Google ne marche pas.

salut
Tu peut fixer ca déja: tu as bien un malware en gras, crée un point de restauration avant de fixer, on ne sait jamais.

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) => Yahoo Companion!
O2 - BHO: (no name) - {14EA15A9-30CD-4944-A248-BD1C416B5D39} - (no file)
O2 - BHO: (no name) - {33CCA584-E3F6-4A1C-A150-51B654B34C06} - (no file)
O2 - BHO: (no name) - {63742141-C650-4A35-A2C3-0B51A61AC83D} - (no file)
O2 - BHO: (no name) - {FCADA985-8D64-408A-B511-F538CD6080D9} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE => Realtek Pilotes AC97
O4 - HKLM\..\Run: [55ea4f49] rundll32.exe "C:\WINDOWS\system32\eaqpstte.dll",b => Infection Combo ()
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') => Microsoft Windows NT
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') => Microsoft Windows NT
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') => Microsoft Windows NT
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') => Microsoft Windows NT

La page Google s'affiche, mais la recherche se s'effectue pas... ça mouline sans trouver une page.

Autre problème : la page Lemonde.fr ne veut pas s'afficher (comme avant), mais les sous pages du monde s'affiche...

Merci

re
http://www.commentcamarche.net/faq/sujet 9889 comment supprimer le virus beagle bagle#3eme methode combofix

passe combofix

nettoie ton internet explorer/outil/ option internet/ supprimer /tout supprimer/tu coches et ok

Passe Cclenear que tu trouvera la avec le mode d'emploi: http://www.01net.com/article/323665.html


si t'as encore des prob avec internet explorer tu fais: /outil/ option internet/onglet avancé/ réinitialiser

J'utilise Firefox, mais je vais m'en sortir quand meme :p

Merci nono.

Combofix as resolu le probleme.:
ComboFix 08-06-15.4 - GloW 2008-06-16 11:29:26.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.553 [GMT 2:00]
Endroit: D:\Donwloads\Software\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\BM56d97cd5.xml
C:\WINDOWS\cookies.ini
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\cdxoikpo.ini
C:\WINDOWS\system32\eaqpstte.dll
C:\WINDOWS\system32\ettspqae.ini
C:\WINDOWS\system32\fOXbayxx.ini
C:\WINDOWS\system32\fOXbayxx.ini2
C:\WINDOWS\system32\gvfhgmqa.dll
C:\WINDOWS\system32\gvpdrixn.dll
C:\WINDOWS\system32\hqbkygej.dll
C:\WINDOWS\system32\jegykbqh.ini
C:\WINDOWS\system32\JPVycMoq.ini
C:\WINDOWS\system32\JPVycMoq.ini2
C:\WINDOWS\system32\klnooUvw.ini
C:\WINDOWS\system32\klnooUvw.ini2
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\ocvwfqch.ini
C:\WINDOWS\system32\vyhxeulu.dll
C:\WINDOWS\system32\ydgcrvec.dll

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-16 to 2008-06-16 ))))))))))))))))))))))))))))))))))))
.

2008-06-16 11:26 . 2008-06-16 11:26 <REP> d-------- C:\backups
2008-06-16 10:40 . 2008-06-16 10:40 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-06-16 01:27 . 2007-06-28 14:36 401,720 --a------ C:\HijackThis.exe
2008-06-16 00:33 . 2008-06-16 00:33 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft
2008-06-16 00:00 . 2008-06-16 00:00 <REP> d-------- C:\Documents and Settings\GloW\Application Data\Grisoft
2008-06-16 00:00 . 2008-06-16 00:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-06-16 00:00 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-06-15 23:55 . 2008-06-16 01:17 <REP> d-------- C:\Program Files\Yahoo!
2008-06-15 23:55 . 2008-06-15 23:55 <REP> d-------- C:\Program Files\CCleaner
2008-06-15 14:53 . 2008-06-15 14:53 <REP> d-------- C:\VundoFix Backups
2008-06-13 22:08 . 2008-06-13 22:08 <REP> d-------- C:\Documents and Settings\GloW\Application Data\vlc
2008-06-13 22:03 . 2008-06-13 22:24 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-06-13 22:03 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-06-13 22:03 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-06-13 22:03 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-06-13 22:02 . 2008-06-13 22:02 <REP> d-------- C:\Program Files\Windows Live
2008-06-13 21:31 . 2008-06-13 21:31 <REP> d-------- C:\WINDOWS\Sun
2008-06-13 21:30 . 2008-03-25 02:37 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-06-13 21:29 . 2008-06-13 21:30 <REP> d-------- C:\Program Files\Java
2008-06-13 21:28 . 2008-06-13 21:28 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-06-13 17:48 . 2008-06-13 17:48 <REP> d-------- C:\Documents and Settings\GloW\dwhelper
2008-06-13 17:42 . 2008-06-15 14:47 327 --a------ C:\WINDOWS\wininit.ini
2008-06-13 16:57 . 2008-06-13 16:57 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-06-13 15:47 . 2008-06-13 16:49 <REP> d-------- C:\Program Files\a-squared Free
2008-06-13 15:47 . 2008-06-13 22:02 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-06-13 15:34 . 2008-06-13 15:34 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-06-13 15:34 . 2008-06-13 17:43 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-06-13 14:54 . 2008-06-13 14:54 <REP> d-------- C:\Program Files\Notepad++
2008-06-13 14:54 . 2008-06-13 15:38 <REP> d-------- C:\Documents and Settings\GloW\Application Data\Notepad++
2008-06-13 00:46 . 2008-06-13 00:46 <REP> d-------- C:\Program Files\VideoLAN
2008-06-13 00:26 . 2008-06-13 00:26 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-06-12 12:07 . 2008-06-13 13:36 <REP> d-------- C:\Documents and Settings\GloW\Application Data\X-Chat 2
2008-06-12 12:06 . 2008-06-12 12:06 <REP> d-------- C:\Program Files\X-Chat 2
2008-06-12 11:42 . 2008-06-11 16:26 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
2008-06-12 11:42 . 2008-06-11 16:26 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-06-12 11:42 . 2008-06-11 14:36 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
2008-06-12 11:42 . 2008-06-11 16:26 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2008-06-12 11:42 . 2008-06-11 16:26 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
2008-06-12 11:42 . 2008-06-11 16:26 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-06-12 11:42 . 2008-06-11 16:26 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-06-12 11:42 . 2008-06-11 21:48 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2008-06-12 11:42 . 2008-06-16 00:31 <REP> d-------- C:\Documents and Settings\Administrateur
2008-06-12 11:25 . 2008-06-12 11:25 <REP> d-------- C:\Program Files\MSXML 4.0
2008-06-12 11:10 . 2008-06-12 11:35 <REP> d-------- C:\Downloads
2008-06-12 11:09 . 2008-06-13 15:39 <REP> d-------- C:\Program Files\BitComet
2008-06-12 10:57 . 2008-06-12 10:57 24,576 --a------ C:\WINDOWS\system32\khfFXrRJ.dll.vir
2008-06-12 00:56 . 2008-06-12 00:56 <REP> d-------- C:\WINDOWS\system32\Lang
2008-06-12 00:56 . 2008-06-12 00:56 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
2008-06-12 00:56 . 2008-06-12 00:56 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
2008-06-12 00:55 . 2008-06-16 11:36 2,332,704 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-06-12 00:55 . 2008-06-16 11:33 29,408 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-06-12 00:25 . 2008-06-12 00:25 <REP> d-------- C:\Program Files\Fichiers communs\SWF Studio
2008-06-11 22:43 . 2008-06-14 18:56 <REP> d-------- C:\Program Files\Mozilla Thunderbird
2008-06-11 22:43 . 2008-06-11 22:43 <REP> d-------- C:\Documents and Settings\GloW\Application Data\Thunderbird
2008-06-11 22:19 . 2008-06-11 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-06-11 22:18 . 2008-06-11 22:19 <REP> d-------- C:\WINDOWS\system32\ZoneLabs
2008-06-11 22:18 . 2008-06-11 22:18 <REP> d-------- C:\Program Files\Zone Labs
2008-06-11 22:18 . 2008-06-11 22:18 <REP> d-------- C:\Program Files\Realtek
2008-06-11 22:17 . 2008-06-16 11:27 <REP> d-------- C:\WINDOWS\Internet Logs
2008-06-11 22:17 . 2005-04-16 22:20 487,424 --a------ C:\WINDOWS\RtlExUpd.dll
2008-06-11 22:17 . 2006-06-14 11:00 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2008-06-11 22:17 . 2006-06-14 11:00 82,944 --a--c--- C:\WINDOWS\system32\dllcache\wdmaud.sys
2008-06-11 22:17 . 2004-08-03 23:07 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2008-06-11 22:17 . 2004-08-03 23:07 52,864 --a--c--- C:\WINDOWS\system32\dllcache\dmusic.sys
2008-06-11 22:17 . 2006-06-14 10:47 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2008-06-11 22:17 . 2006-06-14 10:47 6,400 --a--c--- C:\WINDOWS\system32\dllcache\splitter.sys
2008-06-11 22:16 . 2008-06-11 22:16 <REP> d-------- C:\Program Files\CONEXANT
2008-06-11 22:03 . 2008-06-11 22:03 <REP> d-------- C:\Program Files\Avira
2008-06-11 22:03 . 2008-06-11 22:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-06-11 21:55 . 2008-06-11 21:55 <REP> d-------- C:\Program Files\Intel Desktop Board
2008-06-11 21:48 . 2008-06-11 21:48 <REP> d-------- C:\Documents and Settings\NetworkService\Application Data\Intel
2008-06-11 21:48 . 2008-06-11 21:48 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\Intel
2008-06-11 21:48 . 2008-06-11 21:48 <REP> d-------- C:\Documents and Settings\GloW\Application Data\Intel
2008-06-11 21:48 . 2008-06-11 21:48 21,419 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
2008-06-11 21:47 . 2008-06-11 21:47 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Intel
2008-06-11 21:46 . 2008-06-11 21:46 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-06-11 21:46 . 2008-06-11 21:46 <REP> d-------- C:\Program Files\DIFX
2008-06-11 21:46 . 2006-06-29 19:27 2,732,032 --a------ C:\WINDOWS\system32\Netw2r32.dll
2008-06-11 21:46 . 2006-06-29 19:49 2,206,720 --a------ C:\WINDOWS\system32\drivers\w29n51.sys
2008-06-11 21:46 . 2006-06-29 19:26 557,056 --a------ C:\WINDOWS\system32\Netw2c32.dll
2008-06-11 19:33 . 2008-06-11 19:33 <REP> d-------- C:\Team17
2008-06-11 19:10 . 2005-06-28 10:21 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2008-06-11 19:09 . 2008-06-12 11:26 <REP> d--h----- C:\WINDOWS\$hf_mig$
2008-06-11 19:08 . 2008-04-14 17:52 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 19:08 . 2008-04-14 17:52 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 17:08 . 1998-02-09 03:00 1,455,736 --------- C:\WINDOWS\system32\VCL35.BPL
2008-06-11 17:08 . 1998-02-08 19:00 996,872 --------- C:\WINDOWS\system32\CP3240MT.DLL
2008-06-11 17:08 . 1998-02-09 03:00 245,912 --------- C:\WINDOWS\system32\VCLX35.BPL
2008-06-11 17:08 . 1998-02-09 03:00 187,392 --------- C:\WINDOWS\system32\BCBSMP35.BPL
2008-06-11 17:08 . 2000-01-31 05:00 25,600 --------- C:\WINDOWS\system32\BORLNDMM.DLL
2008-06-11 17:08 . 1997-04-22 18:16 6,272 --------- C:\WINDOWS\system32\drivers\ASLM75.SYS
2008-06-11 17:08 . 1997-04-22 18:16 6,272 --------- C:\WINDOWS\system32\ASLM75.SYS
2008-06-11 17:07 . 2008-06-11 17:07 0 --a------ C:\WINDOWS\system32\drivers\1043_ASUSTeK_A6VM.alu
2008-06-11 17:04 . 2008-06-11 17:04 <REP> d-------- C:\Documents and Settings\GloW\WINDOWS
2008-06-11 17:04 . 1998-10-29 16:45 306,688 --a------ C:\WINDOWS\IsUninst.exe
2008-06-11 17:01 . 2008-06-11 17:01 <REP> d-------- C:\Program Files\Synaptics
2008-06-11 17:01 . 2008-06-11 22:21 <REP> d-------- C:\Program Files\ASUS
2008-06-11 17:01 . 2004-12-22 14:23 186,240 --a------ C:\WINDOWS\system32\drivers\SynTP.sys
2008-06-11 17:01 . 2004-12-22 14:23 114,688 --a------ C:\WINDOWS\system32\SynCtrl.dll
2008-06-11 17:01 . 2004-12-22 14:23 90,202 --a------ C:\WINDOWS\system32\SynTPAPI.dll
2008-06-11 17:01 . 2004-12-22 14:23 82,013 --a------ C:\WINDOWS\system32\SynCOM.dll
2008-06-11 17:01 . 2004-12-22 14:23 81,920 --a------ C:\WINDOWS\system32\SynTPCo2.dll
2008-06-11 17:01 . 2004-12-22 14:23 69,722 --a------ C:\WINDOWS\system32\SynTPFcs.dll
2008-06-11 17:00 . 2008-06-11 21:47 <REP> d-------- C:\Program Files\Intel
2008-06-11 15:53 . 2008-06-11 15:53 1,160 --a------ C:\WINDOWS\mozver.dat
2008-06-11 15:38 . 2005-01-17 22:48 1,036,928 --a------ C:\WINDOWS\system32\drivers\HSF_DP.sys
2008-06-11 15:38 . 2005-01-17 22:48 702,592 --a------ C:\WINDOWS\system32\drivers\HSF_CNXT.sys
2008-06-11 15:38 . 2005-01-17 22:48 163,328 --a------ C:\WINDOWS\system32\drivers\HSFHWAZL.sys
2008-06-11 15:38 . 2005-01-17 22:48 129,045 --a------ C:\WINDOWS\system32\drivers\HSFProf.cty
2008-06-11 15:38 . 2005-01-17 22:48 86,016 --a------ C:\WINDOWS\system32\mdmxsdk.dll
2008-06-11 15:38 . 2005-01-17 22:48 39,018 --a------ C:\WINDOWS\system32\hsfci011.dll
2008-06-11 15:38 . 2005-01-17 22:48 13,059 --a------ C:\WINDOWS\system32\drivers\mdmxsdk.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-15 12:59 1,421,312 ----a-w C:\WINDOWS\Internet Logs\xDB2.tmp
2008-06-14 17:01 1,415,680 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-06-11 20:22 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-11 15:13 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-06-11 12:56 --------- d-----w C:\Documents and Settings\GloW\Application Data\Talkback
2008-06-11 12:41 --------- d-----w C:\Program Files\microsoft frontpage
2008-06-11 12:39 --------- d-----w C:\Program Files\Services en ligne
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2008-04-21 07:02 663,552 ----a-w C:\WINDOWS\system32\wininet.dll
2008-04-02 19:08 54,672 ----a-w C:\WINDOWS\system32\vsutil_loc040c.dll
2008-04-02 19:08 42,384 ----a-w C:\WINDOWS\zllsputility_loc040c.dll
2008-04-02 19:08 21,904 ----a-w C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-04-02 19:08 17,808 ----a-w C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-04-02 19:07 75,248 ----a-w C:\WINDOWS\zllsputility.exe
2008-04-02 19:07 1,086,952 ----a-w C:\WINDOWS\system32\zpeng24.dll
2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{14EA15A9-30CD-4944-A248-BD1C416B5D39}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{33CCA584-E3F6-4A1C-A150-51B654B34C06}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{63742141-C650-4A35-A2C3-0B51A61AC83D}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f8687926-2a34-4a78-8998-a3d754e5fb27}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FCADA985-8D64-408A-B511-F538CD6080D9}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-12-04 17:33 7340032]
"nwiz"="nwiz.exe" [2005-12-04 17:33 1519616 C:\WINDOWS\system32\nwiz.exe]
"HControl"="C:\WINDOWS\ATK0100\HControl.exe" [2006-08-10 16:10 110592]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-12-22 14:23 98394]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-12-22 14:23 688218]
"Wireless Console"="C:\Program Files\ASUS\Wireless Console\wcourier.exe" [2005-07-22 14:36 57344]
"Power_Gear"="C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe" [2005-06-16 15:48 86016]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 00:38 802816]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 00:32 696320]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" [2005-01-07 17:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-14 17:01 16010752 C:\WINDOWS\RTHDCPL.exe]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-04-02 21:07 919016]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.asv2"= asusasv2.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"BitComet"="C:\Program Files\BitComet\BitComet.exe" /tray

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ASUS Live Update"=C:\Program Files\ASUS\ASUS Live Update\ALU.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"15136:TCP"= 15136:TCP:BitComet 15136 TCP
"15136:UDP"= 15136:UDP:BitComet 15136 UDP

R0 R592;R592;C:\WINDOWS\system32\DRIVERS\R592.sys [2004-07-05 16:14]
R0 risdpntk;risdpntk;C:\WINDOWS\system32\DRIVERS\risdpntk.sys [2004-09-17 00:42]
R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D.sys [2004-07-06 19:56]

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-06-14 17:06:20 C:\WINDOWS\Tasks\Spybot - Search & Destroy - Scheduled Task.job"
- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-16 11:35:29
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\system32\wpabaln.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-06-16 11:38:17 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-16 09:38:07

Pre-Run: 34,966,917,120 octets libres
Post-Run: 34,997,133,312 octets libres

254 --- E O F --- 2008-06-15 00:38:20


J'avai lancé avant kaspersky qui m'as trouvé d'antre trucs:


[06/15/2008, 14:55:05] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\GloW\Local Settings\Temporary Internet Files\Content.IE5\EKA6PZAA\VirtumundoBeGone[1].exe" )
[06/15/2008, 14:55:11] - Detected System Information:
[06/15/2008, 14:55:11] - Windows Version: 5.1.2600, Service Pack 2
[06/15/2008, 14:55:11] - Current Username: GloW (Admin)
[06/15/2008, 14:55:11] - Windows is in NORMAL mode.
[06/15/2008, 14:55:11] - Searching for Browser Helper Objects:
[06/15/2008, 14:55:11] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/15/2008, 14:55:11] - BHO 2: {14EA15A9-30CD-4944-A248-BD1C416B5D39} ()
[06/15/2008, 14:55:11] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:11] - Checking for HKLM\...\Winlogon\Notify\qoMcyVPJ
[06/15/2008, 14:55:11] - Key not found: HKLM\...\Winlogon\Notify\qoMcyVPJ, continuing.
[06/15/2008, 14:55:11] - BHO 3: {33CCA584-E3F6-4A1C-A150-51B654B34C06} ()
[06/15/2008, 14:55:11] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:11] - No filename found. Continuing.
[06/15/2008, 14:55:11] - BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[06/15/2008, 14:55:11] - BHO 5: {63742141-C650-4A35-A2C3-0B51A61AC83D} ()
[06/15/2008, 14:55:11] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:11] - Checking for HKLM\...\Winlogon\Notify\wvUoonlk
[06/15/2008, 14:55:11] - Key not found: HKLM\...\Winlogon\Notify\wvUoonlk, continuing.
[06/15/2008, 14:55:11] - BHO 6: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[06/15/2008, 14:55:11] - BHO 7: {8710FC9F-0816-49D7-AE14-4BA5269E838C} ()
[06/15/2008, 14:55:11] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:12] - Checking for HKLM\...\Winlogon\Notify\khfFXrRJ
[06/15/2008, 14:55:12] - Found: HKLM\...\Winlogon\Notify\khfFXrRJ - This is probably Virtumundo.
[06/15/2008, 14:55:12] - Assigning {8710FC9F-0816-49D7-AE14-4BA5269E838C} MSEvents Object
[06/15/2008, 14:55:12] - BHO list has been changed! Starting over...
[06/15/2008, 14:55:12] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/15/2008, 14:55:12] - BHO 2: {14EA15A9-30CD-4944-A248-BD1C416B5D39} ()
[06/15/2008, 14:55:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:12] - Checking for HKLM\...\Winlogon\Notify\qoMcyVPJ
[06/15/2008, 14:55:12] - Key not found: HKLM\...\Winlogon\Notify\qoMcyVPJ, continuing.
[06/15/2008, 14:55:12] - BHO 3: {33CCA584-E3F6-4A1C-A150-51B654B34C06} ()
[06/15/2008, 14:55:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:12] - No filename found. Continuing.
[06/15/2008, 14:55:12] - BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[06/15/2008, 14:55:12] - BHO 5: {63742141-C650-4A35-A2C3-0B51A61AC83D} ()
[06/15/2008, 14:55:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:12] - Checking for HKLM\...\Winlogon\Notify\wvUoonlk
[06/15/2008, 14:55:12] - Key not found: HKLM\...\Winlogon\Notify\wvUoonlk, continuing.
[06/15/2008, 14:55:12] - BHO 6: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[06/15/2008, 14:55:12] - BHO 7: {8710FC9F-0816-49D7-AE14-4BA5269E838C} (MSEvents Object)
[06/15/2008, 14:55:12] - ALERT: Found MSEvents Object!
[06/15/2008, 14:55:12] - BHO 8: {f8687926-2a34-4a78-8998-a3d754e5fb27} ()
[06/15/2008, 14:55:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:12] - Checking for HKLM\...\Winlogon\Notify\gvpdrixn
[06/15/2008, 14:55:12] - Key not found: HKLM\...\Winlogon\Notify\gvpdrixn, continuing.
[06/15/2008, 14:55:12] - BHO 9: {FCADA985-8D64-408A-B511-F538CD6080D9} ()
[06/15/2008, 14:55:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:12] - Checking for HKLM\...\Winlogon\Notify\xxyabXOf
[06/15/2008, 14:55:12] - Key not found: HKLM\...\Winlogon\Notify\xxyabXOf, continuing.
[06/15/2008, 14:55:12] - Finished Searching Browser Helper Objects
[06/15/2008, 14:55:12] - *** Detected MSEvents Object
[06/15/2008, 14:55:12] - Trying to remove MSEvents Object...
[06/15/2008, 14:55:13] - Terminating Process: IEXPLORE.EXE
[06/15/2008, 14:55:14] - Terminating Process: RUNDLL32.EXE
[06/15/2008, 14:55:14] - Disabling Automatic Shell Restart
[06/15/2008, 14:55:15] - Terminating Process: EXPLORER.EXE
[06/15/2008, 14:55:16] - Suspending the NT Session Manager System Service
[06/15/2008, 14:55:16] - Terminating Windows NT Logon/Logoff Manager
[06/15/2008, 14:55:16] - Re-enabling Automatic Shell Restart
[06/15/2008, 14:55:16] - File to disable: C:\WINDOWS\system32\khfFXrRJ.dll
[06/15/2008, 14:55:16] - Renaming C:\WINDOWS\system32\khfFXrRJ.dll -> C:\WINDOWS\system32\khfFXrRJ.dll.vir
[06/15/2008, 14:55:16] - File successfully renamed!
[06/15/2008, 14:55:16] - Removing HKLM\...\Browser Helper Objects\{8710FC9F-0816-49D7-AE14-4BA5269E838C}
[06/15/2008, 14:55:16] - Removing HKCR\CLSID\{8710FC9F-0816-49D7-AE14-4BA5269E838C}
[06/15/2008, 14:55:16] - Adding Kill Bit for ActiveX for GUID: {8710FC9F-0816-49D7-AE14-4BA5269E838C}
[06/15/2008, 14:55:16] - Deleting ATLEvents/MSEvents Registry entries
[06/15/2008, 14:55:16] - Removing HKLM\...\Winlogon\Notify\khfFXrRJ
[06/15/2008, 14:55:17] - Searching for Browser Helper Objects:
[06/15/2008, 14:55:17] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[06/15/2008, 14:55:17] - BHO 2: {14EA15A9-30CD-4944-A248-BD1C416B5D39} ()
[06/15/2008, 14:55:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:17] - Checking for HKLM\...\Winlogon\Notify\qoMcyVPJ
[06/15/2008, 14:55:17] - Key not found: HKLM\...\Winlogon\Notify\qoMcyVPJ, continuing.
[06/15/2008, 14:55:17] - BHO 3: {33CCA584-E3F6-4A1C-A150-51B654B34C06} ()
[06/15/2008, 14:55:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:17] - No filename found. Continuing.
[06/15/2008, 14:55:17] - BHO 4: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[06/15/2008, 14:55:17] - BHO 5: {63742141-C650-4A35-A2C3-0B51A61AC83D} ()
[06/15/2008, 14:55:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:17] - Checking for HKLM\...\Winlogon\Notify\wvUoonlk
[06/15/2008, 14:55:17] - Key not found: HKLM\...\Winlogon\Notify\wvUoonlk, continuing.
[06/15/2008, 14:55:17] - BHO 6: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[06/15/2008, 14:55:17] - BHO 7: {f8687926-2a34-4a78-8998-a3d754e5fb27} ()
[06/15/2008, 14:55:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:17] - Checking for HKLM\...\Winlogon\Notify\gvpdrixn
[06/15/2008, 14:55:17] - Key not found: HKLM\...\Winlogon\Notify\gvpdrixn, continuing.
[06/15/2008, 14:55:17] - BHO 8: {FCADA985-8D64-408A-B511-F538CD6080D9} ()
[06/15/2008, 14:55:17] - WARNING: BHO has no default name. Checking for Winlogon reference.
[06/15/2008, 14:55:17] - Checking for HKLM\...\Winlogon\Notify\xxyabXOf
[06/15/2008, 14:55:17] - Key not found: HKLM\...\Winlogon\Notify\xxyabXOf, continuing.
[06/15/2008, 14:55:17] - Finished Searching Browser Helper Objects
[06/15/2008, 14:55:17] - Finishing up...


Et voila mon hijackthis new version:

<Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:52:04, on 16/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\Wireless Console\wcourier.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\system32\wpabaln.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Notepad++\notepad++.exe
C:\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Wireless Console] C:\Program Files\ASUS\Wireless Console\wcourier.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=21871
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
End of file - 7126 bytes

[06/15/2008, 14:55:17] - A restart is needed.
[06/15/2008, 14:59:19] - Attempting to Restart via STOP error (Blue Screen!)

ton rapport hijac est bon,
passe ccleaner et ca devrait rouler
si tout fonctionne met le post en résolu

Ca roule tout nickel...
Plus qu'a trouver comment faire pour passer le topic en résolu....

dans le mail que tu recoit , je crois que c'est la pour le "resolu"