Probleme avec alert virus !!

Bonjour a tous je suis nouveau sur le site, veuillez m'excuser si je post pas au bon endroit !!

J'ai depuis ce matin, des fenetres jaunes avec system alert: malware threats, security alert: networm-i-virus et autre nom encore !!

Je ne sais pas utiliser le log hijackthis donc je vous colle mon rapport !!

En tous cas merci infiniment d'avance pour votre aide

J'ai avast comme anti virus, le system windows xp qui vient d'etre formater, j'ai passer un coup de spybot qui ma virer pas mal de merdouille

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:10:05, on 12/11/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\hbdsbkay.exe
C:\WINDOWS\System32\dllcache\Dirhost.com
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\VTTray.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\System32\ndytlexi.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wi [...] 4819543936
O20 - AppInit_DLLs: C:\WINDOWS\System32\__c006597D.dat
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: DomainService - - C:\WINDOWS\System32\hbdsbkay.exe
O23 - Service: Microsoft Dir32 - Unknown owner - C:\WINDOWS\System32\dllcache\Dirhost.com
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 3697 bytes

Salut !!
j'ai le meme pbm sur mon PC et j'ai posté un message à ce sujet mais sans réponse à ce jour.
J'ai lu pas mal de conseils sur ce virus et tous préconisent l'utilisation de Smartfraudfix + AVG (en mode sans échec).
Cela semble résoudre le pbm (tu trouveras sans soucis les liens adéquats sur ce forum)
Mon pbm à moi est que Smartfraufix ne fonctionne pas sur mon PC.....
Si tu as + d'infos, je suis preneur !!!
bon courage...!!

VOila tu trouvera mes 3 rapports et un petit mot de remerciement a la fin !!

RAPPORT SDFix: Version 1.114

Run by mike on 13/11/2007 at 06:00

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Name:
Microsoft Dir32

Path:
"C:\WINDOWS\System32\dllcache\Dirhost.com"

Microsoft Dir32 - Deleted



Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\SYSTEM32\KL.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINLOLX.EXE - Deleted
C:\WINDOWS\system32\kl.exe - Deleted
C:\WINDOWS\system32\winlolx.exe - Deleted
C:\WINDOWS\Temp\removalfile.bat - Deleted


Folder C:\Program Files\Fichiers communs\Carlson - Removed

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-13 06:05:17
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:00000064
"TracesSuccessful"=dword:00000006

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Sun 11 Nov 2007 6,465 ..SH. --- "C:\WINDOWS\system32\mmllm.bak1"
Mon 12 Nov 2007 240,857 ..SH. --- "C:\WINDOWS\system32\mmllm.bak2"
Tue 13 Nov 2007 20,640 ..SH. --- "C:\WINDOWS\system32\ndytlexi.dllbox"

Finished!





RAPPORT COMBOFIX

ComboFix 07-11-08.1 - mike 2007-11-13 6:10:58.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.709 [GMT 1:00]
Running from: C:\Documents and Settings\mike\Bureau\ComboFix.exe
* Created a new restore point
.

Incapable d'obtenir les privilèges Système

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\mike\Bureau\internet.lnk
C:\WINDOWS\system32\__c004000.dat
C:\WINDOWS\system32\__c006597D.dat
C:\WINDOWS\system32\gilsgrvw.dll
C:\WINDOWS\system32\jpklqrmu.dll
C:\WINDOWS\System32\mllmm.dll
C:\WINDOWS\system32\mmllm.bak1
C:\WINDOWS\system32\mmllm.bak2
C:\WINDOWS\system32\mmllm.ini
C:\WINDOWS\system32\ndytlexi.dllbox

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\DomainService


((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-13 to 2007-11-13 ))))))))))))))))))))))))))))))))))))
.

2007-11-13 06:09 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-13 06:00 <REP> d-------- C:\WINDOWS\ERUNT
2007-11-13 05:47 56,448 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2007-11-13 05:47 56,448 --a--c--- C:\WINDOWS\system32\dllcache\usbaudio.sys
2007-11-13 05:47 50,688 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-11-13 05:47 50,688 --a--c--- C:\WINDOWS\system32\dllcache\vfwwdm32.dll
2007-11-13 05:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Adobe Systems
2007-11-13 05:38 <REP> d-------- C:\Program Files\Fichiers communs\Adobe Systems Shared
2007-11-13 05:36 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2007-11-13 05:32 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Bluetooth
2007-11-13 05:30 135,040 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-11-13 05:30 135,040 --a--c--- C:\WINDOWS\system32\dllcache\portcls.sys
2007-11-13 05:30 57,344 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-11-13 05:30 57,344 --a--c--- C:\WINDOWS\system32\dllcache\drmk.sys
2007-11-13 05:30 50,688 --a------ C:\WINDOWS\system32\drivers\vfwwdm32.dll
2007-11-13 05:30 45,568 --a------ C:\WINDOWS\system32\iyuv_32.dll
2007-11-13 05:30 45,568 --a--c--- C:\WINDOWS\system32\dllcache\iyuv_32.dll
2007-11-13 05:30 8,192 --a------ C:\WINDOWS\system32\tsbyuv.dll
2007-11-13 05:30 8,192 --a--c--- C:\WINDOWS\system32\dllcache\tsbyuv.dll
2007-11-13 05:29 <REP> d-------- C:\Program Files\IVT Corporation
2007-11-13 05:27 <REP> d-------- C:\Program Files\Fichiers communs\Logitech
2007-11-13 05:27 <REP> d-------- C:\Program Files\directx
2007-11-13 05:27 308,224 --a------ C:\WINDOWS\IsUn040c.exe
2007-11-13 05:23 <REP> d-------- C:\Program Files\Fichiers communs\FotoWire
2007-11-13 05:23 <REP> d-------- C:\Documents and Settings\mike\Application Data\FotoWire
2007-11-13 05:20 <REP> d-------- C:\SXS
2007-11-13 05:20 <REP> d-------- C:\Program Files\Logitech
2007-11-13 05:08 <REP> d-------- C:\Program Files\Htmledit
2007-11-13 05:05 41,984 --------- C:\WINDOWS\Ctregrun.exe
2007-11-13 04:57 <REP> d--h----- C:\Program Files\InstallShield Installation Information
2007-11-13 04:57 <REP> d-------- C:\Program Files\Creative
2007-11-12 20:28 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-12 20:28 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-12 20:28 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-12 20:28 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-12 20:28 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-12 20:28 668 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-12 20:08 <REP> d-------- C:\Documents and Settings\mike\Application Data\Grisoft
2007-11-12 20:08 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-12 20:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-12 18:55 <REP> d-------- C:\WINDOWS\report
2007-11-12 18:54 <REP> d-------- C:\WINDOWS\AU_Backup
2007-11-12 18:54 1,163,344 --a------ C:\WINDOWS\vsapi32.dll
2007-11-12 18:54 267,845 --a------ C:\WINDOWS\tsc.exe
2007-11-12 18:54 86,094 --a------ C:\WINDOWS\BPMNT.dll
2007-11-12 18:54 71,749 --a------ C:\WINDOWS\hcextoutput.dll
2007-11-12 18:53 <REP> d-------- C:\WINDOWS\AU_Temp
2007-11-12 18:53 <REP> d-------- C:\WINDOWS\AU_Log
2007-11-12 18:53 507,904 --a------ C:\WINDOWS\TMUPDATE.DLL
2007-11-12 18:53 286,720 --a------ C:\WINDOWS\PATCH.EXE
2007-11-12 18:53 69,689 --a------ C:\WINDOWS\UNZIP.DLL
2007-11-12 17:09 <REP> d-------- C:\Program Files\Trend Micro
2007-11-12 16:06 <REP> d-------- C:\Program Files\CCleaner
2007-11-12 15:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-12 15:14 81,472 --a------ C:\WINDOWS\system32\vnosgnye.dll
2007-11-12 15:11 89,664 --a------ C:\WINDOWS\system32\modcovfj.dll
2007-11-12 15:08 145,984 --a------ C:\WINDOWS\system32\ndytlexi.dll.vir
2007-11-12 15:08 145,984 --a------ C:\WINDOWS\system32\kfecwxgt.dll
2007-11-12 15:04 145,984 --a------ C:\WINDOWS\system32\efqqtpbr.dll
2007-11-12 15:01 71,232 --a------ C:\WINDOWS\system32\hbdsbkay.exe
2007-11-12 03:34 <REP> d-------- C:\WINDOWS\pss
2007-11-12 03:04 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2007-11-12 03:04 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-11-12 03:04 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2007-11-12 03:04 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2007-11-12 03:04 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2007-11-12 03:04 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2007-11-12 03:04 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2007-11-12 02:33 <REP> d---s---- C:\WINDOWS\system32\Microsoft
2007-11-12 02:33 <REP> d-------- C:\Program Files\Lavasoft
2007-11-12 02:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-11-12 02:32 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-11-12 02:25 35,328 --a------ C:\WINDOWS\system32\pmnnopn.dll
2007-11-12 02:18 <REP> d-------- C:\WINDOWS\nview
2007-11-12 02:18 110,592 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-11-12 02:17 <REP> d-------- C:\Program Files\Fichiers communs\InstallShield
2007-11-12 02:17 <REP> d-------- C:\NVIDIA
2007-11-12 02:13 35,328 --a------ C:\WINDOWS\system32\iifggfe.dll
2007-11-11 23:40 <REP> d-------- C:\Poker
2007-11-11 23:23 724,992 --a------ C:\WINDOWS\iun6002.exe
2007-11-11 23:20 549,720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-11-11 23:20 325,976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-11-11 23:20 313,344 --a------ C:\WINDOWS\system32\winhttp.dll
2007-11-11 23:20 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2007-11-11 23:20 33,624 --a------ C:\WINDOWS\system32\wups.dll
2007-11-11 23:18 <REP> d---s---- C:\Documents and Settings\mike\UserData
2007-11-11 22:35 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2007-11-11 22:12 35,328 --a------ C:\WINDOWS\system32\nnnmkli.dll
2007-11-11 22:11 <REP> d-------- C:\Documents and Settings\mike\Contacts
2007-11-11 22:10 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-11-11 22:10 <REP> d-------- C:\Program Files\MSN Messenger

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-11 20:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
2007-11-11 20:51 --------- d-----w C:\Program Files\Services en ligne
2007-11-11 20:36 --------- d-----w C:\Program Files\Alwil Software
2007-11-11 20:23 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-11 20:19 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-11-11 20:03 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
2007-11-11 20:03 --------- d-----w C:\Program Files\Fichiers communs\ODBC
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bdf99871-bb14-4472-bf8b-7424cd1c1879}]
2007-11-12 15:14 81472 --a------ C:\WINDOWS\System32\vnosgnye.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2004-04-13 15:25]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2003-06-30 20:56]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2003-06-30 21:00]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\System32\mllmm.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

R3 P17;Sound Blaster Live! 24-bit;C:\WINDOWS\System32\drivers\P17.sys
R3 PhilCam8116;Logitech QuickCam Pro 3000(PID_08B0);C:\WINDOWS\System32\DRIVERS\CamDrL21.sys
S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter.sys

.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-13 06:17:48
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
Completion time: 2007-11-13 6:19:58 - machine was rebooted
.
--- E O F ---



RAPPORT HIJACKTHIS


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:23:25, on 13/11/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\System32\LVComS.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Video\LowLight.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: {9781c1dc-4247-b8fb-2744-41bb17899fdb} - {bdf99871-bb14-4472-bf8b-7424cd1c1879} - C:\WINDOWS\System32\vnosgnye.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BlueSoleil.lnk = ?
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 3956 bytes


OUuuuhhhh mon pc est deja bocou plus rapide, je l'entend bocou moins charger pour rien!! excellent tout ca, vraiment FELICITATION !!

Une aide vraiment precieuse, Me reste t-il des choses a faire?

VOICI LE RAPPORT AVEC LE CFSCRIP DE DEPLACER DANS LE COMBO !!

ComboFix 07-11-08.1 - mike 2007-11-15 16:13:25.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.653 [GMT 1:00]
Running from: C:\Documents and Settings\mike\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\mike\Bureau\CFScript.txt
* Created a new restore point

FILE
C:\WINDOWS\iun6002.exe
C:\WINDOWS\system32\efqqtpbr.dll
C:\WINDOWS\system32\hbdsbkay.exe
C:\WINDOWS\system32\iifggfe.dll
C:\WINDOWS\system32\kfecwxgt.dll
C:\WINDOWS\system32\modcovfj.dll
C:\WINDOWS\system32\ndytlexi.dll.vir
C:\WINDOWS\system32\nnnmkli.dll
C:\WINDOWS\system32\pmnnopn.dll
C:\WINDOWS\system32\vnosgnye.dll
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\mike\Bureau\internet.lnk
C:\WINDOWS\iun6002.exe
C:\WINDOWS\system32\efqqtpbr.dll
C:\WINDOWS\system32\hbdsbkay.exe
C:\WINDOWS\system32\iifggfe.dll
C:\WINDOWS\system32\kfecwxgt.dll
C:\WINDOWS\system32\modcovfj.dll
C:\WINDOWS\system32\ndytlexi.dll.vir
C:\WINDOWS\system32\nnnmkli.dll
C:\WINDOWS\system32\pmnnopn.dll
C:\WINDOWS\system32\vnosgnye.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\npf


((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-15 to 2007-11-15 ))))))))))))))))))))))))))))))))))))
.

2007-11-15 11:51 <REP> d-------- C:\Documents and Settings\mike\Incomplete
2007-11-15 11:08 <REP> d-------- C:\Documents and Settings\mike\Application Data\LimeWire
2007-11-15 11:07 <REP> d-------- C:\Program Files\LimeWire
2007-11-15 07:54 <REP> d-------- C:\WINDOWS\PreviewSoft
2007-11-15 07:54 <REP> d-------- C:\Program Files\Ulead Systems
2007-11-15 07:54 1,056,768 --a------ C:\WINDOWS\system32\ROBOEX32.DLL
2007-11-15 07:52 <REP> d-------- C:\WINDOWS\Noslip
2007-11-13 10:50 2,948 --a------ C:\WINDOWS\mozver.dat
2007-11-13 10:50 0 --a------ C:\WINDOWS\nsreg.dat
2007-11-13 10:43 <REP> d-------- C:\Program Files\Java
2007-11-13 10:42 <REP> d-------- C:\Program Files\Fichiers communs\Java
2007-11-13 09:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2007-11-13 09:34 <REP> d-------- C:\Program Files\Windows Live
2007-11-13 09:34 <REP> d-------- C:\Program Files\Messenger Plus! Live
2007-11-13 09:33 <REP> d-------- C:\Documents and Settings\mike\Application Data\Skype
2007-11-13 09:32 <REP> d-------- C:\Program Files\Skype
2007-11-13 09:32 <REP> d-------- C:\Program Files\Fichiers communs\Skype
2007-11-13 08:00 381,952 --a------ C:\WINDOWS\system32\dsound.dll
2007-11-13 08:00 381,952 --a------ C:\WINDOWS\system32\dllcache\dsound.dll
2007-11-13 08:00 292,864 --a------ C:\WINDOWS\system32\dllcache\ddraw.dll
2007-11-13 08:00 292,864 --a------ C:\WINDOWS\system32\ddraw.dll
2007-11-13 08:00 230,400 --a------ C:\WINDOWS\system32\dplayx.dll
2007-11-13 08:00 230,400 --a------ C:\WINDOWS\system32\dllcache\dplayx.dll
2007-11-13 08:00 79,360 --a------ C:\WINDOWS\system32\dpwsockx.dll
2007-11-13 08:00 79,360 --a------ C:\WINDOWS\system32\dllcache\dpwsockx.dll
2007-11-13 08:00 66,408 --a------ C:\WINDOWS\system32\dxdllreg.exe
2007-11-13 07:56 <REP> d-------- C:\Program Files\Joost
2007-11-13 07:56 <REP> d-------- C:\Documents and Settings\mike\Application Data\Joost
2007-11-13 07:53 <REP> d-------- C:\Program Files\CamStudio
2007-11-13 07:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2007-11-13 07:39 <REP> d-------- C:\WINDOWS\Internet Logs
2007-11-13 06:58 <REP> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-11-13 06:31 <REP> d-------- C:\Program Files\NeoTrace Express
2007-11-13 06:09 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-13 06:00 <REP> d-------- C:\WINDOWS\ERUNT
2007-11-13 05:47 56,448 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2007-11-13 05:47 56,448 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys
2007-11-13 05:47 50,688 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-11-13 05:47 50,688 --a------ C:\WINDOWS\system32\dllcache\vfwwdm32.dll
2007-11-13 05:36 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2007-11-13 05:32 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Bluetooth
2007-11-13 05:30 135,040 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-11-13 05:30 135,040 --a------ C:\WINDOWS\system32\dllcache\portcls.sys
2007-11-13 05:30 57,344 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-11-13 05:30 57,344 --a------ C:\WINDOWS\system32\dllcache\drmk.sys
2007-11-13 05:30 50,688 --a------ C:\WINDOWS\system32\drivers\vfwwdm32.dll
2007-11-13 05:30 45,568 --a------ C:\WINDOWS\system32\iyuv_32.dll
2007-11-13 05:30 45,568 --a------ C:\WINDOWS\system32\dllcache\iyuv_32.dll
2007-11-13 05:30 8,192 --a------ C:\WINDOWS\system32\tsbyuv.dll
2007-11-13 05:30 8,192 --a------ C:\WINDOWS\system32\dllcache\tsbyuv.dll
2007-11-13 05:29 <REP> d-------- C:\Program Files\IVT Corporation
2007-11-13 05:27 <REP> d-------- C:\Program Files\Fichiers communs\Logitech
2007-11-13 05:27 <REP> d-------- C:\Program Files\directx
2007-11-13 05:27 308,224 --a------ C:\WINDOWS\IsUn040c.exe
2007-11-13 05:23 <REP> d-------- C:\Program Files\Fichiers communs\FotoWire
2007-11-13 05:23 <REP> d-------- C:\Documents and Settings\mike\Application Data\FotoWire
2007-11-13 05:20 <REP> d-------- C:\SXS
2007-11-13 05:20 <REP> d-------- C:\Program Files\Logitech
2007-11-13 05:08 <REP> d-------- C:\Program Files\Htmledit
2007-11-13 05:05 41,984 --------- C:\WINDOWS\Ctregrun.exe
2007-11-13 04:57 <REP> d--h----- C:\Program Files\InstallShield Installation Information
2007-11-13 04:57 <REP> d-------- C:\Program Files\Creative
2007-11-12 20:28 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-12 20:28 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-12 20:28 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-12 20:28 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-12 20:28 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-12 20:28 668 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-12 20:08 <REP> d-------- C:\Documents and Settings\mike\Application Data\Grisoft
2007-11-12 20:08 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-12 20:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-12 18:55 <REP> d-------- C:\WINDOWS\report
2007-11-12 18:54 <REP> d-------- C:\WINDOWS\AU_Backup
2007-11-12 18:54 1,163,344 --a------ C:\WINDOWS\vsapi32.dll
2007-11-12 18:54 267,845 --a------ C:\WINDOWS\tsc.exe
2007-11-12 18:54 86,094 --a------ C:\WINDOWS\BPMNT.dll
2007-11-12 18:54 71,749 --a------ C:\WINDOWS\hcextoutput.dll
2007-11-12 18:53 <REP> d-------- C:\WINDOWS\AU_Temp
2007-11-12 18:53 <REP> d-------- C:\WINDOWS\AU_Log
2007-11-12 18:53 507,904 --a------ C:\WINDOWS\TMUPDATE.DLL
2007-11-12 18:53 286,720 --a------ C:\WINDOWS\PATCH.EXE
2007-11-12 18:53 69,689 --a------ C:\WINDOWS\UNZIP.DLL
2007-11-12 17:09 <REP> d-------- C:\Program Files\Trend Micro
2007-11-12 16:06 <REP> d-------- C:\Program Files\CCleaner
2007-11-12 15:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-12 03:34 <REP> d-------- C:\WINDOWS\pss
2007-11-12 03:04 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2007-11-12 03:04 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-11-12 03:04 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2007-11-12 03:04 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2007-11-12 03:04 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2007-11-12 03:04 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2007-11-12 03:04 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2007-11-12 02:33 <REP> d---s---- C:\WINDOWS\system32\Microsoft
2007-11-12 02:33 <REP> d-------- C:\Program Files\Lavasoft
2007-11-12 02:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-11-12 02:32 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-11-12 02:18 <REP> d-------- C:\WINDOWS\nview
2007-11-12 02:18 110,592 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-11-12 02:17 <REP> d-------- C:\Program Files\Fichiers communs\InstallShield

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-13 08:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
2007-11-13 06:45 49,184 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2007-11-13 06:45 2,696 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2007-11-13 06:45 2,080 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2007-11-13 06:45 1,268 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2007-11-13 06:41 75,932 ----a-w C:\WINDOWS\system32\drivers\klick.dat
2007-11-13 06:41 74,396 ----a-w C:\WINDOWS\system32\drivers\klin.dat
2007-11-11 20:36 --------- d-----w C:\Program Files\Alwil Software
2007-11-11 20:23 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-11 20:19 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-11-11 20:03 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
2007-11-11 20:03 --------- d-----w C:\Program Files\Fichiers communs\ODBC
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2004-04-13 15:25]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-06-21 21:54]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

R3 P17;Sound Blaster Live! 24-bit;C:\WINDOWS\System32\drivers\P17.sys
S3 BTNetFilter;Bluetooth Network Filter;\??\C:\WINDOWS\system32\drivers\BTNetFilter.sys

.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-15 16:16:37
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
Completion time: 2007-11-15 16:18:39 - machine was rebooted
.
--- E O F ---


ET voici UN HIJACKHIS avec juste msn en route et un site internet !! donc si ya des choses qui sont demarré c pas normal !! lol

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:31:48, on 15/11/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 4047 bytes


merci de ton aide !!

Salut, alors voila pour le suivie de tes conseils !!
j'ai bien desinstaller avast et mis antivir, effectivement il m'a trouvé pas mal de virus, bon a l'heure d'aujourd'hui mon pc tourne bien, mais je doit mettre a jour quelque truc au niveau de la carte graphique, bios et carte mere je crois !!

voila un rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:09:12, on 21/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 5666 bytes


Qu'en pense tu? merci infiniment !!!

bonjour

je t'avais dit d'attendre la fin de la désinfection pour la mise à jour...

j'attends ton rapport antivir

ok

choisis entre Spybot - Search & Destroy, Ad-Aware 2007 et AVG Anti-Spyware 7.5, pas la peine de garder les trois...
un seul suffit.
Conséquences de la multi-protection

une fois que tu as désinstallé deux des programmes ci dessus:

~Télécharge CCleaner:

http://www.filehippo.com/download_ccleaner/

~Lors de l'installation décoche: "Ajouter la Barre d'Outils Yahoo! Ccleaner"
Clique sur le bouton nettoyeur, tu fais " lancer le nettoyage "
Clique sur le bouton erreurs, tu fais "chercher les erreurs ", puis "réparer les erreurs".
Tuto de CCleaner: (merci à Malekal) .
http://www.malekal.com/tutorial_CCleaner.html

+++++++++++++++++++


Défragmente ton disque dur:
http://www.vulgarisation-informati [...] menter.php


puis dis moi comment se comporte ton pc.