Mon rapport hijackthis

Il n'y a personne pour m'aider ?

Salut,

merci pour ton aide je croyais que mon message s'etait perdu dans le forum. Donc voila le rapport de combofix :

ComboFix 08-02.03.1 - Compaq_Propriétaire 2008-02-03 11:24:40.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.626 [GMT 1:00]
Endroit: C:\Documents and Settings\Compaq_Propriétaire\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\mcrh.tmp
D:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers créés 2008-01-03 to 2008-02-03 ))))))))))))))))))))))))))))))))))))
.

2008-02-01 10:03 . 2008-02-01 10:03 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-01-30 21:48 . 2008-01-30 21:48 <REP> d-------- C:\Program Files\Tradersoft
2008-01-28 11:27 . 2008-01-28 11:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-01-28 11:22 . 2008-01-28 11:22 <REP> d-------- C:\Program Files\Bonjour
2008-01-28 11:11 . 2008-01-28 11:11 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
2008-01-09 10:13 . 2008-01-09 10:13 <REP> d-------- C:\Program Files\SNGEGT
2008-01-09 09:37 . 2008-01-09 09:42 <REP> d-------- C:\Program Files\a-squared Free
2008-01-09 09:25 . 2007-01-18 13:00 3,968 --a------ C:\WINDOWS\system32\drivers\AvgArCln.sys
2008-01-09 09:08 . 2008-01-09 09:08 <REP> d-------- C:\Documents and Settings\Compaq_Propriétaire\Application Data\PC Tools
2008-01-09 09:07 . 2008-02-03 11:04 <REP> d-------- C:\Program Files\PC Tools AntiVirus
2008-01-09 09:07 . 2008-01-09 09:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\PC Tools
2008-01-09 09:07 . 2007-09-17 13:38 22,528 --a------ C:\WINDOWS\system32\drivers\AVHook.sys
2008-01-09 09:07 . 2007-09-17 13:38 15,872 --a------ C:\WINDOWS\system32\drivers\AVRec.sys
2008-01-09 09:07 . 2007-09-17 13:38 15,872 --a------ C:\WINDOWS\system32\drivers\AVFilter.sys
2008-01-08 16:51 . 2008-01-08 16:51 <REP> d-------- C:\Documents and Settings\All Users\Application Data\fssg
2008-01-08 16:01 . 2008-01-08 16:01 <REP> d-------- C:\Program Files\RVG Software

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-02 22:27 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\utorrent
2008-02-02 18:27 --------- d-----w C:\Program Files\utorrent
2008-02-01 08:18 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-02-01 08:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-01 08:09 --------- d-----w C:\Program Files\WinamaxPoker
2008-02-01 08:07 --------- d-----w C:\Program Files\PartyGaming
2008-02-01 08:05 --------- d-----w C:\Program Files\adslTV
2008-02-01 08:04 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\vlc
2008-01-28 20:42 --------- d-----w C:\Program Files\PokerStars
2008-01-28 10:22 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-01-27 00:55 --------- d-----w C:\Program Files\Full Tilt Poker
2008-01-11 12:43 --------- d-----w C:\Program Files\Poker Tracker V2
2008-01-09 08:07 --------- d-----w C:\Program Files\F-Secure Internet Security
2008-01-09 08:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\F-Secure
2007-12-28 16:38 --------- d-----w C:\Program Files\Betfair
2007-12-21 12:58 --------- d-----w C:\Program Files\Advantage Analysis
2007-12-13 10:57 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\F-Secure
2007-12-12 13:59 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\ispnews
2007-12-12 13:56 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Lavasoft
2007-12-12 13:17 --------- d-----w C:\Program Files\Wanadoo
2007-12-10 15:33 --------- d-----w C:\Program Files\Kaspersky
2007-12-10 14:08 --------- d-----w C:\Program Files\Windows Live Safety Center
2007-12-10 13:42 --------- d-----w C:\Program Files\CCleaner
2007-12-06 22:35 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Skype
2007-12-04 22:17 --------- d-----w C:\Program Files\Google
2006-10-20 17:45 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
2006-09-10 19:34 722 ----a-w C:\Documents and Settings\Compaq_Propriétaire\Application Data\wklnhst.dat
2006-06-02 18:06 56 --sh--r C:\WINDOWS\system32\C54D7C50DC.sys
2004-08-05 18:00 590,848 --sh--r C:\WINDOWS\system32\scvhost32.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B5697FE6-ADBE-468A-A5B0-2064F2D98818}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="C:\Program Files\Wanadoo\Shell.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 19:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-14 04:05 344064]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 57344 C:\WINDOWS\ALCXMNTR.EXE]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 00:44 61440]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPwuSchd2.exe" [2005-02-17 06:11 49152]
"SVCHost Protocol32"="scvhost32.exe" [2004-08-05 19:00 590848 C:\WINDOWS\system32\scvhost32.exe]
"POEngine"="C:\Program Files\PokerOffice\POEngine.exe" [2007-02-22 16:17 475136]
"PCTAVApp"="C:\Program Files\PC Tools AntiVirus\PCTAV.exe" [2007-10-04 15:44 1082664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"SVCHost Protocol32"="scvhost32.exe" [2004-08-05 19:00 590848 C:\WINDOWS\system32\scvhost32.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 19:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ljjkifc]
ljjkifc.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\POEngine]
--a------ 2007-02-22 16:17 475136 C:\Program Files\PokerOffice\POEngine.exe

R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 06:08]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-02 11:19:21 C:\WINDOWS\Tasks\User_Feed_Synchronization-{4B76AB55-912E-4D8E-996E-8C92192C2900}.job"
- C:\WINDOWS\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-03 11:28:11
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-02-03 11:28:40
ComboFix-quarantined-files.txt 2008-02-03 10:28:26
.
2008-02-01 09:04:51 --- E O F ---

Il n'y a pas eu de redemarrage, voila les rapports :

Combofix :
ComboFix 08-02.03.1 - Compaq_Propriétaire 2008-02-03 15:37:29.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.627 [GMT 1:00]
Endroit: C:\Documents and Settings\Compaq_Propriétaire\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\Compaq_Propriétaire\Bureau\CFScript.txt
* Création d'un nouveau point de restauration

FILE
C:\WINDOWS\system32\scvhost32.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\scvhost32.exe

.
((((((((((((((((((((((((((((( Fichiers créés 2008-01-03 to 2008-02-03 ))))))))))))))))))))))))))))))))))))
.

2008-02-03 15:37 . 2008-02-03 15:40 53,248 --a------ C:\WINDOWS\PSEXESVC.EXE
2008-02-01 10:03 . 2008-02-01 10:03 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-01-30 21:48 . 2008-01-30 21:48 <REP> d-------- C:\Program Files\Tradersoft
2008-01-28 11:27 . 2008-01-28 11:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-01-28 11:22 . 2008-01-28 11:22 <REP> d-------- C:\Program Files\Bonjour
2008-01-28 11:11 . 2008-01-28 11:11 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
2008-01-09 10:13 . 2008-01-09 10:13 <REP> d-------- C:\Program Files\SNGEGT
2008-01-09 09:37 . 2008-01-09 09:42 <REP> d-------- C:\Program Files\a-squared Free
2008-01-09 09:25 . 2007-01-18 13:00 3,968 --a------ C:\WINDOWS\system32\drivers\AvgArCln.sys
2008-01-09 09:08 . 2008-01-09 09:08 <REP> d-------- C:\Documents and Settings\Compaq_Propriétaire\Application Data\PC Tools
2008-01-09 09:07 . 2008-02-03 15:28 <REP> d-------- C:\Program Files\PC Tools AntiVirus
2008-01-09 09:07 . 2008-01-09 09:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\PC Tools
2008-01-09 09:07 . 2007-09-17 13:38 22,528 --a------ C:\WINDOWS\system32\drivers\AVHook.sys
2008-01-09 09:07 . 2007-09-17 13:38 15,872 --a------ C:\WINDOWS\system32\drivers\AVRec.sys
2008-01-09 09:07 . 2007-09-17 13:38 15,872 --a------ C:\WINDOWS\system32\drivers\AVFilter.sys
2008-01-08 16:51 . 2008-01-08 16:51 <REP> d-------- C:\Documents and Settings\All Users\Application Data\fssg
2008-01-08 16:01 . 2008-01-08 16:01 <REP> d-------- C:\Program Files\RVG Software

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-03 11:28 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\utorrent
2008-02-02 18:27 --------- d-----w C:\Program Files\utorrent
2008-02-01 08:18 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-02-01 08:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-01 08:09 --------- d-----w C:\Program Files\WinamaxPoker
2008-02-01 08:07 --------- d-----w C:\Program Files\PartyGaming
2008-02-01 08:05 --------- d-----w C:\Program Files\adslTV
2008-02-01 08:04 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\vlc
2008-01-28 20:42 --------- d-----w C:\Program Files\PokerStars
2008-01-28 10:22 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-01-27 00:55 --------- d-----w C:\Program Files\Full Tilt Poker
2008-01-11 12:43 --------- d-----w C:\Program Files\Poker Tracker V2
2008-01-09 08:07 --------- d-----w C:\Program Files\F-Secure Internet Security
2008-01-09 08:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\F-Secure
2007-12-28 16:38 --------- d-----w C:\Program Files\Betfair
2007-12-21 12:58 --------- d-----w C:\Program Files\Advantage Analysis
2007-12-13 10:57 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\F-Secure
2007-12-12 13:59 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\ispnews
2007-12-12 13:56 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Lavasoft
2007-12-12 13:17 --------- d-----w C:\Program Files\Wanadoo
2007-12-10 15:33 --------- d-----w C:\Program Files\Kaspersky
2007-12-10 14:08 --------- d-----w C:\Program Files\Windows Live Safety Center
2007-12-10 13:42 --------- d-----w C:\Program Files\CCleaner
2007-12-06 22:35 --------- d-----w C:\Documents and Settings\Compaq_Propriétaire\Application Data\Skype
2007-12-04 22:17 --------- d-----w C:\Program Files\Google
2006-10-20 17:45 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
2006-09-10 19:34 722 ----a-w C:\Documents and Settings\Compaq_Propriétaire\Application Data\wklnhst.dat
2006-06-02 18:06 56 --sh--r C:\WINDOWS\system32\C54D7C50DC.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="C:\Program Files\Wanadoo\Shell.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 19:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-14 04:05 344064]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 57344 C:\WINDOWS\ALCXMNTR.EXE]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 00:44 61440]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPwuSchd2.exe" [2005-02-17 06:11 49152]
"POEngine"="C:\Program Files\PokerOffice\POEngine.exe" [2007-02-22 16:17 475136]
"PCTAVApp"="C:\Program Files\PC Tools AntiVirus\PCTAV.exe" [2007-10-04 15:44 1082664]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 19:00 15360]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\POEngine]
--a------ 2007-02-22 16:17 475136 C:\Program Files\PokerOffice\POEngine.exe

R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 06:08]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-03 14:30:11 C:\WINDOWS\Tasks\User_Feed_Synchronization-{4B76AB55-912E-4D8E-996E-8C92192C2900}.job"
- C:\WINDOWS\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-03 15:41:02
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-02-03 15:41:29
ComboFix-quarantined-files.txt 2008-02-03 14:41:15
ComboFix2.txt 2008-02-03 10:28:40
.
2008-02-01 09:04:51 --- E O F ---


Le hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:44:26, on 03/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\HP\KBD\KBD.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PokerOffice\bin\javaw.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.boursorama.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/i [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.metacrawl.ws
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [POEngine] "C:\Program Files\PokerOffice\POEngine.exe" C:\Program Files\PokerOffice
O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/r [...] se4009.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wi [...] 3755304859
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/download [...] _en_dl.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
O23 - Service: USBest Service Zero (UTSCSI) - Unknown owner - C:\WINDOWS\system32\UTSCSI.EXE

--
End of file - 6432 bytes

J'ai l'impression que ça tourne correctement maintenant, j'avais peur d'avoir un spyware caché.
J'ai pctools comme antivirus (gratuit), est ce que tu penses que c correct ou est ce que je devrai prendre autre chose ? (comme celui dont vous parlez dans le message de prevention)

Merci pour ton aide.

merci :-)