fenetre intempestive

bonjour,

depuis plusieurs jours il y a des fenetre qui s'ouvre au de demarrage de ie .
voici le rapport hijackthis ci joint.
merci d'avance pour votre aide.

voici le raport que j'ais oubliés de joindre.
merci d'avance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:34:08, on 13/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\ArcSoft\PhotoImpression 5\PI Monitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Multimedia Mouse Driver\MouseDrv.exe
C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [_SetRes] c:\hp\bin\cloaker c:\hp\bin\res.bat
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Multimedia Mouse Driver\StartAutorun.exe MouseDrv.exe
O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [thirdonline] C:\DOCUME~1\HP_PRO~1\APPLIC~1\POLLMP~1\web joy.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: PI Monitor.lnk = C:\Program Files\ArcSoft\PhotoImpression 5\PI Monitor.exe
O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\AntivirusFirewall\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/bina [...] b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Reg [...] lashax.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 12439 bytes

bonjour,
voici le raport.


-----------------------[ Lop S&D 4.2.0-9 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : HP_Propri‚taire ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 28/05/2008 | 20:50:24,42 ] [ PC : NOM-EB85C523610 ]
[ MAJ : 16-05-2008 | 23:35 ]

-------------[ Listing des dossiers dans Application Data ]------------

[02/05/2008|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
[02/01/2006|20:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[02/10/2007|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[24/01/2007|20:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[02/01/2006|20:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[09/09/2007|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[29/08/2007|21:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[02/01/2006|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Hewlett-Packard
[02/01/2006|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[02/01/2006|20:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
[02/01/2006|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[30/08/2007|11:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[18/03/2008|09:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MGS
[17/03/2008|08:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[02/01/2006|19:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[02/01/2006|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
[13/09/2007|19:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[17/03/2008|18:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
[30/08/2007|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WindowsLiveInstaller
[15/03/2008|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[23/11/2004|17:13] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[27/10/2005|00:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[30/08/2007|08:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[02/01/2006|20:11] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real

[31/10/2007|18:17] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Adobe
[31/10/2007|18:18] C:\DOCUME~1\HP_PRO~1\APPLIC~1\AdobeUM
[02/10/2007|20:56] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Ahead
[12/04/2008|14:58] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ArcSoft
[01/03/2007|20:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\CyberLink
[23/11/2004|17:13] C:\DOCUME~1\HP_PRO~1\APPLIC~1\desktop.ini
[31/08/2007|12:26] C:\DOCUME~1\HP_PRO~1\APPLIC~1\FotoWire
[09/09/2007|10:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\F-Secure
[30/08/2007|08:20] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Google
[13/12/2006|16:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HP
[13/11/2006|13:36] C:\DOCUME~1\HP_PRO~1\APPLIC~1\HPQ
[27/10/2005|00:34] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Identities
[12/04/2008|14:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\InterTrust
[09/09/2007|10:09] C:\DOCUME~1\HP_PRO~1\APPLIC~1\ispnews
[06/02/2008|13:05] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Leadertech
[23/08/2007|16:22] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Macromedia
[15/03/2008|22:53] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Microsoft
[29/08/2007|09:37] C:\DOCUME~1\HP_PRO~1\APPLIC~1\MSNInstaller
[26/04/2008|14:21] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PatchUpdate_HP_CounterReport_Update_HPSU.log
[09/09/2007|10:19] C:\DOCUME~1\HP_PRO~1\APPLIC~1\PEX
[02/05/2008|15:10] C:\DOCUME~1\HP_PRO~1\APPLIC~1\poll mp3 find
[18/01/2007|21:45] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Real
[06/02/2008|13:12] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sonic
[24/11/2007|22:44] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Sun
[30/11/2006|21:29] C:\DOCUME~1\HP_PRO~1\APPLIC~1\Template
[17/03/2008|18:14] C:\DOCUME~1\HP_PRO~1\APPLIC~1\TuneUp Software
[20/03/2008|19:16] C:\DOCUME~1\HP_PRO~1\APPLIC~1\wklnhst.dat

[29/04/2008|21:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[01/03/2007|20:46] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help
[29/04/2008|21:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[30/08/2007|03:30] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[28/05/2008 15:00][--ah-----] C:\WINDOWS\tasks\B2BA70A29F9A1A46.job
[28/05/2008 15:00][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
[28/05/2008 14:54][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[28/05/2008 09:34][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
[19/05/2008 16:38][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 13:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

B2BA70A29F9A1A46.job <--> c:\docume~1\hp_pro~1\applic~1\pollmp~1\mpegupwindow.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[24/01/2007|20:40] C:\Program Files\ABBYY FineReader 5.0 Sprint
[24/01/2007|20:39] C:\Program Files\ABBYY FineReader 6.0
[12/04/2008|14:53] C:\Program Files\Adobe
[02/10/2007|20:31] C:\Program Files\Ahead
[09/09/2007|09:51] C:\Program Files\AntivirusFirewall
[12/04/2008|14:54] C:\Program Files\ArcSoft
[02/01/2006|19:53] C:\Program Files\ATI Technologies
[23/04/2008|20:06] C:\Program Files\Circle Developement
[20/10/2005|21:06] C:\Program Files\ComPlus Applications
[02/01/2006|20:14] C:\Program Files\CyberLink
[04/05/2008|08:38] C:\Program Files\eMule
[24/01/2007|20:39] C:\Program Files\FaxTools
[17/03/2008|18:12] C:\Program Files\Fichiers communs
[30/08/2007|04:04] C:\Program Files\Google
[02/01/2006|20:42] C:\Program Files\Hewlett-Packard
[02/01/2006|20:13] C:\Program Files\HP
[12/04/2008|14:54] C:\Program Files\InstallShield Installation Information
[10/04/2008|11:03] C:\Program Files\Internet Explorer
[23/08/2007|15:04] C:\Program Files\Inventel
[29/04/2008|11:20] C:\Program Files\Java
[13/09/2007|19:15] C:\Program Files\jv16 PowerTools 2007
[24/01/2007|20:35] C:\Program Files\Lexmark 1200 Series
[31/08/2007|12:26] C:\Program Files\Logitech
[02/01/2006|19:45] C:\Program Files\Messenger
[23/04/2008|20:06] C:\Program Files\Messenger Plus! Live
[29/08/2007|18:00] C:\Program Files\MessengerPlus! 3
[16/12/2007|09:37] C:\Program Files\Micro Application
[30/08/2007|14:02] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[27/10/2005|00:36] C:\Program Files\microsoft frontpage
[02/01/2006|20:17] C:\Program Files\Microsoft Office
[15/03/2008|22:50] C:\Program Files\Microsoft SQL Server Compact Edition
[02/01/2006|20:17] C:\Program Files\Microsoft Works
[27/10/2005|00:36] C:\Program Files\Movie Maker
[20/09/2006|14:12] C:\Program Files\MSN
[27/10/2005|00:36] C:\Program Files\MSN Gaming Zone
[30/08/2007|03:12] C:\Program Files\MSXML 4.0
[31/08/2007|13:04] C:\Program Files\Multimedia Mouse Driver
[02/01/2006|20:19] C:\Program Files\muvee Technologies
[27/10/2005|00:36] C:\Program Files\NetMeeting
[27/10/2005|00:36] C:\Program Files\Online Services
[30/08/2007|03:36] C:\Program Files\Outlook Express
[02/01/2006|20:25] C:\Program Files\PC-Doctor 5 for Windows
[20/04/2008|21:00] C:\Program Files\PokerStars
[02/05/2008|15:09] C:\Program Files\poll mp3 find
[02/01/2006|20:10] C:\Program Files\Real
[13/09/2007|19:11] C:\Program Files\RegCleaner
[02/01/2006|20:29] C:\Program Files\Services en ligne
[02/01/2006|20:12] C:\Program Files\Sonic
[13/05/2008|19:31] C:\Program Files\Trend Micro
[26/04/2008|15:33] C:\Program Files\TuneUp Utilities 2008
[20/10/2005|21:06] C:\Program Files\Uninstall Information
[19/05/2008|16:38] C:\Program Files\Wanadoo
[17/03/2008|08:35] C:\Program Files\Windows Live
[15/03/2008|22:50] C:\Program Files\Windows Live Favorites
[15/03/2008|22:50] C:\Program Files\Windows Live Toolbar
[30/08/2007|03:38] C:\Program Files\Windows Media Player
[27/10/2005|00:36] C:\Program Files\Windows NT
[20/10/2005|21:05] C:\Program Files\WindowsUpdate
[27/10/2005|00:37] C:\Program Files\xerox

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[12/04/2008|14:53] C:\Program Files\Fichiers communs\Adobe
[02/10/2007|20:26] C:\Program Files\Fichiers communs\Ahead
[23/08/2007|16:20] C:\Program Files\Fichiers communs\AOL
[31/08/2007|12:26] C:\Program Files\Fichiers communs\FotoWire
[02/01/2006|20:00] C:\Program Files\Fichiers communs\Hewlett-Packard
[02/01/2006|19:57] C:\Program Files\Fichiers communs\HP
[02/01/2006|20:26] C:\Program Files\Fichiers communs\InstallShield
[02/01/2006|19:41] C:\Program Files\Fichiers communs\Java
[31/08/2007|12:19] C:\Program Files\Fichiers communs\Logitech
[14/09/2006|18:37] C:\Program Files\Fichiers communs\Micro Application Shared
[15/03/2008|22:42] C:\Program Files\Fichiers communs\Microsoft Shared
[27/10/2005|00:35] C:\Program Files\Fichiers communs\MSSoap
[02/01/2006|20:19] C:\Program Files\Fichiers communs\muvee Technologies
[02/10/2007|20:30] C:\Program Files\Fichiers communs\Nero
[27/10/2005|00:35] C:\Program Files\Fichiers communs\ODBC
[02/01/2006|20:10] C:\Program Files\Fichiers communs\Real
[27/10/2005|00:35] C:\Program Files\Fichiers communs\Services
[02/01/2006|20:11] C:\Program Files\Fichiers communs\Sonic Shared
[27/10/2005|00:35] C:\Program Files\Fichiers communs\SpeechEngines
[02/01/2006|20:12] C:\Program Files\Fichiers communs\SureThing Shared
[13/09/2007|19:31] C:\Program Files\Fichiers communs\Symantec Shared
[30/08/2007|03:36] C:\Program Files\Fichiers communs\System
[02/01/2006|20:12] C:\Program Files\Fichiers communs\TiVo Shared
[15/03/2008|22:48] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[29/04/2008|21:12] C:\Program Files\Fichiers communs\Wise Installation Wizard
[02/01/2006|20:10] C:\Program Files\Fichiers communs\xing shared

---------------------------[ Process ]--------------------------

... 66

IEXPLORE.EXE ~ [188]
IEXPLORE.EXE ~ [5040]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Admin Inter 1 Mags\city license.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\pollmp~1
C:\DOCUME~1\HP_PRO~1\APPLIC~1\pollmp~1\Army noun book file.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\pollmp~1\kgyvpbcs.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\pollmp~1\mpeg up window.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\pollmp~1\web joy.exe
C:\DOCUME~1\HP_PRO~1\APPLIC~1\pollmp~1\zufzxbbw.exe
C:\Program Files\pollmp~1
C:\Program Files\Circle Developement
C:\Program Files\Circle Developement\Uninstall.exe
C:\WINDOWS\Tasks\B2BA70A29F9A1A46.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"thirdonline"="C:\\DOCUME~1\\HP_PRO~1\\APPLIC~1\\POLLMP~1\\web joy.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-28 20:51:49
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

C:\WINDOWS\pack.epk
C:\WINDOWS\system32\nvs2.inf
! EGDACCESS !

=> C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.a67bc53dc3f76ad51f07ff7b93734168.inf
=> C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.b49d2ddd320948ad790aa39df760c775.inf
=> C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjack1.f97d5f24e7d2d1a2b7f52b4dc211ed43.inf
=> C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.30e8e1c899235111d3b1b84c91bce0ae.inf
=> C:\Documents and Settings\All Users\Application Data\MGS\cache\c\crackerjackcommon.b4fc0002a0c341b1251a31ea5012f803.inf


[F:185][D:6]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
[F:685][D:0]-> C:\DOCUME~1\HP_PRO~1\Cookies
[F:16243][D:20]-> C:\DOCUME~1\HP_PRO~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 20:53:05,54 ]----------------------
merci d'avance.

voici le rapports merci

Search Navipromo version 3.5.7 commencé le 17/06/2008 à 21:34:37,07

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "HP_Propriétaire"

Mise à jour le 11.05.2008 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\HP_Propriétaire\menudm~1\progra~1" ***

...\InternetGameBox trouvé !
*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Fichier(s) caché(s) :

C:\WINDOWS\system32\eammuw.dat
C:\WINDOWS\system32\eammuw.exe
C:\WINDOWS\system32\eammuw_nav.dat
C:\WINDOWS\system32\eammuw_navps.dat


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" *



*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32\nvs2.inf trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

eammuw.dat trouvé !

* Dans "C:\Documents and Settings\HP_Propriétaire\locals~1\applic~1" :


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 17/06/2008 à 21:48:32,03 ***