joeybrossier

Merci pour ton aide.

Voici le fameux rapport hijack Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:00:51, on 02/03/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\AGRSMMSG.exe C:\Program Files\ltmoh\Ltmoh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\vsnpstd2.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Veoh Networks\Veoh\VeohClient.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Bergerat\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [sNPSTD2] C:\WINDOWS\vsnpstd2.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1174328959928 O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwa...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 9439 bytes

Les pop-up sont en stand by donc de ce point de vue, merci beaucoup pour le coup de main. En revanche, j'ai redémarré mon pc, pour vérifier si les messages ~d'alerte apparaisse toujours et oui : un message concernant "dwwin.exe" qui est nouveau semble-t-til, me disant donc que dwwin.exe n'a pas pu s'initialiser. L'autre message est le même qu'avant, m'indiquant que iexplore.exe rencontre un problème et en gros qu'il ne peut fermer tout seul... Voilà, cela te semble-t-il plutot bon? Perso, j'ai encore l'impression que le problème persiste en sous-marin, mais c'est toi le pro:)

Voici le rapport que m'a donné le scan AVG: --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 10:27:47 02/03/2008 + Résultat de l'analyse: :mozilla.475:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise. :mozilla.476:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise. :mozilla.321:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise. :mozilla.322:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise. :mozilla.591:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@divx.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@divx.112.2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise. :mozilla.129:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.130:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.131:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.132:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.133:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.134:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.135:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.136:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. :mozilla.590:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adbrite[3].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ads.adbrite[3].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ads.adbrite[5].txt -> TrackingCookie.Adbrite : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Aucune action entreprise. :mozilla.520:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adengage : Aucune action entreprise. :mozilla.521:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adengage : Aucune action entreprise. :mozilla.652:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adtech[2].txt -> TrackingCookie.Adtech : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adtech[3].txt -> TrackingCookie.Adtech : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise. :mozilla.26:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@atdmt[1].txt -> TrackingCookie.Atdmt : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@atdmt[3].txt -> TrackingCookie.Atdmt : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise. :mozilla.525:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise. :mozilla.526:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise. :mozilla.527:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise. :mozilla.356:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise. :mozilla.500:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Etracker : Aucune action entreprise. :mozilla.501:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Etracker : Aucune action entreprise. :mozilla.502:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Etracker : Aucune action entreprise. :mozilla.629:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Euroclick : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@fastclick[1].txt -> TrackingCookie.Fastclick : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@fastclick[2].txt -> TrackingCookie.Fastclick : Aucune action entreprise. :mozilla.402:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise. :mozilla.429:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise. :mozilla.508:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise. :mozilla.511:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise. :mozilla.305:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Hypertracker : Aucune action entreprise. :mozilla.112:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Imrworldwide : Aucune action entreprise. :mozilla.113:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Imrworldwide : Aucune action entreprise. :mozilla.423:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Ivwbox : Aucune action entreprise. :mozilla.242:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Liveperson : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@www.lop[1].txt -> TrackingCookie.Lop : Aucune action entreprise. :mozilla.57:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Netflame : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Aucune action entreprise. :mozilla.304:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise. :mozilla.503:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise. :mozilla.602:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise. :mozilla.603:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@real[2].txt -> TrackingCookie.Real : Aucune action entreprise. :mozilla.615:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise. :mozilla.616:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Revsci : Aucune action entreprise. :mozilla.348:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.349:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.350:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.351:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.352:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.353:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.354:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise. :mozilla.248:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise. :mozilla.249:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise. :mozilla.300:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Skype : Aucune action entreprise. :mozilla.301:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Skype : Aucune action entreprise. :mozilla.302:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Skype : Aucune action entreprise. :mozilla.303:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Skype : Aucune action entreprise. :mozilla.66:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise. :mozilla.70:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise. :mozilla.71:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise. :mozilla.72:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise. :mozilla.73:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise. :mozilla.363:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise. :mozilla.364:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise. :mozilla.365:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise. :mozilla.109:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Tribalfusion : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise. :mozilla.204:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise. :mozilla.205:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise. :mozilla.207:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@m.webtrends[1].txt -> TrackingCookie.Webtrends : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@m.webtrends[2].txt -> TrackingCookie.Webtrends : Aucune action entreprise. :mozilla.465:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yadro : Aucune action entreprise. :mozilla.122:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. :mozilla.123:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. :mozilla.124:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. :mozilla.125:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. :mozilla.126:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. :mozilla.127:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. :mozilla.128:C:\Documents and Settings\Bergerat\Application Data\Mozilla\Firefox\Profiles\4p0j8kpm.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. C:\Documents and Settings\Bergerat\Cookies\bergerat@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise. Fin du rapport

Bonsoir LienRag, Voici ce que je trouve dans le bloc note de _OTMoveIt, Moved Files: C:\WINDOWS\Tasks\A78242209185F5AC.job moved successfully. Folder move failed. C:\Documents and Settings\All Users\Application Data\scr style mp3 glue scheduled to be moved on reboot. C:\DOCUME~1\Bergerat\APPLIC~1\SAFESH~1 moved successfully. OTMoveIt2 v1.0.20 log created on 03012008_194943 Merci

Salut, Voici le rapport donné par lopxpMH2: Rapport lopxpMH2 version 2.0 fait à 14:13:07,55 le 01/03/2008 C:\Documents and Settings\Bergerat\Bureau\lopxpMH2 ****************************************** ## Répertoires Application Data Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\All Users\Application Data 15/03/2007 15:35 <REP> . 15/03/2007 15:35 <REP> .. 20/03/2007 16:02 <REP> Adobe 28/11/2007 14:52 <REP> Apple 05/01/2008 12:15 <REP> Apple Computer 15/03/2007 18:41 <REP> CyberLink 07/10/2007 18:06 <REP> Google 05/10/2007 14:15 <REP> HP 17/01/2008 12:32 <REP> Lavasoft 20/03/2007 15:45 <REP> Macrovision 15/03/2007 15:35 <REP> Microsoft 16/01/2008 21:02 <REP> scr style mp3 glue 13/04/2007 00:04 <REP> Skype 17/01/2008 12:35 <REP> Spybot - Search & Destroy 15/03/2007 18:42 <REP> Symantec 26/03/2007 23:23 <REP> Windows Genuine Advantage 15/03/2007 15:35 62 desktop.ini 20/09/2007 08:57 2 325 hpzinstall.log 2 fichier(s) 2 387 octets 16 Rép(s) 4 512 808 960 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\Bergerat\Application Data 15/03/2007 18:16 <REP> . 15/03/2007 18:16 <REP> .. 20/03/2007 16:03 <REP> Adobe 18/12/2007 11:55 <REP> Apple Computer 27/03/2007 00:28 <REP> Azureus 17/03/2007 13:00 <REP> CyberLink 31/01/2008 19:28 <REP> DivX 19/03/2007 19:07 <REP> Help 20/09/2007 08:56 <REP> HP 15/03/2007 18:16 <REP> Identities 09/02/2008 16:57 <REP> Image Zone Express 19/03/2007 19:25 <REP> Macromedia 15/03/2007 18:16 <REP> Microsoft 12/05/2007 17:58 <REP> Mozilla 28/03/2007 15:27 <REP> Real 16/01/2008 21:01 <REP> safe shim pop 13/04/2007 00:05 <REP> Skype 15/03/2007 18:41 <REP> Sun 15/03/2007 18:42 <REP> Symantec 26/06/2007 10:37 <REP> U3 20/03/2007 15:29 <REP> vlc 16/10/2007 23:18 <REP> VoipStunt 15/03/2007 18:16 62 desktop.ini 05/10/2007 21:51 0 Hewlett-PackardHP PSC 1400 series1191590145_API.log 05/10/2007 21:51 456 Hewlett-PackardHP PSC 1400 series1191590145_PROTOCOL.log 05/10/2007 21:51 376 Hewlett-PackardHP PSC 1400 series1191590145_UI.log 4 fichier(s) 894 octets 22 Rép(s) 4 512 808 960 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\Bergerat\Local Settings\Application Data 15/03/2007 18:16 <REP> . 15/03/2007 18:16 <REP> .. 15/03/2007 18:40 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142030} 20/03/2007 16:03 <REP> Adobe 28/11/2007 14:53 <REP> Apple 28/11/2007 14:52 <REP> Apple Computer 28/12/2007 18:12 <REP> ApplicationHistory 28/03/2007 13:55 <REP> Google 19/03/2007 19:07 <REP> Help 15/03/2007 18:16 <REP> Microsoft 12/05/2007 17:58 <REP> Mozilla 16/03/2007 18:30 76 800 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 28/12/2007 18:12 131 fusioncache.dat 26/03/2007 23:20 19 016 GDIPFONTCACHEV1.DAT 28/03/2007 15:55 5 894 384 IconCache.db 4 fichier(s) 5 990 331 octets 11 Rép(s) 4 512 808 960 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\Default User\Application Data 15/03/2007 15:35 <REP> . 15/03/2007 15:35 <REP> .. 15/03/2007 15:35 <REP> Microsoft 15/03/2007 15:35 62 desktop.ini 1 fichier(s) 62 octets 3 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data 15/03/2007 15:35 <REP> . 15/03/2007 15:35 <REP> .. 0 fichier(s) 0 octets 2 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\LocalService\Application Data 15/03/2007 17:58 <REP> . 15/03/2007 17:58 <REP> .. 15/03/2007 17:58 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data 15/03/2007 17:58 <REP> . 15/03/2007 17:58 <REP> .. 15/03/2007 17:58 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\NetworkService\Application Data 15/03/2007 17:58 <REP> . 15/03/2007 17:58 <REP> .. 15/03/2007 17:58 <REP> Microsoft 21/05/2007 20:33 <REP> Symantec 0 fichier(s) 0 octets 4 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data 15/03/2007 17:58 <REP> . 15/03/2007 17:58 <REP> .. 01/12/2007 12:11 <REP> Apple 15/03/2007 17:58 <REP> Microsoft 0 fichier(s) 0 octets 4 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data 15/03/2007 17:46 <REP> . 15/03/2007 17:46 <REP> .. 15/03/2007 17:46 <REP> Microsoft 15/03/2007 17:46 62 desktop.ini 1 fichier(s) 62 octets 3 Rép(s) 4 512 804 864 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data 15/03/2007 17:46 <REP> . 15/03/2007 17:46 <REP> .. 26/03/2007 23:20 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 4 512 804 864 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS\tasks C:\WINDOWS\Tasks\A78242209185F5AC.job p§í8Ý?O’?ósàúF ê < s "€!Ø > c : \ d o c u m e ~ 1 \ b e r g e r a t \ a p p l i c ~ 1 \ s a f e s h ~ 1 \ s u p p o r t t h a t e r r o r . e x e B e r g e r a t 0 Ñ < C:\WINDOWS\Tasks\AppleSoftwareUpdate.job s €!Ø : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e - t a s k S Y S T E M 0 × @ ****************************************** ## Répertoires de C:\Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 44DA-2436 Répertoire de C:\Program Files 14/02/2008 19:44 <REP> . 14/02/2008 19:44 <REP> .. 14/09/2007 18:01 <REP> Adobe 20/03/2007 15:38 <REP> Ahead 16/10/2007 17:14 <REP> Alwil Software 28/11/2007 14:52 <REP> Apple Software Update 28/03/2007 15:15 <REP> ATnotes 11/10/2007 17:26 <REP> Azureus 15/03/2007 18:40 <REP> Common Files 15/03/2007 18:41 <REP> CyberLink 30/01/2008 19:39 <REP> DivX 20/03/2007 18:01 <REP> D-Tools 24/01/2008 16:05 <REP> eMule 17/01/2008 12:30 <REP> Fichiers communs 29/03/2007 16:20 <REP> Google 05/10/2007 14:12 <REP> Hewlett-Packard 05/10/2007 14:15 <REP> HP 15/03/2007 18:19 <REP> Intel 22/01/2008 10:18 <REP> Internet Explorer 05/10/2007 14:00 <REP> Java 17/01/2008 12:32 <REP> Lavasoft 16/01/2008 19:46 <REP> LimeWire 15/03/2007 18:22 <REP> ltmoh 27/03/2007 18:02 <REP> Messenger 15/03/2007 17:43 <REP> microsoft frontpage 20/03/2007 18:12 <REP> Microsoft Office 20/03/2007 18:13 <REP> Microsoft.NET 26/03/2007 23:02 <REP> Movie Maker 01/03/2008 14:05 <REP> Mozilla Firefox 20/03/2007 15:09 <REP> MSECache 15/03/2007 17:39 <REP> MSN Gaming Zone 27/03/2007 18:05 <REP> MSN Messenger 07/10/2007 01:42 <REP> MSXML 4.0 26/03/2007 22:57 <REP> NetMeeting 27/03/2007 16:45 <REP> Outlook Express 22/08/2007 15:24 <REP> PDFCreator 14/10/2007 22:41 <REP> Picasa2 05/01/2008 12:16 <REP> QuickTime 28/03/2007 15:28 <REP> Real 14/02/2008 19:44 <REP> safe shim pop 15/03/2007 17:42 <REP> Services en ligne 13/04/2007 00:05 <REP> Skype 17/01/2008 12:35 <REP> Spybot - Search & Destroy 15/03/2007 18:22 <REP> Synaptics 09/11/2007 18:55 <REP> Unlocker 08/11/2007 19:22 <REP> Veoh Networks 20/03/2007 15:28 <REP> VideoLAN 23/05/2007 10:35 <REP> Windows Media Connect 2 23/05/2007 10:57 <REP> Windows Media Player 26/03/2007 22:56 <REP> Windows NT 25/10/2007 14:30 <REP> WinRAR 15/03/2007 17:43 <REP> xerox 20/07/2007 13:21 <REP> XviD 0 fichier(s) 0 octets 53 Rép(s) 4 512 784 384 octets libres ****************************************** ## Popups autorisées * Internet Explorer ! REG.EXE VERSION 3.0 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow www8.ratp.info REG_BINARY www31.ratp.info REG_BINARY www.ratp.info REG_BINARY www.ipsos.fr REG_BINARY host-domain-lookup.com REG_SZ www.host-domain-lookup.com REG_SZ netsearchsoft.com REG_SZ www.netsearchsoft.com REG_SZ * Mozilla Firefox (1 autorisé 2 interdit) ---------- C:\DOCUMENTS AND SETTINGS\BERGERAT\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\4P0J8KPM.DEFAULT\HOSTPERM.1 host popup 1 www.ratp.info host popup 1 www7.ratp.info host popup 1 www.retraitedanslaville.org host popup 1 apps.facebook.com host popup 1 www33.ratp.info host popup 1 www.loreal.fr host popup 1 app1.presidiomedia.com host popup 1 www.1980-games.com host popup 1 www8.ratp.info host popup 1 www.ratp.fr host popup 1 www35.ratp.info host popup 1 www31.ratp.info host popup 1 www9.ratp.info host popup 1 www.colas-batiment.com host popup 1 www.veoh.com ****************************************** ## Registre * [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main] Search Bar REG_SZ http://www.google.com/ie * [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] mp3 glue close defy REG_SZ C:\Documents and Settings\All Users\Application Data\scr style mp3 glue\license gpl.exe * [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Wipepeak REG_SZ C:\DOCUME~1\Bergerat\APPLIC~1\SAFESH~1\soft logo.exe ****************************************** ## Zones de sécurité * HKCU Domains (4) * P3P History (5) ****************************************** ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif" *************** Fin du rapport ****************

Bonjour à tous, Cela fait déjà quelques temps que j'ai malencontreusement installé le malware 3wPlayer. Depuis, des fenêtres d'explorer s'ouvrent toutes seules sur mon pc. Avast ne détecte pas ce malware, ni spybot, no ad-aware. Je ne sais pas comment enlevé ce malware de mon ordinateur. Il est d'autant plus génant que j'ai l'impression qu'il surcharge ma connexion qui est de plus en plus lente. Je connais les programmes qu'il utilise (iexplorer.exe et SOFT~LO.EXE) mais je ne sais pas comment les enlever de mon pc. J'ai lancé un rapport HiJackThis, ci-dessous afin que vous puissiez mieux vous rendre compte de l'effet de ce malware sur mon système et voir si vous pouvez m'aider. Merci d'avance. Voici le rapport: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 00:06:56, on 01/03/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\AGRSMMSG.exe C:\Program Files\ltmoh\Ltmoh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\vsnpstd2.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Veoh Networks\Veoh\VeohClient.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Documents and Settings\Bergerat\Bureau\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [sNPSTD2] C:\WINDOWS\vsnpstd2.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [mp3 glue close defy] C:\Documents and Settings\All Users\Application Data\scr style mp3 glue\license gpl.exe O4 - HKCU\..\Run: [Wipepeak] C:\DOCUME~1\Bergerat\APPLIC~1\SAFESH~1\soft logo.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1174328959928 O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwa...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe -- End of file - 9544 bytes