RÉSOLU Virus....spywares...fichier .tmp inssuprimables...ordi lent

J'ai essayé plusieurs choses, anti-spyware (avg ) ,anti-virus, CCleaner, restaurer le système....tout...dernière option formater, mais peut-être que vous pourriez m'aider avant?


J'ai pleins de fichier .tmp qui ne veulent pas se supprimer, l'ordi est lent, il rame constament.....les programmes plantent sans arrêt....J'ai vraiment besoin d'aide....SVP.
Merci pour vos conseils.

Re Bonjour....dsl davoir oublié le bonjour ...lol...jétais certaine de planté alors jai fait ca vite...
Bon merci de bien vouloir regarder ce rapport...
Merci pour tout.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:42:25, on 2007-02-01
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe
C:\Program Files\Bell\Gestionnaire de securite\Rps.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Bell\Sympatico Security Advisor\SSAComHandler.exe
C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
C:\Program Files\Logitech\Video\LowLight.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [14cb99c8] rundll32.exe "C:\WINDOWS\system32\tpvroxyx.dll",b
O4 - HKLM\..\Run: [SSA.exe] "C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe" /AUTORUN
O4 - HKLM\..\Run: [Gestionnaire de sécurité Sympatico] "C:\Program Files\Bell\Gestionnaire de securite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\Bell\Gestionnaire de securite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [IndexCleaner] "C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe"
O4 - HKCU\..\Run: [Free Internet Eraser] C:\Program Files\PrivacyEraser Computing\Free Internet Eraser\InternetEraser.exe /Startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\RunOnce: [IndexCleaner] "C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe"
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O17 - HKLM\System\CCS\Services\Tcpip\..\{F53B7E29-14D4-42A2-9FD9-DFE63EDC749E}: NameServer = 207.164.234.129 207.164.234.193
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\xnnypacs.exe (file missing)
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: Microsoft cache control (MSControlService) - Unknown owner - C:\WINDOWS\system32\windows
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Service de mise-à-jour pour le Gestionnaire de sécurité Sympatico (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
O23 - Service: Gestionnaire de sécurité Sympatico Coupe-feu (RP_FWS) - Bell Sympatico - C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6833 bytes

voila le rapport demandé. Merci.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:35:03, on 2007-02-02
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe
C:\Program Files\Bell\Gestionnaire de securite\Rps.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Logitech\Video\LowLight.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Bell\Sympatico Security Advisor\SSAComHandler.exe
C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2d0b6678-7f3b-4689-b2a6-9374aed53e9e} - C:\WINDOWS\system32\avhlmnco.dll (file missing)
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Bell\Gestionnaire de securite\pkR.dll
O2 - BHO: (no name) - {622ED1B2-89A9-4C01-8FBE-5F8F88B843CE} - C:\WINDOWS\system32\vtstq.dll (file missing)
O2 - BHO: (no name) - {6754B84F-4C70-4D0A-8820-FE124BE08018} - C:\WINDOWS\system32\pmkjj.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {A051B1FF-8D7E-418B-AABE-4FF82F4280A2} - C:\WINDOWS\system32\opnkjgg.dll (file missing)
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\xxfvqjmv.dll
O2 - BHO: {2a4c06f9-d550-64b8-e104-26d7cf939eec} - {cee939fc-7d62-401e-8b46-055d9f60c4a2} - C:\WINDOWS\system32\ysgiujbg.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SSA.exe] "C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe" /AUTORUN
O4 - HKLM\..\Run: [Gestionnaire de sécurité Sympatico] "C:\Program Files\Bell\Gestionnaire de securite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\Bell\Gestionnaire de securite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [14cb99c8] rundll32.exe "C:\WINDOWS\system32\bvsqdobv.dll",b
O4 - HKLM\..\RunOnce: [IndexCleaner] "C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe"
O4 - HKCU\..\Run: [Free Internet Eraser] C:\Program Files\PrivacyEraser Computing\Free Internet Eraser\InternetEraser.exe /Startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\RunOnce: [IndexCleaner] "C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe"
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O17 - HKLM\System\CCS\Services\Tcpip\..\{F53B7E29-14D4-42A2-9FD9-DFE63EDC749E}: NameServer = 207.164.234.129 207.164.234.193
O20 - Winlogon Notify: opnkjgg - opnkjgg.dll (file missing)
O20 - Winlogon Notify: xxfvqjmv - C:\WINDOWS\SYSTEM32\xxfvqjmv.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\xnnypacs.exe (file missing)
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Service de mise-à-jour pour le Gestionnaire de sécurité Sympatico (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
O23 - Service: Gestionnaire de sécurité Sympatico Coupe-feu (RP_FWS) - Bell Sympatico - C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 8101 bytes

jai pas été capable den prendre une copie....^^

Voila le rapport ComboFix. Merci.

ComboFix 08-02.02.5 - cynthia 2007-02-02 12:52:14.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.204 [GMT 1:00]
Endroit: C:\Documents and Settings\cynthia\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\xxfvqjmv.dll
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\bcoihuvm.ini
C:\WINDOWS\system32\jjkmp.ini
C:\WINDOWS\system32\jjkmp.ini2
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\oqtss.ini2
C:\WINDOWS\system32\ppcnuwqy.ini
C:\WINDOWS\system32\windows
C:\WINDOWS\system32\xxfvqjmv.dll
C:\WINDOWS\system32\xxfvqjmv.dllbox

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\DomainService


((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-01-02 to 2008-02-02 ))))))))))))))))))))))))))))))))))))
.

2008-01-31 15:26 . 2007-02-02 08:14 20,480 --a------ C:\WINDOWS\quit.exe
2008-01-31 14:10 . 2007-03-06 13:24 55,296 --a------ C:\WINDOWS\system32\drivers\rp_skt32.sys
2008-01-31 14:10 . 2007-04-19 11:24 48,384 --a------ C:\WINDOWS\system32\drivers\rp_pkt32.sys
2008-01-31 14:08 . 2008-01-31 14:08 <REP> d-------- C:\Program Files\Raxco
2008-01-31 14:08 . 2008-01-31 14:08 <REP> d-------- C:\Program Files\Fichiers communs\Authentium
2008-01-31 14:08 . 2008-01-31 14:08 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Raxco
2008-01-31 14:06 . 2007-02-01 09:14 <REP> d-------- C:\Program Files\Fichiers communs\Scanner
2008-01-31 14:03 . 2008-01-31 14:03 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\InstallShield
2008-01-31 14:03 . 2008-01-31 14:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Bell
2008-01-31 13:53 . 2008-01-31 13:53 <REP> d--h----- C:\WINDOWS\PIF
2008-01-31 13:53 . 2008-01-31 13:53 <REP> d-------- C:\Program Files\Fichiers communs\WhenU
2008-01-31 13:53 . 2008-01-31 13:53 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\WhenU
2008-01-29 07:45 . 2007-02-02 12:48 <REP> dr------- C:\Documents and Settings\LocalService\Mes documents
2008-01-29 07:21 . 2008-01-31 14:04 <REP> d-------- C:\Program Files\CA
2008-01-29 07:19 . 2008-01-31 13:53 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Bell(2)
2008-01-28 09:17 . 2008-01-28 09:17 0 --a------ C:\WINDOWS\Irremote.ini
2008-01-27 12:35 . 2008-01-31 13:54 <REP> d-------- C:\Program Files\Fichiers communs\Nero
2008-01-25 19:55 . 2007-02-02 09:25 234,812 --ahs---- C:\WINDOWS\system32\qtstv.ini
2008-01-25 19:55 . 2007-02-02 09:23 234,358 --ahs---- C:\WINDOWS\system32\qtstv.ini2
2008-01-25 19:44 . 2008-01-25 19:44 70 --a------ C:\WINDOWS\8A2F1DB4.ini
2008-01-25 19:39 . 2008-01-31 14:06 <REP> d-------- C:\Program Files\Bell
2008-01-25 19:39 . 2008-01-31 13:53 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\Bell
2008-01-25 13:59 . 2008-01-25 14:00 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-01-25 13:58 . 2007-01-31 22:18 <REP> d-------- C:\Program Files\Google
2008-01-25 11:13 . 2008-01-25 11:13 321,024 --a------ C:\WINDOWS\system32\pmkjj.VIR
2008-01-25 10:50 . 2008-01-25 10:50 <REP> d-------- C:\WINDOWS\Sun
2008-01-24 17:33 . 2008-01-24 17:33 <REP> d-------- C:\TMOTM
2008-01-24 17:32 . 2008-01-24 17:32 <REP> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-01-24 17:30 . 2004-04-16 20:24 61,440 --a------ C:\WINDOWS\system32\ISUSPM.cpl
2008-01-20 16:15 . 2008-01-20 16:24 <REP> d-------- C:\Program Files\DAEMON Tools
2008-01-20 12:14 . 2008-01-20 12:14 <REP> d-------- C:\Program Files\directx
2008-01-20 11:57 . 2008-01-20 12:14 <REP> d-------- C:\Program Files\Railroad Tycoon 3
2008-01-20 11:51 . 2008-01-27 13:01 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-01-17 08:50 . 2008-01-17 08:58 <REP> d-------- C:\SXS
2008-01-17 08:50 . 2008-01-17 08:50 <REP> d-------- C:\Program Files\Logitech
2008-01-17 08:50 . 2008-01-17 08:50 81,920 -r------- C:\WINDOWS\bwUnin-6.1.4.36-8876480L.exe
2008-01-17 08:39 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-01-17 08:39 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-01-14 14:28 . 2008-01-14 14:28 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\Microsoft Games
2008-01-14 14:28 . 2008-01-14 14:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Games
2008-01-14 14:25 . 2008-01-14 14:25 <REP> d-------- C:\Program Files\Microsoft Games
2008-01-14 14:18 . 2004-05-14 16:53 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll
2008-01-14 14:18 . 2004-01-12 02:09 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll
2008-01-14 14:18 . 2003-11-04 15:10 69,632 --a------ C:\WINDOWS\system32\lfgif13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll
2008-01-14 13:50 . 2008-01-14 14:36 <REP> d-------- C:\GAMES
2008-01-14 13:31 . 2004-08-04 00:54 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2008-01-14 13:31 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-01-14 13:31 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-01-14 13:31 . 2001-08-23 17:47 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2008-01-14 11:35 . 2008-01-14 11:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2008-01-14 11:32 . 2008-01-14 11:34 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-01-13 08:21 . 2008-01-13 08:21 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\Nero
2008-01-13 08:19 . 2008-01-13 08:19 <REP> d-------- C:\Program Files\Nero
2008-01-13 08:19 . 2008-01-31 13:54 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Nero
2008-01-08 18:31 . 2008-01-08 18:31 <REP> d-------- C:\Program Files\uTorrent
2008-01-07 21:53 . 2008-01-29 15:33 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\SecondLife
2008-01-07 21:52 . 2008-01-15 11:12 <REP> d-------- C:\Program Files\SecondLife
2008-01-07 21:37 . 2008-01-07 21:37 <REP> d---s---- C:\Documents and Settings\cynthia\UserData
2008-01-07 00:33 . 2008-01-07 00:50 <REP> d-------- C:\Program Files\Tweak-XP Pro
2008-01-07 00:33 . 2008-01-07 00:33 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-01-07 00:04 . 2008-01-20 11:51 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\DivX
2008-01-07 00:02 . 2008-01-07 00:03 <REP> d-------- C:\Program Files\DivX
2008-01-07 00:01 . 2008-01-07 00:01 <REP> d-------- C:\Program Files\Java
2008-01-07 00:01 . 2008-01-07 00:01 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-01-07 00:01 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-01-06 21:27 . 2008-01-20 20:33 <REP> d-------- C:\Documents and Settings\cynthia\Contacts
2008-01-06 21:23 . 2008-01-06 21:23 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-01-06 21:22 . 2008-01-06 21:23 <REP> d-------- C:\Program Files\MSN Messenger
2008-01-06 21:18 . 2008-01-06 21:38 <REP> d--h----- C:\WINDOWS\$hf_mig$
2008-01-06 21:16 . 2008-01-06 21:16 <REP> d-------- C:\Program Files\PrivacyEraser Computing
2008-01-06 21:15 . 2008-01-25 19:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-01-06 15:12 . 2008-01-06 15:12 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2008-01-06 15:08 . 2007-01-31 22:23 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-01-06 15:07 . 2008-01-06 15:08 <REP> d-------- C:\WINDOWS\system32\drivers\umdf
2008-01-06 15:07 . 2006-05-09 20:00 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2008-01-06 12:37 . 2005-04-27 04:22 60,928 -ra------ C:\WINDOWS\system32\drivers\viamraid.sys
2008-01-06 12:32 . 2008-01-06 12:32 22 --a------ C:\WINDOWS\system32\ati64hlp.stb
2008-01-06 12:29 . 2008-01-06 12:29 <REP> d-------- C:\WINDOWS\system32\URTTemp
2008-01-06 12:28 . 2008-01-06 12:29 <REP> d-------- C:\Program Files\ATI Technologies
2008-01-06 12:28 . 2005-08-30 15:12 524,850 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.cpa
2008-01-06 12:28 . 2005-08-30 21:05 516,096 --------- C:\WINDOWS\system32\ati2sgag.exe
2008-01-06 12:28 . 2005-08-31 06:08 307,200 -ra------ C:\WINDOWS\system32\atiiiexx.dll
2008-01-06 12:28 . 2005-08-26 15:54 104,373 -ra------ C:\WINDOWS\system32\atiicdxx.dat
2008-01-06 12:28 . 2005-06-08 20:45 58,560 -ra------ C:\WINDOWS\system32\drivers\ativckxx.vp
2008-01-06 12:28 . 2005-08-31 07:01 23,936 -ra------ C:\WINDOWS\system32\drivers\ativvpxx.vp
2008-01-06 12:28 . 2005-07-02 02:54 5,496 -ra------ C:\WINDOWS\system32\atifglpf.xml
2008-01-06 12:28 . 2008-01-06 12:28 1,671 --a------ C:\WINDOWS\ATICIM.INI
2008-01-06 12:28 . 2005-08-30 15:12 929 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.vp
2008-01-06 12:24 . 2004-07-23 10:28 57,344 --a------ C:\WINDOWS\system32\vuins32.dll
2008-01-06 12:24 . 2004-07-23 10:17 42,496 --a------ C:\WINDOWS\system32\drivers\fetnd5b.sys
2008-01-06 12:24 . 2003-07-18 09:10 7,040 -ra------ C:\WINDOWS\system32\ntsim.sys
2008-01-06 12:23 . 2008-01-06 12:23 <REP> d-------- C:\Program Files\Analog Devices
2008-01-06 12:22 . 2008-01-31 13:53 <REP> d--h----- C:\Program Files\InstallShield Installation Information
2008-01-06 12:21 . 2008-01-06 12:33 <REP> d-------- C:\Program Files\VIA
2008-01-06 12:21 . 2008-01-24 17:30 <REP> d-------- C:\Program Files\Fichiers communs\InstallShield

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-03 22:33 --------- d-----w C:\Program Files\Fichiers communs\ODBC
2008-01-03 22:32 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
2008-01-03 21:42 --------- d-----w C:\Program Files\microsoft frontpage
2008-01-03 21:40 --------- d-----w C:\Program Files\Services en ligne
2008-01-03 21:39 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-12-13 18:09 972,072 ----a-w C:\WINDOWS\UNNeroMediaHome.exe
2007-12-04 08:59 972,072 ----a-w C:\WINDOWS\UNRecode.exe
2000-04-19 21:00 6,995 ----a-w C:\WINDOWS\inf\RAMDISK.SYS
2007-02-02 08:23 234,358 --sha-w C:\WINDOWS\system32\qtstv.ini2
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2d0b6678-7f3b-4689-b2a6-9374aed53e9e}]
C:\WINDOWS\system32\avhlmnco.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{622ED1B2-89A9-4C01-8FBE-5F8F88B843CE}]
C:\WINDOWS\system32\vtstq.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6754B84F-4C70-4D0A-8820-FE124BE08018}]
C:\WINDOWS\system32\pmkjj.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{cee939fc-7d62-401e-8b46-055d9f60c4a2}]
C:\WINDOWS\system32\ysgiujbg.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Free Internet Eraser"="C:\Program Files\PrivacyEraser Computing\Free Internet Eraser\InternetEraser.exe" [2007-03-09 19:30 538112]
"BlockAds"="" []
"TransTask"="" []
"Tweak-XP"="" []
"TransparentIcons"="" []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" [2007-12-13 19:10 103720]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"IndexCleaner"="C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe" [2007-05-09 12:34 61432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-04-01 10:52 1368064]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-03-26 14:40 794624]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-30 21:05 344064]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 14:21 2213160]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2003-06-30 21:00 65536]
"LogitechGalleryRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2003-06-30 20:56 188416]
"ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 21:41 196608]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-04-13 15:07 69632]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2007-03-01 14:57 153136]
"SSA.exe"="C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe" [2007-03-27 10:33 2061816]
"Gestionnaire de sécurité Sympatico"="C:\Program Files\Bell\Gestionnaire de securite\Rps.exe" [2007-05-09 12:35 311288]
"-FreedomNeedsReboot"="C:\Program Files\Bell\Gestionnaire de securite\ZkRunOnceR.exe" [2007-05-09 12:35 13816]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]
"14cb99c8"="C:\WINDOWS\system32\bvsqdobv.dll" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"IndexCleaner"="C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe" [2007-05-09 12:34 61432]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\opnkjgg]
opnkjgg.dll

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2005-04-27 04:22]
S3 Radialpoint Security Services;Gestionnaire de sécurité Sympatico;C:\WINDOWS\system32\dllhost.exe [2004-08-03 23:54]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-02 12:58:34
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
--------------------- DLLs a charg‚ sous des processus courants ---------------------

PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.2180]
-> C:\Program Files\WinRAR\rarext.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
C:\Program Files\Logitech\Video\LowLight.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-02-02 13:00:59 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-02 12:00:50
.
2008-01-06 22:41:02 --- E O F ---

Re,

J'ai désactivé tout les anti-spywares et anti-virus que j'ai....voila les rapports demandés.

Merci...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:43:26, on 2008-02-02
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Logitech\Video\LowLight.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Bell\Gestionnaire de securite\pkR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SSA.exe] "C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe" /AUTORUN
O4 - HKLM\..\Run: [Gestionnaire de sécurité Sympatico] "C:\Program Files\Bell\Gestionnaire de securite\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\Bell\Gestionnaire de securite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [IndexCleaner] "C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe"
O4 - HKCU\..\Run: [Free Internet Eraser] C:\Program Files\PrivacyEraser Computing\Free Internet Eraser\InternetEraser.exe /Startup
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O17 - HKLM\System\CCS\Services\Tcpip\..\{F53B7E29-14D4-42A2-9FD9-DFE63EDC749E}: NameServer = 207.164.234.129 207.164.234.193
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Fichiers communs\Authentium\AntiVirus\dvpapi.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Service de mise-à-jour pour le Gestionnaire de sécurité Sympatico (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\Bell\Gestionnaire de securite\rpsupdaterR.exe
O23 - Service: Gestionnaire de sécurité Sympatico Coupe-feu (RP_FWS) - Bell Sympatico - C:\Program Files\Bell\Gestionnaire de securite\Fws.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6649 bytes




Rapport ComboFix :


ComboFix 08-02.02.5 - cynthia 2008-02-02 19:40:34.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.236 [GMT 1:00]
Endroit: C:\Documents and Settings\cynthia\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\cynthia\Bureau\CFScript.txt..txt
* Création d'un nouveau point de restauration

[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]

FILE
C:\WINDOWS\system32\bvsqdobv.dll
C:\WINDOWS\system32\pmkjj.VIR
C:\WINDOWS\system32\qtstv.ini
C:\WINDOWS\system32\qtstv.ini2
.

((((((((((((((((((((((((((((( Fichiers créés 2008-01-02 to 2008-02-02 ))))))))))))))))))))))))))))))))))))
.

2008-01-31 15:26 . 2007-02-02 08:14 20,480 --a------ C:\WINDOWS\quit.exe
2008-01-31 14:10 . 2007-03-06 13:24 55,296 --a------ C:\WINDOWS\system32\drivers\rp_skt32.sys
2008-01-31 14:10 . 2007-04-19 11:24 48,384 --a------ C:\WINDOWS\system32\drivers\rp_pkt32.sys
2008-01-31 14:08 . 2008-01-31 14:08 <REP> d-------- C:\Program Files\Raxco
2008-01-31 14:08 . 2008-01-31 14:08 <REP> d-------- C:\Program Files\Fichiers communs\Authentium
2008-01-31 14:08 . 2008-01-31 14:08 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Raxco
2008-01-31 14:06 . 2007-02-01 09:14 <REP> d-------- C:\Program Files\Fichiers communs\Scanner
2008-01-31 14:03 . 2008-01-31 14:03 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\InstallShield
2008-01-31 14:03 . 2008-01-31 14:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Bell
2008-01-31 13:53 . 2008-01-31 13:53 <REP> d--h----- C:\WINDOWS\PIF
2008-01-29 07:45 . 2008-02-02 19:34 <REP> dr------- C:\Documents and Settings\LocalService\Mes documents
2008-01-29 07:21 . 2008-01-31 14:04 <REP> d-------- C:\Program Files\CA
2008-01-29 07:19 . 2008-01-31 13:53 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Bell(2)
2008-01-28 09:17 . 2008-01-28 09:17 0 --a------ C:\WINDOWS\Irremote.ini
2008-01-27 12:35 . 2008-01-31 13:54 <REP> d-------- C:\Program Files\Fichiers communs\Nero
2008-01-25 19:44 . 2008-01-25 19:44 70 --a------ C:\WINDOWS\8A2F1DB4.ini
2008-01-25 19:39 . 2008-01-31 14:06 <REP> d-------- C:\Program Files\Bell
2008-01-25 19:39 . 2008-01-31 13:53 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\Bell
2008-01-25 13:59 . 2008-01-25 14:00 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-01-25 13:58 . 2007-01-31 22:18 <REP> d-------- C:\Program Files\Google
2008-01-25 10:50 . 2008-01-25 10:50 <REP> d-------- C:\WINDOWS\Sun
2008-01-24 17:33 . 2008-01-24 17:33 <REP> d-------- C:\TMOTM
2008-01-24 17:32 . 2008-01-24 17:32 <REP> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-01-24 17:30 . 2004-04-16 20:24 61,440 --a------ C:\WINDOWS\system32\ISUSPM.cpl
2008-01-20 16:15 . 2008-01-20 16:24 <REP> d-------- C:\Program Files\DAEMON Tools
2008-01-20 12:14 . 2008-01-20 12:14 <REP> d-------- C:\Program Files\directx
2008-01-20 11:57 . 2008-01-20 12:14 <REP> d-------- C:\Program Files\Railroad Tycoon 3
2008-01-20 11:51 . 2008-01-27 13:01 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-01-17 08:50 . 2008-01-17 08:58 <REP> d-------- C:\SXS
2008-01-17 08:50 . 2008-01-17 08:50 <REP> d-------- C:\Program Files\Logitech
2008-01-17 08:50 . 2008-01-17 08:50 81,920 -r------- C:\WINDOWS\bwUnin-6.1.4.36-8876480L.exe
2008-01-17 08:39 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-01-17 08:39 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-01-14 14:28 . 2008-01-14 14:28 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\Microsoft Games
2008-01-14 14:28 . 2008-01-14 14:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Games
2008-01-14 14:25 . 2008-01-14 14:25 <REP> d-------- C:\Program Files\Microsoft Games
2008-01-14 14:18 . 2004-05-14 16:53 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll
2008-01-14 14:18 . 2004-01-12 02:09 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll
2008-01-14 14:18 . 2003-11-04 15:10 69,632 --a------ C:\WINDOWS\system32\lfgif13n.dll
2008-01-14 14:18 . 2004-05-14 16:53 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll
2008-01-14 13:50 . 2008-01-14 14:36 <REP> d-------- C:\GAMES
2008-01-14 13:31 . 2004-08-04 00:54 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2008-01-14 13:31 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-01-14 13:31 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-01-14 13:31 . 2001-08-23 17:47 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2008-01-14 11:35 . 2008-01-14 11:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2008-01-14 11:32 . 2008-01-14 11:34 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2008-01-13 08:21 . 2008-01-13 08:21 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\Nero
2008-01-13 08:19 . 2008-01-13 08:19 <REP> d-------- C:\Program Files\Nero
2008-01-13 08:19 . 2008-01-31 13:54 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Nero
2008-01-08 18:31 . 2008-01-08 18:31 <REP> d-------- C:\Program Files\uTorrent
2008-01-07 21:53 . 2008-01-29 15:33 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\SecondLife
2008-01-07 21:52 . 2008-01-15 11:12 <REP> d-------- C:\Program Files\SecondLife
2008-01-07 21:37 . 2008-01-07 21:37 <REP> d---s---- C:\Documents and Settings\cynthia\UserData
2008-01-07 00:33 . 2008-01-07 00:50 <REP> d-------- C:\Program Files\Tweak-XP Pro
2008-01-07 00:33 . 2008-01-07 00:33 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-01-07 00:04 . 2008-01-20 11:51 <REP> d-------- C:\Documents and Settings\cynthia\Application Data\DivX
2008-01-07 00:02 . 2008-01-07 00:03 <REP> d-------- C:\Program Files\DivX
2008-01-07 00:01 . 2008-01-07 00:01 <REP> d-------- C:\Program Files\Java
2008-01-07 00:01 . 2008-01-07 00:01 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-01-07 00:01 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-01-06 21:27 . 2008-01-20 20:33 <REP> d-------- C:\Documents and Settings\cynthia\Contacts
2008-01-06 21:23 . 2008-01-06 21:23 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-01-06 21:22 . 2008-01-06 21:23 <REP> d-------- C:\Program Files\MSN Messenger
2008-01-06 21:18 . 2008-01-06 21:38 <REP> d--h----- C:\WINDOWS\$hf_mig$
2008-01-06 21:16 . 2008-01-06 21:16 <REP> d-------- C:\Program Files\PrivacyEraser Computing
2008-01-06 21:15 . 2008-01-25 19:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-01-06 15:12 . 2008-01-06 15:12 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2008-01-06 15:08 . 2008-02-02 19:14 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-01-06 15:07 . 2008-01-06 15:08 <REP> d-------- C:\WINDOWS\system32\drivers\umdf
2008-01-06 15:07 . 2006-05-09 20:00 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2008-01-06 12:37 . 2005-04-27 04:22 60,928 -ra------ C:\WINDOWS\system32\drivers\viamraid.sys
2008-01-06 12:32 . 2008-01-06 12:32 22 --a------ C:\WINDOWS\system32\ati64hlp.stb
2008-01-06 12:29 . 2008-01-06 12:29 <REP> d-------- C:\WINDOWS\system32\URTTemp
2008-01-06 12:28 . 2008-01-06 12:29 <REP> d-------- C:\Program Files\ATI Technologies
2008-01-06 12:28 . 2005-08-30 15:12 524,850 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.cpa
2008-01-06 12:28 . 2005-08-30 21:05 516,096 --------- C:\WINDOWS\system32\ati2sgag.exe
2008-01-06 12:28 . 2005-08-31 06:08 307,200 -ra------ C:\WINDOWS\system32\atiiiexx.dll
2008-01-06 12:28 . 2005-08-26 15:54 104,373 -ra------ C:\WINDOWS\system32\atiicdxx.dat
2008-01-06 12:28 . 2005-06-08 20:45 58,560 -ra------ C:\WINDOWS\system32\drivers\ativckxx.vp
2008-01-06 12:28 . 2005-08-31 07:01 23,936 -ra------ C:\WINDOWS\system32\drivers\ativvpxx.vp
2008-01-06 12:28 . 2005-07-02 02:54 5,496 -ra------ C:\WINDOWS\system32\atifglpf.xml
2008-01-06 12:28 . 2008-01-06 12:28 1,671 --a------ C:\WINDOWS\ATICIM.INI
2008-01-06 12:28 . 2005-08-30 15:12 929 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.vp
2008-01-06 12:24 . 2004-07-23 10:28 57,344 --a------ C:\WINDOWS\system32\vuins32.dll
2008-01-06 12:24 . 2004-07-23 10:17 42,496 --a------ C:\WINDOWS\system32\drivers\fetnd5b.sys
2008-01-06 12:24 . 2003-07-18 09:10 7,040 -ra------ C:\WINDOWS\system32\ntsim.sys
2008-01-06 12:23 . 2008-01-06 12:23 <REP> d-------- C:\Program Files\Analog Devices
2008-01-06 12:22 . 2008-01-31 13:53 <REP> d--h----- C:\Program Files\InstallShield Installation Information
2008-01-06 12:21 . 2008-01-06 12:33 <REP> d-------- C:\Program Files\VIA
2008-01-06 12:21 . 2008-01-24 17:30 <REP> d-------- C:\Program Files\Fichiers communs\InstallShield
2008-01-06 12:20 . 2004-01-29 18:21 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2008-01-06 12:20 . 2004-08-14 03:56 5,810 -ra------ C:\WINDOWS\system32\drivers\ASACPI.sys
2008-01-06 12:20 . 2008-01-06 12:20 3,699 --a------ C:\WINDOWS\Ascd_tmp.ini
2008-01-06 12:19 . 2007-12-05 02:53 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-03 22:33 --------- d-----w C:\Program Files\Fichiers communs\ODBC
2008-01-03 22:32 --------- d-----w C:\Program Files\Fichiers communs\SpeechEngines
2008-01-03 21:42 --------- d-----w C:\Program Files\microsoft frontpage
2008-01-03 21:40 --------- d-----w C:\Program Files\Services en ligne
2008-01-03 21:39 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-12-13 18:09 972,072 ----a-w C:\WINDOWS\UNNeroMediaHome.exe
2007-12-04 08:59 972,072 ----a-w C:\WINDOWS\UNRecode.exe
2007-12-03 17:04 95,600 ----a-w C:\WINDOWS\system32\NeroCo.dll
2000-04-19 21:00 6,995 ----a-w C:\WINDOWS\inf\RAMDISK.SYS
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Free Internet Eraser"="C:\Program Files\PrivacyEraser Computing\Free Internet Eraser\InternetEraser.exe" [2007-03-09 19:30 538112]
"BlockAds"="" []
"TransTask"="" []
"Tweak-XP"="" []
"TransparentIcons"="" []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" [2007-12-13 19:10 103720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-04-01 10:52 1368064]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-03-26 14:40 794624]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-30 21:05 344064]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 14:21 2213160]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2003-06-30 21:00 65536]
"LogitechGalleryRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2003-06-30 20:56 188416]
"ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 21:41 196608]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-04-13 15:07 69632]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2007-03-01 14:57 153136]
"SSA.exe"="C:\Program Files\Bell\Sympatico Security Advisor\SSA.exe" [2007-03-27 10:33 2061816]
"Gestionnaire de sécurité Sympatico"="C:\Program Files\Bell\Gestionnaire de securite\Rps.exe" [2007-05-09 12:35 311288]
"-FreedomNeedsReboot"="C:\Program Files\Bell\Gestionnaire de securite\ZkRunOnceR.exe" [2007-05-09 12:35 13816]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"IndexCleaner"="C:\Program Files\Bell\Gestionnaire de securite\IdxClnR.exe" [2007-05-09 12:34 61432]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2008-01-17 08:50:06 169472]

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2005-04-27 04:22]
S3 Radialpoint Security Services;Gestionnaire de sécurité Sympatico;C:\WINDOWS\system32\dllhost.exe [2004-08-03 23:54]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-02 19:42:11
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-02-02 19:42:41
ComboFix-quarantined-files.txt 2008-02-02 18:42:25
ComboFix2.txt 2008-02-02 18:25:34
ComboFix3.txt 2008-02-02 12:00:59
.
2008-01-06 22:41:02 --- E O F ---

Oui!!!!! Mon Pc va bcp mieux la!!! Les fichiers TMP ont disparus.....et il est bcp plus rapide....Merci.... merci vraiment bcp pour laide!!!! )))

Bonjour,

Aujourd'hui jai fait un virus scan et il a découvert un virus du nom de :
''Is a security or a backdoor programm''. Daprès vous que dois-je faire? Le supprimer? Avez-vous un logiciel a me proposer?
Merci encore a lavance!!!

C/systeme volume information

cest un fichier .exe

Voila c'est fait!!! autre chose?!!

hahaha....Non je crois pas...Il va bien en général. Par contre , je me demandais....pourquoi j'ai des virus si je ne fais aucuns downloads sur mon PC.....Est-ce les sites visités??? Ma connexion internet??? Ma protection n'est pas suffisante?....Éclairez moi svp parce que jsuis complétement découragée...lol.