Probleme windows temp msxn192z.dll

yakke -  
 Santone -
Bonjour,

jai se probleme

erreure de chargement c:\windows/temp/msxm192z.dll

ja nariva pas a telecharger est istaller un anti virus

aidee moi svp
Configuration: Windows Vista Internet Explorer 7.0

8 réponses

  1. Mike
     
    bonjours,

    Téléchargez RSIT (de random/random) sur votre bureau :
    http://images.malwareremoval.com/random/RSIT.exe
    • Double cliquez sur RSIT.exe,
    • Appuyez sur [Continue] à l'écran « Disclaimer »,
    • RSIT téléchargera HijackThis (s’il n’est pas installé) -> acceptez la licence,
    >> le rapport Log.txt va s'ouvrir à l'écran..

    ► Postez ce rapport, aussi disponible dans C:\RSIT\..
    0
    1. yakke
       
      rapport Malwarebytes





      Malwarebytes' Anti-Malware 1.41
      Version de la base de données: 2775
      Windows 6.0.6000

      21/09/2009 5:01:06
      rapport malawarebytes

      Type de recherche: Examen complet (C:\|)
      Eléments examinés: 195004
      Temps écoulé: 38 minute(s), 42 second(s)

      Processus mémoire infecté(s): 2
      Module(s) mémoire infecté(s): 4
      Clé(s) du Registre infectée(s): 38
      Valeur(s) du Registre infectée(s): 12
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 6
      Fichier(s) infecté(s): 31

      Processus mémoire infecté(s):
      C:\Windows\System32\sofatnet.exe (Backdoor.Bot) -> No action taken.
      C:\Windows\regx32.exe (Hacktool.Agent) -> No action taken.

      Module(s) mémoire infecté(s):
      c:\Windows\System32\BtwSrv.dll (Trojan.Agent) -> No action taken.
      C:\Program Files\WWShow\WWShow.dll (Trojan.BHO) -> No action taken.
      C:\Program Files\Jcore\Jcore2.dll (Trojan.BHO) -> No action taken.
      C:\Program Files\PrimoAdsForYou\PrimoAdsForYou.dll (Adware.PlayMP3z) -> No action taken.

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\btwsrv (Trojan.Agent) -> No action taken.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\btwsrv (Trojan.Agent) -> No action taken.
      HKEY_CLASSES_ROOT\TypeLib\{63334394-3da3-4b29-a041-03535909d361} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\Interface\{2e4a04a1-a24d-45ae-aca4-949778400813} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\CLSID\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.BHO) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.BHO) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\TypeLib\{e0f01490-dcf3-4357-95aa-169a8c2b2190} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\Interface\{17e44256-51e0-4d46-a0c8-44e80ab4ba5b} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\CLSID\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\bho_cpv.workhorse (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\bho_cpv.workhorse.1 (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\mjcore.mjcore (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\mjcore.mjcore.1 (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\primoadsforyou.primoadsforyou (Adware.PlayMP3z) -> No action taken.
      HKEY_CLASSES_ROOT\TypeLib\{ecd83e0b-5c78-c8f5-42a2-3cc57030bc65} (Adware.PlayMP3z) -> No action taken.
      HKEY_CLASSES_ROOT\Interface\{7b120880-4edd-edae-e1a2-a11487b327d5} (Adware.PlayMP3z) -> No action taken.
      HKEY_CLASSES_ROOT\CLSID\{d35da2a5-1d09-03bb-fe6e-c569be05cfa0} (Adware.PlayMP3z) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d35da2a5-1d09-03bb-fe6e-c569be05cfa0} (Adware.PlayMP3z) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d35da2a5-1d09-03bb-fe6e-c569be05cfa0} (Adware.PlayMP3z) -> No action taken.
      HKEY_CLASSES_ROOT\primoadsforyou.primoadsforyou.1 (Adware.PlayMP3z) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\{26a98aa8-07fe-46e6-b6df-26704f3b895f} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\{418d86be-7386-4f1a-83e0-53604adbda74} (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\{80ef304a-b1c4-425c-8535-95ab6f1eefb8} (Trojan.BHO) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\digifast (Trojan.Agent) -> No action taken.
      HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sofatnet (Backdoor.Bot) -> No action taken.
      HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sofatnet (Backdoor.Bot) -> No action taken.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sofatnet (Backdoor.Bot) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\BHO_CPV.dll (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\AppID\MJCore.dll (Trojan.BHO) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\DigiFast (Trojan.Agent) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Malware.Trace) -> No action taken.
      HKEY_CURRENT_USER\SOFTWARE\PlayMP3 (Adware.PLayMP3z) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe (Security.Hijack) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PlayMP3 (Adware.PLayMP3z) -> No action taken.
      HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbiwkmohrxdxgt (Rootkit.TDSS) -> No action taken.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\trialreset (Hacktool.Agent) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstInstallFlag (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mEv (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\udso (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateNew (Malware.Trace) -> No action taken.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      C:\Users\yanick\AppData\Roaming\cft (Trojan.Downloader) -> No action taken.
      C:\Users\yanick\AppData\Roaming\digifast (Trojan.Agent) -> No action taken.
      C:\Users\yanick\AppData\Roaming\pridl (Trojan.Downloader) -> No action taken.
      C:\Program Files\Jcore (Trojan.BHO) -> No action taken.
      C:\Program Files\Protection System (Rogue.ProtectionSystem) -> No action taken.
      C:\Program Files\WWShow (Trojan.Agent) -> No action taken.

      Fichier(s) infecté(s):
      c:\Windows\System32\BtwSrv.dll (Trojan.Agent) -> No action taken.
      C:\Program Files\WWShow\WWShow.dll (Trojan.BHO) -> No action taken.
      C:\Program Files\Jcore\Jcore2.dll (Trojan.BHO) -> No action taken.
      C:\Program Files\PrimoAdsForYou\PrimoAdsForYou.dll (Adware.PlayMP3z) -> No action taken.
      C:\$Recycle.Bin\S-1-5-21-4191197368-1104576499-139493477-1000\$R3Q6RR8.tmp (Backdoor.Bot) -> No action taken.
      C:\ToolBar SD\Backup-TB\Program Files\PlayMP3z\PlayMP3.exe (Adware.PlayMP3z) -> No action taken.
      C:\Users\yanick\AppData\Roaming\pridl\pridl.exe (Trojan.Downloader) -> No action taken.
      C:\Windows\System32\kbiwkmnblufmws.dll (Rootkit.TDSS) -> No action taken.
      C:\Windows\System32\kbiwkmvfxqoptv.dll (Rootkit.TDSS) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3HUW09UW\w[2].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3HUW09UW\w[3].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3HUW09UW\w[4].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3HUW09UW\w[5].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3HUW09UW\w[6].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\464ELODF\w[1].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HAYSAZR\w[2].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HAYSAZR\w[4].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HAYSAZR\w[5].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HAYSAZR\w[6].bin (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HAYSAZR\w[7].bin (Backdoor.Bot) -> No action taken.
      C:\Users\yanick\AppData\Roaming\digifast\config.cfg (Trojan.Agent) -> No action taken.
      C:\Users\yanick\AppData\Roaming\digifast\DFUninstall.exe (Trojan.Agent) -> No action taken.
      C:\Users\yanick\AppData\Roaming\digifast\digifast.exe (Trojan.Agent) -> No action taken.
      C:\Windows\System32\drivers\kbiwkmbrufpimp.sys (Rootkit.TDSS) -> No action taken.
      C:\Windows\System32\FInstall.sys (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\kbiwkmlcjltqek.dat (Rootkit.TDSS) -> No action taken.
      C:\Windows\System32\sofatnet.exe (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\wiawow32.sys (Backdoor.Bot) -> No action taken.
      C:\Windows\System32\wiwow64.exe (Backdoor.Bot) -> No action taken.
      C:\Windows\regx32.exe (Hacktool.Agent) -> No action taken.
      C:\Windows\sc.exe (Trojan.FakeAlert) -> No action taken.
      0
  2. yakke
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:23:52, on 11/09/2009
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16890)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\ASUS\AASP\1.00.77\aaCenter.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    C:\Windows\regx32.exe
    C:\Windows\ZSSnp211.exe
    C:\Windows\Domino.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Steam\Steam.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\uTorrent\uTorrent.exe
    C:\Users\yanick\AppData\Roaming\pridl\pridl.exe
    C:\Users\yanick\AppData\Roaming\Microsoft\Windows\giabbt.exe
    C:\Users\yanick\AppData\Roaming\digifast\digifast.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\conime.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
    R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: CPV - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - C:\Program Files\WWShow\WWShow.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: PrimoAdsForYou - {D35DA2A5-1D09-03BB-FE6E-C569BE05CFA0} - C:\Program Files\PrimoAdsForYou\PrimoAdsForYou.dll
    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O2 - BHO: MJCore - {D88E1558-7C2D-407A-953A-C044F5607CEA} - C:\Program Files\Jcore\Jcore2.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: IsoBuster Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
    O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
    O4 - HKLM\..\Run: [TrialReset] C:\Windows\regx32.exe
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
    O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
    O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
    O4 - HKCU\..\Run: [pridl] "C:\Users\yanick\AppData\Roaming\pridl\pridl.exe" no
    O4 - HKCU\..\Run: [SfKg6wIPuSpdc] C:\Users\yanick\AppData\Roaming\Microsoft\Windows\giabbt.exe
    O4 - HKCU\..\Run: [DigiFast] C:\Users\yanick\AppData\Roaming\DigiFast\digifast.exe
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'Default user')
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
    O13 - Gopher Prefix:
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
    O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
    O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
    O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: sofatnet Service (sofatnet) - Sigma Designs In - C:\Windows\system32\sofatnet.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
    0
  3. Mike
     
    re,

    Télécharger Toolbar-S&D (Team IDN) sur votre Bureau.

    /|\ Désactivez antivirus, /|\

    • Installez Toolbar-S&D.exe.
    • Lancer Toolbar-S&D en cliquant sur le raccourci créé ,
    • Sélectionner l’option 1- Recherche et valider
    >> Attendre que la recherche soit complétée,
    Sauvegarder "sur le bureau" le rapport TB.txt sous TB_1.txt

    Relancer Toolbar-S&D en cliquant sur le raccourci créé
    • Sélectionner l’option 1- Suppression et valider
    >> Ne fermer pas la fenêtre lors de la suppression !
    ► Postez le rapport qui s'ouvrira et TB_1.txt.

    /|\ Réactivez antivirus, /|\

    Si votre Bureau ne réapparaît pas,
    Appuyer sur Ctrl-Alt-Suppr,
    -> Fichier -> nouvelle tâche (Exécuter..), entrez explorer et valider.
    _________________________________________________________

    Relancez HijackThis,
    • Appuyer sur [Do a scan system only]
    • Fermer les navigateurs et autre applications,
    • Cochez toutes les lignes suivantes
    • Et appuyer sur [Fix Checked]

    O2 - BHO: CPV - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - C:\Program Files\WWShow\WWShow.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: PrimoAdsForYou - {D35DA2A5-1D09-03BB-FE6E-C569BE05CFA0} - C:\Program Files\PrimoAdsForYou\PrimoAdsForYou.dll
    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O2 - BHO: MJCore - {D88E1558-7C2D-407A-953A-C044F5607CEA} - C:\Program Files\Jcore\Jcore2.dll
    O3 - Toolbar: IsoBuster Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

    O4 - HKCU\..\Run: [pridl] "C:\Users\yanick\AppData\Roaming\pridl\pridl.exe" no
    O4 - HKCU\..\Run: [SfKg6wIPuSpdc] C:\Users\yanick\AppData\Roaming\Microsoft\Windows\giabbt.exe
    O4 - HKCU\..\Run: [DigiFast] C:\Users\yanick\AppData\Roaming\DigiFast\digifast.exe
    O4 - HKCU\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w
    O4 - HKUS\S-1-5-18\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'Default user')
    O23 - Service: sofatnet Service (sofatnet) - Sigma Designs In - C:\Windows\system32\sofatnet.exe

    ► Redémarrer le PC.
    ____________________________________________________________

    • Afficher les fichiers & répertoires cachés

    Aller supprimer ces fichiers et répertoires :
    C:\Program Files\WWShow\WWShow.dll
    C:\Program Files\WWShow
    C:\Program Files\PrimoAdsForYou\PrimoAdsForYou.dll
    C:\Program Files\PrimoAdsForYou
    C:\Program Files\Jcore\Jcore2.dll
    C:\Program Files\Jcore
    C:\Users\yanick\AppData\Roaming\pridl\pridl.exe
    C:\Users\yanick\AppData\Roaming\pridl
    C:\Users\yanick\AppData\Roaming\Microsoft\Windows\giabbt.exe
    C:\Users\yanick\AppData\Roaming\DigiFast\digifast.exe
    C:\Users\yanick\AppData\Roaming\DigiFast
    C:\Windows\TEMP\msxm192z.dll
    C:\Windows\system32\sofatnet.exe

    Donnez des nouvelles de ces suppressions..
    merci.

    ____________________________________________________________

    Téléchargez Malwarebytes
    • Lancez l'installation,
    • Dans [Settings] vous pouvez mettre en Français.
    • Faites la [Mise à jours] de Malwarebytes.
    • Dans [Recherche] sélectionnez [Exécuter un examen Complet],
    • Après le scan, appuyer sur >>>>> [Supprimer la sélection].
    >> Redémarrer si nécessaire..
    ► Postez le rapport de Malwarebytes.
    ____________________________________________________________

    CCleaner - Nettoyage des fichiers temporaires, Cookies..

    Téléchargez CCleaner version Slim
    • Installer et lancer CCleaner,
    • Décochez la mise à jour automatique,
    •.Lancez Ccleaner avec l'icône créé sur le bureau,

    • Cliquez sur Option et --> Avancé et Décochez >> Effacer uniquement les fichiers temporaire .. de plus de 48 heures,
    • Sélectionnez "Nettoyeur" et cliquez sur -->"Windows", allez à la section "Avancé",
    • Et cochez uniquement la première case "Vieilles données du perfetch",
    • Sélectionnez le bouton [Analyse]..
    • Lorsque complété, cliquer sur [Nettoyage] aussi souvent..que nécessaire, jusqu’à ce que la fenêtre soit vidée.

    Lorsque ce nettoyage est complété.
    Remettre les options standard, pour une utilisation au quotidien.
    • Allez Recocher les dans les Options --> "Avancé" : Effacer uniquement les fichiers temporaire .. de plus de 48 heures
    • Et Décocher "Vieilles données du perfetch" dans Nettoyeur --> Windows

    Utiliser CCleaner après chaque session sur le net, installation de logiciels et/ou avant de fermer le PC.
    ____________________________________________________________

    Utiler RSIT (première procédure) pour produire le rapport Log.txt qui montre davantage d'info.
    Avec le nombre d'infection sur vote PC. Ça serait un minimum requis.
    ► Et postez ce rapport Log.txt

    Aussi au lieu de la vresion dévaluation d'ESET.

    Installer Antivir qui est très très performant mêem dans sa version gratruite.

    Si vous choisissiez de changer d'antivirus.

    Téléchargez Antivir
    • Désinstallerr ESET
    • Installer Antivir 9.0.0.67,
    • Faites la màj comme cela
    • Paramétrez Antivir efficacement
    • Redémarrer en mode sans échec
    • Lancer un scan "Complet"
    ► Postez le rapport.
    0
    1. yakke
       
      voici le rappot de la recherge de toolbat s&d


      -----------\\ ToolBar S&D 1.2.9 XP/Vista

      Microsoft® Windows Vista™ Édition Intégrale ( v6.0.6000 )
      X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
      BIOS : BIOS Date: 11/03/08 16:15:26 Ver: 08.00.14
      USER : yanick ( Administrator )
      BOOT : Normal boot
      Antivirus : ESET Smart Security 3.0 3.0 (Activated)
      Firewall : Pare-feu personnel d'ESET 3.0.669.0 (Not Activated)
      C:\ (Local Disk) - NTFS - Total:298 Go (Free:167 Go)
      D:\ (CD or DVD)
      E:\ (USB)
      F:\ (USB)
      G:\ (USB)
      H:\ (USB)
      I:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
      Option : [1] ( dim. 20/09/2009|20:47 )

      [ UAC => 1 ]

      -----------\\ Recherche de Fichiers / Dossiers ...

      C:\Program Files\DAEMON Tools Toolbar
      C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      C:\Program Files\DAEMON Tools Toolbar\Resources
      C:\Program Files\DAEMON Tools Toolbar\uninst.exe
      C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
      C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\az.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
      C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dtt16.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\dtt32.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\favicon.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\GameS.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\GameSA.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
      C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\hide.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\ImageS.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\ImageSA.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
      C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
      C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioE.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioG.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioL.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioM.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioN.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\RadioW.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\rbcheck.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\rbtxt.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RssA.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RssA1.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\RssRefresh.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\s2.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\show.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\style.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
      C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_mute.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
      C:\Program Files\DAEMON Tools Toolbar\Resources\WebS.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\WebSa.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi14.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
      C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
      C:\Users\yanick\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\PlayMP3z
      C:\Program Files\PlayMP3z
      C:\Program Files\PlayMP3z\PlayMP3.exe
      C:\Program Files\PlayMP3z\uninstall.exe

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\Windows\\system32\\blank.htm"
      "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"
      "Start Page"="https://www.google.be/?gws_rd=ssl"
      "Url"="https://www.msn.com/fr-fr/actualite/"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="https://fr.yahoo.com/"
      "Default_Page_URL"="https://fr.yahoo.com/"
      "Default_Search_URL"="http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/"
      "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"


      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\Users\yanick\Documents\muziek\Nero_8.3.2.1_Lite_Europe_Keygen_by_AkTivisT.rar


      [ UAC => 1 ]


      1 - "C:\ToolBar SD\TB_1.txt" - lun. 21/09/2009| 0:44 - Option : [1]

      -----------\\ Fin du rapport a 0:44:41,78
      0
    2. yakke
       
      voici quand jai suprime de toolbar s&d



      -----------\\ ToolBar S&D 1.2.9 XP/Vista

      Microsoft® Windows Vista™ Édition Intégrale ( v6.0.6000 )
      X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5200+ )
      BIOS : BIOS Date: 11/03/08 16:15:26 Ver: 08.00.14
      USER : yanick ( Administrator )
      BOOT : Normal boot
      Antivirus : ESET Smart Security 3.0 3.0 (Activated)
      Firewall : Pare-feu personnel d'ESET 3.0.669.0 (Not Activated)
      C:\ (Local Disk) - NTFS - Total:298 Go (Free:171 Go)
      D:\ (CD or DVD)
      E:\ (USB)
      F:\ (USB)
      G:\ (USB)
      H:\ (USB)
      I:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
      Option : [2] ( lun. 21/09/2009| 0:56 )

      [ UAC => 1 ]

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
      Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
      Supprime! - C:\Users\yanick\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\PlayMP3z
      Supprime! - C:\Program Files\PlayMP3z\PlayMP3.exe
      Supprime! - C:\Program Files\PlayMP3z\uninstall.exe
      Supprime! - C:\Program Files\DAEMON Tools Toolbar
      Supprime! - C:\Program Files\PlayMP3z

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\Windows\\system32\\blank.htm"
      "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"
      "Start Page"="https://www.google.be/?gws_rd=ssl"
      "Url"="https://www.msn.com/fr-fr/actualite/"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="https://fr.yahoo.com/"
      "Default_Page_URL"="https://fr.yahoo.com/"
      "Default_Search_URL"="http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*https://fr.search.yahoo.com/"
      "Search Page"="http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*https://fr.search.yahoo.com/"


      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\Users\yanick\Documents\muziek\Nero_8.3.2.1_Lite_Europe_Keygen_by_AkTivisT.rar


      [ UAC => 1 ]


      1 - "C:\ToolBar SD\TB_1.txt" - lun. 21/09/2009| 0:44 - Option : [1]
      2 - "C:\ToolBar SD\TB_2.txt" - lun. 21/09/2009| 4:10
      0
  4. yakke
     
    Toolbar-S&D ne ùache pas chez moi :s:s:
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Mike
     
    re,

    Pour ToolBar SD
    Aviez vous désactiver complètement votre antivirus, ça vient probablement de la !?.

    Pour le reste, (c'est important l'infection que vous avez.)
    Vous devez supprimer ça rapidement, avec un minimum de redémarrage du pc.
    Sinon l'infection ce re-propagera .

    Faites toutes les procédures qui viennent après ToolBar SD et postez les rapports.
    Et ensuite allez à ce message (message #1)
    Et télécharger / lancer RSIT, qui produira un rapport contenant Hijakcthis et davantage d'info qui permettront de retracer un maximum d'infection, si c'est le cas !
    0
  7. Mike
     
    re,

    Good !

    continuer avec les autre procédures de ce >> message <<, pour les suppressions de fichiers et répertoires et postez le rapport Malwarebytes.

    Et ensuite vous utiliserez Rsit et posterez le rapport Log.txt
    0
  8. Mike
     
    re,

    Essayer de poster vos message en bas complètement, à la suite des autre, parce que ça la ça va être compliqué de suivre ..

    Avec malwarebytes vous avez supprimer aucune détection (-> No action taken. )
    Aller dans [Quarantaine] et [Supprimer tout].. > redémarrer le pc.

    Avec tout ce qu'il y a dans malwarebytes ça prendrait vraiment un rapport rsit !
    0
  9. Santone
     
    bonjour, j'ai quelques soucis avec mon ordinateur et je n'arrive a regler ça. je vous fais un post Hijackthis pour voir si vous pouvez m'aider, merci.
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:36:02, on 10/10/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18294)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
    C:\Program Files\Elantech\ETDCtrl.exe
    C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
    C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\msa.exe
    C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
    C:\Program Files\ASUS\ASUS Live Update\ALU.exe
    C:\Program Files\ASUS\ATK Media\DMedia.exe
    C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
    C:\Windows\AsScrPro.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program files\P4G\BatteryLife.exe
    C:\Users\Toine\AppData\Local\Temp\cgge3pd5o1.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
    C:\Program Files\CCleaner\CCleaner.exe
    C:\Windows\system32\rundll32.exe
    C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
    C:\Users\Toine\Downloads\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.44.254:3128
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
    O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
    O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
    O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
    O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
    O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
    O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
    O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
    O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
    O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
    O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKCU\..\Run: [Login Software 2009] C:\Users\Toine\AppData\Local\Temp\cgge3pd5o1.exe
    O4 - HKCU\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'Default user')
    O4 - Global Startup: Bluetooth.lnk = ?
    O4 - Global Startup: FancyStart daemon.lnk = ?
    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
    O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: fastnetsrv Service (fastnetsrv) - Sigma Designs In - C:\Windows\system32\FastNetSrv.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
    O23 - Service: SRS Volume Sync Service (SRS_VolSync_Service) - SRS Labs, Inc. - C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
    0