Pop up en masse

Voici le rapport Navilog. Merci

Search Navipromo version 3.7.5 commencé le 28/02/2009 à 20:48:58,04

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 26.02.2009 à 18h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : k-rol ( Administrator )
BOOT : Normal boot

Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)

C:\ (Local Disk) - NTFS - Total:111 Go (Free:25 Go)
D:\ (Local Disk) - NTFS - Total:111 Go (Free:100 Go)
E:\ (CD or DVD)


Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\Windows" ***


*** Recherche dossiers dans "C:\Program Files" ***

...\WebMediaPlayer trouvé !

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

...\WebMediaPlayer trouvé !

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***


*** Recherche dossiers dans "C:\ProgramData" ***


*** Recherche dossiers dans "c:\users\k-rol\appdata\roaming\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "C:\Users\k-rol\AppData\Local\virtualstore\Program Files" ***



*** Recherche dossiers dans "C:\Users\k-rol\AppData\Local" ***




*** Recherche dossiers dans "C:\Users\k-rol\AppData\Roaming" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\k-rol\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\k-rol\AppData\Local\virtualstore\windows\system32" *

* Recherche dans "C:\Users\k-rol\AppData\Local" *



*** Recherche fichiers ***


c:\users\public\desktop\WebMediaPlayer.lnk trouvé !

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"oqrklno"="\"c:\\users\\k-rol\\appdata\\local\\oqrklno.exe\" oqrklno"


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\Windows\system32" :


* Dans "C:\Users\k-rol\AppData\Local\Microsoft" :


* Dans "C:\Users\k-rol\AppData\Local\virtualstore\windows\system32" :


* Dans "C:\Users\k-rol\AppData\Local" :

ebfol.dat trouvé !
ebfol_nav.dat trouvé !
ebfol_navps.dat trouvé !
ebfol.bat trouvé !
oqrklno.exe trouvé !
oqrklno.dat trouvé !
oqrklno_nav.dat trouvé !
oqrklno_navps.dat trouvé !
oqrklno.bat trouvé !

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :



*** Analyse terminée le 28/02/2009 à 21:02:23,36 ***

Voici le rapport, Merci...


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : k-rol ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total:111 Go (Free:25 Go)
D:\ (Local Disk) - NTFS - Total:111 Go (Free:100 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 28/02/2009|21:24 )

[ UAC => 1 ]

--------------------\\ Listing des dossiers dans Local

[01/10/2008|09:16] C:\Users\k-rol\AppData\Local\Acer Arcade Deluxe
[17/09/2008|13:14] C:\Users\k-rol\AppData\Local\acer eNM
[18/09/2008|20:45] C:\Users\k-rol\AppData\Local\Adobe
[23/07/2008|20:37] C:\Users\k-rol\AppData\Local\Apple
[24/07/2008|07:48] C:\Users\k-rol\AppData\Local\Apple Computer
[05/06/2008|15:45] C:\Users\k-rol\AppData\Local\Application Data
[01/07/2008|19:53] C:\Users\k-rol\AppData\Local\CyberLink
[10/12/2008|17:40] C:\Users\k-rol\AppData\Local\d3d9caps.dat
[24/02/2009|18:27] C:\Users\k-rol\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[30/09/2008|17:45] C:\Users\k-rol\AppData\Local\DV Wizard
[25/01/2009|10:58] C:\Users\k-rol\AppData\Local\ebfol.bat
[25/01/2009|11:20] C:\Users\k-rol\AppData\Local\ebfol.dat
[25/01/2009|10:59] C:\Users\k-rol\AppData\Local\ebfol_nav.dat
[25/01/2009|11:20] C:\Users\k-rol\AppData\Local\ebfol_navps.dat
[05/06/2008|15:47] C:\Users\k-rol\AppData\Local\GDIPFONTCACHEV1.DAT
[16/02/2009|01:05] C:\Users\k-rol\AppData\Local\Google
[05/06/2008|15:45] C:\Users\k-rol\AppData\Local\Historique
[01/07/2008|19:53] C:\Users\k-rol\AppData\Local\HomeMedia
[28/02/2009|20:00] C:\Users\k-rol\AppData\Local\IconCache.db
[01/10/2008|08:55] C:\Users\k-rol\AppData\Local\IM
[06/10/2008|16:18] C:\Users\k-rol\AppData\Local\Iminent
[28/02/2009|21:02] C:\Users\k-rol\AppData\Local\Microsoft
[07/06/2008|14:28] C:\Users\k-rol\AppData\Local\Microsoft Games
[10/02/2009|22:58] C:\Users\k-rol\AppData\Local\Microsoft Help
[05/06/2008|18:11] C:\Users\k-rol\AppData\Local\Mozilla
[28/02/2009|20:44] C:\Users\k-rol\AppData\Local\oqrklno.bat
[28/02/2009|21:24] C:\Users\k-rol\AppData\Local\oqrklno.dat
[26/02/2009|22:04] C:\Users\k-rol\AppData\Local\oqrklno.exe
[26/02/2009|22:04] C:\Users\k-rol\AppData\Local\oqrklno_nav.dat
[28/02/2009|13:20] C:\Users\k-rol\AppData\Local\oqrklno_navps.dat
[01/10/2008|09:16] C:\Users\k-rol\AppData\Local\PlayMovie
[05/06/2008|16:31] C:\Users\k-rol\AppData\Local\PowerCinema
[28/08/2008|22:07] C:\Users\k-rol\AppData\Local\Shareaza
[28/02/2009|21:24] C:\Users\k-rol\AppData\Local\Temp
[05/06/2008|15:45] C:\Users\k-rol\AppData\Local\Temporary Internet Files
[29/11/2008|19:21] C:\Users\k-rol\AppData\Local\TomTom
[20/07/2008|12:34] C:\Users\k-rol\AppData\Local\VirtualStore
[29/09/2008|11:12] C:\Users\k-rol\AppData\Local\Windows Live Writer

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[05/06/2008 17:23][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[27/02/2009 20:00][--a------] C:\Windows\tasks\Norton Internet Security - Analyse systŠme complŠte - k-rol.job
[28/02/2009 20:44][--ah-----] C:\Windows\tasks\SA.DAT
[28/02/2009 20:00][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/08/2007|08:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[22/02/2009|19:18] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[01/12/2008|13:28] C:\ProgramData\Adobe
[23/07/2008|20:35] C:\ProgramData\Apple
[23/07/2008|20:40] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[08/09/2008|19:31] C:\ProgramData\Avira
[05/06/2008|15:41] C:\ProgramData\Bureau
[16/08/2008|17:28] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[25/01/2009|11:24] C:\ProgramData\eMule
[01/09/2008|18:47] C:\ProgramData\ESET
[05/06/2008|15:41] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[05/06/2008|18:52] C:\ProgramData\Forge of Games
[15/02/2009|16:29] C:\ProgramData\Google
[28/02/2009|20:08] C:\ProgramData\Google Updater
[01/10/2008|08:53] C:\ProgramData\IM
[01/10/2008|08:51] C:\ProgramData\IncrediMail
[01/09/2008|18:37] C:\ProgramData\LUUnInstall.LiveUpdate
[31/08/2008|20:28] C:\ProgramData\Malwarebytes
[05/06/2008|15:41] C:\ProgramData\Menu D‚marrer
[21/02/2009|17:17] C:\ProgramData\Messenger Plus!
[20/12/2008|00:03] C:\ProgramData\Microsoft
[10/02/2009|22:58] C:\ProgramData\Microsoft Help
[05/06/2008|15:41] C:\ProgramData\ModŠles
[20/10/2008|11:12] C:\ProgramData\Sony Corporation
[28/11/2008|19:37] C:\ProgramData\Spyware Terminator
[02/11/2006|14:02] C:\ProgramData\Start Menu
[01/09/2008|21:44] C:\ProgramData\Symantec
[20/10/2008|09:47] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[29/11/2008|19:24] C:\ProgramData\TomTom
[20/12/2008|18:59] C:\ProgramData\WLInstaller
[26/02/2009|22:04] C:\ProgramData\wmp
[18/09/2008|07:45] C:\ProgramData\Xerox
[05/06/2008|17:41] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[06/03/2008|15:02] C:\Program Files\Acer Arcade Deluxe
[13/08/2008|09:09] C:\Program Files\Acer GameZone
[06/03/2008|15:06] C:\Program Files\Acer Inc
[10/08/2007|08:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[01/12/2008|13:28] C:\Program Files\Adobe
[27/02/2009|02:20] C:\Program Files\Ahead
[16/09/2008|15:59] C:\Program Files\Alice
[01/09/2008|22:45] C:\Program Files\Alwil Software
[25/01/2009|11:23] C:\Program Files\AntiTwin
[20/10/2008|09:48] C:\Program Files\Any Video Converter Professional
[06/03/2008|15:05] C:\Program Files\Apoint2K
[22/02/2009|19:09] C:\Program Files\Apple Software Update
[18/09/2008|11:24] C:\Program Files\ArcSoft
[08/09/2008|19:31] C:\Program Files\Avira
[09/09/2008|18:40] C:\Program Files\Axon Data
[22/02/2009|19:00] C:\Program Files\Bonjour
[18/09/2008|07:24] C:\Program Files\Canon
[15/10/2008|20:18] C:\Program Files\Clickster
[19/12/2008|23:52] C:\Program Files\Common Files
[10/08/2007|07:40] C:\Program Files\CONEXANT
[10/08/2007|08:43] C:\Program Files\CyberLink
[21/10/2008|02:17] C:\Program Files\Datel
[01/02/2009|01:29] C:\Program Files\eMule
[01/09/2008|19:20] C:\Program Files\ESET
[05/06/2008|15:41] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[15/02/2009|16:30] C:\Program Files\Google
[25/08/2008|12:11] C:\Program Files\Hewlett-Packard
[25/08/2008|12:11] C:\Program Files\hp deskjet 5550 series
[06/10/2008|18:37] C:\Program Files\Iminent
[01/10/2008|08:52] C:\Program Files\IncrediMail
[18/09/2008|11:24] C:\Program Files\InstallShield Installation Information
[06/03/2008|14:55] C:\Program Files\Intel
[09/11/2008|20:45] C:\Program Files\Internet Explorer
[22/02/2009|19:17] C:\Program Files\iPod
[22/02/2009|19:18] C:\Program Files\iTunes
[28/12/2008|20:31] C:\Program Files\Java
[06/03/2008|15:01] C:\Program Files\Launch Manager
[31/08/2008|21:19] C:\Program Files\Malwarebytes' Anti-Malware
[21/02/2009|12:12] C:\Program Files\Messenger Plus! Live
[20/12/2008|11:53] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[10/08/2007|08:58] C:\Program Files\Microsoft Office
[27/02/2009|09:07] C:\Program Files\Microsoft Silverlight
[05/06/2008|17:24] C:\Program Files\Microsoft SQL Server Compact Edition
[20/12/2008|00:03] C:\Program Files\Microsoft Sync Framework
[12/09/2008|07:57] C:\Program Files\Microsoft Works
[10/08/2007|08:55] C:\Program Files\Microsoft.NET
[09/11/2008|20:45] C:\Program Files\Movie Maker
[28/02/2009|20:44] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[06/06/2008|19:16] C:\Program Files\MSXML 4.0
[28/02/2009|21:02] C:\Program Files\Navilog1
[10/08/2007|08:18] C:\Program Files\NewTech Infosystems
[01/09/2008|21:43] C:\Program Files\Norton Internet Security
[22/10/2008|11:53] C:\Program Files\Power Audio Recorder Pro
[22/02/2009|19:09] C:\Program Files\QuickTime
[10/08/2007|07:31] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[30/08/2008|15:41] C:\Program Files\Samsung
[20/10/2008|11:12] C:\Program Files\Sony
[01/10/2008|09:16] C:\Program Files\Spyware Terminator
[08/06/2008|20:59] C:\Program Files\Sun
[01/09/2008|21:43] C:\Program Files\Symantec
[29/11/2008|19:26] C:\Program Files\TomTom DesktopSuite
[29/11/2008|19:20] C:\Program Files\TomTom HOME 2
[28/08/2008|22:12] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[26/02/2009|22:04] C:\Program Files\WebMediaPlayer
[09/11/2008|20:45] C:\Program Files\Windows Calendar
[09/11/2008|20:45] C:\Program Files\Windows Collaboration
[09/11/2008|20:44] C:\Program Files\Windows Defender
[09/11/2008|20:45] C:\Program Files\Windows Journal
[20/12/2008|11:52] C:\Program Files\Windows Live
[05/06/2008|17:23] C:\Program Files\Windows Live Favorites
[20/12/2008|11:52] C:\Program Files\Windows Live Toolbar
[09/11/2008|20:45] C:\Program Files\Windows Mail
[09/11/2008|20:45] C:\Program Files\Windows Media Player
[05/06/2008|15:41] C:\Program Files\Windows NT
[09/11/2008|20:45] C:\Program Files\Windows Photo Gallery
[09/11/2008|20:45] C:\Program Files\Windows Sidebar
[05/06/2008|15:45] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[01/12/2008|13:28] C:\Program Files\Common Files\Adobe
[25/06/2008|10:51] C:\Program Files\Common Files\Ahead
[22/02/2009|19:17] C:\Program Files\Common Files\Apple
[10/08/2007|08:55] C:\Program Files\Common Files\DESIGNER
[10/08/2007|08:30] C:\Program Files\Common Files\InstallShield
[08/06/2008|20:57] C:\Program Files\Common Files\Java
[10/08/2007|08:18] C:\Program Files\Common Files\LightScribe
[20/12/2008|11:52] C:\Program Files\Common Files\microsoft shared
[10/08/2007|08:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|08:19] C:\Program Files\Common Files\NewTech Infosystems
[10/08/2007|09:01] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[01/09/2008|21:43] C:\Program Files\Common Files\Symantec Shared
[09/11/2008|20:44] C:\Program Files\Common Files\System
[19/12/2008|23:52] C:\Program Files\Common Files\Windows Live
[01/10/2008|09:16] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 92 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@advertstream[2].txt
C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@advertising[1].txt
C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@bigpoint[2].txt
C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@fr.bigpoint[1].txt
C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@adopt.euroclick[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-28 21:24:57
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 25

--------------------\\ Recherche d'autres infections

C:\Program Files\WebMediaPlayer
C:\Program Files\WebMediaPlayer\resources
C:\Program Files\WebMediaPlayer\skins
C:\Program Files\WebMediaPlayer\sqlite3.dll
C:\Program Files\WebMediaPlayer\uninst.exe
C:\Program Files\WebMediaPlayer\updates
C:\Program Files\WebMediaPlayer\WebMediaPlayer.exe
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\WebMediaPlayer
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\WebMediaPlayer\Conditions g‚n‚rales.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\WebMediaPlayer\Confidentialit‚.url
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\WebMediaPlayer\D‚sinstaller.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\WebMediaPlayer\WebMediaPlayer.lnk
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\WebMediaPlayer\Website.url

C:\Users\k-rol\AppData\Local\ebfol.bat
C:\Users\k-rol\AppData\Local\ebfol.dat
C:\Users\k-rol\AppData\Local\ebfol_nav.dat
C:\Users\k-rol\AppData\Local\ebfol_navps.dat
C:\Users\k-rol\AppData\Local\oqrklno.bat
C:\Users\k-rol\AppData\Local\oqrklno.dat
C:\Users\k-rol\AppData\Local\oqrklno.exe
C:\Users\k-rol\AppData\Local\oqrklno_nav.dat
C:\Users\k-rol\AppData\Local\oqrklno_navps.dat
[b]==> EGDACCESS <==/b

--------------------\\ Cracks & Keygens ..

C:\Users\k-rol\Music\zik90\compas\metal sound - Lag‚ crack la.mp3


[F:2906][D:86]-> C:\Users\k-rol\AppData\Local\Temp
[F:294][D:1]-> C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies
[F:5328][D:22]-> C:\Users\k-rol\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:10][D:13]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 28/02/2009|21:08 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 28/02/2009|21:27 - Option : [1]

--------------------\\ Fin du rapport a 21:27:39
[ UAC => 1 ]

voici le rapport , bonn réception. merci

Clean Navipromo version 3.7.5 commencé le 28/02/2009 à 21:43:57,79

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 26.02.2009 à 18h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : k-rol ( Administrator )
BOOT : Normal boot

Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)

C:\ (Local Disk) - NTFS - Total:111 Go (Free:25 Go)
D:\ (Local Disk) - NTFS - Total:111 Go (Free:100 Go)
E:\ (CD or DVD)


Mode suppression automatique
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur


*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\Windows\System32" *


* Suppression dans "C:\Users\k-rol\AppData\Local\Microsoft" *


* Suppression dans "C:\Users\k-rol\AppData\Local\virtualstore\windows\system32" *


* Suppression dans "C:\Users\k-rol\AppData\Local" *



*** Suppression dossiers dans "C:\Windows" ***


*** Suppression dossiers dans "C:\Program Files" ***

...\WebMediaPlayer ...suppression...
...\WebMediaPlayer supprimé !


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

...\WebMediaPlayer ...suppression...
...\WebMediaPlayer supprimé !


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***


*** Suppression dossiers dans "C:\ProgramData" ***


*** Suppression dossiers dans c:\users\k-rol\appdata\roaming\micros~1\windows\startm~1\programs ***


*** Suppression dossiers dans "C:\Users\k-rol\AppData\Local\virtualstore\Program Files" ***


*** Suppression dossiers dans "C:\Users\k-rol\AppData\Local" ***


*** Suppression dossiers dans "C:\Users\k-rol\AppData\Roaming" ***



*** Suppression fichiers ***

c:\users\public\desktop\WebMediaPlayer.lnk supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\k-rol\AppData\Local\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\Windows\system32" *



* Dans "C:\Users\k-rol\AppData\Local\Microsoft" *



* Dans "C:\Users\k-rol\AppData\Local\virtualstore\windows\system32" *



* Dans "C:\Users\k-rol\AppData\Local" *


ebfol.dat trouvé !
Copie ebfol.dat réalisée avec succès !
ebfol.dat supprimé !

ebfol_nav.dat trouvé !
Copie ebfol_nav.dat réalisée avec succès !
ebfol_nav.dat supprimé !

ebfol_navps.dat trouvé !
Copie ebfol_navps.dat réalisée avec succès !
ebfol_navps.dat supprimé !

ebfol.bat trouvé !
Copie ebfol.bat réalisée avec succès !
ebfol.bat supprimé !

oqrklno.exe trouvé !
Copie oqrklno.exe réalisée avec succès !
oqrklno.exe supprimé !

oqrklno.dat trouvé !
Copie oqrklno.dat réalisée avec succès !
oqrklno.dat supprimé !

oqrklno_nav.dat trouvé !
Copie oqrklno_nav.dat réalisée avec succès !
oqrklno_nav.dat supprimé !

oqrklno_navps.dat trouvé !
Copie oqrklno_navps.dat réalisée avec succès !
oqrklno_navps.dat supprimé !

oqrklno.bat trouvé !
Copie oqrklno.bat réalisée avec succès !
oqrklno.bat supprimé !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !


*** Recherche autres dossiers et fichiers connus ***



*** Nettoyage terminé le 28/02/2009 à 21:48:21,16 ***

voici le rapport



--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
BIOS : Default System BIOS
USER : k-rol ( Administrator )
BOOT : Normal boot
Antivirus : Norton Internet Security 2007 (Not Activated)
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total:111 Go (Free:26 Go)
D:\ (Local Disk) - NTFS - Total:111 Go (Free:100 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 28/02/2009|22:03 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@advertstream[2].txt
Supprime! - C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@advertising[1].txt
Supprime! - C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@bigpoint[2].txt
Supprime! - C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@fr.bigpoint[1].txt
Supprime! - C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies\k-rol@adopt.euroclick[2].txt
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[01/10/2008|09:16] C:\Users\k-rol\AppData\Local\Acer Arcade Deluxe
[17/09/2008|13:14] C:\Users\k-rol\AppData\Local\acer eNM
[18/09/2008|20:45] C:\Users\k-rol\AppData\Local\Adobe
[23/07/2008|20:37] C:\Users\k-rol\AppData\Local\Apple
[24/07/2008|07:48] C:\Users\k-rol\AppData\Local\Apple Computer
[05/06/2008|15:45] C:\Users\k-rol\AppData\Local\Application Data
[01/07/2008|19:53] C:\Users\k-rol\AppData\Local\CyberLink
[10/12/2008|17:40] C:\Users\k-rol\AppData\Local\d3d9caps.dat
[24/02/2009|18:27] C:\Users\k-rol\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[30/09/2008|17:45] C:\Users\k-rol\AppData\Local\DV Wizard
[05/06/2008|15:47] C:\Users\k-rol\AppData\Local\GDIPFONTCACHEV1.DAT
[16/02/2009|01:05] C:\Users\k-rol\AppData\Local\Google
[05/06/2008|15:45] C:\Users\k-rol\AppData\Local\Historique
[01/07/2008|19:53] C:\Users\k-rol\AppData\Local\HomeMedia
[28/02/2009|21:58] C:\Users\k-rol\AppData\Local\IconCache.db
[01/10/2008|08:55] C:\Users\k-rol\AppData\Local\IM
[06/10/2008|16:18] C:\Users\k-rol\AppData\Local\Iminent
[28/02/2009|21:48] C:\Users\k-rol\AppData\Local\Microsoft
[07/06/2008|14:28] C:\Users\k-rol\AppData\Local\Microsoft Games
[10/02/2009|22:58] C:\Users\k-rol\AppData\Local\Microsoft Help
[05/06/2008|18:11] C:\Users\k-rol\AppData\Local\Mozilla
[01/10/2008|09:16] C:\Users\k-rol\AppData\Local\PlayMovie
[05/06/2008|16:31] C:\Users\k-rol\AppData\Local\PowerCinema
[28/08/2008|22:07] C:\Users\k-rol\AppData\Local\Shareaza
[28/02/2009|22:03] C:\Users\k-rol\AppData\Local\Temp
[05/06/2008|15:45] C:\Users\k-rol\AppData\Local\Temporary Internet Files
[29/11/2008|19:21] C:\Users\k-rol\AppData\Local\TomTom
[20/07/2008|12:34] C:\Users\k-rol\AppData\Local\VirtualStore
[29/09/2008|11:12] C:\Users\k-rol\AppData\Local\Windows Live Writer

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[05/06/2008 17:23][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[27/02/2009 20:00][--a------] C:\Windows\tasks\Norton Internet Security - Analyse systŠme complŠte - k-rol.job
[28/02/2009 21:59][--ah-----] C:\Windows\tasks\SA.DAT
[28/02/2009 21:58][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[10/08/2007|08:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[22/02/2009|19:18] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[01/12/2008|13:28] C:\ProgramData\Adobe
[23/07/2008|20:35] C:\ProgramData\Apple
[23/07/2008|20:40] C:\ProgramData\Apple Computer
[02/11/2006|14:02] C:\ProgramData\Application Data
[08/09/2008|19:31] C:\ProgramData\Avira
[05/06/2008|15:41] C:\ProgramData\Bureau
[16/08/2008|17:28] C:\ProgramData\CyberLink
[02/11/2006|14:02] C:\ProgramData\Desktop
[02/11/2006|14:02] C:\ProgramData\Documents
[25/01/2009|11:24] C:\ProgramData\eMule
[01/09/2008|18:47] C:\ProgramData\ESET
[05/06/2008|15:41] C:\ProgramData\Favoris
[02/11/2006|14:02] C:\ProgramData\Favorites
[05/06/2008|18:52] C:\ProgramData\Forge of Games
[15/02/2009|16:29] C:\ProgramData\Google
[28/02/2009|20:08] C:\ProgramData\Google Updater
[01/10/2008|08:53] C:\ProgramData\IM
[01/10/2008|08:51] C:\ProgramData\IncrediMail
[01/09/2008|18:37] C:\ProgramData\LUUnInstall.LiveUpdate
[31/08/2008|20:28] C:\ProgramData\Malwarebytes
[05/06/2008|15:41] C:\ProgramData\Menu D‚marrer
[21/02/2009|17:17] C:\ProgramData\Messenger Plus!
[20/12/2008|00:03] C:\ProgramData\Microsoft
[10/02/2009|22:58] C:\ProgramData\Microsoft Help
[05/06/2008|15:41] C:\ProgramData\ModŠles
[20/10/2008|11:12] C:\ProgramData\Sony Corporation
[28/11/2008|19:37] C:\ProgramData\Spyware Terminator
[02/11/2006|14:02] C:\ProgramData\Start Menu
[01/09/2008|21:44] C:\ProgramData\Symantec
[20/10/2008|09:47] C:\ProgramData\TEMP
[02/11/2006|14:02] C:\ProgramData\Templates
[29/11/2008|19:24] C:\ProgramData\TomTom
[20/12/2008|18:59] C:\ProgramData\WLInstaller
[26/02/2009|22:04] C:\ProgramData\wmp
[18/09/2008|07:45] C:\ProgramData\Xerox
[05/06/2008|17:41] C:\ProgramData\Yahoo! Companion

--------------------\\ Listing des dossiers dans C:\Program Files

[06/03/2008|15:02] C:\Program Files\Acer Arcade Deluxe
[13/08/2008|09:09] C:\Program Files\Acer GameZone
[06/03/2008|15:06] C:\Program Files\Acer Inc
[10/08/2007|08:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[01/12/2008|13:28] C:\Program Files\Adobe
[27/02/2009|02:20] C:\Program Files\Ahead
[16/09/2008|15:59] C:\Program Files\Alice
[01/09/2008|22:45] C:\Program Files\Alwil Software
[25/01/2009|11:23] C:\Program Files\AntiTwin
[20/10/2008|09:48] C:\Program Files\Any Video Converter Professional
[06/03/2008|15:05] C:\Program Files\Apoint2K
[22/02/2009|19:09] C:\Program Files\Apple Software Update
[18/09/2008|11:24] C:\Program Files\ArcSoft
[08/09/2008|19:31] C:\Program Files\Avira
[09/09/2008|18:40] C:\Program Files\Axon Data
[22/02/2009|19:00] C:\Program Files\Bonjour
[18/09/2008|07:24] C:\Program Files\Canon
[15/10/2008|20:18] C:\Program Files\Clickster
[19/12/2008|23:52] C:\Program Files\Common Files
[10/08/2007|07:40] C:\Program Files\CONEXANT
[10/08/2007|08:43] C:\Program Files\CyberLink
[21/10/2008|02:17] C:\Program Files\Datel
[01/02/2009|01:29] C:\Program Files\eMule
[01/09/2008|19:20] C:\Program Files\ESET
[05/06/2008|15:41] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[15/02/2009|16:30] C:\Program Files\Google
[25/08/2008|12:11] C:\Program Files\Hewlett-Packard
[25/08/2008|12:11] C:\Program Files\hp deskjet 5550 series
[06/10/2008|18:37] C:\Program Files\Iminent
[01/10/2008|08:52] C:\Program Files\IncrediMail
[18/09/2008|11:24] C:\Program Files\InstallShield Installation Information
[06/03/2008|14:55] C:\Program Files\Intel
[09/11/2008|20:45] C:\Program Files\Internet Explorer
[22/02/2009|19:17] C:\Program Files\iPod
[22/02/2009|19:18] C:\Program Files\iTunes
[28/12/2008|20:31] C:\Program Files\Java
[06/03/2008|15:01] C:\Program Files\Launch Manager
[31/08/2008|21:19] C:\Program Files\Malwarebytes' Anti-Malware
[21/02/2009|12:12] C:\Program Files\Messenger Plus! Live
[20/12/2008|11:53] C:\Program Files\Microsoft
[02/11/2006|13:37] C:\Program Files\Microsoft Games
[10/08/2007|08:58] C:\Program Files\Microsoft Office
[27/02/2009|09:07] C:\Program Files\Microsoft Silverlight
[05/06/2008|17:24] C:\Program Files\Microsoft SQL Server Compact Edition
[20/12/2008|00:03] C:\Program Files\Microsoft Sync Framework
[12/09/2008|07:57] C:\Program Files\Microsoft Works
[10/08/2007|08:55] C:\Program Files\Microsoft.NET
[09/11/2008|20:45] C:\Program Files\Movie Maker
[28/02/2009|20:44] C:\Program Files\Mozilla Firefox
[02/11/2006|13:37] C:\Program Files\MSBuild
[06/06/2008|19:16] C:\Program Files\MSXML 4.0
[28/02/2009|21:57] C:\Program Files\Navilog1
[10/08/2007|08:18] C:\Program Files\NewTech Infosystems
[01/09/2008|21:43] C:\Program Files\Norton Internet Security
[22/10/2008|11:53] C:\Program Files\Power Audio Recorder Pro
[22/02/2009|19:09] C:\Program Files\QuickTime
[10/08/2007|07:31] C:\Program Files\Realtek
[02/11/2006|13:37] C:\Program Files\Reference Assemblies
[30/08/2008|15:41] C:\Program Files\Samsung
[20/10/2008|11:12] C:\Program Files\Sony
[01/10/2008|09:16] C:\Program Files\Spyware Terminator
[08/06/2008|20:59] C:\Program Files\Sun
[01/09/2008|21:43] C:\Program Files\Symantec
[29/11/2008|19:26] C:\Program Files\TomTom DesktopSuite
[29/11/2008|19:20] C:\Program Files\TomTom HOME 2
[28/08/2008|22:12] C:\Program Files\Trend Micro
[02/11/2006|14:01] C:\Program Files\Uninstall Information
[09/11/2008|20:45] C:\Program Files\Windows Calendar
[09/11/2008|20:45] C:\Program Files\Windows Collaboration
[09/11/2008|20:44] C:\Program Files\Windows Defender
[09/11/2008|20:45] C:\Program Files\Windows Journal
[20/12/2008|11:52] C:\Program Files\Windows Live
[05/06/2008|17:23] C:\Program Files\Windows Live Favorites
[20/12/2008|11:52] C:\Program Files\Windows Live Toolbar
[09/11/2008|20:45] C:\Program Files\Windows Mail
[09/11/2008|20:45] C:\Program Files\Windows Media Player
[05/06/2008|15:41] C:\Program Files\Windows NT
[09/11/2008|20:45] C:\Program Files\Windows Photo Gallery
[09/11/2008|20:45] C:\Program Files\Windows Sidebar
[05/06/2008|15:45] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[01/12/2008|13:28] C:\Program Files\Common Files\Adobe
[25/06/2008|10:51] C:\Program Files\Common Files\Ahead
[22/02/2009|19:17] C:\Program Files\Common Files\Apple
[10/08/2007|08:55] C:\Program Files\Common Files\DESIGNER
[10/08/2007|08:30] C:\Program Files\Common Files\InstallShield
[08/06/2008|20:57] C:\Program Files\Common Files\Java
[10/08/2007|08:18] C:\Program Files\Common Files\LightScribe
[20/12/2008|11:52] C:\Program Files\Common Files\microsoft shared
[10/08/2007|08:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|08:19] C:\Program Files\Common Files\NewTech Infosystems
[10/08/2007|09:01] C:\Program Files\Common Files\Oberon Media
[02/11/2006|12:18] C:\Program Files\Common Files\Services
[02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
[01/09/2008|21:43] C:\Program Files\Common Files\Symantec Shared
[09/11/2008|20:44] C:\Program Files\Common Files\System
[19/12/2008|23:52] C:\Program Files\Common Files\Windows Live
[01/10/2008|09:16] C:\Program Files\Common Files\WindowsLiveInstaller

--------------------\\ Process

( 92 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-28 22:04:10
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 25

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\k-rol\Music\zik90\compas\metal sound - Lag‚ crack la.mp3


[F:33][D:8]-> C:\Users\k-rol\AppData\Local\Temp
[F:298][D:1]-> C:\Users\k-rol\AppData\Roaming\MICROS~1\Windows\Cookies
[F:5331][D:22]-> C:\Users\k-rol\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:8][D:13]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 28/02/2009|21:08 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 28/02/2009|21:27 - Option : [1]
3 - "C:\Lop SD\LopR_3.txt" - 28/02/2009|22:06 - Option : [2]

--------------------\\ Fin du rapport a 22:06:45
[ UAC => 1 ]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:18:19, on 28/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Windows\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\k-rol\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Windows\system32\igfxext.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Windows\system32\igfxsrvc.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini20.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - Trusted Zone: https://download.cnet.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

J'ai suivie scrupuleusement chaque étape. Je vous remercie grandement, et suis encore + admirative, vous êtes de loin les meilleurs.
1000 merci.
Biz et bonne continuation.