[Résolu] Problème de fenêtres intempestives firefox

Bonjour, j'ai depuis un petit moment des fenêtres intempestives qui s'ouvrent lorsque je suis sur le net et j'aimerais résoudre ce problème car ça devient vraiment pénible . Donc si quelqu'un pouvait m'aider je lui serait très reconnaissant.
Merci d'avance.

Voila le résultat de mon scan :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:03:43, on 01/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
J:\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\documents and settings\alex\local settings\application data\cwsecqq.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2517BB76-B898-45CE-8D54-F7A6B4D255C9} - C:\WINDOWS\system32\mljgd.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {CF3FC4E8-8132-4D99-B43D-AEC175D64E8B} - C:\WINDOWS\system32\byxwttq.dll (file missing)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "J:\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [cwsecqq] "c:\documents and settings\alex\local settings\application data\cwsecqq.exe" cwsecqq
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: WiFi Station.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: byxwttq - byxwttq.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 6468 bytes

Voila mon scan :

Search Navipromo version 3.6.7 commencé le 01/11/2008 à 0:26:49,14

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Alex"

Mise à jour le 22.10.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Alex\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Alex\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Alex\menudm~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Alex\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé !

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Alex\locals~1\applic~1" :

cwsecqq.dat trouvé !
cwsecqq.exe trouvé !
cwsecqq_nav.dat trouvé !
cwsecqq_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\dgjlm.ini2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le 01/11/2008 à 0:28:20,70 ***



P.S : merci pour ton aide

Clean Navipromo version 3.6.7 commencé le 01/11/2008 à 0:49:24,60

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "Alex"

Mise à jour le 22.10.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\Alex\locals~1\applic~1" *



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Alex\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Alex\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Alex\menudm~1\progra~1" ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Alex\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Alex\locals~1\applic~1" *


cwsecqq.exe trouvé !
Copie cwsecqq.exe réalisée avec succès !
cwsecqq.exe supprimé !

cwsecqq.dat trouvé !
Copie cwsecqq.dat réalisée avec succès !
cwsecqq.dat supprimé !

cwsecqq_nav.dat trouvé !
Copie cwsecqq_nav.dat réalisée avec succès !
cwsecqq_nav.dat supprimé !

cwsecqq_navps.dat trouvé !
Copie cwsecqq_navps.dat réalisée avec succès !
cwsecqq_navps.dat supprimé !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 01/11/2008 à 0:51:54,92 ***

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1348
Windows 5.1.2600 Service Pack 3

01/11/2008 01:23:49
mbam-log-2008-11-01 (01-23-49).txt

Type de recherche: Examen complet (C:\|D:\|J:\|)
Eléments examinés: 85883
Temps écoulé: 12 minute(s), 5 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 16
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 6

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf3fc4e8-8132-4d99-b43d-aec175d64e8b} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\byxwttq (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{cf3fc4e8-8132-4d99-b43d-aec175d64e8b} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\aldd (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\jkwslist (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\byxwttq.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BMbbd8cddc.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BMbbd8cddc.txt (Trojan.Vundo) -> Quarantined and deleted successfully.

Okay merci beaucoup pour ce que tu as déjà fait

Bonjour , c'est bon je suis prêt à poursuivre

--------------------\\ Lop S&D 4.2.4-9b XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz )
BIOS : Award Modular BIOS v6.00PG
USER : Alex ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1229 [VPS 081031-1] 4.8.1229 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:20 Go)
D:\ (Local Disk) - NTFS - Total:245 Go (Free:112 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB) - FAT - Total:247 Mo (Free:0 Go)
J:\ (Local Disk) - NTFS - Total:98 Go (Free:88 Go)

"C:\Lop SD" ( MAJ : 01-11-2008|04:15 )
Option : [1] ( 01/11/2008|14:32 )

--------------------\\ Listing des dossiers dans APPLIC~1

[06/10/2008|18:56] C:\DOCUME~1\Alex\APPLIC~1\.emacs.d
[27/10/2008|22:21] C:\DOCUME~1\Alex\APPLIC~1\Adobe
[31/10/2008|20:29] C:\DOCUME~1\Alex\APPLIC~1\Azureus
[06/08/2008|19:08] C:\DOCUME~1\Alex\APPLIC~1\DAEMON Tools
[22/04/2008|13:29] C:\DOCUME~1\Alex\APPLIC~1\DivX
[31/10/2008|19:07] C:\DOCUME~1\Alex\APPLIC~1\dvdcss
[29/03/2008|19:03] C:\DOCUME~1\Alex\APPLIC~1\Identities
[29/03/2008|19:09] C:\DOCUME~1\Alex\APPLIC~1\InstallShield
[14/04/2008|13:09] C:\DOCUME~1\Alex\APPLIC~1\LimeWire
[29/03/2008|19:44] C:\DOCUME~1\Alex\APPLIC~1\Macromedia
[01/11/2008|01:09] C:\DOCUME~1\Alex\APPLIC~1\Malwarebytes
[01/04/2008|18:38] C:\DOCUME~1\Alex\APPLIC~1\Media Player Classic
[25/10/2008|14:30] C:\DOCUME~1\Alex\APPLIC~1\Microsoft
[25/10/2008|14:20] C:\DOCUME~1\Alex\APPLIC~1\Mozilla
[05/10/2008|22:22] C:\DOCUME~1\Alex\APPLIC~1\MSNInstaller
[25/10/2008|14:31] C:\DOCUME~1\Alex\APPLIC~1\OpenOffice.org
[09/04/2008|12:45] C:\DOCUME~1\Alex\APPLIC~1\Real
[10/10/2008|17:31] C:\DOCUME~1\Alex\APPLIC~1\Shareaza
[27/10/2008|22:35] C:\DOCUME~1\Alex\APPLIC~1\SolidDocuments
[06/08/2008|19:07] C:\DOCUME~1\Alex\APPLIC~1\Sun
[10/04/2008|20:21] C:\DOCUME~1\Alex\APPLIC~1\Talkback
[25/10/2008|14:20] C:\DOCUME~1\Alex\APPLIC~1\Thunderbird
[10/10/2008|17:23] C:\DOCUME~1\Alex\APPLIC~1\vlc
[04/06/2008|19:11] C:\DOCUME~1\Alex\APPLIC~1\WinRAR

[27/10/2008|22:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[04/04/2008|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[01/11/2008|01:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[05/10/2008|23:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[05/10/2008|22:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[27/10/2008|22:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SolidDocuments
[30/03/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[05/10/2008|22:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[29/03/2008|18:59] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[02/04/2008|14:08] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[29/03/2008|18:59] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[01/11/2008 11:46][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[11/05/2008|16:55] C:\Program Files\Alwil Software
[14/07/2008|17:22] C:\Program Files\BitDefender
[29/03/2008|18:57] C:\Program Files\ComPlus Applications
[06/08/2008|19:11] C:\Program Files\DAEMON Tools Toolbar
[27/10/2008|22:20] C:\Program Files\Fichiers communs
[29/03/2008|19:20] C:\Program Files\Hercules
[05/09/2008|19:47] C:\Program Files\InstallShield Installation Information
[29/03/2008|19:05] C:\Program Files\Intel
[15/10/2008|02:01] C:\Program Files\Internet Explorer
[25/10/2008|14:29] C:\Program Files\Java
[25/10/2008|14:29] C:\Program Files\JRE
[01/11/2008|01:09] C:\Program Files\Malwarebytes' Anti-Malware
[05/10/2008|22:59] C:\Program Files\Messenger Plus! Live
[29/03/2008|18:59] C:\Program Files\microsoft frontpage
[21/08/2008|13:14] C:\Program Files\Movie Maker
[01/11/2008|14:14] C:\Program Files\Mozilla Firefox
[28/10/2008|20:06] C:\Program Files\Mozilla Thunderbird
[05/10/2008|22:42] C:\Program Files\MSN
[29/03/2008|18:57] C:\Program Files\MSN Gaming Zone
[21/08/2008|13:13] C:\Program Files\NetMeeting
[27/08/2008|13:02] C:\Program Files\Neuf
[29/03/2008|18:57] C:\Program Files\Online Services
[25/10/2008|14:29] C:\Program Files\OpenOffice.org 3
[25/10/2008|14:28] C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
[21/08/2008|13:13] C:\Program Files\Outlook Express
[29/03/2008|19:09] C:\Program Files\Realtek
[29/03/2008|18:58] C:\Program Files\Services en ligne
[29/03/2008|19:03] C:\Program Files\Uninstall Information
[05/10/2008|22:46] C:\Program Files\Windows Live
[05/05/2008|16:49] C:\Program Files\Windows Media Connect 2
[21/08/2008|13:13] C:\Program Files\Windows Media Player
[21/08/2008|13:13] C:\Program Files\Windows NT
[29/03/2008|18:58] C:\Program Files\WindowsUpdate
[29/03/2008|18:59] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[27/10/2008|22:20] C:\Program Files\Fichiers communs\Adobe
[03/05/2008|03:00] C:\Program Files\Fichiers communs\BitDefender
[05/09/2008|19:42] C:\Program Files\Fichiers communs\InstallShield
[02/04/2008|14:33] C:\Program Files\Fichiers communs\Java
[05/10/2008|22:43] C:\Program Files\Fichiers communs\Microsoft Shared
[29/03/2008|18:58] C:\Program Files\Fichiers communs\MSSoap
[29/03/2008|19:51] C:\Program Files\Fichiers communs\ODBC
[09/04/2008|12:45] C:\Program Files\Fichiers communs\Real
[29/03/2008|18:58] C:\Program Files\Fichiers communs\Services
[29/03/2008|19:50] C:\Program Files\Fichiers communs\SpeechEngines
[21/08/2008|13:13] C:\Program Files\Fichiers communs\System
[05/10/2008|22:46] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 34 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-01 14:32:31
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\dgjlm.ini
C:\WINDOWS\system32\dgjlm.ini2
==> VUNDO <==



[F:52][D:4]-> C:\DOCUME~1\Alex\LOCALS~1\Temp
[F:2][D:0]-> C:\DOCUME~1\Alex\Cookies
[F:2849][D:5]-> C:\DOCUME~1\Alex\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 01/11/2008|14:32 - Option : [1]

--------------------\\ Fin du rapport a 14:32:50

Logfile of random's system information tool 1.04 (written by random/random)
Run by Alex at 2008-11-01 14:45:29
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 21 GB (71%) free of 30 GB
Total RAM: 2046 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:45:35, on 01/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
J:\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Alex\Bureau\RSIT.exe
C:\Alex.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2517BB76-B898-45CE-8D54-F7A6B4D255C9} - C:\WINDOWS\system32\mljgd.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "J:\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: WiFi Station.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 6148 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2517BB76-B898-45CE-8D54-F7A6B4D255C9}]
C:\WINDOWS\system32\mljgd.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-07-17 691656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"36X Raid Configurer"=C:\WINDOWS\system32\xRaidSetup.exe [2007-08-29 1966080]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-10-25 8527872]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-10-25 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-19 16844800]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"Adobe Reader Speed Launcher"=D:\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=J:\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WifiStation.exe

C:\Documents and Settings\Alex\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{CF3FC4E8-8132-4D99-B43D-AEC175D64E8B}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\WINDOWS\system32\mljgd

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"D:\Azureus\Azureus.exe"="D:\Azureus\Azureus.exe:*:Enabled:Azureus"
"D:\LimeWire\LimeWire.exe"="D:\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"J:\Dawn of War - Dark Crusade\DarkCrusade.exe"="J:\Dawn of War - Dark Crusade\DarkCrusade.exe:*:EnabledarkCrusade"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\SopCast\adv\SopAdver.exe"="D:\SopCast\adv\SopAdver.exe:*isabled:SopCast Adver"
"D:\SopCast\SopCast.exe"="D:\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"D:\Program Files\TVAnts\Tvants.exe"="D:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Shareaza\Shareaza.exe"="D:\Shareaza\Shareaza.exe:*:Enabled:Shareaza"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2008-11-01 14:45:30 ----A---- C:\Alex.exe
2008-11-01 14:45:29 ----D---- C:\rsit
2008-11-01 14:31:59 ----A---- C:\lopR.txt
2008-11-01 14:31:33 ----D---- C:\Lop SD
2008-11-01 01:09:04 ----D---- C:\Documents and Settings\Alex\Application Data\Malwarebytes
2008-11-01 01:09:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-11-01 01:09:00 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-11-01 00:49:24 ----A---- C:\cleannavi.txt
2008-11-01 00:26:49 ----A---- C:\fixnavi.txt
2008-11-01 00:03:09 ----A---- C:\HijackThis.exe
2008-10-27 22:20:22 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-10-27 22:20:13 ----D---- C:\Program Files\Fichiers communs\Adobe
2008-10-27 22:14:02 ----A---- C:\WINDOWS\ConverterCore.INI
2008-10-27 22:12:46 ----D---- C:\Documents and Settings\Alex\Application Data\SolidDocuments
2008-10-27 22:12:08 ----A---- C:\WINDOWS\system32\solidlocalui.dll
2008-10-27 22:12:08 ----A---- C:\WINDOWS\system32\solidlocalmon.dll
2008-10-27 22:11:17 ----D---- C:\Documents and Settings\All Users\Application Data\SolidDocuments
2008-10-25 14:31:44 ----D---- C:\Documents and Settings\Alex\Application Data\OpenOffice.org
2008-10-25 14:29:47 ----D---- C:\Program Files\JRE
2008-10-25 14:29:43 ----D---- C:\Program Files\OpenOffice.org 3
2008-10-25 14:29:35 ----A---- C:\WINDOWS\system32\javaws.exe
2008-10-25 14:29:35 ----A---- C:\WINDOWS\system32\javaw.exe
2008-10-25 14:29:35 ----A---- C:\WINDOWS\system32\java.exe
2008-10-25 14:28:07 ----D---- C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
2008-10-25 14:20:42 ----D---- C:\Documents and Settings\Alex\Application Data\Thunderbird
2008-10-25 14:20:38 ----D---- C:\Program Files\Mozilla Thunderbird
2008-10-25 00:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-15 02:01:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-15 02:01:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-15 02:01:19 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-15 02:01:02 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-15 02:00:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-10 17:31:54 ----D---- C:\Documents and Settings\Alex\Application Data\Shareaza
2008-10-10 17:23:06 ----D---- C:\Documents and Settings\Alex\Application Data\dvdcss
2008-10-10 17:22:52 ----D---- C:\Documents and Settings\Alex\Application Data\vlc
2008-10-06 18:56:33 ----D---- C:\Documents and Settings\Alex\Application Data\.emacs.d
2008-10-06 10:42:42 ----A---- C:\WINDOWS\system32\muweb.dll
2008-10-06 10:42:42 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-10-06 10:42:42 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-10-05 23:04:26 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-10-05 22:59:48 ----D---- C:\Program Files\Messenger Plus! Live
2008-10-05 22:43:11 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-10-05 22:43:07 ----D---- C:\Program Files\Windows Live
2008-10-05 22:43:01 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-10-05 22:22:20 ----D---- C:\Documents and Settings\Alex\Application Data\MSNInstaller

======List of files/folders modified in the last 1 months======

2008-11-01 14:45:35 ----D---- C:\WINDOWS\Prefetch
2008-11-01 14:14:22 ----D---- C:\Program Files\Mozilla Firefox
2008-11-01 11:54:59 ----D---- C:\WINDOWS\Temp
2008-11-01 01:50:27 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-01 01:23:49 ----D---- C:\WINDOWS\system32
2008-11-01 01:23:49 ----D---- C:\WINDOWS
2008-11-01 01:09:03 ----D---- C:\WINDOWS\system32\drivers
2008-11-01 01:09:00 ----RD---- C:\Program Files
2008-10-31 20:39:53 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-10-31 20:38:47 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-31 20:29:07 ----D---- C:\Documents and Settings\Alex\Application Data\Azureus
2008-10-29 21:44:39 ----HD---- C:\WINDOWS\inf
2008-10-29 21:44:34 ----D---- C:\WINDOWS\system32\CatRoot
2008-10-27 22:34:08 ----SHD---- C:\WINDOWS\Installer
2008-10-27 22:21:07 ----D---- C:\Documents and Settings\Alex\Application Data\Adobe
2008-10-27 22:20:13 ----D---- C:\Program Files\Fichiers communs
2008-10-26 11:32:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-25 14:30:28 ----SD---- C:\Documents and Settings\Alex\Application Data\Microsoft
2008-10-25 14:30:26 ----D---- C:\WINDOWS\WinSxS
2008-10-25 14:29:54 ----RSD---- C:\WINDOWS\Fonts
2008-10-25 14:29:35 ----D---- C:\Program Files\Java
2008-10-25 14:20:44 ----D---- C:\Documents and Settings\Alex\Application Data\Mozilla
2008-10-25 00:29:55 ----HD---- C:\WINDOWS\$hf_mig$
2008-10-15 17:35:43 ----A---- C:\WINDOWS\system32\netapi32.dll
2008-10-15 02:01:29 ----A---- C:\WINDOWS\imsins.BAK
2008-10-15 02:01:13 ----D---- C:\Program Files\Internet Explorer
2008-10-15 02:01:06 ----D---- C:\WINDOWS\ie7updates
2008-10-07 20:19:40 ----A---- C:\WINDOWS\system32\MRT.exe
2008-10-05 22:46:51 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-10-05 22:46:45 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-10-05 22:46:45 ----D---- C:\WINDOWS\pchealth
2008-10-05 22:43:08 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2008-10-05 22:42:17 ----D---- C:\Program Files\MSN
2008-10-05 22:38:34 ----D---- C:\WINDOWS\system32\inetsrv
2008-10-03 18:12:27 ----A---- C:\WINDOWS\system32\ieframe.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-07-19 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-07-19 42912]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-03-29 20747]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-07-19 94416]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2008-09-05 271360]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2008-09-05 18048]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-07-19 23152]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-19 4617728]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-10-25 7426112]
R3 RT61;802.11g Wireless Driver RT61; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-03-09 366080]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-09-19 101504]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 al88b8ww;al88b8ww; C:\WINDOWS\system32\drivers\al88b8ww.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Alex\LOCALS~1\Temp\catchme.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 Profos;Profos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 Trufos;Trufos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-10-25 155716]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-07-19 250040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

/!\ Désactive toute protection résidente (Antivirus...) /!\

1/

• Mets à jour Java.
• Relance HijackThis et choisis Do a system scan only.
• Coche les cases qui sont devant les lignes suivantes :

O2 - BHO: (no name) - {2517BB76-B898-45CE-8D54-F7A6B4D255C9} - C:\WINDOWS\system32\mljgd.dll (file missing)

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll

• Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose puis quitte HijackThis.

2/

On va maintenant devoir modifier le registre. Modifier le registre peut se révéler être très dangereux, c'est pourquoi nous allons créer une sauvegarde du registre avant d'effectuer nos modifications. Ainsi, en cas de souci, il n'y aura qu'à restaurer.

Merci de procéder EXACTEMENT comme décrit ci-dessous :

Télécharge ERUNT
( ERUNT = Emergency Recovery Utility NT, c'est un programme gratuit qui te permet de conserver une sauvegarde complète de ta base de registre et de la restaurer quand cela s'avère nécessaire )

• Installe ERUNT en suivant les instructions suivantes

( suis les directives d'installation par défaut, mais dis non quand on te demande d'ajouter ERUNT au startup folder ( dossier start up ), d'autant plus que si tu le souhaites tu pourras ajouter cette option ultérieurement )

• Lance ERUNT ( soit en double-cliquant sur l'icône présente sur ton bureau soit en choisissant de lancer le programme en fin d'installation )
• Choisis un emplacement pour la sauvegarde ( l'emplacement par défaut est : C:\WINDOWS\ERDNT ce qui est acceptable ).
• Assure-toi que les deux premières cases suivantes soient bien cochées !!!
• Clique sur OK
• Clique sur YES pour créer le dossier de sauvegarde.

3/

• Télécharge OTMoveIt3 (de OldTimer) sur ton Bureau.
• Double-clique sur OTMoveIt3.exe afin de le lancer.
• Copie (Ctrl+C) le texte suivant ci-dessous :

• Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
• Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

• Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\

Le nom du rapport correspond au moment de sa création : date_heure.log


4/

• Poste également un nouveau rapport RSIT.

Logfile of random's system information tool 1.04 (written by random/random)
Run by Alex at 2008-11-05 22:53:26
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 21 GB (70%) free of 30 GB
Total RAM: 2046 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:53:30, on 05/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
D:\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
J:\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Alex\Bureau\RSIT.exe
C:\Alex.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "J:\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: WiFi Station.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 6258 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-05 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-05 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-05 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"36X Raid Configurer"=C:\WINDOWS\system32\xRaidSetup.exe [2007-08-29 1966080]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-10-25 8527872]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-10-25 81920]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-19 16844800]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-05 136600]
"Adobe Reader Speed Launcher"=D:\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=J:\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WifiStation.exe

C:\Documents and Settings\Alex\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"D:\Azureus\Azureus.exe"="D:\Azureus\Azureus.exe:*:Enabled:Azureus"
"D:\LimeWire\LimeWire.exe"="D:\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"J:\Dawn of War - Dark Crusade\DarkCrusade.exe"="J:\Dawn of War - Dark Crusade\DarkCrusade.exe:*:EnabledarkCrusade"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\SopCast\adv\SopAdver.exe"="D:\SopCast\adv\SopAdver.exe:*isabled:SopCast Adver"
"D:\SopCast\SopCast.exe"="D:\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"D:\Program Files\TVAnts\Tvants.exe"="D:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"D:\Shareaza\Shareaza.exe"="D:\Shareaza\Shareaza.exe:*:Enabled:Shareaza"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2008-11-05 22:48:20 ----D---- C:\_OTMoveIt
2008-11-05 22:47:11 ----D---- C:\WINDOWS\ERDNT
2008-11-05 22:46:25 ----D---- C:\Program Files\ERUNT
2008-11-05 22:44:07 ----D---- C:\backups
2008-11-05 22:42:20 ----A---- C:\WINDOWS\system32\deploytk.dll
2008-11-01 14:45:30 ----A---- C:\Alex.exe
2008-11-01 14:45:29 ----D---- C:\rsit
2008-11-01 14:31:59 ----A---- C:\lopR.txt
2008-11-01 14:31:33 ----D---- C:\Lop SD
2008-11-01 01:09:04 ----D---- C:\Documents and Settings\Alex\Application Data\Malwarebytes
2008-11-01 01:09:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-11-01 01:09:00 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-11-01 00:49:24 ----A---- C:\cleannavi.txt
2008-11-01 00:26:49 ----A---- C:\fixnavi.txt
2008-11-01 00:03:09 ----A---- C:\HijackThis.exe
2008-10-27 22:20:22 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-10-27 22:20:13 ----D---- C:\Program Files\Fichiers communs\Adobe
2008-10-27 22:14:02 ----A---- C:\WINDOWS\ConverterCore.INI
2008-10-27 22:12:46 ----D---- C:\Documents and Settings\Alex\Application Data\SolidDocuments
2008-10-27 22:12:08 ----A---- C:\WINDOWS\system32\solidlocalui.dll
2008-10-27 22:12:08 ----A---- C:\WINDOWS\system32\solidlocalmon.dll
2008-10-27 22:11:17 ----D---- C:\Documents and Settings\All Users\Application Data\SolidDocuments
2008-10-25 14:31:44 ----D---- C:\Documents and Settings\Alex\Application Data\OpenOffice.org
2008-10-25 14:29:47 ----D---- C:\Program Files\JRE
2008-10-25 14:29:43 ----D---- C:\Program Files\OpenOffice.org 3
2008-10-25 14:29:35 ----A---- C:\WINDOWS\system32\javaws.exe
2008-10-25 14:29:35 ----A---- C:\WINDOWS\system32\javaw.exe
2008-10-25 14:29:35 ----A---- C:\WINDOWS\system32\java.exe
2008-10-25 14:28:07 ----D---- C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
2008-10-25 14:20:42 ----D---- C:\Documents and Settings\Alex\Application Data\Thunderbird
2008-10-25 14:20:38 ----D---- C:\Program Files\Mozilla Thunderbird
2008-10-25 00:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-15 02:01:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-15 02:01:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-15 02:01:19 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-15 02:01:02 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-15 02:00:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-10 17:31:54 ----D---- C:\Documents and Settings\Alex\Application Data\Shareaza
2008-10-10 17:23:06 ----D---- C:\Documents and Settings\Alex\Application Data\dvdcss
2008-10-10 17:22:52 ----D---- C:\Documents and Settings\Alex\Application Data\vlc
2008-10-06 18:56:33 ----D---- C:\Documents and Settings\Alex\Application Data\.emacs.d
2008-10-06 10:42:42 ----A---- C:\WINDOWS\system32\muweb.dll
2008-10-06 10:42:42 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-10-06 10:42:42 ----A---- C:\WINDOWS\system32\mucltui.dll

======List of files/folders modified in the last 1 months======

2008-11-05 22:51:48 ----D---- C:\Program Files\Mozilla Firefox
2008-11-05 22:51:36 ----D---- C:\WINDOWS\Prefetch
2008-11-05 22:51:06 ----D---- C:\WINDOWS\Temp
2008-11-05 22:50:12 ----D---- C:\WINDOWS
2008-11-05 22:49:03 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-05 22:49:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-05 22:48:20 ----D---- C:\WINDOWS\system32
2008-11-05 22:46:25 ----RD---- C:\Program Files
2008-11-05 22:42:28 ----SHD---- C:\WINDOWS\Installer
2008-11-05 22:42:08 ----D---- C:\Program Files\Java
2008-11-05 22:40:41 ----D---- C:\Documents and Settings\Alex\Application Data\Azureus
2008-11-05 20:54:30 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-11-05 20:54:29 ----D---- C:\WINDOWS\system32\CatRoot
2008-11-05 20:54:13 ----HD---- C:\WINDOWS\inf
2008-11-01 01:09:03 ----D---- C:\WINDOWS\system32\drivers
2008-10-27 22:21:07 ----D---- C:\Documents and Settings\Alex\Application Data\Adobe
2008-10-27 22:20:13 ----D---- C:\Program Files\Fichiers communs
2008-10-26 11:32:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-25 14:30:28 ----SD---- C:\Documents and Settings\Alex\Application Data\Microsoft
2008-10-25 14:30:26 ----D---- C:\WINDOWS\WinSxS
2008-10-25 14:29:54 ----RSD---- C:\WINDOWS\Fonts
2008-10-25 14:20:44 ----D---- C:\Documents and Settings\Alex\Application Data\Mozilla
2008-10-25 00:29:55 ----HD---- C:\WINDOWS\$hf_mig$
2008-10-15 17:35:43 ----A---- C:\WINDOWS\system32\netapi32.dll
2008-10-15 02:01:29 ----A---- C:\WINDOWS\imsins.BAK
2008-10-15 02:01:13 ----D---- C:\Program Files\Internet Explorer
2008-10-15 02:01:06 ----D---- C:\WINDOWS\ie7updates
2008-10-07 20:19:40 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-07-19 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-07-19 42912]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-03-29 20747]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-07-19 94416]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2008-09-05 271360]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2008-09-05 18048]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-07-19 23152]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-19 4617728]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-10-25 7426112]
R3 RT61;802.11g Wireless Driver RT61; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-03-09 366080]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-09-19 101504]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 acvqz2nc;acvqz2nc; C:\WINDOWS\system32\drivers\acvqz2nc.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Alex\LOCALS~1\Temp\catchme.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 Profos;Profos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 Trufos;Trufos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-05 152984]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-10-25 155716]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-07-19 250040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

J'ai un problème avec kapersky, une fois le scan terminé il n'y a rien qui puisse me permettre de sauvegarder. Il y a juste un onglet "Stopper l'anal".

Bon désolé mais impossible d'enregistrer la page (ou alors je ne sais pas comment faire). Tout ce que je peux dire c'est qu'il n'y a aucun virus trouvé, 0 objets infectés ou suspects.

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Unable to stop service acvqz2nc .
========== FILES ==========
File/Folder C:\WINDOWS\system32\drivers\acvqz2nc.sys not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\hsperfdata_Alex\3544 scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\e4j28.tmp_dir8632\exe4jlib.jar scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\etilqs_TS1lJ4aOqTHFFB4ziQro scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\swt-gdip-win32-3430.dll scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\swt-win32-3430.dll scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\~DF8320.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\~DF8332.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\~DFD65C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\~DFD676.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Alex\LOCALS~1\Temp\~DFF17B.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5b4.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_79c.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Alex\Local Settings\Application Data\Mozilla\Firefox\Profiles\hw4h43c0.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Alex\Local Settings\Application Data\Mozilla\Firefox\Profiles\hw4h43c0.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Alex\Local Settings\Application Data\Mozilla\Firefox\Profiles\hw4h43c0.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Alex\Local Settings\Application Data\Mozilla\Firefox\Profiles\hw4h43c0.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Alex\Local Settings\Application Data\Mozilla\Firefox\Profiles\hw4h43c0.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Alex\Local Settings\Application Data\Mozilla\Firefox\Profiles\hw4h43c0.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 11072008_025236

Non je n'ai plus de problème, plus de fenêtres intempestives

[ Rapport ToolsCleaner version 2.2.5 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\HijackThis.exe: trouvé !
C:\hijackthis.log: trouvé !
C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\_OtMoveIt: trouvé !
C:\Documents and Settings\Alex\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Alex\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\Alex\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !

---------------------------------
-->- Suppression:

C:\HijackThis.exe: supprimé !
C:\Documents and Settings\Alex\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Alex\Bureau\LopSD.exe: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\hijackthis.log: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\Alex\Bureau\OTMoveIt3.exe: supprimé !
C:\Lop SD: supprimé !
C:\_OtMoveIt: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !

C'est bon c'est fait, en tous cas merci mille fois pour ton aide
Juste une dernière petite question : tu me conseilles de remplacer avast par antivir mais est-ce que bitdefender peut faire l'affaire ou pas ?

Garde les deux.

Supprime la sauvegarde que tu avais fait avec ERUNT et fais-en une nouvelle

Je te conseille de remplacer Avast par Antivir.

Bonsoir,

Tu peux être plus explicite avec des exemples à la clé ?

Merci

Pour répondre à Egwene, mon message n'a rien d'insultant rassure toi mais je suis allé voir sur d'autre topic où les "helper" étaient selon moi moins clairs ou tout du moins leurs explications ne sont pas aussi bien ordonnées que celle de Destrio5 (par exemple rien que le fait de ne pas mettre de puces nuit selon moi à la lisibilité). Après ce ne sont peut-être que des cas isolés ce que je pense d'ailleurs. Voila j'espère que cela répond à ta question