pc tres lent et beaucoup de page de pub qui s'ouvre toute seule voici le rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:20:03, on 12/07/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://be.msn.com/defaultf.aspx?lang=fr-be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {846D3E37-861A-4880-9A5A-39EA873F10C8} - C:\Windows\system32\tuvTjJax.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [DAEMON Tools] "%ProgramFiles%\DAEMON Tools\daemon.exe\" -lang 1033
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\ddcCSIyW.dll,#1
O4 - HKLM\..\Run: [BMd901e109] Rundll32.exe "C:\Windows\system32\elawhhee.dll",s
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [L08FXLRD_1472696] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Winter Fun Wallpaper Changer.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O13 - Gopher Prefix:
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 6363 bytes

Bonsoir,

Télécharge ComboFix (de sUBs) sur ton Bureau.

• Désactive temporairement toute protection résidente ! (Antivirus, antispywares..)
• Double clique sur ComboFix.exe.
• Accepte la licence en cliquant sur Oui.
• Lorsque l'opération sera terminée, un rapport apparaîtra. Poste ce rapport dans ta prochaine réponse.

Le rapport se trouve ici : %systemdrive%\ComboFix.txt (%systemdrive% étant la partition où est installée Windows; C:\ en général)

Aide : Comment utiliser ComboFix.

mon ordi portable bloc de plus en plus que dois je faire svp

Merci de créer ton propre sujet !

ComboFix 08-07-15.4 - Administrateur 2008-07-16 13:35:28.1 - NTFSx86
Microsoft® Windows Vista™ Édition Intégrale 6.0.6000.0.1252.1.1036.18.1248 [GMT 2:00]
Endroit: C:\Users\Administrateur\Desktop\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\PlayMP3z
C:\Program Files\PlayMP3z\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMP3z
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMP3z\Run PlayMP3z.lnk
c:\Users\Administrator\AppData\Local\uqcqamc.dat
c:\users\administrator\appdata\local\uqcqamc.exe
C:\Users\Administrator\AppData\Local\uqcqamc_nav.dat
C:\Users\Administrator\AppData\Local\uqcqamc_navps.dat
C:\Users\Administrator\AppData\Local\wieiem.dat
C:\Users\Administrator\AppData\Local\wieiem_nav.dat
C:\Users\Administrator\AppData\Local\wieiem_navps.dat
C:\Windows\system32\abkwau.dll
C:\Windows\system32\achkln.dll
C:\Windows\system32\akjntvhe.dll
C:\Windows\system32\aoypeoji.dll
C:\Windows\system32\awwumewr.dll
C:\Windows\system32\bkkixqxl.ini
C:\Windows\system32\buwraafx.dll
C:\Windows\system32\cBSKaAqr.dll
C:\Windows\system32\cbXQgFxv.dll
C:\Windows\system32\cgboat.dll
C:\Windows\system32\chjbdyoc.dll
C:\Windows\system32\cjjncskx.dll
C:\Windows\system32\cnbcqxje.dll
C:\Windows\system32\cvjbfgck.dll
C:\Windows\system32\cxkraxaw.ini
C:\Windows\system32\dbehbjbp.dll
C:\Windows\system32\ddcDUoOf.dll
C:\Windows\System32\Desktop_.ini
C:\Windows\System32\dMoWyGgh.ini
C:\Windows\System32\dMoWyGgh.ini2
C:\Windows\system32\eafmyj.dll
C:\Windows\system32\efCtrPgf.dll
C:\Windows\system32\eixvkvkn.dll
C:\Windows\system32\elawhhee.dll
C:\Windows\system32\elwuhgwa.dll
C:\Windows\System32\EOWaIRqr.ini
C:\Windows\System32\EOWaIRqr.ini2
C:\Windows\system32\exhwoo.dll
C:\Windows\system32\ezfgid.dll
C:\Windows\system32\fccaYpNF.dll
C:\Windows\system32\fccdbCSi.dll
C:\Windows\system32\fghhaebo.dll
C:\Windows\system32\fglabi.dll
C:\Windows\System32\fgPrtCfe.ini
C:\Windows\System32\fgPrtCfe.ini2
C:\Windows\system32\fiepwngv.dll
C:\Windows\system32\fkwpjirn.dll
C:\Windows\System32\fMSBcMoq.ini
C:\Windows\System32\fMSBcMoq.ini2
C:\Windows\system32\FNpYaccf.ini
C:\Windows\System32\FNpYaccf.ini2
C:\Windows\System32\fOoUDcdd.ini
C:\Windows\System32\fOoUDcdd.ini2
C:\Windows\system32\fotbqaqp.ini
C:\Windows\system32\fphuodjp.dll
C:\Windows\system32\frsphmpy.dll
C:\Windows\system32\fwtgolfl.dll
C:\Windows\system32\gboyvokf.ini
C:\Windows\system32\gdrwxhqb.dll
C:\Windows\system32\geBRjjiH.dll
C:\Windows\system32\gebXqnlI.dll
C:\Windows\system32\ghjcjyru.dll
C:\Windows\system32\gpeyit.dll
C:\Windows\System32\GPYccMoq.ini
C:\Windows\System32\GPYccMoq.ini2
C:\Windows\System32\GQYHNqru.ini
C:\Windows\System32\GQYHNqru.ini2
C:\Windows\system32\hathncae.dll
C:\Windows\system32\hbgmmbbn.dll
C:\Windows\system32\hbikfu.dll
C:\Windows\system32\hfiglnqo.dll
C:\Windows\system32\hgGaaBqp.dll
C:\Windows\system32\hgGyWoMd.dll
C:\Windows\System32\HijjRBeg.ini
C:\Windows\System32\HijjRBeg.ini2
C:\Windows\system32\hllaqu.dll
C:\Windows\system32\hprxkpsq.dll
C:\Windows\system32\hrdwkufw.ini
C:\Windows\system32\ibjuepem.dll
C:\Windows\system32\IlnqXbeg.ini
C:\Windows\System32\IlnqXbeg.ini2
C:\Windows\System32\iSCbdccf.ini
C:\Windows\System32\iSCbdccf.ini2
C:\Windows\system32\jadbmupd.ini
C:\Windows\system32\jchclqnt.dll
C:\Windows\system32\jgdlchfv.dll
C:\Windows\system32\jkkIXqnK.dll
C:\Windows\system32\jlbhtbdr.ini
C:\Windows\system32\jmvazp.dll
C:\Windows\system32\khfCvUol.dll
C:\Windows\system32\kklqpddq.dll
C:\Windows\system32\kmficnmd.dll
C:\Windows\System32\KnqXIkkj.ini
C:\Windows\System32\KnqXIkkj.ini2
C:\Windows\System32\KnTtAyxx.ini
C:\Windows\System32\KnTtAyxx.ini2
C:\Windows\system32\kpxefxit.dll
C:\Windows\system32\lbqductg.dll
C:\Windows\system32\lbucqkly.dll
C:\Windows\system32\lcdmvoka.ini
C:\Windows\system32\lfetusga.dll
C:\Windows\system32\ljJArpqO.dll
C:\Windows\system32\ljjiigFY.dll
C:\Windows\System32\loUvCfhk.ini
C:\Windows\System32\loUvCfhk.ini2
C:\Windows\system32\lxqxikkb.dll
C:\Windows\system32\mbmlrs.dll
C:\Windows\system32\mcrh.tmp
C:\Windows\system32\mgwmqnfw.ini
C:\Windows\system32\mlqyusyf.ini
C:\Windows\system32\mrfkafeq.dll
C:\Windows\System32\MTwEOqru.ini
C:\Windows\System32\MTwEOqru.ini2
C:\Windows\system32\nhnfuuxl.dll
C:\Windows\system32\njfrlg.dll
C:\Windows\system32\nnafwlpv.dll
C:\Windows\system32\nojlrkge.dll
C:\Windows\system32\nvs2.inf
C:\Windows\system32\oflcbtrf.ini
C:\Windows\system32\OoWwEMoq.ini
C:\Windows\System32\OoWwEMoq.ini2
C:\Windows\system32\OqprAJjl.ini
C:\Windows\System32\OqprAJjl.ini2
C:\Windows\System32\OWyabLRu.ini
C:\Windows\System32\OWyabLRu.ini2
C:\Windows\System32\poUFPrqr.ini
C:\Windows\System32\poUFPrqr.ini2
C:\Windows\system32\ppjbstfq.dll
C:\Windows\System32\pqBaaGgh.ini
C:\Windows\System32\pqBaaGgh.ini2
C:\Windows\system32\pwaaougm.dll
C:\Windows\system32\pXaHOqss.ini
C:\Windows\System32\pXaHOqss.ini2
C:\Windows\system32\qhkwflrg.dll
C:\Windows\system32\qoMcBSMf.dll
C:\Windows\system32\qoMccYPG.dll
C:\Windows\system32\qoMEwWoO.dll
C:\Windows\system32\qomowy.dll
C:\Windows\system32\qrxftefv.ini
C:\Windows\system32\qxcdub.dll
C:\Windows\system32\rbfldtrl.dll
C:\Windows\system32\rhasoigq.ini
C:\Windows\system32\rjcyyquj.dll
C:\Windows\system32\rjysqdwr.ini
C:\Windows\System32\rqAaKSBc.ini
C:\Windows\System32\rqAaKSBc.ini2
C:\Windows\system32\rqRIaWOE.dll
C:\Windows\system32\rqRICuSM.dll
C:\Windows\system32\rqrPFUop.dll
C:\Windows\System32\rYFOnUvw.ini
C:\Windows\System32\rYFOnUvw.ini2
C:\Windows\system32\sAbdMUvw.ini
C:\Windows\System32\sAbdMUvw.ini2
C:\Windows\System32\sCfLTuvw.ini
C:\Windows\System32\sCfLTuvw.ini2
C:\Windows\system32\ssqOHaXp.dll
C:\Windows\system32\tdvdyr.dll
C:\Windows\system32\tgkvywuo.dll
C:\Windows\system32\toqajp.dll
C:\Windows\System32\TsYyyyxx.ini
C:\Windows\System32\TsYyyyxx.ini2
C:\Windows\system32\ujbfllcm.dll
C:\Windows\system32\uqcwjdgi.dll
C:\Windows\system32\uRLbayWO.dll
C:\Windows\system32\urqNHYQG.dll
C:\Windows\system32\urqOEwTM.dll
C:\Windows\system32\usqscucs.dll
C:\Windows\system32\vfgtxcpt.ini
C:\Windows\system32\vqmfvkmx.dll
C:\Windows\system32\vtUkjHwx.dll
C:\Windows\system32\vxFgQXbc.ini
C:\Windows\System32\vxFgQXbc.ini2
C:\Windows\system32\WinNB55.dll
C:\Windows\system32\wvUMdbAs.dll
C:\Windows\system32\wvUnOFYr.dll
C:\Windows\system32\wvuTLfCs.dll
C:\Windows\system32\wynhpsmq.dll
C:\Windows\system32\x64
C:\Windows\system32\x64\csnp2uvc.dll
C:\Windows\system32\x64\rsnpvc64.dll
C:\Windows\system32\x64\sncduvc.sys
C:\Windows\system32\x64\snp2uvc.sys
C:\Windows\system32\x64\vsnpvc64.dll
C:\Windows\System32\xaJjTvut.ini
C:\Windows\System32\xaJjTvut.ini2
C:\Windows\system32\xfkhiqla.ini
C:\Windows\System32\xkscnjjc.ini
C:\Windows\system32\xpidgkee.dll
C:\Windows\System32\xwHjkUtv.ini
C:\Windows\System32\xwHjkUtv.ini2
C:\Windows\system32\xxyyWQJY.dll
C:\Windows\system32\xxyyyYsT.dll
C:\Windows\System32\YFgiijjl.ini
C:\Windows\System32\YFgiijjl.ini2
C:\Windows\system32\YJQWyyxx.ini
C:\Windows\System32\YJQWyyxx.ini2
C:\Windows\system32\yjshfduk.dll
C:\Windows\system32\yndkwkvl.dll
C:\Windows\system32\yoefvtqj.dll
C:\Windows\system32\ytbvvnle.dll
C:\Windows\system32\yuncheft.ini
C:\Windows\system32\yxvjka.dll

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-16 to 2008-07-16 ))))))))))))))))))))))))))))))))))))
.

2008-07-15 19:11 . 2008-07-15 21:56 8,745,003 --a------ C:\Tecktonik killer.mp3
2008-07-15 19:09 . 2008-07-15 19:13 5,559,318 --a------ C:\Tecktonik - Mondo - Alive (Ph Electro Remix)(1)(1).mp3
2008-07-15 19:07 . 2008-07-15 19:17 10,533,109 --a------ C:\Tecktonik - Dance Club Remixes - House Mix 2007.mp3
2008-07-15 19:06 . 2008-07-15 19:08 1,361,293 --a------ C:\10 - Infinity - TECKTONIK VOLUME 3 CD2 - DJ DESS - www.MAX-CLUBBING.com.mp3
2008-07-15 19:02 . 2008-07-15 19:05 3,110,730 --a------ C:\Gigi D' Agostino - Bla Bla Bla.mp3
2008-07-15 19:00 . 2008-07-15 19:03 4,839,725 --a------ C:\Maroon 5 ft Rihanna - If I Never See Your Face Again.mp3
2008-07-15 18:56 . 2008-07-15 18:58 7,500,530 --a------ C:\Michael Jackson feat. Wu-Tang Clan and Mobb Deep - Smooth Criminal (Autopsy Remix).mp3
2008-07-15 18:56 . 2008-07-15 19:01 4,567,040 --a------ C:\Kyo - DerniÅ re Danse.MP3
2008-07-15 18:55 . 2008-07-15 18:58 4,727,079 --a------ C:\Eminem - Mockingbird (Remix).mp3
2008-07-14 19:28 . 2008-07-14 19:28 <REP> d-------- C:\$WINDOWS.~LS
2008-07-14 19:27 . 2008-07-14 19:27 <REP> d-------- C:\$WINDOWS.~BT
2008-07-14 19:22 . 2008-07-14 19:37 1,905 --a------ C:\Windows\diagwrn.xml
2008-07-14 19:22 . 2008-07-14 19:37 1,905 --a------ C:\Windows\diagerr.xml
2008-07-13 11:20 . 2008-07-13 11:21 39,456 --a------ C:\Nos voisins les hommes french dvdrip xvid [L@ndTe@m].avi
2008-07-12 14:41 . 2008-07-12 14:41 <REP> d-------- C:\Program Files\Trend Micro
2008-07-09 19:23 . 2008-07-09 19:25 734,535,680 --a------ C:\Bee.Movie.FRENCH.DVDRIP.XviD-iD.cap-divx.com.avi
2008-07-09 19:17 . 2008-07-09 19:21 730,701,278 --a------ C:\Alvin et les Chipmunks.FRENCH.R5.XViD-PLD.cap-divx.com.avi
2008-07-09 12:36 . 2008-07-09 18:23 734,175,232 --a------ C:\Super Heros Movies - FRENCH.avi
2008-07-09 12:35 . 2008-07-09 18:19 733,917,184 --a------ C:\Super.Heros.Movie.TS.FRENCH.DIVX.Hi-FI.Stereo.Pirateyes.TEAM.avi
2008-07-09 11:19 . 2008-07-09 11:19 0 --a------ C:\Windows\System32\nsx33A3.tmp
2008-07-09 11:04 . 2008-07-09 11:04 <REP> d-------- C:\Users\All Users\WhiteCap (Holiday Edition)
2008-07-09 11:04 . 2008-07-09 11:04 <REP> d-------- C:\ProgramData\WhiteCap (Holiday Edition)
2008-07-09 11:01 . 2008-07-09 14:53 722,272,836 --a------ C:\Dessins Animes et contes - Walt Disney (veritable, certifie pour enfants) - Mickey - Il etait une fois No‰l Fr - Mulan.avi
2008-07-08 22:09 . 2008-07-08 22:09 <REP> d-------- C:\Program Files\Winter Fun Pack 2004 for Windows XP
2008-07-08 22:09 . 2008-07-08 22:09 <REP> d-------- C:\Program Files\Microsoft
2008-07-04 23:06 . 2008-07-08 17:52 <REP> d--hs---- C:\Users\Administrateur\!
2008-07-04 23:06 . 2008-07-04 23:06 554 --a------ C:\Users\Administrateur\889.bat
2008-07-04 18:44 . 2008-07-04 18:44 3,072,054 --a------ C:\Windows\BricoPack Wallpaper.bmp
2008-07-04 18:44 . 2008-07-04 18:44 52,119 --a------ C:\Windows\BricoPackUninst.cmd
2008-07-04 18:44 . 2008-07-04 18:44 0 --a------ C:\Windows\System32\nshD8E2.tmp
2008-07-04 18:42 . 2008-07-04 18:41 0 --a------ C:\Windows\System32\nsr8B40.tmp
2008-07-04 18:42 . 2008-07-04 18:41 0 --a------ C:\Windows\System32\nsb8C1B.tmp
2008-07-04 18:40 . 2008-07-04 18:40 <REP> d-------- C:\Windows\BricoPacks
2008-07-04 16:58 . 2008-07-15 18:20 54,156 --ah----- C:\Windows\QTFont.qfn
2008-07-04 16:58 . 2008-07-04 16:58 1,409 --a------ C:\Windows\QTFont.for
2008-07-04 16:54 . 2008-07-04 16:54 <REP> d-------- C:\Windows\MaxTV
2008-07-04 16:54 . 2008-07-08 10:18 <REP> d-------- C:\Program Files\DMV
2008-07-03 15:17 . 2008-07-03 15:17 <REP> d-------- C:\Users\All Users\Xerox
2008-07-03 15:17 . 2008-07-03 15:17 <REP> d-------- C:\ProgramData\Xerox
2008-06-25 20:58 . 2008-06-25 20:58 <REP> d----c--- C:\Windows\System32\DRVSTORE
2008-06-25 20:58 . 2007-10-17 13:53 43,816 --a------ C:\Windows\System32\drivers\fssfltr.sys
2008-06-25 20:57 . 2008-06-25 20:57 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-06-25 20:57 . 2006-11-29 13:06 3,426,072 --a------ C:\Windows\System32\d3dx9_32.dll
2008-06-25 20:55 . 2008-06-25 20:56 <REP> d-------- C:\Program Files\Windows Live Toolbar
2008-06-25 20:55 . 2008-06-25 20:55 <REP> d-------- C:\Program Files\Windows Live Favorites
2008-06-20 15:21 . 2008-06-20 15:21 <REP> d-------- C:\Users\All Users\SweetIM
2008-06-20 15:21 . 2008-06-20 15:21 <REP> d-------- C:\ProgramData\SweetIM
2008-06-18 14:34 . 2008-06-18 14:38 <REP> d-------- C:\Program Files\SC
2008-06-17 13:53 . 2008-06-17 13:53 190,859,265 --a------ C:\Windows\MEMORY.DMP

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-11 12:23 --------- d-----w C:\Program Files\Zylom Games
2008-07-11 12:22 --------- d-----w C:\Program Files\YesMessenger
2008-07-08 15:46 --------- d-----w C:\Program Files\LimeWire
2008-07-04 21:10 --------- d-----w C:\Program Files\Incomplete
2008-07-04 16:44 6,180 ----a-w C:\Windows\BricoPackFoldersDelete.cmd
2008-07-03 23:28 --------- d-----w C:\ProgramData\Microsoft Help
2008-07-03 10:44 --------- d-----w C:\Program Files\FBrowsingAdvisor
2008-06-26 21:23 --------- d-----w C:\Program Files\Windows Live
2008-06-26 19:11 --------- d-----w C:\Program Files\BrowsingEnhancer
2008-06-25 18:53 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-06-25 18:51 --------- d-----w C:\ProgramData\WLInstaller
2008-06-25 17:08 --------- d-----w C:\Program Files\FBrowserAdvisor
2008-06-11 13:34 --------- d-----w C:\ProgramData\CyberLink
2008-06-09 13:59 47,360 ----a-w C:\Windows\system32\drivers\pcouffin.sys
2008-06-09 13:59 --------- d-----w C:\Program Files\VSO
2008-06-04 18:40 --------- d-----w C:\ProgramData\Zylom
2008-05-24 10:55 --------- d-----w C:\ProgramData\Messenger Plus!
2008-05-21 13:53 --------- d-----w C:\Program Files\Ludi
2008-05-18 09:32 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-05-18 06:39 54,784 ----a-w C:\Windows\system32\drivers\i8042prt.sys
2008-05-18 06:39 495,160 ----a-w C:\Windows\system32\drivers\Wdf01000.sys
2008-05-18 06:39 35,384 ----a-w C:\Windows\system32\drivers\WdfLdr.sys
2008-05-18 06:39 35,384 ----a-w C:\Windows\system32\drivers\kbdclass.sys
2008-05-18 06:39 34,360 ----a-w C:\Windows\system32\drivers\mouclass.sys
2008-05-18 06:39 19,968 ----a-w C:\Windows\system32\drivers\sermouse.sys
2008-05-18 06:39 15,872 ----a-w C:\Windows\system32\drivers\mouhid.sys
2008-05-18 06:39 15,872 ----a-w C:\Windows\system32\drivers\kbdhid.sys
2008-05-10 17:38 174 --sha-w C:\Program Files\desktop.ini
2008-04-25 04:23 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-05-12 16:20 1232896]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-16 13:24 167368]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe\ -lang 1033" [X]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 19:19 15872]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [2008-04-18 18:36 150040]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2008-04-18 18:36 170520]
"Persistence"="C:\Windows\system32\igfxpers.exe" [2008-04-18 18:36 141848]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-03 15:44 178712]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Winter Fun Wallpaper Changer.lnk - C:\Windows\Installer\{038A524F-58DB-438A-8391-8F7F0CA14B9E}\Icon038A524F.exe [2008-07-08 22:09:42 14336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableInstallerDetection"= 0 (0x0)
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.ffds"= C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"DisableNotifications"= 1 (0x1)
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\AuthorizedApplications\List]
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"= C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{DD482D12-9C4A-4F44-AB7D-E86B512D98B9}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{EB213883-C189-42D2-B16D-EE25DBAA7A39}"= C:\Program Files\Cyberlink\PowerDVD\PowerDVD.EXE:CyberLink PowerDVD
"{3CD2E03A-8158-414C-AB48-30F2A938A796}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"DisableNotifications"= 1 (0x1)
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DisableNotifications"= 1 (0x1)
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"= C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3

R1 aswSP;avast! Self Protection;C:\Windows\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 16:51]
R2 aswFsBlk;aswFsBlk;C:\Windows\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-05-16 01:18]
R2 fssfltr;FssFltr;C:\Windows\system32\DRIVERS\fssfltr.sys [2007-10-17 13:53]
R2 fsssvc;Windows Live OneCare Contrôle parental;C:\Program Files\Windows Live\Contrôle parental\fsssvc.exe []
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-07-22 15:00]
R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-03-07 16:26]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f50cd9d5-233b-11dd-b3fc-001b385e669b}]
\shell\AutoRun\command - G:\LaunchU3.exe -a
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-07-16 11:41:04 C:\Windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

pouriez vous svp m'aider car mon antivirus ne fonctionne plus que dois je faire svp merci d'avance

bonjour,

fixe cette ligne avec hijackthis:

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

c'est a cause de la toolbar...bcp sont sources de lenteur et d'affichage de pubs imtempestives...

tu peut ensuite passer MBAM:http://www.malwarebytes.org/mbam.php

et a la fin du scan tu verra si il te dit qu'il y a des fichiers infectes si oui il apparaitront en rouge, il te faut simplement cocher devant ces ligne rouges et faire delete ou supprime je ne sais plus...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:12, on 2008-07-17
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Live\Contrôle parental\fssui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://be.msn.com/defaultf.aspx?lang=fr-be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {E538F007-39BB-4B19-97AB-C4563D454C3A} - C:\Windows\system32\tuvTjJax.dll (file missing)
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [DAEMON Tools] "%ProgramFiles%\DAEMON Tools\daemon.exe\" -lang 1033
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Contrôle parental\fssui.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [L08FXLRD_1472696] "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Winter Fun Wallpaper Changer.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 5958 bytes
dois je encore faire quelque chose svp .Je n'ai plus d'iconne de avast comment dois je faire pour les remettre svp merci