onjour,
j'ai un gros souci depuis 10 jour: mon ordi a été infecté par plein de saloperie! aprés avoir utilisé le scan de NOD32, j'ai télécharger et éxécuté les scans de spybot, ad-aware et a-squared . J'ai supprimé toute les menaces et tout était normal sur internet. Cependant, dés que je redémarre l'ordi, il y en a encore! alors j'ai redamarré en mode sans echec pour tout re-scané et supprimé les mauvais fichiers restant. Et là, les pubs bizare sont encore là, et de plus ma connexion internet est plus lente :'(

pour info, j'ai windows xp sp2. J'ai vu sur plein de forum qu'on pouvait également poster des rapports de hijackthis, alors je vous fais le copier coller du mien, en espérant vraimen que vous pourriez m'aidé! je compte sur vous! je suis désespéré!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:41:09, on 09/04/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesLavasoftAd-Aware 2007aawservice.exe
C:WINDOWSsystem32spoolsv.exe
C:Program Filesa-squared Freea2service.exe
C:WINDOWSSystem32alg.exe
C:PROGRA~1FICHIE~1France TelecomShared ModulesFTRTSVC�FTRTSVC.exe
C:Program FilesFichiers communsMicrosoft SharedVS7Debugmdm.exe
C:Program FilesEsetnod32krn.exe
C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32wdfmgr.exe
C:WINDOWSSystem32MsPMSPSv.exe
C:WINDOWSsystem32Ati2evxx.exe
C:Program FilesApoint2KApoint.exe
C:WINDOWSAGRSMMSG.exe
C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
C:Program FilesJavaj2re1.4.2_03binjusched.exe
C:Program FilesHewlett-PackardDigital ImagingUnloadhpqcmon.exe
C:Program FilesHPQQuick Launch ButtonsEabServr.exe
C:Program FilesRoxioEasy CD Creator 6DragToDiscDrgToDsc.exe
C:Program FilesHewlett-PackardHP Software UpdateHPWuSchd.exe
C:WINDOWSSystem32hphmon05.exe
C:Program FilesFichiers communsMicrosoft SharedWorks SharedWkUFind.exe
C:Program FilesFichiers communsRealUpdate_OBrealsched.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesOrange HSSSystraySystrayApp.exe
C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesApoint2KApntex.exe
C:Program FilesiPodbiniPodService.exe
C:PROGRA~1FICHIE~1France TelecomShared ModulesAlertModule�AlertModule.exe
C:WINDOWSSystem32ctfmon.exe
C:Program
FilesGoogleGoogleToolbarNotifierGoogleToolbarNotif
ier.exe
C:Program FilesMSN MessengerMsnMsgr.Exe
C:Program FilesSuperCopier2SuperCopier2.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Program FilesOpenOffice.org 2.0programsoffice.exe
C:Program FilesOpenOffice.org 2.0programsoffice.BIN
C:Program FilesOrange HSSconnectivityconnectivitymanager.exe
C:Program FilesOrange HSSconnectivityCoreComCoreCom.exe
C:Program FilesOrange HSSconnectivityCoreComOraConfigRecover.exe
C:PROGRA~1FICHIE~1France TelecomShared ModulesFTCOMModule�FTCOMModule.exe
C:WINDOWSSystem32wbemwmiprvse.exe
C:Program FilesFichiers communsTeleca SharedGeneric.exe
C:Program FilesSony EricssonMobileMobile Phone Monitorepmworker.exe
C:PROGRA~1MOZILL~1FIREFOX.EXE
C:Program FilesMSN Messengerusnsvc.exe
C:WINDOWSSystem32rundll32.exe
C:Program FilesMSN Messengerlivecall.exe
C:WINDOWSSystem32rundll32.exe
C:WINDOWSSystem32kmaapxd.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
C:WINDOWSSystem32wbemwmiprvse.exe
C:WINDOWSexplorer.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://fr.msn.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://fr8l.hpwis.com
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://fr8l.hpwis.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:Program FilesOrange HSSSearchURLHookSearchPageURL.dll
F2 - REG:system.ini:
UserInit=C:WINDOWSsystem32userinit.exe,C:Documents
and SettingsGRODAXTEbhv.exe s
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN AppsMSN ToolbarMSN Toolbar�1.02.5000.1021frmsntb.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:PROGRA~1FlashGetfgiebar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar5.dll
O4 - HKLM..Run: [Apoint] C:Program FilesApoint2KApoint.exe
O4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM..Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM..Run: [Cpqset] C:Program FilesHPQDefault Settingscpqset.exe
O4 - HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_03binjusched.exe
O4 - HKLM..Run: [CamMonitor] C:Program FilesHewlett-PackardDigital ImagingUnloadhpqcmon.exe
O4 - HKLM..Run: [eabconfg.cpl] C:Program FilesHPQQuick Launch ButtonsEabServr.exe /Start
O4 - HKLM..Run: [RoxioEngineUtility] "C:Program FilesFichiers communsRoxio SharedSystemEngUtil.exe"
O4 - HKLM..Run: [RoxioDragToDisc] "C:Program FilesRoxioEasy CD Creator 6DragToDiscDrgToDsc.exe"
O4 - HKLM..Run: [HPHUPD05] C:Program
FilesHewlett-Packard{45B6180B-DCAB-4093-8EE8-61644
57517F0}hphupd05.exe
O4 - HKLM..Run: [HP Software Update] "C:Program FilesHewlett-PackardHP Software UpdateHPWuSchd.exe"
O4 - HKLM..Run: [HPHmon05] C:WINDOWSSystem32hphmon05.exe
O4 - HKLM..Run: [Microsoft Works Update Detection] C:Program FilesFichiers communsMicrosoft SharedWorks SharedWkUFind.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesFichiers communsRealUpdate_OBrealsched.exe" -osboot
O4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe" /WAITSERVICE
O4 - HKLM..Run: [ORAHSSSessionManager] C:Program FilesOrange HSSSessionManagerSessionManager.exe
O4 - HKLM..Run: [SystrayORAHSS] "C:Program FilesOrange HSSSystraySystrayApp.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Sony Ericsson PC Suite] "C:Program FilesSony EricssonMobile2Application LauncherApplication Launcher.exe" /startoptions
O4 - HKLM..Run: [Wbcmgr] wbcmgr.exe
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [MSN UPSP] msnupnp.exe
O4 - HKLM..Run: [65b2b54d] rundll32.exe "C:WINDOWSSystem32fxwunbis.dll",b
O4 - HKLM..Run: [BM668186d1] Rundll32.exe "C:WINDOWSSystem32ujhwoqvt.dll",s
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [swg] C:Program
FilesGoogleGoogleToolbarNotifierGoogleToolbarNotif
ier.exe
O4 - HKCU..Run: [msnmsgr] "C:Program FilesMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [SuperCopier2.exe] C:Program FilesSuperCopier2SuperCopier2.exe
O4 - HKCU..Run: [Tok-Cirrhatus-3840] "C:Documents and SettingsGRODAXTELocal SettingsApplication Databr8703on.exe"
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:Program FilesOpenOffice.org 2.0programquickstart.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:Program FilesAdobeAcrobat 7.0Readerreader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O7 -
HKCUSoftwareMicrosoftWindowsCurrentVersionPolicies
System, DisableRegedit=1
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:Program FilesFlashGetjc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:Program FilesFlashGetjc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavaj2re1.4.2_03binnpjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavaj2re1.4.2_03binnpjpi142_03.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:PROGRA~1Yahoo!Commonyhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:PROGRA~1Yahoo!Commonyhexbmesfr.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~4OFFICE11REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FlashGetFlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:PROGRA~1FlashGetFlashGet.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O14 - IERESET.INF: START_PAGE_URL=http://fr8l.hpwis.com
O15 - Trusted Zone: http://www.orange.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mmail/w2/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 -
HKLMSystemCCSServicesTcpip..{23DD9372-16DB-4D24-86
C3-6E976869B2EB}: NameServer = 80.10.246.2,80.10.246.129
O17 -
HKLMSystemCS1ServicesTcpip..{23DD9372-16DB-4D24-86
C3-6E976869B2EB}: NameServer = 80.10.246.2,80.10.246.129
O17 -
HKLMSystemCS2ServicesTcpip..{23DD9372-16DB-4D24-86
C3-6E976869B2EB}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:Program Filesa-squared Freea2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:Program FilesLavasoftAd-Aware 2007aawservice.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:PROGRA~1FICHIE~1France TelecomShared ModulesFTRTSVC�FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:Program FilesEsetnod32krn.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:Program FilesAnalog DevicesSoundMAXSMAgent.exe

--
End of file - 11295 bytes

Configuration: Windows XP

ah ok SP1