Virus --> fichiers temporaires

Dindon -  
 Dindon -
Bonjour,

Depuis hier mon dossier de fichiers temporaires d'internet explorer est bombarder de toute sorte de fichiers
alors que je utilise google chrome. J'ai beau les supprimer via CCleaner ils reviennent... j'ai aussi fait un scan d'avast, il a trouver 2 virus mais le problème persiste...
Si qqn peut m'aider merci
Configuration: Windows Vista

4 réponses

  1.
    truecode Messages postés 2092 Date d'inscription   Statut Membre Dernière intervention   86
     
    Bonjour ,

    Télécharge ici :

    http://images.malwareremoval.com/random/RSIT.exe

    random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

    ● Double-clique sur RSIT.exe afin de lancer RSIT.

    ● Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).

    ● Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    ● Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

    ● Poste le contenu de log.txt
    0
    1. Dindon
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by David at 2010-02-06 10:15:06
      Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
      System drive C: has 168 GB (72%) free of 233 GB
      Total RAM: 3066 MB (57% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 10:15:45, on 06.02.2010
      Platform: Windows Vista SP2 (WinNT 6.00.1906)
      MSIE: Internet Explorer v8.00 (8.00.6001.18882)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\Dwm.exe
      C:\Windows\system32\taskeng.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
      C:\Windows\msa.exe
      C:\Windows\RtHDVCpl.exe
      C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
      C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
      C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
      C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
      C:\Users\David\AppData\Local\Temp\Wll.exe
      C:\Windows\System32\rundll32.exe
      C:\Windows\PLFSetI.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Windows\system32\wbem\unsecapp.exe
      C:\Users\David\AppData\Local\Temp\RtkBtMnt.exe
      C:\Program Files\Launch Manager\QtZgAcer.EXE
      C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Windows\System32\rundll32.exe
      C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
      C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\CCleaner\CCleaner.exe
      C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
      C:\Windows\explorer.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Users\David\Documents\Downloads\RSIT.exe
      C:\Program Files\trend micro\David.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=100c&s=2&o=vp32&d=0209&m=aspire_6930g
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=100c&s=2&o=vp32&d=0209&m=aspire_6930g
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=100c&s=2&o=vp32&d=0209&m=aspire_6930g
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
      O1 - Hosts: ::1 localhost
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
      O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
      O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
      O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
      O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
      O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
      O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
      O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
      O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
      O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
      O4 - HKLM\..\Run: [ProductReg] "C:\Program Files\Acer\WR_PopUp\ProductReg.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
      O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
      O4 - HKLM\..\Run: [Skytel] Skytel.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas21.dll,AttachConsoleA
      O4 - HKCU\..\Run: [F5JMWNZTHI] C:\Users\David\AppData\Local\Temp\Wll.exe
      O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150595.exe -Update -1150595 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_en-US)_AppleWebKit/532.0_(KHTML,_like_Gecko)_Chrome/3.0.195.21_Safari/532.0" -"http://www.rubiks.com/Games/Rubiks%20Eclipse/Rubiks%20Eclipse%20Game.aspx"
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
      O4 - Global Startup: BTTray.lnk = ?
      O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
      O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
      O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
      O9 - Extra 'Tools' menuitem: Paramètres de Google &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
      O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
      O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O13 - Gopher Prefix:
      O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
      O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
      O20 - Winlogon Notify: spba - C:\Program Files\Common Files\SPBA\homefus2.dll
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
      O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
      O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
      O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
      O23 - Service: Service Google Update (gupdate1c9951f8075964c) (gupdate1c9951f8075964c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
      O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
      O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
      O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
      O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
      O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
      0
  2. truecode Messages postés 2092 Date d'inscription   Statut Membre Dernière intervention   86
     
    Désactive les logiciels de protection (Antivirus, Antispywares) puis :

    Télécharge Combofix sUBs : [url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe]combofix.exe[/url] et sauvegarde le sur ton bureau et pas ailleurs!

    Double-clic sur combofix, accepte la licence d'utilisation et laisse toi guider.

    Eventuellement, installe la console de récupération comme cela est conseillé

    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.

    Tu as le tutorial sur ce lien pour t'aider : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    PS : si Combofix ne se lance pas, renomme le fichier Combofix et retente.

    Si pas mieux, tente en mode sans échec sans prise en charge du réseau : Redémarre en mode sans échec, pour cela, redémarre l'ordinateur, avant le logo Windows, tapote sur la touche F8, un menu va apparaître, choisis Mode sans échec et appuye sur la touche entrée du clavier.
    0
    1. Dindon
       
      Merci j'éssai ca et je te redis
      0
    2. Dindon
       
      ComboFix 10-02-05.04 - David 06.02.2010 10:52:45.1.2 - x86
      Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.41.1036.18.3066.1641 [GMT 1:00]
      Lancé depuis: c:\users\David\Documents\Downloads\ComboFix.exe
      SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      c:\program files\pdfforge Toolbar\SearchSettings.dll
      c:\windows\msa.exe
      c:\windows\Suyin.reg
      c:\windows\system32\sshnas21.dll
      c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
      c:\windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2010-01-06 au 2010-02-06 ))))))))))))))))))))))))))))))))))))

      2010-02-06 09:15 . 2010-02-06 09:15 -------- d-----w- c:\program files\trend micro
      2010-02-06 09:15 . 2010-02-06 09:15 -------- d-----w- C:\rsit
      2010-02-02 17:51 . 2010-02-02 17:51 -------- d-----w- c:\program files\iPod
      2010-02-02 17:51 . 2010-02-02 17:51 -------- d-----w- c:\program files\iTunes
      2010-02-02 17:48 . 2010-02-02 17:48 -------- d-----w- c:\program files\QuickTime
      2010-02-02 17:44 . 2010-02-02 17:44 72488 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
      2010-01-25 19:41 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
      2010-01-25 19:41 . 2009-09-04 16:44 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
      2010-01-25 19:41 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
      2010-01-25 19:41 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
      2010-01-25 19:41 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
      2010-01-25 19:41 . 2009-09-04 16:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
      2010-01-25 19:41 . 2008-07-31 09:41 238088 ----a-w- c:\windows\system32\xactengine3_2.dll
      2010-01-25 19:41 . 2008-07-31 09:41 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
      2010-01-25 19:41 . 2008-07-31 09:40 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
      2010-01-17 15:15 . 2010-01-17 15:15 -------- d-----w- c:\users\David\AppData\Local\PunkBuster
      2010-01-17 01:20 . 2010-01-28 18:34 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
      2010-01-17 01:20 . 2010-01-17 15:07 22328 ----a-w- c:\users\David\AppData\Roaming\PnkBstrK.sys
      2010-01-17 01:20 . 2010-01-28 18:34 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
      2010-01-17 01:20 . 2010-01-17 15:07 682280 ----a-w- c:\windows\system32\pbsvc.exe
      2010-01-17 01:20 . 2010-01-17 01:20 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
      2010-01-15 23:31 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
      2010-01-15 23:31 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
      2010-01-15 23:31 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
      2010-01-15 23:31 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
      2010-01-15 23:31 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
      2010-01-15 23:31 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
      2010-01-15 23:31 . 2008-10-15 05:22 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
      2010-01-15 23:31 . 2008-10-15 05:22 2036576 ----a-w- c:\windows\system32\D3DCompiler_40.dll
      2010-01-15 23:31 . 2008-10-15 05:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
      2010-01-15 23:27 . 2010-01-15 23:27 -------- d-----w- c:\windows\system32\AGEIA
      2010-01-15 23:27 . 2010-01-15 23:28 -------- d-----w- c:\program files\AGEIA Technologies
      2010-01-13 17:15 . 2009-10-19 13:38 156672 ----a-w- c:\windows\system32\t2embed.dll
      2010-01-13 17:15 . 2009-10-19 13:35 72704 ----a-w- c:\windows\system32\fontsub.dll
      2010-01-12 22:15 . 2008-10-27 09:04 514384 ----a-w- c:\windows\system32\XAudio2_3.dll
      2010-01-12 22:15 . 2008-10-27 09:04 235856 ----a-w- c:\windows\system32\xactengine3_3.dll
      2010-01-12 22:15 . 2008-10-27 09:04 23376 ----a-w- c:\windows\system32\X3DAudio1_5.dll
      2010-01-12 22:15 . 2008-10-27 09:04 70992 ----a-w- c:\windows\system32\XAPOFX1_2.dll
      2010-01-12 22:15 . 2008-07-10 10:01 467984 ----a-w- c:\windows\system32\d3dx10_39.dll
      2010-01-12 22:15 . 2008-07-10 10:00 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll
      2010-01-12 22:15 . 2008-07-10 10:00 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
      2010-01-07 22:18 . 2010-01-07 22:18 -------- d-----w- c:\users\David\AppData\Roaming\LEGO Company

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2010-02-06 10:10 . 2008-01-21 08:40 672322 ----a-w- c:\windows\system32\perfh00C.dat
      2010-02-06 10:10 . 2008-01-21 08:40 124434 ----a-w- c:\windows\system32\perfc00C.dat
      2010-02-06 10:03 . 2009-02-23 18:17 12 ----a-w- c:\windows\bthservsdp.dat
      2010-02-06 10:01 . 2009-02-24 17:24 -------- d-----w- c:\program files\pdfforge Toolbar
      2010-02-05 22:47 . 2009-02-22 17:27 88915 ----a-w- c:\programdata\nvModes.dat
      2010-02-05 21:07 . 2009-02-22 18:57 -------- d-----w- c:\programdata\Google Updater
      2010-02-04 21:42 . 2009-02-22 16:39 680 ----a-w- c:\users\David\AppData\Local\d3d9caps.dat
      2010-02-04 21:27 . 2009-06-13 11:34 -------- d-----r- c:\program files\TypingMaster
      2010-02-04 21:22 . 2008-11-20 22:21 -------- d--h--w- c:\program files\InstallShield Installation Information
      2010-02-04 21:05 . 2009-02-22 16:39 -------- d-----w- c:\program files\Google
      2010-02-04 21:02 . 2008-11-20 23:03 -------- d-----w- c:\program files\Common Files\Adobe
      2010-02-03 19:05 . 2009-02-22 18:53 -------- d-----r- c:\program files\Skype
      2010-02-02 17:51 . 2009-02-22 19:17 -------- d-----w- c:\program files\Common Files\Apple
      2010-01-29 23:31 . 2009-06-02 20:08 -------- d-----w- c:\program files\SeekService
      2010-01-14 16:43 . 2008-11-20 23:05 -------- d-----w- c:\programdata\Microsoft Help
      2010-01-14 16:42 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
      2010-01-14 10:12 . 2009-10-03 13:42 181120 ------w- c:\windows\system32\MpSigStub.exe
      2010-01-12 18:46 . 2009-09-04 17:31 -------- d-----w- c:\programdata\Electronic Arts
      2010-01-12 16:58 . 2009-02-22 16:41 170112 ----a-w- c:\users\David\AppData\Local\GDIPFONTCACHEV1.DAT
      2010-01-02 06:38 . 2010-01-24 19:10 916480 ----a-w- c:\windows\system32\wininet.dll
      2010-01-02 06:32 . 2010-01-24 19:10 109056 ----a-w- c:\windows\system32\iesysprep.dll
      2010-01-02 06:32 . 2010-01-24 19:10 71680 ----a-w- c:\windows\system32\iesetup.dll
      2010-01-02 04:57 . 2010-01-24 19:10 133632 ----a-w- c:\windows\system32\ieUnatt.exe
      2009-12-29 23:12 . 2009-03-05 17:22 1 ----a-w- c:\users\David\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
      2009-12-24 11:57 . 2009-12-22 12:37 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
      2009-12-23 12:35 . 2009-12-23 12:35 -------- d-----w- c:\users\David\AppData\Roaming\Ubisoft
      2009-12-23 12:26 . 2009-12-23 12:26 -------- d-----w- c:\programdata\Ubisoft
      2009-12-19 12:59 . 2009-12-19 12:59 -------- d-----w- c:\program files\AC3Filter
      2009-12-16 20:42 . 2009-12-16 20:42 10134 ----a-r- c:\users\David\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
      2009-12-16 20:42 . 2009-12-16 20:42 -------- d-----w- c:\program files\Microsoft WSE
      2009-11-30 17:02 . 2009-11-30 17:02 171144 ----a-w- c:\windows\system32\xliveinstall.dll
      2009-11-30 17:02 . 2009-11-30 17:02 72840 ----a-w- c:\windows\system32\xliveinstallhost.exe
      2009-11-29 18:08 . 2009-11-29 18:08 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb569B.tmp.exe
      2009-11-24 23:54 . 2009-02-22 18:33 1280480 ----a-w- c:\windows\system32\aswBoot.exe
      2009-11-24 23:50 . 2009-02-22 18:33 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
      2009-11-24 23:50 . 2009-02-22 18:33 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
      2009-11-24 23:49 . 2009-02-22 18:33 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
      2009-11-24 23:49 . 2009-02-22 18:33 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
      2009-11-24 23:48 . 2009-02-22 18:33 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
      2009-11-24 23:47 . 2009-02-22 18:33 97480 ----a-w- c:\windows\system32\AvastSS.scr
      2009-11-19 19:10 . 2009-11-19 19:10 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
      2009-11-18 18:26 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
      2009-11-09 12:31 . 2009-12-10 17:02 24064 ----a-w- c:\windows\system32\nshhttp.dll
      2009-11-09 12:30 . 2009-12-10 17:02 30720 ----a-w- c:\windows\system32\httpapi.dll
      2009-11-09 10:36 . 2009-12-10 17:02 411648 ----a-w- c:\windows\system32\drivers\http.sys
      2009-09-25 16:41 . 2009-09-25 16:41 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
      2009-09-25 16:41 . 2009-09-25 16:41 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
      .

      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
      2009-01-30 14:12 650752 ----a-w- c:\program files\pdfforge Toolbar\WidgiToolbarIE.dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
      "{B922D405-6D13-4A2B-AE89-08A030DA4402}"= "c:\program files\pdfforge Toolbar\WidgiToolbarIE.dll" [2009-01-30 650752]

      [HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
      @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
      [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
      2008-07-29 16:52 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
      "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
      "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-22 68856]

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
      "Shockwave Updater"="c:\windows\system32\Adobe\Shockwave 11\SwHelper_1150595.exe" [2009-03-19 460216]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
      "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808]
      "RtHDVCpl"="RtHDVCpl.exe" [2008-09-18 6294048]
      "ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-08-01 405504]
      "eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-07-29 526896]
      "eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-09-11 544768]
      "BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-25 28672]
      "ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-09-23 6144]
      "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-18 13543968]
      "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-07-18 92704]
      "PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
      "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-25 1049896]
      "LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-06-04 817672]
      "ZPdtWzdVitaKey MC3000"="c:\program files\Acer\Acer Bio Protection\PdtWzd.exe" [2009-02-22 3676160]
      "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
      "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
      "Skytel"="Skytel.exe" [2008-09-18 1833504]
      "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
      "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
      "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]

      c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
      BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-4-23 727592]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "EnableUIADesktopToggle"= 0 (0x0)
      "DisableCAD"= 1 (0x1)

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AWinNotifyVitaKey MC3000]
      2009-02-22 17:06 3197952 ----a-w- c:\program files\Acer\Acer Bio Protection\WinNotify.dll

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\spba]
      2008-03-25 14:24 567560 ----a-w- c:\program files\Common Files\SPBA\homefus2.dll

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
      "aux"=wdmaud.drv

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
      @="Service"

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
      2009-12-22 00:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
      2010-01-22 18:16 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
      2009-07-26 14:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
      2009-07-27 02:37 180224 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
      2009-11-10 22:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
      2009-01-30 15:22 992256 ----a-w- c:\program files\pdfforge Toolbar\SearchSettings.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
      2009-10-09 15:47 25623336 ----a-r- c:\program files\Skype\Phone\Skype.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
      2009-07-25 03:23 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
      2009-02-22 16:39 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
      "DisableMonitoring"=dword:00000001

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
      "AntiVirusOverride"=dword:00000001
      "VistaSp2"=hex(b):0c,02,c2,94,8a,3e,ca,01

      R0 AlfaFF;AlfaFF File System mini-filter;c:\windows\System32\drivers\AlfaFF.sys [22.02.2009 18:06 42608]
      R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [22.02.2009 19:33 114768]
      R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [22.02.2009 19:33 20560]
      R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [22.02.2009 19:33 53328]
      R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [03.03.2008 13:11 16384]
      R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [20.11.2008 23:31 24576]
      R2 IGBASVC;iGroupTec Service;c:\program files\Acer\Acer Bio Protection\BASVC.exe [22.02.2009 18:06 3602432]
      R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [25.04.2008 21:36 45056]
      R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [25.04.2008 21:36 131072]
      R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [17.11.2008 07:40 3668480]
      R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [21.11.2008 07:17 44064]
      R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [28.03.2007 07:51 43008]
      S2 gupdate1c9951f8075964c;Service Google Update (gupdate1c9951f8075964c);c:\program files\Google\Update\GoogleUpdate.exe [22.02.2009 19:58 133104]
      S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21.01.2008 03:23 21504]
      S3 s916bus;Sony Ericsson Device 916 driver (WDM);c:\windows\System32\drivers\s916bus.sys [02.11.2007 10:47 83496]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
      bthsvcs REG_MULTI_SZ BthServ
      LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
      .
      Contenu du dossier 'Tâches planifiées'

      2010-02-06 c:\windows\Tasks\Google Software Updater.job
      - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-22 16:45]

      2010-02-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-22 18:58]

      2010-02-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-22 18:58]

      2010-02-04 c:\windows\Tasks\User_Feed_Synchronization-{B0511D50-C978-4D39-8256-2F6D556A631D}.job
      - c:\windows\system32\msfeedssync.exe [2010-01-24 04:56]
      .
      .
      ------- Examen supplémentaire -------
      .
      uStart Page = hxxp://www.google.ch/
      mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=100c&s=2&o=vp32&d=0209&m=aspire_6930g
      uInternet Settings,ProxyOverride = *.local
      IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
      IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
      IE: Envoyer au périphérique &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      IE: Envoyer l'&image au périphérique Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
      IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
      FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\lohwk5qm.default\
      FF - prefs.js: browser.search.selectedEngine - Ask.com
      FF - prefs.js: keyword.URL -
      FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff35\gears.dll
      FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
      FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
      FF - plugin: c:\program files\Google\Picasa3\npPicasa2.dll
      FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
      FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
      FF - plugin: c:\program files\Total Immersion\DFusionWeb\nptidfusionplugin.dll
      FF - plugin: c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\lohwk5qm.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
      FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
      .
      - - - - ORPHELINS SUPPRIMES - - - -

      URLSearchHooks-{E312764E-7706-43F1-8DAB-FCDD2B1E416D} - c:\program files\pdfforge Toolbar\SearchSettings.dll
      BHO-{E312764E-7706-43F1-8DAB-FCDD2B1E416D} - c:\program files\pdfforge Toolbar\SearchSettings.dll
      WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
      HKCU-Run-LosAlamos - c:\windows\system32\sshnas21.dll
      HKLM-Run-eRecoveryService - (no file)



      **************************************************************************

      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2010-02-06 11:25
      Windows 6.0.6002 Service Pack 2 NTFS

      Recherche de processus cachés ...

      Recherche d'éléments en démarrage automatique cachés ...

      Recherche de fichiers cachés ...

      Scan terminé avec succès
      Fichiers cachés: 0

      **************************************************************************
      .
      --------------------- CLES DE REGISTRE BLOQUEES ---------------------

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000
      .
      --------------------- DLLs chargées dans les processus actifs ---------------------

      - - - - - - - > 'Explorer.exe'(3720)
      c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
      c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
      c:\windows\system32\btncopy.dll
      .
      ------------------------ Autres processus actifs ------------------------
      .
      c:\windows\system32\nvvsvc.exe
      c:\program files\Alwil Software\Avast4\aswUpdSv.exe
      c:\program files\Alwil Software\Avast4\ashServ.exe
      c:\windows\system32\WLANExt.exe
      c:\windows\system32\rundll32.exe
      c:\program files\Common Files\SPBA\upeksvr.exe
      c:\program files\Acer\Acer Bio Protection\CompPtcVUI.exe
      c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      c:\program files\Bonjour\mDNSResponder.exe
      c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
      c:\program files\Intel\WiFi\bin\EvtEng.exe
      c:\program files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
      c:\program files\Common Files\LightScribe\LSSrvc.exe
      c:\acer\Mobility Center\MobilityService.exe
      c:\program files\CDBurnerXP\NMSAccessU.exe
      c:\windows\system32\PnkBstrA.exe
      c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
      c:\windows\system32\DRIVERS\xaudio.exe
      c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
      c:\program files\Alwil Software\Avast4\ashMaiSv.exe
      c:\program files\Alwil Software\Avast4\ashWebSv.exe
      c:\windows\system32\conime.exe
      c:\windows\system32\wbem\unsecapp.exe
      .
      **************************************************************************
      .
      Heure de fin: 2010-02-06 11:29:35 - La machine a redémarré
      ComboFix-quarantined-files.txt 2010-02-06 10:29

      Avant-CF: 176'070'144'000 octets libres
      Après-CF: 175'461'572'608 octets libres

      - - End Of File - - F73FA967FD05C5B3BC1A358C9B7DCD6C
      0
  3. truecode Messages postés 2092 Date d'inscription   Statut Membre Dernière intervention   86
     
    Poste un nouveau rapport RSIT sil te plait
    0
    1. Dindon
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by David at 2010-02-06 19:14:02
      Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
      System drive C: has 163 GB (70%) free of 233 GB
      Total RAM: 3066 MB (58% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:14:06, on 06.02.2010
      Platform: Windows Vista SP2 (WinNT 6.00.1906)
      MSIE: Internet Explorer v8.00 (8.00.6001.18882)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
      C:\Windows\RtHDVCpl.exe
      C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
      C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
      C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
      C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
      C:\Windows\System32\rundll32.exe
      C:\Windows\PLFSetI.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Launch Manager\QtZgAcer.EXE
      C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
      C:\Windows\ehome\ehtray.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
      C:\Windows\system32\wbem\unsecapp.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Users\David\AppData\Local\Temp\RtkBtMnt.exe
      C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Users\David\Documents\Downloads\RSIT (1).exe
      C:\Program Files\trend micro\David.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=100c&s=2&o=vp32&d=0209&m=aspire_6930g
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
      O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
      O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
      O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
      O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
      O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
      O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
      O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
      O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
      O4 - HKLM\..\Run: [ProductReg] "C:\Program Files\Acer\WR_PopUp\ProductReg.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
      O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
      O4 - HKLM\..\Run: [Skytel] Skytel.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150595.exe -Update -1150595 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_en-US)_AppleWebKit/532.0_(KHTML,_like_Gecko)_Chrome/3.0.195.21_Safari/532.0" -"http://www.rubiks.com/Games/Rubiks%20Eclipse/Rubiks%20Eclipse%20Game.aspx"
      O4 - Global Startup: BTTray.lnk = ?
      O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
      O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
      O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
      O9 - Extra 'Tools' menuitem: Paramètres de Google &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
      O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
      O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
      O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
      O20 - Winlogon Notify: spba - C:\Program Files\Common Files\SPBA\homefus2.dll
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
      O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
      O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
      O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
      O23 - Service: Service Google Update (gupdate1c9951f8075964c) (gupdate1c9951f8075964c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
      O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
      O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
      O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
      O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
      O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
      0
  4. truecode Messages postés 2092 Date d'inscription   Statut Membre Dernière intervention   86
     
    Voilà maintenant fais cela :

    ● Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3

    ● Lance l'installation du programme en exécutant le fichier téléchargé.
    ● Double-clique maintenant sur le raccourci de Toolbar-S&D.
    ● Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    ● Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    ● Poste le rapport généré. (C:\TB.txt)
    0
    1. Dindon
       
      -----------\\ ToolBar S&D 1.2.9 XP/Vista

      Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz )
      BIOS : ZK2 v0.3204 3B04
      USER : David ( Administrator )
      BOOT : Normal boot
      C:\ (Local Disk) - NTFS - Total:227 Go (Free:159 Go)
      D:\ (Local Disk) - NTFS - Total:465 Go (Free:80 Go)
      E:\ (Local Disk) - NTFS - Total:224 Go (Free:222 Go)
      F:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
      Option : [1] ( 07.02.2010|17:58 )

      [ UAC => 1 ]

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="https://www.google.ch/?gws_rd=ssl"
      "Local Page"="C:\\Windows\\system32\\blank.htm"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
      "Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=100c&s=2&o=vp32&d=0209&m=aspire_6930g"
      "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
      "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
      "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
      "Local Page"="C:\\Windows\\System32\\blank.htm"


      --------------------\\ Recherche d'autres infections


      Aucune autre infection trouvée !

      [ UAC => 1 ]


      1 - "C:\ToolBar SD\TB_1.txt" - 07.02.2010|17:53 - Option : [1]
      2 - "C:\ToolBar SD\TB_2.txt" - 07.02.2010|17:56 - Option : [1]
      3 - "C:\ToolBar SD\TB_3.txt" - 07.02.2010|17:58 - Option : [1]

      -----------\\ Fin du rapport a 17:58:39.86
      0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Erreur 0x800700E1
Didiervd -
Viktimz -

11 réponses