[résolu] Bonjour jai des probleme avec options internet onglet confidentialité je fait parametre par defaut quen je ferme je re ouvre il se remet au minimum

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:58:21, on 12/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\PROGRA~1\MICROS~1\rapimgr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {43FCD2CF-5569-4208-97D2-52748E0EF6A0} - C:\WINDOWS\system32\byXNhgdC.dll
O2 - BHO: (no name) - {639E73F6-4D2E-4C01-B9D8-709CABF862AB} - C:\WINDOWS\system32\tuvVOFUK.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: (no name) - {F41032AF-63EE-4444-B18E-D977DD06A79E} - C:\WINDOWS\system32\khfDuTLD.dll
O2 - BHO: {b960c14c-d58d-ca39-3534-30c32a610c9f} - {f9c016a2-3c03-4353-93ac-d85dc41c069b} - C:\WINDOWS\system32\olqinx.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSection nLite.inf,C (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~1\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/too [...] ontrol.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Driv [...] eqlab2.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/Driv [...] rtScan.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com [...] 0_0_29.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {D71F9A27-723E-4B8B-B428-B725E47CBA3E} (Imikimi_activex_plugin Control) - http://imikimi.com/download/imikimi_plugin_0.5.1.cab
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F554} (Flatcast Viewer 4.16) - http://controls.flatcast-data.com/ [...] v41629.dll
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/download [...] _en_dl.cab
O20 - Winlogon Notify: byXNhgdC - C:\WINDOWS\SYSTEM32\byXNhgdC.dll
O20 - Winlogon Notify: byXRJcde - byXRJcde.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: maconfservice - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 10131 bytes

Un Bonjour ? Des explications ? Un merci, s'il vous plaît ?
Nous ne sommes pas des robots, mais des bénévoles

je suis desole telement il me fout la aine se probleme

Re,

Télécharge ComboFix (de sUBs) sur ton Bureau.

• Désactive temporairement toute protection résidente ! (Antivirus, antispywares..)
• Double clique sur ComboFix.exe.
• Accepte la licence en cliquant sur Oui.
• Lorsque l'opération sera terminée, un rapport apparaîtra. Poste ce rapport dans ta prochaine réponse.

Le rapport se trouve ici : %systemdrive%\ComboFix.txt (%systemdrive% étant la partition où est installée Windows; C:\ en général)

Aide : Comment utiliser ComboFix.

omboFix 08-07-11.1 - BAYRAK Adil 2008-07-12 15:14:34.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.399 [GMT 2:00]
Endroit: C:\Documents and Settings\BAYRAK Adil\Bureau\ComboFixa.exe
* Création d'un nouveau point de restauration

[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\brikhwvi.dll
C:\WINDOWS\system32\btfunc.dll
C:\WINDOWS\system32\byXNhgdC.dll
C:\WINDOWS\system32\caoomjqf.ini
C:\WINDOWS\system32\CJSvxyay.ini
C:\WINDOWS\system32\CJSvxyay.ini2
C:\WINDOWS\system32\cnwayycb.ini
C:\WINDOWS\system32\DLTuDfhk.ini
C:\WINDOWS\system32\DLTuDfhk.ini2
C:\WINDOWS\system32\dxwqtlam.dll
C:\WINDOWS\system32\FOqrAJjl.ini
C:\WINDOWS\system32\FOqrAJjl.ini2
C:\WINDOWS\system32\fxxwvhra.ini
C:\WINDOWS\system32\ggvyiuro.ini
C:\WINDOWS\system32\ivwhkirb.ini
C:\WINDOWS\system32\KUFOVvut.ini
C:\WINDOWS\system32\KUFOVvut.ini2
C:\WINDOWS\system32\maltqwxd.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\mdtgkvjw.ini
C:\WINDOWS\system32\obhphphi.ini
C:\WINDOWS\system32\oeminfo.ini
C:\WINDOWS\system32\qnipeuue.ini
C:\WINDOWS\system32\tmp80.tmp
C:\WINDOWS\system32\tmp81.tmp
C:\WINDOWS\system32\xdoeaqyw.ini

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-12 to 2008-07-12 ))))))))))))))))))))))))))))))))))))
.

2008-07-12 15:12 . 2008-07-12 15:12 116,864 --a------ C:\WINDOWS\system32\xbdxha.dll
2008-07-12 15:12 . 2008-07-12 15:12 116,864 --a------ C:\WINDOWS\system32\wyjlsdye.dll
2008-07-12 15:09 . 2008-07-12 15:09 322,816 --a------ C:\WINDOWS\system32\yayxvSJC.dll
2008-07-12 13:52 . 2008-07-12 13:52 <REP> d-------- C:\Documents and Settings\BAYRAK Adil\Application Data\Grisoft
2008-07-12 13:52 . 2008-07-12 13:52 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-07-12 13:52 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-07-12 12:35 . 2008-07-12 12:35 116,864 --a------ C:\WINDOWS\system32\stbypeyl.dll
2008-07-12 12:35 . 2008-07-12 12:35 116,864 --a------ C:\WINDOWS\system32\olqinx.dll
2008-07-12 12:34 . 2008-07-12 12:34 322,816 --a------ C:\WINDOWS\system32\khfDuTLD.dll
2008-07-12 11:40 . 2008-07-12 11:40 116,864 --a------ C:\WINDOWS\system32\ndejcg.dll
2008-07-12 11:40 . 2008-07-12 11:40 116,864 --a------ C:\WINDOWS\system32\bewwbsse.dll
2008-07-12 11:37 . 2008-07-12 11:37 322,816 --a------ C:\WINDOWS\system32\tuvVOFUK.dll
2008-07-12 10:50 . 2008-07-12 11:17 <REP> d-------- C:\Lop SD
2008-07-12 09:57 . 2008-07-12 09:57 116,864 --a------ C:\WINDOWS\system32\tsgekoao.dll
2008-07-12 09:57 . 2008-07-12 09:57 116,864 --a------ C:\WINDOWS\system32\oxpfds.dll
2008-07-12 00:46 . 2008-07-12 00:47 <REP> d-------- C:\Program Files\Anti Sansur
2008-07-09 01:15 . 2008-06-20 12:44 360,960 --------- C:\WINDOWS\system32\dllcache\tcpip.sys
2008-07-09 01:15 . 2008-06-20 19:37 247,808 --------- C:\WINDOWS\system32\dllcache\mswsock.dll
2008-07-09 01:15 . 2008-06-20 11:32 225,920 --------- C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-07-09 01:15 . 2008-06-20 12:44 138,368 --------- C:\WINDOWS\system32\dllcache\afd.sys
2008-07-09 01:15 . 2006-08-16 14:13 100,352 --------- C:\WINDOWS\system32\dllcache\6to4svc.dll
2008-07-09 01:02 . 2008-07-09 01:02 <REP> d-------- C:\Program Files\CAM Detector
2008-07-09 01:02 . 2008-07-09 01:02 0 --a------ C:\WINDOWS\WD.INI
2008-07-09 00:32 . 2008-07-09 00:33 <REP> d-------- C:\Program Files\PhotoCam
2008-07-06 23:16 . 2008-07-06 23:16 <REP> d-------- C:\Garmin
2008-07-05 22:08 . 2008-07-05 22:08 <REP> d-------- C:\WINDOWS\nvidia icons
2008-07-05 22:07 . 2008-05-03 05:46 182,347 --a------ C:\WINDOWS\system32\nvapps.nvb
2008-07-05 22:01 . 2008-07-05 22:01 <REP> d-------- C:\Program Files\SystemRequirementsLab
2008-07-04 00:55 . 2008-07-04 00:55 <REP> d-------- C:\Program Files\Atari
2008-06-25 22:42 . 2008-06-25 22:42 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-06-25 12:24 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-06-25 12:24 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-06-25 12:24 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-06-24 22:49 . 2008-06-24 22:49 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-06-24 22:44 . 2008-06-24 22:49 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-06-19 00:19 . 2008-06-19 00:19 <REP> d-------- C:\Program Files\Trk‡e mIRC v6.3
2008-06-13 23:08 . 2008-06-13 23:09 <REP> d-------- C:\Hauppauge
2008-06-13 23:05 . 2008-06-13 23:10 26,549 --a------ C:\WINDOWS\Irremote.ini
2008-06-13 22:49 . 2008-06-13 23:13 <REP> d-------- C:\Program Files\WinTV
2008-06-12 21:33 . 2008-06-12 21:33 <REP> d-------- C:\Program Files\Windows Media Connect 2
2008-06-12 14:49 . 2008-06-12 14:50 <REP> d-------- C:\Program Files\Winamp
2008-06-12 14:49 . 2008-06-12 15:02 <REP> d-------- C:\Documents and Settings\BAYRAK Adil\Application Data\Winamp
2008-06-12 14:44 . 2008-06-12 21:34 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
2008-06-12 14:44 . 2008-06-12 21:34 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-12 09:57 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-07-12 09:07 --------- d-----w C:\Program Files\Spyware Doctor
2008-07-12 08:52 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-07-12 08:41 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\OpenOffice.org2
2008-07-12 08:07 --------- d-----w C:\Program Files\KKE+
2008-07-11 20:37 --------- d-----w C:\Program Files\K-Lite Codec Pack
2008-07-11 20:35 --------- d-----w C:\Program Files\DivX
2008-07-11 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-07-09 16:29 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\uTorrent
2008-07-07 21:08 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\LimeWire
2008-07-07 15:35 34,296 ----a-w C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-07-07 15:35 17,144 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-07-03 23:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-01 13:32 --------- d-----w C:\Program Files\Prison Tycoon 2
2008-06-30 19:48 --------- d-----w C:\Program Files\Sega
2008-06-25 20:42 --------- d-----w C:\Program Files\Windows Live
2008-06-24 20:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-06-24 20:00 --------- d-----w C:\Program Files\eMule
2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:32 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-18 22:19 --------- d-----w C:\Program Files\Türkçe mIRC v6.3
2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 19:48 --------- d-----w C:\Program Files\Neuf
2008-06-07 16:23 --------- d-----w C:\Program Files\LimeWire
2008-06-07 15:06 --------- d-----w C:\Program Files\TuneUp Utilities 2008
2008-06-05 23:17 --------- d-----w C:\Program Files\Imikimi
2008-06-05 16:18 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\temp
2008-06-02 12:31 --------- d-----w C:\Program Files\Anuman Interactive
2008-06-01 09:35 --------- d-----w C:\Program Files\EA Sports
2008-06-01 09:07 --------- d--h--r C:\Documents and Settings\BAYRAK Adil\Application Data\SecuROM
2008-05-31 15:54 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-05-31 15:49 717,296 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-05-29 17:19 --------- d-----w C:\Program Files\Channel Editor II
2008-05-24 22:01 --------- d-----w C:\Program Files\adslTV
2008-05-24 21:05 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\vlc
2008-05-23 22:15 --------- d-----w C:\Program Files\thriXXX
2008-05-18 20:24 --------- d-----w C:\Program Files\18 Wheels of Steel Haulin
2008-05-17 17:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\ma-config.com
2008-05-17 17:43 --------- d-----w C:\Program Files\ma-config.com
2008-05-17 12:21 --------- d-----w C:\Program Files\CCleaner
2008-05-17 12:17 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\TuneUp Software
2008-05-17 12:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-05-17 12:15 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-05-17 12:12 --------- d-----w C:\Program Files\microsoft frontpage
2008-05-17 12:00 --------- d-----w C:\Documents and Settings\BAYRAK Adil\Application Data\PC Tools
2008-05-17 11:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-05-17 11:46 --------- d-----w C:\Program Files\Lavasoft
2008-05-16 13:28 --------- d-----w C:\Program Files\The Hell in Vietnam
2008-05-15 18:44 --------- d-----w C:\Program Files\Navilog1
2008-05-14 15:49 --------- d-----w C:\Program Files\CenterLock
.

------- Sigcheck -------

2007-12-18 04:04 507904 fb66744d525ea5df9a719f1db9b2dff4 C:\WINDOWS\system32\winlogon.exe

2007-12-18 04:04 182656 bc84c4f67d0e880b0c46dc0ce2b8cbaa C:\WINDOWS\system32\drivers\ndis.sys

2007-12-18 04:04 2479872 37cf5612cd0b972a6a9e5a1ec4219e47 C:\WINDOWS\system32\ntkrnlpa.exe

2007-12-18 04:04 2347392 c23532a465a0b2ea4fc35b494bff5524 C:\WINDOWS\system32\ntoskrnl.exe

2007-12-18 04:04 1789952 addc47dfd517f2143d71e9310e414b50 C:\WINDOWS\explorer.exe

2007-12-18 04:04 25088 43836cffabac8d6779e8ee55e308df2c C:\WINDOWS\system32\ctfmon.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{60b280ad-9a1b-47aa-81cf-c8fd0b9292f5}]
2008-07-12 15:12 116864 --a------ C:\WINDOWS\system32\xbdxha.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{639E73F6-4D2E-4C01-B9D8-709CABF862AB}]
2008-07-12 11:37 322816 --a------ C:\WINDOWS\system32\tuvVOFUK.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CF62B2A7-94EF-4252-9848-932B66A5716B}]
2008-07-12 15:09 322816 --a------ C:\WINDOWS\system32\yayxvSJC.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F41032AF-63EE-4444-B18E-D977DD06A79E}]
2008-07-12 12:34 322816 --a------ C:\WINDOWS\system32\khfDuTLD.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2007-12-18 04:04 25088]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 14:07 1289000]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 09:59 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-03 05:46 13529088]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2008-04-01 20:49 36352]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-03 05:46 86016]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"20a4c9d4"="C:\WINDOWS\system32\brikhwvi.dll" [N/A]
"nwiz"="nwiz.exe" [2008-05-03 05:46 1630208 C:\WINDOWS\system32\nwiz.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"="C:\WINDOWS\system32\sti_ci.dll" [2007-12-18 04:04 678912]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2008-05-25 14:44 5724184]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"TSClientMSIUninstaller"="C:\WINDOWS\Installer\TSClientMsiTrans\tscuinst.vbs" [2007-12-18 04:04 12451]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoUserNameInStartMenu"= 1 (0x1)
"NoSMHelp"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoUserNameInStartMenu"= 1 (0x1)
"NoSMHelp"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BlueSoleil.lnk
backup=C:\WINDOWS\pss\BlueSoleil.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Outil de mise à jour Google.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk
backup=C:\WINDOWS\pss\Outil de mise à jour Google.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-09-20 15:35 202024 C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CamserviceHD]
--a------ 2007-08-13 18:18 73728 C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2007-12-18 04:04 25088 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-04-01 11:39 486856 C:\Program Files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2007-09-20 09:51 1836328 C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2008-05-03 05:46 13529088 C:\WINDOWS\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2008-05-03 05:46 86016 C:\WINDOWS\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
--a------ 2007-01-10 22:59 1235456 C:\Program Files\Windows Sidebar\sidebar.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Styler]
--a------ 2006-05-03 12:48 307200 C:\Program Files\Styler\Styler.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2008-04-22 23:31 68856 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UberIcon]
--a------ 2006-07-18 00:16 122880 C:\Program Files\UberIcon\UberIcon Manager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vistadrv]
--a------ 2006-07-30 04:37 121089 C:\WINDOWS\system32\Vistadrive\vsdrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VisualTaskTips]
--a------ 2007-12-18 04:04 36864 C:\WINDOWS\system32\VisualTaskTips.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-04-01 20:49 36352 C:\Program Files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2006-11-03 20:20 866584 C:\Program Files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2008-05-03 05:46 1630208 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"56418:TCP"= 56418:TCPando P2P TCP Listening Port
"56418:UDP"= 56418:UDPando P2P UDP Listening Port

R0 Si3124;Si3124;C:\WINDOWS\system32\drivers\Si3124.sys [2007-12-18 04:04]
R0 Si3132r5;Si3132r5;C:\WINDOWS\system32\drivers\Si3132r5.sys [2007-12-18 04:04]
R0 Si3531;Si3531;C:\WINDOWS\system32\drivers\Si3531.sys [2007-12-18 04:04]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2007-12-18 04:04]
R3 APL531;Hercules Dualpix HD Webcam;C:\WINDOWS\system32\Drivers\hdvidv.sys [2007-07-13 11:45]
R3 camfilt2;camfilt2;C:\WINDOWS\system32\Drivers\camfilt2.sys [2007-07-31 18:30]
S3 GPU-Z;GPU-Z;C:\DOCUME~1\BAYRAK~1\LOCALS~1\Temp\GPU-Z.sys []
S3 maconfservice;maconfservice;C:\Program Files\ma-config.com\maconfservice.exe [2008-05-14 16:40]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2008-02-01 15:17]
S3 nmwcdnsuc;Nokia USB Flashing Generic;C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2008-02-01 15:17]
S3 ss_bus;Samsung Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-01-24 16:38]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-01-24 16:38]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-01-24 16:38]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-05-17 14:17]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 23:58]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-12-29 01:58]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

*Newly Created Service* - HELPSVC
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-07-12 13:19:35 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe
"2008-07-12 13:22:41 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
- - - - ORPHANS REMOVED - - - -

Toolbar-SaveLinksOrder - (no file)
Toolbar-Locked - (no file)
Toolbar-ITBarLayout - (no file)
Toolbar-ITBarLayout - (no file)
Toolbar-ITBar7Layout - (no file)
Toolbar-ITBar7Position - (no file)
WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file)
Notify-byXRJcde - byXRJcde.dll


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-12 15:19:59
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...


**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\drivers\CDANTSRV.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\MICROS~1\rapimgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-07-12 15:26:38 - machine was rebooted
ComboFix-quarantined-files.txt 2008-07-12 13:25:32

Pre-Run: 2,360,066,048 octets libres
Post-Run: 2,434,424,832 octets libres

311 --- E O F --- 2008-07-12 07:55:55

merci qu'en mème jai resolu mon problème tous seul

Re,

Ce n'est pas fini !

Qu'as-tu fait ?

Télécharge ZebRestore

Dézippe-le. Ouvre le dossier, lance le en double cliquant sur l’exe.

Coche :
- Policies

************


Sélectionne l'intégralité du cadre ci-dessous :

• Copie/colle le dans le Bloc Notes (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
• Enregistre le sous sur ton bureau sous le nom de CFScript.txt
• Glisse maintenant le fichier CFScript.txt dans ComboFix.exe comme ci-dessous :

• Cela va relancer Combofix.
• ComboFix créera ces fichiers sur ton Bureau :

- Un fichier zippé nommé Submit [Date Time].zip
- Un second fichier nommé - CF-Submit.htm

• ComboFix peut exiger un redémarrage pour compléter son travail. Accepte.
• Lorsque l'outil aura terminé, un rapport ComboFix.log apparaîtra à l'écran.
• Une nouvelle fenêtre avec invite "Submit Files for further analysis" s'ouvrira. Clique "OK"
• Ton navigateur se lancera automatiquement avec le fichier CF-Submit.htm et une fenêtre s'ouvrira :

- Clique sur le bouton "Browse"("Parcourir" ) et navigue vers le fichier
Submit [Date Time].zip qui est sur ton Bureau.
- Clique sur le fichier afin de le sélectionner.

• Soumets le fichier en cliquant "OK"
• Lorsque cette opération sera complétée, tu peux supprimer ces deux fichiers qui se trouvent sur ton Bureau.

Poste le contenu du rapport ComboFix.txt après redémarrage s'il y en a un.