generaloberst

Bonsoir, En tout cas merci pour tous les précieux conseils. Je ne suis pas encore tiré d'affaire car malgré un download massif de mise à jour d'éléments de sécurité, je n'arrive toujours pas à me débarasser des 3 dernières bêbêtes qui incrustent mon PC Je vais persévérer ces prochains jours et je vous tiendrai au courant du résultat. Merci encore

Bonjour, J'essaye d'appliquer les correctifs de Kaspersky mais les derniers morpions ne veulent pas lâcher prise Rapport Kaspersky Analyse complète: terminée le 14.07.2009 23:41:58 (événements : 6, objets : 129424, durée : 00:48:55) 14.07.2009 23:41:48 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll 14.07.2009 23:41:48 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll 14.07.2009 23:19:18 Détectés: http://www.viruslist.com/fr/advisories/32270 C:\I386\Flash.ocx 14.07.2009 23:30:26 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\VaudTax2008\jre\bin\eula.dll 14.07.2009 23:41:58 Fin de la tâche 14.07.2009 22:53:03 Lancement de la tâche J'ai effectué le Combofix, voici le rapport ComboFix 09-07-13.01 - ALEXIS 14.07.2009 22:21.2.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.642 [GMT 2:00] Running from: c:\documents and settings\ALEXIS\Bureau\ComboFix.exe AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Comodo Personal Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B} . ((((((((((((((((((((((((( Files Created from 2009-06-14 to 2009-07-14 ))))))))))))))))))))))))))))))) . 2009-07-14 17:32 . 2009-07-14 17:32 -------- d-----w- c:\program files\Java 2009-07-13 20:15 . 2009-07-13 20:15 -------- d-----w- c:\documents and settings\ALEXIS\Application Data\MSNInstaller 2009-07-13 07:40 . 2009-07-13 20:10 -------- d-----w- c:\documents and settings\ALEXIS\Local Settings\Application Data\Google 2009-07-13 07:30 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll 2009-07-12 19:54 . 2009-07-14 17:31 152576 ----a-w- c:\documents and settings\ALEXIS\Application Data\Sun\Java\jre1.6.0_14\lzma.dll 2009-07-12 19:14 . 2009-07-14 19:34 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS 2009-07-12 19:14 . 2009-07-14 19:34 -------- d-----w- c:\program files\NOS 2009-07-12 17:45 . 2009-07-12 17:45 -------- d-----w- c:\windows\system32\XPSViewer 2009-07-12 17:45 . 2009-07-12 17:45 -------- d-----w- c:\program files\MSBuild 2009-07-12 17:45 . 2009-07-12 17:45 -------- d-----w- c:\program files\Reference Assemblies 2009-07-12 17:45 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll 2009-07-12 17:45 . 2009-07-12 17:45 -------- dc----w- C:\d658d8b01071847aa6d60cccd0c61a 2009-07-12 17:45 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll 2009-07-12 17:45 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll 2009-07-12 17:45 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll 2009-07-12 17:45 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll 2009-07-12 17:45 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll 2009-07-12 17:45 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2009-07-12 17:04 . 2009-07-12 17:04 -------- dcsh--w- c:\documents and settings\ALEXIS\IECompatCache 2009-07-12 17:04 . 2009-07-12 17:04 -------- dcsh--w- c:\documents and settings\ALEXIS\PrivacIE 2009-07-12 16:59 . 2009-07-12 16:59 -------- dcsh--w- c:\documents and settings\ALEXIS\IETldCache 2009-07-12 16:53 . 2009-07-12 16:53 -------- d--h--w- c:\windows\msdownld.tmp 2009-07-12 16:53 . 2009-07-12 16:53 -------- d-----w- c:\windows\ie8updates 2009-07-12 16:51 . 2009-07-12 16:52 -------- dc-h--w- c:\windows\ie8 2009-07-12 16:41 . 2009-06-02 10:12 102912 ------w- c:\windows\system32\dllcache\iecompat.dll 2009-07-12 16:41 . 2009-04-30 21:16 12800 ------w- c:\windows\system32\dllcache\xpshims.dll 2009-07-12 16:41 . 2009-04-30 21:16 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll 2009-07-12 15:52 . 2009-07-12 15:52 -------- d-----w- c:\program files\Bonjour 2009-07-12 15:51 . 2009-07-12 15:51 -------- d-----w- c:\program files\Apple Software Update 2009-07-11 09:52 . 2007-01-18 12:00 3968 ----a-w- c:\windows\system32\drivers\AvgArCln.sys 2009-07-11 09:35 . 2009-07-11 09:35 -------- d-----w- c:\documents and settings\ALEXIS\Application Data\Malwarebytes 2009-07-11 09:35 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-07-11 09:35 . 2009-07-11 09:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-07-11 09:34 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-07-11 09:34 . 2009-07-11 09:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-07-10 21:36 . 2009-07-10 21:36 812344 ----a-w- c:\program files\HJTInstall.exe 2009-07-10 21:34 . 2009-07-10 21:34 -------- d-----w- c:\program files\Trend Micro 2009-07-10 20:46 . 2009-07-13 20:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft 2009-07-07 20:02 . 2009-07-07 20:08 126318 ----a-w- c:\windows\hpqins00.dat 2009-07-04 14:51 . 2009-07-04 14:52 -------- d-----w- c:\documents and settings\ALEXIS\Application Data\Nero 2009-07-04 08:12 . 2009-07-05 20:24 -------- d-----w- c:\program files\Nero 2009-07-04 08:11 . 2009-07-05 20:48 -------- d-----w- c:\program files\Fichiers communs\Nero 2009-07-04 08:11 . 2009-07-05 20:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero 2009-06-16 14:40 . 2009-06-16 14:40 81920 ------w- c:\windows\system32\dllcache\fontsub.dll 2009-06-16 14:40 . 2009-06-16 14:40 119808 ------w- c:\windows\system32\dllcache\t2embed.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-14 20:14 . 2007-10-16 17:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab 2009-07-14 20:11 . 2007-10-16 17:54 95084 --sha-w- c:\windows\system32\drivers\fidbox2.idx 2009-07-14 20:11 . 2007-10-16 17:54 252524 --sha-w- c:\windows\system32\drivers\fidbox.idx 2009-07-14 20:11 . 2007-10-16 17:54 18774816 --sha-w- c:\windows\system32\drivers\fidbox.dat 2009-07-14 20:11 . 2007-10-16 17:54 1002784 --sha-w- c:\windows\system32\drivers\fidbox2.dat 2009-07-14 20:11 . 2005-01-21 09:13 384 ----a-w- c:\windows\system32\DVCStateBkp-{00000004-00000000-00000000-00001102-00000004-20061102}.dat 2009-07-14 20:11 . 2005-01-21 09:13 384 ----a-w- c:\windows\system32\DVCState-{00000004-00000000-00000000-00001102-00000004-20061102}.dat 2009-07-14 17:32 . 2008-12-26 07:26 410984 ----a-w- c:\windows\system32\deploytk.dll 2009-07-13 20:53 . 2009-07-13 20:53 0 ----a-w- c:\windows\system32\RENAE.tmp 2009-07-13 20:53 . 2009-07-13 20:53 0 ----a-w- c:\windows\system32\RENAD.tmp 2009-07-13 20:45 . 2005-01-28 15:03 -------- d-----w- c:\program files\Fichiers communs\Adobe 2009-07-13 20:30 . 2005-01-28 09:04 58392 ----a-w- c:\documents and settings\ALEXIS\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-07-13 20:24 . 2007-11-23 18:16 36864 -c--a-w- c:\documents and settings\ALEXIS\timeseal.exe 2009-07-13 20:22 . 2005-01-29 23:06 -------- d-----w- c:\documents and settings\ALEXIS\Application Data\Lavasoft 2009-07-13 20:13 . 2005-01-29 23:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-07-13 20:08 . 2005-01-21 09:04 80948 ----a-w- c:\windows\system32\perfc00C.dat 2009-07-13 20:08 . 2005-01-21 09:04 502484 ----a-w- c:\windows\system32\perfh00C.dat 2009-07-12 17:08 . 2007-09-24 12:54 -------- d-----w- c:\documents and settings\ALEXIS\Application Data\HPAppData 2009-07-12 17:08 . 2007-09-24 12:49 -------- d-----w- c:\program files\HP 2009-07-12 14:43 . 2005-01-28 10:12 -------- d-----w- c:\program files\Downloads 2009-07-05 20:32 . 2005-01-28 15:56 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared 2009-07-05 20:25 . 2005-01-21 09:12 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-06-16 14:40 . 2004-08-05 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll 2009-06-16 14:40 . 2004-08-05 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll 2009-06-11 18:26 . 2009-06-11 18:26 -------- dc----w- c:\documents and settings\al\Application Data\HPAppData 2009-06-03 19:10 . 2004-08-05 12:00 1297408 ----a-w- c:\windows\system32\quartz.dll 2009-05-20 19:51 . 2007-10-16 17:54 94643 ----a-w- c:\windows\system32\drivers\klick.dat 2009-05-20 19:51 . 2007-10-16 17:54 105395 ----a-w- c:\windows\system32\drivers\klin.dat 2009-05-18 04:27 . 2009-05-18 04:27 -------- dc----w- c:\documents and settings\EMA\Application Data\HPAppData 2009-05-13 05:04 . 2004-08-05 12:00 915456 ----a-w- c:\windows\system32\wininet.dll 2009-05-07 15:33 . 2004-08-05 12:00 348672 ----a-w- c:\windows\system32\localspl.dll 2009-04-27 14:49 . 2009-05-17 21:06 4969808 ----a-w- c:\documents and settings\ALEXIS\Application Data\TomTom\HOME\Profiles\npp7zrsv.default\extensions\Navcore.8.350.9980@tomtom.com\8-350-9980-1.dll 2009-04-19 19:50 . 2004-08-05 12:00 1847296 ----a-w- c:\windows\system32\win32k.sys 2005-11-13 10:50 . 2005-11-13 10:50 56 --sh--r- c:\windows\SYSTEM32\D525BC1756.sys 2005-11-13 10:50 . 2005-11-13 10:50 1682 --sha-w- c:\windows\SYSTEM32\KGyGaAvL.sys . ((((((((((((((((((((((((((((( SnapShot@2009-07-14_19.46.47 ))))))))))))))))))))))))))))))))))))))))) . + 2009-07-14 20:13 . 2009-07-14 20:13 16384 c:\windows\Temp\Perflib_Perfdata_300.dat + 2001-07-14 15:32 . 2001-07-14 15:32 69632 c:\windows\setupupd\temp\wsdueng.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232] "TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-04-08 251240] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 204288] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2004-11-11 4583424] "IAAnotif"="c:\program files\Intel\Intel Application Accelerator\iaanotif.exe" [2004-06-29 135168] "CTSysVol"="c:\program files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe" [2003-09-17 57344] "DVDLauncher"="c:\program files\CyberLink\PowerDVD\DVDLauncher.exe" [2004-10-12 57344] "dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-08-13 122939] "UpdateManager"="c:\program files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2004-01-07 110592] "DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2004-09-15 86016] "AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 116040] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" [2009-02-06 206088] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-14 148888] "CTHelper"="CTHELPER.EXE" - c:\windows\SYSTEM32\CTHELPER.EXE [2004-03-11 28672] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360] [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "c:\\Bluewin(Router)\\Wizard\\NetAgentBW.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\SYSTEM32\DRIVERS\klbg.sys [29.01.2008 18:29 33808] R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [08.04.2009 12:38 92008] R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\SYSTEM32\DRIVERS\klim5.sys [30.04.2008 18:06 24592] S3 jgameenp;jgameenp;\??\c:\docume~1\ALEXIS\LOCALS~1\Temp\jgameenp.sys --> c:\docume~1\ALEXIS\LOCALS~1\Temp\jgameenp.sys [?] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Contents of the 'Scheduled Tasks' folder 2009-07-12 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.lematin.ch/ uInternet Connection Wizard,ShellNext = hxxp://fr.mcafee.com/apps/vso/fr/vso9/default.asp?affid=105-31&dtag=cjdmg1j uInternet Settings,ProxyOverride = *.local IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 DPF: {3B36B017-7E49-426B-95B0-B5CECD83C2E2} - hxxp://chkr-web.ifolor.net/ORDERINGGENERAL/LowRes/app_support/ActiveX/IfolorUploader_chkr.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-14 22:26 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*] "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(3304) c:\windows\system32\eappprxy.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Completion time: 2009-07-14 22:29 ComboFix-quarantined-files.txt 2009-07-14 20:29 ComboFix2.txt 2009-07-14 19:51 Pre-Run: 197'870'284'800 octets libres Post-Run: 197'849'190'400 octets libres 188 --- E O F --- 2009-07-14 18:06 Merci d'avance !!!

Etant au travail, je n'ai pas mon PC sous la main mais je vous remercie encore pour l'aide précieuse. Je m'attaque à la suite des opérations dès ce soir ! Bonne journée

Je suis toujours en train de lutter contre les morpions qui agressent mon PC J'ai suivi les conseils, j'ai également supprimé tout ce que je pouvais de mon disque dur J'ai essayé d'appliquer les remèdes de Kaspersky Il me encore quelques petits soucis mais mon PC a retrouvé une certaine vitesse de fonctionnement Voici le dernier rapport Kaspersky Analyse complète: terminée le 13.07.2009 23:24:16 (événements : 6, objets : 94025, durée : 00:21:41) 13.07.2009 23:24:08 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll 13.07.2009 23:24:08 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll 13.07.2009 23:12:40 Détectés: http://www.viruslist.com/fr/advisories/32270 C:\I386\Flash.ocx 13.07.2009 23:18:08 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\VaudTax2008\jre\bin\eula.dll 13.07.2009 23:24:16 Fin de la tâche 13.07.2009 23:02:35 Lancement de la tâche Et puisque nous y sommes, voici le rapport hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:33:37, on 13.07.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lematin.ch/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr.mcafee.com/apps/vso/fr/vso9/defa...mp;dtag=cjdmg1j R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - (no file) O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing) O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Comodo Personal Firewall] C:\Program Files\Comodo\Personal Firewall\CPF.exe sysrestart O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {3B36B017-7E49-426B-95B0-B5CECD83C2E2} (IfolorUploader Control) - http://chkr-web.ifolor.net/ORDERINGGENERAL...loader_chkr.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...e.cab?119152925 0468 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...cab?12474193395 31 O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Kaspersky Anti-Virus (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 9241 bytes Merci mille fois pour l'aide précieuse et j'attends les derniers conseils pour venir à bout des dernières saletés MERCI !!!

clic sur Download Windows binary.zip vers le bureau. Je ne comprends pas ce que je dois faire, désolé mais je ne suis pas un pro. Merci d'avance

Tout d'abord merci pour les conseils. Teatimer était déjà désactivé. Voici le rapport Kaspersky Analyse complète: terminée le 11.07.2009 14:27:22 (événements : 34, objets : 156101, durée : 00:49:56) 11.07.2009 14:27:18 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll 11.07.2009 14:27:17 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll 11.07.2009 14:27:17 Détectés: http://www.viruslist.com/fr/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll 11.07.2009 14:08:57 Détectés: http://www.viruslist.com/fr/advisories/26201 C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.bak 11.07.2009 13:56:02 Détectés: http://www.viruslist.com/fr/advisories/29434 C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\mia.lib 11.07.2009 14:18:28 Détectés: http://www.viruslist.com/fr/advisories/30150 C:\Program Files\microsoft office\office11\mspub.exe 11.07.2009 13:39:03 Détectés: http://www.viruslist.com/fr/advisories/30150 C:\Program Files\microsoft office\office11\mspub.exe 11.07.2009 14:15:04 Détectés: http://www.viruslist.com/fr/advisories/31744 C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSO.DLL 11.07.2009 14:09:28 Détectés: http://www.viruslist.com/fr/advisories/31822 C:\Program Files\Bonjour\mDNSResponder.exe 11.07.2009 13:38:50 Détectés: http://www.viruslist.com/fr/advisories/31822 C:\Program Files\Bonjour\mDNSResponder.exe 11.07.2009 13:37:58 Détectés: http://www.viruslist.com/fr/advisories/31822 C:\Program Files\Bonjour\mDNSResponder.exe 11.07.2009 14:06:47 Détectés: http://www.viruslist.com/fr/advisories/32270 C:\I386\Flash.ocx 11.07.2009 14:19:47 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\VaudTax2008\jre\bin\eula.dll 11.07.2009 14:19:24 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\VaudTax2007\jre\bin\eula.dll 11.07.2009 14:15:49 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\jre1.5.0_08\bin\javaws.exe 11.07.2009 14:15:41 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\jre1.5.0_06\bin\javaws.exe 11.07.2009 14:15:37 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\jre1.5.0_04\bin\javaws.exe 11.07.2009 14:15:34 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\jre1.5.0_02\bin\javaws.exe 11.07.2009 14:15:24 Détectés: http://www.viruslist.com/fr/advisories/32991 C:\Program Files\Java\j2re1.4.2_03\bin\eula.dll 11.07.2009 14:27:01 Détectés: http://www.viruslist.com/fr/advisories/34012 C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32.dll 11.07.2009 14:18:48 Détectés: http://www.viruslist.com/fr/advisories/34012 C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll 11.07.2009 14:16:29 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.6.0_07\bin\java.exe 11.07.2009 14:16:10 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.6.0_05\bin\java.exe 11.07.2009 14:16:02 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.6.0_03\bin\java.exe 11.07.2009 14:15:48 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_08\bin\java.exe 11.07.2009 14:15:41 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_06\bin\java.exe 11.07.2009 14:15:37 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_04\bin\java.exe 11.07.2009 14:15:34 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_02\bin\java.exe 11.07.2009 14:15:29 Détectés: http://www.viruslist.com/fr/advisories/34451 C:\Program Files\Java\jre1.5.0_01\bin\java.exe 11.07.2009 14:09:19 Détectés: http://www.viruslist.com/fr/advisories/34580 C:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Annots.api 11.07.2009 14:18:31 Détectés: http://www.viruslist.com/fr/advisories/35364 C:\Program Files\microsoft office\office11\excel.exe 11.07.2009 13:38:52 Détectés: http://www.viruslist.com/fr/advisories/35364 C:\Program Files\microsoft office\office11\excel.exe 11.07.2009 14:27:22 Fin de la tâche 11.07.2009 13:37:26 Lancement de la tâche

Bonjour à tous, J'utilise Kaspersky Anti-Virus et il me signale 28 menaces actives sur mon PC Je n'arrive pas à m'en débarasser, merci de votre aide. Voici le résultat de Hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:38:30, on 11.07.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Windows Media Player\WMPNetwk.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE C:\WINDOWS\system32\CTHELPER.EXE C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Spyware Doctor\swdoctor.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.edicom.ch/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bluewin.ch/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr.mcafee.com/apps/vso/fr/vso9/defa...mp;dtag=cjdmg1j R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Comodo Personal Firewall] C:\Program Files\Comodo\Personal Firewall\CPF.exe sysrestart O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-21-1241081244-2638931518-4023306497-1011\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-21-1241081244-2638931518-4023306497-1012\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {3B36B017-7E49-426B-95B0-B5CECD83C2E2} (IfolorUploader Control) - http://chkr-web.ifolor.net/ORDERINGGENERAL...loader_chkr.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...e.cab?119152925 0468 O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Kaspersky Anti-Virus (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 11652 bytes