Bonjour,
j'ai aussi un gros soucis avec conhook.nl mais malheureusement je n'ai plus msn je ne peux donc poster en directe pouvez vous m'aidez svplait
j'ai vu que vous conseillez a chaque fois hijack donc je vous met le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:00:30, on 16/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.­EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-104419­9.exe
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\System32\STDSB.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/Internet/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.0\EasyGifAnimator_Toolbar.dll
O4 - HKLM\..\Run: [STDSB] C:\WINDOWS\System32\STDSB.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CanalPlayerHelper] C:\Program Files\Lecteur CANALPLAY\CanalPlayerHelper.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [00d8934f] rundll32.exe "C:\WINDOWS\system32\hnoexboe.dll",b
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} (VirginMega DownloadManager) - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://paris.ville.orange.fr/CO/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5C3F003-D34B-41F8-B4E5-6514C7E1509D}: NameServer = 195.168.1.112
O20 - AppInit_DLLs: C:\WINDOWS\system32\__c009258E.dat
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
End of file - 9731 bytes


j'espere que vous pourrez m'aider merci d'avance en tout cas
nathalie59

RE,
log de vundofix.txt :

VundoFix V6.4.2

Checking Java version...

Sun Java not detected
Scan started at 21:50:34 04/06/2007

Listing files found while scanning....

C:\WINDOWS\nqttss.ini
C:\WINDOWS\ssttqn.dll
C:\WINDOWS\System32\tmp3.tmp.dll
C:\WINDOWS\System32\tmp5.tmp.dll

Beginning removal...

Attempting to delete C:\WINDOWS\nqttss.ini
C:\WINDOWS\nqttss.ini Has been deleted!

Attempting to delete C:\WINDOWS\System32\tmp3.tmp.dll
C:\WINDOWS\System32\tmp3.tmp.dll Has been deleted!

Attempting to delete C:\WINDOWS\System32\tmp5.tmp.dll
C:\WINDOWS\System32\tmp5.tmp.dll Has been deleted!

Performing Repairs to the registry.
Done!


rapport hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 22:05:03, on 04/06/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\SurfAccuracy\SAcc.exe
C:\WINDOWS\lljvp.exe
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Morpheus\Morpheus.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\lxcrcoms.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\HijackThis1991.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.unika.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {20EC3D2D-33C1-4C9D-BC37-C2D500688DA2} - (no file)
R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: (no name) - {00000000-0000-0000-0000-000000000221} - (no file)
O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - (no file)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: BhoApp Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\Program Files\WinBudget\bin\matrix.dll
O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O2 - BHO: (no name) - {44E5B409-35A2-4E8D-BF94-344222323A53} - (no file)
O2 - BHO: NavErrRedir Class - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
O2 - BHO: (no name) - {60112085-E1CE-4e0e-823A-EBB1AD98804C} - (no file)
O2 - BHO: (no name) - {72AC6865-B1D3-4C32-A27B-4B3BF04DE655} - (no file)
O2 - BHO: (no name) - {8109AF33-6949-4833-8881-43DCC232B7B2} - (no file)
O2 - BHO: (no name) - {b2a5cd82-beee-4d9d-97b6-0fe5bbbf652c} - C:\WINDOWS\system32\fonr32.dll
O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [*odbcurl] C:\WINDOWS\system32\1041\odbcurl.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [ReJf5vH] C:\WINDOWS\lljvp.exe
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [InstantTray] C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe
O4 - HKCU\..\Run: [IW_Drop_Icon] C:\Program Files\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe /DropDisc
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - Startup: Morpheus.lnk = C:\Program Files\Morpheus\Morpheus.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.unika.com
O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_FR_XP.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.photorigaud.com/fr/include/upload_activex/ImageUploader3.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: fonr32 - C:\WINDOWS\SYSTEM32\fonr32.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: lxcr_device - - C:\WINDOWS\System32\lxcrcoms.exe

qu'est ce que je dois faire maintenant....

Salut,
je n'ai pas mon poste infecté sous la main, je ne pourrai scanner que ce soir.
En tout cas merci pour ton aide précieuse.
Je t'en dirai + ce soir.

Re,
ci dessous résultat
Scanner results
Scan taken on 05 Jun 2007 18:47:29 (GMT)
A-Squared Found nothing
AntiVir Found HEUR/Malware
ArcaVir Found Trojan.Downloader.Agent.Awf
Avast Found Win32:Trojan-gen.
AVG Antivirus Found Downloader.Agent.GQJ
BitDefender Found DeepScan:Generic.Mitglied.687CAF98
ClamAV Found Trojan.Downloader.Agent-1215
Dr.Web Found Trojan.LowZones.193
F-Prot Antivirus Found W32/Downloader.ANDT
F-Secure Anti-Virus Found Trojan-Downloader.Win32.Agent.awf
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-Downloader.Win32.Agent.awf
NOD32 Found a variant of Win32/TrojanDownloader.Agent.AWF
Norman Virus Control Found W32/Agent.APVD
Panda Antivirus Found Trj/KillAV.FG
Rising Antivirus Found Trojan.DL.Agent.yqf
VirusBuster Found nothing
VBA32 Found Trojan.LowZones.193


Last file scanned at least one scanner reported something about: 2.exe (MD5: 994cbc0f58d1d258dfa81d51ea4b5619, size: 353115 bytes), detected by:

Scanner Malware name
A-Squared X
AntiVir X
ArcaVir X
Avast Win32:Hupigon-ATT
AVG Antivirus X
BitDefender X
ClamAV X
Dr.Web X
F-Prot Antivirus X
F-Secure Anti-Virus X
Fortinet X
Kaspersky Anti-Virus X
NOD32 X
Norman Virus Control X
Panda Antivirus X
Rising Antivirus X
VirusBuster X
VBA32 MalwareScope.Backdoor.Hupigon.1


Voila a+
j'attends de tes nouvelles

Le scan est en train de se faire, mais c'est très long. je pense qu'il y en a encore pour 1/2 heure environs.
je le copie dés que fini, mais après je crois que je continuerai demain aprem si tu es là.
a +

Hello,
Pa encore terminé. Je l'ai lancé hier au soir à 21h34 et ça tourne toujours. Comme je n'ai pas surveillé, il y a eu des alerte virus qui ont du arréter le scan.
Cela ne devrait pas tarder à se terminer l'état d'avancement et presque à 100%.
Je t'envoie dès que terminé.
A+

C re moi,
mon micro a planté, je suis obligée de relancer le scan.
a +

ça y est j'ai le rapport cela a été très rapide -d'une 1/2 heure contrairement à hier au soir.
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:17:50 06/06/2007

+ Résultat de l'analyse:



HKLM\SOFTWARE\180solutions -> Adware.180Solutions : Ignoré.
HKLM\SOFTWARE\180solutions\msbb -> Adware.180Solutions : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\__unin__.exe -> Adware.Altnet : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\asmfiles.cab/asm.exe -> Adware.Altnet : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\asmfiles.cab/asmps.dll -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\bzip2.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.rvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cevakrnl.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\cran.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\emalware.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\gzip.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\java.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\java.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_97.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_w95.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\mdx_x95.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\nelf.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\nelf.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\pdf.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\plugins.cab.cab (incomplete) -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\pst.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\rup.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sdx.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\sdx.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\tar.xmd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\unpack.ivd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\update.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\update.txt.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\ve.cvd.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\zip.cab -> Adware.Altnet : Ignoré.
C:\Program Files\Altnet\My Altnet Shares\Bullguard Protection\zip.xmd.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\DMinfo2.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\DMinfo3.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\Setup.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\Setup.exe -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\adm.exe -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\adm25.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\adm4.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admdata.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admdloader.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admfdi.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\admprog.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\atl.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dmfiles.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dminstall3.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\dminstall7.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\msvcirt.dll -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\mysearch.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pmexe.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pmfiles.cab -> Adware.Altnet : Ignoré.
C:\WINDOWS\Temp\Altnet\pminstall.cab -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoré.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoré.
C:\WINDOWS\system32\BO2801040128.dll -> Adware.BargainBuddy : Ignoré.
C:\WINDOWS\system32\Lycos.dll -> Adware.BargainBuddy : Ignoré.
C:\WINDOWS\system32\SHAgentNew.dll -> Adware.BargainBuddy : Ignoré.
C:\WINDOWS\system32\msbb321.dll -> Adware.BargainBuddy : Ignoré.
HKLM\SOFTWARE\Classes\TwaintecDll.TwaintecDllObj.1 -> Adware.BetterInternet : Ignoré.
HKLM\SOFTWARE\twaintec -> Adware.BetterInternet : Ignoré.
C:\Program Files\WinBudget\bin\crap.1169385538.old -> Adware.BHO : Ignoré.
C:\Program Files\WinBudget\bin\matrix.dll -> Adware.BHO : Ignoré.
[2668] C:\Program Files\WinBudget\bin\matrix.dll -> Adware.BHO : Ignoré.
HKLM\SOFTWARE\Classes\CSIE.CSIECore -> Adware.ClearSearch : Ignoré.
HKLM\SOFTWARE\Classes\CSIE.CSIECore.1 -> Adware.ClearSearch : Ignoré.
HKLM\SOFTWARE\Classes\CSIE.CSIECore\CLSID -> Adware.ClearSearch : Ignoré.
HKLM\SOFTWARE\Classes\CSIE.CSIECore\CurVer -> Adware.ClearSearch : Ignoré.
C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Ignoré.
C:\Program Files\Common Files\Companion Wizard\WapCHK{5C8A76F2-F20F-4E6D-A671-BCDF4A0A80D7}.dll -> Adware.Companion : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\cd_clint.dll -> Adware.Cydoor : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Kazaa\Promotions\Cydoor -> Adware.Cydoor : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Kazaa\Promotions\Cydoor\Adwr_329 -> Adware.Cydoor : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4 -> Adware.Cydoor : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services -> Adware.Cydoor : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Queue -> Adware.Cydoor : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\gain_trickler_3202.exe -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com\AppInfo -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com\CMEII -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com\Gator -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com\Gator\dyn -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_gs -> Adware.Gator : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} -> Adware.Generic : Ignoré.
HKLM\SOFTWARE\Classes\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91} -> Adware.Generic : Ignoré.
HKLM\SOFTWARE\Classes\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226} -> Adware.Generic : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} -> Adware.Generic : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
C:\Program Files\IncrediFind -> Adware.Incredifind : Ignoré.
C:\Program Files\IncrediFind\BHO -> Adware.Incredifind : Ignoré.
C:\Program Files\ISTsvc -> Adware.ISTBar : Ignoré.
C:\Program Files\ISTsvc\bak -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\ISTsvc -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\ISTsvc\history -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YourSiteBar -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\YourSiteBar\Historystring -> Adware.ISTBar : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\IST -> Adware.ISTBar : Ignoré.
HKLM\SOFTWARE\Classes\BHO.IncrediFindBHO -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\Classes\BHO.IncrediFindBHO.1 -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\Classes\BHO.IncrediFindBHO\CLSID -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\Classes\BHO.IncrediFindBHO\CurVer -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\IncrediFind -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\IncrediFind\BHO -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\IncrediFind\BHO\HomePage -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\IncrediFind\BHO\RedirectURLS -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\PerfectNav -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\updater -> Adware.KeenValue : Ignoré.
HKLM\SOFTWARE\updater\{8D15A72D-62E0-4733-B057-0A81B4FFEB3D} -> Adware.KeenValue : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\p2psetup.exe -> Adware.P2PNet : Ignoré.
C:\Documents and Settings\ANTO\Menu Démarrer\Programmes\Power Scan -> Adware.PowerScan : Ignoré.
C:\Documents and Settings\ANTO\Menu Démarrer\Programmes\Power Scan\Power Scan.lnk -> Adware.PowerScan : Ignoré.
C:\Program Files\Power Scan -> Adware.PowerScan : Ignoré.
C:\Program Files\Power Scan\bak -> Adware.PowerScan : Ignoré.
C:\Program Files\Power Scan\bak\powerscan.exe -> Adware.PowerScan : Ignoré.
C:\Program Files\Power Scan\powerscan.exe -> Adware.PowerScan : Ignoré.
C:\Program Files\Power Scan\uninstall.exe -> Adware.PowerScan : Ignoré.
HKLM\SOFTWARE\PowerScan -> Adware.PowerScan : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\PowerScan -> Adware.PowerScan : Ignoré.
C:\Documents and Settings\ANTO\Application Data\WinAntiVirus Pro 2006 -> Adware.RogueSuspect : Ignoré.
C:\Documents and Settings\ANTO\Application Data\WinAntiVirus Pro 2006\Logs -> Adware.RogueSuspect : Ignoré.
C:\Documents and Settings\ANTO\Application Data\WinAntiVirus Pro 2006\Logs\update.log -> Adware.RogueSuspect : Ignoré.
C:\Documents and Settings\ANTO\Application Data\WinAntiVirus Pro 2006\Logs\wa6Support.log -> Adware.RogueSuspect : Ignoré.
C:\Documents and Settings\ANTO\Application Data\WinAntiVirus Pro 2006\Logs\winav.log -> Adware.RogueSuspect : Ignoré.
C:\Documents and Settings\ANTO\Application Data\WinAntiVirus Pro 2006\PGE.dat -> Adware.RogueSuspect : Ignoré.
C:\Documents and Settings\All Users\Application Data\WinAntiVirus Pro 2006 -> Adware.RogueSuspect : Ignoré.
C:\Program Files\WinAntiVirus Pro 2006 -> Adware.RogueSuspect : Ignoré.
C:\Program Files\WinAntiVirus Pro 2006\msvcp71.dll -> Adware.RogueSuspect : Ignoré.
C:\Program Files\WinAntiVirus Pro 2006\msvcr71.dll -> Adware.RogueSuspect : Ignoré.
C:\WINDOWS\system32\stera.job -> Adware.RogueSuspect : Ignoré.
HKLM\SOFTWARE\Classes\CLSID\{B2A3156E-3332-4b47-AF5A-5B121503514F} -> Adware.RogueSuspect : Ignoré.
HKLM\SOFTWARE\Classes\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5} -> Adware.RogueSuspect : Ignoré.
HKLM\SOFTWARE\Classes\Interface\{E18B69D0-7E9E-4C6E-BDD8-879A1FFF7123} -> Adware.RogueSuspect : Ignoré.
HKLM\SOFTWARE\Classes\TypeLib\{1234890A-5E6E-4867-8136-CA6F1456B235} -> Adware.RogueSuspect : Ignoré.
C:\Program Files\SideFind -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\sfexd001 -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\sidefind.dll -> Adware.SideFind : Ignoré.
C:\Program Files\SideFind\update -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder.1 -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder\CLSID -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Classes\SideFind.Finder\CurVer -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\Microsoft\SideFind -> Adware.SideFind : Ignoré.
HKLM\SOFTWARE\SideFind -> Adware.SideFind : Ignoré.
C:\Documents and Settings\ANTO\Local Settings\Temp\SAcc.prod.v1182.21dec2006.exe.4e1cc2422a9f73afae3de99fdd1aa9fe -> Adware.Surfaccuracy : Ignoré.
C:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\License.lnk -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAcc.cfg -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\SAccU.exe -> Adware.SurfAccuracy : Ignoré.
C:\Program Files\SurfAccuracy\bak -> Adware.SurfAccuracy : Ignoré.
C:\System Volume Information\_restore{67C9384E-AF34-42BB-A6BD-A1A6EB9688B3}\RP10\A0004523.exe -> Adware.Surfaccuracy : Ignoré.
C:\System Volume Information\_restore{67C9384E-AF34-42BB-A6BD-A1A6EB9688B3}\RP10\A0004524.exe -> Adware.SurfAccuracy : Ignoré.
[2156] C:\Program Files\SurfAccuracy\SAcc.exe -> Adware.SurfAccuracy : Ignoré.
[2736] C:\WINDOWS\lljvp.exe -> Adware.SurfAccuracy : Ignoré.
HKLM\SOFTWARE\Classes\ATLEvents.ATLEvents -> Adware.VirtuMonde : Ignoré.
HKLM\SOFTWARE\Classes\ATLEvents.ATLEvents.1 -> Adware.VirtuMonde : Ignoré.
HKLM\SOFTWARE\Classes\ATLEvents.ATLEvents\CLSID -> Adware.VirtuMonde : Ignoré.
C:\Program Files\Web_Rebates -> Adware.WebRebates : Ignoré.
C:\Program Files\Web_Rebates\Sy1150 -> Adware.WebRebates : Ignoré.
C:\Program Files\Web_Rebates\Sy1150\Tp1150 -> Adware.WebRebates : Ignoré.
C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm -> Adware.WebRebates : Ignoré.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\Microsoft\Internet Explorer\MenuExt\Web Rebates -> Adware.WebRebates : Ignoré.
C:\Program Files\Fichiers communs\WinAntiVirus Pro 2006\WapCHK.dll -> Adware.WinAntiVirus : Ignoré.
HKLM\SYSTEM\CurrentControlSet\Services\vspf -> Adware.WinAntiVirus : Ignoré.
HKLM\SYSTEM\CurrentControlSet\Services\vspf\Enum -> Adware.WinAntiVirus : Ignoré.
HKLM\SYSTEM\CurrentControlSet\Services\vspf\Security -> Adware.WinAntiVirus : Ignoré.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk -> Adware.WinAntiVirus : Ignoré.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk\Enum -> Adware.WinAntiVirus : Ignoré.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk\Security -> Adware.WinAntiVirus : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\WinAntiVirus Pro 2006 -> Adware.WinAntiVirus : Ignoré.
HKU\S-1-5-21-3546964130-3854610815-467075588-1006\Software\WinAntiVirus Pro 2006\Settings -> Adware.WinAntiVirus : Ignoré.
C:\Program Files\YourSiteBar -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\imagemap_normal.bmp -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\imagemap_over.bmp -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\version.txt -> Adware.YourSiteBar : Ignoré.
C:\Program Files\YourSiteBar\yoursitebar.xml -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj.1 -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CLSID -> Adware.YourSiteBar : Ignoré.
HKLM\SOFTWARE\Classes\Ysb.YsbObj\CurVer -> Adware.YourSiteBar : Ignoré.
C:\Program Files\Microsoft Money\System\mnyexpr.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Shareaza\Shareaza.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\Winamp\winampa.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{67C9384E-AF34-42BB-A6BD-A1A6EB9688B3}\RP10\A0004509.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{67C9384E-AF34-42BB-A6BD-A1A6EB9688B3}\RP10\A0004519.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{67C9384E-AF34-42BB-A6BD-A1A6EB9688B3}\RP10\A0004520.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{67C9384E-AF34-42BB-A6BD-A1A6EB9688B3}\RP10\A0004521.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\NeroCheck.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
[156] C:\WINDOWS\system32\NeroCheck.exe -> Downloader.Agent.awf : Nettoyé et sauvegardé (mise en quarantaine).
C:\data -> Downloader.IstBar.nh : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\ANTO\Local Settings\Temp\updater.exe -> Downloader.IstBar.oz : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\ANTO\Application Data\winantiviruspro2006freeinstall_fr[1].exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Ignoré.
C:\Documents and Settings\ANTO\Cookies\anto@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ad-logics[2].txt -> TrackingCookie.Ad-logics : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@admarketplace[1].txt -> TrackingCookie.Admarketplace : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@z1.adserver[1].txt -> TrackingCookie.Adserver : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@bfast[1].txt -> TrackingCookie.Bfast : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@burstnet[1].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@www.burstnet[1].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@casalemedia[2].txt -> TrackingCookie.Casalemedia : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@banner.casinolasvegas[2].txt -> TrackingCookie.Casinolasvegas : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@casinolasvegas[2].txt -> TrackingCookie.Casinolasvegas : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@com[1].txt -> TrackingCookie.Com : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@enhance[2].txt -> TrackingCookie.Enhance : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@as1.falkag[2].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@findwhat[1].txt -> TrackingCookie.Findwhat : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@www.goldenpalace[1].txt -> TrackingCookie.Goldenpalace : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ehg-ati.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ehg-francetel.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ehg-neuftelecom.hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@hitbox[1].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@incredifind[1].txt -> TrackingCookie.Incredifind : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ilead.itrack[1].txt -> TrackingCookie.Itrack : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@stat.onestat[2].txt -> TrackingCookie.Onestat : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@www.paypal[1].txt -> TrackingCookie.Paypal : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@pro-market[1].txt -> TrackingCookie.Pro-market : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@qksrv[2].txt -> TrackingCookie.Qksrv : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@real[1].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@realguide.real[1].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@realmedia[1].txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@realmedia[2].txt -> TrackingCookie.Realmedia : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@revenue[1].txt -> TrackingCookie.Revenue : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@revsci[1].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@edge.ru4[1].txt -> TrackingCookie.Ru4 : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@site.skype[2].txt -> TrackingCookie.Skype : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@skype[2].txt -> TrackingCookie.Skype : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@spylog[1].txt -> TrackingCookie.Spylog : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@tacoda[2].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@tracking.thunderdownloads[1].txt -> TrackingCookie.Thunderdownloads : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@trafficmp[2].txt -> TrackingCookie.Trafficmp : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@valueclick[1].txt -> TrackingCookie.Valueclick : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@yadro[1].txt -> TrackingCookie.Yadro : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\ANTO\Cookies\anto@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\ANTO\Local Settings\Temp\tmp6.tmp.exe -> Trojan.Agent.anr : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\ANTO\Local Settings\Temporary Internet Files\Content.IE5\FAOJVXCP\koocwolla_20070601[1] -> Trojan.Agent.anr : Nettoyé et sauvegardé (mise en quarantaine).
C:\VundoFix Backups\tmp5.tmp.dll.bad -> Trojan.Juan : Nettoyé et sauvegardé (mise en quarantaine).


Fin du rapport

J'attends de tes nouvelles.

HELLO,
Voici le rapport.
Je dois préciser que mon micro est de plus en plus lent.....

Search Navipromo version 2.0.2 commencé le 06/06/2007 à 20:56:59,81

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 17.05.2007 a 23h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\ANTO\Application Data ***



*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
http://www.f-secure.com/blacklight/blacklight_help.html


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of April, 2007.
Version information: 2.2.1061.

[+] Started on 06/06/07 at 20:57:01.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items ............................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 06/06/07 at 21:00:43 (return code = 0).


*** Recherche fichiers ***




*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]­



Recherche Clé Magic Control



*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche Heuristique :
*
**
***
****
*****
******
*******
********


*** Analyse Terminé le 06/06/2007 à 21:01:04,50 ***

¨Peux tu me dire s'il y en a encore pour longtemps pour désinfecter mon micro, car je commence à saturer, je n'ai pas l'impression que cela s'améliore ....
J'attends de tes nouvelles.
A +

Hello,

Ne le prends pas mal quand je dis que je sature, c'est que je ne suis pas une pro de l'informatique (ça je pense que tu t'en étais rendu compte) et qu'en + je suis pas patiente du tout... Mais bon il va falloir que je le devienne !
En tout cas j'ai bien conscience de l'aide que tu m'apportes et du temps que tu passes à m'aider et tout cela bien sûr sans contre partie.
Donc j'ai suivi scrupuleusement ton nouveau conseil, log ci dessous :


Logfile of HijackThis v1.99.1
Scan saved at 18:22:16, on 07/06/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\System32\lxcrcoms.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolb­arNotifier.exe
C:\Program Files\Morpheus\Morpheus.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\HijackThis1991.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.unika.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {20EC3D2D-33C1-4C9D-BC37-C2D500688DA2} - (no file)
R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: (no name) - {00000000-0000-0000-0000-000000000221} - (no file)
O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - (no file)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O2 - BHO: BhoApp Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\Program Files\WinBudget\bin\matrix.dll (file missing)
O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O2 - BHO: (no name) - {44E5B409-35A2-4E8D-BF94-344222323A53} - (no file)
O2 - BHO: NavErrRedir Class - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
O2 - BHO: (no name) - {60112085-E1CE-4e0e-823A-EBB1AD98804C} - (no file)
O2 - BHO: (no name) - {72AC6865-B1D3-4C32-A27B-4B3BF04DE655} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {8109AF33-6949-4833-8881-43DCC232B7B2} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {b2a5cd82-beee-4d9d-97b6-0fe5bbbf652c} - C:\WINDOWS\system32\fonr32.dll
O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [InstantTray] C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe
O4 - HKCU\..\Run: [IW_Drop_Icon] C:\Program Files\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe /DropDisc
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Startup: Morpheus.lnk = C:\Program Files\Morpheus\Morpheus.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.unika.com
O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_FR_XP.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.photorigaud.com/fr/include/upload_activex/ImageUploader3.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: fonr32 - C:\WINDOWS\SYSTEM32\fonr32.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device - - C:\WINDOWS\System32\lxcrcoms.exe


Encore milles merci
a+

Hello,

encore merci pour ta patience.
Voici le rapport

Logfile of HijackThis v1.99.1
Scan saved at 21:47:11, on 08/06/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files\Lexmark 2400 Series\ezprint.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\System32\lxcrcoms.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolb­arNotifier.exe
C:\Program Files\Morpheus\Morpheus.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\HijackThis1991.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.unika.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O2 - BHO: BhoApp Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\Program Files\WinBudget\bin\matrix.dll (file missing)
O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
O4 - HKLM\..\Run: [lxcrmon.exe] "C:\Program Files\Lexmark 2400 Series\lxcrmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [InstantTray] C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe
O4 - HKCU\..\Run: [IW_Drop_Icon] C:\Program Files\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe /DropDisc
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Startup: Morpheus.lnk = C:\Program Files\Morpheus\Morpheus.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.unika.com
O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_FR_XP.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.photorigaud.com/fr/include/upload_activex/ImageUploader3.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device - - C:\WINDOWS\System32\lxcrcoms.exe


Qu'est ce que tu en penses ?
Y a encore des virus ?

A+

Re,
Cela semble bien fonctionner, en tout cas je viens de naviguer un peu pour tester, je n'ai aucune fenêtre intempestive qui s'affiche. Par contre mon micro rame un max. .. Qu'est ce que je peux faire de + ?
dis mois également ce que je peux supprimer des programmes que j'ai téléchargés :
VundoFix
avgas
Navilog1
KillBox
procexp

parce que mon fils joue avec mon ordi et j'ai peur qu'il fasse un malheur, il est encore jeune !

En tout cas encore mille merci pour toute cette aide, sans toi je crois qu'il y a longtemps que j'aurais abandonné. Comme je te l'ai dit je ne suis pas patiente.
A+

Il a 8 ans et il est plus doué que moi, pour tout bidouiller, tu me diras c'est pas difficile pour faire mieux...

En tout cas encore merci. Peut être à une autre fois, mais j'aimerais que cela soit moi qui t'aide mais surement sur un autre sujet....
A1DC4