Probleme de trojan

[cinv]

bonjour a tous d'abord,
alors voila je crois avoir chopé un trojan que j'ai beaucoup de mal a virer.
par exemple il a desactivé les mises a jour auto de windows.

je vous poste un rapport hijackthis
si qq'un peut m'aider se serait simpas

Logfile of HijackThis v1.99.1
Scan saved at 18:01:35, on 25/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:Program FilesIntelWirelessBinS24EvMon.exe
C:Program FilesIntelWirelessBinWLKeeper.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesDellNICCONFIGSVCNICCONFIGSVC.exe
C:WINDOWSsystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesIntelWirelessBinRegSrvc.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSwanmpsvc.exe
C:WINDOWSExplorer.EXE
C:Program FilesFichiers communsBitDefenderBitDefender Communicatorxcommsvr.exe
C:Program FilesFichiers communsBitDefenderBitDefender Update Servicelivesrv.exe
C:Program FilesBitDefenderBitDefender 2008vsserv.exe
C:WINDOWSehomeehtray.exe
C:Program FilesJavajre1.6.0_05injusched.exe
C:WINDOWSstsystra.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesIntelWirelessinCfgSvc.exe
C:Program FilesIntelWirelessBinifrmewrk.exe
C:Program FilesCyberLinkPowerDVDDVDLauncher.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSsystem32dla fswctrl.exe
C:WINDOWSsystem32dllhost.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesAGEIA TechnologiesTrayIcon.exe
C:Program FilesFichiers communsRealUpdate_OB ealsched.exe
C:Program FilesFichiers communsAOL1166475214eeAOLSoftware.exe
C:Program FilesDAEMON Toolsdaemon.exe
C:WINDOWSeHomeehmsas.exe
C:Program FilesAnti-Blaxx 1.18Anti-Blaxx.exe
C:WINDOWSsystem32 undll32.exe
C:Program FilesSpeedyiTunesSpeedyiTunes.exe
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:PROGRA~1IntelWirelessBinDot1XCfg.exe
C:Program FilesiTunesiTunesHelper.exe
C:WINDOWSsystem32Rundll32.exe
C:Program FilesBitDefenderBitDefender 2008dagent.exe
C:Program FilesFichiers communsAheadlibNMBgMonitor.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesMessengermsmsgs.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Program FilesDigital Line DetectDLG.exe
C:Program FilesHPDigital Imaginginhpqtra08.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesiPodiniPodService.exe
C:Program FilesLogitechSetPointSetPoint.exe
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesFichiers communsLogitechkhalsharedKHALMNPR.EXE
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:Program FilesHPDigital ImaginginhpqSTE08.exe
C:Program FilesToshibaBluetooth Toshiba Stack osOBEX.exe
C:Program FilesToshibaBluetooth Toshiba Stack osBtProc.exe
C:Program FilesSafariSafari.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsVincentMes documentsMes progsRegSeekerRegSeekerRegSeeker.exe
C:Program FilesMozilla Thunderbird hunderbird.exe
C:Documents and SettingsVincentMes documentsMes progshijackthiseden.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.dell.fr/myway
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DR
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {34F45E5C-C140-4E84-A22A-424B4EDAC3F7} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:Program FilesSpybot - Search & DestroySDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_05inssv.dll
O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - (no file)
O2 - BHO: {2ee5169d-4ce2-5f5b-4ea4-c6dcec08462c} - {c26480ce-cd6c-4ae4-b5f5-2ec4d9615ee2} - C:WINDOWSsystem32srprrxik.dll
O2 - BHO: (no name) - {F8B8C174-7AC3-43D0-9140-751E76DD1FD5} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbar oolbar.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:Program FilesBitDefenderBitDefender 2008IEToolbar.dll
O4 - HKLM..Run: [ehTray] C:WINDOWSehomeehtray.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_05injusched.exe"
O4 - HKLM..Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [ShowLOMControl]

O4 - HKLM..Run: [IntelZeroConfig] "C:Program FilesIntelWirelessinCfgSvc.exe"
O4 - HKLM..Run: [IntelWireless] "C:Program FilesIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM..Run: [DVDLauncher] "C:Program FilesCyberLinkPowerDVDDVDLauncher.exe"
O4 - HKLM..Run: [ISUSPM Startup] "C:Program FilesFichiers communsInstallShieldUpdateServiceisuspm.exe" -startup
O4 - HKLM..Run: [ISUSScheduler] "C:Program FilesFichiers communsInstallShieldUpdateServiceissch.exe" -start
O4 - HKLM..Run: [IMJPMIG8.1] "C:WINDOWSIMEimjp8_1IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM..Run: [IMEKRMIG6.1] C:WINDOWSimeimkr6_1IMEKRMIG.EXE
O4 - HKLM..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
O4 - HKLM..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 - HKLM..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 - HKLM..Run: [dla] C:WINDOWSsystem32dla fswctrl.exe
O4 - HKLM..Run: [AOLDialer] C:Program FilesFichiers communsAOLACSAOLDial.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesFichiers communsAheadLibNeroCheck.exe
O4 - HKLM..Run: [AGEIA PhysX SysTray] C:Program FilesAGEIA TechnologiesTrayIcon.exe
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [TkBellExe] "C:Program FilesFichiers communsRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [HostManager] C:Program FilesFichiers communsAOL1166475214eeAOLSoftware.exe
O4 - HKLM..Run: [DAEMON Tools] "C:Program FilesDAEMON Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [Anti-Blaxx Manager] C:Program FilesAnti-Blaxx 1.18Anti-Blaxx.exe
O4 - HKLM..Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM..Run: [SpeedyiTunes] C:Program FilesSpeedyiTunesSpeedyiTunes.exe
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [Logitech Hardware Abstraction Layer] "C:Program FilesFichiers communsLogitechkhalsharedKHALMNPR.EXE"
O4 - HKLM..Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [Windows Sound] svdhost.exe
O4 - HKLM..Run: [BitDefender Antiphishing Helper] "C:Program FilesBitDefenderBitDefender 2008IEShow.exe"
O4 - HKLM..Run: [BDAgent] "C:Program FilesBitDefenderBitDefender 2008dagent.exe"
O4 - HKLM..Run: [BMffaedeb5] Rundll32.exe "C:WINDOWSsystem32fluxlxda.dll",s
O4 - HKLM..RunServices: [Windows Sound] svdhost.exe
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesFichiers communsAheadlibNMBgMonitor.exe"
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [LDM] C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:Program FilesFichiers communsAutodesk Sharedacstart16.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imaginginhpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:Program FilesLogitechDesktop Messenger8876480ProgramLDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:Program FilesAOL Toolbar oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:PROGRA~1MICROS~3Office10EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05inssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbar oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbar oolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSsystem32Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:Program FilesSpybot - Search & DestroySDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:Program FilesSpybot - Search & DestroySDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:Program FilesYahoo!CommonYinsthelper.dll
O16 - DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} (_Multimedia Player) - http://stream.pussyharem.com/stream/mmp2.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player ... taller.exe
O18 - Protocol: bw+0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:Program FilesLogitechDesktop Messenger8876480ProgramGAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:PROGRA~1MSNMES~1MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: wbsys.dll srprrxik.dll
O20 - Winlogon Notify: pmnmkjiF - pmnmkjiF.dll (file missing)
O20 - Winlogon Notify: WBSrv - C:PROGRA~1StardockOBJECT~1WINDOW~1wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:Program FilesFichiers communsAutodesk SharedServiceAdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:Program FilesIntelWirelessBinEvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:Program FilesFichiers communsBitDefenderBitDefender Update Servicelivesrv.exe" /service (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:Program FilesDellNICCONFIGSVCNICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:Program FilesIntelWirelessBinRegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:Program FilesIntelWirelessBinS24EvMon.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:Program FilesBitDefenderBitDefender 2008vsserv.exe" /service (file missing)
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:WINDOWSwanmpsvc.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:Program FilesIntelWirelessBinWLKeeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:Program FilesFichiers communsBitDefenderBitDefender Communicatorxcommsvr.exe" /service (file missing)

[H3bus]

Wow j'ai rarement vu un rapport aussi long... Respect ! ^^

Alors je me lance dans l'analyse, patiente un tout petit moment...

[cinv]

ok merci
(il faut dire que je traine mon PC depuis 2 ans maintenant et que je l'utilise pas mal)

en tout cas merci pour ton aide

[H3bus]

Alors :

_ De nombreuses lignes sont à supprimer en mode sans échec :

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DR
O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - (no file)
O2 - BHO: (no name) - {F8B8C174-7AC3-43D0-9140-751E76DD1FD5} - (no file)

O4 - HKLM..Run: [ShowLOMControl]

O4 - HKLM..Run: [Windows Sound] svdhost.exe

O4 - HKLM..Run: [BMffaedeb5] Rundll32.exe "C:WINDOWSsystem32fluxlxda.dll",s
04 - HKLM..RunServices: [Windows Sound] svdhost.exe

O16 - DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} (_Multimedia Player) - http://stream.pussyharem.com/stream/mmp2.cab


_ Nettoyage du PC :

Tu vas suivre ce dossier afin de faire le ménage.


_ Infection par XDogCat

Tu télécharges LSPFix, tu le dezippes et tu le lances. Tu coches la case I know what I am doing , et tu sélectionnes toutes les instances de XDOGCAT.DLL puis Finish.

Ensuite après avoir fait ces trois choses, tu refais un hijackthis que tu posteras dans ton prochain message...


Bon courage !

[cinv]

ok je te remercie je vais faire ce que tu me dit et je reposterai un rapport apres.

[r@in | b0w]

Bonjour.

_ +1 pour le dossier nettoyage, tu feras beaucoup de bien à ta machine.

_ Ensuite, pour continuer la désinfection après l'utilisation de LSPFix, il faudra penser à Combofix pour le fichier srprrxik.dll inconnu au bataillon!

Tu télécharges ComboFix.

Tu le lances ensuite en double cliquant dessus, tu confirmes l'ouverture en cliquant sur Exécuter.

A la fenêtre Disclaimer, tu tapes sur [1].

L'analyse se lancera par la suite avec création d'un point de restauration et sauvegarde des fichiers Windows.
Patientes, ComboFix nettoie en 41 étapes.

Tu ne t'inquiètes surtout pas, il se charge de tout.
Laisse-le faire et suis bien les instructions à l'écran, il est possible qu'il te demande de redémarrer.

Surtout, tant que tu n'as pas un message de ComboFix t'informant que le ménage est terminé, tu ne fais rien de plus que ce que l'utilitaire t'indique, c'est important car il peut être long mais travaille efficacement.

Quand tout sera fini, tu liras:

Code: Tout sélectionner

Almost done... This window will close in a short while
Please wait a few seconds for the report log to pop up

ComboFix's log shall be located at C:ComboFix.txt

Normalement, le rapport s'ouvrira dans le Bloc-notes, tu nous copies-colles l'intégralité du fichier.
Si le Bloc-notes ne s'ouvre pas, tu iras chercher le rapport ici: C:ComboFix.txt et tu nous le colles dans ton prochain message.

_ Après la désinfection, l'optimisation!

Tu as deux antivirus?
Je vois Avast & BitDefender.

Si BitDefender est en version payante, gardes-le.
Sinon, fais un choix et désinstalles-en un pour ne pas créer d'interférences.

_ Avec HiJackThis, lignes à supprimer aussi:

O2 - BHO: (no name) - {34F45E5C-C140-4E84-A22A-424B4EDAC3F7} - (no file)
O2 - BHO: {2ee5169d-4ce2-5f5b-4ea4-c6dcec08462c} - {c26480ce-cd6c-4ae4-b5f5-2ec4d9615ee2} - C:WINDOWSsystem32srprrxik.dll
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O20 - Winlogon Notify: pmnmkjiF - pmnmkjiF.dll (file missing)
O18 - Protocol: bw+0 - {93BF653D-C542-4620-BEF3-9AE5A504EB7D} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll

Tu peux supprimer à ce propos toutes les lignes commençant par 018 -... sans soucis.

_ Tu pourras ensuite faire le nouveau log HiJackThis et poster le rapport.

Ps: et je pense qu'une analyse en ligne sur BitDefender ou TrendMicro avec Internet Explorer ne serait pas une mauvaise chose!

Ps2: continues sinon d'utiliser un navigateur alternatif, bien plus sûrs!

[cinv]

Bon alors merci a vous deux d'abord pour votre aide
J'ai suivi vos instructions sauf que compufix ne m'a pas donné de rapport
je crois qu'il y a eu une erreur a la fin du test (qqchose comme il manque deux occurences)
voila je vais vous poster mon rapport hijackthis

PS : j'ai eu plusieur alerte antivirus sur un virus vundo et je vais supprimer bitdefender que j'avais pris pour essai.

Logfile of HijackThis v1.99.1
Scan saved at 21:16, on 2008-06-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesIntelWirelessBinEvtEng.exe
C:Program FilesIntelWirelessBinS24EvMon.exe
C:Program FilesIntelWirelessBinWLKeeper.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesDellNICCONFIGSVCNICCONFIGSVC.exe
C:WINDOWSsystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesIntelWirelessBinRegSrvc.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSwanmpsvc.exe
C:WINDOWSExplorer.EXE
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSehomeehtray.exe
C:Program FilesJavajre1.6.0_05injusched.exe
C:WINDOWSstsystra.exe
C:WINDOWSsystem32dllhost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:WINDOWSeHomeehmsas.exe
C:Program FilesIntelWirelessinCfgSvc.exe
C:Program FilesIntelWirelessBinifrmewrk.exe
C:Program FilesCyberLinkPowerDVDDVDLauncher.exe
C:WINDOWSsystem32dla fswctrl.exe
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:Program FilesAGEIA TechnologiesTrayIcon.exe
C:Program FilesFichiers communsRealUpdate_OB ealsched.exe
C:PROGRA~1IntelWirelessBinDot1XCfg.exe
C:Program FilesFichiers communsAOL1166475214eeAOLSoftware.exe
C:Program FilesDAEMON Toolsdaemon.exe
C:WINDOWSsystem32 undll32.exe
C:Program FilesSpeedyiTunesSpeedyiTunes.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesFichiers communsAheadlibNMBgMonitor.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Program FilesDigital Line DetectDLG.exe
C:Program FilesHPDigital Imaginginhpqtra08.exe
C:Program FilesLogitechSetPointSetPoint.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtMng.exe
C:Program FilesiPodiniPodService.exe
C:Program FilesFichiers communsLogitechkhalsharedKHALMNPR.EXE
C:Program FilesToshibaBluetooth Toshiba StackTosA2dp.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHid.exe
C:Program FilesToshibaBluetooth Toshiba StackTosBtHsp.exe
C:Program FilesHPDigital ImaginginhpqSTE08.exe
C:Program FilesToshibaBluetooth Toshiba Stack osOBEX.exe
C:Program FilesToshibaBluetooth Toshiba Stack osBtProc.exe
C:Program FilesSafariSafari.exe
C:Documents and SettingsVincentMes documentsMes progshijackthiseden.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_05inssv.dll
O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - (no file)
O2 - BHO: (no name) - {F8B8C174-7AC3-43D0-9140-751E76DD1FD5} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbar oolbar.dll
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM..Run: [ehTray] C:WINDOWSehomeehtray.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_05injusched.exe"
O4 - HKLM..Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [IntelZeroConfig] "C:Program FilesIntelWirelessinCfgSvc.exe"
O4 - HKLM..Run: [IntelWireless] "C:Program FilesIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM..Run: [DVDLauncher] "C:Program FilesCyberLinkPowerDVDDVDLauncher.exe"
O4 - HKLM..Run: [ISUSPM Startup] "C:Program FilesFichiers communsInstallShieldUpdateServiceisuspm.exe" -startup
O4 - HKLM..Run: [ISUSScheduler] "C:Program FilesFichiers communsInstallShieldUpdateServiceissch.exe" -start
O4 - HKLM..Run: [IMJPMIG8.1] "C:WINDOWSIMEimjp8_1IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM..Run: [IMEKRMIG6.1] C:WINDOWSimeimkr6_1IMEKRMIG.EXE
O4 - HKLM..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
O4 - HKLM..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 - HKLM..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 - HKLM..Run: [dla] C:WINDOWSsystem32dla fswctrl.exe
O4 - HKLM..Run: [AOLDialer] C:Program FilesFichiers communsAOLACSAOLDial.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesFichiers communsAheadLibNeroCheck.exe
O4 - HKLM..Run: [AGEIA PhysX SysTray] C:Program FilesAGEIA TechnologiesTrayIcon.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesFichiers communsRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [HostManager] C:Program FilesFichiers communsAOL1166475214eeAOLSoftware.exe
O4 - HKLM..Run: [DAEMON Tools] "C:Program FilesDAEMON Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM..Run: [SpeedyiTunes] C:Program FilesSpeedyiTunesSpeedyiTunes.exe
O4 - HKLM..Run: [Logitech Hardware Abstraction Layer] "C:Program FilesFichiers communsLogitechkhalsharedKHALMNPR.EXE"
O4 - HKLM..Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesFichiers communsAheadlibNMBgMonitor.exe"
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [LDM] C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:Program FilesFichiers communsAutodesk Sharedacstart16.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imaginginhpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:Program FilesLogitechDesktop Messenger8876480ProgramLDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:Program FilesAOL Toolbar oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:PROGRA~1MICROS~3Office10EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_05inssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbar oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbar oolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSsystem32Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O10 - Unknown file in Winsock LSP: c:windowssystem32xdogcat.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:Program FilesYahoo!CommonYinsthelper.dll
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player ... taller.exe
O20 - Winlogon Notify: WBSrv - C:PROGRA~1StardockOBJECT~1WINDOW~1wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:Program FilesFichiers communsAutodesk SharedServiceAdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe" /service (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:Program FilesIntelWirelessBinEvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:Program FilesDellNICCONFIGSVCNICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:Program FilesIntelWirelessBinRegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:Program FilesIntelWirelessBinS24EvMon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:WINDOWSwanmpsvc.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:Program FilesIntelWirelessBinWLKeeper.exe

voila encore merci de votre aide je vais peut-etre reessayer compufix

[r@in | b0w]

Re.

Avant toute chose:

_ Résultats de LSPFix?

_ Tu as supprimé toutes les lignes (cad celles qu'H3bus & moi avons donné)?


_ Pour le log HJT, à supprimer:

O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - (no file)
O2 - BHO: (no name) - {F8B8C174-7AC3-43D0-9140-751E76DD1FD5} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)

_ A propos de ComboFix, va récupérer le rapport dans C:ComboFix.txt.

Tentes de le refaire fonctionner, et si encore une erreur, tu fais une impression écran en suivant ces tutoriaux: Screenshot, How-to & Héberger une image en ligne.

[cinv]

[quote="r@in | b0w"]Re.

Avant toute chose:

_ Résultats de LSPFix?

Alors rien de special a dire pour LSPFix j'ai fais ce que tu m'a dit

_ Tu as supprimé toutes les lignes (cad celles qu'H3bus & moi avons donné)?

Oui j'ai supprimé toute les ligne dont vous m'avez parlé dans HJT

_ A propos de ComboFix, va récupérer le rapport dans C:ComboFix.txt.

mais le programme n'a pas fais de rapport je vais le relancer, je vous post le rapport si ça marche cette fois

[r@in | b0w]

Un petit raté sur les balises

Sinon, tu as donc sélectionné tous les XDOGCAT.DLL comme préconisé?
Regardes ce tutorial pour t'aider.

Redémarres ta machine avant de faire un nouveau scan HJT car certaines lignes montrent que la DLL existe encore.

Et on attend de voir pour ComboFix.

[cinv]

pour LSPFix il n'existe qu'un seul XDOGCAT.DLL
par contre je viens de le refaire et il etait de nouveau là

je sais pas si c'est normal...

voila voila je relance compufix

[r@in | b0w]

Je me suis renseigné pour trouver les même informations qu'H3bus et tout est bon.

Il faudrait ComboFix maintenant...

Cela permettra de nettoyer les traces Vundo aussi.

[cinv]

alors voila combofix :

ComboFix 08-06-20.4 - Vincent 2008-06-25 22:07:23.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.436 [GMT 2:00]
Endroit: C:Documents and SettingsVincentMes documentsMes progsComboFix.exe

AVERTISSEMENT - LA CONSOLE DE RECUPERATION N'EST PAS INSTALLEE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:WINDOWSBMffaedeb5.xml
C:WINDOWScookies.ini
C:WINDOWSpack.epk
C:WINDOWSpskt.ini
C:WINDOWSsystem32drivers
pf.sys
C:WINDOWSsystem32ftthcxynq.dat
C:WINDOWSsystem32ftthcxynq_nav.dat
C:WINDOWSsystem32ftthcxynq_navps.dat
C:WINDOWSsystem32lTDLUvut.ini
C:WINDOWSsystem32lTDLUvut.ini2
C:WINDOWSsystem32mcrh.tmp
C:WINDOWSsystem32MSINET.oca
C:WINDOWSsystem32omxeqpwr.ini
C:WINDOWSsystem32packet.dll
C:WINDOWSsystem32sjrrlqxq.ini
C:WINDOWSsystem32 tlgmhtj.ini
C:WINDOWSsystem32wpcap.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------Legacy_XPROTECTOR
-------Service_NPF
-------Service_XPROTECTOR


((((((((((((((((((((((((((((( Fichiers créés 2008-05-25 to 2008-06-25 ))))))))))))))))))))))))))))))))))))
.

2008-06-25 21:23 . 2008-06-25 21:21 102,664 --a------ C:WINDOWSsystem32drivers mcomm.sys
2008-06-25 21:21 . 2008-06-25 21:23 <REP> d-------- C:Documents and SettingsVincent.housecall6.6
2008-06-25 16:40 . 2008-06-25 20:58 81,984 --a------ C:WINDOWSsystem32dod.bin
2008-06-25 16:33 . 2008-06-25 20:57 121 --a------ C:WINDOWSdagent.INI
2008-06-25 15:29 . 2008-06-25 15:29 <REP> d-------- C:Program FilesBitDefender
2008-06-25 15:28 . 2008-06-25 15:30 <REP> d-------- C:Program FilesFichiers communsBitDefender
2008-06-23 17:37 . 2008-06-23 17:37 105,984 --a------ C:WINDOWSsystem32srprrxik.dll
2008-06-23 17:37 . 2008-06-23 17:37 91,136 --a------ C:WINDOWSsystem32fluxlxda.dll
2008-06-23 02:14 . 2008-06-23 02:11 691,545 --a------ C:WINDOWSunins000.exe
2008-06-23 02:14 . 2008-06-23 02:14 2,546 --a------ C:WINDOWSunins000.dat
2008-06-23 01:58 . 2008-06-23 01:58 <REP> d-------- C:WINDOWSsystem32fr-fr
2008-06-22 16:00 . 2008-06-22 16:00 99,328 --a------ C:WINDOWSsystem32cpyryjuw.dll
2008-06-20 19:01 . 2008-06-20 19:01 528 -r-hs---- C:WINDOWSegirllic151
2008-06-20 18:37 . 2008-06-20 18:37 <REP> d-------- C:Program FilesVirtools
2008-06-19 14:18 . 2008-06-19 14:18 271,360 --a------ C:WINDOWSsystem32driversatksgt.sys
2008-06-19 14:18 . 2008-06-19 14:18 18,048 --a------ C:WINDOWSsystem32driverslirsgt.sys
2008-06-19 14:06 . 2008-06-19 18:02 <REP> d-------- C:Program FilesAnno 1701
2008-06-11 13:33 . 2008-04-14 17:52 272,768 --------- C:WINDOWSsystem32driversthport.sys
2008-06-11 13:33 . 2008-04-14 17:52 272,768 --------- C:WINDOWSsystem32dllcachethport.sys
2008-06-05 21:08 . 2008-06-15 15:16 <REP> d-------- C:Program FilesUbisoft
2008-06-02 16:02 . 2008-06-02 16:03 <REP> d-------- C:Program FilesPDFCreator
2008-06-02 16:02 . 2005-10-15 12:32 196,608 --a------ C:WINDOWSsystem32pdfcmnnt.dll
2008-06-02 16:02 . 1998-07-13 01:08 141,312 --a------ C:WINDOWSsystem32MSCMCFR.DLL
2008-06-02 16:02 . 1998-06-24 00:00 137,000 --a------ C:WINDOWSsystem32MSMAPI32.OCX
2008-06-02 16:02 . 1998-07-13 01:08 59,904 --a------ C:WINDOWSsystem32MSCC2FR.DLL
2008-06-02 16:02 . 1998-07-06 00:00 23,552 --a------ C:WINDOWSsystem32MSMPIDE.DLL
2008-05-29 23:00 . 2008-06-02 13:21 43,520 --a------ C:WINDOWSsystem32CmdLineExt03.dll
2008-05-29 15:11 . 2008-06-25 21:59 54,156 --ah----- C:WINDOWSQTFont.qfn
2008-05-29 15:11 . 2008-05-29 15:11 1,409 --a------ C:WINDOWSQTFont.for

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-25 19:59 --------- d-----w C:Documents and SettingsVincentApplication Dataspeedyitunes
2008-06-25 17:29 --------- d-----w C:Program FilesYahoo!
2008-06-25 17:27 --------- d-----w C:Program FilesAnti-Blaxx 1.18
2008-06-25 15:50 --------- d-----w C:Program FilesMozilla Thunderbird
2008-06-25 11:59 --------- d---a-w C:Documents and SettingsAll UsersApplication DataTEMP
2008-06-23 17:19 --------- d-----w C:Documents and SettingsAll UsersApplication DataSpybot - Search & Destroy
2008-06-23 11:07 --------- d-----w C:Program FilesSpybot - Search & Destroy
2008-06-21 00:04 --------- d-----w C:Program Files hriXXX
2008-06-20 23:32 --------- d-----w C:Documents and SettingsVincentApplication DatauTorrent
2008-06-19 12:06 --------- d--h--w C:Program FilesInstallShield Installation Information
2008-06-19 11:53 --------- d-----w C:Program FilesSteam
2008-06-08 22:16 --------- d-----w C:Documents and SettingsVincentApplication DataLimeWire
2008-06-05 19:01 --------- d-----w C:Program FilesHP
2008-05-16 22:15 --------- d-----w C:Program FilesSecondLife
2008-05-08 12:28 202,752 ----a-w C:WINDOWSsystem32drivers mcast.sys
2008-05-08 12:28 202,752 ------w C:WINDOWSsystem32dllcache mcast.sys
2008-05-07 04:55 1,294,336 ----a-w C:WINDOWSsystem32quartz.dll
2008-05-07 04:55 1,294,336 ------w C:WINDOWSsystem32dllcachequartz.dll
2008-05-03 11:14 --------- d-----w C:Documents and SettingsAll UsersApplication DataTrackMania
2008-04-21 06:57 474,624 ------w C:WINDOWSsystem32dllcacheshlwapi.dll
2008-04-21 06:57 152,064 ------w C:WINDOWSsystem32dllcachecdfview.dll
2008-04-21 06:57 1,499,648 ------w C:WINDOWSsystem32dllcacheshdocvw.dll
2008-04-21 06:57 1,056,768 ------w C:WINDOWSsystem32dllcachedanim.dll
2008-04-21 06:57 1,024,512 ------w C:WINDOWSsystem32dllcacherowseui.dll
2008-04-20 15:22 98,304 ----a-w C:WINDOWSsystem32CmdLineExt.dll
2008-03-25 04:51 621,344 ----a-w C:WINDOWSsystem32mswstr10.dll
2008-03-25 04:51 621,344 ------w C:WINDOWSsystem32dllcachemswstr10.dll
2008-03-25 04:51 194,144 ----a-w C:WINDOWSsystem32msjint40.dll
2008-03-25 04:51 194,144 ------w C:WINDOWSsystem32dllcachemsjint40.dll
2007-12-15 19:47 78,400 ----a-w C:Documents and SettingsVincentApplication DataGDIPFONTCACHEV1.DAT
2006-02-14 22:53 251 ----a-w C:Program Fileswt3d.ini
2006-02-08 23:26 56 --sh--r C:WINDOWSsystem32BD6B3CEEED.sys
2006-02-08 23:26 3,974 --sha-w C:WINDOWSsystem32KGyGaAvL.sys
.

((((((((((((((((((((((((((((( snapshot@2008-06-25_20.47.43.65 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-25 18:26:25 2,048 --s-a-w C:WINDOWSootstat.dat
+ 2008-06-25 19:57:42 2,048 --s-a-w C:WINDOWSootstat.dat
+ 2008-06-25 19:57:47 16,384 ----atw C:WINDOWSTempPerflib_Perfdata_31c.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:Program FilesFichiers communsAheadlibNMBgMonitor.exe" [2006-03-01 19:43 90112]
"ctfmon.exe"="C:WINDOWSsystem32ctfmon.exe" [2004-08-10 14:00 15360]
"LDM"="C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe" [2008-01-25 18:51 36864]
"SpybotSD TeaTimer"="C:Program FilesSpybot - Search & DestroyTeaTimer.exe" [2008-01-28 11:43 2097488]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"ehTray"="C:WINDOWSehomeehtray.exe" [2005-09-29 16:01 67584]
"NvCplDaemon"="C:WINDOWSsystem32NvCpl.dll" [2005-12-14 20:38 7118848]
"nwiz"="nwiz.exe" [2005-12-14 20:38 1519616 C:WINDOWSsystem32
wiz.exe]
"SunJavaUpdateSched"="C:Program FilesJavajre1.6.0_05injusched.exe" [2008-02-22 04:25 144784]
"SigmatelSysTrayApp"="stsystra.exe" [2005-11-16 23:35 397312 C:WINDOWSstsystra.exe]
"SynTPEnh"="C:Program FilesSynapticsSynTPSynTPEnh.exe" [2005-11-29 20:56 761947]
"IntelZeroConfig"="C:Program FilesIntelWirelessinCfgSvc.exe" [2005-11-10 00:08 667718]
"IntelWireless"="C:Program FilesIntelWirelessBinifrmewrk.exe" [2005-11-10 00:08 602182]
"DVDLauncher"="C:Program FilesCyberLinkPowerDVDDVDLauncher.exe" [2005-12-09 22:29 49152]
"ISUSPM Startup"="C:Program FilesFichiers communsInstallShieldUpdateServiceisuspm.exe" [2005-06-10 12:44 249856]
"ISUSScheduler"="C:Program FilesFichiers communsInstallShieldUpdateServiceissch.exe" [2005-06-10 12:44 81920]
"IMJPMIG8.1"="C:WINDOWSIMEimjp8_1IMJPMIG.EXE" [2004-08-10 14:00 208952]
"IMEKRMIG6.1"="C:WINDOWSimeimkr6_1IMEKRMIG.EXE" [2004-08-10 14:00 44032]
"MSPY2002"="C:WINDOWSsystem32IMEPINTLGNTImScInst.exe" [2004-08-10 14:00 59392]
"PHIME2002ASync"="C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE" [2004-08-10 14:00 455168]
"PHIME2002A"="C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE" [2004-08-10 14:00 455168]
"dla"="C:WINDOWSsystem32dla fswctrl.exe" [2005-05-31 06:33 122941]
"AOLDialer"="C:Program FilesFichiers communsAOLACSAOLDial.exe" [2006-11-17 13:41 71216]
"HP Software Update"="C:Program FilesHPHP Software UpdateHPWuSchd2.exe" [2006-12-10 22:52 49152]
"DXDllRegExe"="dxdllreg.exe" []
"NeroFilterCheck"="C:Program FilesFichiers communsAheadLibNeroCheck.exe" [2006-01-12 15:40 155648]
"AGEIA PhysX SysTray"="C:Program FilesAGEIA TechnologiesTrayIcon.exe" [2006-03-20 21:43 331776]
"TkBellExe"="C:Program FilesFichiers communsRealUpdate_OB ealsched.exe" [2006-10-27 22:13 185896]
"HostManager"="C:Program FilesFichiers communsAOL1166475214eeAOLSoftware.exe" [2006-11-17 15:16 50736]
"DAEMON Tools"="C:Program FilesDAEMON Toolsdaemon.exe" [2006-11-12 12:48 157592]
"NVHotkey"="nvHotkey.dll" [2006-05-01 16:46 73728 C:WINDOWSsystem32
vhotkey.dll]
"SpeedyiTunes"="C:Program FilesSpeedyiTunesSpeedyiTunes.exe" [2007-11-21 09:28 1245184]
"Logitech Hardware Abstraction Layer"="C:Program FilesFichiers communsLogitechkhalsharedKHALMNPR.EXE" [2006-07-19 13:03 94208]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2006-07-19 13:03 94208 C:WINDOWSKHALMNPR.Exe]
"QuickTime Task"="C:Program FilesQuickTimeQTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:Program FilesiTunesiTunesHelper.exe" [2008-03-30 10:36 267048]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
"CTFMON.EXE"="C:WINDOWSsystem32ctfmon.exe" [2004-08-10 14:00 15360]

C:Documents and SettingsAll UsersMenu D,marrerProgrammesD,marrage
Acc,l,rateur de d,marrage AutoCAD.lnk - C:Program FilesFichiers communsAutodesk Sharedacstart16.exe [2005-03-05 15:18:22 10872]
Bluetooth Manager.lnk - C:Program FilesToshibaBluetooth Toshiba StackTosBtMng1.exe [2005-06-16 13:11:42 49152]
Digital Line Detect.lnk - C:Program FilesDigital Line DetectDLG.exe [2006-01-31 16:01:02 24576]
HP Digital Imaging Monitor.lnk - C:Program FilesHPDigital Imaginginhpqtra08.exe [2007-01-02 22:40:10 210520]
Logitech Desktop Messenger.lnk - C:Program FilesLogitechDesktop Messenger8876480ProgramLDMConf.exe [2008-01-25 18:51:05 196608]
Logitech SetPoint.lnk - C:Program FilesLogitechSetPointSetPoint.exe [2008-01-25 18:48:23 671744]
Microsoft Office.lnk - C:Program FilesMicrosoft OfficeOffice10OSA.EXE [2001-02-13 09:01:04 83360]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
"InstallVisualStyle"= C:WINDOWSResourcesThemesRoyaleRoyale.msstyles
"InstallTheme"= C:WINDOWSResourcesThemesRoyale.theme

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogon
otifyWBSrv]
C:PROGRA~1StardockOBJECT~1WINDOW~1wbsrv.dll 2005-12-06 22:16 176128 C:PROGRA~1StardockOBJECT~1WINDOW~1WbSrv.dll

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwindows]
"AppInit_DLLs"=wbsys.dll srprrxik.dll

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
"VIDC.HFYU"= huffyuv.dll
"VIDC.JPEG"= P1160Jpg.dll
"VIDC.MJPG"= P1160Jpg.dll
"msacm.divxa32"= msaud32_divx.acm

[HKLM~startupfolderC:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AOL 9.0 Icône AOL.lnk]

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
"%windir%\system32\sessmgr.exe"=
"C:\Program Files\Messenger\msmsgs.exe"=
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"=
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"=
"C:\Program Files\AOL 9.0\waol.exe"=
"C:\Program Files\lphant\eLePhantClient.exe"=
"C:\Program Files\LimeWire\LimeWire.exe"=
"C:\Program Files\MSN Messenger\msnmsgr.exe"=
"C:\Program Files\MSN Messenger\livecall.exe"=
"C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe"=
"C:\Program Files\Steam\SteamApps\cinv\day of defeat\hl.exe"=
"C:\Program Files\The All-Seeing Eye\eye.exe"=
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"=
"C:\Program Files\uTorrent\uTorrent.exe"=
"C:\Program Files\Steam\SteamApps\cinv\team fortress 2\hl2.exe"=
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"=
"C:\WINDOWS\system32\dpnsvr.exe"=
"C:\Program Files\KONAMI\Pro Evolution Soccer 2008\PES2008.exe"=
"C:\Program Files\iTunes\iTunes.exe"=
"C:\Program Files\TmNationsForever\TmForever.exe"=
"C:\Program Files\Anno 1701\Anno1701.exe"=

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileIcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 xmasbus;xmasbus;C:WINDOWSsystem32DRIVERSxmasbus.sys [2003-12-21 17:24]
R0 xmasscsi;xmasscsi;C:WINDOWSsystem32Driversxmasscsi.sys [2003-12-23 02:15]
R1 aswSP;avast! Self Protection;C:WINDOWSsystem32driversaswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:WINDOWSsystem32DRIVERSaswFsBlk.sys [2008-05-16 01:16]
R2 LBeepKE;LBeepKE;C:WINDOWSsystem32DriversLBeepKE.sys [2006-09-01 13:32]
S3 DTVFW;DVB-T USB adapter firmware;C:WINDOWSsystem32DRIVERSdtvfw.sys [2005-11-30 10:51]
S3 P1160COM;Creative PC-CAM 880 (Camera);C:WINDOWSsystem32DRIVERSP1160Buk.sys [2003-03-31 06:47]
S3 P1160VID;Creative PC-CAM 880 (Video);C:WINDOWSsystem32DRIVERSP1160Vid.sys [2003-03-31 06:47]
S3 usbdtv;DVB-T TV Tuner;C:WINDOWSsystem32Driversusbdtv.sys [2005-11-30 10:51]
S3 usbscan;Pilote de scanneur USB;C:WINDOWSsystem32DRIVERSusbscan.sys [2004-08-03 23:58]
S3 USBSTOR;Pilote de stockage de masse USB;C:WINDOWSsystem32DRIVERSUSBSTOR.SYS [2004-08-04 00:08]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
bdx REG_MULTI_SZ scan

[HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermountpoints2{8cfc6bef-934d-11da-a964-806d6172696f}]
ShellAutoRuncommand - D:Autorun.exe

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-03 09:15:03 C:WINDOWSTasksAppleSoftwareUpdate.job"
- C:Program FilesApple Software UpdateSoftwareUpdate.exe
"2008-05-28 18:00:00 C:WINDOWSTasksAt1.job"
- C:WINDOWSwidupdate.exe
"2008-05-28 18:00:00 C:WINDOWSTasksAt10.job"
- C:WINDOWSwidupdate.exe
"2008-05-28 15:00:00 C:WINDOWSTasksAt11.job"
- C:WINDOWSdr.exe
"2008-04-28 07:00:13 C:WINDOWSTasksAt12.job"
- C:WINDOWSuser32.exe
"2008-04-28 07:00:13 C:WINDOWSTasksAt2.job"
- C:WINDOWSuser32.exe
"2008-05-28 12:00:00 C:WINDOWSTasksAt3.job"
- C:WINDOWSdr.exe
"2008-05-28 20:00:07 C:WINDOWSTasksAt4.job"
- C:WINDOWSuser32.exe
"2008-05-29 11:33:46 C:WINDOWSTasksAt5.job"
- C:WINDOWSpatcher.exe
"2008-05-28 15:00:00 C:WINDOWSTasksAt6.job"
- C:WINDOWSdr.exe
"2008-05-28 12:00:00 C:WINDOWSTasksAt7.job"
- C:WINDOWSdr.exe
"2008-05-29 11:33:46 C:WINDOWSTasksAt8.job"
- C:WINDOWSpatcher.exe
"2008-05-28 20:00:00 C:WINDOWSTasksAt9.job"
- C:WINDOWSuser32.exe
"2006-02-02 19:45:00 C:WINDOWSTasksRappel d'abonnement 1 auprès de l'ISP.job"
- C:WINDOWSsystem32OOBEoobebaln.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-25 22:13:08
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-06-25 22:17:29
ComboFix-quarantined-files.txt 2008-06-25 20:17:16

Pre-Run: 4,593,979,392 octets libres
Post-Run: 4,572,610,560 octets libres

259 --- E O F --- 2008-06-12 11:29:40

[r@in | b0w]

Re.

ComboFix a fait un sacré ménage.

Tu peux en passant désinstaller LimeWire, uTorrent & Lphant, je doute que tu t'en serves uniquement pour échanger des fichiers avec des proches.

Il reste le problème des antivirus, à savoir qu'il ne faut en garder qu'un (comme les immortels).

Pour les finitions:

Tu vas suivre le dossier Nettoyage pour faire le ménage, notamment celui avec Ccleaner (fichiers temporaires & base de registre).

Tu vas purger les points de restauration:

Pour cela, cliques sur Poste de travail puis Propriétés.
Onglet Restauration automatique du système, tu coches la ligne Désactiver la restauration du système puis tu valides par Ok.
Tu confirmes la suppression de tous les points de restauration, puis tu cliques sur Appliquer et/ou Ok.
Tu fais la même manipulation ensuite pour décocher la ligne Désactiver la restauration du système puis tu valides par Ok.

Rajouter à cela une analyse antivirus en ligne avec Internet Explorer sur BitDefender ou TrendMicro.

[H3bus]

Merci d'avoir pris le relai r|b au passage...