Anti virus bloqué

J'espère que je n'ai pas fait de conneries, car malgré que j'ai désactivé mon anti virus et par feu combofix me signalait qu'ils étaient activés alors c'était à mes risques et périls
merci encore et voilà le rapport


ComboFix 09-10-08.04 - Souâd 10/10/2009 2:26.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1937 [GMT 2:00]
Lancé depuis: c:\users\Souâd\Desktop\ComboFix.exe
AV: Antivirus BitDefender *On-access scanning enabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: Pare-feu BitDefender *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
SP: BitDefender AntiSpam *enabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1115839460-3346716925-1851633873-500
c:\windows\Downloaded Program Files\popcaploader.dll
c:\windows\Downloaded Program Files\popcaploader.inf

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-10 au 2009-10-10 ))))))))))))))))))))))))))))))))))))
.

2009-10-10 00:34 . 2009-10-10 00:34 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-10-08 20:52 . 2009-10-08 20:55 -------- d-----w- c:\program files\ZHPDiag
2009-10-07 21:08 . 2009-10-07 21:08 -------- d-sh--w- c:\users\SouÔd
2009-10-07 19:33 . 2009-10-07 21:06 -------- d-----w- c:\program files\Ad-Remover
2009-10-04 19:15 . 2009-10-04 19:45 -------- d-----w- C:\ToolBar SD
2009-10-04 18:47 . 2009-10-04 20:57 -------- d-----w- c:\program files\Navilog1
2009-10-04 18:44 . 2009-10-04 18:44 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-10-04 15:16 . 2009-10-04 15:17 -------- d-----w- C:\rsit
2009-10-04 15:16 . 2009-10-04 15:16 -------- d-----w- c:\program files\trend micro
2009-10-02 20:23 . 2009-10-06 18:38 -------- d-----w- c:\program files\Microsoft Silverlight
2009-10-02 20:23 . 2009-10-02 20:23 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-02 20:22 . 2009-10-02 20:22 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-10-02 20:21 . 2006-11-29 11:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2009-10-02 20:21 . 2009-10-02 20:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-10-02 20:20 . 2009-10-02 20:23 -------- d-----w- c:\program files\Microsoft
2009-10-01 21:14 . 2009-10-01 21:16 -------- d-----w- c:\programdata\IM
2009-10-01 21:14 . 2009-10-01 21:14 -------- d-----w- c:\programdata\IncrediMail
2009-10-01 21:14 . 2009-10-01 21:14 -------- d-----w- c:\program files\IncrediMail
2009-09-24 21:35 . 2009-10-09 09:46 815 ----a-w- C:\rtsr_eml_sr.dat
2009-09-24 21:35 . 2009-10-09 09:46 141 ----a-w- C:\dwl.dat
2009-09-24 21:35 . 2009-10-08 22:19 132 ----a-w- C:\httpdwl.dat
2009-09-24 20:19 . 2009-09-24 20:19 16 ----a-w- C:\asdict.dat
2009-09-21 18:03 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-21 18:03 . 2009-10-04 19:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-21 18:03 . 2009-09-21 18:03 -------- d-----w- c:\programdata\Malwarebytes
2009-09-21 18:03 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-21 17:59 . 2009-09-21 17:59 -------- d-----w- c:\program files\CCleaner
2009-09-16 20:04 . 2009-09-16 20:04 -------- d-----w- c:\programdata\PC Drivers HeadQuarters
2009-09-15 20:29 . 2009-09-15 20:29 -------- d-----w- c:\program files\Avanquest update
2009-09-15 20:28 . 2009-09-15 20:28 -------- d-----w- c:\programdata\BVRP Software
2009-09-15 20:28 . 2009-09-15 20:28 -------- d-----w- c:\program files\Motorola Phone Tools
2009-09-15 18:12 . 2009-09-15 18:13 -------- d-----w- c:\windows\system32\ca-ES
2009-09-15 18:12 . 2009-09-15 18:13 -------- d-----w- c:\windows\system32\eu-ES
2009-09-15 18:12 . 2009-09-15 18:13 -------- d-----w- c:\windows\system32\vi-VN
2009-09-15 17:55 . 2009-09-15 17:55 -------- d-----w- c:\program files\Motorola
2009-09-15 17:53 . 2009-09-15 17:53 -------- d-----w- c:\program files\Utilitaire de configuration iPhone
2009-09-15 17:52 . 2009-05-18 12:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-09-15 17:52 . 2008-04-17 11:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2009-09-15 17:51 . 2009-09-15 17:51 -------- d-----w- c:\program files\iPod
2009-09-15 17:51 . 2009-09-15 17:52 -------- d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-15 17:51 . 2009-09-15 17:52 -------- d-----w- c:\program files\iTunes
2009-09-15 17:48 . 2009-09-15 17:49 -------- d-----w- c:\program files\QuickTime
2009-09-15 17:42 . 2009-09-15 17:42 -------- d-----w- c:\windows\system32\EventProviders
2009-09-15 17:15 . 1998-06-17 17:07 57344 ------w- c:\windows\system32\Mfc42loc.dll
2009-09-13 11:02 . 2009-08-14 16:27 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-09-13 11:02 . 2009-08-14 13:48 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-09-13 11:02 . 2009-08-14 13:49 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-09-13 11:02 . 2009-08-14 13:49 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-09-13 11:02 . 2009-08-14 13:49 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-09-13 11:02 . 2009-08-14 13:49 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-09-13 11:02 . 2009-08-14 13:49 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-09-13 11:02 . 2009-08-14 13:49 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-09-13 11:02 . 2009-08-14 13:49 10240 ----a-w- c:\windows\system32\finger.exe
2009-09-13 11:02 . 2009-08-14 13:48 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-09-13 11:02 . 2009-08-14 15:53 17920 ----a-w- c:\windows\system32\netevent.dll
2009-09-13 11:00 . 2009-04-11 06:28 499712 ----a-w- c:\windows\system32\wbem\WmiPrvSD.dll
2009-09-13 10:59 . 2009-04-11 06:28 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-09-13 10:59 . 2009-04-11 06:28 744448 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-09-13 10:59 . 2009-04-11 06:28 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-09-13 10:59 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-09-13 10:59 . 2009-04-11 06:28 189440 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-09-13 10:59 . 2009-04-11 06:28 614912 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-09-13 10:59 . 2009-04-11 06:28 265728 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-09-13 10:59 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-09-13 10:59 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-09-13 10:59 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-09-13 10:59 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-09-13 10:55 . 2009-04-11 06:28 1696768 ----a-w- c:\windows\system32\gameux.dll
2009-09-13 10:55 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-09-13 10:55 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-10 17:33 . 2009-09-10 17:33 -------- d-----w- c:\program files\ma-config.com
2009-09-10 17:33 . 2009-09-10 17:33 -------- d-----w- c:\programdata\ma-config.com

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-10 00:01 . 2008-01-21 08:40 669566 ----a-w- c:\windows\system32\perfh00C.dat
2009-10-10 00:01 . 2008-01-21 08:40 123556 ----a-w- c:\windows\system32\perfc00C.dat
2009-10-09 23:57 . 2009-01-11 15:57 -------- d-----w- c:\programdata\Google Updater
2009-10-09 09:46 . 2009-01-19 18:56 81984 ----a-w- c:\windows\system32\bdod.bin
2009-10-08 21:55 . 2008-03-27 02:28 -------- d-----w- c:\program files\Common Files\Adobe
2009-10-02 20:22 . 2008-11-12 15:47 -------- d-----w- c:\program files\Windows Live
2009-09-23 19:04 . 2009-03-13 08:49 -------- d-----w- c:\program files\Java
2009-09-15 20:47 . 2009-09-15 20:47 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-09-15 20:35 . 2009-09-15 20:35 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_motmodem_01005.Wdf
2009-09-15 20:29 . 2008-03-27 01:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-09-15 18:13 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-09-15 17:51 . 2009-01-27 16:12 -------- d-----w- c:\program files\Common Files\Apple
2009-09-09 17:37 . 2009-09-09 17:37 -------- d-----w- c:\program files\Common Files\Motorola Shared
2009-08-23 22:31 . 2009-08-23 21:55 -------- d-----w- c:\program files\Notepad++
2009-08-22 13:59 . 2009-02-12 14:52 104456 ----a-w- c:\windows\system32\drivers\bdfndisf.sys
2009-08-22 13:40 . 2009-08-22 13:37 -------- d-----w- c:\programdata\BitDefender
2009-08-22 13:37 . 2009-08-22 13:36 -------- d-----w- c:\program files\Common Files\BitDefender
2009-08-22 13:28 . 2009-08-22 13:27 98864 ----a-w- C:\BdUninstallTool2009.08.22-03.27.31.reg
2009-08-14 16:16 . 2008-11-12 19:39 -------- d-----w- c:\programdata\Yahoo! Companion
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 03:23 . 2009-03-13 08:50 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-21 21:52 . 2009-09-01 19:43 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-09-01 19:43 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-09-01 19:43 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-09-01 19:43 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-17 13:54 . 2009-08-14 16:28 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-15 12:40 . 2009-08-14 16:23 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-07-15 12:39 . 2009-08-14 16:23 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-15 12:39 . 2009-08-14 16:23 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-07-15 12:39 . 2009-08-14 16:23 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-03-05 16:08 . 2009-08-24 16:32 49664 ----a-w- c:\program files\mozilla firefox\components\FFComm.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0BC6E3FA-78EF-4886-842C-5A1258C4455A}"= "c:\program files\AGI\common\agcutils.dll" [2009-04-19 43520]

[HKEY_CLASSES_ROOT\clsid\{0bc6e3fa-78ef-4886-842c-5a1258c4455a}]
[HKEY_CLASSES_ROOT\agcutils.AGSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{647B16D8-AD7B-4983-82D7-82A270FC9E6D}]
[HKEY_CLASSES_ROOT\agcutils.AGSearchHook]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-01-03 01:00 39472 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-12-07 39408]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-02-04 23975720]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2009-10-01 271744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2008-03-11 92704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-03-11 8534560]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-03-11 88608]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2008-01-24 102400]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-02-25 518656]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-11-22 178712]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-01-02 707080]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2008-01-22 200704]
"PLFSet"="c:\windows\PLFSet.dll" [2007-04-25 45056]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"NeroCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-08 305440]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-01-24 4702208]

c:\users\Souƒd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Notification de cadeaux MSN.lnk - c:\users\Souƒd\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-8-30 135680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-3-27 535336]
SETAUDIO.EXE [2008-4-4 20480]
SETRES.EXE [2008-4-4 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"FilterAdministratorToken"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):be,4c,ee,47,31,36,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{50EE9C1C-53B4-4D7B-B7E5-B1247A916E35}"= c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
"{9646821E-AA4D-4EBB-91DE-C16DBFAA16AB}"= c:\program files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
"{F7C96D37-D50D-474C-BC72-0B4DCDB7F566}"= c:\program files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
"{8B91EBA4-FCB5-4048-BA9C-DED98F7F4709}"= c:\program files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
"{4E58F5DB-0C95-4DA2-BC92-AAB96FFF4056}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{0E4A5ED0-3552-44DD-B6F9-CA2CDCBCF20C}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{77364ED0-8AA0-4922-93B1-260CEDC14984}"= c:\program files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
"{F355C2CD-0FC6-4AF0-AAD8-780A25FFAFE9}"= c:\program files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie
"{481D2CDD-D76A-4BFF-9BED-A57A38D87397}"= c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program
"TCP Query User{333A6DF4-9B93-4558-8311-5EA7B60DADC9}c:\\program files\\adsltv\\vlc.exe"= UDP:c:\program files\adsltv\vlc.exe:VLC media player
"UDP Query User{C672B28F-0AC8-4C33-8A07-D4FBB6EA5FCB}c:\\program files\\adsltv\\vlc.exe"= TCP:c:\program files\adsltv\vlc.exe:VLC media player
"TCP Query User{73E17627-3E9F-4897-A0E6-72E10626C626}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{4DC9A8F2-AE20-42CB-B277-E4EF69AD2EE8}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"{0CA4AC01-948F-407E-A66F-FA9FD993FBA7}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{C73E5082-0404-4925-B5CF-CB7730B2AB09}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{DCB5DA3A-E1EE-45D5-816F-67530C41077D}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{EB4E91B1-10BA-4433-ACE2-4F58128ECFE6}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{C161A0B9-1B91-4CF4-A63C-B42A08E658F9}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{134351EB-6160-4449-920C-28AB770FF5E9}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{52FD2A45-9016-4C73-A39B-4CBE41A0355A}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{9BCFCBD0-5A26-4AEB-B753-B5286A933236}"= Disabled:UDP:c:\program files\IncrediMail\Bin\ImpCnt.exe:IncrediMail
"{553715F2-0541-4389-90A8-A27DE0A20BAE}"= Disabled:TCP:c:\program files\IncrediMail\Bin\ImpCnt.exe:IncrediMail
"{74F877FB-E759-4094-AE88-A6B2A5B69667}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live FolderShare
"{82617375-6B92-47D9-A6F0-C5F2EF4607B2}"= Disabled:UDP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail
"{60D3F555-C2DD-47E1-BE68-CBF6EECB23C0}"= Disabled:TCP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail
"{FCDF34A0-945D-495B-948B-E6FCBED78CA8}"= Disabled:UDP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{37725786-190A-40B5-A701-48988C69016B}"= Disabled:TCP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{F39B8071-F8B9-4072-9E7D-011240A14A5A}"= Disabled:UDP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{70E28A11-4D88-4027-A54F-003343ED12F5}"= Disabled:TCP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{BCB38CCD-95A6-4D2E-9052-27194C484536}"= Disabled:UDP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail
"{919F236F-66DB-47BA-8D54-23B8065B3413}"= Disabled:TCP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDSMgr.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDStbmngr.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDSMgr.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDStbmngr.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [23/05/2008 12:52 41456]
R2 AGWinService;AG Windows Service;c:\program files\AGI\common\win32\pythonservice.exe [19/04/2009 17:06 10240]
R2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [27/03/2008 05:02 51200]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [06/10/2008 18:16 82696]
R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [18/09/2008 12:09 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\System32\drivers\bdfndisf.sys [12/02/2009 16:52 104456]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [27/03/2008 11:22 43008]
S3 A310;AVerMedia A310 DVB-T;c:\windows\System32\drivers\AVerA310USB.sys [27/03/2008 11:22 26752]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [20/01/2009 19:16 172032]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [27/03/2008 11:22 179712]
S3 BDASwCap;AVerMedia A310 BDA DVBT Capture Device;c:\windows\System32\drivers\AVerA310Cap.sys [27/03/2008 11:22 42752]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-10-09 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-07 19:54]

2009-10-10 c:\windows\Tasks\User_Feed_Synchronization-{770596D8-6ECF-4E56-9BE9-FCFCAB51A966}.job
- c:\windows\system32\msfeedssync.exe [2009-09-01 20:13]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://mystart.incredimail.com/
mWindow Title =
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Envoyer à &Bluetooth - c:\program files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
Trusted Zone: secuser.com\www
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
FF - ProfilePath - c:\users\Souâd\AppData\Roaming\Mozilla\Firefox\Profiles\by4xkehz.default\
FF - prefs.js: browser.search.selectedEngine - MyStart Search
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=
FF - prefs.js: browser.startup.homepage - hxxp://mystart.incredimail.com/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=
FF - prefs.js: browser.search.selectedEngine - MyStart Search
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-ALaunch - c:\acer\ALaunch\AlaunchClient.exe
HKLM-Run-eRecoveryService - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-10 02:34
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(5328)
c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
c:\acer\Empowering Technology\EPOWER\SysHook.dll
.
Heure de fin: 2009-10-10 2:36
ComboFix-quarantined-files.txt 2009-10-10 00:36

Avant-CF: 29 663 047 680 octets libres
Après-CF: 28 702 048 256 octets libres

310 --- E O F --- 2009-10-05 19:27

Bonjour

dois je comprendre qur tu as terminé de t'occuper de mon ordi ou tout simplement tu es occupé comme l'indique ta devise

**si je ne réponds pas de suite, c'est que moi aussi j'ai un­ métier et une famille **


Merci de me tenir au courant car j'ai toujours des blèmes sur mon ordi

Merci à toi

Bonsoir
J'ai fais ce que tu m'as demandé . Mais je n'ai pas eu directement une fenêtre bleu? d"abore des avertissements combofix périmé ...
apres la fenêtre bleu et je nai pas eu type 1 to continue.....il ascanner sans validation voilâ

Ci joint le rapport
et j'espère que cette fois ci tu ne m'oubliras pas, Snniffffff!!!!!!!!!!!!!

Merci

--------------------------------
ComboFix 09-10-08.04 - Souâd 18/10/2009 22:01.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1953 [GMT 2:00]
Lancé depuis: c:\users\Souâd\Desktop\Nettoyage\ComboFix.exe
Commutateurs utilisés :: c:\users\Souâd\Desktop\Nettoyage\CFScript.txt
AV: Antivirus BitDefender *On-access scanning enabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: Pare-feu BitDefender *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
SP: BitDefender AntiSpam *enabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
- Mode FONCTIONNALITES REDUITES -

FILE ::
"c:\program files\AGI\common\agcutils.dll"
"c:\windows\system32\NeroCheck.exe"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AGI\common\agcutils.dll
c:\windows\system32\NeroCheck.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-18 au 2009-10-18 ))))))))))))))))))))))))))))))))))))
.

2009-10-18 20:02 . 2009-10-18 20:02 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-10-18 20:02 . 2009-10-18 20:02 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-10-17 15:40 . 2009-09-14 09:29 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-10-17 15:40 . 2009-05-08 12:53 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-10-08 20:52 . 2009-10-08 20:55 -------- d-----w- c:\program files\ZHPDiag
2009-10-07 21:08 . 2009-10-07 21:08 -------- d-sh--w- c:\users\SouÔd
2009-10-07 19:33 . 2009-10-07 21:06 -------- d-----w- c:\program files\Ad-Remover
2009-10-04 19:15 . 2009-10-04 19:45 -------- d-----w- C:\ToolBar SD
2009-10-04 18:47 . 2009-10-04 20:57 -------- d-----w- c:\program files\Navilog1
2009-10-04 18:44 . 2009-10-04 18:44 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-10-04 15:16 . 2009-10-04 15:17 -------- d-----w- C:\rsit
2009-10-04 15:16 . 2009-10-04 15:16 -------- d-----w- c:\program files\trend micro
2009-10-02 20:23 . 2009-10-06 18:38 -------- d-----w- c:\program files\Microsoft Silverlight
2009-10-02 20:23 . 2009-10-02 20:23 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-02 20:22 . 2009-10-02 20:22 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-10-02 20:21 . 2006-11-29 11:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2009-10-02 20:21 . 2009-10-02 20:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-10-02 20:20 . 2009-10-02 20:23 -------- d-----w- c:\program files\Microsoft
2009-10-01 21:14 . 2009-10-01 21:16 -------- d-----w- c:\programdata\IM
2009-10-01 21:14 . 2009-10-01 21:14 -------- d-----w- c:\programdata\IncrediMail
2009-09-24 21:35 . 2009-10-11 20:15 132 ----a-w- C:\httpdwl.dat
2009-09-24 21:35 . 2009-10-11 20:15 815 ----a-w- C:\rtsr_eml_sr.dat
2009-09-24 21:35 . 2009-10-11 20:15 141 ----a-w- C:\dwl.dat
2009-09-24 20:19 . 2009-09-24 20:19 16 ----a-w- C:\asdict.dat
2009-09-21 18:03 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-21 18:03 . 2009-10-04 19:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-21 18:03 . 2009-09-21 18:03 -------- d-----w- c:\programdata\Malwarebytes
2009-09-21 18:03 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-21 17:59 . 2009-09-21 17:59 -------- d-----w- c:\program files\CCleaner

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-18 19:49 . 2008-01-21 08:40 669566 ----a-w- c:\windows\system32\perfh00C.dat
2009-10-18 19:49 . 2008-01-21 08:40 123556 ----a-w- c:\windows\system32\perfc00C.dat
2009-10-18 19:07 . 2009-01-11 15:57 -------- d-----w- c:\programdata\Google Updater
2009-10-18 19:02 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-10-17 16:23 . 2009-01-19 18:56 81984 ----a-w- c:\windows\system32\bdod.bin
2009-10-17 16:19 . 2008-03-27 02:45 -------- d-----w- c:\program files\Microsoft Works
2009-10-08 21:55 . 2008-03-27 02:28 -------- d-----w- c:\program files\Common Files\Adobe
2009-10-02 20:22 . 2008-11-12 15:47 -------- d-----w- c:\program files\Windows Live
2009-09-23 19:04 . 2009-03-13 08:49 -------- d-----w- c:\program files\Java
2009-09-16 20:04 . 2009-09-16 20:04 -------- d-----w- c:\programdata\PC Drivers HeadQuarters
2009-09-15 20:47 . 2009-09-15 20:47 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-09-15 20:35 . 2009-09-15 20:35 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_motmodem_01005.Wdf
2009-09-15 20:29 . 2009-09-15 20:29 -------- d-----w- c:\program files\Avanquest update
2009-09-15 20:29 . 2008-03-27 01:56 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-15 20:28 . 2009-09-15 20:28 -------- d-----w- c:\programdata\BVRP Software
2009-09-15 20:28 . 2009-09-15 20:28 -------- d-----w- c:\program files\Motorola Phone Tools
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-15 18:13 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-09-15 17:55 . 2009-09-15 17:55 -------- d-----w- c:\program files\Motorola
2009-09-15 17:53 . 2009-09-15 17:53 -------- d-----w- c:\program files\Utilitaire de configuration iPhone
2009-09-15 17:52 . 2009-09-15 17:51 -------- d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-15 17:52 . 2009-09-15 17:51 -------- d-----w- c:\program files\iTunes
2009-09-15 17:51 . 2009-09-15 17:51 -------- d-----w- c:\program files\iPod
2009-09-15 17:51 . 2009-01-27 16:12 -------- d-----w- c:\program files\Common Files\Apple
2009-09-15 17:49 . 2009-09-15 17:48 -------- d-----w- c:\program files\QuickTime
2009-09-10 17:33 . 2009-09-10 17:33 -------- d-----w- c:\program files\ma-config.com
2009-09-10 17:33 . 2009-09-10 17:33 -------- d-----w- c:\programdata\ma-config.com
2009-09-10 16:48 . 2009-10-17 15:41 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-09 17:37 . 2009-09-09 17:37 -------- d-----w- c:\program files\Common Files\Motorola Shared
2009-09-04 11:41 . 2009-10-17 15:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 00:27 . 2009-09-13 10:55 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-29 00:14 . 2009-09-13 10:55 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-08-27 05:22 . 2009-10-17 15:41 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-27 05:17 . 2009-10-17 15:41 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-08-27 05:17 . 2009-10-17 15:41 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-08-27 03:42 . 2009-10-17 15:41 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-08-23 22:31 . 2009-08-23 21:55 -------- d-----w- c:\program files\Notepad++
2009-08-22 13:59 . 2009-02-12 14:52 104456 ----a-w- c:\windows\system32\drivers\bdfndisf.sys
2009-08-22 13:40 . 2009-08-22 13:37 -------- d-----w- c:\programdata\BitDefender
2009-08-22 13:37 . 2009-08-22 13:36 -------- d-----w- c:\program files\Common Files\BitDefender
2009-08-22 13:28 . 2009-08-22 13:27 98864 ----a-w- C:\BdUninstallTool2009.08.22-03.27.31.reg
2009-08-14 16:27 . 2009-09-13 11:02 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-08-14 15:53 . 2009-09-13 11:02 17920 ----a-w- c:\windows\system32\netevent.dll
2009-08-14 13:49 . 2009-09-13 11:02 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-08-14 13:49 . 2009-09-13 11:02 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-08-14 13:49 . 2009-09-13 11:02 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-08-14 13:49 . 2009-09-13 11:02 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-08-14 13:49 . 2009-09-13 11:02 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-08-14 13:49 . 2009-09-13 11:02 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-08-14 13:49 . 2009-09-13 11:02 10240 ----a-w- c:\windows\system32\finger.exe
2009-08-14 13:48 . 2009-09-13 11:02 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-08-14 13:48 . 2009-09-13 11:02 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-08-04 17:52 . 2009-08-04 17:52 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-08-04 12:34 . 2009-10-17 15:41 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 12:34 . 2009-10-17 15:41 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 03:23 . 2009-03-13 08:50 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-03-05 16:08 . 2009-08-24 16:32 49664 ----a-w- c:\program files\mozilla firefox\components\FFComm.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-01-03 01:00 39472 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-12-07 39408]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-02-04 23975720]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2008-03-11 92704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-03-11 8534560]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-03-11 88608]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2008-01-24 102400]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-02-25 518656]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-11-22 178712]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-01-02 707080]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2008-01-22 200704]
"PLFSet"="c:\windows\PLFSet.dll" [2007-04-25 45056]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-08 305440]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-01-24 4702208]

c:\users\Souƒd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Notification de cadeaux MSN.lnk - c:\users\Souƒd\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-8-30 135680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-3-27 535336]
SETAUDIO.EXE [2008-4-4 20480]
SETRES.EXE [2008-4-4 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"FilterAdministratorToken"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):be,4c,ee,47,31,36,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{50EE9C1C-53B4-4D7B-B7E5-B1247A916E35}"= c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
"{9646821E-AA4D-4EBB-91DE-C16DBFAA16AB}"= c:\program files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
"{F7C96D37-D50D-474C-BC72-0B4DCDB7F566}"= c:\program files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
"{8B91EBA4-FCB5-4048-BA9C-DED98F7F4709}"= c:\program files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
"{4E58F5DB-0C95-4DA2-BC92-AAB96FFF4056}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{0E4A5ED0-3552-44DD-B6F9-CA2CDCBCF20C}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{77364ED0-8AA0-4922-93B1-260CEDC14984}"= c:\program files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
"{F355C2CD-0FC6-4AF0-AAD8-780A25FFAFE9}"= c:\program files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie
"{481D2CDD-D76A-4BFF-9BED-A57A38D87397}"= c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program
"TCP Query User{333A6DF4-9B93-4558-8311-5EA7B60DADC9}c:\\program files\\adsltv\\vlc.exe"= UDP:c:\program files\adsltv\vlc.exe:VLC media player
"UDP Query User{C672B28F-0AC8-4C33-8A07-D4FBB6EA5FCB}c:\\program files\\adsltv\\vlc.exe"= TCP:c:\program files\adsltv\vlc.exe:VLC media player
"TCP Query User{73E17627-3E9F-4897-A0E6-72E10626C626}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{4DC9A8F2-AE20-42CB-B277-E4EF69AD2EE8}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"{0CA4AC01-948F-407E-A66F-FA9FD993FBA7}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{C73E5082-0404-4925-B5CF-CB7730B2AB09}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{DCB5DA3A-E1EE-45D5-816F-67530C41077D}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{EB4E91B1-10BA-4433-ACE2-4F58128ECFE6}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{C161A0B9-1B91-4CF4-A63C-B42A08E658F9}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{134351EB-6160-4449-920C-28AB770FF5E9}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{52FD2A45-9016-4C73-A39B-4CBE41A0355A}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{9BCFCBD0-5A26-4AEB-B753-B5286A933236}"= Disabled:UDP:c:\program files\IncrediMail\Bin\ImpCnt.exe:IncrediMail
"{553715F2-0541-4389-90A8-A27DE0A20BAE}"= Disabled:TCP:c:\program files\IncrediMail\Bin\ImpCnt.exe:IncrediMail
"{74F877FB-E759-4094-AE88-A6B2A5B69667}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live FolderShare
"{82617375-6B92-47D9-A6F0-C5F2EF4607B2}"= Disabled:UDP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail
"{60D3F555-C2DD-47E1-BE68-CBF6EECB23C0}"= Disabled:TCP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail
"{FCDF34A0-945D-495B-948B-E6FCBED78CA8}"= Disabled:UDP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{37725786-190A-40B5-A701-48988C69016B}"= Disabled:TCP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{FF43884B-BB19-478F-B0CC-F2DC59E0994E}"= Disabled:UDP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{8DD12D52-CEFF-4C84-BACE-079B8C33ED78}"= Disabled:TCP:c:\program files\IncrediMail\Bin\IncMail.exe:IncrediMail
"{A86C6940-BBBA-468E-B3CA-7605ECF07292}"= Disabled:UDP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail
"{9B203E9C-243F-47B5-ABA6-13EEB9BD86B9}"= Disabled:TCP:c:\program files\IncrediMail\Bin\ImApp.exe:IncrediMail

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDSMgr.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDStbmngr.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDSMgr.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr
"c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDStbmngr.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [23/05/2008 12:52 41456]
R2 AGWinService;AG Windows Service;c:\program files\AGI\common\win32\pythonservice.exe [19/04/2009 17:06 10240]
R2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [27/03/2008 05:02 51200]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [06/10/2008 18:16 82696]
R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [18/09/2008 12:09 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\System32\drivers\bdfndisf.sys [12/02/2009 16:52 104456]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [27/03/2008 11:22 43008]
S3 A310;AVerMedia A310 DVB-T;c:\windows\System32\drivers\AVerA310USB.sys [27/03/2008 11:22 26752]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [20/01/2009 19:16 172032]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [27/03/2008 11:22 179712]
S3 BDASwCap;AVerMedia A310 BDA DVBT Capture Device;c:\windows\System32\drivers\AVerA310Cap.sys [27/03/2008 11:22 42752]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-10-18 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-07 19:54]

2009-10-18 c:\windows\Tasks\User_Feed_Synchronization-{770596D8-6ECF-4E56-9BE9-FCFCAB51A966}.job
- c:\windows\system32\msfeedssync.exe [2009-10-17 03:41]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://mystart.incredimail.com/
mWindow Title =
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Envoyer à &Bluetooth - c:\program files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
Trusted Zone: secuser.com\www
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
FF - ProfilePath - c:\users\Souâd\AppData\Roaming\Mozilla\Firefox\Profiles\by4xkehz.default\
FF - prefs.js: browser.search.selectedEngine - MyStart Search
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=
FF - prefs.js: browser.startup.homepage - hxxp://mystart.incredimail.com/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=
FF - prefs.js: browser.search.selectedEngine - MyStart Search
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

URLSearchHooks-{0BC6E3FA-78EF-4886-842C-5A1258C4455A} - c:\program files\AGI\common\agcutils.dll
HKLM-Run-NeroCheck - c:\windows\system32\NeroCheck.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-18 22:02
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2009-10-18 22:04
ComboFix-quarantined-files.txt 2009-10-18 20:04
ComboFix2.txt 2009-10-10 00:36

Avant-CF: 25 707 257 856 octets libres
Après-CF: 25 522 737 152 octets libres

283 --- E O F --- 2009-10-17 16:23