mon pc ram,lag

Question

Bonjour,

Je vous poste mon rapport hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:02:45, on 01/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32
vsvc32.exe
C:\PROGRA~1\GAMING~1\MouseElf.EXE
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Microsoft LifeCam\LifeTray.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Steam\Steam.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\GAMING~1\MouseElf.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de notification Live Search.lnk = D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://dev.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

House · Answer

aider moi s.v.p car j'en et marre

Nic00 · Answer

Salut,

Clique sur Démarrer, puis Exécuter
Tape : Services.msc et appuie sur Entrée
Choisis le mode "Etendu" (onglets inférieurs)
Grâce à la barre de défilement (à droite) recherche le service suivant:

Boonty Games

Quand le service est trouvé, pointe dessus, double-clique.
Dans la fenêtre suivante qui apparait, sous l'onglet Général clique sur le bouton Arrêter,
puis déroule le Type de Démarrage pour le modifier en Désactivé
Clique sur Appliquer puis OK.

Ensuite supprime le dossier "boonty shared" qui se trouve ici :
C:\Program Files\Fichiers communs\


Relance ensuite Hijackthis en faisant Do a system scan only et coche ces lignes:

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install    
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot    
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')    
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')    
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')    
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe  


puis clique sur Fix checked

Tu peux fermer Hijackthis.


Ensuite:

&#9654; Télécharge random's system information tool (RSIT) 
http://images.malwareremoval.com/random/RSIT.exe
&#9654;Enregistre le sur ton Bureau
&#9654; Double clique sur RSIT.exe pour l’exécuter. 
&#9654; Clique sur "continue" à l'écran Disclaimer. 
&#9654; Une fois le scan terminé , 2 rapports vont apparaitre. 
&#9654;Poste les dans ton prochain message 
&#9654; Note : les rapports se trouvent aussi ici : ( log.txt & info.txt )

House · Answer

Voici mes deux rapport RSIT:

1r Rapport:

Logfile of random's system information tool 1.06 (written by random/random)
Run by DAVID at 2009-06-02 13:49:08
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 11 GB (36%) free of 31 GB
Total RAM: 2047 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:49:13, on 02/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\GAMING~1\MouseElf.EXE
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\DAVID\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\DAVID.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\GAMING~1\MouseElf.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - Startup: Outil de notification Live Search.lnk = D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://dev.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Nic00 · Answer

C'est tout simplement bourré d'infections.....

&#9654; /!\ Désactive ton antivirus et tout autre type de protection !  /!\
&#9654; /!\ Déconnecte toi et ferme toutes les applications en cours (y compris Internet) !  /!\
&#9654; Si tu es sous Vista désactive l'UAC le temps de la désinfection :
https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html

&#9654;Télécharge ComboFix de sUBs : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

&#9654;Sauvegarde le sur ton bureau et pas ailleurs ! 

&#9654; Double-clique sur ComboFix.exe Il va te poser une question, suis les invites puis attends que Combofix ait terminé, il est possible que ton PC reboot, c’est normal, un rapport sera créé. 

&#9654;Poste le rapport qui se trouve ici: C:\Combofix.txt 

&#9654; clique dessus pour l'ouvrir puis clique droit >>copier
&#9654;Et dans ta prochaine réponse : clique droit >> coller

House · Answer

voici mon rapport combofix:

ComboFix 09-05-31.06 - DAVID 02/06/2009 20:18.1 - NTFSx86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.2047.1585 [GMT 2:00]
Lancé depuis: d:\documents and settings\DAVID\Bureau\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}
FW: Pare-feu BitDefender  *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Service_Boonty Games


(((((((((((((((((((((((((((((   Fichiers créés du 2009-05-02 au 2009-06-02  ))))))))))))))))))))))))))))))))))))
.

2009-06-02 18:15 . 2009-06-02 18:15	--------	d-sh--w-	d:\documents and settings\NetworkService\IETldCache
2009-06-02 11:49 . 2009-06-02 11:49	--------	d-----w-	C:sit
2009-06-01 16:00 . 2009-06-01 16:00	--------	d-----w-	c:\program files\Trend Micro
2009-05-30 17:32 . 2009-05-30 17:32	3371383	----a-w-	d:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-05-29 14:46 . 2009-05-29 14:46	--------	d-----w-	d:\documents and settings\DAVID\Local Settings\Application Data\Scansoft
2009-05-29 14:38 . 2009-05-29 14:39	--------	d-----w-	d:\documents and settings\DAVID\Local Settings\Application Data\Canon Easy-PhotoPrint EX
2009-05-29 14:24 . 2009-05-29 14:31	--------	d-----w-	d:\documents and settings\DAVID\Application Data\Canon
2009-05-29 14:23 . 2009-05-29 14:23	--------	d-----w-	d:\documents and settings\All Users\Application Data\CanonIJPLM
2009-05-29 14:15 . 2009-05-29 14:15	--------	d-----w-	d:\documents and settings\All Users\Application Data\InstallShield
2009-05-29 14:15 . 2009-05-29 14:15	--------	d-----w-	d:\documents and settings\DAVID\Application Data\ScanSoft
2009-05-29 14:15 . 2009-05-29 14:15	--------	d-----w-	d:\documents and settings\All Users\Application Data\ScanSoft
2009-05-29 14:15 . 2009-05-29 14:15	--------	d-----w-	c:\program files\Fichiers communs\ScanSoft Shared
2009-05-29 14:14 . 2009-05-29 14:14	--------	d-----w-	c:\program files\ScanSoft
2009-05-29 14:01 . 2009-05-29 14:01	--------	d-----w-	c:\program files\Fichiers communs\CANON
2009-05-29 13:55 . 2009-05-29 13:55	--------	d--h--w-	d:\documents and settings\All Users\Application Data\CanonBJ
2009-05-29 13:55 . 2007-03-18 20:00	215040	----a-w-	c:\windows\system32\CNMLM8S.DLL
2009-05-29 13:55 . 2009-05-29 13:55	--------	d--h--w-	c:\windows\system32\CanonIJ Uninstaller Information
2009-05-29 13:54 . 2007-03-15 05:12	188416	----a-w-	c:\windows\system32\CNC210O.DLL
2009-05-29 13:54 . 2007-03-23 07:29	98304	----a-w-	c:\windows\system32\CNC210I.DLL
2009-05-29 13:54 . 2007-03-19 01:16	200704	----a-w-	c:\windows\system32\CNC210L.DLL
2009-05-29 13:54 . 2007-03-23 07:30	1400832	----a-w-	c:\windows\system32\CNC210C.DLL
2009-05-29 13:54 . 2009-05-29 13:54	--------	d--h--w-	c:\program files\CanonBJ
2009-05-29 13:52 . 2009-05-29 14:23	--------	d-----w-	c:\program files\Canon
2009-05-28 09:34 . 2009-05-28 09:34	--------	d-----w-	c:\program files\PhotoFiltre
2009-05-22 14:03 . 2009-05-22 14:03	--------	d-----w-	c:\program files\Teamspeak2_RC2
2009-05-21 11:38 . 2009-05-21 11:38	--------	d-sh--w-	d:\documents and settings\DAVID\IECompatCache
2009-05-20 11:32 . 2009-05-20 11:32	--------	d-sh--w-	d:\documents and settings\DAVID\PrivacIE
2009-05-20 09:09 . 2009-05-20 09:09	--------	d-sh--w-	d:\documents and settings\DAVID\IETldCache
2009-05-20 09:07 . 2009-05-20 09:07	--------	d-sh--w-	d:\documents and settings\LocalService\IETldCache
2009-05-20 09:06 . 2009-05-31 11:23	--------	d-----w-	c:\windows\ie8updates
2009-05-20 09:05 . 2009-04-25 05:30	102400	------w-	c:\windows\system32\dllcache\iecompat.dll
2009-05-20 09:04 . 2009-05-20 09:05	--------	dc-h--w-	c:\windows\ie8
2009-05-15 15:03 . 2009-05-26 11:19	19096	----a-w-	c:\windows\system32\drivers\mbam.sys
2009-05-15 15:03 . 2009-05-26 11:20	40160	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-15 15:03 . 2009-05-30 17:32	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2009-05-04 17:03 . 2009-05-04 17:03	--------	d-----w-	d:\documents and settings\DAVID\Application Data\dvdcss

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-02 18:24 . 2009-04-26 08:37	--------	d-----w-	c:\program files\Steam
2009-06-02 18:24 . 2009-04-04 15:33	--------	d-----w-	d:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-06-02 18:22 . 2009-04-04 15:33	614432	--sha-w-	c:\windows\system32\drivers\fidbox2.dat
2009-06-02 18:22 . 2009-04-04 15:33	4228	--sha-w-	c:\windows\system32\drivers\fidbox2.idx
2009-06-02 18:22 . 2009-04-04 15:33	2702368	--sha-w-	c:\windows\system32\drivers\fidbox.dat
2009-06-02 18:22 . 2009-04-04 15:33	23240	--sha-w-	c:\windows\system32\drivers\fidbox.idx
2009-06-02 18:21 . 2006-08-23 19:30	12	----a-w-	c:\windows\bthservsdp.dat
2009-05-31 17:10 . 2009-01-01 19:14	--------	d-----w-	d:\documents and settings\DAVID\Application Data\FileZilla
2009-05-31 11:23 . 2009-04-05 17:56	--------	d-----w-	c:\program files\Arovax AntiSpyware
2009-05-31 10:17 . 2009-03-08 10:15	1	----a-w-	d:\documents and settings\DAVID\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-05-29 14:15 . 2006-07-08 16:30	--------	d-----w-	c:\program files\Fichiers communs\InstallShield
2009-05-29 13:49 . 2006-07-08 16:30	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2009-05-22 12:10 . 2008-02-27 15:28	--------	d-----w-	d:\documents and settings\DAVID\Application Data\uTorrent
2009-05-20 21:24 . 2009-04-04 15:34	94643	----a-w-	c:\windows\system32\drivers\klick.dat
2009-05-20 21:24 . 2009-04-04 15:34	105395	----a-w-	c:\windows\system32\drivers\klin.dat
2009-05-13 19:16 . 2009-03-29 20:49	--------	d-----w-	c:\program files\CCleaner
2009-05-10 17:57 . 2008-05-17 09:53	--------	d-----w-	c:\program files\Java
2009-05-07 14:44 . 2008-12-22 19:23	--------	d-----w-	d:\documents and settings\DAVID\Application Data	eamspeak2
2009-04-27 12:06 . 2009-04-27 11:51	--------	d-----w-	d:\documents and settings\DAVID\Application Data\Audacity
2009-04-26 18:26 . 2009-04-26 18:26	--------	d-----w-	c:\program files\AGEIA Technologies
2009-04-26 18:25 . 2009-04-26 18:25	--------	d-----w-	c:\program files\Fichiers communs\Wise Installation Wizard
2009-04-26 17:43 . 2006-08-23 14:05	51744	----a-w-	d:\documents and settings\DAVID\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-26 16:40 . 2009-04-26 16:40	--------	d-----w-	d:\documents and settings\DAVID\Application Data\AccurateRip
2009-04-26 16:40 . 2009-04-26 16:40	13783	----a-w-	c:\windows\system32\SpoonUninstall-dBpoweramp Music Converter.dat
2009-04-26 16:40 . 2009-04-26 16:40	--------	d-----w-	c:\program files\Illustrate
2009-04-26 16:40 . 2009-04-26 16:40	5052280	----a-w-	c:\windows\system32\SpoonUninstall.exe
2009-04-25 12:38 . 2009-04-25 12:38	--------	d-----w-	c:\program files\JRE
2009-04-25 12:38 . 2009-03-08 10:09	--------	d-----w-	c:\program files\OpenOffice.org 3
2009-04-22 14:31 . 2009-02-19 16:55	--------	d-----w-	d:\documents and settings\DAVID\Application Data\gtk-2.0
2009-04-17 09:07 . 2009-04-17 09:05	--------	d-----w-	d:\documents and settings\DAVID\Application Data\vlc
2009-04-16 11:34 . 2004-08-16 15:41	85984	----a-w-	c:\windows\system32\perfc00C.dat
2009-04-16 11:34 . 2004-08-16 15:41	512624	----a-w-	c:\windows\system32\perfh00C.dat
2009-04-16 11:34 . 2009-04-01 10:56	152576	----a-w-	d:\documents and settings\DAVID\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-04-15 10:20 . 2009-04-15 10:20	--------	d-----w-	c:\program files\MSBuild
2009-04-15 10:20 . 2009-04-15 10:20	--------	d-----w-	c:\program files\Reference Assemblies
2009-04-12 14:51 . 2009-04-12 14:50	86016	----a-w-	c:\windows\system32\OpenAL32.dll
2009-04-12 14:51 . 2009-04-12 14:50	262144	----a-w-	c:\windows\system32\wrap_oal.dll
2009-04-12 14:47 . 2006-07-08 16:30	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-04-12 14:23 . 2009-04-12 14:23	--------	d-----w-	c:\program files\PC Wizard 2008
2009-04-10 20:58 . 2009-04-10 20:58	--------	d-----w-	c:\program files\uTorrent
2009-04-10 20:56 . 2009-02-04 17:35	--------	d-----w-	c:\program files\Microsoft ActiveSync
2009-04-10 20:55 . 2009-03-02 10:54	--------	d-----w-	c:\program files\Free Audio Pack
2009-04-06 10:35 . 2006-07-08 16:30	--------	d-----w-	c:\program files\Fichiers communs\AOL
2009-04-04 15:50 . 2008-01-29 15:29	33808	----a-w-	c:\windows\system32\drivers\klbg.sys
2009-04-04 15:50 . 2009-04-04 15:50	206088	----a-w-	d:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files	emporaryFolder\AutoPatches\kav8exec\8.0.0.506\avp.exe
2009-04-04 15:50 . 2009-04-04 15:50	33808	----a-w-	d:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files	emporaryFolder\AutoPatches\kav8exec\8.0.0.506\klbg.sys
2009-04-04 15:50 . 2009-04-04 15:50	226832	----a-w-	d:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files	emporaryFolder\AutoPatches\kav8exec\8.0.0.506\XP\klif.sys
2009-04-04 15:33 . 2009-04-04 15:33	--------	d-----w-	c:\program files\Kaspersky Lab
2009-04-04 15:25 . 2007-09-29 14:37	--------	d-----w-	d:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-03-27 06:14 . 2006-06-16 07:38	453152	----a-w-	c:\windows\system32\NVUNINST.EXE
2009-03-09 10:44 . 2009-03-09 10:44	152576	----a-w-	d:\documents and settings\DAVID\Application Data\Sun\Java\jre1.6.0_11\lzma.dll
2009-03-09 03:19 . 2009-03-09 10:45	410984	----a-w-	c:\windows\system32\deploytk.dll
2009-03-08 02:34 . 2004-08-16 15:41	914944	----a-w-	c:\windows\system32\wininet.dll
2009-03-08 02:34 . 2004-08-16 15:40	43008	----a-w-	c:\windows\system32\licmgr10.dll
2009-03-08 02:33 . 2004-08-16 15:40	18944	----a-w-	c:\windows\system32\corpol.dll
2009-03-08 02:33 . 2004-08-16 15:41	420352	----a-w-	c:\windows\system32\vbscript.dll
2009-03-08 02:32 . 2004-08-16 15:39	72704	----a-w-	c:\windows\system32\admparse.dll
2009-03-08 02:32 . 2004-08-16 15:40	71680	----a-w-	c:\windows\system32\iesetup.dll
2009-03-08 02:31 . 2004-08-16 15:40	34816	----a-w-	c:\windows\system32\imgutil.dll
2009-03-08 02:31 . 2004-08-16 15:40	48128	----a-w-	c:\windows\system32\mshtmler.dll
2009-03-08 02:31 . 2004-08-16 15:40	45568	----a-w-	c:\windows\system32\mshta.exe
2009-03-08 02:22 . 2004-08-16 15:40	156160	----a-w-	c:\windows\system32\msls31.dll
2009-03-06 14:20 . 2004-08-16 15:40	286720	----a-w-	c:\windows\system32\pdh.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\steam\steam.exe" [2009-05-18 1217784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-27 13684736]
"mouseElf"="c:\progra~1\GAMING~1\MouseElf.EXE" [2006-02-27 471166]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-04-04 206088]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-27 86016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]

d:\documents and settings\DAVID\Menu D‚marrer\Programmes\D‚marrage\
Outil de notification Live Search.lnk - d:\documents and settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2009-3-1 142336]

[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
path=d:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=d:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\D:^Documents and Settings^DAVID^Menu Démarrer^Programmes^Démarrage^Outil de notification Live Search.lnk]
path=d:\documents and settings\DAVID\Menu Démarrer\Programmes\Démarrage\Outil de notification Live Search.lnk
backup=c:\windows\pss\Outil de notification Live Search.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-]
"InCD"=c:\program files\Nero\Nero 7\InCD\InCD.exe
"NeroFilterCheck"=c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe
"nwiz"=nwiz.exe /install
"RTHDCPL"=RTHDCPL.EXE
"VX1000"=c:\windows\vVX1000.exe
"Alcmtr"=ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\Program Files\Steam\steam.exe"=
"c:\Program Files\Ratajik Software\StationRipper\StationRipperConsole.exe"=
"c:\WINDOWS\system32\dpvsetup.exe"=
"c:\Program Files\Messenger\msmsgs.exe"=
"c:\Program Files\AOL 9.0\aol.exe"=
"c:\Program Files\AOL 9.0\waol.exe"=
"c:\WINDOWS\system32\sessmgr.exe"=
"c:\WINDOWS\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\Steam\steamapps\ronii9\counter-strike\hl.exe"=
"c:\Program Files\Steam\steamapps\ronii9\counter-strike source\hl2.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hposid01.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"=
"c:\Program Files\Microsoft LifeCam\LifeCam.exe"=
"c:\Program Files\Microsoft LifeCam\LifeExp.exe"=
"c:\APPS\skype\phone\Skype.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"=
"c:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"=
"c:\Program Files\uTorrent\uTorrent.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 17:29 33808]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [29/01/2009 14:21 55136]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
R3 genmcmnUSB;USB Scroll Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [29/04/2008 20:27 7808]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13/03/2008 18:02 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 17:06 24592]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys --> c:\windows\system32\DRIVERS\aswFsBlk.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32undll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-06-02 c:\windows\Tasks\Configurer mon PC.job
- c:\apps\SMP\PCSETUP.EXE [2005-11-17 08:03]
.
- - - - ORPHELINS SUPPRIMES - - - -

SafeBoot-procexp90.Sys


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
FF - ProfilePath - d:\documents and settings\DAVID\Application Data\Mozilla\Firefox\Profiles\wup0okhd.default\
FF - component: c:\program files\Mozilla Firefox\extensions\{34ea1c70-42cc-42c5-aa29-ec58b95a343e}\components\FFAlert.dll
FF - plugin: c:\program files\Microsoft\Office Live
pOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
pbittorrent.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology
pViewpoint.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-02 20:24
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(2904)
c:\program files\ScanSoft\OmniPageSE4\OpHookSE4.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Fichiers communs\AOL\ACS\AOLacsd.exe
c:\apps\Powercinema\Kernel\TV\CLCapSvc.exe
c:\apps\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
c:\apps\HIDSERVICE\HidService.exe
c:\program files\Canon\IJPLM\ijplmsvc.exe
c:\program files\Nero\Nero 7\InCD\InCDsrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\windows\system32
vsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\apps\Powercinema\Kernel\TV\CLSched.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32undll32.exe
d:\documents and settings\DAVID\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2009-06-02 20:28 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-06-02 18:28

Avant-CF: 11 636 113 408 octets libres
Après-CF: 11 516 608 512 octets libres

268	--- E O F ---	2009-05-27 09:03

Nic00 · Answer

Poste un nouveau RSIT stp.

House · Answer

voila mon rapport RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by DAVID at 2009-06-02 21:19:29
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 11 GB (36%) free of 31 GB
Total RAM: 2047 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:19:32, on 02/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\PROGRA~1\GAMING~1\MouseElf.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Microsoft LifeCam\LifeTray.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Steam\Steam.exe
D:\Documents and Settings\DAVID\Bureau\RSIT.exe
C:\Program Files	rend micro\DAVID.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\GAMING~1\MouseElf.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - Startup: Outil de notification Live Search.lnk = D:\Documents and Settings\DAVID\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://dev.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

House · Answer

Répond moi au plus stp pour me dire qu'est ce qui faut que je face encore.En tout cas je te remercie pour tout.

House · Answer

aider moi svp jen ai vraiment besoin

House · Answer

aider moi svp

Nic00 · Answer

Désolé je n'ai pas pu te répondre plus tôt.

Je regarde ça et je te réponds le plus rapidement possible.

Nic00 · Answer

C'est déjà plus propre mais ce n'est pas fini.

Il semblerait que tu ait plusieurs antivirus ! ==> Risque de conflits. Garde en un seul (Kaspersky sans aucun doute)

Tu as également plusieurs anti-spywares : ça ne sert à rien, gardes un seul.

Mets à jour JAVA:

https://www.java.com/fr/download/



Fais cette vérification vant de passer à l'étape suivante:

Va dans ajout/suppression de programmes puis cherche si tu as des programmes comme : 

" CID Help", "Circle Developement" , "Adverts"( ou "CiD-quelquechose")

--->s’ils s'y trouvent, supprime les.

Ensuite:

&#9654;Télécharges Lop S&D :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

&#9654;Installe-le en double-cliquant dessus
 /!\   si tu as Vista, désactive l’UAC le temps de la désinfection :	Panneau de configuration>comptes utilisateurs>activer/désactiver le contrôle  des comptes utilisateurs>décoche la cas puis fais OK 
/!\   si tu as TeaTimer (le résident de Spybot), désactive-le sinon il va gêner la désinfection en empêchant la modification des BHO et la réparation du registre :
*Démarre Spybot, clique sur Mode, coche Mode avancé 
*A gauche, clique sur Outils, puis sur Résident 
*Décoche la case devant Résident "TeaTimer" puis quitte Spybot :
&#9654; Une fois la désinfection terminée ( et pas avant ), réactiver le " TeaTimer " . 
&#9654; Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche). 
 &#9654;Une fois le scan terminé, enregistrez le rapport généré, poste-le.
&#9654; Le rapport se trouve aussi sous la racine du disque: C:\lopR.txt.

Nic00 · Answer

Il doit rester des traces.

D'Avast par exemple. Utilise ceci:

https://www.avast.com/fr-fr/uninstall-utility

Et Bitdefender, tu l'as eu comme antivirus ou bien c'est pour faire des analyses en ligne ?

Ensuite:

>> Télécharge CCleaner: 
http://download.piriform.com 

>Installe-le en prenant soin de décocher les diverses options dont la barre Yahoo et la mise à jour. 

> Lance CCleaner puis Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". 

>Pour les autres paramètres, laisse-le avec ses réglages par défaut. 

> Puis dans le menu Nettoyeur 
> Clique sur Analyse (laisser travailler cela peut durer longtemps la 1ere fois) 
> Clique sur le bouton Lancer le nettoyage. 
> Clique une seconde fois sur le bouton Lancer le nettoyage 
> Fait de même pour le menu "Chercher des erreurs"


Fais ensuite Lop S&D si tu ne l'as pas encore fait.

house · Answer

sais quoi lop S&D.
Je connaissait ccleaner je l'avait déjà.
quand je lance aswclear pour avast je mais uninstall et sa me marque des truc mai sa ne fait rien et quand je veut y couper sa redémarre mon ordinateur.
Bitdefender je ne l'ai jamais utiliser donc je ne sais pa se que sa fait dans mon ordinateur.
Ensuite que dois je faire

Nic00 · Answer

Pourtant Avast est présent dans ton rapport.
Il n'est pas répertorié et installé mais il doit rester des traces.

Lop S&D c'est pour supp une infection que tu as....
Fais le.

house · Answer

Et je fait comment pour lop S&D car je ne mi connait pas grand chose en ordinateur et pour avast dans aswclear je ne comprend pas comment il fonctionne je doit choisir le dossier pour kil efface les trace de avast.

Nic00 · Answer

On reverra pour Avast plus tard, on va pas tout mélanger...

Pour Lop c'est pas compliqué je t'ai tout expliqué :

http://www.commentcamarche.net/forum/affich 12693755 mon pc ram lag?#15

>>Tu n'es pas sous Vista, donc l'étape où il faut désactiver l'UAC tu ne t'en occupe pas.

>>Par contre je crois que tu as Spybot donc il faut désactiver le Tea-timer (je t'ai mis la procédure pour le désactiver).

Nic00 · Answer

Télécharge GenProc :
http://www.genproc.com/GenProc.exe

Exécute-le.
Laisse le travailler et poste moi le rapport à la fin.

House · Answer

Par contre mon navigateur par défaut  sais mozilla firefox

Nic00 · Answer

Ok, plus d'infections apparemment =)

Tu peux faire le rapport en ligne comme suggéré par Genproc ou bien un rapport avec ton Antivirus mais fait en 1 des 2.

House · Answer

J'attends tes réponse au plus vite merci.

House · Answer

J'ai aussi remarquer quand j'ouvre mon gestionnaire des taches dans l'onglet PROCESSUS mon processus inactif doit être normalement a 99 mais toute les 30sec environ il décent jusqu'à 20 environ 5sec.

PS: Aucun logiciels et autre n'est lancé.

Cordialement House

Nic00 · Answer

&#9654;Télécharger Easy Cleaner :
http://www.commentcamarche.net/telecharger/telecharger 34055442 easycleaner 
&#9654;Installe-le puis lance le.
&#9654;Clique sur le bouton Registre du menu principal d'EasyCleaner
&#9654;Pour commencer la recherche de clés/valeurs obsolètes dans le registre, clique sur le bouton Trouver.
&#9654;Une fois la recherche terminée, la liste des éléments obsolètes du registre apparaît : afin de tout nettoyer, clique sur Supprime tout. Tu pourras également sélectionner les entrées du registre à supprimer puis cliquer sur le bouton Supprimer.
&#9654;Une boîte de dialogue s'ouvre alors pour te demander confirmation de la suppression, clique sur Yes
&#9654;Tu peux effectuer d’autres fonctions si tu le souhaite :
 Ajout/suppression, Doublons,  Inutile(s),  Raccourcis, Espace-Disque disponible,  Démarrage, Vider des fichiers, Vider "cookies", Vider l'historique, Documents,  Rétablir (au cas ou tu aurais supprimer des choses que tu ne souhaitais pas)….


Pour counter strike 1.6 on ne trouve pas grand chose à part ça:

https://www.google.fr/search?hl=fr&q=warning+cl_flushentytipacket&btnG=Rechercher&meta=&gws_rd=ssl

Par contre pour ton processus, je ne saurai te répondre.

>>Maintenant, passe Antivir et poste le rapport.

Nic00 · Answer

A oui excuse moi, Kaspersky.
Oui poste le stp

Nic00 · Answer

Ok, fais le scan en ligne pour être sûr:

http://www.commentcamarche.net/forum/affich 12693755 mon pc ram lag#26

Nic00 · Answer

Déjà, vire arovax anti spyware (c'est pas le plus réputé comme anti-spyware)

Choisis en un parmi ceux-ci:

* Spybot :
http://www.commentcamarche.net/telecharger/telecharger 122 spybot

* AVG Anti-Spyware:
https://www.clubic.com/telecharger-fiche27645-avg-anti-spyware.html

* Spyware Terminator:
http://www.commentcamarche.net/telecharger/telecharger 34055170 spyware terminator

etc...

Fais un scan avec un de ces anti-spyware (poste moi le rapport) et enfin poste moi un rapport avec random's system information tool (RSIT)  comme on fait déjà fait ici:

http://www.commentcamarche.net/forum/affich 12693755 mon pc ram lag#2

house · Answer

voila mon rapport spybot en entier dsl:


--- Search result list ---
Félicitations!: Aucun mouchard n'a été trouvé. (Status)
  


--- Spybot - Search & Destroy version: 1.6.2  (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2009-07-03 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-05-19 Includes\Adware.sbi (*)
2009-06-02 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-05-19 Includes\Dialer.sbi (*)
2009-06-02 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-05-26 Includes\Hijackers.sbi (*)
2009-06-23 Includes\HijackersC.sbi (*)
2009-06-23 Includes\Keyloggers.sbi (*)
2009-06-30 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-06-30 Includes\Malware.sbi (*)
2009-06-30 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-06-30 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-06-02 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-06-02 Includes\SpywareC.sbi (*)
2009-06-08 Includes\Tracks.uti
2009-06-17 Includes\Trojans.sbi (*)
2009-06-30 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll



--- System information ---
Windows XP (Build: 2600) Service Pack 3 (5.1.2600)
 / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB928366)
 / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
 / MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
 / MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
 / Step By Step Interactive Training / SP2: Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)
 / Step By Step Interactive Training / SP2: Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)
 / Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
 / Windows / SP1: Microsoft National Language Support Downlevel APIs
 / Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
 / Windows Media Player: Mise à jour de sécurité pour Lecteur Windows Media (KB952069)
 / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)
 / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
 / Windows Media Player 11: Correctif pour Lecteur Windows Media 11 (KB939683)
 / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)
 / Windows Media Player 11: Mise à jour critique pour Lecteur Windows Media 11 (KB959772)
 / Windows Media Player 6.4: Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
 / Windows XP: Mise à jour de sécurité pour Windows XP (KB923689)
 / Windows XP: Mise à jour de sécurité pour Windows XP (KB941569)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)
 / Windows XP / SP0: Correctif pour Windows Internet Explorer 7 (KB947864)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)
 / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)
 / Windows XP / SP3: Windows XP Service Pack 3
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB923561)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB938464)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB946648)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950760)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950762)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB950974)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951066)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB951072-v2)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951376-v2)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951698)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB951748)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB951978)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952004)
 / Windows XP / SP4: Correctif pour Windows XP (KB952287)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB952954)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB953839)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954211)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954459)
 / Windows XP / SP4: Hotfix for Windows XP (KB954550-v5)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB954600)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB955069)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB955839)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956391)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956572)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956802)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956803)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB956841)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957095)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB957097)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958644)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958687)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB958690)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB959426)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB960225)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB960715)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB960803)
 / Windows XP / SP4: Correctif pour Windows XP (KB961118)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB961373)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB961501)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB961503)
 / Windows XP / SP4: Mise à jour pour Windows XP (KB967715)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB968537)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB969898)
 / Windows XP / SP4: Mise à jour de sécurité pour Windows XP (KB970238)


--- Startup entries list ---
Located: HK_LM:Run, AVP
command: "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
   file: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
   size: 206088
    MD5: B66D20E5EE3082C5D9CA008E412572D2

Located: HK_LM:Run, mouseElf
command: C:\PROGRA~1\GAMING~1\MouseElf.EXE
   file: C:\PROGRA~1\GAMING~1\MouseElf.EXE
   size: 471166
    MD5: 9F4D0A954236255E375C8BEC96F60443

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
   file: C:\WINDOWS\system32\NvCpl.dll
   size: 8466432
    MD5: 1E7BD636B297830582A5587CFD779784

Located: HK_LM:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
   file: C:\WINDOWS\system32\NvMcTray.dll
   size: 81920
    MD5: 33423165FDC8CCE60FF2659AF2F7BF70

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
   file: C:\WINDOWS\system32
wiz.exe
   size: 1626112
    MD5: C6B1971E12A35FB69D64D01B915E1AA1

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
   file: C:\Program Files\Java\jre6\bin\jusched.exe
   size: 148888
    MD5: A2D390F1F2408B94EF34BFE3A00C29D3

Located: HK_LM:RunOnce, Malwarebytes' Anti-Malware
command: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
   file: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
   size: 414992
    MD5: CB8426F9B0E2C43FC96ACBE9EE2490BC

Located: HK_LM:Run, Alcmtr (DISABLED)
command: ALCMTR.EXE
   file: C:\WINDOWS\ALCMTR.EXE
   size: 69632
    MD5: 8B4CBBA1EA526830C7F97E7822E2493A

Located: HK_LM:Run, InCD (DISABLED)
command: C:\Program Files\Nero\Nero 7\InCD\InCD.exe
   file: C:\Program Files\Nero\Nero 7\InCD\InCD.exe
   size: 1057328
    MD5: 0FD0C380888A89ABEF7569841677FF2B

Located: HK_LM:Run, NeroFilterCheck (DISABLED)
command: C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
   file: C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
   size: 153136
    MD5: 8112D0DACAE746290FC87B3A980FA719

Located: HK_LM:Run, nwiz (DISABLED)
command: nwiz.exe /install
   file: C:\WINDOWS\system32
wiz.exe
   size: 1626112
    MD5: C6B1971E12A35FB69D64D01B915E1AA1

Located: HK_LM:Run, RTHDCPL (DISABLED)
command: RTHDCPL.EXE
   file: C:\WINDOWS\RTHDCPL.EXE
   size: 16855552
    MD5: 9BED5FA9D8E98A1C4F8A9922185FDA7D

Located: HK_LM:Run, VX1000 (DISABLED)
command: C:\WINDOWS\vVX1000.exe
   file: C:\WINDOWS\vVX1000.exe
   size: 707360
    MD5: 999D5DCD8CFE3F70178F259B4D87A059

Located: HK_CU:Run, CTFMON.EXE
  where: PE_D_SOFIA...
command: C:\WINDOWS\system32\ctfmon.exe
   file: C:\WINDOWS\system32\ctfmon.exe
   size: 15360
    MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, MSMSGS
  where: PE_D_SOFIA...
command: "C:\Program Files\Messenger\msmsgs.exe" /background
   file: C:\Program Files\Messenger\msmsgs.exe
   size: 1695232
    MD5: E13EA4860E8F2AA845B53BFD2B6FEC5B

Located: HK_CU:Run, H/PC Connection Agent
  where: S-1-5-21-1980320242-3668116201-849533960-1006...
command: "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
   file: C:\Program Files\Microsoft ActiveSync\wcescomm.exe
   size: 1289000
    MD5: 4C4CF9220E628D1378F9807EC5175488

Located: HK_CU:Run, Steam
  where: S-1-5-21-1980320242-3668116201-849533960-1006...
command: "c:\program files\steam\steam.exe" -silent
   file: c:\program files\steam\steam.exe
   size: 1217784
    MD5: 380D05F01453CC20B02A58B112B3B9B3

Located: Démarrage (désactivé), HP Digital Imaging Monitor (DISABLED)
command: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe 
   file: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: Démarrage (désactivé), Microsoft Office (DISABLED)
command: C:\PROGRA~1\MICROS~3\Office10\OSA.EXE -b -l
   file: C:\PROGRA~1\MICROS~3\Office10\OSA.EXE
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: Démarrage (désactivé), Outil de notification Live Search (DISABLED)
command: D:\DOCUME~1\DAVID\APPLIC~1\MICROS~1\LIVESE~1\NOTIFI~1.EXE 
   file: D:\DOCUME~1\DAVID\APPLIC~1\MICROS~1\LIVESE~1\NOTIFI~1.EXE 
   size: 142336
    MD5: 6960C5DF02B5B243CA01F99088405727

Located: WinLogon, crypt32chain
command: crypt32.dll
   file: crypt32.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
   file: cryptnet.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
   file: cscdll.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
   file: %SystemRoot%\System32\dimsntfy.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, klogon
command: C:\WINDOWS\system32\klogon.dll
   file: C:\WINDOWS\system32\klogon.dll
   size: 218376
    MD5: A09EF6A4793948A74060C70AD423F067

Located: WinLogon, ScCertProp
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
   file: sclgntfy.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
   file: WlNotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
   file: wlnotify.dll
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!



--- Browser helper object list ---
{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} (Windows Live Family Safety Browser Helper)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: Windows Live Family Safety Browser Helper
        CLSID name: Windows Live Family Safety Browser Helper Class
              Path: C:\Program Files\Windows Live\Family Safety\
         Long name:         fssbho.dll
        Short name:                   
    Date (created): 06/02/2009 19:08:44
Date (last access): 03/07/2009 13:19:52
 Date (last write): 06/02/2009 19:08:44
          Filesize:              61808
        Attributes:           archive 
               MD5: 10E677AA272BDB310F59026BA816139B
             CRC32:           1BC3FFD2
           Version:      14.0.8064.206

{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} (IEVkbdBHO)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: IEVkbdBHO
        CLSID name: IEVkbdBHO Class
              Path: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\
         Long name:         ievkbd.dll
        Short name:                   
    Date (created): 11/11/2008 19:59:58
Date (last access): 03/07/2009 13:19:52
 Date (last write): 11/11/2008 19:59:58
          Filesize:              62728
        Attributes:           archive 
               MD5: D04D5C4F4FD84129143AD6BC60684C4D
             CRC32:           0376C460
           Version:          8.0.0.506

{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} (Search Helper)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: Search Helper
        CLSID name: Search Helper
              Path: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\
         Long name: SEPsearchhelperie.dll
        Short name:       SEPSEA~1.DLL
    Date (created): 19/05/2009 11:36:18
Date (last access): 03/07/2009 13:19:52
 Date (last write): 19/05/2009 11:36:18
          Filesize:             137600
        Attributes:           archive 
               MD5: F655CDD5506FBB4C40C08C9C6A66F7C8
             CRC32:           579241EB
           Version:           1.3.59.0

{9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
              Path: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\
         Long name: WindowsLiveLogin.dll
        Short name:       WINDOW~1.DLL
    Date (created): 22/01/2009 16:41:30
Date (last access): 03/07/2009 13:12:46
 Date (last write): 22/01/2009 16:41:30
          Filesize:             408448
        Attributes:           archive 
               MD5: B7899C3E21B299D7A3C0DA96CAE340BD
             CRC32:           288935F8
           Version:          5.0.818.5

{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: Java(tm) Plug-In 2 SSV Helper
              Path: C:\Program Files\Java\jre6\bin\
         Long name:         jp2ssv.dll
        Short name:                   
    Date (created): 05/06/2009 15:30:38
Date (last access): 03/07/2009 13:19:52
 Date (last write): 05/06/2009 15:30:38
          Filesize:              35840
        Attributes:           archive 
               MD5: 96A225C7F5346A9E81FC3DFA89A900C0
             CRC32:           BAD5D2EF
           Version:          6.0.130.3

{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} (Windows Live Toolbar Helper)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: Windows Live Toolbar Helper
              Path: C:\Program Files\Windows Live\Toolbar\
         Long name:        wltcore.dll
        Short name:                   
    Date (created): 06/02/2009 19:17:46
Date (last access): 03/07/2009 13:19:52
 Date (last write): 06/02/2009 19:17:46
          Filesize:            1068904
        Attributes:           archive 
               MD5: 28455424E3C8B81661C5A40E18066BB1
             CRC32:           E5BA354B
           Version:      14.0.8064.206

{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: JQSIEStartDetectorImpl
        CLSID name: JQSIEStartDetectorImpl Class
              Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
         Long name:     jqs_plugin.dll
        Short name:       JQS_PL~1.DLL
    Date (created): 05/06/2009 15:30:40
Date (last access): 03/07/2009 13:19:52
 Date (last write): 05/06/2009 15:30:40
          Filesize:              73728
        Attributes:           archive 
               MD5: 53F8B53918C839F76367B7E612B742B1
             CRC32:           735F7F91
           Version:          6.0.130.3



--- ActiveX list ---
{00000055-9980-0010-8000-00AA00389B71} ()
          DPF name: 
        CLSID name: 
         Installer: C:\WINDOWS\Downloaded Program Files\fhg.inf
          Codebase: http://codecs.microsoft.com/codecs/i386/fhg.CAB
       description: 
    classification: Legitimate
    known filename: 
         info link: 
       info source: Safer Networking Ltd.

{1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab)
          DPF name: System Requirements Lab
        CLSID name: System Requirements Lab Class
         Installer: 
          Codebase: http://dev.srtest.com/srl_bin/sysreqlab3.cab
              Path: C:\WINDOWS\Downloaded Program Files\
         Long name:     sysreqlab3.dll
        Short name:       SYSREQ~1.DLL
    Date (created): 28/05/2008 15:06:38
Date (last access): 03/07/2009 14:02:32
 Date (last write): 28/05/2008 15:06:38
          Filesize:             267568
        Attributes:           archive 
               MD5: 057AF68D34C4A939947871429EB09FB4
             CRC32:           8ABCA3F3
           Version:            3.0.0.1

{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_13
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
       description: Sun Java
    classification: Legitimate
    known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin
pjava131.dll
         info link: 
       info source: Patrick M. Kolla
              Path: C:\Program Files\Java\jre6\bin\
         Long name:    npjpi160_13.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 05/06/2009 15:30:38
Date (last access): 03/07/2009 14:02:32
 Date (last write): 05/06/2009 15:30:38
          Filesize:             136600
        Attributes:           archive 
               MD5: 20188EB1790C5EB9057DDFE3EA138FC7
             CRC32:           2EA1ACCF
           Version:          6.0.130.3

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ()
          DPF name: 
        CLSID name: 
         Installer: C:\WINDOWS\Downloaded Program Files\erma.inf
          Codebase: http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
       description: 
    classification: Open for discussion
    known filename: 
         info link: 
       info source: Safer Networking Ltd.

{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_13
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
              Path: C:\Program Files\Java\jre6\bin\
         Long name:    npjpi160_13.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 05/06/2009 15:30:38
Date (last access): 03/07/2009 14:02:32
 Date (last write): 05/06/2009 15:30:38
          Filesize:             136600
        Attributes:           archive 
               MD5: 20188EB1790C5EB9057DDFE3EA138FC7
             CRC32:           2EA1ACCF
           Version:          6.0.130.3

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_13
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
       description: 
    classification: Legitimate
    known filename: npjpi150_06.dll
         info link: 
       info source: Safer Networking Ltd.
              Path: C:\Program Files\Java\jre6\bin\
         Long name:    npjpi160_13.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 05/06/2009 15:30:38
Date (last access): 03/07/2009 14:02:32
 Date (last write): 05/06/2009 15:30:38
          Filesize:             136600
        Attributes:           archive 
               MD5: 20188EB1790C5EB9057DDFE3EA138FC7
             CRC32:           2EA1ACCF
           Version:          6.0.130.3

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
          DPF name: 
        CLSID name: Shockwave Flash Object
         Installer: C:\WINDOWS\Downloaded Program Files\CONFLICT.1\swflash.inf
          Codebase: https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
       description: Macromedia Shockwave Flash Player
    classification: Legitimate
    known filename: 
         info link: 
       info source: Patrick M. Kolla
              Path: C:\WINDOWS\system32\Macromed\Flash\
         Long name:       Flash10b.ocx
        Short name:                   
    Date (created): 03/02/2009 04:07:18
Date (last access): 03/07/2009 14:02:32
 Date (last write): 03/02/2009 04:07:18
          Filesize:            3866528
        Attributes:  readonly archive 
               MD5: 8AFC17155ED5AB60B7C52D7F553D579C
             CRC32:           0FBC13F3
           Version:         10.0.22.87



--- Process list ---
PID:    0 (   0) [System]
PID:  968 (   4) \SystemRoot\System32\smss.exe
 size: 50688
PID: 1220 ( 968) \??\C:\WINDOWS\system32\csrss.exe
 size: 6144
PID: 1268 ( 968) \??\C:\WINDOWS\system32\winlogon.exe
 size: 512000
PID: 1336 (1268) C:\WINDOWS\system32\services.exe
 size: 111104
  MD5: C3FB1D70CB88722267949694BA51759E
PID: 1348 (1268) C:\WINDOWS\system32\lsass.exe
 size: 13312
  MD5: 91E6024D6D4DCDECDB36C43ECF9BBECB
PID: 1572 (1336) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1624 (1336) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1736 (1336) C:\WINDOWS\System32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1892 (1336) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID:  176 (1336) C:\WINDOWS\system32\spoolsv.exe
 size: 57856
  MD5: 460E4CE148BD07218DA0B6A3D31885A9
PID: 1728 (1336) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1800 (1336) C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
 size: 1135728
  MD5: E13406F701A9B2A7513CD6798A40CECB
PID: 1868 (1336) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 1976 (1336) c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
 size: 266338
  MD5: 620327CE4636AD2AEF30137EA66D8703
PID:  196 (1336) c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
 size: 1073152
  MD5: 1CFDCB99812C62E19C47896A5857D342
PID:  304 (1336) C:\Program Files\Windows Live\Family Safety\fsssvc.exe
 size: 533360
  MD5: 9B1622EBEB31B3411B13382FFCB8737D
PID:  412 (1336) c:\APPS\HIDSERVICE\HIDSERVICE.exe
 size: 49152
  MD5: 69202C049779AE09470370F163363F13
PID:  440 (1336) C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
 size: 101528
  MD5: 51516252DBBFED36F70B341DBA263167
PID:  504 (1336) C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
 size: 1550896
  MD5: C773D093D5C18765E71C7992AEE051A2
PID:  532 (1336) C:\Program Files\Java\jre6\bin\jqs.exe
 size: 152984
  MD5: 890369AED0DDE1A98F09F7DC239CA2BD
PID:  648 (1336) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
 size: 240408
  MD5: B29EF836368AE9873A6F8F8E021CD148
PID:  720 (1336) C:\WINDOWS\system32
vsvc32.exe
 size: 155716
  MD5: E9E110CDF6A063A5F9B841C36FB5CC95
PID:  156 (1336) C:\WINDOWS\system32\HPZipm12.exe
 size: 69632
  MD5: A38B3CE68E7F126190CDE4AA3FDF050F
PID: 2616 (1336) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
 size: 240512
  MD5: 271077B91D7AD1B616F8AFDFE8E3F981
PID: 2700 ( 916) C:\WINDOWS\Explorer.EXE
 size: 1037824
  MD5: F2317622D29F9FF0F88AEECD5F60F0DD
PID: 2808 (1336) C:\WINDOWS\system32\svchost.exe
 size: 14336
  MD5: E4BDF223CD75478BF44567B4D5C2634D
PID: 2908 (1336) c:\APPS\Powercinema\Kernel\TV\CLSched.exe
 size: 114784
  MD5: A71B3E951285C17D93A80F55A6D29066
PID: 3400 (1336) C:\WINDOWS\system32\wbem\wmiapsrv.exe
 size: 126464
  MD5: 4E8E8A58F56B25D0795F484E5EB7F898
PID: 4048 (1336) C:\WINDOWS\System32\alg.exe
 size: 44544
  MD5: 5E9A6658A2A69AE7EB195113B7A2E7A9
PID: 2220 (2700) C:\PROGRA~1\GAMING~1\MouseElf.EXE
 size: 471166
  MD5: 9F4D0A954236255E375C8BEC96F60443
PID:  452 (2700) C:\Program Files\Java\jre6\bin\jusched.exe
 size: 148888
  MD5: A2D390F1F2408B94EF34BFE3A00C29D3
PID: 2468 (2700) C:\WINDOWS\system32\RUNDLL32.EXE
 size: 33792
  MD5: 93AD0B78C7357A05F50E594EC7C22300
PID: 2480 (2700) C:\program files\steam\steam.exe
 size: 1217784
  MD5: 380D05F01453CC20B02A58B112B3B9B3
PID: 3328 (2700) C:\Program Files\Microsoft ActiveSync\wcescomm.exe
 size: 1289000
  MD5: 4C4CF9220E628D1378F9807EC5175488
PID: 3848 (1572) C:\PROGRA~1\MI3AA1~1apimgr.exe
 size: 199464
  MD5: DCFC84480C76D862D9BFD386EA6E8DE7
PID: 3676 (3108) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
 size: 5365592
  MD5: 0477C2F9171599CA5BC3307FDFBA8D89
PID:    4 (   0) System
PID: 1812 (1336) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
 size: 206088
  MD5: B66D20E5EE3082C5D9CA008E412572D2
PID: 2348 (2700) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
 size: 206088
  MD5: B66D20E5EE3082C5D9CA008E412572D2


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 03/07/2009 14:07:18

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
  http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
  https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
  http://www.google.com/search?q=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
  %SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
  https://www.msn.com/fr-fr/?ocid=iehp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
  https://www.msn.com/fr-fr/?ocid=iehp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\SearchAssistant
  http://www.crawler.com/search/ie.aspx?tb_id=60327
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
  http://www.crawler.com/search/ie.aspx?tb_id=60327
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
  http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327


--- Winsock Layered Service Provider list ---


--- Uninstall list ---
Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (03/26/2007 5.10.0.5391) 03/26/2007 5.10.0.5391 (745E2BCA96480F7C8B1916868CE0857DF78830AB)
   uninstall cmd: C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\DPInst.exe /u C:\WINDOWS\system32\DRVSTORE\hdart_C71723100C9B1362CA9E28BC0C6DB02E6CB8385E\hdart.inf
       publisher: Realtek Semiconductor Corp.

  (AddressBook)

Adobe Flash Player 10 ActiveX 10.0.22.87 (Adobe Flash Player ActiveX)
   uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
       publisher: Adobe Systems Incorporated
       help link: https://helpx.adobe.com/flash-player.html

  (America Online fr)
   uninstall cmd: C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe

  (AOL Connectivity Services)
   uninstall cmd: C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c

  (AOL YGP Screensaver)
   uninstall cmd: C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe

  (AOLCoach fr)
   uninstall cmd: "C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"

  (Branding)

PIXMA Extended Survey Program  (CANONIJPLM100)
   uninstall cmd: C:\Program Files\Canon\IJPLM\SETUP.EXE -R

Canon My Printer  (CanonMyPrinter)
   uninstall cmd: C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini

Canon Utilities Solution Menu  (CanonSolutionMenu)
   uninstall cmd: C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini

CCleaner (remove only)  (CCleaner)
   uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"
       publisher: Piriform

  (CDex)

  (Connection Manager)

dBpoweramp Music Converter Release 13 (dBpoweramp Music Converter)
  estimated size: 13606912
install location: C:\Program Files\Illustrate\dBpoweramp
   uninstall cmd: "C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
       publisher: Illustrate

  (DirectAnimation)

  (DirectDrawEx)

  (DXM_Runtime)

  (Easy-LayoutPrint)

Canon Utilities Easy-PhotoPrint EX  (Easy-PhotoPrint EX)
   uninstall cmd: C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini

eMule  (eMule)
   uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"

Enregistrement utilisateur de Canon MP210 series  (Enregistrement utilisateur de Canon MP210 series)
   uninstall cmd: C:\Program Files\Canon\IJEREG\MP210 series\UNINST.EXE

EVEREST Ultimate Edition v4.50 4.50 (EVEREST Ultimate Edition_is1)
install location: C:\Program Files\Lavalys\EVEREST Ultimate Edition\
   uninstall cmd: "C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
       publisher: Lavalys, Inc.
       help link: http://www.lavalys.com

  (Fontcore)

LRC Editor 4.0 (remove only)  (gsle4)
   uninstall cmd: "C:\Program Files\LRC Editor 4\uninst-gsle4.exe"

HP Solution Center and Imaging Support Tools 6.1 6.1 (HP Solution Center & Imaging Support Tools)
   uninstall cmd: C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
       publisher: HP
       help link: https://support.hp.com/us-en?openCLC=true

  (ICW)

Microsoft Internationalized Domain Names Mitigation APIs  (IDNMitigationAPIs)
    install date: 20080229
   uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

  (IE40)

  (IE4Data)

  (IE5BAKEX)

  (IEData)

  (InCD!UninstallKey)
   uninstall cmd: C:\WINDOWS\NuNInst.exe /UNINSTALL

Kaspersky Internet Security 2009 8.0.0.506 (InstallWIX_{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55})
   uninstall cmd: MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
       publisher: Kaspersky Lab
       help link: http://www.kaspersky.com/fr/service

  (KB884016)

  (KB884267)

  (KB885353)

  (KB886612)

  (KB887078)

  (KB887626)

  (KB888656)

  (KB889858)

  (KB891122)

Windows Genuine Advantage Validation Tool (KB892130)  (KB892130)
    install date: 20080229
       publisher: Microsoft Corporation
       help link: https://www.microsoft.com/en-us/howtotell/default.aspx

  (KB892313)

  (KB893240)

  (KB893241)

  (KB893803)

  (KB895181)

  (KB895316)

  (KB895572)

  (KB897586)

  (KB898549)

  (KB900399)

  (KB902344)

  (KB907658)

  (KB911565)

  (KB911854)

Security Update for CAPICOM (KB931906) 2.1.0.2 (KB931906)
   uninstall cmd: MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/931906/ms07-028-vulnerability-in-capicom-could-allow-remote-code-execution

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) 1 (KB938127-IE7)
    install date: 20080301
   uninstall cmd: "C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/938127

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615) 1 (KB942615-IE7)
    install date: 20080229
   uninstall cmd: "C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/942615

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533) 1 (KB944533-IE7)
    install date: 20080229
   uninstall cmd: "C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/944533

Correctif pour Windows Internet Explorer 7 (KB947864) 1 (KB947864-IE7)
    install date: 20080409
   uninstall cmd: "C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/947864/ms08-024-cumulative-security-update-for-internet-explorer

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759) 1 (KB950759-IE7)
    install date: 20080611
   uninstall cmd: "C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/950759/ms08-031-cumulative-security-update-for-internet-explorer

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838) 1 (KB953838-IE7)
    install date: 20080814
   uninstall cmd: "C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/953838

Hotfix for Windows XP (KB954550-v5) 5 (KB954550-v5)
    install date: 20090415
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/954550

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390) 1 (KB956390-IE7)
    install date: 20081015
   uninstall cmd: "C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/956390

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215) 1 (KB958215-IE7)
    install date: 20081213
   uninstall cmd: "C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/958215

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714) 1 (KB960714-IE7)
    install date: 20081219
   uninstall cmd: "C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/960714/

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260) 1 (KB961260-IE7)
    install date: 20090211
   uninstall cmd: "C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/961260/

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027) 1 (KB963027-IE7)
    install date: 20090415
   uninstall cmd: "C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/963027/ms09-014-cumulative-security-update-for-internet-explorer

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897) 1 (KB969897-IE7)
    install date: 20090618
   uninstall cmd: "C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/969897

Gaming Mouse 8.01.00 (KYE)
   uninstall cmd: C:\Program Files\Gaming Mouse\Setup.exe /Uninstall
       publisher: KYE Systems Corp.

Microsoft .NET Framework 1.1 Hotfix (KB928366)  (M928366)
   uninstall cmd: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"

Malwarebytes' Anti-Malware  (Malwarebytes' Anti-Malware_is1)
    install date: 20090703
install location: C:\Program Files\Malwarebytes' Anti-Malware\
   uninstall cmd: "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
       publisher: Malwarebytes Corporation
       help link: https://www.malwarebytes.com/

Microsoft .NET Framework 1.1  (Microsoft .NET Framework 1.1  (1033))
   uninstall cmd: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
          readme: file://C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\RepairRedist.htm

Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA  (Microsoft .NET Framework 2.0 Language Pack - FRA)
install location: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\
   uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/ph/8291

Microsoft .NET Framework 3.5 SP1  (Microsoft .NET Framework 3.5 SP1)
install location: C:\WINDOWS\Microsoft.NET\Framework\v3.5\
   uninstall cmd: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
       publisher: Microsoft Corporation
       help link: https://www.microsoft.com/fr-fr/

  (Microsoft Interactive Training)
   uninstall cmd: C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu

mIRC 6.35 (mIRC)
install location: C:\Program Files\mIRC
   uninstall cmd: C:\Program Files\mIRC\uninstall.exe _?=C:\Program Files\mIRC
       publisher: mIRC Co. Ltd.

  (MobileOptionPack)

Mozilla Firefox (3.0.11) 3.0.11 (fr) (Mozilla Firefox (3.0.11))
install location: C:\Program Files\Mozilla Firefox
   uninstall cmd: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
       publisher: Mozilla
        comments: Mozilla Firefox

Canon MP Navigator EX 1.0  (MP Navigator EX 1.0)
install location: C:\Program Files\Canon\MP Navigator EX 1.0
   uninstall cmd: "C:\Program Files\Canon\MP Navigator EX 1.0\Maint.exe" /UninstallRemove C:\Program Files\Canon\MP Navigator EX 1.0\uninst.ini

  (MPlayer2)

  (MSI30-Beta1)

  (MSI30-Beta2)

  (MSI30-KB884016)

  (MSI30-RC1)

  (MSI30-RC2)

  (MSI30a-KB884016)

  (MSI31-Beta)

  (MSI31-RC1)

Mumble and Murmur 1.1.8 (Mumble)
install location: C:\Program Files\Mumble
  install source: https://sourceforge.net/projects/mumble/files/Mumble/1.1.8/Mumble-1.1.8.exe/download?use_mirror=iweb&download=
   uninstall cmd: C:\Program Files\Mumble\Uninstall.exe
       publisher: Mumble

  (Nero - Burning Rom!UninstallKey)
   uninstall cmd: C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL

  (NeroBackItUp!UninstallKey)
   uninstall cmd: C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL

  (NetMeeting)

Neuf - Kit de connexion 7.6.20.3 (Neuf_Kit)
   uninstall cmd: C:\Program Files\Neuf\Kit\uninstall.exe
       publisher: Neuf
       help link: http://abonnes.neuf.fr
  help telephone: 0892 222 109

Microsoft National Language Support Downlevel APIs  (NLSDownlevelMapping)
    install date: 20080229
   uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

NVIDIA Drivers 1.3 (NVIDIA Drivers)
install location: C:\WINDOWS\system32
   uninstall cmd: C:\WINDOWS\system32
vudisp.exe UninstallGUI
       publisher: NVIDIA Corporation

  (OutlookExpress)

PC Wizard 2008.1.871  (PC Wizard 2008_is1)
    install date: 20090412
install location: C:\Program Files\PC Wizard 2008\
   uninstall cmd: "C:\Program Files\PC Wizard 2008\unins000.exe"
       publisher: Laurent KUTIL & Franck DELATTRE
       help link: https://www.cpuid.com/

  (PCHealth)
   uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

PhotoFiltre  (PhotoFiltre)
   uninstall cmd: "C:\Program Files\PhotoFiltre\Uninst.exe"

  (RealPlayer 6.0)
   uninstall cmd: C:\Program Files\Fichiers communs\Real\Update\rnuninst.exe RealNetworks|RealPlayer|6.0

  (RecordNow.exe)
   uninstall cmd: C:\WINDOWS\system32\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}

Retriever 1.1.4.0  (Retriever_is1)
    install date: 20090204
install location: C:\Program Files\Retriever\
   uninstall cmd: "C:\Program Files\Retriever\unins000.exe"
       publisher: Emtrace Technologies, Inc.
       help link: http://www.callia.com/player

SAMSUNG CDMA Modem Driver Set  (SAMSUNG CDMA Modem)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe

SAMSUNG Mobile USB Modem Software  (SAMSUNG Mobile USB Modem)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe

SAMSUNG Mobile USB Modem 1.0 Software  (SAMSUNG Mobile USB Modem 1.0)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe

  (SchedulingAgent)

 2.0 (Skype_is1)
install location: c:\apps\skype\phone\
   uninstall cmd: "c:\apps\skype\phone\unins000.exe"
       publisher: Skype Software S.A.
       help link: http://ui.skype.com/ui/0/2.0.2.73/en/help

StationRipper 2.92 2.92 (StationRipper)
   uninstall cmd: C:\Program Files\Ratajik Software\StationRipper\uninstall-StationRipper.exe
       publisher: Ratajik Software

Counter-Strike  (Steam App 10)
install location: c:\program files\steam\steamappsonii9\counter-strike
   uninstall cmd: "C:\Program Files\Steam\steam.exe" steam://uninstall/10
       publisher: Valve
       help link: https://help.steampowered.com/en/

Counter-Strike: Source  (Steam App 240)
install location: c:\program files\steam\steamappsonii9\counter-strike source
   uninstall cmd: "C:\Program Files\Steam\steam.exe" steam://uninstall/240
       publisher: Valve
       help link: https://help.steampowered.com/en/

System Requirements Lab  (SystemRequirementsLab)
   uninstall cmd: C:\Program Files\SystemRequirementsLab\Uninstall.exe

TeamSpeak 2 RC2 2.0.32.60 (Teamspeak 2 RC2_is1)
   uninstall cmd: "C:\Program Files\Teamspeak2_RC2\unins000.exe"
       publisher: Dominating Bytes Design
       help link: http://www.teamspeak.org

  (Vade Retro Express)
   uninstall cmd: C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG

  (ViewpointMediaPlayer)
   uninstall cmd: C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u

VLC media player 0.9.9 0.9.9 (VLC media player)
   uninstall cmd: D:\Programme file 2\VLC\uninstall.exe
       publisher: VideoLAN Team

Vodafone 804SS USB driver Software  (Vodafone 804SS USB driver)
   uninstall cmd: C:\WINDOWS\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe

Windows Genuine Advantage Validation Tool (KB892130) 1.7.0069.2 (WGA)
       publisher: Microsoft Corporation
       help link: https://www.microsoft.com/en-us/howtotell/default.aspx

Windows Imaging Component 3.0.0.0 (WIC)
    install date: 20080219
   uninstall cmd: "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation

Windows Media Format 11 runtime  (Windows Media Format Runtime)
   uninstall cmd: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
       help link: https://support.microsoft.com/en-us

Lecteur Windows Media 11  (Windows Media Player)
   uninstall cmd: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Windows XP Service Pack 3 20080413.144513 (Windows XP Service)
    install date: 20080513
   uninstall cmd: "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: https://support.microsoft.com/en-us/help/936929

  (Windows XP Service Pack)

GIMP 2.6.5  (WinGimp-2.0_is1)
    install date: 20090219
install location: C:\Program Files\GIMP-2.0\
   uninstall cmd: "C:\Program Files\GIMP-2.0\setup\unins000.exe"
       help link: https://groups.yahoo.com/neo/groups/gimpwin-users/info

Installation Windows Live 14.0.8064.0206 (WinLiveSuite_Wave3)
install location: C:\Program Files\Windows Live\
   uninstall cmd: C:\Program Files\Windows Live\Installer\wlarp.exe
       publisher: Microsoft Corporation
       help link: http://support.live.com/

Archiveur WinRAR  (WinRAR archiver)
   uninstall cmd: C:\Program Files\WinRAR\uninstall.exe

  (WMCSetup)

Windows Media Format 11 runtime  (WMFDist11)
    install date: 20071005
   uninstall cmd: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: http:

Windows Media Player 11  (wmp11)
    install date: 20071005
   uninstall cmd: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
       publisher: Microsoft Corporation
       help link: http:

Steam 1.0.0.0 ({048298C9-A4D3-490B-9FF9-AB023A9238F3})
         version: 16777216
 version (major): 1
  estimated size: 1341
    install date: 20090426
  install source: D:\Documents and Settings\DAVID\Bureau\
   uninstall cmd: MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
       publisher: Valve
        comments: Steam
       help link: https://help.steampowered.com/en/

Windows Live Messenger 14.0.8064.0206 ({059C042E-796A-4ACC-A81A-ECC2010BB78C})
         version: 234889088
 version (major): 14
  estimated size: 41531
    install date: 20090219
  install source: C:\Program Files\Fichiers communs\Windows Live\.cache\2a4339fc1c9929a\
   uninstall cmd: MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
       publisher: Microsoft Corporation

F300 51.0.230.000 ({05C56753-F144-44BC-BA67-83CC5DBF395C})
         version: 855638246
 version (major): 51
  estimated size: 267
    install date: 20060915
  install source: C:\Program Files\HP\Digital Imaging\{E5A8DDAB-AE80-48C6-A75B-D0FAB83B299D}\Product\
       publisher: Hewlett-Packard

Security Update for CAPICOM (KB931906) 2.1.0.2 ({0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A})
         version: 33619968
 version (major): 2
 version (minor): 1
  estimated size: 770
    install date: 20071006
   uninstall cmd: MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
       publisher: Microsoft Corporation

Canon MP210 series  ({1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series)
   uninstall cmd: "C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series /L0x000c

Samsung PC Studio 3.0.0.60404 ({1967D67C-6F3F-4001-9644-BAC704F7EE84})
         version: 50331648
 version (major): 3
  estimated size: 128
    install date: 20071104
install location: C:\Program Files\Samsung\Samsung PC Studio 3\
  install source: C:\Program Files\Samsung\Samsung PC Studio 3\{1967D67C-6F3F-4001-9644-BAC704F7EE84}\
       publisher: Samsung Electronics Co., Ltd.
         contact: Customer Support Department
       help link: http://www.samsungmobile.co.kr
  help telephone: 1-555-555-4505

DVD Suite 5.0.1319 ({1FBF6C24-C1FD-4101-A42B-0C564F9E8E79})
   uninstall cmd: RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe"  -uninstall
       publisher: CyberLink Corporation

Outil de téléchargement Windows Live 14.0.8014.1029 ({205C6BDD-7B73-42DE-8505-9A093F35A238})
         version: 234889038
 version (major): 14
  estimated size: 225
    install date: 20081217
  install source: C:\Program Files\Fichiers communs\Windows Live\.cache\1e39266c1c96059\
   uninstall cmd: MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
       publisher: Microsoft Corporation
       help link: https://skydrive.live.com/

Sonic MyDVD 5.3.0 ({21657574-BD54-48A2-9450-EB03B2C7FC29})
         version: 84082688
 version (major): 5
 version (minor): 3
  estimated size: 86569
    install date: 20060616
   uninstall cmd: MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
       publisher: Sonic Solutions
       help link: http://support.sonic.com/

Windows Live Writer 14.0.8064.0206 ({2231CE39-B963-4B9D-823A-F412ECA637B1})
         version: 234889088
 version (major): 14
  estimated size: 15756
    install date: 20090301
  install source: C:\Program Files\Fichiers communs\Windows Live\.cache

Nic00 · Answer

&#9654;Télécharge OTMoveIt3 (de Old_Timer) sur ton Bureau : 
https://www.androidworld.fr/
(c est le numéro 7 en bas de la page)

&#9654;Double-clique sur OTMoveIt.exe pour le lancer. 
&#9654;Assure toi que la case "Unregister Dll's and Ocx's" soit bien cochée 
&#9654;Copie / colle les lignes suivantes dans la fenêtre de gauche de OTMoveIt nommé "Paste List of Files/Folders to be moved".

:Processes
explorer.exe

:Files
C:\WINDOWS\ALCMTR.EXE

:Reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]

:Commands 
[emptytemp] 
[Reboot]
[start explorer] 

&#9654;Clique sur MoveIt! pour lancer la suppression. 
&#9654;Si OTMoveIt propose de redémarrer ton PC, accepte. 
&#9654;Lorsque un résultat apparaît dans le cadre Results, clique sur Exit. 

&#9654;Dans ta prochaine réponse, envoie le rapport de OTMoveIt situé ici: C:\_OTMoveIt\MovedFiles

Nic00 · Answer

Ok, juste pour vérification. Va voir ci ce fichier a bien été supprimé : ALCMTR.EXE  dans C:\WINDOWS\

Nic00 · Answer

Télécharge et installe Spybot:

http://www.commentcamarche.net/telecharger/telecharger 122 spybot

Fais la vérification et la vaccination avec

Tuto: https://www.malekal.com/spybot-search-destroy-proteger-desinfecter-pc-virus/ et ici https://kerio.probb.fr/t774-tuto-pour-spybot-search-and-destroy

Nic00 · Answer

Ok pas de pb ;-)

Nic00 · Answer

Comment va le PC ?

Nic00 · Answer

Essaye ceci:

Trojan-Remover:
http://www.commentcamarche.net/telecharger/telecharger 34055042 trojan remover

+ un coup de AVG-Anti Spyware:

https://www.clubic.com/telecharger-fiche27645-avg-anti-spyware.html

Nic00 · Answer

Déjà il reste des traces de Norton et Bitdefender sur ton PC:
http://www.commentcamarche.net/faq/sujet 7367 desinstaller proprement liens et astuce

Surtout de Bitdefender puisque le dossier est encore présent: C:\Program Files\Softwin\

vire tout ça....

Est-ce que tu avais aussi virer Avorax comme je te l'ai demandé ici (peut-être un faux positif...)? :
http://www.commentcamarche.net/forum/affich 12693755 mon pc ram lag?page=2#45

house · Answer

Oui cet bon j'ai tous supprimer pourrait tu me dire qu'est ce qu'il faut que je t'envoye pour que tu regarde si sa a été bien supprimer et si il y a encore des truc a supprimer dans mon ordi ?
Et aussi qu'est se qu'il faut que je face encore ?
Merci

Nic00 · Answer

Passe un coup de CCleaner.

As-tu un pare-feu avec Kaspersky ?

Nic00 · Answer

Oui réactive le.

Nic00 · Answer

Difficile de juger mais personnellement vuq'uil est avec autant prendre celui-ci.

 Et pour le Host Hijacker ça dit quoi ?

Nic00 · Answer

&#9654;Télécharge OAD:
 http://sosvirus.changelog.fr/OAD.exe 

&#9654;Enregistre le sur ton bureau 

&#9654;Double clique sur OAD pour le lancer 

- nom de fichier à rechercher tape ou fais un copier/coller de :host hijacker
- Type de recherche : sélectionne l'option 6 puis valide en appuyant sur Entrée

&#9654; OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il ai terminé. 
Le rapport de recherche s'affichera automatiquement dès qu'il aura terminé. 

- Fais un copier / coller de ce rapport dans ton prochain poste. 

Note: Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes.Patiente...

Nic00 · Answer

J'en pense que c'est normal ^^ car je n'ai pas le nom de ce host hijacker.
Qui te le détecte ce host hijacker?

Nic00 · Answer

Tu n'es pas la seule a avoir ce problème de Host Hijacker détecté par Avorax. C'est certainement un faux positif=>signe que Avorax n'est pas encore au point et qu'il vaut mieux privilégier Spybot (par exemple) qui est beaucoup plus "expérimenté".

Fais un scan en ligne avec Bitdefender:
http://www.bitdefender.fr/scan_fr/scan8/ie.html

S'il ne te trouve pas de Host Hijacker alors tu peux être sur que c'était Avorax qui clochait.

Nic00 · Answer

Non désolé je ne m'y connaît pas dans ce domaine ^^

En cherchant un peu : http://www.commentcamarche.net/forum/affich 5503546 team cs cherche logiciel pour creer logo imag#7

Mon pc ram,lag

42 réponses

Votre réponse

Newsletters