
2007-05-22 02:02 <REP> d-------- C:\Program Files\K-Lite Codec Pack
2007-05-21 03:33 5,600 --a------ C:\WINDOWS\system\WINASPI.DLL
2007-05-21 03:33 45,056 --a------ C:\WINDOWS\system32\WNASPI32.DLL
2007-05-21 03:33 4,672 --a------ C:\WINDOWS\system\WOWPOST.EXE
2007-05-21 03:33 25,244 --a------ C:\WINDOWS\system32\drivers\ASPI32.SYS
2007-05-21 03:32 <REP> d-------- C:\Program Files\DivXMachine II
2007-05-21 03:17 <REP> d-------- C:\Program Files\DivX ThE  LaUncHeR
2007-05-21 03:00 <REP> d-------- C:\Program Files\Gabest
2007-05-21 02:46 209,636 --a------ C:\WINDOWS\IPUI_DivXG400.exe
2007-05-21 01:28 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
2007-05-21 01:26 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\SlySoft
2007-05-21 01:25 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SlySoft
2007-05-21 01:24 <REP> d-------- C:\Program Files\SlySoft
2007-05-21 01:23 87,608 --a------ C:\DOCUME~1\ADMINI~1\APPLIC~1\ezpinst.exe
2007-05-21 01:23 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
2007-05-21 01:23 47,360 --a------ C:\DOCUME~1\ADMINI~1\APPLIC~1\pcouffin.sys
2007-05-21 01:23 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Vso
2007-05-20 23:21 <REP> d-------- C:\Program Files\MSXML 4.0
2007-05-20 23:18 <REP> d-------- C:\WINDOWS\Dark and Light
2007-05-20 23:09 <REP> d-------- C:\Program Files\AviSynth 2.5
2007-05-17 23:30 4,682 --a------ C:\WINDOWS\system32\npptNT2.sys
2007-05-16 17:51 <REP> d-------- C:\Program Files\directx
2007-04-28 17:59 2,998 --a------ C:\WINDOWS\system32\tmp.reg
2007-04-28 17:57 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-04-28 17:57 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-04-28 17:34 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sandlot Games
2007-04-28 17:16 <REP> d-------- C:\Program Files\Cake Mania
2007-04-28 15:02 <REP> d-------- C:\Program Files\ReflexiveArcade
 
 
((((((((((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))))
 
2007-05-26 21:14:25 -------- d-----w C:\Program Files\Macrogaming
2007-05-26 21:14:25 -------- d-----w C:\Program Files\BitTorrent
2007-05-26 13:44:29 -------- d-----w C:\Program Files\Wanadoo
2007-05-24 19:42:43 -------- d-----w C:\Program Files\Google
2007-05-24 18:43:01 71,248 ----a-w C:\WINDOWS\system32\perfc00C.dat
2007-05-24 18:43:01 458,230 ----a-w C:\WINDOWS\system32\perfh00C.dat
2007-05-23 22:29:01 -------- d-----w C:\Program Files\MSN Messenger
2007-05-23 22:29:01 -------- d-----w C:\Program Files\Messenger Plus! Live
2007-05-23 18:49:16 -------- d-----w C:\Program Files\Windows Live Safety Center
2007-05-22 10:56:32 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-05-22 00:49:48 8,464 ----a-w C:\WINDOWS\system32\sporder.dll
2007-05-21 11:04:07 -------- d-----w C:\Program Files\Morgan
2007-05-21 10:39:38 -------- d-----w C:\Program Files\DivX
2007-05-14 19:16:10 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\teamspeak2
2007-04-20 04:38:06 356,352 ----a-w C:\WINDOWS\system32\nvusmb.exe
2007-04-20 04:38:06 356,352 ----a-w C:\WINDOWS\system32\nvunrm.exe
2007-04-20 04:38:06 356,352 ----a-w C:\WINDOWS\system32\NVUNINST.EXE
2007-04-20 04:38:06 356,352 ----a-w C:\WINDOWS\system32\nvuide.exe
2007-04-20 04:38:06 356,352 ----a-w C:\WINDOWS\system32\nvudisp.exe
2007-04-19 11:26:00 86,016 ----a-w C:\WINDOWS\system32\nvmctray.dll
2007-04-19 11:26:00 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll
2007-04-19 11:26:00 581,632 ----a-w C:\WINDOWS\system32\nvhwvid.dll
2007-04-19 11:26:00 5,644,288 ----a-w C:\WINDOWS\system32\nvoglnt.dll
2007-04-19 11:26:00 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
2007-04-19 11:26:00 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
2007-04-19 11:26:00 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
2007-04-19 11:26:00 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
2007-04-19 11:26:00 4,543,616 ----a-w C:\WINDOWS\system32\nv4_disp.dll
2007-04-19 11:26:00 35,840 ----a-w C:\WINDOWS\system32\nvcodins.dll
2007-04-19 11:26:00 35,840 ----a-w C:\WINDOWS\system32\nvcod.dll
2007-04-19 11:26:00 335,872 ----a-w C:\WINDOWS\system32\nvwrses.dll
2007-04-19 11:26:00 335,872 ----a-w C:\WINDOWS\system32\nvwrsel.dll
2007-04-19 11:26:00 327,680 ----a-w C:\WINDOWS\system32\nvwrsfr.dll
2007-04-19 11:26:00 327,680 ----a-w C:\WINDOWS\system32\nvwrsesm.dll
2007-04-19 11:26:00 323,584 ----a-w C:\WINDOWS\system32\nvwrspt.dll
2007-04-19 11:26:00 323,584 ----a-w C:\WINDOWS\system32\nvwrsit.dll
2007-04-19 11:26:00 323,584 ----a-w C:\WINDOWS\system32\nvrshe.dll
2007-04-19 11:26:00 323,584 ----a-w C:\WINDOWS\system32\nvrsar.dll
2007-04-19 11:26:00 319,488 ----a-w C:\WINDOWS\system32\nvwrsptb.dll
2007-04-19 11:26:00 319,488 ----a-w C:\WINDOWS\system32\nvwrsnl.dll
2007-04-19 11:26:00 315,392 ----a-w C:\WINDOWS\system32\nvwrsru.dll
2007-04-19 11:26:00 315,392 ----a-w C:\WINDOWS\system32\nvwrshu.dll
2007-04-19 11:26:00 311,296 ----a-w C:\WINDOWS\system32\nvwrsde.dll
2007-04-19 11:26:00 303,104 ----a-w C:\WINDOWS\system32\nvwrstr.dll
2007-04-19 11:26:00 303,104 ----a-w C:\WINDOWS\system32\nvwrssl.dll
2007-04-19 11:26:00 303,104 ----a-w C:\WINDOWS\system32\nvwrsfi.dll
2007-04-19 11:26:00 3,988,384 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-04-19 11:26:00 299,008 ----a-w C:\WINDOWS\system32\nvwrssk.dll
2007-04-19 11:26:00 299,008 ----a-w C:\WINDOWS\system32\nvwrsno.dll
2007-04-19 11:26:00 294,912 ----a-w C:\WINDOWS\system32\nvwrssv.dll
2007-04-19 11:26:00 294,912 ----a-w C:\WINDOWS\system32\nvwrspl.dll
2007-04-19 11:26:00 294,912 ----a-w C:\WINDOWS\system32\nvwrsda.dll
2007-04-19 11:26:00 286,720 ----a-w C:\WINDOWS\system32\nvwrseng.dll
2007-04-19 11:26:00 286,720 ----a-w C:\WINDOWS\system32\nvwrscs.dll
2007-04-19 11:26:00 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
2007-04-19 11:26:00 282,624 ----a-w C:\WINDOWS\system32\nvwrsar.dll
2007-04-19 11:26:00 278,528 ----a-w C:\WINDOWS\system32\nvwrshe.dll
2007-04-19 11:26:00 278,528 ----a-w C:\WINDOWS\system32\nvrsfr.dll
2007-04-19 11:26:00 274,432 ----a-w C:\WINDOWS\system32\nvrsit.dll
2007-04-19 11:26:00 274,432 ----a-w C:\WINDOWS\system32\nvrses.dll
2007-04-19 11:26:00 274,432 ----a-w C:\WINDOWS\system32\nvrsel.dll
2007-04-19 11:26:00 270,336 ----a-w C:\WINDOWS\system32\nvrsde.dll
2007-04-19 11:26:00 266,240 ----a-w C:\WINDOWS\system32\nvrspt.dll
2007-04-19 11:26:00 266,240 ----a-w C:\WINDOWS\system32\nvrsnl.dll
2007-04-19 11:26:00 266,240 ----a-w C:\WINDOWS\system32\nvrsesm.dll
2007-04-19 11:26:00 262,144 ----a-w C:\WINDOWS\system32\nvrsru.dll
2007-04-19 11:26:00 262,144 ----a-w C:\WINDOWS\system32\nvrsptb.dll
2007-04-19 11:26:00 262,144 ----a-w C:\WINDOWS\system32\nvrsja.dll
2007-04-19 11:26:00 258,048 ----a-w C:\WINDOWS\system32\nvrsko.dll
2007-04-19 11:26:00 253,952 ----a-w C:\WINDOWS\system32\nvrshu.dll
2007-04-19 11:26:00 249,856 ----a-w C:\WINDOWS\system32\nvrstr.dll
2007-04-19 11:26:00 249,856 ----a-w C:\WINDOWS\system32\nvrssl.dll
2007-04-19 11:26:00 249,856 ----a-w C:\WINDOWS\system32\nvrssk.dll
2007-04-19 11:26:00 249,856 ----a-w C:\WINDOWS\system32\nvrspl.dll
2007-04-19 11:26:00 249,856 ----a-w C:\WINDOWS\system32\nvrsno.dll
2007-04-19 11:26:00 245,760 ----a-w C:\WINDOWS\system32\nvrssv.dll
2007-04-19 11:26:00 245,760 ----a-w C:\WINDOWS\system32\nvrsda.dll
2007-04-19 11:26:00 241,664 ----a-w C:\WINDOWS\system32\nvrsfi.dll
2007-04-19 11:26:00 241,664 ----a-w C:\WINDOWS\system32\nvrseng.dll
2007-04-19 11:26:00 241,664 ----a-w C:\WINDOWS\system32\nvrscs.dll
2007-04-19 11:26:00 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll
2007-04-19 11:26:00 221,184 ----a-w C:\WINDOWS\system32\nvrszhc.dll
2007-04-19 11:26:00 212,992 ----a-w C:\WINDOWS\system32\nvwrsja.dll
2007-04-19 11:26:00 212,992 ----a-w C:\WINDOWS\system32\nvapi.dll
2007-04-19 11:26:00 196,608 ----a-w C:\WINDOWS\system32\nvwrsko.dll
2007-04-19 11:26:00 167,936 ----a-w C:\WINDOWS\system32\nvwrszht.dll
2007-04-19 11:26:00 163,840 ----a-w C:\WINDOWS\system32\nvwrszhc.dll
2007-04-19 11:26:00 159,810 ----a-w C:\WINDOWS\system32\nvsvc32.exe
2007-04-19 11:26:00 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe
2007-04-19 11:26:00 118,784 ----a-w C:\WINDOWS\system32\nvrszht.dll
2007-04-19 11:26:00 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
2007-04-19 11:26:00 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
2007-04-19 11:26:00 1,474,560 ----a-w C:\WINDOWS\system32\nview.dll
2007-04-19 11:26:00 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
2007-04-19 11:26:00 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
2007-04-18 16:14:18 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-07 06:47:53 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\Screenshot Sender
2007-03-17 13:44:47 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:37:50 578,560 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:37:50 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:37:50 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 15:33:58 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
2007-03-05 22:25:44 56 --sh--r C:\WINDOWS\system32\5D6086BABB.sys
2007-03-05 22:25:44 10,022 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2007-03-05 22:13:43 36,734 ----a-w C:\WINDOWS\system32\OggDSuninst.exe
 
 
((((((((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))
 
 
*Note* empty entries & legit default entries are not shown  
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{48DAAC77-0DE7-42D7-9792-B9E4BF95A651}=C:\WINDOWS\system32\mllji.dll []
{4B646AFB-9341-4330-8FD1-C32485AEE619}=C:\WINDOWS\system32\aqrwghns.dll [2007-05-26 00:48]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{BB04C3D8-2C22-4F6A-82A3-AA1B17D38E40}=C:\WINDOWS\system32\hggebyw.dll []
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-10-06 23:33]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"SoundMan"="SOUNDMAN.EXE" []
"nwiz"="nwiz.exe" [2007-04-19 13:26 C:\WINDOWS\system32\nwiz.exe]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 15:49]
"BootSkin Startup Jobs"="C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" [2004-04-26 16:21]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [2007-03-19 00:05]
"Meteo Fusion"="C:\Program Files\Eggiz\Meteo Fusion\Meteo Fusion.exe" [2007-04-12 13:01]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{BB04C3D8-2C22-4F6A-82A3-AA1B17D38E40}"="C:\WINDOWS\system32\hggebyw.dll" []
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
C:\Program Files\BroadJump\Client Foundation\CFD.exe
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3]
"C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
 
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"NVSvc"=2 (0x2)
"iPodService"=3 (0x3)
"IDriverT"=3 (0x3)
"Adobe LM Service"=3 (0x3)
 
*Newly Created Service* -PROCEXP90
 
********************************************************************
 
catchme 0.3.681 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-27 01:39:21
Windows 5.1.2600 Service Pack 2 NTFS
 
scanning hidden processes ...
 
scanning hidden autostart entries ...
 
scanning hidden files ...
 
scan completed successfully
hidden files: 0
 
 
********************************************************************
 
Completion time: 2007-05-27  1:39:49
C:\ComboFix-quarantined-files.txt ... 2007-05-27 01:39
 
 --- E O F ---
 
 
 
voila pour le rapport

Pas de problème , à demain  

EDIT j'ais oublié après tout ça , il faudrat un nouveau rapport Hijackthis

demandé c'est trouvé ^^
 
Logfile of HijackThis v1.99.1
Scan saved at 01:44:39, on 27/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
 
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Eggiz\Meteo Fusion\Meteo Fusion.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {48DAAC77-0DE7-42D7-9792-B9E4BF95A651} - C:\WINDOWS\system32\mllji.dll (file missing)
O2 - BHO: (no name) - {4B646AFB-9341-4330-8FD1-C32485AEE619} - C:\WINDOWS\system32\aqrwghns.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {BB04C3D8-2C22-4F6A-82A3-AA1B17D38E40} - C:\WINDOWS\system32\hggebyw.dll (file missing)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Meteo Fusion] "C:\Program Files\Eggiz\Meteo Fusion\Meteo Fusion.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} - http://appdirectory.messenger.msn. [...] gWXMSN.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
 

j'ai télécharger l'antivirus comme tu me l'as conseillé et j'ai aussi rajouter un firewall (kerio), est ce que le fire wall est indispensable car il me prend de la mémoire. Et est ce qu'a chaques fois que l'anti virus me prévien d'une infection je dois automatiquement suprimer ? Désolé j'suis pas vraiment un pro de l'informatique ^^
 
Sinon il y a les analyses que tu m'a demandé ci dessus !