salut, voici ce qui est sensée être une solution qui marche mais c'est en anglais et je suis pas sûr de bien comprendre, mais si ça peut t'aider (il s'agirait d'un ver) :
http://www.mvps.org/inetexplorer/darnit_2.htm
"iedll.exe
With MUCH thanks to Rick from "The MacKinzie Family" (who sent me a copy of iedll.exe for examination) and Galen (aka KGIII and GotRoot etc) who took pity on me, decompiled the file and told me what it does........
Its a BHO ("browser helper object"), affecting Internet Explorer, that tries to write to the registry "..looks like a fragmented version of SearchBar.."
The problem: error message when starting Windows - " C:windowsIEDLL.EXE file appears to be corrupt. Reinstall the file and try again."
Search engine/option hijackings:
global-finder.com (in the registry as out.true-counter.com/.../?344012)
searchalot.com
coolwebsearch (appearing in the registry as approvedlinks.com/hp.htm) (coolwebsearch is also mentioned HERE)
The cleanup: Use Task Manager (ctrl, alt, del) to make sure iedll.exe is not running. If it is, shut it down. Rename iedll.exe to iedll.old.
Export then delete the following registry keys:
HKCUSoftwareMicrosoftInternet ExplorerSearchURL
HKCUSoftwareMicrosoftInternet ExplorerMainSearch Bar
HKCUSoftwareMicrosoftInternet ExplorerMainSearch Page
HKCUSoftwareMicrosoftInternet ExplorerMainDefault_Page_URL
HKCUSoftwareMicrosoftInternet ExplorerMainDefault_Search_URL
HKCUSoftwareMicrosoftInternet ExplorerSearchSearchAssistant
HKCUSoftwareMicrosoftInternet ExplorerSearchCustomizeSearch
HKLMSoftwareMicrosoftInternet ExplorerMainSearch Bar
HKCUSoftwareMicrosoftInternet ExplorerMainHomeOldSP
HKCUSoftwareMicrosoftInternet Connection WizardShellnext
HKLMSoftwareMicrosoftInternet Connection WizardShellnext
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre
ntVersionRun [iedll] C:WINDOWSiedll.exe
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre
ntVersionRun [loader] C:WINDOWSLOADER.EXE
NOTE: Loader.exe can be a legitimate Windows file. Do NOT delete or rename the file - just delete the entry above from the registry!!"