Salut,
Nettoyage :

Relance Navilog en faisant un clic-droit sur le raccourci Navilog présent sur ton bureau et en choisissant "Exécuter en tant qu'administrateur".
Au menu principal, choisis 2 et valide.

Le fix va t'informer qu'il va alors redémarrer ton PC
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
Appuie sur une touche comme demandé.
(si ton Pc ne redémarre pas automatiquement, fais le toi même)
Au redémarrage de ton PC, choisis ta session habituelle.

Patiente jusqu'au message :
*** Nettoyage Termine le ..... ***

Le bloc note va s'ouvrir, copie/colle ici le rapport, comme tu l’as fait pour l’autre.
T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Voici le nouveau rapport..Clean Navipromo version 3.6.7 commencé le 30/10/2008 à 23:11:25,71

Outil exécuté depuis C:\Program Files\navilog1
Session actuelle : "eric"

Mise à jour le 22.10.2008 à 20h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13
Système de fichiers : FAT32

Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *


ggocfwl.exe trouvé !
Copie ggocfwl.exe réalisée avec succès !
ggocfwl.exe supprimé !

gtghobfjke.exe trouvé !
Copie gtghobfjke.exe réalisée avec succès !
gtghobfjke.exe supprimé !

gtghobfjke.dat trouvé !
Copie gtghobfjke.dat réalisée avec succès !
gtghobfjke.dat supprimé !

qmejpuu.exe trouvé !
Copie qmejpuu.exe réalisée avec succès !
qmejpuu.exe supprimé !

qmejpuu.dat trouvé !
Copie qmejpuu.dat réalisée avec succès !
qmejpuu.dat supprimé !

tqvkex.exe trouvé !
Copie tqvkex.exe réalisée avec succès !
tqvkex.exe supprimé !

uexwqfjgn.exe trouvé !
Copie uexwqfjgn.exe réalisée avec succès !
uexwqfjgn.exe supprimé !


* Suppression dans "C:\Documents and Settings\eric\locals~1\applic~1" *



* Suppression dans "C:\DOCUME~1\angeline\locals~1\applic~1" *


* Suppression dans "C:\DOCUME~1\caroline\locals~1\applic~1" *


* Suppression dans "C:\DOCUME~1\lionel\locals~1\applic~1" *


* Suppression dans "C:\DOCUME~1\samia\locals~1\applic~1" *



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudÉ~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudÉ~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\eric\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\angeline\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\caroline\applic~1" ***

...\MessengerSkinner ...suppression...
...\MessengerSkinner supprimé !


*** Suppression dossiers dans "C:\DOCUME~1\lionel\applic~1" ***

...\MessengerSkinner ...suppression...
...\MessengerSkinner supprimé !


*** Suppression dossiers dans "C:\DOCUME~1\samia\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\eric\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\angeline\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\caroline\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\lionel\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\samia\locals~1\applic~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\eric\menud+~1\progra~1" ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\eric\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


axinyetj.dat trouvé !
Copie axinyetj.dat réalisée avec succès !
axinyetj.dat supprimé !

edhzpjkwqy.dat trouvé !
Copie edhzpjkwqy.dat réalisée avec succès !
edhzpjkwqy.dat supprimé !

iktezmbvlw.dat trouvé !
Copie iktezmbvlw.dat réalisée avec succès !
iktezmbvlw.dat supprimé !

jpvfwg.dat trouvé !
Copie jpvfwg.dat réalisée avec succès !
jpvfwg.dat supprimé !

nasdeacyl.dat trouvé !
Copie nasdeacyl.dat réalisée avec succès !
nasdeacyl.dat supprimé !

pbrxvkgwca.dat trouvé !
Copie pbrxvkgwca.dat réalisée avec succès !
pbrxvkgwca.dat supprimé !

pbrxvkgwca_navup.dat trouvé !
Copie pbrxvkgwca_navup.dat réalisée avec succès !
pbrxvkgwca_navup.dat supprimé !

phkrumbzj.dat trouvé !
Copie phkrumbzj.dat réalisée avec succès !
phkrumbzj.dat supprimé !

suvnam.dat trouvé !
Copie suvnam.dat réalisée avec succès !
suvnam.dat supprimé !

tvogcw.dat trouvé !
Copie tvogcw.dat réalisée avec succès !
tvogcw.dat supprimé !

tvogcw_navup.dat trouvé !
Copie tvogcw_navup.dat réalisée avec succès !
tvogcw_navup.dat supprimé !

xyzmfvirbj.exe trouvé !
Copie xyzmfvirbj.exe réalisée avec succès !
xyzmfvirbj.exe supprimé !

zagmkoxve.dat trouvé !
Copie zagmkoxve.dat réalisée avec succès !
zagmkoxve.dat supprimé !


tesmloqhna_navup.dat trouvé !
Copie tesmloqhna_navup.dat réalisée avec succès !
tesmloqhna_navup.dat supprimé !


* Dans "C:\Documents and Settings\eric\locals~1\applic~1" *


* Dans "C:\DOCUME~1\angeline\locals~1\applic~1" *


* Dans "C:\DOCUME~1\caroline\locals~1\applic~1" *


* Dans "C:\DOCUME~1\lionel\locals~1\applic~1" *


* Dans "C:\DOCUME~1\samia\locals~1\applic~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 30/10/2008 à 23:23:00,34 ***

Hum cette saleté est toujours la..

- Télécharge HijackThis Version 2.02 :
http://www.trendsecure.com/portal/en-US/_download/HJTInstall­.exe

- Enregistre HJTInstall.exe sur ton bureau.
- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation
- Clique sur Install ensuite sur I Accept
- Clique sur Do a scan system and save log file
- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.
Petit tuto si besoin : http://pageperso.aol.fr/balltrap34/demohijack.htm
T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Me revoilà ci joint le rapport hijacthi
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:17:11, on 31/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Acer\eRecovery\Monitor.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSM32.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\QuickTime\QTTask.exe
C:\PROGRA~1\SECURI~1\Av_Fw\backweb\6588780\Program\SERVIC~1.­EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Documents and Settings\eric\Application Data\Google\mupd1_2_1711951.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\Av_Fw\backweb\6588780\program\fsbwsys.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fssm32.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\Securitoo\Av_Fw\Common\FSMA32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSMB32.EXE
C:\Program Files\MioNet\MioNetManager.exe
C:\Program Files\Securitoo\Av_Fw\backweb\6588780\Program\fspex.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\Program Files\Securitoo\Av_Fw\Common\FCH32.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsqh.exe
C:\Program Files\Securitoo\Av_Fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsrw.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsav32.exe
C:\Program Files\Securitoo\Av_Fw\FWES\Program\fsdfwd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\SECURI~1\Av_Fw\ANTI-S~1\fsaw.exe
C:\Program Files\Securitoo\Av_Fw\FSGUI\fsguidll.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\BitComet\BitComet.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - C:\PROGRA~1\ORANGE~1\TOOLBA~4.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb126\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb126\SearchSettings.dll
O3 - Toolbar: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange Toolbar FR\ToolbarContainer250.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\Av_Fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\Av_Fw\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Securitoo\Av_Fw\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Securitoo\Av_Fw\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [asus32] "C:\Documents and Settings\eric\Application Data\Google\mupd1_2_1711951.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\Securitoo\Av_Fw\backweb\6588780\Program\fspex.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\eric\LOCALS~1\Temp\cce64.html
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\eric\LOCALS~1\Temp\cce62.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\DOCUME~1\eric\LOCALS~1\Temp\cce63.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://lionelmercey.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A13516A3-BE86-4517-813C-B5FF0C8ACDF3} (Toontown Installer ActiveX Control French) - http://downloadtoontown.goa.com/sv1.5.14.5/ttinst-french.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\SECURI~1\Av_Fw\backweb\6588780\Program\SERVIC~1.EXE
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\Av_Fw\backweb\6588780\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\Common\FSMA32.EXE

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:17:11, on 31/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Acer\eRecovery\Monitor.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSM32.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\QuickTime\QTTask.exe
C:\PROGRA~1\SECURI~1\Av_Fw\backweb\6588780\Program\SERVIC~1.­EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Documents and Settings\eric\Application Data\Google\mupd1_2_1711951.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\Av_Fw\backweb\6588780\program\fsbwsys.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fssm32.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\Securitoo\Av_Fw\Common\FSMA32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSMB32.EXE
C:\Program Files\MioNet\MioNetManager.exe
C:\Program Files\Securitoo\Av_Fw\backweb\6588780\Program\fspex.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\Program Files\Securitoo\Av_Fw\Common\FCH32.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsqh.exe
C:\Program Files\Securitoo\Av_Fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsrw.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsav32.exe
C:\Program Files\Securitoo\Av_Fw\FWES\Program\fsdfwd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\SECURI~1\Av_Fw\ANTI-S~1\fsaw.exe
C:\Program Files\Securitoo\Av_Fw\FSGUI\fsguidll.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\BitComet\BitComet.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - C:\PROGRA~1\ORANGE~1\TOOLBA~4.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb126\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb126\SearchSettings.dll
O3 - Toolbar: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange Toolbar FR\ToolbarContainer250.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\Av_Fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\Av_Fw\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Securitoo\Av_Fw\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Securitoo\Av_Fw\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [asus32] "C:\Documents and Settings\eric\Application Data\Google\mupd1_2_1711951.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\Securitoo\Av_Fw\backweb\6588780\Program\fspex.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\eric\LOCALS~1\Temp\cce64.html
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\eric\LOCALS~1\Temp\cce62.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\DOCUME~1\eric\LOCALS~1\Temp\cce63.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://lionelmercey.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A13516A3-BE86-4517-813C-B5FF0C8ACDF3} (Toontown Installer ActiveX Control French) - http://downloadtoontown.goa.com/sv1.5.14.5/ttinst-french.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\SECURI~1\Av_Fw\backweb\6588780\Program\SERVIC~1.EXE
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\Av_Fw\backweb\6588780\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\Common\FSMA32.EXE

Je te conseille de désinstaller Boonty games.

Télécharges ToolBar S&D ( de Eric_71 ) :
http://eric.71.mespages.googlepages.com/ToolBarSD.exe
( Tuto : http://toolbarsd.googlepages.com/aideenimages )

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipulation !!
* double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...
* Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
* Choisis l'option 1 ( « recherche ») et tapes « entrée » .
* Une fois le scan finit, un rapport va apparaître, copie/colles l'intégralité de son contenu dans ta prochaine réponse ...
(Le rapport est en outre sauvegardé ici -> C:\TB.txt )
T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Voila le rapport .......

-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : Award Modular BIOS v6.00PG
USER : eric ( Administrator )
BOOT : Normal boot
Antivirus : AntiVirus Firewall 6.15 6.15 (Activated)
Firewall : AntiVirus Firewall 6.15 6.15 (Activated)
C:\ (Local Disk) - FAT32 - Total:72 Go (Free:33 Go)
D:\ (Local Disk) - FAT32 - Total:73 Go (Free:73 Go)
E:\ (CD or DVD)
F:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [1] ( 31/10/2008| 0:51 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-30EFBC20.pf
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
C:\DOCUME~1\angeline\APPLIC~1\Search Settings
C:\DOCUME~1\angeline\APPLIC~1\Search Settings\kb126
C:\DOCUME~1\eric\APPLIC~1\Search Settings
C:\DOCUME~1\eric\APPLIC~1\Search Settings\kb126
C:\DOCUME~1\lionel\APPLIC~1\Search Settings
C:\DOCUME~1\lionel\APPLIC~1\Search Settings\kb126
C:\DOCUME~1\samia\APPLIC~1\Search Settings
C:\DOCUME~1\samia\APPLIC~1\Search Settings\kb126
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb126
C:\Program Files\Search Settings\SearchSettings.exe

-----------\\ Extensions

(samia) - {BAB9A4F4-C201-4fcf-A5D3-BA77BC9FBEB2} => active-whois
(samia) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR"
"Search Bar"="http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR"
"Start Page"="http://www.google.fr/"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkID=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68929"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 31/10/2008| 0:55 - Option : [1]

-----------\\ Fin du rapport a 0:55:18,98

Nettoyage avec ToolBar S&D :

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipulation !!

Relances Toolbar-S&D en double-cliquant sur le raccourci.
=>Tapes sur l'option 2 (« nettoyage ») puis tapes sur « Entrée ».
Note : ne touches à rien lors de la suppression !
Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse
accompagné d’un nouveau rapport hijackthis pour analyse ...

T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Obliger de mettre en veille ,me reconnecte plus tard ,mais dejàs merci pour ton aide a+ tard..crapoulou

Ok, tiens moi au courant. T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Salut me revoilà voici le rapport après le nettoyage toolbar ...

-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : Award Modular BIOS v6.00PG
USER : eric ( Administrator )
BOOT : Normal boot
Antivirus : AntiVirus Firewall 6.15 6.15 (Activated)
Firewall : AntiVirus Firewall 6.15 6.15 (Activated)
C:\ (Local Disk) - FAT32 - Total:72 Go (Free:33 Go)
D:\ (Local Disk) - FAT32 - Total:73 Go (Free:73 Go)
E:\ (CD or DVD)
F:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [2] ( 31/10/2008|21:21 )

-----------\\ SUPPRESSION

Supprime! - C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-30EFBC20.pf
Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
Supprime! - C:\DOCUME~1\angeline\APPLIC~1\Search Settings\kb126
Supprime! - C:\DOCUME~1\eric\APPLIC~1\Search Settings\kb126
Supprime! - C:\DOCUME~1\lionel\APPLIC~1\Search Settings\kb126
Supprime! - C:\DOCUME~1\samia\APPLIC~1\Search Settings\kb126
Supprime! - C:\Program Files\Search Settings\kb126
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\angeline\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\eric\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\lionel\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\samia\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(samia) - {BAB9A4F4-C201-4fcf-A5D3-BA77BC9FBEB2} => active-whois
(samia) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR"
"Search Bar"="http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR"
"Start Page"="http://www.google.fr/"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68928"
"Url"="http://go.microsoft.com/fwlink/?LinkID=44406"
"Url"="http://go.microsoft.com/fwlink/?LinkID=68929"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 31/10/2008| 0:55 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 31/10/2008|21:20 - Option : [1]
3 - "C:\ToolBar SD\TB_3.txt" - 31/10/2008|21:23 - Option : [2]

-----------\\ Fin du rapport a 21:23:36,28

Super, fais suivre d'un nouveau rapport hijackthis stp. T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Le voila....
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:01:01, on 31/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\SECURI~1\Av_Fw\backweb\6588780\Program\SERVIC~1.­EXE
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\Av_Fw\backweb\6588780\program\fsbwsys.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fssm32.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSMA32.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSMB32.EXE
C:\Program Files\MioNet\MioNetManager.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\Program Files\Securitoo\Av_Fw\Common\FCH32.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsqh.exe
C:\Program Files\Securitoo\Av_Fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsrw.exe
C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsav32.exe
C:\Program Files\Securitoo\Av_Fw\FWES\Program\fsdfwd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\lxcgcoms.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Acer\eRecovery\Monitor.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Securitoo\Av_Fw\Common\FSM32.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\SECURI~1\Av_Fw\ANTI-S~1\fsaw.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\Documents and Settings\eric\Application Data\Google\mupd1_2_1711951.exe
C:\Program Files\Securitoo\Av_Fw\FSGUI\fsguidll.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Securitoo\Av_Fw\backweb\6588780\Program\fspex.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - C:\PROGRA~1\ORANGE~1\TOOLBA~4.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange Toolbar FR\ToolbarContainer250.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\Av_Fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\Av_Fw\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Securitoo\Av_Fw\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Securitoo\Av_Fw\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [asus32] "C:\Documents and Settings\eric\Application Data\Google\mupd1_2_1711951.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-603158989-4121715372-1179683750-1010\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'samia')
O4 - HKUS\S-1-5-21-603158989-4121715372-1179683750-1010\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'samia')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\Securitoo\Av_Fw\backweb\6588780\Program\fspex.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\eric\LOCALS~1\Temp\cce38.html
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\eric\LOCALS~1\Temp\cce36.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\DOCUME~1\eric\LOCALS~1\Temp\cce37.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Securitoo\Av_Fw\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://lionelmercey.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A13516A3-BE86-4517-813C-B5FF0C8ACDF3} (Toontown Installer ActiveX Control French) - http://downloadtoontown.goa.com/sv1.5.14.5/ttinst-french.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\SECURI~1\Av_Fw\backweb\6588780\Program\SERVIC~1.EXE
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\Av_Fw\backweb\6588780\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\Av_Fw\Common\FSMA32.EXE
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
End of file - 14566 bytes

Télécharge LopS&D (de eric_71) :
http://eric.71.mespages.googlepages.com/LopSD.exe
Enregistre le fichier sur ton bureau.
Lance l'installation.
Une fois le programme lancé tape F pour être en Français.
Puis exécute l'option 1 : Recherche.
Un rapport sera généré.
Poste le ici.
(Dans le cas où le rapport ne s'ouvre pas, ce dernier se trouve sur C:\LopR.txt)
Petit tuto ici si besoin : http://www.malekal.com/tutorial_Lop_SD.php
T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

A pour info ce ???? apparait encore sur l'écran sur le net ou sur le bureau..

Voila ce rapport....( lop S&D)...

--------------------\\ Lop S&D 4.2.4-9 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3000+ )
BIOS : Award Modular BIOS v6.00PG
USER : eric ( Administrator )
BOOT : Normal boot
Antivirus : AntiVirus Firewall 6.15 6.15 (Activated)
Firewall : AntiVirus Firewall 6.15 6.15 (Activated)
C:\ (Local Disk) - FAT32 - Total:72 Go (Free:33 Go)
D:\ (Local Disk) - FAT32 - Total:73 Go (Free:73 Go)
E:\ (CD or DVD)
F:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)

"C:\Lop SD" ( MAJ : 30-10-2008|21:58 )
Option : [1] ( 31/10/2008|22:16 )

--------------------\\ Listing des dossiers dans APPLIC~1

[17/10/2005|19:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[19/08/2008|01:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[17/10/2005|19:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[17/10/2005|19:41] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[19/10/2008|12:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[18/11/2007|19:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[18/11/2007|19:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[17/01/2007|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[19/06/2008|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CDTEST
[17/10/2005|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[07/02/2006|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\eConsole
[16/10/2006|17:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[27/11/2006|15:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/05/2007|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[02/01/2007|13:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\GRETECH
[18/04/2006|12:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[30/10/2008|00:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[09/12/2006|23:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[17/10/2005|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[15/03/2008|22:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Software
[10/01/2006|20:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NtiDvdCopy
[21/11/2006|17:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[09/02/2007|17:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[17/10/2005|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[14/05/2007|16:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[27/10/2008|20:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
[09/08/2006|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[14/05/2008|19:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[02/02/2008|00:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[22/03/2006|20:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[17/10/2005|19:19] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[19/01/2007|07:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[13/01/2006|22:03] C:\DOCUME~1\LOCALS~1\APPLIC~1\Help
[17/10/2005|19:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[12/01/2006|19:55] C:\DOCUME~1\angeline\APPLIC~1\Adobe
[16/06/2006|19:54] C:\DOCUME~1\angeline\APPLIC~1\AdobeUM
[04/01/2008|17:17] C:\DOCUME~1\angeline\APPLIC~1\Apple Computer
[18/10/2006|19:29] C:\DOCUME~1\angeline\APPLIC~1\F-Secure
[30/11/2006|17:14] C:\DOCUME~1\angeline\APPLIC~1\Google
[12/01/2007|17:14] C:\DOCUME~1\angeline\APPLIC~1\GRETECH
[18/03/2006|19:06] C:\DOCUME~1\angeline\APPLIC~1\Help
[17/10/2005|19:34] C:\DOCUME~1\angeline\APPLIC~1\Identities
[16/02/2006|18:17] C:\DOCUME~1\angeline\APPLIC~1\ispnews
[12/12/2006|20:08] C:\DOCUME~1\angeline\APPLIC~1\ivivo
[21/07/2006|20:40] C:\DOCUME~1\angeline\APPLIC~1\LimeWire
[16/02/2006|18:18] C:\DOCUME~1\angeline\APPLIC~1\Macromedia
[17/10/2005|19:19] C:\DOCUME~1\angeline\APPLIC~1\Microsoft
[02/03/2006|16:49] C:\DOCUME~1\angeline\APPLIC~1\Sun
[17/10/2005|19:41] C:\DOCUME~1\angeline\APPLIC~1\Symantec

[28/03/2006|20:05] C:\DOCUME~1\caroline\APPLIC~1\Adobe
[28/03/2006|20:05] C:\DOCUME~1\caroline\APPLIC~1\AdobeUM
[15/01/2006|20:26] C:\DOCUME~1\caroline\APPLIC~1\CyberLink
[20/11/2006|18:48] C:\DOCUME~1\caroline\APPLIC~1\F-Secure
[28/11/2006|20:25] C:\DOCUME~1\caroline\APPLIC~1\Google
[04/01/2007|15:07] C:\DOCUME~1\caroline\APPLIC~1\GRETECH
[06/02/2006|11:41] C:\DOCUME~1\caroline\APPLIC~1\Help
[17/10/2005|19:34] C:\DOCUME~1\caroline\APPLIC~1\Identities
[16/02/2006|12:41] C:\DOCUME~1\caroline\APPLIC~1\ispnews
[23/12/2006|18:21] C:\DOCUME~1\caroline\APPLIC~1\ivivo
[16/03/2007|21:05] C:\DOCUME~1\caroline\APPLIC~1\Lavasoft
[09/05/2006|20:35] C:\DOCUME~1\caroline\APPLIC~1\LimeWire
[17/02/2006|15:11] C:\DOCUME~1\caroline\APPLIC~1\Macromedia
[17/10/2005|19:19] C:\DOCUME~1\caroline\APPLIC~1\Microsoft
[20/10/2006|19:34] C:\DOCUME~1\caroline\APPLIC~1\Sun
[17/10/2005|19:41] C:\DOCUME~1\caroline\APPLIC~1\Symantec

[13/05/2007|00:38] C:\DOCUME~1\eric\APPLIC~1\Active Whois
[06/02/2006|19:31] C:\DOCUME~1\eric\APPLIC~1\Adobe
[13/02/2006|13:14] C:\DOCUME~1\eric\APPLIC~1\AdobeUM
[09/10/2007|13:57] C:\DOCUME~1\eric\APPLIC~1\Ambient Design
[19/11/2007|19:37] C:\DOCUME~1\eric\APPLIC~1\Apple Computer
[28/11/2006|17:49] C:\DOCUME~1\eric\APPLIC~1\ArcSoft
[10/03/2008|16:31] C:\DOCUME~1\eric\APPLIC~1\AVS4YOU
[08/10/2007|12:55] C:\DOCUME~1\eric\APPLIC~1\CasaPortale.de
[31/12/2006|19:34] C:\DOCUME~1\eric\APPLIC~1\COWON
[06/02/2006|19:29] C:\DOCUME~1\eric\APPLIC~1\CyberLink
[29/08/2007|17:12] C:\DOCUME~1\eric\APPLIC~1\DVD Flick
[28/02/2006|16:02] C:\DOCUME~1\eric\APPLIC~1\eConf
[16/10/2006|16:22] C:\DOCUME~1\eric\APPLIC~1\F-Secure
[27/11/2006|15:18] C:\DOCUME~1\eric\APPLIC~1\Google
[02/01/2007|13:23] C:\DOCUME~1\eric\APPLIC~1\GRETECH
[03/07/2007|11:43] C:\DOCUME~1\eric\APPLIC~1\gtk-2.0
[07/02/2006|17:45] C:\DOCUME~1\eric\APPLIC~1\Help
[03/09/2007|14:40] C:\DOCUME~1\eric\APPLIC~1\Hewlett-Packard
[17/10/2005|19:34] C:\DOCUME~1\eric\APPLIC~1\Identities
[03/07/2007|11:18] C:\DOCUME~1\eric\APPLIC~1\Inkscape
[16/02/2006|10:42] C:\DOCUME~1\eric\APPLIC~1\ispnews
[12/12/2006|14:11] C:\DOCUME~1\eric\APPLIC~1\ivivo
[04/12/2006|17:27] C:\DOCUME~1\eric\APPLIC~1\Jasc
[16/03/2007|23:32] C:\DOCUME~1\eric\APPLIC~1\Lavasoft
[12/12/2006|17:50] C:\DOCUME~1\eric\APPLIC~1\LimeWire
[16/02/2006|09:42] C:\DOCUME~1\eric\APPLIC~1\Macromedia
[30/10/2008|00:56] C:\DOCUME~1\eric\APPLIC~1\Malwarebytes
[17/10/2005|19:19] C:\DOCUME~1\eric\APPLIC~1\Microsoft
[26/03/2007|15:42] C:\DOCUME~1\eric\APPLIC~1\Mozilla
[22/02/2006|09:26] C:\DOCUME~1\eric\APPLIC~1\MSNInstaller
[24/07/2008|22:57] C:\DOCUME~1\eric\APPLIC~1\Nvu
[07/10/2008|20:37] C:\DOCUME~1\eric\APPLIC~1\OpenOffice.org2
[16/02/2006|10:44] C:\DOCUME~1\eric\APPLIC~1\PEX
[28/02/2006|16:08] C:\DOCUME~1\eric\APPLIC~1\Sun
[17/10/2005|19:41] C:\DOCUME~1\eric\APPLIC~1\Symantec
[17/04/2007|18:16] C:\DOCUME~1\eric\APPLIC~1\Tor
[11/12/2006|17:31] C:\DOCUME~1\eric\APPLIC~1\vlc
[04/12/2006|17:15] C:\DOCUME~1\eric\APPLIC~1\Vso
[02/02/2008|00:48] C:\DOCUME~1\eric\APPLIC~1\Windows Live Writer
[03/04/2007|14:24] C:\DOCUME~1\eric\APPLIC~1\WinPatrol

[14/03/2006|19:42] C:\DOCUME~1\lionel\APPLIC~1\Adobe
[14/03/2006|19:43] C:\DOCUME~1\lionel\APPLIC~1\AdobeUM
[26/12/2007|20:08] C:\DOCUME~1\lionel\APPLIC~1\Apple Computer
[19/02/2007|12:05] C:\DOCUME~1\lionel\APPLIC~1\ArcSoft
[19/02/2007|10:54] C:\DOCUME~1\lionel\APPLIC~1\Creative
[13/01/2006|23:06] C:\DOCUME~1\lionel\APPLIC~1\CyberLink
[10/11/2006|19:46] C:\DOCUME~1\lionel\APPLIC~1\F-Secure
[27/11/2006|19:52] C:\DOCUME~1\lionel\APPLIC~1\Google
[15/03/2007|00:03] C:\DOCUME~1\lionel\APPLIC~1\GRETECH
[13/01/2006|23:01] C:\DOCUME~1\lionel\APPLIC~1\Help
[17/10/2005|19:34] C:\DOCUME~1\lionel\APPLIC~1\Identities
[16/02/2006|17:05] C:\DOCUME~1\lionel\APPLIC~1\ispnews
[13/12/2006|22:02] C:\DOCUME~1\lionel\APPLIC~1\ivivo
[19/03/2007|22:30] C:\DOCUME~1\lionel\APPLIC~1\Lavasoft
[16/06/2006|22:48] C:\DOCUME~1\lionel\APPLIC~1\LimeWire
[16/02/2006|17:06] C:\DOCUME~1\lionel\APPLIC~1\Macromedia
[17/10/2005|19:19] C:\DOCUME~1\lionel\APPLIC~1\Microsoft
[04/04/2007|17:36] C:\DOCUME~1\lionel\APPLIC~1\Mozilla
[05/04/2007|19:59] C:\DOCUME~1\lionel\APPLIC~1\PEX
[04/03/2006|19:38] C:\DOCUME~1\lionel\APPLIC~1\Sun
[17/10/2005|19:41] C:\DOCUME~1\lionel\APPLIC~1\Symantec

[18/04/2007|23:13] C:\DOCUME~1\samia\APPLIC~1\Active Whois
[11/01/2006|21:48] C:\DOCUME~1\samia\APPLIC~1\Adobe
[13/03/2006|10:49] C:\DOCUME~1\samia\APPLIC~1\AdobeUM
[18/11/2007|19:23] C:\DOCUME~1\samia\APPLIC~1\Apple Computer
[13/11/2006|11:12] C:\DOCUME~1\samia\APPLIC~1\ArcSoft
[19/02/2007|16:32] C:\DOCUME~1\samia\APPLIC~1\Creative
[10/01/2006|20:31] C:\DOCUME~1\samia\APPLIC~1\CyberLink
[28/02/2006|16:43] C:\DOCUME~1\samia\APPLIC~1\eConf
[17/10/2006|11:07] C:\DOCUME~1\samia\APPLIC~1\F-Secure
[29/11/2006|08:40] C:\DOCUME~1\samia\APPLIC~1\Google
[05/01/2007|18:10] C:\DOCUME~1\samia\APPLIC~1\GRETECH
[04/07/2007|15:20] C:\DOCUME~1\samia\APPLIC~1\gtk-2.0
[25/02/2006|19:02] C:\DOCUME~1\samia\APPLIC~1\Help
[17/10/2005|19:34] C:\DOCUME~1\samia\APPLIC~1\Identities
[04/07/2007|15:19] C:\DOCUME~1\samia\APPLIC~1\Inkscape
[16/02/2006|15:46] C:\DOCUME~1\samia\APPLIC~1\ispnews
[13/12/2006|09:51] C:\DOCUME~1\samia\APPLIC~1\ivivo
[15/03/2007|22:14] C:\DOCUME~1\samia\APPLIC~1\Lavasoft
[16/02/2006|15:47] C:\DOCUME~1\samia\APPLIC~1\Macromedia
[30/10/2008|08:05] C:\DOCUME~1\samia\APPLIC~1\Malwarebytes
[17/10/2005|19:19] C:\DOCUME~1\samia\APPLIC~1\Microsoft
[27/03/2007|15:32] C:\DOCUME~1\samia\APPLIC~1\Mozilla
[26/02/2006|17:39] C:\DOCUME~1\samia\APPLIC~1\MSNInstaller
[19/09/2007|17:12] C:\DOCUME~1\samia\APPLIC~1\PEX
[01/03/2006|17:46] C:\DOCUME~1\samia\APPLIC~1\Sun
[17/10/2005|19:41] C:\DOCUME~1\samia\APPLIC~1\Symantec


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[31/10/2008 21:36][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[30/10/2008 23:57][--ah-----] C:\WINDOWS\tasks\SA.DAT
[31/10/2008 18:16][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[04/12/2007 16:56][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp officejet 6100 series#1188822739.job
[31/10/2008 10:03][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
[05/08/2004 05:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[29/08/2007|16:55] C:\Program Files\3nity CD DVD Burner
[03/07/2007|00:41] C:\Program Files\A.S.C
[17/10/2005|20:10] C:\Program Files\acer
[04/03/2006|23:44] C:\Program Files\Activision Value
[17/10/2005|19:36] C:\Program Files\Adobe
[31/03/2008|20:19] C:\Program Files\Alwil Software
[22/04/2006|13:20] C:\Program Files\AnmSMP
[24/09/2007|17:08] C:\Program Files\Antipub
[18/11/2007|19:21] C:\Program Files\Apple Software Update
[29/08/2007|14:50] C:\Program Files\AVI DivX MPEG to DVD Converter & Burner
[28/12/2007|00:37] C:\Program Files\AviSynth 2.5
[17/10/2005|19:34] C:\Program Files\AvRack
[10/03/2008|16:29] C:\Program Files\AVS4YOU
[03/04/2007|14:24] C:\Program Files\BillP Studios
[09/12/2006|21:56] C:\Program Files\BitComet
[07/08/2006|00:17] C:\Program Files\Boonty
[17/04/2006|18:14] C:\Program Files\BoontyGames
[03/12/2007|15:57] C:\Program Files\CamStudio
[21/07/2008|18:39] C:\Program Files\Capturino 1.4
[27/03/2007|10:53] C:\Program Files\CCleaner
[23/03/2007|09:18] C:\Program Files\CodeStuff
[17/10/2005|19:24] C:\Program Files\ComPlus Applications
[04/12/2006|15:45] C:\Program Files\Corel
[19/02/2007|10:47] C:\Program Files\Creative
[17/10/2005|19:40] C:\Program Files\CyberLink
[07/08/2006|00:04] C:\Program Files\Dancing Baby II Screensaver
[27/11/2006|16:29] C:\Program Files\deo
[05/08/2006|07:57] C:\Program Files\DIGIFAC
[24/03/2006|18:42] C:\Program Files\Disney
[28/11/2006|19:44] C:\Program Files\DivX
[28/03/2006|18:52] C:\Program Files\EA SPORTS
[12/12/2006|13:45] C:\Program Files\Easy Avi Divx Xvid to DVD Burner
[10/09/2006|17:53] C:\Program Files\Empire Interactive
[17/10/2005|19:19] C:\Program Files\Fichiers communs
[19/02/2008|16:12] C:\Program Files\GIMP-2.0
[27/11/2006|15:18] C:\Program Files\Google
[15/03/2008|23:19] C:\Program Files\GPL MPEG Decoder
[18/04/2006|19:12] C:\Program Files\Graphex3
[02/01/2007|13:22] C:\Program Files\GRETECH
[03/09/2007|14:16] C:\Program Files\Hewlett-Packard
[02/06/2006|09:56] C:\Program Files\IKEA Home Planner Kitchen
[05/12/2006|18:53] C:\Program Files\Image Applications
[17/10/2005|19:34] C:\Program Files\InstallShield Installation Information
[17/10/2005|19:24] C:\Program Files\Internet Explorer
[18/11/2007|19:23] C:\Program Files\iPod
[18/11/2007|19:23] C:\Program Files\iTunes
[12/12/2006|14:04] C:\Program Files\iViVo
[04/12/2006|17:26] C:\Program Files\Jasc Software Inc
[10/01/2006|19:15] C:\Program Files\Java
[29/08/2006|20:21] C:\Program Files\LafumaUnlimit
[05/12/2006|18:45] C:\Program Files\LearnChinese
[13/01/2006|21:10] C:\Program Files\Lexmark 2300 Series
[09/06/2007|15:11] C:\Program Files\LG Electronics
[09/06/2007|15:19] C:\Program Files\LGGSM
[28/02/2006|16:01] C:\Program Files\Livecom
[13/01/2006|22:01] C:\Program Files\Lx_cats
[28/07/2006|23:53] C:\Program Files\Magic Karaoke Maker
[31/12/2006|19:58] C:\Program Files\Magicbit
[30/10/2008|00:55] C:\Program Files\Malwarebytes' Anti-Malware
[19/05/2006|19:50] C:\Program Files\Maxis
[07/08/2006|00:17] C:\Program Files\Mes Jeux T‚l‚charg‚s
[17/10/2005|19:23] C:\Program Files\Messenger
[09/12/2006|23:53] C:\Program Files\MessengerPlus! 3
[30/12/2007|00:44] C:\Program Files\Micro Trivial Pursuit
[21/03/2007|23:17] C:\Program Files\Microsoft AntiSpyware
[09/05/2007|22:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[17/10/2005|19:26] C:\Program Files\microsoft frontpage
[19/02/2006|17:46] C:\Program Files\Microsoft Office
[02/02/2008|00:51] C:\Program Files\Microsoft SQL Server Compact Edition
[03/03/2007|23:12] C:\Program Files\MioNet
[28/02/2006|19:39] C:\Program Files\Monte Cristo
[17/10/2005|19:24] C:\Program Files\Movie Maker
[26/03/2007|15:42] C:\Program Files\Mozilla Firefox
[17/10/2005|19:23] C:\Program Files\MSN
[06/03/2006|18:49] C:\Program Files\MSN Apps
[17/10/2005|19:23] C:\Program Files\MSN Gaming Zone
[06/03/2006|18:44] C:\Program Files\MSN Messenger
[19/11/2007|20:46] C:\Program Files\MyMPxPlayer.org
[30/10/2008|22:19] C:\Program Files\Navilog1
[17/10/2005|19:24] C:\Program Files\NetMeeting
[17/10/2005|19:38] C:\Program Files\NewTech Infosystems
[24/07/2008|22:57] C:\Program Files\Nvu
[17/10/2005|19:23] C:\Program Files\Online Services
[26/05/2008|10:23] C:\Program Files\OpenOffice.org 2.4
[22/10/2007|15:48] C:\Program Files\Orange Toolbar FR
[17/10/2005|19:24] C:\Program Files\Outlook Express
[05/12/2006|18:49] C:\Program Files\Patrick Computer Services
[03/03/2007|23:12] C:\Program Files\Philips
[16/10/2007|18:23] C:\Program Files\PhotoFiltre Studio
[07/05/2007|19:24] C:\Program Files\Picasa2
[08/10/2007|22:14] C:\Program Files\Pixarra
[15/03/2008|23:18] C:\Program Files\Quick Video Converter
[18/11/2007|19:22] C:\Program Files\QuickTime
[17/10/2005|19:34] C:\Program Files\Realtek Sound Manager
[30/12/2007|00:37] C:\Program Files\ReflexiveArcade
[02/04/2007|19:09] C:\Program Files\RegCleaner
[07/02/2006|17:55] C:\Program Files\SAGEM
[30/09/2007|14:10] C:\Program Files\Samsung
[16/05/2006|18:12] C:\Program Files\Seagrand
[16/02/2006|10:34] C:\Program Files\Securitoo
[16/10/2007|20:11] C:\Program Files\Serif
[17/10/2005|19:24] C:\Program Files\Services en ligne
[09/02/2007|17:47] C:\Program Files\Spybot - Search & Destroy
[26/12/2006|19:25] C:\Program Files\Super Mastermind
[07/08/2006|00:00] C:\Program Files\TASpring
[27/10/2008|20:35] C:\Program Files\TmNationsForever
[25/09/2007|11:31] C:\Program Files\ToniArts
[29/10/2007|22:26] C:\Program Files\Trend Micro
[30/12/2007|00:37] C:\Program Files\Trivial Pursuit Silver Screen Edition
[17/10/2005|19:33] C:\Program Files\Uninstall Information
[11/12/2006|17:28] C:\Program Files\VideoLAN
[11/03/2008|16:12] C:\Program Files\vso
[07/02/2006|18:10] C:\Program Files\Wanadoo
[10/03/2008|17:41] C:\Program Files\WinAVI MP4 Converter
[18/01/2008|19:34] C:\Program Files\Windows Live
[02/02/2008|00:50] C:\Program Files\Windows Live Toolbar
[13/12/2006|10:12] C:\Program Files\Windows Media Connect 2
[17/10/2005|19:23] C:\Program Files\Windows Media Player
[17/10/2005|19:23] C:\Program Files\Windows NT
[17/10/2005|19:24] C:\Program Files\WindowsUpdate
[16/05/2006|17:30] C:\Program Files\WinLibre
[10/12/2006|00:12] C:\Program Files\WinRAR
[17/10/2005|19:26] C:\Program Files\xerox
[22/03/2006|20:05] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[19/10/2008|12:41] C:\Program Files\Fichiers communs\Adobe
[18/11/2007|19:21] C:\Program Files\Fichiers communs\Apple
[10/01/2006|19:17] C:\Program Files\Fichiers communs\ArcSoft
[10/03/2008|16:29] C:\Program Files\Fichiers communs\AVSMedia
[19/02/2006|17:47] C:\Program Files\Fichiers communs\Designer
[10/09/2006|17:55] C:\Program Files\Fichiers communs\DirectX
[03/09/2007|14:17] C:\Program Files\Fichiers communs\Hewlett-Packard
[17/10/2005|19:34] C:\Program Files\Fichiers communs\InstallShield
[10/01/2006|19:15] C:\Program Files\Fichiers communs\Java
[18/04/2006|12:17] C:\Program Files\Fichiers communs\Macrovision Shared
[17/10/2005|19:19] C:\Program Files\Fichiers communs\Microsoft Shared
[17/10/2005|19:24] C:\Program Files\Fichiers communs\MSSoap
[17/10/2005|19:38] C:\Program Files\Fichiers communs\muvee Technologies
[17/10/2005|19:38] C:\Program Files\Fichiers communs\NewTech Infosystems
[17/10/2005|19:19] C:\Program Files\Fichiers communs\ODBC
[17/10/2005|19:24] C:\Program Files\Fichiers communs\Services
[17/10/2005|19:19] C:\Program Files\Fichiers communs\SpeechEngines
[17/10/2005|19:24] C:\Program Files\Fichiers communs\System
[02/02/2008|00:29] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 64 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\eric\Cookies\eric@advertstream[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-31 22:18:34
Windows 5.1.2600 Service Pack 3 FAT NTAPI
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ KeyLogger.Fung !

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] | "asus32"

C:\DOCUME~1\eric\APPLIC~1\Google\mupd1_2_1711951.exe



[F:8][D:5]-> C:\DOCUME~1\eric\LOCALS~1\Temp
[F:43][D:0]-> C:\DOCUME~1\eric\Cookies
[F:1647][D:5]-> C:\DOCUME~1\eric\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled

1 - "C:\Lop SD\LopR_1.txt" - 31/10/2008|22:19 - Option : [1]

--------------------\\ Fin du rapport a 22:19:12

Télécharge OTMoveIt http://oldtimer.geekstogo.com/OTMoveIt3.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
Assure toi que la case Unregister Dll's and Ocx's soit bien cochée
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

C:\DOCUME~1\eric\APPLIC~1\Google\mupd1_2_1711951.exe

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

Tu es infecté par un keylogger : repère tout ce que tu tapes au clavier donc tu fais ça, poste le rapport et après tu va changer tous tes mots de passe ! T'as un problème ? Passe sur CCM!
Il n'y a pas de problème sans solution.

Voila
Error: Unable to interpret <C:\DOCUME~1\eric\APPLIC~1\Google\mupd1_2_1711951.exe > in the current context!

OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 10312008_224147