Bonjour,

à chaque sur mon bureau s'affiche la fenetre suivante "avp.exe erreur: la mémoire ne peut pas etre read",
j'ai analysé le pc avec Hijachthis et voila le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:51:36, on 29/12/2008
Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\tsnp2std.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Free Download Manager\fdm.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Administrateur\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Free Download Manager] "D:\Free Download Manager\fdm.exe" -autorun
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://D:\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://D:\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://D:\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://D:\Free Download Manager\dlfvideo.htm
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{68336B0B-D8BF-484F-8CDF-11A9F60ACF2C}: NameServer = 41.221.20.4 193.251.169.165
O17 - HKLM\System\CS1\Services\Tcpip\..\{68336B0B-D8BF-484F-8CDF-11A9F60ACF2C}: NameServer = 41.221.20.4 193.251.169.165
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Norman NJeeves - Unknown owner - D:\bin\NJEEVES.EXE (file missing)
O23 - Service: Norman ZANDA - Unknown owner - D:\Bin\Zanda.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe
End of file - 5941 bytes

j'ai aussi utilisé Usbfix, je vous donne le résultat d'analyse:



--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe

D: - Lecteur fixe

E: - Lecteur fixe

G: - Lecteur de CD-ROM


--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe


+- Listing des fichiers présents :

[23/11/2008 17:58][--a------] C:\AUTOEXEC.BAT
[22/08/2008 03:44][-rahs----] C:\NTDETECT.COM
[23/11/2008 17:52][---hs----] C:\boot.ini
[29/12/2008 19:40][--a------] C:\UsbFix.txt
[23/11/2008 17:58][--a------] C:\CONFIG.SYS
[23/11/2008 17:58][--a------] C:\IO.SYS
[23/11/2008 17:58][--a------] C:\MSDOS.SYS
[23/11/2008 17:58][--a------] C:\pagefile.sys

--------------- [ Lecteur D ] ----------------

D: - Lecteur fixe


+- Listing des fichiers présents :

[21/11/2008 14:06][-rahs----] D:\abk.bat

--------------- [ Lecteur E ] ----------------

E: - Lecteur fixe


+- Listing des fichiers présents :

[21/11/2008 14:06][-r-hs----] E:\abk.bat
[31/08/2008 13:19][--a------] E:\fdminst3.exe
[17/11/2008 19:33][--a------] E:\les site.txt

--------------- [ Lecteur G ] ----------------

G: - Lecteur de CD-ROM


+- Listing des fichiers présents :

[04/07/2008 15:32][-r-------] G:\AdbeRdr90_fr_FR.exe
[04/07/2008 15:32][-r-------] G:\CCleaner.exe
[04/07/2008 15:32][-r-------] G:\Deep Freeze.exe
[04/07/2008 15:32][-r-------] G:\DeepFreeze2000XP.exe
[04/07/2008 15:32][-r-------] G:\DivXInstaller.exe
[04/07/2008 15:32][-r-------] G:\DivXPlay.exe
[04/07/2008 15:32][-r-------] G:\Firefox Setup 2.0.0.14.exe
[04/07/2008 15:32][-r-------] G:\LimeWireWin.exe
[04/07/2008 15:32][-r-------] G:\Media player.exe
[04/07/2008 15:32][-r-------] G:\RealPlayer11GOLD_fr.exe
[04/07/2008 15:32][-r-------] G:\SkypeSetup.exe
[04/07/2008 15:32][-r-------] G:\SuperCopier.exe
[04/07/2008 15:32][-r-------] G:\Telecharger Vid‚o.exe
[04/07/2008 15:32][-r-------] G:\WinRar3.50fr.exe
[04/07/2008 15:32][-r-------] G:\aMSN-0.97.exe
[04/07/2008 15:32][-r-------] G:\bac.Tootbar radio.exe
[04/07/2008 15:32][-r-------] G:\eMule0.49.exe
[04/07/2008 15:32][-r-------] G:\flash_player.exe
[04/07/2008 15:32][-r-------] G:\flashget190en.exe
[04/07/2008 15:32][-r-------] G:\google-earth.exe
[04/07/2008 15:32][-r-------] G:\spybotsd15.exe
[04/07/2008 15:32][-r-------] G:\total-video-convertor.exe
[04/07/2008 15:32][-r-------] G:\vlc-0.8.6i-win32.exe
[04/07/2008 15:32][-r-------] G:\yahoo.msgr8fr.exe

--------------- [ Registre / Startup ] ----------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"=""
"Start Page"=""

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
LClock="C:\Program Files\LClock\LClock.exe"
RocketDock="C:\Program Files\RocketDock\RocketDock.exe"
MsnMsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
Free Download Manager="D:\Free Download Manager\fdm.exe" -autorun

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
SoundMan=SOUNDMAN.EXE
SiSPower=Rundll32.exe SiSPower.dll,ModeAgent
AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
FixCamera=C:\WINDOWS\FixCamera.exe
tsnp2std=C:\WINDOWS\tsnp2std.exe
TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
snp2std=C:\WINDOWS\vsnp2std.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=dword:000000ff

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=dword:000000ff

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7e35bb1b-bee7-11dd-9af5-00155846afc4}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7e35bb1b-bee7-11dd-9af5-00155846afc4}\Shell\open\Command

--------------- [ Nettoyage des disques ] ----------------

Supprimé ! - [21/11/2008 14:06][-rahs----] D:\abk.bat
Supprimé ! - [21/11/2008 14:06][-r-hs----] E:\abk.bat

--------------- [ Resumé ] ----------------

-> /!\ Le resultat doit etre par un spécialiste /!\

[23/11/2008 17:58][--a------] C:\AUTOEXEC.BAT
[22/08/2008 03:44][-rahs----] C:\NTDETECT.COM
[23/11/2008 17:52][---hs----] C:\boot.ini
[31/08/2008 13:19][--a------] E:\fdminst3.exe
[04/07/2008 15:32][-r-------] G:\AdbeRdr90_fr_FR.exe
[04/07/2008 15:32][-r-------] G:\CCleaner.exe
[04/07/2008 15:32][-r-------] G:\Deep Freeze.exe
[04/07/2008 15:32][-r-------] G:\DeepFreeze2000XP.exe
[04/07/2008 15:32][-r-------] G:\DivXInstaller.exe
[04/07/2008 15:32][-r-------] G:\DivXPlay.exe
[04/07/2008 15:32][-r-------] G:\Firefox Setup 2.0.0.14.exe
[04/07/2008 15:32][-r-------] G:\LimeWireWin.exe
[04/07/2008 15:32][-r-------] G:\Media player.exe
[04/07/2008 15:32][-r-------] G:\RealPlayer11GOLD_fr.exe
[04/07/2008 15:32][-r-------] G:\SkypeSetup.exe
[04/07/2008 15:32][-r-------] G:\SuperCopier.exe
[04/07/2008 15:32][-r-------] G:\Telecharger Vid‚o.exe
[04/07/2008 15:32][-r-------] G:\WinRar3.50fr.exe
[04/07/2008 15:32][-r-------] G:\aMSN-0.97.exe
[04/07/2008 15:32][-r-------] G:\bac.Tootbar radio.exe
[04/07/2008 15:32][-r-------] G:\eMule0.49.exe
[04/07/2008 15:32][-r-------] G:\flash_player.exe
[04/07/2008 15:32][-r-------] G:\flashget190en.exe
[04/07/2008 15:32][-r-------] G:\google-earth.exe
[04/07/2008 15:32][-r-------] G:\spybotsd15.exe
[04/07/2008 15:32][-r-------] G:\total-video-convertor.exe
[04/07/2008 15:32][-r-------] G:\vlc-0.8.6i-win32.exe
[04/07/2008 15:32][-r-------] G:\yahoo.msgr8fr.exe

je ne sais pas quoi faire, SVP j'ai vraiment besoin de votre aide, merci.

Configuration: Windows XP
Firefox 3.0.5