Hey tout l'monde

Voilà mon problème :

J'étais sur mon ordi, tranquillement. Quand à un moment je me tourne vers ma console pour faire je n'sais plus quoi. Je me retourne après une minute, et qu'est ce que je vois, mon fond d'écran tout seul, en plein milieu de l'écran. J'appuie sur la souris pour que l'écran redevienne normal, mais rien.

Je fais donc Ctrl+Alt+Suppr, et là, mon écran retourne sur la liste de toutes les sessions. J'entre mon pass pour aller sur ma session, et je la retrouve comme je l'avais quittée, avec le gestionnaire des tâches en plus (normal avec Ctrl+Alt+Suppr) et une alerte Avast! qui me dit qu'un virus a été trouvé :

Nom du fichier : C:\Documents and Settings\Olivier\Application Data\MBSMacOSXPlugin1635.dll

Nom du logiciel malveillant : Win32:Trojan-gen {Other}

Type de logiciel malveillant : Virus/Ver

Version VPS : 080826-0, 26/08/2008

Donc logiquement, je fait "Supprimer...", et retourne à mes occupations habituelles, mais rien n'y fait. Une minute sans que je touche l'ordi et cela me refait le même problème que cité précédemment. EXACTEMENT pareil, avec au final l'alerte Avast! qui me signale toujours le même virus. J'ai beau avoir mis en quarantaine, supprimé ou réparé, toujours le même virus détecté au bout d'une minute d'inactivité.

Merci d'avance de votre aide

C'est du vundo, télécharge malwares bytes et lance une analyse rapide, poste le rapport ensuite

Salut,

Lien :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

Fait une analyse après si c'est un Cheval de Tri ( Trojan Horse ) je te conseille SD fix ^^
Mais SD fix se lance en Mode sans échec sur un sesion quelconque ( pas la session administrateur ) Puis se lance en appuyant sur la touce Y ^^
Voila PS : Si ton antivirus et Avast change pour un Kasperky Internet Security 2009 ( qui est très bien contre les prog malvéillant )

Je conseille plutôt AntiVir.

Malwarebytes' Anti-Malware 1.25
Version de la base de données: 1089
Windows 5.1.2600 Service Pack 2

18:00:28 27/08/2008
mbam-log-08-27-2008 (18-00-16).txt

Type de recherche: Examen rapide
Eléments examinés: 91935
Temps écoulé: 20 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 21
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 15
Fichier(s) infecté(s): 201

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener.1 (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj.1 (Adware.WebHancer) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{c89435b0-cdfe-11d3-97
6a-00e02913a9e0} (Adware.WebHancer) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{c2eeb4fa-b6d6-41b9-9cfa-a
ba87f862bcb} (Trojan.BHO) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{c900b400-cdfe-11d3-976a-0
0e02913a9e0} (Adware.WebHancer) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{e1412445-4ff8-410e-8d24-f
2cf86b171a4} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{c8cb3870-cdfe-11d3-976a
-00e02913a9e0} (Adware.WebHancer) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{c2eeb4fa-b6d6-41b9-9cfa-aba87f862bcb} (Trojan.BHO) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{c900b400-cdfe-11d3-976a-00e02913a9e0} (Adware.WebHancer) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{e1412445-4ff8-410e-8d24-f2cf86b171a4} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{39d37d53-eab9-4e04-9ac2-1
d72f051590c} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\TypeLib\{28252909-1be7-4236-bd77
-b59cff2ae6c4} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{1e5dd896-fd9b-4d31-83
1a-2427216a0a02} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{39d37d53-eab9-4e04-9a
c2-1d72f051590c} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{e0e86956-ee02-43ab-b4
10-fd690c490adb} (Adware.Popups) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{f13554a0-047e-4d0e-83
6f-1cbf1e265c28} (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj (Adware.WebHancer) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\webHancer Agent (Adware.WebHancer) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\webHancer (Adware.WebHancer) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\Outerinfo (Adware.PurityScan) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Outerinfo (Adware.Outerinfo) -> No action taken.
C:\Program Files\webHancer (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs (Adware.Webhancer) -> No action taken.
C:\Program Files\WinFixer 2005 (Rogue.WinFixer) -> No action taken.
C:\Casino (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\data (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\data (Adware.Casino) -> Files: 923 -> No action taken.
C:\Casino\betandwin Casino French\midi (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\sfx (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\sfx (Adware.Casino) -> Files: 405 -> No action taken.
C:\Casino\betandwin Casino French\xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\modules (Adware.Casino) -> No action taken.
C:\Program Files\PeDevice (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\tmp (Adware.Popups) -> No action taken.

Fichier(s) infecté(s):
C:\WINDOWS\system32\ustart.exe (Adware.Agent) -> No action taken.
C:\Documents and Settings\Céd\Local Settings\Temp\GLK60.tmp (Rogue.EvidenceEliminator) -> No action taken.
C:\Program Files\Outerinfo\outerinfo.ico (Adware.Outerinfo) -> No action taken.
C:\Program Files\Outerinfo\Terms.rtf (Adware.Outerinfo) -> No action taken.
C:\Program Files\webHancer\Programs\whAgent.ini (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs\license.txt (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs\readme.txt (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs\sporder.dll (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs\whagent.exe (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs\whinstaller.exe (Adware.Webhancer) -> No action taken.
C:\Program Files\webHancer\Programs\trz1A.tmp (Adware.Webhancer) -> No action taken.
C:\Program Files\WinFixer 2005\lock.dat (Rogue.WinFixer) -> No action taken.
C:\Casino\betandwin Casino French\bj.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\cam.cas (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\cardlib.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\common.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\creditdebit.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\db.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\devlib.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\devlibcomm.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\filemap.lst (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\games.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\licens.txt (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\modstatus.lst (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\mp3dec.asi (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\mss32.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\msvcrt.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\phist.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\shfolder.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\update.exe (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xml.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\UNWISE.EXE (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\UNWISE.INI (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\INSTALL.LOG (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\options.cfg (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\srvmap.lst (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\countries.lst (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\cp.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\pg.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\war.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\mba.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\ro.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\jbs.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\bms.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\slotcore.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\super7.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\jjs.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\5d.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\hnm.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\singleplayer.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\kzo.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\bay.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xgs.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\mds.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\vp2.dll (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\install.exe (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\casino.exe (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\midi\bw_1.mid (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\common.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\creditdebit.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_casinosettings.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_game_panel.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_general_all.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_history.xrs (Adware.Casino) -> No action taken.

Clique sur Supprimer la sélection.

C:\Casino\betandwin Casino French\xrs\ext_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_mc_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ext_misc.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\filemap.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\games_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_bj.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\install.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jackpotview.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mc_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\message.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\optdef.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\playerhistory.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_ss_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_ss_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_ss_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bj_ss_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ebj_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ebj_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ebj_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\ebj_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cp_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cp_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_cp.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cp_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cp_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\pg_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\pg_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_pg.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\pg_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\pg_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\war_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\war_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_war.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\war_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\war_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mba_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mba_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_mba.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mba_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mba_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\euro_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\euro_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_euro.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\euro_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\euro_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\fro_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\fro_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_fro.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\fro_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\fro_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_jbs.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bms2_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bms2_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bms2_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\none_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_none.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs3_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs3_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs3_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs3_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs2_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs2_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs2_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jbs2_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\super7_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\super7_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\super7_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jjs_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jjs_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jjs_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\5d_join.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\5d_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\game_panel_5d.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\5d_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\5d_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cf_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cf_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\cf_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\hnm_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\hnm_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\hnm_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\sh_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\sh_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\sh_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\kzo_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\kzo_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\kzo_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bay_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bay_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bay_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\xgs_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\xgs_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\xgs_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mds_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mds_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\mds_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\job_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\job_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\job_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bp_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bp_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\bp_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jp_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jp_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jp_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\dw_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\dw_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\dw_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jpp_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jpp_limits.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\jpp_history.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\tob_main.xrs (Adware.Casino) -> No action taken.
C:\Casino\betandwin Casino French\xrs\tob_limits.xrs (Adware.Casino) -> No action taken.
C:\Program Files\PeDevice\pedevPS.dll (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\PeDev.exe (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\communication.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\Domain.Watchlist.txt (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\pae-options.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\search.watchlist.txt (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\pae_url.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\watchlist.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\statistic.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\tmp\tmp.html (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\tmp\last_popup_content.html (Adware.Popups) -> No action taken.

C:\WINDOWS\system32\ClickToFindandFixErrors_RON.ic
o (Malware.Trace) -> No action taken.

C:\WINDOWS\system32\ClickToFindandFixErrors_RON_In
tl.ico (Malware.Trace) -> No action taken.

C:\WINDOWS\system32\ClickToFindandFixErrors_Intl.i
co (Malware.Trace) -> No action taken.

C:\WINDOWS\system32\ClickToFindandFixErrors_US.ico
(Malware.Trace) -> No action taken.

C'était avant la suppression de la sélection.

Après la suppression ils me disent ça :

Malwarebytes' Anti-Malware 1.25
Version de la base de données: 1089
Windows 5.1.2600 Service Pack 2

18:03:55 27/08/2008
mbam-log-08-27-2008 (18-03-55).txt

Type de recherche: Examen rapide
Eléments examinés: 91935
Temps écoulé: 20 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 21
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 15
Fichier(s) infecté(s): 201

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener (Adware.Popups) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener.1 (Adware.Popups) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj.1 (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{c89435b0-cdfe-11d3-97
6a-00e02913a9e0} (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{c2eeb4fa-b6d6-41b9-9cfa-a
ba87f862bcb} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{c900b400-cdfe-11d3-976a-0
0e02913a9e0} (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{e1412445-4ff8-410e-8d24-f
2cf86b171a4} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{c8cb3870-cdfe-11d3-976a
-00e02913a9e0} (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{c2eeb4fa-b6d6-41b9-9cfa-aba87f862bcb} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{c900b400-cdfe-11d3-976a-00e02913a9e0} (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{e1412445-4ff8-410e-8d24-f2cf86b171a4} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{39d37d53-eab9-4e04-9ac2-1
d72f051590c} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{28252909-1be7-4236-bd77
-b59cff2ae6c4} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{1e5dd896-fd9b-4d31-83
1a-2427216a0a02} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{39d37d53-eab9-4e04-9a
c2-1d72f051590c} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{e0e86956-ee02-43ab-b4
10-fd690c490adb} (Adware.Popups) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{f13554a0-047e-4d0e-83
6f-1cbf1e265c28} (Adware.Popups) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\webHancer Agent (Adware.WebHancer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\webHancer (Adware.WebHancer) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\Outerinfo (Adware.PurityScan) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Outerinfo (Adware.Outerinfo) -> Quarantined and deleted successfully.
C:\Program Files\webHancer (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\WinFixer 2005 (Rogue.WinFixer) -> Quarantined and deleted successfully.
C:\Casino (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\data (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\data (Adware.Casino) -> Files: 923 -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\midi (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\sfx (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\sfx (Adware.Casino) -> Files: 405 -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\modules (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\tmp (Adware.Popups) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\ustart.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Céd\Local Settings\Temp\GLK60.tmp (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\outerinfo.ico (Adware.Outerinfo) -> Quarantined and deleted successfully.
C:\Program Files\Outerinfo\Terms.rtf (Adware.Outerinfo) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\whAgent.ini (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\license.txt (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\readme.txt (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\sporder.dll (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\whagent.exe (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\whinstaller.exe (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\webHancer\Programs\trz1A.tmp (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\Program Files\WinFixer 2005\lock.dat (Rogue.WinFixer) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\bj.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\cam.cas (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\cardlib.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\common.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\creditdebit.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\db.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\devlib.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\devlibcomm.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\filemap.lst (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\games.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\licens.txt (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\modstatus.lst (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\mp3dec.asi (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\mss32.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\msvcrt.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\phist.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\shfolder.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\update.exe (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xml.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\UNWISE.EXE (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\UNWISE.INI (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\INSTALL.LOG (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\options.cfg (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\srvmap.lst (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\countries.lst (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\cp.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\pg.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\war.dll (Adware.Casino) -> Quarantined and deleted successfully.

C:\Casino\betandwin Casino French\mba.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\ro.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\jbs.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\bms.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\slotcore.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\super7.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\jjs.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\5d.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\hnm.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\singleplayer.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\kzo.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\bay.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xgs.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\mds.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\vp2.dll (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\install.exe (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\casino.exe (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\midi\bw_1.mid (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\common.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\creditdebit.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_casinosettings.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_game_panel.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_general_all.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_mc_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ext_misc.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\filemap.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\games_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_bj.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\install.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jackpotview.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mc_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\message.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\optdef.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\playerhistory.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_ss_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_ss_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_ss_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bj_ss_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ebj_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ebj_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ebj_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\ebj_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cp_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cp_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_cp.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cp_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cp_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\pg_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\pg_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_pg.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\pg_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\pg_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\war_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\war_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_war.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\war_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\war_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mba_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mba_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_mba.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mba_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mba_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\euro_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\euro_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_euro.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\euro_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\euro_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\fro_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\fro_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_fro.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\fro_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\fro_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_jbs.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bms2_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bms2_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bms2_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\none_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_none.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs3_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs3_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs3_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs3_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs2_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs2_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.

C:\Casino\betandwin Casino French\xrs\jbs2_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jbs2_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\super7_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\super7_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\super7_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jjs_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jjs_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jjs_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\5d_join.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\5d_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\game_panel_5d.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\5d_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\5d_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cf_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cf_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\cf_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\hnm_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\hnm_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\hnm_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\sh_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\sh_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\sh_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\kzo_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\kzo_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\kzo_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bay_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bay_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bay_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\xgs_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\xgs_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\xgs_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mds_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mds_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\mds_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\job_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\job_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\job_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bp_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bp_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\bp_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jp_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jp_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jp_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\dw_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\dw_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\dw_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jpp_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jpp_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\jpp_history.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\tob_main.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Casino\betandwin Casino French\xrs\tob_limits.xrs (Adware.Casino) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\pedevPS.dll (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\PeDev.exe (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\communication.xml (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\Domain.Watchlist.txt (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\pae-options.xml (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\search.watchlist.txt (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\pae_url.xml (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\watchlist.xml (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\statistic.xml (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\tmp\tmp.html (Adware.Popups) -> Quarantined and deleted successfully.
C:\Program Files\PeDevice\tmp\last_popup_content.html (Adware.Popups) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ClickToFindandFixErrors_RON.ic
o (Malware.Trace) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ClickToFindandFixErrors_RON_In
tl.ico (Malware.Trace) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ClickToFindandFixErrors_Intl.i
co (Malware.Trace) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ClickToFindandFixErrors_US.ico
(Malware.Trace) -> Quarantined and deleted successfully.

---> Désinstalle Avast et installe Antivir (français et bien plus efficace) :
http://dl1.avgate.net/down/windows/antivir_workstation_winu_fr_h.exe

---> Fais un scan complet avec Antivir et supprime tout ce qu'il trouve

Voilà le rapport de Antivir :

Avira AntiVir Personal
Report file date: mercredi 27 août 2008 18:14

Scanning for 1579218 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: ACER-73356C3771

Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 02/08/2008 17:54:18
AVSCAN.DLL : 8.1.4.0 40705 Bytes 02/08/2008 17:54:18
LUKE.DLL : 8.1.4.5 164097 Bytes 02/08/2008 17:54:20
LUKERES.DLL : 8.1.4.0 12033 Bytes 02/08/2008 17:54:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:27:16
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 16:59:54
ANTIVIR2.VDF : 7.0.6.60 2802176 Bytes 24/08/2008 10:49:20
ANTIVIR3.VDF : 7.0.6.81 146944 Bytes 27/08/2008 15:32:16
Engineversion : 8.1.1.23
AEVDF.DLL : 8.1.0.5 102772 Bytes 18/04/2008 20:21:14
AESCRIPT.DLL : 8.1.0.68 315770 Bytes 26/08/2008 10:49:26
AESCN.DLL : 8.1.0.23 119156 Bytes 02/08/2008 17:54:20
AERDL.DLL : 8.1.0.20 418165 Bytes 25/04/2008 20:13:50
AEPACK.DLL : 8.1.2.1 364917 Bytes 02/08/2008 17:54:20
AEOFFICE.DLL : 8.1.0.22 192890 Bytes 26/08/2008 10:49:24
AEHEUR.DLL : 8.1.0.50 1388918 Bytes 26/08/2008 10:49:24
AEHELP.DLL : 8.1.0.15 115063 Bytes 31/05/2008 18:19:36
AEGEN.DLL : 8.1.0.36 315764 Bytes 26/08/2008 10:49:22
AEEMU.DLL : 8.1.0.7 430452 Bytes 02/08/2008 17:54:20
AECORE.DLL : 8.1.1.8 172406 Bytes 02/08/2008 17:54:20
AEBB.DLL : 8.1.0.1 53617 Bytes 02/08/2008 17:54:20
AVWINLL.DLL : 1.0.0.12 15105 Bytes 02/08/2008 17:54:18
AVPREF.DLL : 8.0.2.0 38657 Bytes 02/08/2008 17:54:18
AVREP.DLL : 8.0.0.2 98344 Bytes 02/08/2008 17:54:20
AVREG.DLL : 8.0.0.1 33537 Bytes 02/08/2008 17:54:18
AVARKT.DLL : 1.0.0.23 307457 Bytes 18/04/2008 20:21:12
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 02/08/2008 17:54:18
SQLITE3.DLL : 3.3.17.1 339968 Bytes 18/04/2008 20:21:12
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 02/08/2008 17:54:20
NETNT.DLL : 8.0.0.1 7937 Bytes 18/04/2008 20:21:12
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 02/08/2008 17:54:12
RCTEXT.DLL : 8.0.52.0 86273 Bytes 02/08/2008 17:54:12

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: off
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mercredi 27 août 2008 18:14

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SOFFICE.BIN' - '1' Module(s) have been scanned
Scan process 'SOFFICE.EXE' - '1' Module(s) have been scanned
Scan process 'WZQKPICK.EXE' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'dslmon.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'LogitechDesktopMessenger.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'GrooveMonitor.exe' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'SamsungMediaStudioAgent.exe' - '1' Module(s) have been scanned
Scan process '9wifi.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'RichVideo.exe' - '1' Module(s) have been scanned
Scan process 'FTRTSVC.EXE' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
Scan process 'MediaServerService.exe' - '1' Module(s) have been scanned
Scan process 'AVGUARD.EXE' - '1' Module(s) have been scanned
Scan process 'LEXPPS.EXE' - '1' Module(s) have been scanned
Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned
Scan process 'LEXBCES.EXE' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
47 processes with 47 modules were scanned

Starting to scan the registry.
The registry was scanned ( '78' files ).

Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\WINDOWS\downloadme3.zip
[0] Archive type: ZIP
--> downloadme3.scr
[DETECTION] Contains recognition pattern of the WORM/IrcBot.26112.4 worm
[NOTE] The file was deleted!
C:\Documents and Settings\All Users\Documents\emul\Photoshop CS3 Extended FR - KeyGen - A@RICIA.rar
[0] Archive type: RAR
--> Photoshop CS3 Extended\KeyGen Photoshop CS3 Extended.exe
[DETECTION] Is the TR/Proxy.Horst.aae.5 Trojan
[NOTE] The file was deleted!
C:\Documents and Settings\Olivier\Local Settings\Temp\54779.exe
[0] Archive type: CAB SFX (self extracting)
--> \0x0407.ini
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
C:\Program Files\Bodom-Child - RaBBi\RGSS\Standard\Graphics.exe
[0] Archive type: CAB SFX (self extracting)
--> Graphics\Animations\002-Action02.png
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
C:\Program Files\eMule\Temp\010.part
[WARNING] An exception has been identified!
[WARNING] In the module 'aecore.dll' an exception occured.
Calling the function AVEPROC_TestFile in file: \\?\C:\Program Files\eMule\Temp\010.part
Error description:ACCESS_VIOLATION
EAX = 00164873 EBX = 00000037
ECX = 00004158 EDX = 01B80024
ESI = 01C01000 EDI = 00080000
EIP = 0159A2F9 EBP = 01B7BE28
ESP = 01B7BE1C Flg = 00010212
CS = 00000023 SS = 0000001B
C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206044.exe
[DETECTION] Is the TR/Drop.Softomat.AN Trojan
[NOTE] The file was deleted!
C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206048.dll
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was deleted!
C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206051.dll
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was deleted!
C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206074.dll
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was deleted!
C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206210.dll
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was deleted!
C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206211.exe
[DETECTION] Is the TR/Trash.Gen Trojan
[NOTE] The file was deleted!
C:\FOUND.022\FILE0000.CHK
[0] Archive type: ZIP
--> file73.scr
[DETECTION] Contains recognition pattern of the WORM/IrcBot.26112.4 worm
[NOTE] The file was deleted!
C:\FOUND.022\FILE0002.CHK
[0] Archive type: ZIP
--> files43.scr
[DETECTION] Contains recognition pattern of the WORM/IrcBot.26112.4 worm
[NOTE] The file was deleted!
C:\FOUND.024\FILE0000.CHK
[0] Archive type: ZIP
--> look45.scr
[DETECTION] Contains recognition pattern of the WORM/IrcBot.26112.4 worm
[NOTE] The file was deleted!
Begin scan in 'D:\' <ACERDATA>

End of the scan: mercredi 27 août 2008 19:50
Used time: 1:36:50 Hour(s)

The scan has been done completely.

16119 Scanning directories
497683 Files were scanned
11 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
11 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
497668 Files not concerned
14324 Archives were scanned
7 Warnings
11 Notes

Et le problème persiste.

Fais ce que je t'ai dit avec Sdfix c'est rustre mais efficace ^^

• Télécharge SDFix (par Andy Manchesta) et sauvegarde-le sur ton bureau.

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

• Double-clique sur SDFix.exe et choisis Install pour l'extraire dans son dossier sur le bureau.
• Redémarre le PC en mode sans échec :

http://www.malekal.com/modesansechec.php

• Choisis ton compte.

Déroule la liste des instructions ci-dessous :

• Ouvre le dossier SDFix qui vient d'être créé sur le bureau et double-clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le nettoyage.
• Quand il te le demandera, appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long à redémarrer car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du bureau, l'outil aura terminé et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton bureau.
• Le rapport SDFix s'ouvrira et il sera enregistré dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le rapport du fichier Report.txt.

[b]SDFix: Version 1.219 [/b]
Run by Olivier on 27/08/2008 at 20:52

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files [/b]:

No Trojan Files Found

Folder C:\Documents and Settings\Olivier\Application Data\Macromedia\Flash
Player\macromedia.com\support\flashplayer\sys\#w*w
.redtube.com - Removed

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-27 21:00:05
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servi
ces\sharedaccess\parameters\firewallpolicy\standar
dprofile\authorizedapplications\list]

"%windir%\\system32\\sessmgr.exe"="%windir%\\syste
m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Acer\\Acer eConsole\\MediaSync.exe"="C:\\Program Files\\Acer\\Acer eConsole\\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer"
"C:\\Program Files\\Acer\\Acer eConsole\\eConsole.exe"="C:\\Program Files\\Acer\\Acer
eConsole\\eConsole.exe:LocalSubNet:Enabled:eConsol
e"
"C:\\Program Files\\Acer\\Acer eConsole\\MediaServerService.exe"="C:\\Program Files\\Acer\\Acer
eConsole\\MediaServerService.exe:LocalSubNet:Enabl
ed:Acer Media Server"

"C:\\WINDOWS\\System32\\LEXPPS.EXE"="C:\\WINDOWS\\
System32\\LEXPPS.EXE:*:Enabled:LEXPPS.EXE"
"C:\\Program
Files\\BitTorrent\\btdownloadgui.exe"="C:\\Program

Files\\BitTorrent\\btdownloadgui.exe:*:Enabled:btd
ownloadgui"

"C:\\WINDOWS\\System32\\FXSCLNT.exe"="C:\\WINDOWS\
\System32\\FXSCLNT.exe:*:Disabled:Microsoft Fax Console"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"

"%windir%\\system32\\ccapp.exe"="%windir%\\system3
2\\ccapp.exe:*:Enabled:System Process"
"C:\\Program Files\\Logitech\\Desktop
Messenger\\8876480\\Program\\LogitechDesktopMessen
ger.exe"="C:\\Program Files\\Logitech\\Desktop
Messenger\\8876480\\Program\\LogitechDesktopMessen
ger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\\Program Files\\xchat\\xchat.exe"="C:\\Program Files\\xchat\\xchat.exe:*:Enabled:XChat IRC Client"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program
Files\\Wanadoo\\WOOBrowser\\WOOBrowser.exe"="C:\\P
rogram
Files\\Wanadoo\\WOOBrowser\\WOOBrowser.exe:*:Enabl
ed:Internet Explorer"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\groove.exe"="C:\\Program Files\\Microsoft Office\\Office12\\groove.exe:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\X-Chat 2\\xchat.exe"="C:\\Program Files\\X-Chat 2\\xchat.exe:*:Enabled:X-Chat IRC Client"

"C:\\WINDOWS\\System32\\muzapp.exe"="C:\\WINDOWS\\
System32\\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program
Files\\CyberLink\\PowerDirector\\PDR.EXE"="C:\\Pro
gram
Files\\CyberLink\\PowerDirector\\PDR.EXE:*:Enabled
:CyberLink PowerDirector"
"C:\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\RM.exe"="C:\
\Program
Files\\Pinnacle\\VideoSpin\\Programs\\RM.exe:*:Ena
bled:Render Manager"
"C:\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\PMSRegisterF
ile.exe"="C:\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\PMSRegisterF
ile.exe:*:Enabled:PMSRegisterFile"
"C:\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\umi.exe"="C:
\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\umi.exe:*:En
abled:umi"
"C:\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\VideoSpin.ex
e"="C:\\Program
Files\\Pinnacle\\VideoSpin\\Programs\\VideoSpin.ex
e:*:Enabled:Pinnacle VideoSpin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servi
ces\sharedaccess\parameters\firewallpolicy\domainp
rofile\authorizedapplications\list]

"%windir%\\system32\\sessmgr.exe"="%windir%\\syste
m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Logitech\\Desktop
Messenger\\8876480\\Program\\LogitechDesktopMessen
ger.exe"="C:\\Program Files\\Logitech\\Desktop
Messenger\\8876480\\Program\\LogitechDesktopMessen
ger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[b]Remaining Files [/b]:

[b]Files with Hidden Attributes [/b]:

Mon 17 Oct 2005 1,024 ...HR --- "C:\WINDOWS\system32\NTICDMK7.dll"
Mon 17 Oct 2005 1,024 ...HR --- "C:\WINDOWS\system32\NTIMPEG2.dll"
Mon 17 Oct 2005 1,024 ...HR --- "C:\WINDOWS\system32\NTIMP3.dll"
Mon 17 Oct 2005 1,024 ...HR --- "C:\WINDOWS\system32\NTIFCD3.dll"
Mon 17 Oct 2005 1,024 ...HR --- "C:\WINDOWS\system32\NTIBUN4.dll"
Sun 9 Apr 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 27 Aug 2008 28,672 A..H. --- "C:\System Volume
Information\_restore{DA1684A3-4776-45C8-851D-DD8A5
6FF2753}\RP603\A0206339.dll"
Sun 21 Oct 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\388e66e6
44283db0233c4a98f2fd08a0\BIT1.tmp"
Thu 8 May 2008 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\24af2a69
c06a4de03e35dc89d706475f\BIT1.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\9e870549
834e2bceb796e44a1e3ac6f5\BIT8.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\22fb973e
059470cc1b5d76c4ae605351\BIT9.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\2769b111
678c52099a3b3123b12f2325\BIT6.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\18b19374
451d28a8fbaf1939cf31ff45\BIT5.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\26924cbc
8132a10b438ce6e2b49d4652\BIT1.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\30285791
903730fbf957a83562db4ff4\BIT3.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\d77b9b5b
8fed23dd91f50d167cce60d3\BIT7.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\cb8921d0
c7830b2f33c00fa4c8a10d17\BIT4.tmp"
Sat 15 Dec 2007 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\0a67b6c4
06b1d7e0f5c1e6f6d44a3f6e\BIT2.tmp"
Sun 27 Jul 2008 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\405ae8e4
8aa46e265982686e1678047b\BIT5.tmp"
Sun 27 Jul 2008 0 A..H. ---
"C:\WINDOWS\SoftwareDistribution\Download\585dc261
2ebcefc90e7dee4c276ee95e\BIT12.tmp"
Sun 11 Mar 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Sat 13 Nov 2004 37,376 ...H. --- "C:\Program Files\Fichiers communs\Adobe\ESD\DLMCleanup.exe"
Fri 25 Jun 2004 12,431,945 A..H. --- "C:\Program Files\Bodom-Child - RaBBi\RGSS\Standard\Graphics.exe"

[b]Finished![/b]

Voilà le rapport.

Le problème ne semble plus persister, merci beaucoup à widemeo, GeeK-Ouss et les autres qui ont postés sur ce topic, ça fait plaisir d'être aidé comme ça

---> Relance MBAM, va dans Quarantaine et supprime tout

---> Supprime SDFix

- Télécharge HijackThis V 2.02 (HijackThis Installer) :
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

- Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

- Clique sur Install ensuite sur I Accept

- Clique sur Do a scan system and save log file

- Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse.