Pages internet innaccessible [Resolu]

Salut,

Depuis quand as-tu ce problème ?
Après avoir fait quoi ?

******

Télécharge MalwareByte's Anti-Malware sur ton Bureau.
Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

Une fois l'installation et la mise à jour effectuées :
Redémarre en mode sans échec
/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

• Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
• Afin de lancer la recherche, clic sur"Rechercher".
• Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :

-- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
-- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.

REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

AIDE : Tuto en images sur MBAM

voila le rapport

Malwarebytes' Anti-Malware 1.11
Version de la base de données: 599

Type de recherche: Examen complet (C:\|J:\|)
Eléments examinés: 320896
Temps écoulé: 2 hour(s), 40 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\affltid (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\kernelexe (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dot1XCfg (Trojan.Downloader) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:49, on 2008-04-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\BASTIE~1.AUB\LOCALS~1\Temp\Rar$EX00.765\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://orange.fr/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools\daemon.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SkwatAutoconnect] C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6 [...] vSniff.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6 [...] /cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activ [...] asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O21 - SSODL: Adobe Acrobat 5.0 - {6D24D6D4-99F0-2F93-E4F6-A49D92CBBF8D} - (no file)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ADSLAutoconnect - Unknown owner - C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Unknown owner - C:\Program Files\Ares\chatServer.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Security Service (KATC) - Unknown owner - C:\WINDOWS\system32\svcd\svchost.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SpIDer Guard for Windows NT (spidernt) - Doctor Web, Ltd. - C:\PROGRA~1\DrWeb\SpiderNT.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\system32\wdfmgr.exe (file missing)

--
End of file - 8673 bytes

Mêmes problèmes ?

Télécharge sur ton bureau : Clean (de Malekal) >Tuto<
Dézippe le sur ton bureau. Double-clic sur ce dossier clean.
Double-clic sur clean.cmd. (L’extension cmd peut ne pas apparaître) Cela va ouvrir une fenêtre noire.
Un menu va apparaître, choisis l'option 1 puis entrée. Ensuite appuies sur une touche comme il te sera demandé.
Poste le rapport se trouve ici : C:\rapport_clean.txt

Si tu obtiens un fichier C:\upload_moi.zip, merci de faire ceci.

Re,

Télécharge AVG Anti-Spyware Installes-le.
Si le lien ne fonctionne pas : >Clique ici<
Lance AVG et fais une mise à jour.
Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglet comment réagir, clique sur Actions recommandées. Choisis Quarantaine.
Ne fais pas d’analyse pour le moment. Fais un clique droit en bas à droite sur l'îcone d'avg, et désactive la case pour démarrer avec windows.
Redémarre en mode sans échec
/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\
Relance Avg.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions" en bas.
Clique sur "Enregistrer le rapport". Ceci génère un rapport qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
Poste le ici.
&
Toujours en mode sans échec, relance clean et fais l'option 2, poste le rapport.

Reposte un HIjackthis.
C'est mieux ?

quand je lance msn , il me dit que le probleme se situe au niveau du dns et des ports et je n'ai pas de firewall :|

je l'ai lancer en sans echec ( acces refuser en mode normal )

ComboFix 08-04-20.5 - bastien 2008-04-22 17:40:57.5 - NTFSx86 MINIMAL
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.801 [GMT 2:00]
Endroit: C:\Documents and Settings\bastien.AUBRY\Bureau\ComboFix.exe

[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\ban_list.txt

.
((((((((((((((((((((((((((((( Fichiers créés 2008-03-22 to 2008-04-22 ))))))))))))))))))))))))))))))))))))
.

2008-04-21 21:15 . 2008-04-21 21:15 2,756,420 --a------ C:\upload_moi_AUBRY.tar.gz
2008-04-21 19:54 . 2004-08-05 14:00 13,824 --a------ C:\wscntfy.exe
2008-04-21 15:45 . 2008-04-21 15:45 <REP> d-------- C:\Documents and Settings\bastien.AUBRY\Application Data\Malwarebytes
2008-04-21 15:42 . 2008-04-21 15:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-21 15:41 . 2008-04-21 15:45 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-21 15:27 . 2008-04-21 15:27 <REP> d-------- C:\Program Files\Copie de Wanadoo
2008-04-21 14:19 . 2008-04-21 14:19 <REP> d-------- C:\Program Files\Avira
2008-04-21 11:56 . 2004-08-05 14:00 482,304 --a--c--- C:\WINDOWS\system32\dllcache\pintlgnt.ime
2008-04-21 11:55 . 2004-08-05 14:00 10,096,640 --a--c--- C:\WINDOWS\system32\dllcache\hwxcht.dll
2008-04-21 11:52 . 2004-08-05 14:00 112,640 --a------ C:\WINDOWS\system32\wuauclt.exe
2008-04-21 11:52 . 2004-08-05 14:00 112,640 --a--c--- C:\WINDOWS\system32\dllcache\wuauclt.exe
2008-04-21 11:52 . 2004-08-05 14:00 93,184 --a--c--- C:\WINDOWS\system32\dllcache\iexplore.exe
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\WindowsShell.Manifest
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\system32\wuaucpl.cpl.manifest
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\system32\sapi.cpl.manifest
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\system32\ncpa.cpl.manifest
2008-04-21 11:52 . 2008-04-21 11:52 488 -rah----- C:\WINDOWS\system32\logonui.exe.manifest
2008-04-21 11:51 . 2004-08-05 14:00 218,112 --a--c--- C:\WINDOWS\system32\dllcache\wordpad.exe
2008-04-21 11:17 . 2004-08-05 14:00 452,037 -ra------ C:\txtsetup.sif
2008-04-21 11:17 . 2004-08-05 14:00 263,488 -ra------ C:\$LDR$
2008-04-20 21:37 . 2008-04-20 22:11 <REP> d-------- C:\Program Files\a-squared Free
2008-04-20 19:10 . 2008-04-20 19:10 <REP> d-------- C:\Documents and Settings\bastien.AUBRY\Application Data\Grisoft
2008-04-20 19:10 . 2008-04-20 19:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-04-20 19:10 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-04-20 13:50 . 2008-04-20 13:50 <REP> d-------- C:\Documents and Settings\bastien.AUBRY\Application Data\WildTangent
2008-04-20 13:46 . 2008-04-20 13:49 <REP> d-------- C:\Program Files\WildGames
2008-04-19 18:31 . 2008-04-20 13:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WildTangent
2008-04-19 17:29 . 2008-04-19 17:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Valve
2008-04-18 21:53 . 2008-04-19 16:20 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TrackMania
2008-04-01 15:37 . 2008-04-01 16:13 <REP> d-------- C:\Program Files\Cyanide
2008-03-24 03:13 . 2008-03-24 03:40 <REP> d-------- C:\Program Files\Defcon
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.38.890.bmp
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.25.656.bmp
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.16.562.bmp
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.10.640.bmp
2008-03-22 19:50 . 2008-04-15 15:03 <REP> d-------- C:\Program Files\Incomplete
2008-03-22 19:29 . 2008-03-22 19:29 <REP> d-------- C:\bordel

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-22 15:38 932,692,000 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-04-22 15:38 117,308 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-04-22 15:38 10,354,940 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-04-22 15:38 1,239,840 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-04-22 15:35 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\Skype
2008-04-22 14:44 --------- d-----w C:\Program Files\Steam
2008-04-22 14:33 --------- d-----w C:\Program Files\Wanadoo
2008-04-22 14:31 --------- d-----w C:\Program Files\DrWeb
2008-04-22 12:03 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\skypePM
2008-04-21 12:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2008-04-21 10:10 --------- d-----w C:\Program Files\Satsuki Decoder Pack
2008-04-21 09:51 1,837 ----a-w C:\WINDOWS\inf\COM117.tmp
2008-04-21 02:58 --------- d-----w C:\Program Files\WMV9_VCM
2008-04-21 02:44 --------- d-----w C:\Program Files\RADVideo
2008-04-21 02:24 --------- d-----w C:\Program Files\AdVantage
2008-04-21 02:22 --------- d-----w C:\Program Files\AC3Filter
2008-04-20 22:46 --------- d-----w C:\Program Files\mIRC
2008-04-20 21:14 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\Azureus
2008-04-20 20:14 --------- d-----w C:\Program Files\Webteh
2008-04-20 14:11 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-19 15:27 --------- d-----w C:\Program Files\eMule
2008-04-17 10:28 --------- d-----w C:\Program Files\SystemRequirementsLab
2008-04-15 17:16 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-15 12:58 --------- d-----w C:\Program Files\FrostWire
2008-04-07 11:02 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\Hamachi
2008-03-31 17:48 --------- d-----w C:\Program Files\Codemasters
2008-03-30 01:15 --------- d-----w C:\Program Files\FlashGet
2008-03-22 18:23 --------- d-----w C:\Program Files\Toribash-3.1
2008-03-22 00:22 --------- d-----w C:\Program Files\Frets on Fire
2008-03-16 18:09 --------- d-----w C:\Program Files\FlashFXP
2008-03-15 22:44 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-03-08 15:56 --------- d-----w C:\Program Files\Hamachi
2008-03-08 14:50 409,600 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2008-03-08 14:50 --------- d-----w C:\Program Files\Puzzle Quest
2008-03-08 10:28 --------- d-----w C:\Program Files\OpenAL
2008-03-08 10:28 --------- d-----w C:\Program Files\Infinite Interactive
2008-03-01 14:19 77,824 ----atw C:\WINDOWS\system32\DRWEBSP.DLL
2008-02-29 18:21 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2008-02-27 22:29 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-27 15:43 --------- d-----w C:\Program Files\DivX
2008-02-22 17:44 86,016 ----a-w C:\WINDOWS\system32\VACFix.exe
2008-02-21 02:05 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-02-21 02:05 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-02-19 00:22 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-02-12 17:35 43,698 ----a-w C:\WINDOWS\system32\xvid-uninstall.exe
2008-02-08 09:37 82,432 ----a-w C:\WINDOWS\system32\IEDFix.exe
2008-01-31 22:28 71,749 ----a-w C:\WINDOWS\hcextoutput.dll
2008-01-31 22:28 267,845 ----a-w C:\WINDOWS\tsc.exe
2008-01-31 22:28 1,163,344 ----a-w C:\WINDOWS\vsapi32.dll
2008-01-31 22:27 86,094 ----a-w C:\WINDOWS\BPMNT.dll
2008-01-29 01:53 612,864 ----a-w C:\WINDOWS\system32\x264vfw.dll
2008-01-25 17:58 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-01-25 17:58 22,328 ----a-w C:\Documents and Settings\bastien.AUBRY\Application Data\PnkBstrK.sys
2008-01-25 17:58 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2007-11-28 16:51 1,837 ----a-w C:\WINDOWS\inf\COM156.tmp
2006-11-10 19:33 1 ----a-w C:\Documents and Settings\bastien.AUBRY\SI.bin
2006-10-16 16:17 0 ------w C:\Documents and Settings\bastien.AUBRY\WoW-1.12.0.5595-to-0.12.1.5803-frFR-patch.exe
2006-07-18 11:13 10,536,619 ----a-w C:\Documents and Settings\bastien.AUBRY\WoW-1.11.2.5464-to-0.12.0.5496-frFR-patch.exe
2006-03-21 08:33 56 --sha-r C:\WINDOWS\system32\2918D36A84.sys
2007-06-29 02:13 56 --sha-r C:\WINDOWS\system32\784235E1D9.sys
2007-06-29 02:16 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Rasmpc]
@={9D1F87E7-4D72-41AB-9D57-D101A08F20E5}

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-12-15 12:02 482760]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-02-01 18:22 21898024]
"SkwatAutoconnect"="C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe" [2008-02-14 23:19 446464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 02:41 8523776]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 02:41 81920]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="C:\WINDOWS\system32\tscupgrd.exe" [2004-08-05 14:00 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ctmp3"= C:\WINDOWS\system32\ctmp3.acm
"vidc.VP40"= vp4vfw.dll
"msacm.l3fhg"= mp3fhg.acm
"msacm.divxa32"= divxa32.acm
"VIDC.X264"= x264vfw.dll
"VIDC.HFYU"= huffyuv.dll
"vidc.i263"= i263_32.drv
"VIDC.YV12"= yv12vfw.dll
"msacm.ac3acm"= ac3acm.acm
"msacm.lameacm"= lameACM.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows DLL Loader]
C:\WINDOWS\system32\VRT53.tmp

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AVEService"=2 (0x2)
"AntiVirMailService"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Nod32 Service"=ntmlrs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices-]
"Nod32 Service"=ntmlrs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"<NO NAME>"= :Nod32 Service
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

S0 UNPR;UNPR;C:\WINDOWS\system32\unpr.sys []
S2 ADSLAutoconnect;ADSLAutoconnect;"C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe" -z []
S2 KATC;Security Service;C:\WINDOWS\system32\svcd\svchost.exe []
S2 SPIDER;SpIDer FS Monitor for Windows NT;C:\PROGRA~1\DrWeb\spider.sys [2008-01-28 15:04]
S2 spidernt;SpIDer Guard for Windows NT;C:\PROGRA~1\DrWeb\SpiderNT.exe [2008-01-28 15:04]
S2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-05 14:00]
S3 aaudstum;aaudstum;C:\DOCUME~1\bastien\LOCALS~1\Temp\aaudstum.sys []
S3 FXDRV;FXDRV;D:\Fxdrv.sys []
S3 GameConsoleService;GameConsoleService;"C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe" [2007-11-27 23:38]
S3 hamachi_oem;PlayLinc Adapter;C:\WINDOWS\system32\DRIVERS\gan_adapter.sys [2006-08-29 00:54]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 14:28]
S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]
S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS [2003-09-04 10:38]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2007-12-23 20:50]
S3 UsbSagCom;Mobile Device Full USB Driver;C:\WINDOWS\system32\DRIVERS\UsbSagCom.sys [2007-06-29 16:20]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4dedccbe-66e8-11db-a8ed-00016cad5388}]
\Shell\AutoRun\command - F:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5ae67d2b-3814-11da-b4cd-00016cad5388}]
\Shell\AutoRun\command - F:\AutoPlay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5cb541cb-458e-11da-b4ce-00016cad5388}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{723f3635-71a2-11db-a8f9-00016cad5388}]
\Shell\AutoRun\command - H:\AUTORUN.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{828803c3-51ea-11da-b3db-806d6172696f}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{828803c4-51ea-11da-b3db-806d6172696f}]
\Shell\AutoRun\command - G:\AutoPlay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8c62a65a-5207-11da-b3e0-00016cad5388}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9aa54047-45c2-11da-b4cf-00016cad5388}]
\Shell\AutoRun\command - G:\AutoPlay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c429529b-5503-11da-a855-806d6172696f}]
\Shell\AutoRun\command - D:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c429529d-5503-11da-a855-806d6172696f}]
\Shell\AutoRun\command - F:\AutoRun.exe


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{0C397C2C-2A8E-76CD-1A66-818D6CD882A1}]
C:\WINDOWS\system32:regedt.exe
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-14 18:00:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-22 17:44:23
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 1

**************************************************************************
.
Temps d'accomplissement: 2008-04-22 17:50:08
ComboFix-quarantined-files.txt 2008-04-22 15:49:40
ComboFix2.txt 2008-02-22 02:11:10
ComboFix3.txt 2008-02-21 19:04:48
ComboFix4.txt 2007-12-25 10:24:10

Pre-Run: 8,368,533,504 octets libres
Post-Run: 8,364,036,096 octets libres

225

bagle , qu'est ce ?

ComboFix 08-04-20.5 - bastien 2008-04-22 19:03:19.8 - NTFSx86 MINIMAL
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.785 [GMT 2:00]
Endroit: C:\Documents and Settings\bastien.AUBRY\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\bastien.AUBRY\Bureau\CFScript.txt

[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]

FILE ::
C:\WINDOWS\ntmlrs.exe
C:\WINDOWS\system32\ntmlrs.exe
C:\WINDOWS\system32\unpr.sys
C:\wscntfy.exe
.

((((((((((((((((((((((((((((( Fichiers créés 2008-03-22 to 2008-04-22 ))))))))))))))))))))))))))))))))))))
.

2008-04-21 21:15 . 2008-04-21 21:15 2,756,420 --a------ C:\upload_moi_AUBRY.tar.gz
2008-04-21 15:45 . 2008-04-21 15:45 <REP> d-------- C:\Documents and Settings\bastien.AUBRY\Application Data\Malwarebytes
2008-04-21 15:42 . 2008-04-21 15:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-21 15:41 . 2008-04-21 15:45 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-21 15:27 . 2008-04-21 15:27 <REP> d-------- C:\Program Files\Copie de Wanadoo
2008-04-21 14:19 . 2008-04-21 14:19 <REP> d-------- C:\Program Files\Avira
2008-04-21 11:56 . 2004-08-05 14:00 482,304 --a--c--- C:\WINDOWS\system32\dllcache\pintlgnt.ime
2008-04-21 11:55 . 2004-08-05 14:00 10,096,640 --a--c--- C:\WINDOWS\system32\dllcache\hwxcht.dll
2008-04-21 11:52 . 2004-08-05 14:00 112,640 --a------ C:\WINDOWS\system32\wuauclt.exe
2008-04-21 11:52 . 2004-08-05 14:00 112,640 --a--c--- C:\WINDOWS\system32\dllcache\wuauclt.exe
2008-04-21 11:52 . 2004-08-05 14:00 93,184 --a--c--- C:\WINDOWS\system32\dllcache\iexplore.exe
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\WindowsShell.Manifest
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\system32\wuaucpl.cpl.manifest
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\system32\sapi.cpl.manifest
2008-04-21 11:52 . 2008-04-21 11:52 749 -rah----- C:\WINDOWS\system32\ncpa.cpl.manifest
2008-04-21 11:52 . 2008-04-21 11:52 488 -rah----- C:\WINDOWS\system32\logonui.exe.manifest
2008-04-21 11:51 . 2004-08-05 14:00 218,112 --a--c--- C:\WINDOWS\system32\dllcache\wordpad.exe
2008-04-21 11:17 . 2004-08-05 14:00 452,037 -ra------ C:\txtsetup.sif
2008-04-21 11:17 . 2004-08-05 14:00 263,488 -ra------ C:\$LDR$
2008-04-20 21:37 . 2008-04-20 22:11 <REP> d-------- C:\Program Files\a-squared Free
2008-04-20 19:10 . 2008-04-20 19:10 <REP> d-------- C:\Documents and Settings\bastien.AUBRY\Application Data\Grisoft
2008-04-20 19:10 . 2008-04-20 19:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-04-20 19:10 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-04-20 13:50 . 2008-04-20 13:50 <REP> d-------- C:\Documents and Settings\bastien.AUBRY\Application Data\WildTangent
2008-04-20 13:46 . 2008-04-20 13:49 <REP> d-------- C:\Program Files\WildGames
2008-04-19 18:31 . 2008-04-20 13:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WildTangent
2008-04-19 17:29 . 2008-04-19 17:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Valve
2008-04-18 21:53 . 2008-04-19 16:20 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TrackMania
2008-04-01 15:37 . 2008-04-01 16:13 <REP> d-------- C:\Program Files\Cyanide
2008-03-24 03:13 . 2008-03-24 03:40 <REP> d-------- C:\Program Files\Defcon
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.38.890.bmp
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.25.656.bmp
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.16.562.bmp
2008-03-22 21:07 . 2008-03-22 21:07 304,182 --a------ C:\capture.2008.03.22.20.07.10.640.bmp
2008-03-22 19:50 . 2008-04-15 15:03 <REP> d-------- C:\Program Files\Incomplete
2008-03-22 19:29 . 2008-03-22 19:29 <REP> d-------- C:\bordel

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-22 16:41 932,692,000 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-04-22 16:41 117,620 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-04-22 16:41 10,355,372 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-04-22 16:41 1,243,168 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-04-22 16:41 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\Skype
2008-04-22 16:38 --------- d-----w C:\Program Files\DrWeb
2008-04-22 15:55 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\skypePM
2008-04-22 14:44 --------- d-----w C:\Program Files\Steam
2008-04-22 14:33 --------- d-----w C:\Program Files\Wanadoo
2008-04-21 12:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2008-04-21 10:10 --------- d-----w C:\Program Files\Satsuki Decoder Pack
2008-04-21 09:51 1,837 ----a-w C:\WINDOWS\inf\COM117.tmp
2008-04-21 02:58 --------- d-----w C:\Program Files\WMV9_VCM
2008-04-21 02:44 --------- d-----w C:\Program Files\RADVideo
2008-04-21 02:24 --------- d-----w C:\Program Files\AdVantage
2008-04-21 02:22 --------- d-----w C:\Program Files\AC3Filter
2008-04-20 22:46 --------- d-----w C:\Program Files\mIRC
2008-04-20 21:14 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\Azureus
2008-04-20 20:14 --------- d-----w C:\Program Files\Webteh
2008-04-20 14:11 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-19 15:27 --------- d-----w C:\Program Files\eMule
2008-04-17 10:28 --------- d-----w C:\Program Files\SystemRequirementsLab
2008-04-15 17:16 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-15 12:58 --------- d-----w C:\Program Files\FrostWire
2008-04-07 11:02 --------- d-----w C:\Documents and Settings\bastien.AUBRY\Application Data\Hamachi
2008-03-31 17:48 --------- d-----w C:\Program Files\Codemasters
2008-03-30 01:15 --------- d-----w C:\Program Files\FlashGet
2008-03-22 18:23 --------- d-----w C:\Program Files\Toribash-3.1
2008-03-22 00:22 --------- d-----w C:\Program Files\Frets on Fire
2008-03-16 18:09 --------- d-----w C:\Program Files\FlashFXP
2008-03-15 22:44 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-03-08 15:56 --------- d-----w C:\Program Files\Hamachi
2008-03-08 14:50 409,600 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2008-03-08 14:50 --------- d-----w C:\Program Files\Puzzle Quest
2008-03-08 10:28 --------- d-----w C:\Program Files\OpenAL
2008-03-08 10:28 --------- d-----w C:\Program Files\Infinite Interactive
2008-03-01 14:19 77,824 ----atw C:\WINDOWS\system32\DRWEBSP.DLL
2008-02-29 18:21 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2008-02-27 22:29 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-27 15:43 --------- d-----w C:\Program Files\DivX
2008-02-22 17:44 86,016 ----a-w C:\WINDOWS\system32\VACFix.exe
2008-02-21 02:05 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-02-21 02:05 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-02-19 00:22 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-02-12 17:35 43,698 ----a-w C:\WINDOWS\system32\xvid-uninstall.exe
2008-02-08 09:37 82,432 ----a-w C:\WINDOWS\system32\IEDFix.exe
2008-01-31 22:28 71,749 ----a-w C:\WINDOWS\hcextoutput.dll
2008-01-31 22:28 267,845 ----a-w C:\WINDOWS\tsc.exe
2008-01-31 22:28 1,163,344 ----a-w C:\WINDOWS\vsapi32.dll
2008-01-31 22:27 86,094 ----a-w C:\WINDOWS\BPMNT.dll
2008-01-29 01:53 612,864 ----a-w C:\WINDOWS\system32\x264vfw.dll
2008-01-25 17:58 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-01-25 17:58 22,328 ----a-w C:\Documents and Settings\bastien.AUBRY\Application Data\PnkBstrK.sys
2008-01-25 17:58 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2007-11-28 16:51 1,837 ----a-w C:\WINDOWS\inf\COM156.tmp
2006-11-10 19:33 1 ----a-w C:\Documents and Settings\bastien.AUBRY\SI.bin
2006-10-16 16:17 0 ------w C:\Documents and Settings\bastien.AUBRY\WoW-1.12.0.5595-to-0.12.1.5803-frFR-patch.exe
2006-07-18 11:13 10,536,619 ----a-w C:\Documents and Settings\bastien.AUBRY\WoW-1.11.2.5464-to-0.12.0.5496-frFR-patch.exe
2006-03-21 08:33 56 --sha-r C:\WINDOWS\system32\2918D36A84.sys
2007-06-29 02:13 56 --sha-r C:\WINDOWS\system32\784235E1D9.sys
2007-06-29 02:16 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Rasmpc]
@={9D1F87E7-4D72-41AB-9D57-D101A08F20E5}

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-12-15 12:02 482760]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-02-01 18:22 21898024]
"SkwatAutoconnect"="C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe" [2008-02-14 23:19 446464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 02:41 8523776]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 02:41 81920]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="C:\WINDOWS\system32\tscupgrd.exe" [2004-08-05 14:00 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ctmp3"= C:\WINDOWS\system32\ctmp3.acm
"vidc.VP40"= vp4vfw.dll
"msacm.l3fhg"= mp3fhg.acm
"msacm.divxa32"= divxa32.acm
"VIDC.X264"= x264vfw.dll
"VIDC.HFYU"= huffyuv.dll
"vidc.i263"= i263_32.drv
"VIDC.YV12"= yv12vfw.dll
"msacm.ac3acm"= ac3acm.acm
"msacm.lameacm"= lameACM.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows DLL Loader]
C:\WINDOWS\system32\VRT53.tmp

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AVEService"=2 (0x2)
"AntiVirMailService"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"<NO NAME>"= :Nod32 Service
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\Cyanide\\GameCenter\\GameCenter.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

S2 ADSLAutoconnect;ADSLAutoconnect;"C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe" -z []
S2 SPIDER;SpIDer FS Monitor for Windows NT;C:\PROGRA~1\DrWeb\spider.sys [2008-01-28 15:04]
S2 spidernt;SpIDer Guard for Windows NT;C:\PROGRA~1\DrWeb\SpiderNT.exe [2008-01-28 15:04]
S2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-05 14:00]
S3 aaudstum;aaudstum;C:\DOCUME~1\bastien\LOCALS~1\Temp\aaudstum.sys []
S3 FXDRV;FXDRV;D:\Fxdrv.sys []
S3 GameConsoleService;GameConsoleService;"C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe" [2007-11-27 23:38]
S3 hamachi_oem;PlayLinc Adapter;C:\WINDOWS\system32\DRIVERS\gan_adapter.sys [2006-08-29 00:54]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-12-13 14:28]
S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]
S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS [2003-09-04 10:38]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2007-12-23 20:50]
S3 UsbSagCom;Mobile Device Full USB Driver;C:\WINDOWS\system32\DRIVERS\UsbSagCom.sys [2007-06-29 16:20]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4dedccbe-66e8-11db-a8ed-00016cad5388}]
\Shell\AutoRun\command - F:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5ae67d2b-3814-11da-b4cd-00016cad5388}]
\Shell\AutoRun\command - F:\AutoPlay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5cb541cb-458e-11da-b4ce-00016cad5388}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{723f3635-71a2-11db-a8f9-00016cad5388}]
\Shell\AutoRun\command - H:\AUTORUN.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{828803c3-51ea-11da-b3db-806d6172696f}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{828803c4-51ea-11da-b3db-806d6172696f}]
\Shell\AutoRun\command - G:\AutoPlay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8c62a65a-5207-11da-b3e0-00016cad5388}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9aa54047-45c2-11da-b4cf-00016cad5388}]
\Shell\AutoRun\command - G:\AutoPlay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c429529b-5503-11da-a855-806d6172696f}]
\Shell\AutoRun\command - D:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c429529d-5503-11da-a855-806d6172696f}]
\Shell\AutoRun\command - F:\AutoRun.exe


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{0C397C2C-2A8E-76CD-1A66-818D6CD882A1}]
C:\WINDOWS\system32:regedt.exe
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-14 18:00:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-22 19:06:18
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 1

**************************************************************************
.
Temps d'accomplissement: 2008-04-22 19:11:37
ComboFix-quarantined-files.txt 2008-04-22 17:11:10
ComboFix2.txt 2008-04-22 16:53:04
ComboFix3.txt 2008-04-22 15:50:09
ComboFix4.txt 2008-02-22 02:11:10
ComboFix5.txt 2008-02-21 19:04:48

Pre-Run: 8,403,738,624 octets libres
Post-Run: 8,387,506,176 octets libres

218

oui je m'en sert

oui , c'est fait
toujours le même probleme

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:05, on 2008-04-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\PROGRA~1\DrWeb\SpiderNT.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\BASTIE~1.AUB\LOCALS~1\Temp\Rar$EX00.812\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools\daemon.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SkwatAutoconnect] C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Télécharger tout avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6 [...] vSniff.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6 [...] /cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activ [...] asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5271CFCD-F93C-4C2F-BEE3-0B9310FBCCE4}: NameServer = 81.253.149.1 80.10.246.3
O17 - HKLM\System\CS7\Services\Tcpip\..\{5271CFCD-F93C-4C2F-BEE3-0B9310FBCCE4}: NameServer = 81.253.149.1 80.10.246.3
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ADSLAutoconnect - Unknown owner - C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Unknown owner - C:\Program Files\Ares\chatServer.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: SpIDer Guard for Windows NT (spidernt) - Doctor Web, Ltd. - C:\PROGRA~1\DrWeb\SpiderNT.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\system32\wdfmgr.exe (file missing)

--
End of file - 9676 bytes

Re,

Si tu désactives adsl autoconnect c'est mieux ?

Télécharge WinsockXPFix.exe

Double clique sur WinsockXPFix.exe.

Tout d'abord, cliquez sur le boutton ReG-Backup. Cela sauvegardera ton registre par précaution.
Clique sur OK, et encore une fois. Tu verras une fenêtre de sauvegarde de ton registre, tu cliqueras une nouvelle fois sur OK.

Retourne à la fenêtre principale.
Cliquez sur Fix.
Cliquez sur Yes.
Il se lancera pendant une minute ou deux et un bip se fera entendre et vous verrez cette fenêtre.

Finalement, cliquez sur OK et laissez votre PC redémarrer. Lorsqu'il se sera redémarré, tu devrais pouvoir accéder au réseau.

http://www.spychecker.com/program/winsockxpfix.html

Bien,

Reposte tout de même un dernier HijackThis.

Re,

Fixe les lignes que je t'ai mis un peu plus haut ..

Ton WINDOWS est légal ?

Ok, reposte un hIjackthis.
Mets à jour IE, installe la v7.