Alerte trojan c'est de pire en pire

A lire

Voici le rapport que tu m'as demandé:

List'em by g3n-h@ckm@n 1.1.3.1

Thx to Chiquitine29.....& CCM team

User : Flo (Administrateurs) # PC-DE-FLO
Update on 08/12/2009 by g3n-h@ckm@n ::::: 12:30
Start at: 18:33:30 | 08/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18828
Windows Firewall Status : Enabled

C:\ -> Disque fixe local | 149,04 Go (57,59 Go free) [VistaOS] | NTFS
D:\ -> Disque fixe local | 139,28 Go (122,55 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Windows\System32\smss.exe 544
C:\Windows\system32\csrss.exe 612
C:\Windows\system32\wininit.exe 672
C:\Windows\system32\csrss.exe 680
C:\Windows\system32\services.exe 732
C:\Windows\system32\lsass.exe 748
C:\Windows\system32\lsm.exe 756
C:\Windows\system32\winlogon.exe 780
C:\Windows\system32\svchost.exe 988
C:\Windows\system32\svchost.exe 1084
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe 1128
C:\Windows\system32\svchost.exe 1224
C:\Windows\System32\svchost.exe 1320
C:\Windows\system32\Ati2evxx.exe 1364
C:\Windows\System32\svchost.exe 1408
C:\Windows\System32\svchost.exe 1448
C:\Windows\system32\svchost.exe 1488
C:\Windows\system32\svchost.exe 1700
C:\Windows\system32\SLsvc.exe 1724
C:\Windows\system32\Ati2evxx.exe 1788
C:\Windows\system32\svchost.exe 1804
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe 568
C:\Windows\system32\WLANExt.exe 620
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe 704
C:\Program Files\ATKGFNEX\GFNEXSrv.exe 920
C:\Windows\system32\taskeng.exe 1512
C:\Windows\System32\spoolsv.exe 1508
C:\Program Files\Avira\AntiVir Desktop\sched.exe 1784
C:\Windows\system32\svchost.exe 1904
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 2076
C:\Windows\system32\svchost.exe 2124
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe 2160
C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2236
C:\Windows\system32\lxdxcoms.exe 2400
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe 2432
C:\Windows\system32\svchost.exe 2492
C:\Windows\system32\svchost.exe 2588
C:\Windows\System32\svchost.exe 2668
C:\Windows\system32\SearchIndexer.exe 2768
C:\Windows\system32\taskeng.exe 3844
C:\Windows\system32\Dwm.exe 3872
C:\Windows\Explorer.EXE 3940
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe 4016
C:\Program Files\ASUS\ASUS Live Update\ALU.exe 4040
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe 1884
C:\Program Files\ASUS\ATK Hotkey\HControl.exe 2984
C:\Program Files\Wireless Console 2\wcourier.exe 3208
C:\Program Files\P4G\BatteryLife.exe 2876
C:\Program Files\ASUS\Splendid\ACMON.exe 3260
C:\Windows\System32\ACEngSvr.exe 2576
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe 2484
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 1280
C:\Program Files\Java\jre6\bin\jusched.exe 3688
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe 1276
C:\Program Files\ASUS\ATK Hotkey\WDC.exe 3740
C:\Windows\RtHDVCpl.exe 3156
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe 976
C:\Program Files\Windows Media Player\wmpnscfg.exe 3244
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe 3472
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 4000
C:\Program Files\Windows Media Player\wmpnetwk.exe 3300
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe 3104
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 3980
C:\Program Files\ATKOSD2\ATKOSD2.exe 3448
C:\Program Files\ASUS\ATK Media\DMedia.exe 2572
C:\Windows\AsScrPro.exe 2196
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe 2892
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe 4328
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe 4368
C:\Windows\ehome\ehtray.exe 4396
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe 4412
C:\Windows\ehome\ehmsas.exe 4904
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe 5960
C:\Program Files\Windows Sidebar\sidebar.exe 1160
C:\Program Files\Windows Sidebar\sidebar.exe 4516
C:\Windows\system32\SearchProtocolHost.exe 3600
C:\Windows\system32\SearchFilterHost.exe 4268
C:\Users\Flo\Desktop\List_Killem\List_Kill'em.exe 344
C:\Windows\system32\conime.exe 5796
C:\Windows\system32\cmd.exe 5680
C:\Windows\system32\wbem\wmiprvse.exe 5468
C:\Users\Flo\AppData\Local\Temp\35A0.tmp\pv.exe 5160

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe
Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
RoboForm REG_SZ "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NO NAME> REG_SZ
Windows Defender REG_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
SynTPEnh REG_SZ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
StartCCC REG_SZ "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
RtHDVCpl REG_SZ RtHDVCpl.exe
P2Go_Menu REG_SZ "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
lxdxmon.exe REG_SZ "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
lxdxamon REG_SZ "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
HControlUser REG_SZ C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
Google Desktop Search REG_SZ "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
COMODO Internet Security REG_SZ "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
CLMLServer REG_SZ "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
avgnt REG_SZ "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
ATKOSD2 REG_SZ "C:\Program Files\ATKOSD2\ATKOSD2.exe"
ATKMEDIA REG_SZ C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
ASUS Screen Saver Protector REG_SZ C:\Windows\AsScrPro.exe
ASUS Camera ScreenSaver REG_SZ C:\Windows\AsScrProlog.exe
ADSMTray REG_SZ C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
Adobe_ID0EYTHM REG_SZ C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
Adobe_ID0ENQBO REG_SZ C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE
AdobeCS4ServiceManager REG_SZ "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
Adobe Acrobat Speed Launcher REG_SZ "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
Acrobat Assistant 8.0 REG_SZ "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
ACMON REG_SZ C:\Program Files\ASUS\Splendid\ACMON.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 0 (0x0)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 0 (0x0)
EnableUIADesktopToggle REG_DWORD 0 (0x0)
UacDisableNotify REG_DWORD 0 (0x0)
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\UIPI

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveAutoRun REG_DWORD 145 (0x91)
NoDriveTypeAutoRun REG_DWORD 145 (0x91)
HonorAutoRunSetting REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)
NoDriveAutoRun REG_DWORD 145 (0x91)
NoDriveTypeAutoRun REG_DWORD 145 (0x91)
HonorAutoRunSetting REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL C:\Windows\system32\guard32.dll

===============

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

===============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AE7CD045-E861-484f-8273-0445EE161910}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3
EapHost : 0x2
Wlansvc : 0x2
SharedAccess : 0x2
windefend : 0x2
wuauserv : 0x2

=========

=======
Drive :
=======

D‚fragmenteur de disque Windows
Copyright (c) 2006 Microsoft Corp.

Rapport d'analyse pour le volume C: VistaOS

Taille du volume = 149 Go
Espace libre = 57.60 Go
tendue d'espace libre la plus grande = 16.67 Go
Pourcentage de fragmentation des fichiers = 1 %

Remarqueÿ: sur les volumes NTFS, les fragments de fichiers de plus de 64ÿMo ne sont pas inclus dans les statistiques de fragmentation.

Il n'est pas n‚cessaire de d‚fragmenter ce volume.

==========
Programs
==========

7-Zip
Abbyy FineReader 6.0 Sprint
Activation Assistant for the 2007 Microsoft Office suites
Ad-Remover
Adobe
Adobe Media Player
Ashampoo
ASUS
Atheros
ATI
ATI Technologies
ATKGFNEX
ATKOSD2
Avira
Bonjour
CCleaner
Cisco
Common Files
COMODO
CyberLink
desktop.ini
Downloaded Installations
FileZilla FTP Client
Fingerprint Sensor
GIMP-2.0
Google
InstallShield Installation Information
Intel
Internet Explorer
IZArc
Java
JRE
LaBoiteACouleurs
Lexmark 3600-4600 Series
Lexmark Toolbar
Malwarebytes' Anti-Malware
Microsoft Games
Microsoft Office
Microsoft Visual Studio
Microsoft Visual Studio 8
Microsoft Works
Microsoft.NET
Movie Maker
Mozilla Firefox
MSBuild
MSXML 4.0
Multimedia Card Reader
NOS
Notepad++
Nvu
OpenOffice.org 3
P4G
PhotoFiltre
PSPad editor
QlikView
QuickZip4
Realtek
Reference Assemblies
SFR
Siber Systems
Spybot - Search & Deet grestroy
Synaptics
Trend Micro
VideoAudioPlayer
VideoLAN
VistaCodecPack
VSO
Vuze
WIDCOMM
Windows Calendar
Windows Collaboration
Windows Defender
Windows Journal
Windows Mail
Windows Media Player
Windows NT
Windows Photo Gallery
Windows Portable Devices
Windows Sidebar
Wireless Console 2
XnView

¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Windows\System32\guard32.dll
C:\Users\Flo\LOCAL Settings\Temp\_unps.exe

¤¤¤¤¤¤¤¤¤¤ Keys :

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}

=========
Rootkits
=========

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-08 18:47:15
Windows 6.0.6002 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\002243be9599]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\002243be9599]

scanning hidden registry entries ...

scanning hidden files ...

C:\Program Files\ASUS\ASUS Data Security Manager\driver\x86
C:\Program Files\ASUS\ASUS Data Security Manager\driver\x86\AsDsm.sys 29752 bytes executable
C:\Program Files\ASUS\ASUS Data Security Manager\driver\x86\_avt 512 bytes
C:\Users\Flo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AZNRQ7XC\clientleger[1].png 5829 bytes

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 4

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤)

Bonjour Jacques,
Merci de t'intéresser à mon cas.
J'avais ,déja fait cette manip à midi mais depuis personne n'a encore voulu me répondre.

Voici les liens

http://www.cijoint.fr/cjlink.php?file=cj200912/cijJa3xh27.tx­t
http://www.cijoint.fr/cjlink.php?file=cj200912/cijfFQEiTg.tx­t

Merci

Bonjour Jacques,
Merci de t'intéresser à mon cas.
J'avais ,déja fait cette manip à midi mais depuis personne n'a encore voulu me répondre.

Le premier rapport HJThis a été fait en mode normal.

Voici les liens

http://www.cijoint.fr/cjlink.php?file=cj200912/cijJa3xh27.tx­­t
http://www.cijoint.fr/cjlink.php?file=cj200912/cijfFQEiTg.tx­­t

Merci

Désolé pour le doublon

Voici le log.txt


Logfile of random's system information tool 1.06 (written by random/random)
Run by Flo at 2009-12-05 14:42:29
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 58 GB (38%) free of 153 GB
Total RAM: 3070 MB (49% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{C61BEE27-974D-4FC7-804D-4518C521E23D}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2008-06-11 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2009-03-23 5911368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2009-03-23 5911368]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-12-01 30192]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-01-12 98304]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2008-01-24 7766016]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-06 1029416]
"ADSMTray"=C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-01-18 272952]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2008-02-01 61440]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2008-10-01 851968]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-11-26 1800464]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
""= []
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"Adobe_ID0ENQBO"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE [2008-08-15 378224]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"SWF Printer Agent"=C:\Program Files\SWF Printer Pro\swfpagent.exe [2007-06-14 90112]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-12-03 1394000]
"AntiSpyWare2Guard"=C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWare2Guard.exe [2007-08-14 2334040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2009-03-23 160592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0EYTHM]
C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-03-20 1884160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
C:\Windows\AsScrProlog.exe [2009-01-18 47672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2009-01-18 3054136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2008-07-19 104936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdxamon]
C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe [2008-06-13 16040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdxmon.exe]
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe [2008-06-13 668328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P2Go_Menu]
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-14 210216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Windows\RtHDVCpl.exe [2008-04-17 6111232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Windows\Skytel.exe [2007-11-20 1826816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Acrobat\ADOBEC~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2008-07-30 752168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Lancement rapide d'Adobe Acrobat.lnk]
C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL C:\Windows\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open -

======List of files/folders created in the last 1 months======

2009-12-05 14:42:29 ----D---- C:\rsit
2009-12-05 14:02:05 ----D---- C:\Program Files\ESET
2009-12-05 12:52:44 ----D---- C:\GenProc
2009-12-04 18:10:10 ----A---- C:\Windows\ntbtlog.txt
2009-12-04 12:36:20 ----D---- C:\Program Files\Ashampoo
2009-12-04 09:27:28 ----D---- C:\Users\Flo\AppData\Roaming\Malwarebytes
2009-12-04 09:27:03 ----D---- C:\ProgramData\Malwarebytes
2009-12-04 09:26:53 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-01 13:59:52 ----D---- C:\output
2009-12-01 11:47:00 ----A---- C:\Windows\system32\swfppm.dll
2009-12-01 11:46:35 ----A---- C:\Windows\system32\SWFScoutImgAddon.DLL
2009-12-01 11:45:55 ----D---- C:\Program Files\SWF Printer Pro
2009-12-01 10:36:39 ----D---- C:\Users\Flo\AppData\Roaming\YCanPDF
2009-12-01 10:36:39 ----D---- C:\tmp
2009-11-30 16:09:11 ----A---- C:\Windows\system32\SWFPresentationScout.DLL
2009-11-30 16:09:04 ----D---- C:\Program Files\Bytescout PPT To SWF Scout
2009-11-30 12:27:18 ----D---- C:\Program Files\Common Files\PX Storage Engine
2009-11-30 12:19:26 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2009-11-30 12:19:26 ----RA---- C:\Windows\system32\AdobePDF.dll
2009-11-29 18:33:57 ----D---- C:\Program Files\IZArc
2009-11-27 03:01:41 ----A---- C:\Windows\system32\tzres.dll
2009-11-27 03:00:49 ----D---- C:\Program Files\MSXML 4.0
2009-11-26 19:59:18 ----A---- C:\Windows\system32\msxml6.dll
2009-11-26 19:59:17 ----A---- C:\Windows\system32\msxml3.dll
2009-11-17 09:21:59 ----A---- C:\Windows\system32\javaws.exe
2009-11-17 09:21:59 ----A---- C:\Windows\system32\javaw.exe
2009-11-17 09:21:59 ----A---- C:\Windows\system32\java.exe
2009-11-12 22:24:32 ----A---- C:\Windows\system32\WSDApi.dll

======List of files/folders modified in the last 1 months======

2009-12-05 14:42:09 ----D---- C:\Windows\Temp
2009-12-05 14:42:09 ----D---- C:\Windows\Prefetch
2009-12-05 14:02:06 ----SD---- C:\Windows\Downloaded Program Files
2009-12-05 14:02:05 ----RD---- C:\Program Files
2009-12-05 12:57:08 ----D---- C:\Windows\System32
2009-12-05 12:57:08 ----D---- C:\Windows\inf
2009-12-05 12:57:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-12-05 09:03:51 ----SHD---- C:\Windows\Installer
2009-12-05 09:02:07 ----A---- C:\Windows\system32\acovcnt.exe
2009-12-04 20:45:21 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-12-04 18:10:10 ----D---- C:\Windows
2009-12-04 16:52:03 ----D---- C:\Program Files\Mozilla Firefox
2009-12-04 16:37:12 ----D---- C:\Users\Flo\AppData\Roaming\Azureus
2009-12-04 12:36:44 ----D---- C:\Windows\system32\drivers
2009-12-04 12:03:51 ----RD---- C:\Users
2009-12-04 10:01:18 ----D---- C:\Windows\tracing
2009-12-04 09:59:48 ----D---- C:\Windows\Tasks
2009-12-04 09:47:07 ----SD---- C:\Users\Flo\AppData\Roaming\Microsoft
2009-12-04 09:27:03 ----HD---- C:\ProgramData
2009-12-03 17:09:18 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-12-03 13:59:18 ----D---- C:\Users\Flo\AppData\Roaming\Adobe
2009-12-03 09:57:33 ----D---- C:\Windows\system32\Tasks
2009-12-01 15:26:58 ----A---- C:\Users\Flo\AppData\Roaming\QuickZip45.ini
2009-12-01 12:29:58 ----SHD---- C:\System Volume Information
2009-12-01 09:38:49 ----D---- C:\Program Files\Adobe
2009-11-30 15:05:49 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-11-30 12:27:18 ----D---- C:\Windows\system32\catroot
2009-11-30 12:27:18 ----D---- C:\Program Files\Common Files
2009-11-30 12:22:24 ----D---- C:\Program Files\Common Files\Adobe
2009-11-30 12:16:16 ----RSD---- C:\Windows\Fonts
2009-11-30 12:13:28 ----D---- C:\Windows\winsxs
2009-11-27 03:36:06 ----D---- C:\Windows\rescache
2009-11-27 03:18:31 ----D---- C:\Windows\system32\fr-FR
2009-11-27 03:02:33 ----D---- C:\Windows\system32\catroot2
2009-11-26 21:07:25 ----D---- C:\Program Files\Vuze
2009-11-26 20:10:31 ----A---- C:\Windows\system32\guard32.dll
2009-11-26 08:43:41 ----D---- C:\Windows\pss
2009-11-20 14:35:17 ----D---- C:\Windows\LiveKernelReports
2009-11-17 09:21:56 ----D---- C:\Program Files\Java
2009-11-16 16:11:14 ----SHD---- C:\$RECYCLE.BIN
2009-11-16 13:35:48 ----D---- C:\Users\Flo\AppData\Roaming\VSO
2009-11-13 15:18:01 ----D---- C:\PerfLogs
2009-11-13 13:14:56 ----D---- C:\Program Files\Windows Mail
2009-11-13 09:28:20 ----D---- C:\Windows\Debug
2009-11-13 08:47:52 ----D---- C:\ProgramData\Microsoft Help
2009-11-12 08:46:03 ----RSD---- C:\Windows\assembly

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2009-11-26 128376]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2009-11-26 29520]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2009-11-26 74328]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-09-19 28520]
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-25 55656]
R3 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2007-08-11 29752]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-04-27 909824]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-09 3533824]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-06-17 146824]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-17 2098904]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-06-03 15928]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-08-06 124928]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-10-01 1769984]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
S3 BthEnum;Service d'énumérateur Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Pilote de port Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 btwaudio;Périphérique audio Bluetooth; C:\Windows\system32\drivers\btwaudio.sys [2008-07-09 81960]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-05-13 100392]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-01-29 29736]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-05-13 17320]
S3 CRFILTER;USB Mass Storage Filter; C:\Windows\system32\DRIVERS\CRFILTER.sys [2008-04-07 6656]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 mbr;mbr; \??\C:\Users\Flo\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 UMPass;Pilote Microsoft UMPass; C:\Windows\system32\DRIVERS\umpass.sys [2008-01-21 7680]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AASW2_Service;Ashampoo AntiSpyWare 2 Service; C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe [2007-08-14 728920]
R2 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2009-01-18 231992]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-09-19 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-09-19 185089]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-03-09 655360]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-07-30 522792]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-11-26 723632]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 lxdx_device;lxdx_device; C:\Windows\system32\lxdxcoms.exe [2008-02-28 594600]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 lxdxCATSCustConnectService;lxdxCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe [2008-02-28 98984]
S3 Adobe Version Cue CS3;Adobe Version Cue CS3 {fr_FR} ; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-10-24 655624]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 GGSCILLZPKPK;GGSCILLZPKPK; C:\Users\Flo\AppData\Local\Temp\GGSCILLZPKPK.exe [2009-12-04 490368]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-12-01 30192]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-18 156656]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe [2009-06-17 6582912]
S3 YIHEQKTBVIRGLFS;YIHEQKTBVIRGLFS; C:\Users\Flo\AppData\Local\Temp\YIHEQKTBVIRGLFS.exe [2009-12-04 416640]

-----------------EOF-----------------

Voici le lien pour le log

http://www.cijoint.fr/cjlink.php?file=cj200912/cijmuwj3fS.txt

je n'arrivais pas à faire de scan en ligne donc j'ai posté un autre sujet.

Mais je pense que ce virus en est aussi la cause.

Merci de ton aide tout à l'heure Dorgane.

Voici le lien pour info.txt

http://www.cijoint.fr/cjlink.php?file=cj200912/cijvFO4oRD.txt

Merci jacques.gache

Bonjour Jacques,


Ce fut très très long ce scan. Ouf ! voila enfin le rapport:

############################## | FindyKill V5.020 |

# User : Flo (Administrateurs) # PC-DE-FLO
# Update on 26/11/2009 by Chiquitine29
# Start at: 19:00:47 | 05/12/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 8.0.6001.18828
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 149,04 Go (56,2 Go free) [VistaOS] # NTFS
# D:\ # Disque fixe local # 139,28 Go (122,85 Go free) [DATA] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque amovible # 982,12 Mo (659,66 Mo free) [FLORIANE] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\lxdxcoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\ASUS\ATK Hotkey\HControl.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Windows\System32\ACEngSvr.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
C:\Program Files\ASUS\ATK Hotkey\WDC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\SWF Printer Pro\swfpagent.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## | C: |


################## | C:\Windows |


################## | C:\Windows\system32 |


################## | C:\Windows\system32\drivers |


################## | C:\Users\Flo\AppData\Roaming |


################## | Autres detections ... |

Bagle ! "C:\Program Files\OpenOffice.org 3\Basis\share\config\images_hicontrast.zip"
Contain "res\commandimagelist\lch_formfilterexecute.png" with Bagle CRC32 : A9EDA068

################## | Temporary Internet Files |


################## | Registre / Clés infectieuses |

Présent ! [HKLM\software\microsoft\security center] "UacDisableNotify"
Présent ! [HKLM\software\microsoft\security center\Svc] "AntiVirusOverride"
Présent ! [HKLM\software\microsoft\security center\Svc] "FirewallOverride"

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK

# Mode sans echec : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V5.020 ! |

bonsoir jacques,

Voici le rapport:
Mon pc est il désinfecté? J'avais commencé à faire un scan eset et il m'a trouvé, à seulement 30%, déja 23 infections. De plus mon antivir s'ennerve encore il me trouve toujours les mêmes virus????
############################## | FindyKill V5.020 |

# User : Flo (Administrateurs) # PC-DE-FLO
# Update on 26/11/2009 by Chiquitine29
# Start at: 13:26:57 | 06/12/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 8.0.6001.18828
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 149,04 Go (56,11 Go free) [VistaOS] # NTFS
# D:\ # Disque fixe local # 139,28 Go (122,85 Go free) [DATA] # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque amovible # 982,12 Mo (659,66 Mo free) [FLORIANE] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\LogonUI.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\lxdxcoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\ASUS\ATK Hotkey\HControl.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
C:\Windows\system32\runonce.exe
C:\Program Files\ASUS\ATK Hotkey\WDC.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## | C: |


################## | C:\Windows |

Supprimé ! C:\Windows\Prefetch\WINUPGRO.EXE-B9E72D89.pf

################## | C:\Windows\system32 |


################## | C:\Windows\system32\drivers |


################## | C:\Users\Flo\AppData\Roaming |


################## | Autres suppressions ... |

################## | Temporary Internet Files |


################## | Registre / Clés infectieuses |

Supprimé ! [HKLM\software\microsoft\security center] "UacDisableNotify"

################## | Etat / Services / Informations |

# Mode sans echec : OK


# Affichage des fichiers cachés : OK

# Uac : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | PEH ... |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # FindyKill V5.020 ! |

Bonsoir,

J'ai désactivé Comodo. (qu eme conseille tu d'ailleurs Comodo ou antivir+qqch?)
C'est antivir qui s'énerve. Il trouve toujours les memes Trojan cités plus haut.

Voici un petit bout des rapports de la journée pour antivir. Il ouvre 6 fenetres de détection toutes les 5mn toute la journée. En voici quelques-unes. Les chemins sont différents à chaque fois.

Dans le fichier 'C:\Windows\Temp\kbpi.tmp\svchost.exe'
un virus ou un programme indésirable 'TR/Crypt.ZPACK.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Dans le fichier 'C:\Windows\Temp\gdnw.tmp\svchost.exe'
un virus ou un programme indésirable 'TR/Crypt.ZPACK.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Dans le fichier 'C:\Windows\Temp\avui.tmp\svchost.exe'
un virus ou un programme indésirable 'TR/Crypt.ZPACK.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Dans le fichier 'C:\Windows\Temp\pevr.tmp\svchost.exe'
un virus ou un programme indésirable 'TR/Crypt.ZPACK.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Dans le fichier 'C:\Windows\Temp\bmuk.tmp\svchost.exe'
un virus ou un programme indésirable 'TR/Downloader.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Et il y a une liste innombrable.......

Je n'ai pas pu finir le scan eset (environ 80% de fait) mais il en était aux périphériques et n'avait rien trouvé pour C:/.
J'ai également refait un scan malwarebytes (90%° également, j'ai du éteindre mon ordinateur) et il n'a rien détecté également.
Voici le log du scan rapide:

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3291
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18828

07/12/2009 12:28:51
mbam-log-2009-12-07 (12-28-51).txt

Type de recherche: Examen rapide
Eléments examinés: 24254
Temps écoulé: 1 minute(s), 6 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


Je relance tout de même un scan malwarebytes pour que tu ais un log complet.

Ah oui j'ai également fait un scan avec FxBeagle et il n'a rien trouvé.

Et voici le rapport GenProc que j'ai fait ce soir:

Rapport GenProc 2.655 [3] - 07/12/2009 à 18:28:49
@ Windows VISTA Service Pack 2 - ASUSTeK Computer Inc. - Mode normal
@ Mozilla Firefox 3.0.15 (fr) [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt



~~~~ INFORMATION COMPLEMENTAIRE ~~~~

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-07 18:28:58
Windows 6.0.6002 Service Pack 2

detected NTDLL code modification:
ZwClose, ZwOpenFile

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\002243be9599]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\002243be9599]

scanning hidden registry entries ...

scan completed successfully
hidden services: 0


Rapport de ZHPDiag v1.24.35 par Nicolas Coolman
Run by Flo at 07/12/2009 18:30:27
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium (6.0.6002) Service Pack 2
MSIE: Internet Explorer v8.0.6001.18828
MFIE: Mozilla Firefox (3.0.15)

Boot mode: Normal (Normal boot)
Total RAM: 3070 MB (54% free)
System drive C: has 56 GB (37%) free of 149 GB

---\\
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\SWF Printer Pro\swfpagent.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\Windows\AsScrPro.exe
C:\Windows\AsScrProlog.exe
C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWare2Guard.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Windows\ehome\ehTray.exe
C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Windows\system32\Ati2evxx.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
C:\Windows\system32\lxdxcoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Windows\system32\lsass.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\SearchIndexer.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/webhp?gws_rd=ssl

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

---\\
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

---\\
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

---\\
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll

---\\
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SWF Printer Agent] C:\Program Files\SWF Printer Pro\swfpagent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\Power2Go UpdateWithCreateOnce SOFTWARE\CyberLink\Power2Go\6.0
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [lxdxmon.exe] C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
O4 - HKLM\..\Run: [lxdxamon] C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [AntiSpyWare2Guard] C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWare2Guard.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKLM\..\policies\Explorer: [BindDirectlyToPropertySetStorage] Data=0
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - Global Startup: Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk -

---\\
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

---\\
O9 - Extra button: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,880
O9 - Extra button: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,873
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\main.ico
O9 - Extra button: Identités - {45DB34C3-955C-11D3-ABEF-444553540000} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,870
O9 - Extra button: Cartes - {45DB34C3-955C-11D3-ABEF-444553540001} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,871
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,900
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll

---\\
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} () - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: qvp - {4BA78E3D-CA25-4BFF-B8F0-8A3359E4B520} - C:\Program Files\QlikView\QvProtocol\Qvp.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

---\\
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL C:\Windows\system32\guard32.dll

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: Ashampoo AntiSpyWare 2 Service (AASW2_Service) - C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe
O23 - Service: ADSM Service (ADSMService) - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bluetooth Service (btwdins) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdxCATSCustConnectService (lxdxCATSCustConnectService) - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device (lxdx_device) - C:\Windows\system32\lxdxcoms.exe -service
O23 - Service: Machine Debug Manager (MDM) - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{C61BEE27-974D-4FC7-804D-4518C521E23D}.job

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: COMODO Internet Security Sandbox Driver (cmdGuard) - C:\WINDOWS\System32\DRIVERS\cmdguard.sys
O41 - Driver: COMODO Internet Security Helper Driver (cmdHlp) - C:\WINDOWS\System32\DRIVERS\cmdhlp.sys
O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: COMODO Internet Security Firewall Driver (inspect) - C:\WINDOWS\system32\DRIVERS\inspect.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1)
O42 - Logiciel: 2007 Microsoft Office system
O42 - Logiciel: 7-Zip 4.65
O42 - Logiciel: AHV content for Acrobat and Flash
O42 - Logiciel: AI RoboForm (All Users)
O42 - Logiciel: ASUS Data Security Manager
O42 - Logiciel: ASUS InstantFun
O42 - Logiciel: ASUS LifeFrame3
O42 - Logiciel: ASUS SmartLogon
O42 - Logiciel: ASUS Splendid Video Enhancement Technology
O42 - Logiciel: ATK Hotkey
O42 - Logiciel: ATK Media
O42 - Logiciel: ATKOSD2
O42 - Logiciel: Acrobat.com
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe AIR
O42 - Logiciel: Adobe After Effects CS4
O42 - Logiciel: Adobe After Effects CS4 Presets
O42 - Logiciel: Adobe After Effects CS4 Third Party Content
O42 - Logiciel: Adobe Anchor Service CS4
O42 - Logiciel: Adobe Asset Services CS3
O42 - Logiciel: Adobe Bridge CS4
O42 - Logiciel: Adobe Bridge Start Meeting
O42 - Logiciel: Adobe CS4 American English Speech Analysis Models
O42 - Logiciel: Adobe CSI CS4
O42 - Logiciel: Adobe Color - Photoshop Specific CS4
O42 - Logiciel: Adobe Color EU Extra Settings CS4
O42 - Logiciel: Adobe Color EU Recommended Settings
O42 - Logiciel: Adobe Color JA Extra Settings CS4
O42 - Logiciel: Adobe Color NA Recommended Settings CS4
O42 - Logiciel: Adobe Color Video Profiles CS CS4
O42 - Logiciel: Adobe Creative Suite 3 Design Standard
O42 - Logiciel: Adobe Creative Suite 4 Master Collection
O42 - Logiciel: Adobe Device Central CS3
O42 - Logiciel: Adobe Device Central CS4
O42 - Logiciel: Adobe Dreamweaver CS4
O42 - Logiciel: Adobe Drive CS4
O42 - Logiciel: Adobe Dynamiclink Support
O42 - Logiciel: Adobe Encore CS4
O42 - Logiciel: Adobe Extension Manager CS4
O42 - Logiciel: Adobe Fireworks CS4
O42 - Logiciel: Adobe Flash CS4 STI-fr
O42 - Logiciel: Adobe Flash Player 10 ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin
O42 - Logiciel: Adobe Help Viewer CS3
O42 - Logiciel: Adobe Illustrator CS3
O42 - Logiciel: Adobe Illustrator CS4
O42 - Logiciel: Adobe InDesign CS4
O42 - Logiciel: Adobe InDesign CS4 Application Feature Set Files (Roman)
O42 - Logiciel: Adobe InDesign CS4 Common Base Files
O42 - Logiciel: Adobe InDesign CS4 Icon Handler
O42 - Logiciel: Adobe Linguistics CS3
O42 - Logiciel: Adobe Media Encoder CS4 Exporter
O42 - Logiciel: Adobe Media Encoder CS4 Importer
O42 - Logiciel: Adobe Media Player
O42 - Logiciel: Adobe OnLocation CS4
O42 - Logiciel: Adobe Photoshop CS4 Support
O42 - Logiciel: Adobe SGM CS4
O42 - Logiciel: Adobe SING CS4
O42 - Logiciel: Adobe Service Manager Extension
O42 - Logiciel: Adobe Setup
O42 - Logiciel: Adobe Soundbooth CS4
O42 - Logiciel: Adobe Stock Photos CS3
O42 - Logiciel: Adobe Type Support CS4
O42 - Logiciel: Adobe Update Manager CS4
O42 - Logiciel: Adobe Version Cue CS3 Server
O42 - Logiciel: Adobe Version Cue CS4 Server
O42 - Logiciel: Adobe WinSoft Linguistics Plugin
O42 - Logiciel: Adobe XMP Panels CS3
O42 - Logiciel: Adobe XMP Panels CS4
O42 - Logiciel: AdobeColorCommonSetCMYK
O42 - Logiciel: AdobeColorCommonSetRGB
O42 - Logiciel: Ajouter ou supprimer Adobe Creative Suite 3 Design Standard
O42 - Logiciel: Ashampoo AntiSpyWare 2.01
O42 - Logiciel: Asus_Camera_ScreenSaver
O42 - Logiciel: Atheros Client Installation Program
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
O42 - Logiciel: Bytescout PPT To SWF Scout
O42 - Logiciel: CCleaner (remove only)
O42 - Logiciel: COMODO Internet Security
O42 - Logiciel: Cisco EAP-FAST Module
O42 - Logiciel: Cisco LEAP Module
O42 - Logiciel: Cisco PEAP Module
O42 - Logiciel: CyberLink Power2Go
O42 - Logiciel: Express Gate
O42 - Logiciel: GIMP 2.6.7
O42 - Logiciel: Google Desktop
O42 - Logiciel: Java(TM) 6 Update 17
O42 - Logiciel: La boite a couleurs version 1.6.14
O42 - Logiciel: Lexmark 3600-4600 Series
O42 - Logiciel: LightScribe System Software 1.14.17.1
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Microsoft .NET Framework 1.1
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297)
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Access MUI (Dutch) 2007
O42 - Logiciel: Microsoft Office Access MUI (English) 2007
O42 - Logiciel: Microsoft Office Access MUI (French) 2007
O42 - Logiciel: Microsoft Office Access MUI (German) 2007
O42 - Logiciel: Microsoft Office Access MUI (Italian) 2007
O42 - Logiciel: Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
O42 - Logiciel: Microsoft Office Excel MUI (Dutch) 2007
O42 - Logiciel: Microsoft Office Excel MUI (English) 2007
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
O42 - Logiciel: Microsoft Office Excel MUI (German) 2007
O42 - Logiciel: Microsoft Office Excel MUI (Italian) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (Dutch) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (German) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (Italian) 2007
O42 - Logiciel: Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
O42 - Logiciel: Microsoft Office Professional Plus 2007
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: Mozilla Firefox (3.0.15)
O42 - Logiciel: Multimedia Card Reader
O42 - Logiciel: Notepad++
O42 - Logiciel: Nvu 1.0
O42 - Logiciel: OpenOffice.org 3.1
O42 - Logiciel: PDF Settings CS4
O42 - Logiciel: PKR
O42 - Logiciel: PSPad editor
O42 - Logiciel: Panda ActiveScan 2.0
O42 - Logiciel: PhotoFiltre
O42 - Logiciel: Picasa 2
O42 - Logiciel: Pixel Bender Toolkit
O42 - Logiciel: PokerStars
O42 - Logiciel: QlikView
O42 - Logiciel: Quick Zip 4.60.019
O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver
O42 - Logiciel: SFR - Kit de connexion
O42 - Logiciel: SWF Printer Pro
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704)
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593)
O42 - Logiciel: Security Update for Microsoft Office Outlook 2007 (KB972363)
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789)
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB969693)
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234)
O42 - Logiciel: Suite Shared Configuration CS4
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: USB 2.0 1.3M UVC WebCam
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)
O42 - Logiciel: Update for Microsoft Office Access 2007 Help (KB963663)
O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB963678)
O42 - Logiciel: Update for Microsoft Office Powerpoint 2007 Help (KB963669)
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974561)
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb975960)
O42 - Logiciel: Update für Microsoft Office Excel 2007 Help (KB963678)
O42 - Logiciel: Update für Microsoft Office Powerpoint 2007 Help (KB963669)
O42 - Logiciel: Update voor Microsoft Office Excel 2007 Help (KB963678)
O42 - Logiciel: Update voor Microsoft Office Powerpoint 2007 Help (KB963669)
O42 - Logiciel: VLC media player 0.9.7
O42 - Logiciel: VSO Image Resizer 2.2.2.1
O42 - Logiciel: VideoAudioPlayer version 1.1
O42 - Logiciel: Vuze
O42 - Logiciel: WIDCOMM Bluetooth Software
O42 - Logiciel: WampServer 2.0
O42 - Logiciel: Wireless Console 2
O42 - Logiciel: XnView 1.96.5
O42 - Logiciel: ccc-Branding
O42 - Logiciel: kuler

---\\
O44 - LFC:Last File Created 01/12/2009 - 15:54:24 ---A- C:\Windows\System32\SWFP
O44 - LFC:Last File Created 03/12/2009 - 16:13:56 ---A- C:\Windows\System32\drivers\mbam.sys
O44 - LFC:Last File Created 03/12/2009 - 16:14:06 ---A- C:\Windows\System32\drivers\mbamswissarmy.sys
O44 - LFC:Last File Created 04/12/2009 - 18:02:31 ---A- C:\Windows\System32\FNTCACHE.DAT
O44 - LFC:Last File Created 04/12/2009 - 21:05:40 ---A- C:\Windows\ntbtlog.txt
O44 - LFC:Last File Created 06/12/2009 - 13:26:39 ---A- C:\Windows\System32\acovcnt.exe
O44 - LFC:Last File Created 06/12/2009 - 21:46:27 ---A- C:\FindyKill.txt
O44 - LFC:Last File Created 07/12/2009 - 13:52:11 ---A- C:\Windows\setuperr.log
O44 - LFC:Last File Created 07/12/2009 - 13:54:05 ---A- C:\Windows\setupact.log
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 --HA- C:\ntuser.dat.LOG2
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TM.blf
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 ---A- C:\ntuser.dat
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 --HA- C:\ntuser.dat.LOG1
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 -SHA- C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TM.blf
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 -SHA- C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 15:46:20 RSHA- C:\IO.SYS
O44 - LFC:Last File Created 07/12/2009 - 15:46:20 RSHA- C:\MSDOS.SYS
O44 - LFC:Last File Created 07/12/2009 - 17:34:53 -S-A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 07/12/2009 - 17:39:34 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 07/12/2009 - 17:41:39 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 07/12/2009 - 17:41:39 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 07/12/2009 - 17:41:39 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 07/12/2009 - 17:41:39 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 07/12/2009 - 17:41:39 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 17/11/2009 - 09:21:56 ---A- C:\Windows\System32\jupdate-1.6.0_17-b04.log
O44 - LFC:Last File Created 26/11/2009 - 20:10:30 ---A- C:\Windows\System32\drivers\cmdguard.sys
O44 - LFC:Last File Created 26/11/2009 - 20:10:30 ---A- C:\Windows\System32\drivers\cmdhlp.sys
O44 - LFC:Last File Created 26/11/2009 - 20:10:31 ---A- C:\Windows\System32\guard32.dll
O44 - LFC:Last File Created 26/11/2009 - 20:10:53 ---A- C:\Windows\System32\drivers\inspect.sys

---\\
O63 - Logiciel: HijackThis 2.0.2


End of the scan: 456 lines


----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 18:31:11 ~~

Voila, tout est fait,

Voici les log:


############################## | UsbFix V6.059 |

User : Flo (Administrateurs) # PC-DE-FLO
Update on 01/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 19:29:20 | 07/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18828
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 149,04 Go (56,05 Go free) [VistaOS] # NTFS
D:\ -> Disque fixe local # 139,28 Go (122,85 Go free) [DATA] # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 982,12 Mo (659,66 Mo free) [FLORIANE] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe 540
C:\Windows\system32\csrss.exe 616
C:\Windows\system32\wininit.exe 676
C:\Windows\system32\csrss.exe 684
C:\Windows\system32\services.exe 736
C:\Windows\system32\lsass.exe 748
C:\Windows\system32\lsm.exe 756
C:\Windows\system32\svchost.exe 936
C:\Windows\system32\winlogon.exe 960
C:\Windows\system32\svchost.exe 1084
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe 1140
C:\Windows\system32\LogonUI.exe 1160
C:\Windows\system32\svchost.exe 1244
C:\Windows\System32\svchost.exe 1320
C:\Windows\system32\Ati2evxx.exe 1416
C:\Windows\System32\svchost.exe 1484
C:\Windows\System32\svchost.exe 1520
C:\Windows\system32\svchost.exe 1564
C:\Windows\system32\svchost.exe 1696
C:\Windows\system32\SLsvc.exe 1720
C:\Windows\system32\Ati2evxx.exe 1780
C:\Windows\system32\svchost.exe 1812
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe 484
C:\Windows\system32\WLANExt.exe 560
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe 820
C:\Program Files\ATKGFNEX\GFNEXSrv.exe 672
C:\Windows\System32\spoolsv.exe 920
C:\Windows\system32\taskeng.exe 1628
C:\Program Files\Avira\AntiVir Desktop\sched.exe 1840
C:\Windows\system32\svchost.exe 1976
C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe 2120
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 2208
C:\Windows\system32\svchost.exe 2236
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe 2276
C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2348
C:\Windows\system32\lxdxcoms.exe 2516
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe 2544
C:\Windows\system32\svchost.exe 2608
C:\Windows\system32\svchost.exe 2692
C:\Windows\System32\svchost.exe 2764
C:\Windows\system32\SearchIndexer.exe 2848
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe 3020
C:\Windows\servicing\TrustedInstaller.exe 3568
C:\Windows\system32\wbem\wmiprvse.exe 2224
C:\Windows\system32\userinit.exe 704
C:\Windows\system32\taskeng.exe 3048
C:\Windows\system32\Dwm.exe 2308
C:\Windows\system32\taskeng.exe 2040
C:\Windows\Explorer.EXE 2808
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe 3784
C:\Program Files\ASUS\ASUS Live Update\ALU.exe 3960
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe 3772
C:\Program Files\ASUS\ATK Hotkey\HControl.exe 1616
C:\Program Files\Wireless Console 2\wcourier.exe 2488
C:\Program Files\P4G\BatteryLife.exe 3628
C:\Program Files\ASUS\Splendid\ACMON.exe 3604
C:\Windows\System32\ACEngSvr.exe 3228
C:\Windows\system32\runonce.exe 2316
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe 2940
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe 3064
C:\Program Files\ASUS\ATK Hotkey\WDC.exe 4064
C:\Windows\system32\conime.exe 848

################## | Fichiers # Dossiers infectieux |


################## | Spyware.OnlineGames |


################## | Registre # Clés infectieuses |

Supprimé ! [HKCU\SOFTWARE\Videohost]

################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[06/10/2008 04:46|--a------|21] C:\app3.LOG
[18/09/2006 22:43|--a------|24] C:\autoexec.bat
[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[16/04/2008 12:27|-ra-s----|8192] C:\BOOTSECT.BAK
[04/04/2007 20:01|--a------|19] C:\CA21.txt
[18/09/2006 22:43|--a------|10] C:\config.sys
[18/01/2009 03:23|--a------|21971] C:\devlist.txt
[20/10/2008 03:28|-rah-----|1048576] C:\F6A.BIN
[05/12/2008 09:50|--a------|14] C:\F6A_F6V_VISTA.40
[20/10/2008 03:13|-rah-----|1048576] C:\F6V.BIN
[06/12/2009 21:46|--a------|4358] C:\FindyKill.txt
[18/01/2009 03:23|--a------|9] C:\Finish.log
[18/01/2009 02:03|--a------|481] C:\igoogle_log.txt
[07/12/2009 15:46|-rahs----|0] C:\IO.SYS
[24/06/2009 19:04|--a------|78] C:\lxdx.log
[07/12/2009 15:46|-rahs----|0] C:\MSDOS.SYS
[08/08/2008 08:22|--a------|30] C:\NERO.LOG
[04/07/2008 05:35|--a------|21] C:\NIS2008.TXT
[07/12/2009 13:56|--a------|262144] C:\ntuser.dat
[07/12/2009 13:56|--ah-----|5120] C:\ntuser.dat.LOG1
[07/12/2009 13:55|--ah-----|0] C:\ntuser.dat.LOG2
[07/12/2009 13:55|--ahs----|65536] C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TM.blf
[07/12/2009 13:55|--ahs----|524288] C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
[07/12/2009 13:55|--ahs----|524288] C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
[07/12/2009 13:56|--ahs----|65536] C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TM.blf
[07/12/2009 13:56|--ahs----|524288] C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
[07/12/2009 13:55|--ahs----|524288] C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
[16/03/2007 00:18|--a------|25] C:\OFFICE2007_A.TXT
[?|?|?] C:\pagefile.sys
[17/01/2009 12:24|--a------|105] C:\Pass.txt
[19/11/2008 04:32|--a------|2914] C:\Patch.LOG
[29/04/2008 15:30|--a------|20] C:\READER_A.TXT
[05/12/2008 09:50|--a------|10] C:\RECOVERY.DAT
[18/01/2009 02:34|--a------|426] C:\RHDSetup.log
[18/01/2009 03:05|--a------|179] C:\setup.log
[18/01/2009 01:19|--a------|166] C:\SumHidd.txt
[18/01/2009 01:18|--a------|98] C:\SumOS.txt
[07/12/2009 19:32|--a------|6058] C:\UsbFix.txt
[21/10/2008 04:19|--a------|21] C:\V553.txt
[05/07/2007 16:25|---hs----|4096] F:\@samsung.ess
[10/08/2008 16:59|---hs----|4096] F:\tfs4_160.ess
[02/03/2009 15:47|--a------|145408] F:\cv 2009.doc
[02/12/2009 15:25|--a------|289769] F:\declarer site internet.cnil.pdf

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# F:\autorun.inf -> Dossier créé par UsbFix.

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.059 ! |

Voici le rapport:

======= RAPPORT D'AD-REMOVER 1.1.4.6_E | UNIQUEMENT XP/VISTA/7 =======
.
Mit à jour par C_XX le 07.12.2009 à 21:14
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 21:47:46, 07/12/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-Remover\
Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002
Nom du PC: PC-DE-FLO | Utilisateur actuel: Flo
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.

C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Poker 770
C:\Users\Public\MyWebTattoo.exe
C:\Poker\Poker 770
C:\Users\Labube\Desktop\PartyPoker_Installer
C:\Users\Labube\AppData\Roaming\Microsoft\Windows\Cookies\Low\labube@partygaming.122.2o7[1].txt
C:\Users\Labube\AppData\Roaming\Microsoft\Windows\Cookies\Low\labube@partypoker[2].txt

(!) -- Fichiers temporaires supprimés.

.
HKCU\software\PartyGaming
HKCU\software\Poker 770
HKLM\Software\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}
HKLM\Software\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}
HKLM\software\Poker 770
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.0.15 [fr] *
.
Nom du profil: 0z6iymgu.default (Flo)
.
(Flo, prefs.js) Browser.download.dir, C:\Users\Flo\Downloads
(Flo, prefs.js) Browser.download.lastDir, C:\Users\Flo\Desktop\images informatique
(Flo, prefs.js) Browser.search.defaultenginename, Google
(Flo, prefs.js) Browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1046962&SearchSource=3&q={searchTerms}
(Flo, prefs.js) Browser.search.selectedEngine, Labpixies Customized Web Search
(Flo, prefs.js) Browser.startup.homepage, hxxp://www.google.fr/
.
(Flo, prefs.js) EFFACE - Browser.search.defaultthis.engineName, Labpixies Customized Web Search
(Flo, prefs.js) EFFACE - Browser.search.selectedEngine, Labpixies Customized Web Search
.
.
.
* Internet Explorer Version 8.0.6001.18828 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\Windows\system32\blank.htm
Show_ToolBar: yes
Enable Browser Extensions: yes
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Use Search Asst: no
Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Users\Flo\AppData\Roaming\Azureus\torrents\_Adobe_Dreamweaver_CS4_FULL_EXTENDED___KEYGEN__.torrent
C:\Users\Flo\AppData\Roaming\Azureus\torrents\Adobe_Dreamweaver_CS4___KeyGen.torrent
.
===================================
.
3376 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
1 Fichier(s) - C:\Users\Flo\AppData\Local\Temp
0 Fichier(s) - C:\Windows\Temp
.
20 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
1452 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Fin à: 22:31:35 | 07/12/2009 - CLEAN[1]
.
============== E.O.F ==============
.

Bonjour Jacques,
Merci beaucoup de ton aide.

Ca va beaucoup mieux effectivement. antivir ne m'a pas fait de surprise aujourd'hui.

Par contre J'ai toujours les liens google qui sont constemment redirigés vers des sites de jeux en ligne, ebay et autre. Il faut que je clique plusieurs fois sur le lien du site pour tomber sur la bonne adresse. Est-ce normal? ou est-ce encore une petite saleté qui traine?

Voici le rapport.

Kill'em by g3n-h@ckm@n 1.1.3.1

User : Flo () # PC-DE-FLO
Update on 08/12/2009 by g3n-h@ckm@n ::::: 12:30
Start at: 21:23:26 | 08/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18828
Windows Firewall Status : Enabled

C:\ -> Disque fixe local | 149,04 Go (57,67 Go free) [VistaOS] | NTFS
D:\ -> Disque fixe local | 139,28 Go (122,55 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Windows\System32\smss.exe 344
C:\Windows\system32\csrss.exe 404
C:\Windows\system32\csrss.exe 440
C:\Windows\system32\wininit.exe 448
C:\Windows\system32\winlogon.exe 476
C:\Windows\system32\services.exe 536
C:\Windows\system32\lsass.exe 548
C:\Windows\system32\lsm.exe 556
C:\Windows\system32\svchost.exe 716
C:\Windows\system32\svchost.exe 780
C:\Windows\system32\svchost.exe 820
C:\Windows\System32\svchost.exe 884
C:\Windows\System32\svchost.exe 948
C:\Windows\system32\svchost.exe 976
C:\Windows\Explorer.EXE 1300
C:\Users\Flo\Desktop\List_Killem\List_Kill'em.exe 1696
C:\Windows\system32\cmd.exe 1736
C:\Windows\system32\wbem\wmiprvse.exe 1992
C:\Users\Flo\AppData\Local\Temp\784A.tmp\pv.exe 232

Detections :
==========


¤¤¤¤¤¤¤¤¤¤ Files/folders :

"C:\Windows\System32\guard32.dll"
C:\Users\Flo\LOCAL Settings\Temp\_unps.exe


¤¤¤¤¤¤¤¤¤¤ Files/folders deleted :

Quarantine :

guard32.dll.Kill'em
_unps.exe.Kill'em

==============
host file OK !
==============

========
Registry
========
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}

============
Disk Cleaned
============

================
Prefetch cleaned :
================

AgAppLaunch.db
AgCx_S1_S-1-5-21-2782166536-572763711-4240454735-1000.snp.db
AgCx_SC1.db
AgCx_SC1.db.trx
AgCx_SC2.db
AgCx_SC3_59B6876C.db
AgGlFaultHistory.db
AgGlFgAppHistory.db
AgGlGlobalHistory.db
AgGlUAD_P_S-1-5-21-2782166536-572763711-4240454735-1000.db
AgGlUAD_P_S-1-5-21-2782166536-572763711-4240454735-1001.db
AgGlUAD_S-1-5-21-2782166536-572763711-4240454735-1000.db
AgGlUAD_S-1-5-21-2782166536-572763711-4240454735-1001.db
AgRobust.db
Layout.ini
NTOSBOOT-B00DFAAD.pf
PfSvPerfStats.bin
ReadyBoot



¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Google est vraiment plus rapide. Mais quand je fais un clic droit ouvrir dans un nouvel onglet je ne tombe pas sur le bon site.
Par exemple je viens de faire une recherche google et j'ai fait clic droit sur :

www.avast.com/.../download-avast-home.html - États-Unis -

Et je suis tombée sur:

https://fr.ask.com/web?siteid=2072&qsrc=999&l=dis&gc=1&q=antivirus

C'est peut-etre un mauvais parametrages de firefox?

Voici le log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:47:52, on 08/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Flo\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [lxdxmon.exe] "C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe"
O4 - HKLM\..\Run: [lxdxamon] "C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~2\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Identités - {45DB34C3-955C-11D3-ABEF-444553540000} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
O9 - Extra 'Tools' menuitem: Identités - {45DB34C3-955C-11D3-ABEF-444553540000} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
O9 - Extra button: Cartes - {45DB34C3-955C-11D3-ABEF-444553540001} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditPass.html
O9 - Extra 'Tools' menuitem: Cartes - {45DB34C3-955C-11D3-ABEF-444553540001} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditPass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: qvp - {4BA78E3D-CA25-4BFF-B8F0-8A3359E4B520} - C:\Program Files\QlikView\QvProtocol\Qvp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL C:\Windows\system32\guard32.dll
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GGSCILLZPKPK - Unknown owner - C:\Users\Flo\AppData\Local\Temp\GGSCILLZPKPK.exe (file missing)
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdxCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device - - C:\Windows\system32\lxdxcoms.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe
O23 - Service: YIHEQKTBVIRGLFS - Unknown owner - C:\Users\Flo\AppData\Local\Temp\YIHEQKTBVIRGLFS.exe (file missing)

Ok
Un grand merci Jacquesgache, tu m'as sauvé d'un reformatage (c'est ce qu'on m'avais conseillé !).
Tu as remis mon pc à neuf.

Toutes les personnes de ce forums sont indispensables.
Encore merci d'avoir pris sur ton temps.

J'ai effacé les autres moteurs de recherche mais il n'y avait pas ask dans la liste.

J'ai refait un test sur google
J'ai cliqué sur: www.secuser.com/outils/antivirus.htm

et je suis tombée sur un autre moteur:

http://scour.com/search/web/antivirus/abc1.

C'est quand meme bizarre?
Est-ce que ça peut venir de modules complémentaires installés. Pourtant j'en avais pas installé récemment lorsque j'ai eu ces problèmes.

Est-ce que je peux me brancher sur le réseau à mon travail ? Y'a plus de risques?