Virus trojan

Merci beaucoup pour ta réponse
Voici le rapport:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:15:31, on 24/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.5.0_04\bin\jucheck.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ckmbipl] c:\windows\system32\ckmbipl.exe ckmbipl
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?de3c40af458e4340a89fcd2d82feaf2b
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?de3c40af458e4340a89fcd2d82feaf2b
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

Bonsoir,
Alors voilà je poste ci-après les rapports que tu m'as demandé, j'espère que c'est bien ça,
le premier:

Search Navipromo version 3.5.4 commencé le 25/04/2008 à 20:14:07,09

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "aurélie"

Mise à jour le 15.04.2008 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans "C:\WINDOWS" ***



*** Recherche dossiers dans "C:\Program Files" ***



*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\APPLIC~1" ***




*** Recherche dossiers dans "C:\Documents and Settings\aurélie\applic~2" ***



*** Recherche dossiers dans "C:\Documents and Settings\aurélie\locals~1\applic~2" ***



*** Recherche dossiers dans "C:\Documents and Settings\aurélie\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\aurélie\locals~1\applic~2" *



*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32\nvs2.inf trouvé !


*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\aurélie\locals~1\applic~2" :


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 25/04/2008 à 20:19:11,40 *** 25/04/2008 a 20:21:41,09

et le deuxième:
*** Recherche des fichiers dans C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32
C:\WINDOWS\system32\bdod.bin FOUND

*** Recherche des fichiers dans C:\Program Files
@bientôt

Salut,
Alors je n'arrive pas à lancer navilog en choisissant l'option 2
j'ai un message d'alerte concernant l'utilisation de cette option puis cliquer sur une touche pour continuer ce que je faiis mais j'ai l'impression que rien se passe et je ne trouve pas le rapport
J'ai essayé plusieurs fois mais rien n'y fait peut-être qu'il y a quelque chose que je ne fais pas bien?

Sinon voici le rapport de clean en mode sans échec:

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 27/04/2008 a 10:23:48,42

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32
tentative de suppression de C:\WINDOWS\system32\bdod.bin

*** Suppression des fichiers dans C:\Program Files
tentative de suppression de "C:\Program Files\Everest Poker\"

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !
Voilà @bientôt

Re:
Voici les rapports mais toujours rien avec navilog?
Je vois pas pourquoi quand j'appuie sur une touche rien ne se passe je reviens sur l'écran de windows
Après l'analyse de malwarebytes le virus était toujours là

Malwarebytes' Anti-Malware 1.11
Version de la base de données: 599

Type de recherche: Examen complet (C:\|)
Eléments examinés: 83459
Temps écoulé: 3 hour(s), 6 minute(s), 5 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.


NETTOYAGE COMPLET - (7.610 secs)
------------------------------------------------------------------------------------------
183,1MB supprimés.
------------------------------------------------------------------------------------------

Détails des fichiers effacés
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 2248) 28,1MB
C:\Documents and Settings\aurélie\Cookies\aurélie@cybermonitor[1].txt 87 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@opt.fimserve[2].txt 244 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@century21[2].txt 378 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@1070316490[1].txt 341 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@login.live[1].txt 183 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!180[2].txt 184 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@t.msn[1].txt 77 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@overture[1].txt 153 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@lastfm[1].txt 261 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@actustar[2].txt 336 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.01net[2].txt 237 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@pcentraide[1].txt 382 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@ftv-publicite[1].txt 85 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!ECEE7FA87E429024!121[2].txt 192 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@explorimmo[1].txt 76 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@adnext[1].txt 724 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@vertbaudet[2].txt 152 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.aubert[2].txt 176 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@forum.telecharger.01net[1].txt 86 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!ECEE7FA87E429024!220[2].txt 218 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@musique.ados[2].txt 378 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@doctissimo[1].txt 661 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@atraxio[1].txt 128 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@Lapeyre[2].txt 84 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@edt02[1].txt 701 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@filleougarcon.infobebes[1].txt 405 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@1070847646[1].txt 327 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@idregie[2].txt 156 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@messenger.msn[1].txt 96 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@skyregie[1].txt 619 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.explorimmo[1].txt 110 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@delb.opt.fimserve[1].txt 113 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@ccleaner[2].txt 340 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!161[2].txt 183 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@calcul-impots[2].txt 305 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@google[2].txt 135 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@leroymerlin[2].txt 87 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@1069659662[1].txt 335 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@phpmv2[2].txt 361 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@xiti[1].txt 101 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!295[2].txt 184 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@camif[1].txt 337 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@intellitxt[1].txt 107 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@1071416564[1].txt 350 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@livefilestore[2].txt 259 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@shopping.cherchons[2].txt 599 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@sur-la-toile[2].txt 408 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@devispresto[1].txt 406 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@wysistat[1].txt 420 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@nb.myspace[1].txt 201 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@track.effiliation[1].txt 85 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@kijiji[2].txt 193 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.chez[1].txt 69 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.zebulon[1].txt 80 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@toulouse.kijiji[1].txt 94 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@habitatetjardin[1].txt 394 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@vanson62161.spaces.live[2].txt 537 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@directclotures[1].txt 413 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@wc.mit.grandvirtual[2].txt 311 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@bobsinclar.skyrock[1].txt 86 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@estat[1].txt 364 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!ECEE7FA87E429024!164[2].txt 193 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@youtube[2].txt 218 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@ad.zanox[1].txt 103 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@maf-bois[2].txt 361 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@consoglobe[2].txt 413 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@boldchat[1].txt 115 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.pcentraide[2].txt 390 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!181[1].txt 184 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cid-ecee7fa87e429024.spaces.live[1].txt 585 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@spaces.live[2].txt 500 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@purepeople[1].txt 392 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@myspace[1].txt 499 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!107[2].txt 183 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@p.live[1].txt 103 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@lemag-vip[2].txt 397 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!152[1].txt 182 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.leroymerlin[1].txt 193 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@pctools[2].txt 649 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@lyon.kijiji[2].txt 90 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@lyon.kijiji[1].txt 139 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@photos.ados[1].txt 411 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@skyrock[1].txt 83 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.actustar[1].txt 116 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@1058386554[1].txt 352 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@msn[1].txt 432 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@live[2].txt 396 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@jetelecharge[2].txt 294 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@sdv[1].txt 671 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@i2as.idregie[1].txt 101 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@jardiland[2].txt 356 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@google[1].txt 136 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@linternaute[1].txt 265 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@reactivpub[1].txt 294 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.directclotures[2].txt 215 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@redcatsusa[1].txt 111 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@yourmedia[1].txt 93 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.century21[1].txt 132 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@hijackthis[2].txt 341 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@servlet[2].txt 661 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.twenga[1].txt 67 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@yahoo[2].txt 164 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@tf1[2].txt 159 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@rad.msn[2].txt 670 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cns!E4A9E299450F68BC!137[1].txt 182 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@answers.yahoo[1].txt 475 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.leguide[1].txt 247 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@aubert[2].txt 359 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@identification[2].txt 124 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@rad.live[2].txt 680 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@cetelem.solution.weborama[2].txt 399 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[10].txt 79 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[11].txt 79 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[1].txt 79 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[2].txt 78 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[3].txt 78 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[4].txt 78 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[5].txt 79 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[6].txt 79 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[7].txt 79 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[8].txt 78 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.commentcamarche[9].txt 78 bytes
C:\Documents and Settings\aurélie\Cookies\aurélie@www.pcentraide[1].txt 278 bytes
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Cookies\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012007100120071008\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012007100420071005\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012007100720071008\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012008012520080126\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012008030120080302\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012008030520080306\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012008032620080327\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012008041520080416\index.dat
Marqué pour l'effacement: C:\Documents and Settings\aurélie\Local Settings\Historique\History.IE5\MSHist012008041720080418\index.dat
Poubelle vidée (3 fichiers) 3,54KB
C:\WINDOWS\TEMP\dec101.tmp 0 bytes
C:\WINDOWS\TEMP\dec103.tmp 0 bytes
C:\WINDOWS\TEMP\dec186.tmp 0 bytes
C:\WINDOWS\TEMP\dec31.tmp 0 bytes
C:\WINDOWS\TEMP\dec3E.tmp 0 bytes
C:\WINDOWS\TEMP\dec4B.tmp 0 bytes
C:\WINDOWS\TEMP\decF5.tmp 0 bytes
C:\WINDOWS\TEMP\decFC.tmp 0 bytes
C:\WINDOWS\TEMP\decFF.tmp 0 bytes
C:\WINDOWS\TEMP\tmp0000072a\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000017c9\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002000\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000021e0\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002323\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002615\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000027d1\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp0000280b\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002908\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000029a5\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002db0\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002e0e\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002f7a\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00002f80\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003076\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003145\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000038e5\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003b9e\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003e2d\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003e6d\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003eef\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00003f83\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00004158\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000047cc\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp0000500a\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00005f64\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp0000647b\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp000068e2\tmp00000000 0 bytes
C:\WINDOWS\TEMP\tmp00007a4f\tmp00000000 0 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\a2cache_5978DDA8.dat 48,5MB
C:\Documents and Settings\aurélie\Local Settings\Temp\a2cache_7B5CCA26.dat 48,5MB
C:\Documents and Settings\aurélie\Local Settings\Temp\Install_WLMessenger.exe 19,3MB
C:\Documents and Settings\aurélie\Local Settings\Temp\restart.a2s 512 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\result.txt 286 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER24fa.dir00\appcompat.txt 108 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER24fa.dir00\explorer.exe.hdmp 0 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER24fa.dir00\explorer.exe.mdmp 0 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER531d.dir00\explorer.exe.mdmp 0 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER7c74.dir00\appcompat.txt 224 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER7c74.dir00\IEXPLORE.EXE.hdmp 16,8MB
C:\Documents and Settings\aurélie\Local Settings\Temp\WER97bb.dir00\explorer.exe.hdmp 0 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WER97bb.dir00\explorer.exe.mdmp 0 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WERf2bd.dir00\appcompat.txt 224 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\WERf2bd.dir00\IEXPLORE.EXE.hdmp 16,8MB
C:\Documents and Settings\aurélie\Local Settings\Temp\~DF1840.tmp 512 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\~DF4B59.tmp 512 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\~DF7732.tmp 512 bytes
C:\Documents and Settings\aurélie\Local Settings\Temp\~DFB165.tmp 512 bytes
C:\WINDOWS\system32\wbem\Logs\wbemess.log 39,14KB
C:\WINDOWS\system32\wbem\Logs\wbemprox.log 2,26KB
C:\WINDOWS\system32\wbem\Logs\WinMgmt.log 92 bytes
C:\WINDOWS\system32\wbem\Logs\wmiprov.log 10,07KB
C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64,04KB
C:\WINDOWS\0.log 0 bytes
C:\WINDOWS\KB873339.log 64,42KB
C:\WINDOWS\KB885836.log 0,14MB
C:\WINDOWS\KB888302.log 53,37KB
C:\WINDOWS\KB890859.log 55,67KB
C:\WINDOWS\KB891781.log 64,42KB
C:\WINDOWS\KB894391.log 0,13MB
C:\WINDOWS\KB896423.log 64,22KB
C:\WINDOWS\KB899587.log 64,32KB
C:\WINDOWS\KB901017.log 75,08KB
C:\WINDOWS\KB902400.log 0,12MB
C:\WINDOWS\KB908519.log 53,17KB
C:\WINDOWS\KB908531.log 53,52KB
C:\WINDOWS\KB913580.log 64,26KB
C:\WINDOWS\KB914388.log 0,13MB
C:\WINDOWS\KB914389.log 64,75KB
C:\WINDOWS\KB920213.log 53,37KB
C:\WINDOWS\KB920685.log 63,91KB
C:\WINDOWS\KB922819.log 53,58KB
C:\WINDOWS\KB923191.log 64,89KB
C:\WINDOWS\KB923980.log 0,12MB
C:\WINDOWS\KB924270.log 0,10MB
C:\WINDOWS\KB926255.log 96,27KB
C:\WINDOWS\KB926436.log 53,47KB
C:\WINDOWS\KB927802.log 0,13MB
C:\WINDOWS\KB929123.log 63,82KB
C:\WINDOWS\KB930916.log 0,10MB
C:\WINDOWS\KB931784.log 0,11MB
C:\WINDOWS\KB932168.log 53,47KB
C:\WINDOWS\KB935839.log 53,26KB
C:\WINDOWS\KB936021.log 54,15KB
C:\WINDOWS\KB936357.log 53,24KB
C:\WINDOWS\KB938127.log 0,13MB
C:\WINDOWS\KB938828.log 0,14MB
C:\WINDOWS\KB941202.log 53,25KB
C:\WINDOWS\KB941644.log 0,15MB
C:\WINDOWS\KB942763.log 75,99KB
C:\WINDOWS\KB943485.log 64,13KB
C:\WINDOWS\KB946026.log 53,46KB
C:\WINDOWS\KB948590.log 63,91KB
C:\WINDOWS\setupact.log 120 bytes
C:\WINDOWS\setuperr.log 0 bytes
C:\WINDOWS\ntbtlog.txt 0,42MB
C:\WINDOWS\OEWABLog.txt 172 bytes
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log 1,35MB
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp 20,31KB
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\#SharedObjects\VVD4FH47\88.191.50.119\mdm\internet\imagesfr\c21player.swf\ballade.sol 43 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\#SharedObjects\VVD4FH47\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol 84 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\#SharedObjects\VVD4FH47\www.dailymotion.com\flash\dmplayer\dmplayer.swf\dmplayer.sol 89 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\#SharedObjects\VVD4FH47\www.youtube.com\soundData.sol 58 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\#SharedObjects\VVD4FH47\www.youtube.com\timeDisplayConfig.sol 81 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#88.191.50.119\settings.sol 83 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wat.tv\settings.sol 76 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol 89 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol 85 bytes
C:\Documents and Settings\aurélie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 431 bytes
C:\Documents and Settings\aurélie\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2008-04-22 00-16-28.txt 34,02KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.080421-2324.log 1,17KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.080421-2348.log 191 bytes
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.080422-0017.log 1,22KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.080422-0043.txt 3,41KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.080422-0044.txt 3,30KB
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini 226 bytes
------------------------------------------------------------------------------------------
A+++

Salut
oui comme je te disais précedemment navilog ne marche pas en option 2 car quand j'appuie sur une touche pour continuer comme demandé je reviens sur l'écran de windows il ne se passe rien
Voici le nouveau rapport d'hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:32:04, on 28/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Java\jre1.5.0_04\bin\jucheck.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ckmbipl] c:\windows\system32\ckmbipl.exe ckmbipl
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?de3c40af458e4340a89fcd2d82feaf2b
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?de3c40af458e4340a89fcd2d82feaf2b
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

bonsoir
alors j'ai désinstaller et réinstaller navilog mais rien n'y fait ça ne marche pas en option 2
faut-il être en mode sans échec pour faire cette option?
j'ai regardé sur internet mais je comprends pas pourquoi il marche pas?
c'est bizarre non?

Rebonsoir
Ayez en mode sans échec ça a marché enfin je pense voici le rapport:


Clean Navipromo version 3.5.5 commencé le 29/04/2008 à 21:23:13,40

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "aurélie"

Mise à jour le 27.04.2008 à 10h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Executé en mode sans échec


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


* Suppression dans "C:\Documents and Settings\aurélie\locals~1\applic~2" *

@+

bonsoir
voici le nouveau rapport hijackthis
qu'en penses-tu?
@+

RE
HA OK
Voici navilog option1:

Search Navipromo version 3.5.5 commencé le 30/04/2008 à 22:13:18,03

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "aurélie"

Mise à jour le 27.04.2008 à 10h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\aurélie\applic~2" ***


*** Recherche dossiers dans "C:\Documents and Settings\aurélie\locals~1\applic~2" ***


*** Recherche dossiers dans "C:\Documents and Settings\aurélie\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\DOCUME~1\jimmy\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\aurélie\locals~1\applic~2" *



*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !

*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\aurélie\locals~1\applic~2" :


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 30/04/2008 à 22:17:18,35 ***
@+++

Salut,
Voici le rapport et je n'avais rien à supprimer dans certificats de option internet

File/Folder C:\WINDOWS\system32\ckmbipl.dat not found.
File/Folder C:\WINDOWS\system32\ckmbipl.exe not found.
File/Folder C:\WINDOWS\system32\ckmbipl_nav.dat not found.
File/Folder C:\WINDOWS\system32\ckmbipl_navps.dat not found.
C:\WINDOWS\pack.epk moved successfully.
< EmptyTemp >
File delete failed. C:\DOCUME~1\jimmy\LOCALS~1\Temp\~DF353B.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\jimmy\LOCALS~1\Temp\~DF452D.tmp scheduled to be deleted on reboot.
Temp folders emptied.
IE temp folders emptied.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05012008_225930

Files moved on Reboot...
File C:\DOCUME~1\jimmy\LOCALS~1\Temp\~DF353B.tmp not found!
File C:\DOCUME~1\jimmy\LOCALS~1\Temp\~DF452D.tmp not found!

Ca a marché?
@+++

Rebonsoir,
Voici les deux rapports
<HTML>
<HEAD>
<TITLE>BitDefender Online Scanner -Scan Report</TITLE>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<meta name="generator" content="Namo WebEditor v5.0(Trial)">
</HEAD>
<BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >


<table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
<tr>
<td width="458">
<p><font face="Arial" color=red><span style="font-size:14pt;"><b>BitDefender
Online Scanner</b></span></font></p>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>
<tr>
<td colspan="3" width="912">
<p><font face="Arial"><span style="font-size:11pt;"><B>Scan report generated
at: Fri, May 02, 2008 - 00:12:08</b></span></font></p>
</td>
</tr>

<tr>
<td width="458">
<p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<p><font face="Arial"><span style="font-size:11pt;"><B>Scan
path: </b></span><span style="font-size:10pt;">C:\;D:\;</span></font></p>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
<p><font face="Arial" size="2"><B>Statistics</b></font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Time</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">00:46:22</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Files</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">197590</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Folders</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">5107</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Boot Sectors</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">2</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Archives</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">2747</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Packed Files</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">5553</font></p>
</td>
</tr>
</table>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>



<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
<p><font face="Arial" size="2"><B>Results</b></font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Identified Viruses </font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">4</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Infected Files </font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">5</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Suspect Files </font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">0</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Warnings</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">0</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Disinfected</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">0</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Deleted Files</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">4</font></p>
</td>
</tr>
</table>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
<p><font face="Arial" size="2"><B>Engines Info</b></font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Virus Definitions</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">1188951</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Engine build</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scan plugins</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">16</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Archive plugins</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">42</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Unpack plugins</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">7</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">E-mail plugins</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">6</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">System plugins</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">5</font></p>
</td>
</tr>
</table>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
<p><font face="Arial" size="2"><B>Scan Settings</b></font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">First Action</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Disinfect</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Second Action</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Delete</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Heuristics</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Enable Warnings</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scanned Extensions</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">*;</font></p>
</td>
</tr>

<tr>
<td width="57%">
<p><font face="Arial" size="2">Exclude Extensions</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2"> </font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scan Emails</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scan Archives</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scan Packed</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scan Files</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">Scan Boot</font></p>
</td>
<td width="43%" align="right">
<p><font face="Arial" size="2">Yes</font></p>
</td>
</tr>
</table>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td colspan=2>  
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="252" bgcolor="#CCCCCC">
<p><font face="Arial" size="2"><B>Scanned File</b></font></p>
</td>
<td width="195" bgcolor="#CCCCCC" align="right">
<p align="left"><b><font size="2" face="Arial"> Status</font></b></p>
</td>
</tr>
<tr>
<td width="57%">
<p><font face="Arial" size="2">C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Detected with: Application.Topsearch.B</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Disinfection failed</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Deleted</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Update failed</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\WINDOWS\system32\kb1111p.dll</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Infected with: Trojan.PWS.OnlineGames.WJS</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\WINDOWS\system32\kb1111p.dll</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Disinfection failed</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\WINDOWS\system32\kb1111p.dll</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Delete failed</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Detected with: Adware.Navipromo.GO</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Deleted</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Update failed</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0009</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Detected with: Spyware.618</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0009</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Deleted</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Update failed</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Detected with: Adware.Navipromo.GO</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Deleted</font></p>
</td>
</tr><tr>
<td width="57%">
<p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)</font></p>
</td>
<td width="43%" align="left">
<p><font face="Arial" size="2">Update failed</font></p>
</td>
</tr>
</table>
</td>

<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

<tr>
<td width="458">
<p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
</td>
<td width="40%">
<p> </p>
</td>
<td width="10%">
<p> </p>
</td>
</tr>

</table>
<p> </p>

</body>
</html>



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:14:39, on 02/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
c:\progra~1\softwin\bitdef~2\bdmcon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ckmbipl] c:\windows\system32\ckmbipl.exe ckmbipl
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?de3c40af458e4340a89fcd2d82feaf2b
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?de3c40af458e4340a89fcd2d82feaf2b
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

bonsoir,
voici le rapport de combofix:
ComboFix 08-05-01.3 - jimmy 2008-05-02 20:23:22.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.580 [GMT 2:00]
Endroit: C:\Documents and Settings\jimmy\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\jimmy\Favoris\.url
C:\Documents and Settings\jimmy\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\system32\kb1111p.dll
C:\WINDOWS\system32\uninstall.exe

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-02 to 2008-05-02 ))))))))))))))))))))))))))))))))))))
.

2008-05-02 20:18 . 2008-05-02 20:18 <REP> d-------- C:\Documents and Settings\jimmy\Application Data\Malwarebytes
2008-05-01 23:23 . 2008-05-02 00:12 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-05-01 23:20 . 2008-05-01 23:20 8,192 --ahs---- C:\WINDOWS\Thumbs.db
2008-05-01 23:13 . 2008-05-01 23:14 <REP> d-------- C:\Program Files\OTMove
2008-05-01 22:59 . 2008-05-01 22:59 <REP> d-------- C:\_OTMoveIt
2008-04-30 20:11 . 2008-04-30 20:11 <REP> d-------- C:\Program Files\Sun
2008-04-30 20:10 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-04-27 19:05 . 2008-05-02 17:50 <REP> d-------- C:\Program Files\Everest Poker
2008-04-27 18:46 . 2008-04-27 18:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-04-27 18:45 . 2008-04-27 18:45 <REP> d-------- C:\Program Files\Yahoo!
2008-04-27 15:14 . 2008-04-27 15:15 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-27 15:14 . 2008-04-27 15:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-27 10:36 . 2008-05-02 20:25 81,984 --a------ C:\WINDOWS\system32\bdod.bin
2008-04-25 20:20 . 2008-04-25 20:21 <REP> d-------- C:\Program Files\clean
2008-04-25 20:12 . 2008-04-30 22:17 <REP> d-------- C:\Program Files\Navilog1
2008-04-24 21:15 . 2008-04-24 21:15 <REP> d-------- C:\Program Files\Trend Micro
2008-04-21 20:52 . 2008-05-02 20:21 <REP> d-------- C:\Program Files\a-squared Anti-Malware

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-30 18:10 --------- d-----w C:\Program Files\Java
2008-04-29 18:33 --------- d-----w C:\Program Files\FoxTarot4
2008-04-27 16:50 --------- d-----w C:\Program Files\CCleaner
2008-04-27 16:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-04-18 10:27 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2007-07-23 15:08 15,333,040 ----a-w C:\Program Files\setupfre.exe
2006-05-26 00:17 158 ----a-w C:\Documents and Settings\jimmy\Application Data\wklnhst.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="C:\Program Files\Wanadoo\GestMaj.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-27 18:47 68856]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 13:55 5674352]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 14:00 208952]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 14:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 14:00 455168]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2006-01-30 21:13 35328]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11 1388544]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-08-06 08:27 860160]
"AGRSMMSG"="AGRSMMSG.exe" [2005-04-13 12:12 88209 C:\WINDOWS\AGRSMMSG.exe]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2005-02-08 18:38 159744]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-20 21:15 344064]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2005-03-29 14:45 233534]
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11 49152]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-10-13 16:04 278528]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-05-01 21:23 98304]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-12-03 13:24 290816]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-05-04 10:59 794624]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 20:51 39792]
"ckmbipl"="c:\windows\system32\ckmbipl.exe" [ ]
"BDMCon"="C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe" [2007-08-06 10:47 290816]
"BDAgent"="C:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-08-06 10:47 69632]
"IMEKRMIG6.1"="C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-05 14:00 44032]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 14:00 59392]
"a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [2008-04-21 20:59 1962128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=sockspy.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Hp\\HP Software Update\\HPWUCli.exe"=
"C:\\Program Files\\Wanadoo Messager\\Wanadoo Messager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Ahead\\Nero ShowTime\\ShowTime.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\eMule\\emule.exe"=

S3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 17:23]
S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cf91aaf9-dd23-11da-85ea-4d6564696130}]
\Shell\AutoRun\command - E:\LaunchU3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e565e0ae-82c9-11dc-89c9-00150008d5fb}]
\Shell\AutoRun\command - E:\LaunchU3.exe -a

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-05-02 18:07:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"

A bientôt

Salut, escuse moi je n'ai pas pu me connecté ces derniers temps (vacances lol)
alors voici le rapport d'OAD:
06/05/2008 ---- 9:35:23,21

----------------------------------
§§§§§§ [ckmbipl.exe ] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
"ckmbipl"="c:\\windows\\system32\\ckmbipl.exe ckmbipl"

*******************
[Fichier]
*******************



*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------


A Bientôt

Re,
voici le rapport d'hijack:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:04:29, on 06/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
c:\progra~1\softwin\bitdef~2\bdmcon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~2\bdmcon.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?de3c40af458e4340a89fcd2d82feaf2b
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?de3c40af458e4340a89fcd2d82feaf2b
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

Salut
Alors voici le rapport de bit defender:
BitDefender Online Scanner



Scan report generated at: Wed, May 07, 2008 - 10:28:01





Scan path: C:\;D:\;







Statistics

Time
00:55:52

Files
199078

Folders
5194

Boot Sectors
2

Archives
2761

Packed Files
5767




Results

Identified Viruses
3

Infected Files
4

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
4




Engines Info

Virus Definitions
1190147

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
16

Archive plugins
42

Unpack plugins
7

E-mail plugins
6

System plugins
5




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)
Detected with: Application.Topsearch.B

C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)
Disinfection failed

C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)=>(Instyler Module 13)
Deleted

C:\Documents and Settings\jimmy\Mes documents\kazaa_lite_202_english.exe=>(Instyler o)
Update failed

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005
Detected with: Adware.Navipromo.GO

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0005
Deleted

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)
Update failed

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0009
Detected with: Spyware.618

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0009
Deleted

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)
Update failed

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
Detected with: Adware.Navipromo.GO

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)=>lzma_solid_nsis0002
Deleted

C:\_OTMoveIt\MovedFiles\05012008_225930\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0013=>(NSIS g)
Update failed

Jusqu'à ce que je lance ce scan en ligne j'avais l'impression que ce virus avait disparu
Mais j'ai eu des messages d'alertes en faisant le scan comme quoi ils y avaient plusieurs virus dont toujours le trojan qui étaient présents.
Je croyais que c'était bon mais là du coup c'est pas encore gagné j'ai l'impression
Dis moi ce que t'en pense
A bientôt