Bonjour, voila j'ai un sérieux problème, qui commence à m'ennuyer. Après plusieurs recherches sur différents forums, l'installation de plusieurs logiciels, je n'arrive toujours pas à régler mon problème. J'ai des publicités qui s'affichent sans cesse, lorsque je navigue sur internet. Des publicités qui s'ouvrent avec internet explorer et aussi avec Mozilla firefox que j'utilise comme navigateur.

Si quelqu'un pouvait m'aider ça serait super.

Je joint mon rapport Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:17:04, on 08/02/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Clarisse\AppData\Local\kataout.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/y [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/y [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Funk Balm] "C:\ProgramData\face bike bike.q9yyd0"
O4 - HKCU\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\EXTRA HECK MP3.chptm"
O4 - HKCU\..\Run: [kataout] c:\users\clarisse\appdata\local\kataout.exe kataout
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/re [...] dfr-fr.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

--
End of file - 7993 bytes

Voilà c'est fait, mais je ne vois pas trop en quoi ceci réglera mon problème de publicités ?!

je vous fais confiance voici le rapport :

-----------------------------[ Lop S&D V01 ]---------------------------

Microsoft Windows [version 6.0.6000] [ OS : Windows_NT ]

"C:\Users\Clarisse\Desktop\Lop SD"

[ 11/02/2008 | 17:36:50,48 ] [ PC-DES-GONGORA ]


-------------[ Listing des dossiers dans Application Data ]------------

C:\Users\Clarisse\AppData\Roaming\Adobe\Acrobat
C:\Users\Clarisse\AppData\Roaming\Adobe\ESD
C:\Users\Clarisse\AppData\Roaming\Adobe\Flash Player
C:\Users\Clarisse\AppData\Roaming\Apple Computer\iTunes
C:\Users\Clarisse\AppData\Roaming\Apple Computer\Lockdown
C:\Users\Clarisse\AppData\Roaming\Apple Computer\MobileSync
C:\Users\Clarisse\AppData\Roaming\Apple Computer\SyncServices
C:\Users\Clarisse\AppData\Roaming\Application Data\Spyware Terminator
C:\Users\Clarisse\AppData\Roaming\eSobi\eSobi2
C:\Users\Clarisse\AppData\Roaming\Identities\{13166E0B-B3BD-441F-A850-B4B5B619F47B}
C:\Users\Clarisse\AppData\Roaming\LimeWire\.AppSpecialShare
C:\Users\Clarisse\AppData\Roaming\LimeWire\.NetworkShare
C:\Users\Clarisse\AppData\Roaming\LimeWire\414splashfree.png
C:\Users\Clarisse\AppData\Roaming\LimeWire\createtimes.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\fileurns.bak
C:\Users\Clarisse\AppData\Roaming\LimeWire\fileurns.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\filters.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\gnutella.net
C:\Users\Clarisse\AppData\Roaming\LimeWire\installation.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\library.dat
C:\Users\Clarisse\AppData\Roaming\LimeWire\limewire.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\mojito.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\questions.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\responses.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\simpp.xml
C:\Users\Clarisse\AppData\Roaming\LimeWire\spam.dat
C:\Users\Clarisse\AppData\Roaming\LimeWire\tables.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\themes
C:\Users\Clarisse\AppData\Roaming\LimeWire\ttree.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\version.xml
C:\Users\Clarisse\AppData\Roaming\LimeWire\xml
C:\Users\Clarisse\AppData\Roaming\Macromedia\Flash Player
C:\Users\Clarisse\AppData\Roaming\Mozilla\Firefox
C:\Users\Clarisse\AppData\Roaming\QuickZip45.ini\QuickZip45.ini
C:\Users\Clarisse\AppData\Roaming\uTorrent\(ES) Prison.Break.S02E10.FRENCH.DVTV.XviD.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.402-caph.[VTV].avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.405.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E02.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.s04e04.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E06.VOSTFR-PM4.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E06.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.s04e07.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E08.VOSTFR.HDTV.DvX.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E09.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E10.VOSTFR-PM4.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E10.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\dht.dat
C:\Users\Clarisse\AppData\Roaming\uTorrent\dht.dat.old
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.403.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.s01e04.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\GREYS.ANATOMY.S04E01.VOSTFR.HDTV-TORTOO.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Greys.Anatomy.S04E02.VOSTF.by.Crystall.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Greys.Anatomy.S04E05.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.s04e06.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.s04e07.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Heroes.S01E16.FRENCH.HDTV.XviD-JMT.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\le secret de t‚rabithia.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\les.rois.de.la.glisse.FRENCH.DVDRip.2007.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\les.rois.de.la.glisse.FRENCH.DVDRip.2007.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Mon Beau-pŠre, Mes Parents Et Moi - DVDRip French.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\mon_beau_pere_et_moi_dvdrip_french.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E09.FRENCH.DVTV.XviD-JMT.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E11-12.FRENCH.DVTV.XviD-JMT.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E11-12.FRENCH.DVTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E13.FRENCH.HDTV.XviD-JMT.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E15-16.FRENCH.HDTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E17-18.FRENCH.HDTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E19-20.FRENCH.HVTV.XViD-KLiT.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E19-20.FRENCH.HVTV.XViD-KLiT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E21-22.FRENCH.DVTV.XviD-JMT.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E21-22.FRENCH.DVTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e05.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S03E05.VOSTFR.HDTV.XViD.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S03E05.VOSTFR.HDTV.XViD.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S03E06.VOSTFR.HDTV.XViD.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e08.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e09.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e10.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Ratatouille.FRENCH.DVDRip.XviD.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\resume.dat
C:\Users\Clarisse\AppData\Roaming\uTorrent\resume.dat.old
C:\Users\Clarisse\AppData\Roaming\uTorrent\settings.dat
C:\Users\Clarisse\AppData\Roaming\uTorrent\settings.dat.old
C:\Users\Clarisse\AppData\Roaming\uTorrent\The.Host.2006.FRENCH.SCREENER.READNFO.XviD-CiNEFOX_ALLTEAM.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\utorrent.lng
C:\Users\Clarisse\AppData\Roaming\vlc\cache
C:\Users\Clarisse\AppData\Roaming\vlc\vlcrc

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

C:\Windows\tasks\SA.DAT
C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
C:\ProgramData\Adobe
C:\ProgramData\Apple
C:\ProgramData\Apple Computer
C:\ProgramData\Application Data
C:\ProgramData\Bureau
C:\ProgramData\Desktop
C:\ProgramData\Documents
C:\ProgramData\eMule
C:\ProgramData\eSobi
C:\ProgramData\EXTRA HECK MP3.chptm
C:\ProgramData\face bike bike.ds2ri
C:\ProgramData\face bike bike.ijixm
C:\ProgramData\face bike bike.q9yyd0
C:\ProgramData\face bike bike.rmc5g
C:\ProgramData\face bike bike.w039la
C:\ProgramData\face bike bike.wlvie
C:\ProgramData\Favoris
C:\ProgramData\Favorites
C:\ProgramData\Google
C:\ProgramData\hpzinstall.log
C:\ProgramData\Menu D‚marrer
C:\ProgramData\Messenger Plus!
C:\ProgramData\Microsoft
C:\ProgramData\Microsoft Help
C:\ProgramData\ModŠles
C:\ProgramData\Spyware Terminator
C:\ProgramData\Start Menu
C:\ProgramData\start mix
C:\ProgramData\Symantec
C:\ProgramData\TEMP
C:\ProgramData\Templates
C:\ProgramData\Tool Eggs Less City

---------------[ Listing des dossiers dans C:\Program Files ]--------------

C:\Program Files\Acer Inc
C:\Program Files\Acer Zone
C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
C:\Program Files\Adobe
C:\Program Files\Alwil Software
C:\Program Files\Apple Software Update
C:\Program Files\AviSynth 2.5
C:\Program Files\Circle Developement
C:\Program Files\Common Files
C:\Program Files\CyberLink
C:\Program Files\desktop.ini
C:\Program Files\EA GAMES
C:\Program Files\eMule
C:\Program Files\eSobi
C:\Program Files\Fichiers communs
C:\Program Files\IKEA HomePlanner
C:\Program Files\InstallShield Installation Information
C:\Program Files\Internet Explorer
C:\Program Files\iPod
C:\Program Files\iTunes
C:\Program Files\Java
C:\Program Files\LimeWire
C:\Program Files\Messenger Plus! Live
C:\Program Files\Microsoft CAPICOM 2.1.0.2
C:\Program Files\Microsoft Games
C:\Program Files\Microsoft Office
C:\Program Files\Microsoft Works
C:\Program Files\Microsoft.NET
C:\Program Files\Movie Maker
C:\Program Files\Mozilla Firefox
C:\Program Files\mp3DirectCut
C:\Program Files\MSBuild
C:\Program Files\MSN
C:\Program Files\MSN Messenger
C:\Program Files\MSXML 4.0
C:\Program Files\NewTech Infosystems
C:\Program Files\Photo Story 3 for Windows
C:\Program Files\QuickTime
C:\Program Files\QuickZip4
C:\Program Files\Realtek
C:\Program Files\Red Kawa
C:\Program Files\Reference Assemblies
C:\Program Files\SC
C:\Program Files\SoftChris
C:\Program Files\Trend Micro
C:\Program Files\Uninstall Information
C:\Program Files\uTorrent
C:\Program Files\VideoLAN
C:\Program Files\Windows Calendar
C:\Program Files\Windows Collaboration
C:\Program Files\Windows Defender
C:\Program Files\Windows Journal
C:\Program Files\Windows Live
C:\Program Files\Windows Mail
C:\Program Files\Windows Media Player
C:\Program Files\Windows NT
C:\Program Files\Windows Photo Gallery
C:\Program Files\Windows Sidebar
C:\Program Files\Yahoo!

---------------[ C:\Program Files\Common Files ]--------------

C:\Program Files\Common Files\Adobe
C:\Program Files\Common Files\Apple
C:\Program Files\Common Files\DESIGNER
C:\Program Files\Common Files\InstallShield
C:\Program Files\Common Files\Java
C:\Program Files\Common Files\LightScribe
C:\Program Files\Common Files\microsoft shared
C:\Program Files\Common Files\muvee Technologies
C:\Program Files\Common Files\NewTech Infosystems
C:\Program Files\Common Files\Services
C:\Program Files\Common Files\SpeechEngines
C:\Program Files\Common Files\Symantec Shared
C:\Program Files\Common Files\System
C:\Program Files\Common Files\Wise Installation Wizard

----------------------[ Recherche avec S_Lop ]---------------------

C:\ProgramData\EXTRA HECK MP3.chptm
C:\ProgramData\face bike bike.q9yyd0
C:\ProgramData\face bike bike.rmc5g
C:\ProgramData\face bike bike.w039la
C:\ProgramData\face bike bike.wlvie

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\Program Files\Circle Developement

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LESS CITY AMEN SETUP"="\"C:\\ProgramData\\EXTRA HECK MP3.chptm\""
"Funk Balm"="\"C:\\ProgramData\\face bike bike.q9yyd0\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 localhost
::1 localhost

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-11 17:37:49
Windows 6.0.6000 NTFS
detected NTDLL code modification:
ZwEnumerateKey, ZwEnumerateValueKey, ZwQueryDirectoryFile, ZwQuerySystemInformation
scanning hidden files ...
scan completed successfully
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\Windows\system32\nvs2.inf
! EGDACCESS !


--------------------[ Fin du rapport a 17:38:00,29 ]----------------------

voilà c'est fait.

Rapport cleannavi :
Clean Navipromo version 3.4.4 commencé le 12/02/2008 à 15:24:47,48

Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 10.02.2008 à 12h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000
Internet Explorer : 7.0.6000.16575
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS



*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans C:\Windows\System32 *


* Suppression dans C:\Users\Clarisse\AppData\Local\Microsoft *


* Suppression dans C:\Users\Clarisse\AppData\Local\virtualstore\windows\system32 *


* Suppression dans C:\Users\Clarisse\AppData\Local *

kataout.exe trouvé !
Copie kataout.exe réalisée avec succès !
kataout.exe supprimé !

kataout.dat trouvé !
Copie kataout.dat réalisée avec succès !
kataout.dat supprimé !

kataout_nav.dat trouvé !
Copie kataout_nav.dat réalisée avec succès !
kataout_nav.dat supprimé !

kataout_navps.dat trouvé !
Copie kataout_navps.dat réalisée avec succès !
kataout_navps.dat supprimé !



*** Suppression dossiers dans C:\Windows ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\ProgramData ***


*** Suppression dossiers dans C:\ProgramData\Microsoft\Windows\Start Menu\Programs ***


*** Suppression dossiers dans C:\Users\Clarisse\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs ***


*** Suppression dossiers dans C:\Users\Clarisse\AppData\Local\virtualstore\Program Files ***


*** Suppression dossiers dans C:\Users\Clarisse\AppData\Roaming ***



*** Suppression fichiers ***

C:\Windows\system32\nvs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\Clarisse\AppData\Local\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans C:\Windows\system32 *


* Dans C:\Users\Clarisse\AppData\Local\Microsoft *


* Dans C:\Users\Clarisse\AppData\Local\virtualstore\windows\system32 *


* Dans C:\Users\Clarisse\AppData\Local *


*** Sauvegarde du Registre vers dossier Backupnavi ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !

*** Nettoyage terminé le 12/02/2008 à 15:28:24,30 ***






Rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:29:55, on 12/02/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\notepad.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Windows\vsnpstd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\System32\mobsync.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/y [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/y [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Funk Balm] "C:\ProgramData\face bike bike.q9yyd0"
O4 - HKCU\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\EXTRA HECK MP3.chptm"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

--
End of file - 7177 bytes

je l'ai fait voici le rapport :

-----------------------------[ Lop S&D V01 ]---------------------------

Microsoft Windows [version 6.0.6000] [ OS : Windows_NT ]

"C:\Users\Clarisse\Desktop\Lop SD"

[ 11/02/2008 | 17:36:50,48 ] [ PC-DES-GONGORA ]


-------------[ Listing des dossiers dans Application Data ]------------

C:\Users\Clarisse\AppData\Roaming\Adobe\Acrobat
C:\Users\Clarisse\AppData\Roaming\Adobe\ESD
C:\Users\Clarisse\AppData\Roaming\Adobe\Flash Player
C:\Users\Clarisse\AppData\Roaming\Apple Computer\iTunes
C:\Users\Clarisse\AppData\Roaming\Apple Computer\Lockdown
C:\Users\Clarisse\AppData\Roaming\Apple Computer\MobileSync
C:\Users\Clarisse\AppData\Roaming\Apple Computer\SyncServices
C:\Users\Clarisse\AppData\Roaming\Application Data\Spyware Terminator
C:\Users\Clarisse\AppData\Roaming\eSobi\eSobi2
C:\Users\Clarisse\AppData\Roaming\Identities\{13166E0B-B3BD-441F-A850-B4B5B619F47B}
C:\Users\Clarisse\AppData\Roaming\LimeWire\.AppSpecialShare
C:\Users\Clarisse\AppData\Roaming\LimeWire\.NetworkShare
C:\Users\Clarisse\AppData\Roaming\LimeWire\414splashfree.png
C:\Users\Clarisse\AppData\Roaming\LimeWire\createtimes.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\fileurns.bak
C:\Users\Clarisse\AppData\Roaming\LimeWire\fileurns.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\filters.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\gnutella.net
C:\Users\Clarisse\AppData\Roaming\LimeWire\installation.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\library.dat
C:\Users\Clarisse\AppData\Roaming\LimeWire\limewire.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\mojito.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\questions.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\responses.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\simpp.xml
C:\Users\Clarisse\AppData\Roaming\LimeWire\spam.dat
C:\Users\Clarisse\AppData\Roaming\LimeWire\tables.props
C:\Users\Clarisse\AppData\Roaming\LimeWire\themes
C:\Users\Clarisse\AppData\Roaming\LimeWire\ttree.cache
C:\Users\Clarisse\AppData\Roaming\LimeWire\version.xml
C:\Users\Clarisse\AppData\Roaming\LimeWire\xml
C:\Users\Clarisse\AppData\Roaming\Macromedia\Flash Player
C:\Users\Clarisse\AppData\Roaming\Mozilla\Firefox
C:\Users\Clarisse\AppData\Roaming\QuickZip45.ini\QuickZip45.ini
C:\Users\Clarisse\AppData\Roaming\uTorrent\(ES) Prison.Break.S02E10.FRENCH.DVTV.XviD.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.402-caph.[VTV].avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.405.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E02.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.s04e04.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E06.VOSTFR-PM4.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E06.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\desperate.housewives.s04e07.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E08.VOSTFR.HDTV.DvX.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E09.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E10.VOSTFR-PM4.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Desperate.Housewives.S04E10.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\dht.dat
C:\Users\Clarisse\AppData\Roaming\uTorrent\dht.dat.old
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.403.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.s01e04.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\GREYS.ANATOMY.S04E01.VOSTFR.HDTV-TORTOO.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Greys.Anatomy.S04E02.VOSTF.by.Crystall.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Greys.Anatomy.S04E05.VOSTFR-PM4.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.s04e06.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\greys.anatomy.s04e07.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Heroes.S01E16.FRENCH.HDTV.XviD-JMT.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\le secret de t‚rabithia.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\les.rois.de.la.glisse.FRENCH.DVDRip.2007.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\les.rois.de.la.glisse.FRENCH.DVDRip.2007.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Mon Beau-pŠre, Mes Parents Et Moi - DVDRip French.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\mon_beau_pere_et_moi_dvdrip_french.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E09.FRENCH.DVTV.XviD-JMT.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E11-12.FRENCH.DVTV.XviD-JMT.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E11-12.FRENCH.DVTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E13.FRENCH.HDTV.XviD-JMT.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E15-16.FRENCH.HDTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E17-18.FRENCH.HDTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E19-20.FRENCH.HVTV.XViD-KLiT.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E19-20.FRENCH.HVTV.XViD-KLiT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E21-22.FRENCH.DVTV.XviD-JMT.1.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S02E21-22.FRENCH.DVTV.XviD-JMT.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e05.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S03E05.VOSTFR.HDTV.XViD.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S03E05.VOSTFR.HDTV.XViD.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Prison.Break.S03E06.VOSTFR.HDTV.XViD.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e08.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e09.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\prison.break.s03e10.hdtv.vostfr-LBP.avi.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\Ratatouille.FRENCH.DVDRip.XviD.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\resume.dat
C:\Users\Clarisse\AppData\Roaming\uTorrent\resume.dat.old
C:\Users\Clarisse\AppData\Roaming\uTorrent\settings.dat
C:\Users\Clarisse\AppData\Roaming\uTorrent\settings.dat.old
C:\Users\Clarisse\AppData\Roaming\uTorrent\The.Host.2006.FRENCH.SCREENER.READNFO.XviD-CiNEFOX_ALLTEAM.torrent
C:\Users\Clarisse\AppData\Roaming\uTorrent\utorrent.lng
C:\Users\Clarisse\AppData\Roaming\vlc\cache
C:\Users\Clarisse\AppData\Roaming\vlc\vlcrc

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

C:\Windows\tasks\SA.DAT
C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
C:\ProgramData\Adobe
C:\ProgramData\Apple
C:\ProgramData\Apple Computer
C:\ProgramData\Application Data
C:\ProgramData\Bureau
C:\ProgramData\Desktop
C:\ProgramData\Documents
C:\ProgramData\eMule
C:\ProgramData\eSobi
C:\ProgramData\EXTRA HECK MP3.chptm
C:\ProgramData\face bike bike.ds2ri
C:\ProgramData\face bike bike.ijixm
C:\ProgramData\face bike bike.q9yyd0
C:\ProgramData\face bike bike.rmc5g
C:\ProgramData\face bike bike.w039la
C:\ProgramData\face bike bike.wlvie
C:\ProgramData\Favoris
C:\ProgramData\Favorites
C:\ProgramData\Google
C:\ProgramData\hpzinstall.log
C:\ProgramData\Menu D‚marrer
C:\ProgramData\Messenger Plus!
C:\ProgramData\Microsoft
C:\ProgramData\Microsoft Help
C:\ProgramData\ModŠles
C:\ProgramData\Spyware Terminator
C:\ProgramData\Start Menu
C:\ProgramData\start mix
C:\ProgramData\Symantec
C:\ProgramData\TEMP
C:\ProgramData\Templates
C:\ProgramData\Tool Eggs Less City

---------------[ Listing des dossiers dans C:\Program Files ]--------------

C:\Program Files\Acer Inc
C:\Program Files\Acer Zone
C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
C:\Program Files\Adobe
C:\Program Files\Alwil Software
C:\Program Files\Apple Software Update
C:\Program Files\AviSynth 2.5
C:\Program Files\Circle Developement
C:\Program Files\Common Files
C:\Program Files\CyberLink
C:\Program Files\desktop.ini
C:\Program Files\EA GAMES
C:\Program Files\eMule
C:\Program Files\eSobi
C:\Program Files\Fichiers communs
C:\Program Files\IKEA HomePlanner
C:\Program Files\InstallShield Installation Information
C:\Program Files\Internet Explorer
C:\Program Files\iPod
C:\Program Files\iTunes
C:\Program Files\Java
C:\Program Files\LimeWire
C:\Program Files\Messenger Plus! Live
C:\Program Files\Microsoft CAPICOM 2.1.0.2
C:\Program Files\Microsoft Games
C:\Program Files\Microsoft Office
C:\Program Files\Microsoft Works
C:\Program Files\Microsoft.NET
C:\Program Files\Movie Maker
C:\Program Files\Mozilla Firefox
C:\Program Files\mp3DirectCut
C:\Program Files\MSBuild
C:\Program Files\MSN
C:\Program Files\MSN Messenger
C:\Program Files\MSXML 4.0
C:\Program Files\NewTech Infosystems
C:\Program Files\Photo Story 3 for Windows
C:\Program Files\QuickTime
C:\Program Files\QuickZip4
C:\Program Files\Realtek
C:\Program Files\Red Kawa
C:\Program Files\Reference Assemblies
C:\Program Files\SC
C:\Program Files\SoftChris
C:\Program Files\Trend Micro
C:\Program Files\Uninstall Information
C:\Program Files\uTorrent
C:\Program Files\VideoLAN
C:\Program Files\Windows Calendar
C:\Program Files\Windows Collaboration
C:\Program Files\Windows Defender
C:\Program Files\Windows Journal
C:\Program Files\Windows Live
C:\Program Files\Windows Mail
C:\Program Files\Windows Media Player
C:\Program Files\Windows NT
C:\Program Files\Windows Photo Gallery
C:\Program Files\Windows Sidebar
C:\Program Files\Yahoo!

---------------[ C:\Program Files\Common Files ]--------------

C:\Program Files\Common Files\Adobe
C:\Program Files\Common Files\Apple
C:\Program Files\Common Files\DESIGNER
C:\Program Files\Common Files\InstallShield
C:\Program Files\Common Files\Java
C:\Program Files\Common Files\LightScribe
C:\Program Files\Common Files\microsoft shared
C:\Program Files\Common Files\muvee Technologies
C:\Program Files\Common Files\NewTech Infosystems
C:\Program Files\Common Files\Services
C:\Program Files\Common Files\SpeechEngines
C:\Program Files\Common Files\Symantec Shared
C:\Program Files\Common Files\System
C:\Program Files\Common Files\Wise Installation Wizard

----------------------[ Recherche avec S_Lop ]---------------------

C:\ProgramData\EXTRA HECK MP3.chptm
C:\ProgramData\face bike bike.q9yyd0
C:\ProgramData\face bike bike.rmc5g
C:\ProgramData\face bike bike.w039la
C:\ProgramData\face bike bike.wlvie

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\Program Files\Circle Developement

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LESS CITY AMEN SETUP"="\"C:\\ProgramData\\EXTRA HECK MP3.chptm\""
"Funk Balm"="\"C:\\ProgramData\\face bike bike.q9yyd0\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 localhost
::1 localhost

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-11 17:37:49
Windows 6.0.6000 NTFS
detected NTDLL code modification:
ZwEnumerateKey, ZwEnumerateValueKey, ZwQueryDirectoryFile, ZwQuerySystemInformation
scanning hidden files ...
scan completed successfully
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\Windows\system32\nvs2.inf
! EGDACCESS !


--------------------[ Fin du rapport a 17:38:00,29 ]----------------------

Si j'ai bien compris l'option 2 c'est bien "supprimer" dans le fichier Lop S& D et c'est ceci qu'il m'affiche à la fin comme rapport.

cd

ok

Je viens de remarquer qu'il faisait la même chose pour l'option 1 comme pour l'option 2 j'ai recommencé plusieurs fois mais toujours la même chose sauf que quand je lance l'option 2 il m'affiche un message en blanc sur fond rouge que je n'ai pas le temps de lire et ensuite il lance la recherche comme dans l'option 1

Voila c'est fait. mais toujours la même chose. Sauf qu'après une semaine je n'ai plus aucune publicité merci beaucoup.