bonjour.voila,mon ordinateur a ete infecte par le virus c'est pas moi ca.voila le rapport Hijackthis.je suis novice.aider moi SVP.





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:04:25, on 22/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\bhij.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://as.starware.com/dp/search?p [...] src_id=370 (obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\svchost.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.0.26\ShoppingReport.dll
O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Online TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Program Files\Online_TV\tbOnl0.dll
O2 - BHO: (no name) - {594D3DEF-3908-5A69-B429-D9DA951E8F58} - C:\DOCUME~1\edouard\APPLIC~1\GREATF~1\interscr.exe (file missing)
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.7.0\HbtHostIE.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbSha1.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\HbTools\Bin\4.7.7.0\HbtHostIE.dll (file missing)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbSha1.dll
O3 - Toolbar: Online TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Program Files\Online_TV\tbOnl0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvEventCenter] C:\WINDOWS\system\svchost.exe /w
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MediaDico] C:\Program Files\Micro Application\MediaDICO\LanceMediaDICO.exe Lancement
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [Error Safe] "C:\Program Files\Error Safe Free\ers.exe" /min
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WintelUpdate] C:\bhij.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.0.26\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.0.26\ShoppingReport.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FFI - Unknown owner - C:\WINDOWS\system32\svchost.exe:exm.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Generic Host Process for Win-32 Service - Unknown owner - C:\WINDOWS\svchost.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

--
End of file - 14924 bytes

bonjour
plusieurs infections dans ton rapport:

1
Télécharge MSNFix.zip (!aur3n7) sur ton Bureau.
Décompresse-le sur ton bureau (Clique-Droit/Extraire tout).

Il est indispensable que l'outil soit executé à partir du bureau.

Ouvre le dossier MSNFix puis double-clique sur MSNFix.bat.
- Exécute l'option R.
-- Si l'infection est détectée, presse une touche pour lancer le nettoyage.

Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations.
Dans ce cas il suffit de redémarrer l'ordinateur manuellement.

Poste le rapport situé dans le dossier MSNFix.
Le nom du rapport correspond au moment de sa création : date_heure.log

->Tutorial de Malekal<-


2

Télécharge BTFix de Bibi26.

• Dézippe l'archive sur ton Bureau.
• Ouvre le dossier BTFix.
• Double clique sur BTFix.exe.
• Clique sur Rechercher.
• Un rapport va apparaître, copie/colle-le dans ta prochaine réponse.

bonsoir

et le rapport MSNFix?

++++++++

~Redémarre l'ordinateur en mode sans échec (F8 au démarrage de l'ordinateur)

• Ouvre BTFix.
• Clique sur Nettoyer.
• Un rapport va apparaître, copie/colle-le dans ta prochaine réponse.

j'ai toujours le virus . mon pare feu se desactive.le pc rame et mon antivirus m'en detecte toujours.

MSNFix 1.639-2

C:\Documents and Settings\HP_Propri‚taire\Bureau\MSNFix\MSNFix
Fix exécuté le 2008-01-22 - 23:08:54.21 By HP_Propri‚taire
mode normal

************************ Recherche les fichiers présents

Aucun Fichier trouvé

************************ Recherche les dossiers présents

Aucun dossier trouvé


************************ Fichiers suspects

/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention

[C:\bhij.exe] E35BBFB29114DC915FB8FAF710EB8770
[C:\cvbkwtb.exe] 3526F86D19E7A1EC8175AF5865885607




------------------------------------------------------------------------
Auteur : !aur3n7 Contact: http://changelog.fr
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

voici mon rapoort que viens de fai re tout desiute

VOICI MON RAPPORT HIJAKTHIS
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:01, on 2008-01-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Online TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Program Files\Online_TV\tbOnl0.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {594D3DEF-3908-5A69-B429-D9DA951E8F58} - C:\DOCUME~1\edouard\APPLIC~1\GREATF~1\interscr.exe (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbSha1.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbSha1.dll
O3 - Toolbar: Online TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Program Files\Online_TV\tbOnl0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MediaDico] C:\Program Files\Micro Application\MediaDICO\LanceMediaDICO.exe Lancement
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FFI - Unknown owner - C:\WINDOWS\system32\svchost.exe:exm.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 13293 bytes

aider moi svp

je suis novice que veut tu dire par c\combo.txt.
peux tu m'expliquer stp.

je sais pas si c'est ca
ComboFix 08-01-21.4 - HP_Propri‚taire 2008-01-23 21:23:10.3 - NTFSx86
Endroit: C:\Documents and Settings\HP_Propri‚taire\Bureau\ComboFix.exe

[color=red]AVERTISSEMENT - CETTE MACHINE N'A PAS LA CONSOLE DE RÉTABLISSEMENT INSTALLÉE !![/color]
.
[color=purple]The following files were disabled during the run:[/color]
C:\WINDOWS\system32\sockspy.dll


merci pour ton aide

plusieurs m'ont dit que je devais appuyer sur F12 au demarrage dois je le faire et a quoi ca sert.,,,

MSNFix 1.639-2

C:\Documents and Settings\HP_Propri‚taire\Bureau\MSNFix\MSNFix
Fix exécuté le 2008-01-24 - 11:27:41.68 By HP_Propri‚taire
mode normal

************************ Recherche les fichiers présents

Aucun Fichier trouvé

************************ Recherche les dossiers présents

Aucun dossier trouvé


************************ Fichiers suspects

Aucun Fichier trouvé



------------------------------------------------------------------------
Auteur : !aur3n7 Contact: http://changelog.fr
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

ou puis je le trouver car a la fin du scan .il me dit que les rapports sont utiliser par un autre processeur.

ComboFix 08-01-21.4 - HP_Propri‚taire 2008-01-24 20:50:30.5 - NTFSx86
Endroit: C:\Documents and Settings\HP_Propri‚taire\Bureau\ComboFix.exe

[color=red]AVERTISSEMENT - CETTE MACHINE N'A PAS LA CONSOLE DE RÉTABLISSEMENT INSTALLÉE !![/color]
.
[color=purple]The following files were disabled during the run:[/color]
C:\WINDOWS\system32\sockspy.dll
\??\C:\ntdetect.com\0\0
\??\C:\boot.ini\0\0
\??\C:\ntldr\0\0
\??\C:\WINDOWS\0\0
\??\C:\WINDOWS\explorer.exe\0\0
\??\C:\WINDOWS\system32\csrss.exe\0\0
\??\C:\WINDOWS\system32\lsass.exe\0\0
\??\C:\WINDOWS\system32\services.exe\0\0
\??\C:\WINDOWS\system32\smss.exe\0\0
\??\C:\WINDOWS\system32\svchost.exe\0\0
\??\C:\WINDOWS\system32\userinit.exe\0\0
\??\C:\WINDOWS\system32\winlogon.exe\0\0
\??\C:\WINDOWS\system32\hal.dll\0\0
\??\C:\WINDOWS\system32\ntdll.dll\0\0
\??\C:\WINDOWS\system32\config\0\0
\??\C:\WINDOWS\system32\drivers\0\0
\??\C:\WINDOWS\system32\wbem\0\0
\??\C:\ntdetect.com\0\0
\??\C:\boot.ini\0\0
\??\C:\ntldr\0\0
\??\C:\WINDOWS\0\0
\??\C:\WINDOWS\explorer.exe\0\0
\??\C:\WINDOWS\system32\csrss.exe\0\0
\??\C:\WINDOWS\system32\lsass.exe\0\0
\??\C:\WINDOWS\system32\services.exe\0\0
\??\C:\WINDOWS\system32\smss.exe\0\0
\??\C:\WINDOWS\system32\svchost.exe\0\0
\??\C:\WINDOWS\system32\userinit.exe\0\0
\??\C:\WINDOWS\system32\winlogon.exe\0\0
\??\C:\WINDOWS\system32\hal.dll\0\0
\??\C:\WINDOWS\system32\ntdll.dll\0\0
\??\C:\WINDOWS\system32\config\0\0
\??\C:\WINDOWS\system32\drivers\0\0
\??\C:\WINDOWS\system32\wbem\0\0
s/\x3b //g
s/C:\\WINDOWS\\system32\\rundll32\.exe //I
s/C:\\WINDOWS\\system32\\rundll32 //I
s/rundll32\.exe //I
s/rundll32 //I
s/\x22//g
s/^ +//
s/,.*//
s/<NO NAME>/@/
s/\t.*\t/\t/
s/\.exe .*/.exe/I
s/\.dll .*/.dll/I
s/\x25programfiles\x25/C:\\Program Files/I
s/\x25systemroot\x25/C:\\WINDOWS/I



je ne sais si c'est ca

je veux le rapport en entier.

alors qu'est ce que je fait de cette merde

type de demarage desactive...c'est ok
type de demarage arreter ......j'ai pas

dans le dossier en transparence j'ai trouve ceci


ÐÏà??á >  þÿ 



þÿÿÿ ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿýÿÿÿ      
þÿÿÿþÿÿÿ         þÿÿÿþÿÿÿ     þÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿR o o t E n t r y   ÿÿÿÿÿÿÿÿ Ð?@ëJÇ
 À
1  
ÿÿÿÿÿÿÿÿÿÿÿÿ  I C a t a l o g   ÿÿÿÿÿÿÿÿÿÿÿÿ Æ 2  

 ÿÿÿÿ
I 
= ÿØÿà JFIF


` ` ÿÛ C 









ÿÛ C
  


ÿÀ  ` H
" 

ÿÄ 









ÿÄ µ 

}
 !1AQa"q2???#B?ÁRÑð$3br?
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ??????Š????????š????????ª???µ????ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ?ØÙÚáâãäåæçèéêñòóôõö?øùúÿÄ 












ÿÄ µ 

w
!1AQaq"2?B???Á #3RðbrÑ
$4á%ñ&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?ƒ??????Š????????š????????ª???µ????ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ?ØÙÚâãäåæçèéêòóôõö?øùúÿÚ 
 ? ?á/????má/KyÜ?N??0W??~c?9??$ýzð+??µ?ðFµkåX??öž?skz?0y6?;ò?Î
?Çiäî5ó??i?Ô$ƒUºGPÎ?Bmöœ?-?œ+
z8Á??Ã?u]vha????Q??kx
*n{p?öŸ???N~b?Î?n?ô?ò
?ð?D~
~ÑoâÈ4ý?Ä_fÔä@?q;\œí}?ÈV ò28=Or???ö? HØd2?E~[è:??|@ÖþÔdÓ%Gym|Æ?20r3ÛxÚÄ}O?ø[ã^?o4Ö?FÁ-ø1Ìî%?FŒäGÔ?Œm*Uv?>\qäÕË#QÞ??ÛÂt????zŸx+?>?uÑ?_?YD??^$ŸR?pþLß?Œ?À ?Ï9àžkUþ)x?K?WitûÏ?2??bÑ?mòð?3ÁPN9ÉÆ8rÊ?Çk3Xgihî?u??úŒzd?ðÉö@??"?e?b
!þ~0~œ?èm<o?]?ÿ OŠ?/úAòòNO?CÒ?ÙáëA^QhôáŠ?QÚ3Lè(?,ŠÀrB(??Ÿ?
t/þÒZ&?usq?iÞ+?
ï-??ß[ OðÅ??$?bA'??Œ?ehOøZ?Tž6ÊI"y
?0K-œã??9>?üûã}ZýŸ|}gâ? ÜÉebò??-?'æ?ûn?;vÍ}?à??3ö?øi?eâ}WN?ãh/,wZŸ&L?c?n1óÆ
?\gžŸo??<Bq???â|~&5(INÝ?ó?ñWÇžñj\\\???éø?????š&ª?^U?1Îx9#š.?hŸjÚ?µÅî?
Ä?ŠÑÀZÊ??ü?6a?îz{?ì?=???/yÛÊÄÍk?Ve#?R[?=ýj?ŠdT?Nµ?Âú?.?[mÕ?Ô?ƒ?å;
#v@Î8#?J%??m?2UzM?ž}?þÓ~>Òbo?k?[?ùœ-??ãœ`ù}º} 0+??ý?þ$iÖñ$?iòJ?óK5?Ý!ÎrpBä p+?ñ'ìëâ?8?mígÔ4û?Ñ?<rÛ?9ó??˃Õ?Tàà??ÖK+ý)ä??ŠX??í+&à?õÉèOZç???cTèTÖÊçÑ:Wí?ã4õ?óHÒ.e??Fê8%Fê1À???úØ<ô0~Ý?F\øP$êfÿ ???Î8?iUèFy?Îs_%*?+'@ç$vÇaþ~?jÞHn.bK?LhÌg þ??gž3KÚÔRµô??Õì}Éðçþ
'?m5 u?
^Þ v46ÖwJa?Æw(f ó?Ð~WÂshd?áwXA|4?ÀsŽœŒ{g?SEqÏN?œšýØV?N*??ò?ô?Œ4-;Ä6sè?Ð??naÄ???Ær{@ ç?óÏ?<oâ?Ù+â?2 Ô4ë?ÂM??{nH#,?ëÎ?<ý ?m?ëpIi/?mqo???Ëÿ NÞµ?ñ/áÍ?ÄM,î??Uó-îPœÅ g?s?==ðhÖ<µi?à?µw*UV??W>?ºñmß?ü
ãø?K?ÃÒØ??'?MóÌT7feRÀ?ùHO5ò~Ÿã|AºmQñEþ?Ø
iccp`
??ƒœÿ žõãÚ?|iðHñOƒo$??KÖ,ÜKåà?k(óclðqòŸPØ#?=3Ã?Ž?áÝî+dy"?XÚp?Œl?)S?OvíßÞ???eÅÛ???]?F??ŸoCêO?u=vÎãÚ???êð ?Öî`???œ?pÌ?HíÁë?úi??Ž9ãŽé?f?]r;?AëŒq_|-øÍ?ü?øëL?[YE?\G{K?ÜdP~ÿ Ê8'?{ÏíÅ?IxâǺ?ö!?žT?]ùù???ÛŒsžý+ÕÁb?* T??CÄÌ????~Ê:=OeÖ>éúÝ?A?ÛÇdñ(kG??ïÜX??_\r0Ü?É?9ý?|Qáícf?$Ž?ä??,#1ñÀ?pz
Ã?Hé]̵?u?ñká[[YcbC\^4ªG`T(õõã?µcñ?âV?ÒÅmk?Z??sù?É?þ\ãùVõ*aç?àqB8ŠðYâþ)ø
ãÿ M3xnúò'r?Ía?F?ðŸ~qEzÿ ÄErÓÛxžH\\=ÃÆ??BÇ$ýÏ?A#?ÈäñEq?I=/ø?Ü?KkoÇü?&ømãè?ÝzÏOÔZSÓ?b.ÅXœ?? p+é?Cá^?u?Ý??8??>^ùÕ1ó?0?
ÏZãußØBèk:?ü#>"'dÇûF}Qv?q??LAæ?{?Ã?5ï?=Ö?ÿ g??3jW?:õõ?Km?lß??a?Ü
.FHÜpã<W}\='6?Rí??'ÎÓ?ù?õ?cáÏÚ5õØ<_?ør\ÄÖ?ÃÒBr?Ìà4`?éàò}9?-ðôúö?<?O??ÙÏÉ ?î?ç?y=?+??Öî<aâ+ß_ÝGuys#O ?ZÍ ?dƒ4?)I??aÇV8ë^T0*?ï?oò"Y??ÏØÅtôÔÇøM<þøßáÍbúÛÍŒÝ??l?Éûá?g?<ž?ö?@5OŒ?>qªøi?FØ#š?NŠxæ$)!
òq?ž??ÜgàÍ3P??Y[X?c$R?@xùrz?Èí?;WÚÞøWáO???Ôü=rú?$*?útò=Í?I?198RG$
Æ
g??J5%mu_?Ü^&?:ôãRwÓGóÙþy?|@ø)?Épöz??B?ËObm?*õ*d?wãÑsŠô=*j?4zn??ÞÈ???µž'e\ã$/ gŽ{?ÉÚïÃgð?ÌKâ???ú??ÇûCL?â\å??x8ä œpx??|,ðN?3]xsÆm?\4HaÒ?Cø??'h?L
?œ?ùÇÐUªÁò???d?SšæRvûϵÿ áÒÉ-ö$9Ý?Š+âû?
|pø_?Í6?s?ëv?
Ãé7æhw>Bî$Ýãv3óÜCE_Ö???3X&ö??}?öx?VPIRyü?Çÿ j Ûø?á?öæà+I??Û?7Ã!?1ƒ?bqŽ?ñƒŠôÄÔ?ùP?ER??ÕÒHå?2:#!?kÔpæ??êqBNæ]Èo?ú??ÝY???;?cPÄ?åyÁõ?ÒóÃä??ùªü?Æ6ûr3?ÏQ[ÿ µ??àÏ üO:g??gÒõ(?º?Ù#mIw$q?d*ms?@ÇÌlW?Õ?ËŸ1Ô?`?#?àþ=Åy?}ÄèÉìz8È:?X?/??
ïØ5?Ff?3å?Êý?Fä{dœ????`mëYÐ<Câ!y;?ÚÆ=>~Qc;%?žNáŽx?|y?ÙÛëZ$??ĵÓ?å:Žc9 =29ö?º?d?oxSáªXhÚËk??Ì???ùB+? /?NNyÀ?Qn?[Ù]?æËu??Ÿ.ò?kÉJjAgdÒ^ÏQ?8Q??_Jñ??ü
?L.ÍÜ~ÔË>Û?7H??d6ä`UóÉäÇZô[å]nÜÂò? pVX?*ëïž??Âÿ ?ïm>',û??ç9õÉ&?lÚŽ?Ýå}?ÿ 3?ðÔÓ?W+ù[SÁ?/
øë@???Ã???Œ&?I|??Çîœ? ?9
ÉÏpWÔ6Zž??[x?ãæ?ÿ ??YRK%ÏÖ??Ë?êâ???g<?ü
ñŸí)à?
Þ=??%Î?t??gù#= ÝŽNxÆ+cÂ?|7ã
/í??öë#n
ÒqŒnê~ldgÓ#Ö?<??âÕ?SŸf?Ûøy?MÔ`î??1?Œ?PÛ03?ƒÏ'šŸâWÄG?ºµÒ?-WG???-c??ä"aƒ!bÌUòxAêNn8Û^OU?Úð+Hõ.þØV?Žú?Üì?üVòÄÄ?ò?*?c?Ü??|\^X2?3;ñ?$?\z??N?õ5??ÝÜë?Ú
ë?dh2Q?ýã Ü?çŒõëèMg@?810Eõ|?þµyµ#ÏRRÚú?Ö?îAEëm*xòú;w&˪?ó?#n@ÁíëÇ??{?ì?ñQð?µ?4/õ?Ô>uÄEÂ??2ùm?=ƒŽ99í_6ë?Zm?k*NNÆìØÆ@úq_`þÂ^??Ðõ?Ùm??ºš#?'ß
v:r=?ô?j1+û5-WQÖ?B?~]?gÐñâx?^òjZž??(Âchã ž
Ç????XÚÎÎÚa
* d9vÀêxë^//Ã?ÔïÕÒìÚÛ??(?#V
ÁÎFGOzWµX??mŸîŽsÖ??iQ?sš?~??üæ1X??j
*:t??V?mîkªÆ#8àƒµBK?öãÔÑO?œ ?ÿÙ
5      


                  ! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 þÿÿÿ6 þÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ   ` ` &
?e`ÁoÇ
M a n o n . j p g D  ?e`ÁoÇ
m a n o u n e t t e k i r i g o l e . j p g L  
? ÿØÿà JFIF


` ` ÿÛ C 









ÿÛ C
  


ÿÀ  H `
" 

ÿÄ 









ÿÄ µ 

}
 !1AQa"q2???#B?ÁRÑð$3br?
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ??????Š????????š????????ª???µ????ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ?ØÙ
= ÿØÿà JFIF


` ` ÿÛ C 









ÿÛ C
  


ÿÀ  ` H
" 

ÿÄ 









ÿÄ µ 

}
 !1AQa"q2???#B?ÁRÑð$3br?
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ??????Š????????š????????ª???µ????ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ?ØÙÚáâãäåæçèéêñòóôõö?øùúÿÄ 












ÿÄ µ 

w
!1AQaq"2?B???Á #3RðbrÑ
$4á%ñ&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?ƒ??????Š????????š????????ª???µ????ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ?ØÙÚâãäåæçèéêòóôõö?øùúÿÚ 
 ? ?á/????má/KyÜ?N??0W??~c?9??$ýzð+??µ?ðFµkåX??öž?skz?0y6?;ò?Î
?Çiäî5ó??i?Ô$ƒUºGPÎ?Bmöœ?-?œ+
z8Á??Ã?u]vha????Q??kx
*n{p?öŸ???N~b?Î?n?ô?ò
?ð?D~
~ÑoâÈ4ý?Ä_fÔä@?q;\œí}?ÈV ò28=Or???ö? HØd2?E~[è:??|@ÖþÔdÓ%Gym|Æ?20r3ÛxÚÄ}O?ø[ã^?o4Ö?FÁ-ø1Ìî%?FŒäGÔ?Œm*Uv?>\qäÕË#QÞ??ÛÂt????zŸx+?>?uÑ?_?YD??^$ŸR?pþLß?Œ?À ?Ï9àžkUþ)x?K?WitûÏ?2??bÑ?mòð?3ÁPN9ÉÆ8rÊ?Çk3Xgihî?u??úŒzd?ðÉö@??"?e?b
!þ~0~œ?èm<o?]?ÿ OŠ?/úAòòNO?CÒ?ÙáëA^QhôáŠ?QÚ3Lè(?,ŠÀrB(??Ÿ?
t/þÒZ&?usq?iÞ+?
ï-??ß[ OðÅ??$?bA'??Œ?ehOøZ?Tž6ÊI"y
?0K-œã??9>?üûã}ZýŸ|}gâ? ÜÉebò??-?'æ?ûn?;vÍ}?à??3ö?øi?eâ}WN?ãh/,wZŸ&L?c?n1óÆ
?\gžŸo??<Bq???â|~&5(INÝ?ó?ñWÇžñj\\\???éø?????š&ª?^U?1Îx9#š.?hŸjÚ?µÅî?
Ä?ŠÑÀZÊ??ü?6a?îz{?ì?=???/yÛÊÄÍk?Ve#?R[?=ýj?ŠdT?Nµ?Âú?.?[mÕ?Ô?ƒ?å;
#v@Î8#?J%??m?2UzM?ž}?þÓ~>Òbo?k?[?ùœ-??ãœ`ù}º} 0+??ý?þ$iÖñ$?iòJ?óK5?Ý!ÎrpBä p+?ñ'ìëâ?8?mígÔ4û?Ñ?<rÛ?9ó??˃Õ?Tàà??ÖK+ý)ä??ŠX??í+&à?õÉèOZç???cTèTÖÊçÑ:Wí?ã4õ?óHÒ.e??Fê8%Fê1À???úØ<ô0~Ý?F\øP$êfÿ ???Î8?iUèFy?Îs_%*?+'@ç$vÇaþ~?jÞHn.bK?LhÌg þ??gž3KÚÔRµô??Õì}Éðçþ
'?m5 u?
^Þ v46ÖwJa?Æw(f ó?Ð~WÂshd?áwXA|4?ÀsŽœŒ{g?SEqÏN?œšýØV?N*??ò?ô?Œ4-;Ä6sè?Ð??naÄ???Ær{@ ç?óÏ?<oâ?Ù+â?2 Ô4ë?ÂM??{nH#,?ëÎ?<ý ?m?ëpIi/?mqo???Ëÿ NÞµ?ñ/áÍ?ÄM,î??Uó-îPœÅ g?s?==ðhÖ<µi?à?µw*UV??W>?ºñmß?ü
ãø?K?ÃÒØ??'?MóÌT7feRÀ?ùHO5ò~Ÿã|AºmQñEþ?Ø
iccp`
??ƒœÿ žõãÚ?|iðHñOƒo$??KÖ,ÜKåà?k(óclðqòŸPØ#?=3Ã?Ž?áÝî+dy"?XÚp?Œl?)S?OvíßÞ???eÅÛ???]?F??ŸoCêO?u=vÎãÚ???êð ?Öî`???œ?pÌ?HíÁë?úi??Ž9ãŽé?f?]r;?AëŒq_|-øÍ?ü?øëL?[YE?\G{K?ÜdP~ÿ Ê8'?{ÏíÅ?IxâǺ?ö!?žT?]ùù???ÛŒsžý+ÕÁb?* T??CÄÌ????~Ê:=OeÖ>éúÝ?A?ÛÇdñ(kG??ïÜX??_\r0Ü?É?9ý?|Qáícf?$Ž?ä??,#1ñÀ?pz
Ã?Hé]̵?u?ñká[[YcbC\^4ªG`T(õõã?µcñ?âV?ÒÅmk?Z??sù?É?þ\ãùVõ*aç?àqB8ŠðYâþ)ø
ãÿ M3xnúò'r?Ía?F?ðŸ~qEzÿ ÄErÓÛxžH\\=ÃÆ??BÇ$ýÏ?A#?ÈäñEq?I=/ø?Ü?KkoÇü?&ømãè?ÝzÏOÔZSÓ?b.ÅXœ?? p+é?Cá^?u?Ý??8??>^ùÕ1ó?0?
ÏZãußØBèk:?ü#>"'dÇûF}Qv?q??LAæ?{?Ã?5ï?=Ö?ÿ g??3jW?:õõ?Km?lß??a?Ü
.FHÜpã<W}\='6?Rí??'ÎÓ?ù?õ?cáÏÚ5õØ<_?ør\ÄÖ?ÃÒBr?Ìà4`?éàò}9?-ðôúö?<?O??ÙÏÉ ?î?ç?y=?+??Öî<aâ+ß_ÝGuys#O ?ZÍ ?dƒ4?)I??aÇV8ë^T0*?ï?oò"Y??ÏØÅtôÔÇøM<þøßáÍbúÛÍŒÝ??l?Éûá?g?<ž?ö?@5OŒ?>qªøi?FØ#š?NŠxæ$)!
òq?ž??ÜgàÍ3P??Y[X?c$R?@xùrz?Èí?;WÚÞøWáO???Ôü=rú?$*?útò=Í?I?198RG$
Æ
g??J5%mu_?Ü^&?:ôãRwÓGóÙþy?|@ø)?Épöz??B?ËObm?*õ*d?wãÑsŠô=*j?4zn??ÞÈ???µž'e\ã$/ gŽ{?ÉÚïÃgð?ÌKâ???ú??ÇûCL?â\å??x8ä œpx??|,ðN?3]xsÆm?\4HaÒ?Cø??'h?L
?œ?ùÇÐUªÁò???d?SšæRvûϵÿ áÒÉ-ö$9Ý?Š+âû?
|pø_?Í6?s?ëv?
Ãé7æhw>Bî$Ýãv3óÜCE_Ö???3X&ö??}?öx?VPIRyü?Çÿ j Ûø?á?öæà+I??Û?7Ã!?1ƒ?bqŽ?ñƒŠôÄÔ?ùP?ER??ÕÒHå?2:#!?kÔpæ??êqBNæ]Èo?ú??ÝY???;?cPÄ?åyÁõ?ÒóÃä??ùªü?Æ6ûr3?ÏQ[ÿ µ??àÏ üO:g??gÒõ(?º?Ù#mIw$q?d*ms?@ÇÌlW?Õ?ËŸ1Ô?`?#?àþ=Åy?}ÄèÉìz8È:?X?/??
ïØ5?Ff?3å?Êý?Fä{dœ????`mëYÐ<Câ!y;?ÚÆ=>~Qc;%?žNáŽx?|y?ÙÛëZ$??ĵÓ?å:Žc9 =29ö?º?d?oxSáªXhÚËk??Ì???ùB+? /?NNyÀ?Qn?[Ù]?æËu??Ÿ.ò?kÉJjAgdÒ^ÏQ?8Q??_Jñ??ü
?L.ÍÜ~ÔË>Û?7H??d6ä`UóÉäÇZô[å]nÜÂò? pVX?*ëïž??Âÿ ?ïm>',û??ç9õÉ&?lÚŽ?Ýå}?ÿ 3?ðÔÓ?W+ù[SÁ?/
øë@???Ã???Œ&?I|??Çîœ? ?9
ÉÏpWÔ6Zž??[x?ãæ?ÿ ??YRK%ÏÖ??Ë?êâ???g<?ü
ñŸí)à?
Þ=??%Î?t??gù#= ÝŽNxÆ+cÂ?|7ã
/í??öë#n
ÒqŒnê~ldgÓ#Ö?<??âÕ?SŸf?Ûøy?MÔ`î??1?Œ?PÛ03?ƒÏ'šŸâWÄG?ºµÒ?-WG???-c??ä"aƒ!bÌUòxAêNn8Û^OU?Úð+Hõ.þØV?Žú?Üì?üVòÄÄ?ò?*?c?Ü??|\^X2?3;ñ?$?\z??N?õ5??ÝÜë?Ú
ë?dh2Q?ýã Ü?çŒõëèMg@?810Eõ|?þµyµ#ÏRRÚú?Ö?îAEëm*xòú;w&˪?ó?#n@ÁíëÇ??{?ì?ñQð?µ?4/õ?Ô>uÄEÂ??2ùm?=ƒŽ99í_6ë?Zm?k*NNÆìØÆ@úq_`þÂ^??Ðõ?Ùm??ºš#?'ß
v:r=?ô?j1+û5-WQÖ?B?~]?gÐñâx?^òjZž??(Âchã ž
Ç????XÚÎÎÚa
* d9vÀêxë^//Ã?ÔïÕÒìÚÛ??(?#V
ÁÎFGOzWµX??mŸîŽsÖ??iQ?sš?~??üæ1X??j
*:t??V?mîkªÆ#8àƒµBK?öãÔÑO?œ ?ÿÙ 3  
ÿÿÿÿ ÿÿÿÿ  ? ÿÿÿÿÿÿÿÿÿÿÿÿ ÿÿÿÿÿÿÿÿÿÿÿÿ ÿÿÿÿÿÿÿÿÿÿÿÿ Úáâãäåæçèéêñòóôõö?øùúÿÄ 












ÿÄ µ 

w
!1AQaq"2?B???Á #3RðbrÑ
$4á%ñ&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?ƒ??????Š????????š????????ª???µ????ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖ?ØÙÚâãäåæçèéêòóôõö?øùúÿÚ 
 ? ÜÕü4ÏaðGº{f?????$~5sI?âR ? úƒÞ??m8< cµrš???ôùd?O?f????[iBy;OB?õí]Pq?ä?ÇYJ/ÚÃ~ÅmFXá?8?*ø??L?ZkÖó4+f)ãþRÖ?F#ó?ÿ TÓµ??ó??H"W]Í#î8,
ÀÏ???ź<ZÇ?.,È??>?Gê+
Ô??ºî:ç9µ5mø}yq?i?ßN%?îä?û?nCøüõ?y,??'?Õg?YÈO#???.?<9?_è:??+iAŽ+?ciù[ê???CÂÕ?Ö?
Ð?ôHSdŸ2º?á'?z?àŠà????IJRM??3Ù.??}?Ê@ªUTtQØWŸøQn?I?G?å,???œóÍzEäÓýŽÙ.Ê[Êä??>FâN~æ???Z?Ë?]?fÚ?ä6?æJ?œë+o+þ,úL4cœ?ÆþêqÍ?cŽ 8P ÎkÓìõ&?á<1`;?Øôàgô?ý?ºÎÇ
Iizüƺ?IÅ?ƒÌ ?É??xÜUF?Zö?Xu^?'ÕI~??ÇÊ?ªS?Â?íë?ÌÃ`mü'}"k}F(?:?d|?Ì
?????.véÌ?äNkjÆDÕ <ï??CŸPøÖ3ZÂn?]Ý?,??1?Ìaý
m É?)t?"0v?'??X?-??ô?5+.Ý?TÓ5Øͺ?ë"Œ?"?kþ&U?xàQ=ÁRD{?>?{ò2kô9Òt?Í-?Só'Ž?*vOS\x5üSáÛ?Œ?
?=wc<}+Æ|Evú,SÙ]Ÿ&î Ëå?
ž?ê=ëÖü%ãÙ4
1?šÔ?RœívÃBýO???y?Å-JjàÉ"E$???aŸOO_ÀúRŒÔT?uÉ?úõ1êF:?uÐóáá-?ÄÖ?6??Oº
??ã#'Iý;b??_º?ÀÚéÓ4ýM
?ñGÉh3ü'?ô9#?+Ü.Œ?A/ÙAm?mlnRqÐ?ôÏã[ß>hw^?šy`Ö.?d}?W[Q??.K?1?A$rsôÁðqØŠm?P?r{ê?=ü?+ùj]%øŸ2øÞf?Æ+?žÞÙÄ?9Ü?`à?8l??˪-þ??_-^G%NÖl~Dþí><Ò??/>?Û>Õe
ËáÈ??À8??y>?g?éÖw?ÚìT? 1ÀÜq??ÛÐz?Àà_??é?ÞÒiKÏ?ôÒQçåŒ?G4ì?2$9p?ëò??lI?Óâ?P??àùxì?ŒþdW7"<?3?@v?2Ä
ÀþY?{?y??íel4?+.Õ9à?üëêoB0?Ôòç/iQµ??1ŽÆdFû?$ãÏò?Ox??1dB$3#??
Éçý?[p[Á?Ìó\0?Ü?A7uý+?ñÙ[ÍBb,R3 W ö=Ne
Õ?m?ÿ "~?â?ž?~?ýl?À?Ú?Ó]È Óã#
oåïvõge#Ÿ`p=NxÞÒ<?êò???Ü#??HÉ$ýI?ÄsÈ?bÓ?LË?)úm,AUnµùÚe?îímåa?îG?$*üg2ÏóìÁJ?;å{??à|ôpt?ùšûÇëZ5?ì?(ß??Þ+?Ópèæ$ÐtÍW?Æû?Ïïîd.ÀÊOAì*??|mc?ª5ä??0HHDBÆ?u)Rzú???CâV?1MNå?èTÿ ßDZñ(PÎ+Rú?ªù;si?\îú?coËuÝ&ÿ $trªê?ý?Ïo_šETÎy?<t?çáý?ž??\i%?CÆÎèÐ#3ÈI,Äíƒî1õ?;Âwëÿ ??e/%Ä?/æ?6òP??jÁ?Mnã2 Ô?º*yÏ\sϵ~ïÃ???-jM'&ÿ %ä???oe%(?ø?ð~ëQKÛ?$%Õ??òÙ1ÁcŽvö99;x???Hg?Ê;HÉ+
ƒÏSÈÿ ë?èÄÓæe?ò7??Á??õ?ƒþ-i?hÞ>ñ%?K?8?$(?ÀUc?ÈŠú(à(S??mw?3ÄTVižy$ù?Ï9fãëšØÔ?$þÍŠ]Ä?ßhöÈ#?Ê?C??L'=ýkfÖÒmNmPnÈÍè+ÍÅÁ*?vØç?IÔŒbSÓÒ[?ú??Üz.{ŸÃ5WT???ÔÒÈyr??džë?1è?Ó?åï[ZÞ?|!??Æ?kŸå@$ÿ ú?U?ý"ãL??$?Kq ófv%Ï??À?u>TêGKíçæ{ÔèF-Aôßü?ÓØõ)oç[x[
Œ?ÿ pzý})šœ?ÑÆö?AÑ??d
ö??yÎÏ?mµcZ}?î?œy?ÎGÜ^?ÏòQý
ªÓß??Xw
>ÝŠðr?wç?Nr{äû?âÙŽ9T?ö.ÉmcÁÁÑ?\Õ5l?ã?h?a4?nòÛHýÉÏc??8äžøD?ÔÞ??É?ÝFù?<???Œœžã'?L??Ýêb)$28Êó3ÆìdF?Ù?ÿ ë?OVñ
n(d šCß??ö?ù~ópXŒTa*P??ë???Rp?*zž?s?Âz4`ŸÞ?g=zá?èk?p?<0èÀò+ƒðí??áÏ?ýLCøqÿ Zºcªl?iSþýA??hA.Ëò<yk&V?ºêVïœó?ŸBõ?Eøã?KuñG^*?4s?w5ý}?êmFè??ÊÝ?8?ï
ùïã}âÿ ÂexAçbp?Ý?ñ5)ÝQ?ªNÌñ??&
{Y!?;Ÿ
??xóš????é\-Œüݪ;ÕwbÄòzJ?wcÔ& )?eBrUÆFGJùº?V?Þ?µ^ÏX?#Ã?â?Nñw[Ú?È?Ð?UŸ'ð?A?V?É
žk??Æ+|?tXS;Š??$?>:Ö?ªóMh??Ú?t?g?>Ý??ÞåÑ$
wp?K??ÿ ª?ÐSÐÀ?j??MÑHsåÚF:cÈ}?ÓÛëEø?èÃ?úóÿ +zDîq,ñÅ?Ÿ?D??3?
rí?ŸÇ?kÏ5?Kypð?6Z8g@Ë!îÍÜ?ÁàvéEûå8YÓ?"q???<ÜÞ?èòR??ž?ðãYvø}?Ï1T?9)??) íÝÛ ã>Õ?sâ?RE
??]Ý Èãßÿ éíEúIh?b?FÓÄÃQÔ?ÏŒÛYu79årH"?WâÜžw?oOû(?ñÑEãæo?+Ôõp+??Ðàe?{?í? ?Šù?žÚWek? 8ö?ù?PO"Š+X??ÿÙ gÙàJÇ
R a c c o u r c i v e r s P h o t o 1 1 9 . l n k

bonjour
ce serait bien que tu prennes le temps de lire ce que je te demande de faire:

donc évidemment, tu ne supprimes pas C:\WINDOWS\system32\svchost.exe !!!

trouves tu svchost.exe:exm.exe?

reposte un log hijackthis

bonsoir voila mon rapport hijackthis



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16, on 2008-01-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Online TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Program Files\Online_TV\tbOnl0.dll
O2 - BHO: (no name) - {594D3DEF-3908-5A69-B429-D9DA951E8F58} - C:\DOCUME~1\edouard\APPLIC~1\GREATF~1\interscr.exe (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbSha1.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Share Accelerator Toolbar - {f5c93451-2609-4723-a053-5c19516be1a8} - C:\Program Files\Share_Accelerator\tbSha1.dll
O3 - Toolbar: Online TV Toolbar - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - C:\Program Files\Online_TV\tbOnl0.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MediaDico] C:\Program Files\Micro Application\MediaDICO\LanceMediaDICO.exe Lancement
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: Télécharger en utilisant Download &Express - C:\Program Files\Download Express\Add_Url.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FFI - Unknown owner - C:\WINDOWS\system32\svchost.exe:exm.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 12835 bytes

SDFix: Version 1.130

Run by HP_Propriétaire on 2008-01-25 at 21:44

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

No Trojan Files Found






Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-25 21:59:09
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg40]
"ujdew"=hex:20,02,00,00,c6,54,d1,b9,45,cb,85,84,02,83,7e,8d,ec,16,83,c6,86,..
"ljej40"=hex:54,48,48,cb,ad,de,68,f9,2d,5a,94,b2,12,66,6a,55,92,1b,0b,54,d4,..
"ljej41"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
"ljej42"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
"ljej43"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
"ljej44"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\astq]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\astq.tga"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\astq\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\astq]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\astq.tga"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\astq\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}]
"DisplayName"="Alcohol 120%"

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 827


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------


Files with Hidden Attributes:

Sun 15 Jan 2006 218 A.SHR --- "C:\BOOT.BAK"
Tue 14 Feb 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Fri 13 Aug 2004 1,953,792 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\launcher.exe"
Fri 13 Aug 2004 53,760 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\mnyinsta.dll"
Fri 13 Aug 2004 94,208 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\RmvSuite.exe"
Mon 16 Aug 2004 35,328 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\setuplng.dll"
Fri 13 Aug 2004 20,480 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\unregwtr.exe"
Sun 19 Nov 2006 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Thu 17 Jan 2008 3,046 ...HR --- "C:\Documents and Settings\HP_Propri‚taire\Application Data\SecuROM\UserData\securom_v7_01.bak"
Tue 14 Feb 2006 4,348 A..H. --- "C:\Documents and Settings\HP_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Thu 5 Oct 2006 20 A..H. --- "C:\Documents and Settings\HP_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Fri 18 Aug 2006 400 A.SH. --- "C:\Documents and Settings\HP_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Sun 15 Jan 2006 497,392 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\1059f9fa18db5c659dd880c6bde1acd8\BIT9.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\175fcb601eafb4c2ac2a80afd20179a4\BIT1B.tmp"
Sun 15 Jan 2006 221,200 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\1cb61171c8bf46aa66bd49f5988112ac\BIT5.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2922e248dc4a80f30a47f8b5c778e508\BIT1A.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2d3de94317cec27c0fd13671114be92a\BIT23.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2ffcd6f975143621cd7ba191a25e7dee\BIT18.tmp"
Sun 15 Jan 2006 484,080 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\4042804c2a776995a3f497dfcca87fe6\BIT8.tmp"
Sun 15 Jan 2006 4,550,376 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5576e62bdf4567596483aab96ef54954\BITF.tmp"
Sun 15 Jan 2006 490,224 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5d517eaaa9133b0aeaba239b1f097b26\BIT4.tmp"
Sun 15 Jan 2006 160,121 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\6070200d7a7ca14424fd0e4f019a7293\BIT19.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\652df4481e78cf8db95f337e5e6fd06c\BIT20.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\6b68b1324cce927a48b49e213333287b\BIT22.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\92187aedab601bb25548bba6adc50cc9\BIT24.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\925c7afc2ba478434e358c78673b4a12\BIT1C.tmp"
Sun 15 Jan 2006 902,384 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\97e754582377d850e2164a4adca20caa\BIT12.tmp"
Sun 15 Jan 2006 151,597 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\a1a09926ba55692e4bb839d62c2c1e21\BITB.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\a42f4d4aec80f787c077283561db7334\BIT1F.tmp"
Sun 15 Jan 2006 496,368 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\a784624f51e504c24fcaaa117668f3b6\BIT2.tmp"
Sun 15 Jan 2006 485,104 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\aa5e30c9c629be6e595c0c04f3e98649\BIT16.tmp"
Sun 15 Jan 2006 398,568 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\aa84e9a6d9369755b7830c702c6b6e7f\BIT10.tmp"
Sun 15 Jan 2006 1,577,248 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\be7040d5a665d4944b8fe7b015b546ce\BITE.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\bec6ccdc2e87326a059fbc24a1ba98c2\BIT1E.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\ce8dd34f24716c36effd4f314c91c35b\BIT11.tmp"
Sun 15 Jan 2006 485,104 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\d1b29ea9af60865342221d1a1dac1909\BIT17.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\d34105cbc07cfc82a840c12d5e028679\BIT21.tmp"
Sun 15 Jan 2006 151,678 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\d4a37460d445a728eedf3490051e8fa1\BIT3.tmp"
Sun 15 Jan 2006 82,502 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\20b3cabb260cb882b3d8b497abda1f71\download\BIT4.tmp"
Sun 15 Jan 2006 208,046 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\98091b7e393d32343cd6ee6419786bb1\download\BIT6.tmp"
Sun 15 Jan 2006 167,612 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\fda4a07ab7a56c6d4616537d15334ad6\download\BIT7.tmp"

Finished!

j'ai ceci qui ai apparu a l'ecran ,je le met aussi.



catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-25 21:59:09
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg40]
"ujdew"=hex:20,02,00,00,c6,54,d1,b9,45,cb,85,84,02,83,7e,8d,ec,16,83,c6,86,..
"ljej40"=hex:54,48,48,cb,ad,de,68,f9,2d,5a,94,b2,12,66,6a,55,92,1b,0b,54,d4,..
"ljej41"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
"ljej42"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
"ljej43"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
"ljej44"=hex:b6,48,48,cb,d5,de,68,f9,2c,5a,95,b2,13,66,6a,55,92,1b,0b,54,81,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\astq]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\astq.tga"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\astq\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\astq]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\astq.tga"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\astq\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}]
"DisplayName"="Alcohol 120%"

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 827

SDFix: Version 1.130

Run by HP_Propriétaire on 2008-01-25 at 23:59

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

No Trojan Files Found






Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-26 00:15:46
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg40]
"ujdew"=hex:20,02,00,00,ee,b1,54,b9,4d,11,b4,52,ea,88,2a,ca,b4,f5,06,6f,2e,..
"ljej40"=hex:5c,92,79,1d,45,d5,3c,be,75,b9,11,1b,ba,9e,cc,6a,1a,4d,07,45,3c,..
"ljej41"=hex:be,92,79,1d,3d,d5,3c,be,74,b9,10,1b,bb,9e,cc,6a,1a,4d,07,45,69,..
"ljej42"=hex:be,92,79,1d,3d,d5,3c,be,74,b9,10,1b,bb,9e,cc,6a,1a,4d,07,45,69,..
"ljej43"=hex:be,92,79,1d,3d,d5,3c,be,74,b9,10,1b,bb,9e,cc,6a,1a,4d,07,45,69,..
"ljej44"=hex:be,92,79,1d,3d,d5,3c,be,74,b9,10,1b,bb,9e,cc,6a,1a,4d,07,45,69,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\astq]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\astq.tga"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\astq\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile"=str(2):"c:\windows\system32\ESENT.dll"
"CategoryMessageFile"=str(2):"c:\windows\system32\ESENT.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\astq]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000000
"ImagePath"=str(2):"\??\C:\WINDOWS\system32\drivers\astq.tga"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\astq\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}]
"DisplayName"="Alcohol 120%"

scanning hidden files ...


scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 827


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------


Files with Hidden Attributes:

Sun 15 Jan 2006 218 A.SHR --- "C:\BOOT.BAK"
Tue 14 Feb 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Fri 13 Aug 2004 1,953,792 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\launcher.exe"
Fri 13 Aug 2004 53,760 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\mnyinsta.dll"
Fri 13 Aug 2004 94,208 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\RmvSuite.exe"
Mon 16 Aug 2004 35,328 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\setuplng.dll"
Fri 13 Aug 2004 20,480 ...HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\unregwtr.exe"
Sun 19 Nov 2006 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Thu 17 Jan 2008 3,046 ...HR --- "C:\Documents and Settings\HP_Propri‚taire\Application Data\SecuROM\UserData\securom_v7_01.bak"
Tue 14 Feb 2006 4,348 A..H. --- "C:\Documents and Settings\HP_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Thu 5 Oct 2006 20 A..H. --- "C:\Documents and Settings\HP_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Fri 18 Aug 2006 400 A.SH. --- "C:\Documents and Settings\HP_Propri‚taire\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Sun 15 Jan 2006 497,392 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\1059f9fa18db5c659dd880c6bde1acd8\BIT9.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\175fcb601eafb4c2ac2a80afd20179a4\BIT1B.tmp"
Sun 15 Jan 2006 221,200 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\1cb61171c8bf46aa66bd49f5988112ac\BIT5.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2922e248dc4a80f30a47f8b5c778e508\BIT1A.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2d3de94317cec27c0fd13671114be92a\BIT23.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\2ffcd6f975143621cd7ba191a25e7dee\BIT18.tmp"
Sun 15 Jan 2006 484,080 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\4042804c2a776995a3f497dfcca87fe6\BIT8.tmp"
Sun 15 Jan 2006 4,550,376 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5576e62bdf4567596483aab96ef54954\BITF.tmp"
Sun 15 Jan 2006 490,224 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5d517eaaa9133b0aeaba239b1f097b26\BIT4.tmp"
Sun 15 Jan 2006 160,121 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\6070200d7a7ca14424fd0e4f019a7293\BIT19.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\652df4481e78cf8db95f337e5e6fd06c\BIT20.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\6b68b1324cce927a48b49e213333287b\BIT22.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\92187aedab601bb25548bba6adc50cc9\BIT24.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\925c7afc2ba478434e358c78673b4a12\BIT1C.tmp"
Sun 15 Jan 2006 902,384 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\97e754582377d850e2164a4adca20caa\BIT12.tmp"
Sun 15 Jan 2006 151,597 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\a1a09926ba55692e4bb839d62c2c1e21\BITB.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\a42f4d4aec80f787c077283561db7334\BIT1F.tmp"
Sun 15 Jan 2006 496,368 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\a784624f51e504c24fcaaa117668f3b6\BIT2.tmp"
Sun 15 Jan 2006 485,104 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\aa5e30c9c629be6e595c0c04f3e98649\BIT16.tmp"
Sun 15 Jan 2006 398,568 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\aa84e9a6d9369755b7830c702c6b6e7f\BIT10.tmp"
Sun 15 Jan 2006 1,577,248 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\be7040d5a665d4944b8fe7b015b546ce\BITE.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\bec6ccdc2e87326a059fbc24a1ba98c2\BIT1E.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\ce8dd34f24716c36effd4f314c91c35b\BIT11.tmp"
Sun 15 Jan 2006 485,104 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\d1b29ea9af60865342221d1a1dac1909\BIT17.tmp"
Sun 15 Jan 2006 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\d34105cbc07cfc82a840c12d5e028679\BIT21.tmp"
Sun 15 Jan 2006 151,678 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\d4a37460d445a728eedf3490051e8fa1\BIT3.tmp"
Sun 15 Jan 2006 82,502 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\20b3cabb260cb882b3d8b497abda1f71\download\BIT4.tmp"
Sun 15 Jan 2006 208,046 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\98091b7e393d32343cd6ee6419786bb1\download\BIT6.tmp"
Sun 15 Jan 2006 167,612 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\fda4a07ab7a56c6d4616537d15334ad6\download\BIT7.tmp"

Finished!

bonjour

Diaghelp montre ceci:

Tu as un fichier système infecté ---> C:\WINDOWS\system32\drivers\tcpip.sys

Fais ceci pour remettre l'original, en mode sans échec (sans le support réseau) :

Regarder d'abord si tu trouve tcpip.sys dans le dossiers suivant :
C:\WINDOWS\ServicePackFiles\i386


Tu le recopies dans C:\WINDOWS\system32\drivers\

après, tu supprimes tes versions de Combofix

puis tu fais ceci:


Désactive ton antivirus et tout autre type de protection.
Télécharge ComboFix de sUBs :
ComboFix.exe
et sauvegarde le sur ton bureau et pas ailleurs!

redémarre en mode sans echec (f8 au démarrage)

Double-clic sur ComboFix, Il va te poser une question, réponds en appuyant sur la touche1 puis attends que combofix ait terminé un rapport sera créé.

redémarre normalement:

Poste le rapport\Combofix.txt
clique dessus pour l'ouvrir, puis edititon "sélectionner tout", edition "copier"

viens sur le forum et édition "coller"

ajoute un nouveau rapport Hijackthis.

je n'ai pas ce dossier

C:\WINDOWS\ServicePackFiles\i386

bonsoir. je n'ai pas le cd de xp