curseur bloque sablier et my web search Résolu/Fermé

Question

Bonjour a tous, 

je rencontre quelques probleme depuis 2 jours et je viens chercher votre aide
en premier lieu une barre mywebsearch c est intallé sur mon pc j ai lu qu il sagissait d une verolle, j ai reussi a l enlever sans pouvoir la suprimer du systeme mais bon.
en suite j ai le sablier du curseur qui clignote tout le temps sans que mon dd ne cherche, je pense donc etre infecter
j ai fait un rapport hijackthis sans pouvoir le dechiffrer
je compte sur votre aide pour m eclairer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:34:39, on 02/11/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\Program Files\NDAS\System
dassvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\HP Wireless Printer Adapter\ConnectMgr.exe
C:\Program Files\NDAS\System
dasmgmt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Canon\EOS Utility\WFTPairing\WFTPairing.exe
C:\Program Files\Canon\EOS Utility\WFTPairing\EOSUPNPSV.exe
C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&rlz=1T4GPTB_frFR304FR305&gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww1.bigseekpro.com{2DA46634-F042-440E-8B31-0C6030A54E73}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Policies\Explorer\Run: [] 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [OrangePlayer] c:\program files\orange\media player\Media Player.exe /systray (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: []  (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: []  (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: []  (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: []  (User 'Default user')
O4 - S-1-5-18 Startup: WFTPairing.lnk = C:\Program Files\Canon\EOS Utility\WFTPairing\WFTPairing.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: WFTPairing.lnk = C:\Program Files\Canon\EOS Utility\WFTPairing\WFTPairing.exe (User 'Default user')
O4 - Startup: WFTPairing.lnk = C:\Program Files\Canon\EOS Utility\WFTPairing\WFTPairing.exe
O4 - Global Startup: Gestionnaire de connexion.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: NDAS Device Management.lnk = C:\Program Files\NDAS\System
dasmgmt.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000338&p=ZJxdm353YYfr&si=142522&a=DE_cWM5IvfLd7uyIOCvFpQ&n=2011110103
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/50.14/uploader2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Update Service (gupdate1c95c6b4da67842) (gupdate1c95c6b4da67842) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - C:\Program Files\NDAS\System
dassvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Windows Internet Name Service - Unknown owner - C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe

thedoct · Answer

ps j ai oublier de preciser que mon pc rame l UC est a fond et que dans le gestionnaire de tache j ai un fichier wins.exe ouvert au moins 20 fois a 10248 ko chacun 
voila

jacques.gache · Answer

bonjour, tu fais ce qui suit , merci 

1) Fixer les lignes avec hijackthis 

.Tu fermes tout les programmes ouverts y compris le navigateur. sauf ton anti-virus et pare-feux 
.Lances HijackThis 
.Cliques sur "Do a system scan only" 
.Tu coches les lignes suivantes : 

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL     
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL     
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL     
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL     
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h     
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe     
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe     
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000338&p=ZJxdm353YYfr&si=142522&a=DE_cWM5IvfLd7uyIOCvFpQ&n=2011110103 
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe     
O23 - Service: Windows Internet Name Service - Unknown owner - C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe     




.Tu cliques sur "Fix Checked" 
.Tu fermes HijackThis 

des expliquations en images : http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm




2) fais un examen complet de ton pc avec malwarebytes


 !! ATTENTION !!! près de 2 heures de scan !!!

Télécharge Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe

si problème essais avec celui ci : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installation, alors télécharge le ici :COMCTL32.OCX 

. enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. si le pare-feu demande l'autorisation  de se connecter pour malwarebytes, acceptes
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Une fois la mise à jour terminée
. rend-toi dans l'onglet, Recherche
. Sélectionnes  Exécuter un examen complet
. Sélectionnes tous les disques si proposés
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. redemarre le pc si il le fait pas lui même
. une fois redémarré  double-cliques sur malwarebytes
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller


Si tu as besoin d'aide regarde ce tutoriel :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/


3) pour être sur que plus rien sur le pc postes un zhpdiag qui sera plus complet donc plus précis si infection il y a 

Ouvre ce lien et télécharge ZHPDiag : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

cliques sur télécharger "celui du bas" 

ou directement ici: ftp://zebulon.fr/ZHPDiag2.exe



Enregistres le sur ton Bureau. 

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag 

pour Vista,et seven tu  fais un clic droit sur l'icône et exécute en tant qu'administrateur. 

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau. 

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix. 

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !! 

Cliques sur la loupe pour lancer l'analyse. 

 si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire  un rapport plus complet et pouvoir en faire une lecture plus approfondis 

Laisses l'outil travailler, il peut être assez long 

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau. 


Fermes ZHPDiag en fin d'analyse. 


Pour me le transmettre clique sur ce lien : 

http://www.cijoint.fr/index.php  


Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et  ZHPDiag.txt clique dessus 

Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse. 


et si problème passe par celui ci :    https://www.cjoint.com/

thedoct · Answer

ok merci jacques je me lance et vous tiens au courant

thedoct · Answer

et voila la premiere etape terminé

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8071

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

02/11/2011 21:40:03
mbam-log-2011-11-02 (21-40-03).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 188739
Temps écoulé: 6 minute(s), 26 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 134
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 30
Fichier(s) infecté(s): 147

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
c:\program files\mywebsearch\bar\1.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.OutlookAddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MyWebSearchService (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Internet Name Service (Trojan.Sefnit) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearchToolBar.SettingsPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearchToolBar.SettingsPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.IECookiesManager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.IECookiesManager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.DataControl.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.DataControl (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3E720452-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.HTMLPanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.HTMLPanel (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearchToolBar.ToolbarPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearchToolBar.ToolbarPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterSettingsControl.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterSettingsControl (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.PseudoTransparentPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.PseudoTransparentPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterBarButton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterBarButton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ScreenSaverControl.ScreenSaverInstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ScreenSaverControl.ScreenSaverInstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.KillerObjManager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.KillerObjManager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HistoryKillerScheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HistoryKillerScheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HistorySwatterControlBar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HistorySwatterControlBar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.ChatSessionPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.ChatSessionPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{549B5CA7-4A86-11D7-A4DF-000874180BB3} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.MultipleButton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.MultipleButton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.ThirdPartyInstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.ThirdPartyInstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.UrlAlertButton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MyWebSearch.UrlAlertButton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{819FFE22-35C7-4925-8CDA-4E0E2DB94302} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8FFDF636-0D87-4B33-B9E9-79A53F6E1DAE} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{799391D3-EB86-4bac-9BD3-CBFEA58A0E15} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Value: f3PopularScreensavers -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Value: FunWebProducts -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Internet Name Service\ImagePath (Trojan.P2P) -> Value: ImagePath -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\documents and settings\Xav\application data\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\documents and settings\Xav\application data\funwebproducts\Data (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\documents and settings\Xav\application data\funwebproducts\Data\Xav (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\2.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\screensaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\screensaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Shared\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch (Adware.MyWebSearch) -> Delete on reboot.
c:\program files\mywebsearch\bar (Adware.MyWebSearch) -> Delete on reboot.
c:\program files\mywebsearch\bar\1.bin (Adware.MyWebSearch) -> Delete on reboot.
c:\program files\mywebsearch\bar\1.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin	hirdpartyinstallers (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\IE9Mesg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Overlay (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\program files\mywebsearch\bar\1.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Delete on reboot.
c:\program files\mywebsearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\config\systemprofile\local settings\application data\windows internet name service\wins.exe (Trojan.Sefnit) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\f3PSSavr.scr (PUP.FunWebProducts) -> Not selected for removal.
c:\documents and settings\Xav\local settings\Temp	asks	cchecker.exe (Trojan.Sefnit) -> Quarantined and deleted successfully.
c:\documents and settings\Xav\application data\funwebproducts\Data\Xav\avatar.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Shared\Cache\cursormaniabtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Shared\Cache\smileycentralbtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\chrome.manifest (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3IMSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3REGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3RESTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\INSTALL.RDF (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3AUXSTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3DLGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3IEOVR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\M3TPINST.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\MWSMLBTN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\MWSUABTN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\1.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\avatar.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\bgfadel.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\bgfader.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\common-x.css (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\common.css (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\cornerbl.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\cornerbr.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\ext_def.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\ext_roll.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\include.js (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\index.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\loader.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\loading.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\logo.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\max_def.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\max_roll.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\min_def.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\min_roll.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON
oflash.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMONes_def.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMONes_roll.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\spacer.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\spacer.swf (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON	opgrad.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Avatar\COMMON\window.ico (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DAF4B (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DB4D9 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DB892.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DB95D.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DBAD4.bmp (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DBBAF.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\000DBE30.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\History\search3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\IE9Mesg\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\8_step1.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\autoup.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\autoup.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkez.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkgr.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkgs.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bklf.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkrg.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkwebfet.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzc.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzl.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzn.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzq.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzr.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzu.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzv.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzw.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\bkzwinky.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\blubtn2d.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\blubtn2r.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\blubtn3d.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\blubtn3r.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\center.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\index.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\mid_dots.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\protect.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMONebut4.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMONebut4b.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMONebut4c.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\shield.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\shocked.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\stop.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\systray.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\systrayp.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON	p_grad.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Message\COMMON\warn.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Overlay\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\mywebsearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.

thedoct · Answer

et voici le lien du rapport ZHPDiag

http://www.cijoint.fr/cjlink.php?file=cj201111/cijIPfFPCJ.txt 

encore merci de ton aide

thedoct · Answer

bonjour Jacques

oui désolé j ai du aller trop vite, je n avais pas vu l onglet a cocher
je recommence tout a la lettre et vous tiens informé ce soir
encore merci du tuto si bien fait et du temps passé
a ce soir

thedoct · Answer

bonsoir Jacques, le forum

effectivement les analyses etaient plus longues
par contre je ne sais pas ce qu est un rootkit .

ci joint

1/rapport de Reload_Tdsskiller 

http://www.cijoint.fr/cjlink.php?file=cj201111/cijHKvIFqg.txt 

2/rapport de rogue killer 

http://www.cijoint.fr/cjlink.php?file=cj201111/cijVoDOvA9.txt 

3/ rapport de toolbar S&D 

http://www.cijoint.fr/cjlink.php?file=cj201111/cijtFvEBZy.txt 

4/ rapport de malwarebytes

http://www.cijoint.fr/cjlink.php?file=cj201111/cij0uZHygM.txt 

5/ rapport de zhpdiag

http://www.cijoint.fr/cjlink.php?file=cj201111/cijc4VeiYk.txt 

je les ai tous heberger pour que cela reste lissible
merci de ton aide

thedoct · Answer

et ben je ne connaissait pas
je te poste les rapport un a un si tu veux

thedoct · Answer

1/rapport de Reload_Tdsskiller 06:52:56.0484 4988 TDSS rootkit removing tool 2.6.14.0 Oct 28 2011 11:11:01 06:52:56.0703 4988 ============================================================ 06:52:56.0703 4988 Current date / time: 2011/11/03 06:52:56.0703 06:52:56.0703 4988 SystemInfo: 06:52:56.0703 4988 06:52:56.0703 4988 OS Version: 5.1.2600 ServicePack: 2.0 06:52:56.0703 4988 Product type: Workstation 06:52:56.0703 4988 ComputerName: XAV-FCF9EC4FF2B 06:52:56.0703 4988 UserName: Xav 06:52:56.0703 4988 Windows directory: C:\WINDOWS 06:52:56.0703 4988 System windows directory: C:\WINDOWS 06:52:56.0703 4988 Processor architecture: Intel x86 06:52:56.0703 4988 Number of processors: 2 06:52:56.0703 4988 Page size: 0x1000 06:52:56.0703 4988 Boot type: Normal boot 06:52:56.0703 4988 ============================================================ 06:52:57.0953 4988 Initialize success 06:53:01.0578 4652 ============================================================ 06:53:01.0578 4652 Scan started 06:53:01.0578 4652 Mode: Manual; 06:53:01.0578 4652 ============================================================ 06:53:03.0000 4652 Abiosdsk - ok 06:53:03.0109 4652 abp480n5 - ok 06:53:03.0156 4652 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys 06:53:03.0156 4652 ACPI - ok 06:53:03.0187 4652 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys 06:53:03.0187 4652 ACPIEC - ok 06:53:03.0203 4652 adpu160m - ok 06:53:03.0250 4652 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys 06:53:03.0265 4652 aec - ok 06:53:03.0312 4652 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys 06:53:03.0312 4652 AFD - ok 06:53:03.0328 4652 Aha154x - ok 06:53:03.0359 4652 aic78u2 - ok 06:53:03.0390 4652 aic78xx - ok 06:53:03.0421 4652 AliIde - ok 06:53:03.0453 4652 ALIWEHCD - ok 06:53:03.0484 4652 AliWGP - ok 06:53:03.0515 4652 amsint - ok 06:53:03.0546 4652 asc - ok 06:53:03.0578 4652 asc3350p - ok 06:53:03.0609 4652 asc3550 - ok 06:53:03.0656 4652 Aspi32 (20d04091eba710f6988f710507d85868) C:\WINDOWS\system32\drivers\Aspi32.sys 06:53:03.0656 4652 Aspi32 - ok 06:53:03.0718 4652 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 06:53:03.0718 4652 AsyncMac - ok 06:53:03.0765 4652 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys 06:53:03.0765 4652 atapi - ok 06:53:03.0781 4652 Atdisk - ok 06:53:03.0890 4652 ati2mtag (8763ede3e0cd40f5c3450571ac57f205) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 06:53:03.0906 4652 ati2mtag - ok 06:53:03.0921 4652 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 06:53:03.0937 4652 Atmarpc - ok 06:53:03.0968 4652 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 06:53:03.0968 4652 audstub - ok 06:53:04.0031 4652 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 06:53:04.0031 4652 Beep - ok 06:53:04.0234 4652 BHDrvx86 (fe57ab6683f48264d1cd36f5d5ee95a8) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20111027.001\BHDrvx86.sys 06:53:04.0234 4652 BHDrvx86 - ok 06:53:04.0296 4652 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 06:53:04.0296 4652 cbidf2k - ok 06:53:04.0343 4652 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 06:53:04.0343 4652 CCDECODE - ok 06:53:04.0359 4652 cd20xrnt - ok 06:53:04.0375 4652 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 06:53:04.0375 4652 Cdaudio - ok 06:53:04.0437 4652 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys 06:53:04.0437 4652 Cdfs - ok 06:53:04.0484 4652 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys 06:53:04.0484 4652 Cdrom - ok 06:53:04.0500 4652 Changer - ok 06:53:04.0531 4652 CmdIde - ok 06:53:04.0578 4652 Cpqarray - ok 06:53:04.0609 4652 dac2w2k - ok 06:53:04.0656 4652 dac960nt - ok 06:53:04.0687 4652 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys 06:53:04.0687 4652 Disk - ok 06:53:04.0750 4652 dmboot (e2d3b7620310fe56685f9b15a6b404b3) C:\WINDOWS\system32\drivers\dmboot.sys 06:53:04.0765 4652 dmboot - ok 06:53:04.0812 4652 dmio (c77f5c20aa70197a69aa84baa9de43c8) C:\WINDOWS\system32\drivers\dmio.sys 06:53:04.0812 4652 dmio - ok 06:53:04.0859 4652 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 06:53:04.0859 4652 dmload - ok 06:53:04.0921 4652 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys 06:53:04.0921 4652 DMusic - ok 06:53:04.0937 4652 dpti2o - ok 06:53:05.0000 4652 driverhardwarev2 (41607ad6da2ea04f25ea869a1ce7a0a7) C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys 06:53:05.0000 4652 driverhardwarev2 - ok 06:53:05.0031 4652 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys 06:53:05.0031 4652 drmkaud - ok 06:53:05.0093 4652 eeCtrl (8f7dbc4be48f5388a6fe1f285e7948ef) C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys 06:53:05.0093 4652 eeCtrl - ok 06:53:05.0125 4652 EraserUtilRebootDrv (3ee14d400e0fdd0d214275a4a20b7022) C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 06:53:05.0125 4652 EraserUtilRebootDrv - ok 06:53:05.0171 4652 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys 06:53:05.0171 4652 Fastfat - ok 06:53:05.0187 4652 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\drivers\Fdc.sys 06:53:05.0187 4652 Fdc - ok 06:53:05.0218 4652 Fips (8b121ff880683607ab2aef0340721718) C:\WINDOWS\system32\drivers\Fips.sys 06:53:05.0218 4652 Fips - ok 06:53:05.0218 4652 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\drivers\Flpydisk.sys 06:53:05.0218 4652 Flpydisk - ok 06:53:05.0250 4652 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 06:53:05.0265 4652 FltMgr - ok 06:53:05.0296 4652 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys 06:53:05.0296 4652 fssfltr - ok 06:53:05.0343 4652 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS 06:53:05.0359 4652 FsUsbExDisk - ok 06:53:05.0390 4652 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 06:53:05.0390 4652 Fs_Rec - ok 06:53:05.0453 4652 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 06:53:05.0453 4652 Ftdisk - ok 06:53:05.0484 4652 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 06:53:05.0484 4652 GEARAspiWDM - ok 06:53:05.0546 4652 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys 06:53:05.0546 4652 Gpc - ok 06:53:05.0609 4652 HDAudBus (cbc3def409549672b915fb9403d63f74) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 06:53:05.0609 4652 HDAudBus - ok 06:53:05.0640 4652 hidusb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys 06:53:05.0640 4652 hidusb - ok 06:53:05.0656 4652 hpn - ok 06:53:05.0718 4652 hpnuhst (ac6abca57a9ca35dca94f9d0c60758bf) C:\WINDOWS\system32\DRIVERS\hpnuhst.sys 06:53:05.0718 4652 hpnuhst - ok 06:53:05.0750 4652 HPNUHUB (bf5e0555c119693f8d611e0b046e9517) C:\WINDOWS\system32\DRIVERS\hpnuhub.sys 06:53:05.0750 4652 HPNUHUB - ok 06:53:05.0812 4652 HPWPAUSB (92b41d08a1109746023999061ef73a11) C:\WINDOWS\system32\Drivers\HPWPAUSB.sys 06:53:05.0812 4652 HPWPAUSB - ok 06:53:05.0875 4652 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys 06:53:05.0875 4652 HTTP - ok 06:53:05.0890 4652 i2omgmt - ok 06:53:05.0906 4652 i2omp - ok 06:53:05.0953 4652 i8042prt (d1efcbd693b5ba21314d06368c471070) C:\WINDOWS\system32\drivers\i8042prt.sys 06:53:05.0953 4652 i8042prt - ok 06:53:06.0140 4652 IDSxpx86 (e72d3894d42355e9cd5fd77e1e4fea11) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20111102.030\IDSxpx86.sys 06:53:06.0140 4652 IDSxpx86 - ok 06:53:06.0203 4652 imagedrv (e20b6650542d70abd21281f08fb723d2) C:\WINDOWS\system32\Drivers\imagedrv.sys 06:53:06.0203 4652 imagedrv - ok 06:53:06.0218 4652 imagesrv (729055df132a6ecf071e383f72f1b0c9) C:\WINDOWS\system32\DRIVERS\imagesrv.sys 06:53:06.0218 4652 imagesrv - ok 06:53:06.0265 4652 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys 06:53:06.0265 4652 Imapi - ok 06:53:06.0312 4652 ini910u - ok 06:53:06.0453 4652 IntcAzAudAddService (e37589414437a60797e94c0f57c546db) C:\WINDOWS\system32\drivers\RtkHDAud.sys 06:53:06.0468 4652 IntcAzAudAddService - ok 06:53:06.0500 4652 IntelIde - ok 06:53:06.0546 4652 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 06:53:06.0546 4652 Ip6Fw - ok 06:53:06.0593 4652 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 06:53:06.0593 4652 IpFilterDriver - ok 06:53:06.0625 4652 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys 06:53:06.0625 4652 IpInIp - ok 06:53:06.0656 4652 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys 06:53:06.0656 4652 IpNat - ok 06:53:06.0687 4652 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys 06:53:06.0687 4652 IPSec - ok 06:53:06.0734 4652 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys 06:53:06.0734 4652 IRENUM - ok 06:53:06.0781 4652 isapnp (54632f1a7de61dc3615d756f2a90fa72) C:\WINDOWS\system32\DRIVERS\isapnp.sys 06:53:06.0781 4652 isapnp - ok 06:53:06.0812 4652 Kbdclass (e798705e8dc7fab596ef6bfdf167e007) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 06:53:06.0812 4652 Kbdclass - ok 06:53:06.0828 4652 kbdhid (62dd5eefcec4ef4163f1168d4262a9e4) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 06:53:06.0828 4652 kbdhid - ok 06:53:06.0875 4652 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys 06:53:06.0875 4652 kmixer - ok 06:53:06.0921 4652 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys 06:53:06.0921 4652 KSecDD - ok 06:53:06.0953 4652 lbrtfdc - ok 06:53:07.0000 4652 lfsfilt (d489d4bb1707343301208c632960be45) C:\WINDOWS\system32\DRIVERS\lfsfilt.sys 06:53:07.0000 4652 lfsfilt - ok 06:53:07.0046 4652 lpx (97e48c6b3f1072ef3ef7693f19a9cd75) C:\WINDOWS\system32\DRIVERS\lpx.sys 06:53:07.0046 4652 lpx - ok 06:53:07.0078 4652 MBAMSwissArmy - ok 06:53:07.0125 4652 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 06:53:07.0125 4652 mnmdd - ok 06:53:07.0171 4652 Modem (5ac7e16f5b40a6da14b5f2b3ada4693e) C:\WINDOWS\system32\drivers\Modem.sys 06:53:07.0171 4652 Modem - ok 06:53:07.0218 4652 Mouclass (7d4f19411bd941e1d432a99e24230386) C:\WINDOWS\system32\DRIVERS\mouclass.sys 06:53:07.0218 4652 Mouclass - ok 06:53:07.0265 4652 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys 06:53:07.0265 4652 mouhid - ok 06:53:07.0296 4652 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys 06:53:07.0296 4652 MountMgr - ok 06:53:07.0328 4652 mraid35x - ok 06:53:07.0484 4652 MRxDAV (29414447eb5bde2f8397dc965dbb3156) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 06:53:07.0515 4652 MRxDAV - ok 06:53:07.0656 4652 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 06:53:07.0656 4652 MRxSmb - ok 06:53:07.0687 4652 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys 06:53:07.0687 4652 Msfs - ok 06:53:07.0734 4652 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys 06:53:07.0734 4652 MSKSSRV - ok 06:53:07.0781 4652 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 06:53:07.0781 4652 MSPCLOCK - ok 06:53:07.0812 4652 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys 06:53:07.0812 4652 MSPQM - ok 06:53:07.0875 4652 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 06:53:07.0875 4652 mssmbios - ok 06:53:07.0921 4652 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys 06:53:07.0921 4652 MSTEE - ok 06:53:07.0968 4652 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys 06:53:07.0968 4652 MTsensor - ok 06:53:08.0015 4652 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys 06:53:08.0015 4652 Mup - ok 06:53:08.0062 4652 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 06:53:08.0062 4652 NABTSFEC - ok 06:53:08.0234 4652 NAVENG (862f55824ac81295837b0ab63f91071f) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20111102.025\NAVENG.SYS 06:53:08.0234 4652 NAVENG - ok 06:53:08.0281 4652 NAVEX15 (529d571b551cb9da44237389b936f1ae) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20111102.025\NAVEX15.SYS 06:53:08.0281 4652 NAVEX15 - ok 06:53:08.0359 4652 ndasbus (721de760cd846a793935675fbe49140b) C:\WINDOWS\system32\DRIVERS\ndasbus.sys 06:53:08.0359 4652 ndasbus - ok 06:53:08.0390 4652 ndasfat (5b1c0c157183364556bd1b01c5fe9ca1) C:\WINDOWS\system32\DRIVERS\ndasfat.sys 06:53:08.0390 4652 ndasfat - ok 06:53:08.0437 4652 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys 06:53:08.0453 4652 NDIS - ok 06:53:08.0500 4652 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 06:53:08.0500 4652 NdisIP - ok 06:53:08.0546 4652 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 06:53:08.0562 4652 NdisTapi - ok 06:53:08.0609 4652 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 06:53:08.0609 4652 Ndisuio - ok 06:53:08.0625 4652 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 06:53:08.0625 4652 NdisWan - ok 06:53:08.0656 4652 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys 06:53:08.0656 4652 NDProxy - ok 06:53:08.0703 4652 Netaapl (7afd0e39ab15cb355487b7cc19f4e2c5) C:\WINDOWS\system32\DRIVERS\netaapl.sys 06:53:08.0703 4652 Netaapl - ok 06:53:08.0734 4652 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys 06:53:08.0734 4652 NetBIOS - ok 06:53:08.0765 4652 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys 06:53:08.0765 4652 NetBT - ok 06:53:08.0781 4652 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys 06:53:08.0781 4652 Npfs - ok 06:53:08.0812 4652 Ntfs (19a811ef5f1ed5c926a028ce107ff1af) C:\WINDOWS\system32\drivers\Ntfs.sys 06:53:08.0828 4652 Ntfs - ok 06:53:08.0843 4652 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 06:53:08.0843 4652 Null - ok 06:53:08.0875 4652 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 06:53:08.0875 4652 NwlnkFlt - ok 06:53:08.0890 4652 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 06:53:08.0890 4652 NwlnkFwd - ok 06:53:08.0921 4652 Parport (318696359ac7df48d1e51974ec527dd2) C:\WINDOWS\system32\DRIVERS\parport.sys 06:53:08.0937 4652 Parport - ok 06:53:08.0953 4652 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys 06:53:08.0953 4652 PartMgr - ok 06:53:09.0000 4652 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys 06:53:09.0000 4652 ParVdm - ok 06:53:09.0062 4652 PCAMPR5 (b670c5d89f0726b7a2a7dfb4e968cdf8) C:\WINDOWS\system32\PCAMPR5.SYS 06:53:09.0062 4652 PCAMPR5 - ok 06:53:09.0093 4652 PCANDIS5 (ecd2f9d67b06606064daf6961a6d5efe) C:\WINDOWS\system32\PCANDIS5.SYS 06:53:09.0093 4652 PCANDIS5 - ok 06:53:09.0109 4652 PCI (7c5da5c1ed801ad8b0309d5514f0b75e) C:\WINDOWS\system32\DRIVERS\pci.sys 06:53:09.0109 4652 PCI - ok 06:53:09.0140 4652 PCIDump - ok 06:53:09.0156 4652 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys 06:53:09.0156 4652 PCIIde - ok 06:53:09.0203 4652 Pcmcia (641da274e163617ea7a33506bc6da8e3) C:\WINDOWS\system32\drivers\Pcmcia.sys 06:53:09.0203 4652 Pcmcia - ok 06:53:09.0250 4652 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys 06:53:09.0250 4652 pcouffin - ok 06:53:09.0281 4652 PDCOMP - ok 06:53:09.0312 4652 PDFRAME - ok 06:53:09.0328 4652 PDRELI - ok 06:53:09.0359 4652 PDRFRAME - ok 06:53:09.0375 4652 perc2 - ok 06:53:09.0406 4652 perc2hib - ok 06:53:09.0468 4652 PhilCam8116 (15670c1686c51b68e58b8e31569f524f) C:\WINDOWS\system32\DRIVERS\CamDrL21.sys 06:53:09.0468 4652 PhilCam8116 - ok 06:53:09.0546 4652 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys 06:53:09.0546 4652 PptpMiniport - ok 06:53:09.0593 4652 PQNTDrv (29abe7f1eb2045f06cc83b183b59b9fb) C:\WINDOWS\system32\drivers\PQNTDrv.sys 06:53:09.0593 4652 PQNTDrv - ok 06:53:09.0625 4652 Processor (f480712b761e538bc8e44ede60f3a3c3) C:\WINDOWS\system32\DRIVERS\processr.sys 06:53:09.0625 4652 Processor - ok 06:53:09.0687 4652 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys 06:53:09.0687 4652 PSched - ok 06:53:09.0718 4652 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 06:53:09.0718 4652 Ptilink - ok 06:53:09.0765 4652 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys 06:53:09.0765 4652 PxHelp20 - ok 06:53:09.0781 4652 ql1080 - ok 06:53:09.0796 4652 Ql10wnt - ok 06:53:09.0828 4652 ql12160 - ok 06:53:09.0859 4652 ql1240 - ok 06:53:09.0890 4652 ql1280 - ok 06:53:09.0937 4652 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 06:53:09.0937 4652 RasAcd - ok 06:53:09.0953 4652 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 06:53:09.0953 4652 Rasl2tp - ok 06:53:09.0984 4652 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 06:53:09.0984 4652 RasPppoe - ok 06:53:10.0015 4652 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 06:53:10.0015 4652 Raspti - ok 06:53:10.0078 4652 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys 06:53:10.0078 4652 Rdbss - ok 06:53:10.0093 4652 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 06:53:10.0093 4652 RDPCDD - ok 06:53:10.0156 4652 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys 06:53:10.0156 4652 RDPWD - ok 06:53:10.0203 4652 redbook (2cc30b68dd62b73d444a41322cd7fc4c) C:\WINDOWS\system32\DRIVERS\redbook.sys 06:53:10.0203 4652 redbook - ok 06:53:10.0265 4652 RTLE8023xp (25be98c05808c57e4d8d26477dc12d39) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 06:53:10.0265 4652 RTLE8023xp - ok 06:53:10.0281 4652 SCPMPR5 - ok 06:53:10.0281 4652 SCPNDIS5 - ok 06:53:10.0328 4652 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 06:53:10.0328 4652 Secdrv - ok 06:53:10.0375 4652 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys 06:53:10.0375 4652 serenum - ok 06:53:10.0406 4652 Serial (653201755ca96ab4aaa4131daf6da356) C:\WINDOWS\system32\DRIVERS\serial.sys 06:53:10.0406 4652 Serial - ok 06:53:10.0437 4652 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys 06:53:10.0437 4652 Sfloppy - ok 06:53:10.0468 4652 Simbad - ok 06:53:10.0500 4652 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys 06:53:10.0500 4652 SLIP - ok 06:53:10.0515 4652 Sparrow - ok 06:53:10.0562 4652 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys 06:53:10.0562 4652 splitter - ok 06:53:10.0625 4652 sptd (71e276f6d189413266ea22171806597b) C:\WINDOWS\system32\Drivers\sptd.sys 06:53:10.0625 4652 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: 71e276f6d189413266ea22171806597b 06:53:10.0625 4652 sptd ( LockedFile.Multi.Generic ) - warning 06:53:10.0625 4652 sptd - detected LockedFile.Multi.Generic (1) 06:53:10.0671 4652 sr (b52181023b827acda36c1b76751ebffd) C:\WINDOWS\system32\DRIVERS\sr.sys 06:53:10.0671 4652 sr - ok 06:53:10.0843 4652 SRTSP (83726cf02eced69138948083e06b6eac) C:\WINDOWS\System32\Drivers\NIS\1206000.01D\SRTSP.SYS 06:53:10.0859 4652 SRTSP - ok 06:53:10.0875 4652 SRTSPX (4e7eab2e5615d39cf1f1df9c71e5e225) C:\WINDOWS\system32\drivers\NIS\1206000.01D\SRTSPX.SYS 06:53:10.0875 4652 SRTSPX - ok 06:53:10.0906 4652 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys 06:53:10.0906 4652 Srv - ok 06:53:10.0937 4652 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys 06:53:10.0937 4652 StarOpen - ok 06:53:10.0984 4652 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 06:53:10.0984 4652 streamip - ok 06:53:11.0046 4652 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys 06:53:11.0046 4652 swenum - ok 06:53:11.0093 4652 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys 06:53:11.0093 4652 swmidi - ok 06:53:11.0125 4652 symc810 - ok 06:53:11.0125 4652 symc8xx - ok 06:53:11.0203 4652 SymDS (9bbeb8c6258e72d62e7560e6667aad39) C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMDS.SYS 06:53:11.0218 4652 SymDS - ok 06:53:11.0265 4652 SymEFA (d5c02629c02a820a7e71bca3d44294a3) C:\WINDOWS\system32\drivers\NIS\1206000.01D\SYMEFA.SYS 06:53:11.0296 4652 SymEFA - ok 06:53:11.0328 4652 SymEvent (ab33c3b196197ca467cbdda717860dba) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS 06:53:11.0328 4652 SymEvent - ok 06:53:11.0359 4652 SymIRON (a73399804d5d4a8b20ba60fcf70c9f1f) C:\WINDOWS\system32\drivers\NIS\1206000.01D\Ironx86.SYS 06:53:11.0359 4652 SymIRON - ok 06:53:11.0406 4652 SYMTDI (dec35ccaf7a222df918306cd2fdfbd39) C:\WINDOWS\System32\Drivers\NIS\1206000.01D\SYMTDI.SYS 06:53:11.0406 4652 SYMTDI - ok 06:53:11.0437 4652 sym_hi - ok 06:53:11.0453 4652 sym_u3 - ok 06:53:11.0484 4652 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys 06:53:11.0484 4652 sysaudio - ok 06:53:11.0531 4652 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys 06:53:11.0546 4652 Tcpip - ok 06:53:11.0593 4652 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys 06:53:11.0593 4652 TDPIPE - ok 06:53:11.0625 4652 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys 06:53:11.0640 4652 TDTCP - ok 06:53:11.0687 4652 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys 06:53:11.0687 4652 TermDD - ok 06:53:11.0703 4652 TosIde - ok 06:53:11.0765 4652 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys 06:53:11.0765 4652 Udfs - ok 06:53:11.0796 4652 ultra - ok 06:53:11.0843 4652 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys 06:53:11.0843 4652 Update - ok 06:53:11.0890 4652 USBAAPL (d4fb6ecc60a428564ba8768b0e23c0fc) C:\WINDOWS\system32\Drivers\usbaapl.sys 06:53:11.0890 4652 USBAAPL - ok 06:53:11.0937 4652 usbaudio (45a0d14b26c35497ad93bce7e15c9941) C:\WINDOWS\system32\drivers\usbaudio.sys 06:53:11.0937 4652 usbaudio - ok 06:53:11.0968 4652 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 06:53:11.0968 4652 usbccgp - ok 06:53:11.0984 4652 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys 06:53:11.0984 4652 usbehci - ok 06:53:12.0000 4652 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys 06:53:12.0000 4652 usbhub - ok 06:53:12.0015 4652 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys 06:53:12.0015 4652 usbohci - ok 06:53:12.0062 4652 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys 06:53:12.0062 4652 usbprint - ok 06:53:12.0109 4652 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys 06:53:12.0109 4652 usbscan - ok 06:53:12.0156 4652 usbstor (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 06:53:12.0156 4652 usbstor - ok 06:53:12.0203 4652 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys 06:53:12.0203 4652 VgaSave - ok 06:53:12.0218 4652 ViaIde - ok 06:53:12.0265 4652 VolSnap (313b1a0d5db26dfe1c34a6c13b2ce0a7) C:\WINDOWS\system32\drivers\VolSnap.sys 06:53:12.0265 4652 VolSnap - ok 06:53:12.0328 4652 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys 06:53:12.0328 4652 Wanarp - ok 06:53:12.0359 4652 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys 06:53:12.0359 4652 Wdf01000 - ok 06:53:12.0375 4652 WDICA - ok 06:53:12.0406 4652 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys 06:53:12.0406 4652 wdmaud - ok 06:53:12.0453 4652 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 06:53:12.0453 4652 WSTCODEC - ok 06:53:12.0546 4652 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 06:53:12.0546 4652 WudfPf - ok 06:53:12.0578 4652 WUSBVBus - ok 06:53:12.0609 4652 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0 06:53:12.0609 4652 \Device\Harddisk0\DR0 - ok 06:53:12.0609 4652 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1 06:53:12.0750 4652 \Device\Harddisk1\DR1 - ok 06:53:12.0765 4652 Boot (0x1200) (38c36f0223f937cacd71fb9d2898046d) \Device\Harddisk0\DR0\Partition0 06:53:12.0765 4652 \Device\Harddisk0\DR0\Partition0 - ok 06:53:12.0781 4652 Boot (0x1200) (a404b3fc891cdb200bee7d1f32c9b30e) \Device\Harddisk0\DR0\Partition1 06:53:12.0781 4652 \Device\Harddisk0\DR0\Partition1 - ok 06:53:12.0812 4652 Boot (0x1200) (6d1468c493df809c834a0ad4354aab63) \Device\Harddisk0\DR0\Partition2 06:53:12.0812 4652 \Device\Harddisk0\DR0\Partition2 - ok 06:53:12.0812 4652 Boot (0x1200) (957b183e45a126b18c3490da45d562aa) \Device\Harddisk1\DR1\Partition0 06:53:12.0812 4652 \Device\Harddisk1\DR1\Partition0 - ok 06:53:12.0812 4652 Boot (0x1200) (d53925a0cd6e13d2242c6ebd8a9305ca) \Device\Harddisk1\DR1\Partition1 06:53:12.0812 4652 \Device\Harddisk1\DR1\Partition1 - ok 06:53:12.0812 4652 ============================================================ 06:53:12.0812 4652 Scan finished 06:53:12.0812 4652 ============================================================ 06:53:12.0828 4660 Detected object count: 1 06:53:12.0828 4660 Actual detected object count: 1 06:53:22.0843 4660 sptd ( LockedFile.Multi.Generic ) - skipped by user 06:53:22.0843 4660 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 06:53:27.0984 4336 Deinitialize success 2/rapport de rogue killer RogueKiller V6.1.6 [01/11/2011] par Tigzy mail: tigzyRKgmailcom Remontees: https://www.luanagames.com/index.fr.html Blog: http://tigzyrk.blogspot.com Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 2) 32 bits version Demarrage : Mode normal Utilisateur: Xav [Droits d'admin] Mode: Suppression -- Date : 03/11/2011 06:54:31 Processus malicieux: 0 Entrees de registre: 1 [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED () Fichiers / Dossiers particuliers: Driver: [LOADED] Fichier HOSTS: 127.0.0.1 localhost Termine : << RKreport[1].txt >> RKreport[1].txt 3/ rapport de toolbar S&D -----------\ ToolBar S&D 1.2.9 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2 X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5400+ ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Xav ( Administrator ) BOOT : Normal boot Antivirus : Norton Internet Security 18.6.0.29 (Not Activated) Firewall : Norton Internet Security 18.6.0.29 (Activated) C:\ (Local Disk) - NTFS - Total:81 Go (Free:6 Go) D:\ (Local Disk) - NTFS - Total:156 Go (Free:155 Go) E:\ (Local Disk) - NTFS - Total:113 Go (Free:58 Go) F:\ (Local Disk) - NTFS - Total:39 Go (Free:13 Go) G:\ (CD or DVD) H:\ (CD or DVD) I:\ (USB) J:\ (USB) K:\ (USB) L:\ (USB) N:\ (CD or DVD) O:\ (CD or DVD) P:\ (CD or DVD) X:\ (Local Disk) - NTFS - Total:60 Go (Free:60 Go) "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 ) Option : [2] ( 03/11/2011| 6:56 ) C:\WINDOWS\System32\f3PSSavr.scr C:\DOCUME~1\Xav\LOCALS~1\Temp\nsgAD.tmp -----------\ SUPPRESSION Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml Supprime! - C:\DOCUME~1\Xav\Favoris\Supprimer MyWebSearch - FunWeb CommentCaMarche.url Supprime! - C:\WINDOWS\System32\f3PSSavr.scr Supprime! - C:\DOCUME~1\Xav\LOCALS~1\Temp\nsgAD.tmp Supprime! - C:\Program Files\DAEMON Tools Toolbar -----------\ Recherche de Fichiers / Dossiers ... -----------\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\WINDOWS\system32\blank.htm" "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html" "Start Page"="https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&rlz=1T4GPTB_frFR304FR305&gws_rd=ssl" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp" "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF" "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF" "Local Page"="C:\WINDOWS\system32\blank.htm" "Start Page"="https://www.msn.com/fr-fr/" --------------------\ Recherche d'autres infections --------------------\ Cracks & Keygens .. C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\.AppleSyncInfo C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\astuce-charlyadi13 - Redirect by ulimit.com.url C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\drivers nvidia.url C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\Patch FR Patch Fran#ais Manuels Aides Fran#ais LFXP.url C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\Serials & keys - unlocks the world.url C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\Telechargements Manipulation de fichier - PC-Telecharger.com.url C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\Telecharger.com.url C:\DOCUME~1\Xav\Favoris\crack ,serial, telechar prog, astuces\Top Logiciel.net - freewares, sharewares.url C:\DOCUME~1\Xav\Favoris\Emule P2P Film Cine Jaquette Divx\Telecharger Adobe Photoshop Lightroom V3.3 Multilangue Keygen Megaupload Microsoft Musique.url C:\DOCUME~1\Xav\Favoris\Photographie\Tuto Logiciel Lightrooml Forum\Telecharger Adobe Photoshop Lightroom V3.3 Multilangue Keygen Megaupload Microsoft Musique.url 1 - "C:\ToolBar SD\TB_1.txt" - 03/11/2011| 6:59 - Option : [2] -----------\ Fin du rapport a 6:59:13,35 4/ rapport de malwarebytes Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Version de la base de données: 8071 Windows 5.1.2600 Service Pack 2 Internet Explorer 8.0.6001.18702 03/11/2011 19:25:12 mbam-log-2011-11-03 (19-25-12).txt Type d'examen: Examen complet (C:\|D:\|E:\|F:\|X:\|) Elément(s) analysé(s): 316621 Temps écoulé: 1 heure(s), 30 minute(s), 24 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 1 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 15 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): c:\program files\windows live\messenger\msimg32.dll (PUP.FunWebProducts) -> Not selected for removal. Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\program files\windows live\messenger\msimg32.dll (PUP.FunWebProducts) -> Not selected for removal. c:\program files\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Not selected for removal. c:\program files\trend micro\hijackthis\backups\backup-20111102-212559-629.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\trend micro\hijackthis\backups\backup-20111102-212559-878.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP671\A0122191.exe (Trojan.Sefnit) -> Quarantined and deleted successfully. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122498.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122500.DLL (PUP.FunWebProducts) -> Not selected for removal. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122501.DLL (PUP.FunWebProducts) -> Not selected for removal. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122502.DLL (PUP.FunWebProducts) -> Not selected for removal. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122531.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122532.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\system volume information\_restore{307b64f0-e15c-4fef-bb8b-b69b79c86022}\RP672\A0122762.scr (PUP.FunWebProducts) -> Not selected for removal. c:\toolbar sd\backup-tb\WINDOWS\system32\f3PSSavr.scr (PUP.FunWebProducts) -> Not selected for removal. f:\system volume information\_restore{67da4fbe-d146-4abc-8a1f-b74ce205322f}\RP540\A0068266.exe (Joke.Stressreducer) -> Quarantined and deleted successfully. f:\transport\sun tarifs clients\Stress.exe (Joke.Stressreducer) -> Quarantined and deleted successfully. 5/ rapport de zhpdiag http://www.cijoint.fr/cjlink.php?file=cj201111/cijc4VeiYk.txt apres ca un bon aspirine et au lit

thedoct · Answer

je croyais pourtant avoir bien selectionner toutes les lignes cite dans malwarebytes avant la suppression ??

j ai refait les manip demandé , avec usbfix j ai branché tous les appareils auquels je pensais sauf l iphone ( je crois que j ai eu peur)
cela a t il une incidence?

ci joint les rapports

Rapport de ZHPFix 1.12.3366 par Nicolas Coolman, Update du 26/10/2011
Fichier d'export Registre : 
Run by Xav at 03/11/2011 21:01:04
Windows XP Home Edition Service Pack 2 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Key: HKLM\Software\BrowserChoice
SUPPRIME Key: Mozilla Plugin: @mywebsearch.com/Plugin
SUPPRIME Key: HKCU\Software\FunWebProducts
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
SUPPRIME Key: HKLM\Software\Classes\Interface\{6e4c89cf-3061-4ee4-b22a-b7a8aaea5cb3}
SUPPRIME Key: HKLM\Software\Classes\Interface\{8e9cf769-3d3b-40eb-9e2d-76e7a205e4d2}
SUPPRIME CLSID MPSK: {72d622db-dbb6-11e0-8d9b-001fc6b599c7}

========== Valeur(s) du Registre ==========
SUPPRIME RunValue: RTHDCPL
SUPPRIME RunValue: Alcmtr
SUPPRIME RunValue: Adobe Reader Speed Launcher
SUPPRIME RunValue: NeroFilterCheck
SUPPRIME RunValue: QuickTime Task
SUPPRIME RunValue: iTunesHelper
SUPPRIME RunValue: ctfmon.exe
ABSENT RunValue: ctfmon.exe
SUPPRIME RunValue: NPSStartup
SUPPRIME RunValue: KernelFaultCheck
SUPPRIME [HKLM\Software\Mozilla\Firefox\Extensions]:m3ffxtbr@mywebsearch.com
SUPPRIME [HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform]:FunWebProducts
SUPPRIME AAKE KeyValue: G:\eSKernel.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\Samsung\Samsung New PC Studio
psasvr.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\Samsung\Samsung New PC Studio
psvsvr.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\Bbox\eSKernel.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\BboxUpdate\BTLiveUpdate.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Elément(s) de donnée du Registre ==========
SUPPRIME PhishingFilter Value: Enabled = 0

========== Dossier(s) ==========
SUPPRIME Folder: C:\Documents and Settings\Xav\Application Data\Toolbar4
SUPPRIME Folder: C:\Program Files\Spybot - Search & Destroy
SUPPRIME Flash Cookies: 3
SUPPRIME Temporaires Windows: : 112

========== Fichier(s) ==========
ABSENT File: c:\program files\mywebsearch\bar\1.bin
pmywebs.dll
SUPPRIME File: c:\windows\system32\policies
SUPPRIME File: c:\ccalib8ws.log
ABSENT File: g:\eskernel.exe
ABSENT Folder/File: c:\documents and settings\xav\application data	oolbar4
SUPPRIME Flash Cookies: 4
SUPPRIME Temporaires Windows: : 1964

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
7 : Clé(s) du Registre
18 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
4 : Dossier(s)
7 : Fichier(s)
1 : Restauration Système


End of clean in 00mn 34s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 03/11/2011 21:01:05 [2867]


et

Utilisateur: Xav (Administrateur) # XAV-FCF9EC4FF2B
Mis à jour le 03/11/2011 par El Desaparecido
Lancé à 21:09:43 | 03/11/2011

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: System manufacturer (System Product Name) (X86-based PC) # Desktop Computer
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 5400+ (2799)
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 5400+ (2799)
RAM -> [ Total : 3454 | Free : 2584 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 81 Go (9 Go libre(s) - 11%) [] # NTFS
D:\ -> Disque fixe # 156 Go (155 Go libre(s) - 99%) [Stockage] # NTFS
E:\ -> Disque fixe # 114 Go (58 Go libre(s) - 51%) [Musiques] # NTFS
F:\ -> Disque fixe # 40 Go (13 Go libre(s) - 33%) [Sauvegarde doc] # NTFS
G:\ -> CD-ROM
H:\ -> CD-ROM
M:\ -> Disque amovible # 4 Go (2 Go libre(s) - 57%) [XAV USB] # FAT32
N:\ -> CD-ROM
O:\ -> CD-ROM
P:\ -> CD-ROM
X:\ -> Disque fixe # 61 Go (61 Go libre(s) - 100%) [Vista] # NTFS

################## | Processus Actif |

thedoct · Answer

desolé j ai rater le copier coller

############################## | UsbFix V 7.065 | [Suppression]

Utilisateur: Xav (Administrateur) # XAV-FCF9EC4FF2B
Mis à jour le 03/11/2011 par El Desaparecido
Lancé à 21:09:43 | 03/11/2011

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: System manufacturer (System Product Name) (X86-based PC) # Desktop Computer
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 5400+ (2799)
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 5400+ (2799)
RAM -> [ Total : 3454 | Free : 2584 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 81 Go (9 Go libre(s) - 11%) [] # NTFS
D:\ -> Disque fixe # 156 Go (155 Go libre(s) - 99%) [Stockage] # NTFS
E:\ -> Disque fixe # 114 Go (58 Go libre(s) - 51%) [Musiques] # NTFS
F:\ -> Disque fixe # 40 Go (13 Go libre(s) - 33%) [Sauvegarde doc] # NTFS
G:\ -> CD-ROM
H:\ -> CD-ROM
M:\ -> Disque amovible # 4 Go (2 Go libre(s) - 57%) [XAV USB] # FAT32
N:\ -> CD-ROM
O:\ -> CD-ROM
P:\ -> CD-ROM
X:\ -> Disque fixe # 61 Go (61 Go libre(s) - 100%) [Vista] # NTFS

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (796)
C:\WINDOWS\system32\winlogon.exe (884)
C:\WINDOWS\system32\services.exe (928)
C:\WINDOWS\system32\lsass.exe (940)
C:\WINDOWS\system32\Ati2evxx.exe (1108)
C:\WINDOWS\system32\svchost.exe (1124)
C:\WINDOWS\System32\svchost.exe (1336)
C:\WINDOWS\system32\Ati2evxx.exe (1492)
C:\WINDOWS\system32\spoolsv.exe (1748)
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (472)
C:\WINDOWS\RTHDCPL.EXE (616)
C:\WINDOWS\system32\LVCOMSX.EXE (644)
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe (740)
C:\Program Files\Logitech\Video\LogiTray.exe (788)
C:\Program Files\Java\jre6\bin\jqs.exe (1292)
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (1320)
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (1416)
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1824)
C:\Program Files\NDAS\System
dassvc.exe (2088)
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (2208)
C:\Program Files\Logitech\Video\FxSvr2.exe (2336)
C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (2332)
C:\WINDOWS\system32\IoctlSvc.exe (2472)
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (2688)
C:\WINDOWS\system32\svchost.exe (2724)
C:\Program Files\iTunes\iTunesHelper.exe (2732)
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (2800)
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe (2832)
C:\Program Files\Messenger\msmsgs.exe (2940)
C:\WINDOWS\system32\ctfmon.exe (2964)
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (3040)
C:\Program Files\DAEMON Tools Lite\daemon.exe (3136)
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (3352)
C:\Program Files\Canon\CAL\CALMAIN.exe (3456)
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe (3496)
C:\Program Files\HP Wireless Printer Adapter\ConnectMgr.exe (3860)
C:\Program Files\NDAS\System
dasmgmt.exe (316)
C:\Program Files\Canon\EOS Utility\WFTPairing\WFTPairing.exe (336)
C:\Program Files\iPod\bin\iPodService.exe (1716)
C:\WINDOWS\system32\wbem\wmiapsrv.exe (2456)
C:\Program Files\Canon\EOS Utility\WFTPairing\EOSUPNPSV.exe (2532)
C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (1856)
C:\WINDOWS\system32\wuauclt.exe (1712)
C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe (5164)
C:\WINDOWS\system32\wscntfy.exe (2528)
C:\WINDOWS\explorer.exe (3964)
C:\UsbFix\UsbFix.exe (4892)
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE (3904)
C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe (596)

################## | Processus Stoppés |

Stoppé! C:\WINDOWS\system32\Ati2evxx.exe (1108)
Stoppé! C:\WINDOWS\system32\Ati2evxx.exe (1492)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (1748)
Stoppé! C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (472)
Stoppé! C:\WINDOWS\RTHDCPL.EXE (616)
Stoppé! C:\WINDOWS\system32\LVCOMSX.EXE (644)
Stoppé! C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe (740)
Stoppé! C:\Program Files\Logitech\Video\LogiTray.exe (788)
Stoppé! C:\Program Files\Java\jre6\bin\jqs.exe (1292)
Stoppé! C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (1320)
Stoppé! C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (1416)
Stoppé! C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1824)
Stoppé! C:\Program Files\NDAS\System
dassvc.exe (2088)
Stoppé! C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (2208)
Stoppé! C:\Program Files\Logitech\Video\FxSvr2.exe (2336)
Stoppé! C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (2332)
Stoppé! C:\WINDOWS\system32\IoctlSvc.exe (2472)
Stoppé! C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (2688)
Stoppé! C:\Program Files\iTunes\iTunesHelper.exe (2732)
Stoppé! C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (2800)
Stoppé! C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe (2832)
Stoppé! C:\Program Files\Messenger\msmsgs.exe (2940)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (2964)
Stoppé! C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (3040)
Stoppé! C:\Program Files\DAEMON Tools Lite\daemon.exe (3136)
Stoppé! C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (3352)
Stoppé! C:\Program Files\Canon\CAL\CALMAIN.exe (3456)
Stoppé! C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe (3496)
Stoppé! C:\Program Files\HP Wireless Printer Adapter\ConnectMgr.exe (3860)
Stoppé! C:\Program Files\NDAS\System
dasmgmt.exe (316)
Stoppé! C:\Program Files\Canon\EOS Utility\WFTPairing\WFTPairing.exe (336)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (1716)
Stoppé! C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (1856)
Stoppé! C:\WINDOWS\system32\wuauclt.exe (1712)
Stoppé! C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe (5164)
Stoppé! C:\WINDOWS\system32\wscntfy.exe (2528)
Stoppé! C:\Program Files\Microsoft Office\Office12\WINWORD.EXE (3904)
Stoppé! C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe (596)

################## | Éléments infectieux |

Supprimé! C:\Documents and Settings\Xav\Application Data\inst.exe
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-2984869780-3423330195-314668695-1000
Supprimé! C:\Recycler\S-1-5-21-484763869-790525478-839522115-1005
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-2984869780-3423330195-314668695-1000
Supprimé! D:\Recycler\S-1-5-21-484763869-790525478-839522115-1005
Supprimé! E:\$RECYCLE.BIN\S-1-5-21-2984869780-3423330195-314668695-1000
Supprimé! E:\Recycler\S-1-5-21-1202660629-484763869-725345543-1005
Supprimé! E:\Recycler\S-1-5-21-1645522239-706699826-725345543-1005
Supprimé! E:\Recycler\S-1-5-21-484763869-790525478-839522115-1005
Supprimé! E:\Recycler\S-1-5-21-527237240-1972579041-725345543-1005
Supprimé! E:\Recycler\S-1-5-21-682003330-839522115-725345543-1005
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-2683067388-4124434277-63903377-1002
Supprimé! F:\$RECYCLE.BIN\S-1-5-21-2984869780-3423330195-314668695-1000
Supprimé! F:\Recycler\S-1-5-21-1202660629-484763869-725345543-1005
Supprimé! F:\Recycler\S-1-5-21-1645522239-706699826-725345543-1005
Supprimé! F:\Recycler\S-1-5-21-484763869-790525478-839522115-1005
Supprimé! F:\Recycler\S-1-5-21-527237240-1972579041-725345543-1005
Supprimé! F:\Recycler\S-1-5-21-682003330-839522115-725345543-1005
Supprimé! X:\Recycler\S-1-5-21-484763869-790525478-839522115-1005

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\policies\System|DisableRegistryTools
Supprimé! HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\policies\System|DisableTaskMgr
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Supprimé! HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore|DisableConfig
Supprimé! HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore|DisableSR
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoFolderOptions

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{29225db4-dda9-11dd-ba8b-001fc6b599c7}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{acc89c70-c433-11dd-9619-001fc6b599c7}

################## | Listing |

[12/12/2008 - 20:47:28 | SHD ] 	C:\$RECYCLE.BIN
[06/12/2008 - 17:43:32 | D ] 	C:\AddOn
[20/06/2009 - 12:17:41 | D ] 	C:\ATI
[07/12/2008 - 10:00:53 | D ] 	C:\audio
[06/12/2008 - 17:40:46 | N | 0] 	C:\AUTOEXEC.BAT
[12/12/2008 - 20:31:24 | D ] 	C:\Boot
[12/12/2008 - 20:31:25 | N | 360] 	C:\Boot.BAK
[13/04/2010 - 19:07:17 | N | 360] 	C:\boot.ini
[05/08/2004 - 13:00:00 | N | 4952] 	C:\Bootfont.bin
[11/04/2008 - 21:43:29 | RASH | 333203] 	C:\bootmgr
[12/12/2008 - 20:31:25 | N | 8192] 	C:\BOOTSECT.BAK
[03/11/2011 - 21:10:05 | N | 8] 	C:\CCALib8WS.log
[27/12/2009 - 11:10:40 | D ] 	C:\CIEL
[23/10/2011 - 10:37:52 | D ] 	C:\Config.Msi
[06/12/2008 - 17:40:46 | N | 0] 	C:\CONFIG.SYS
[11/05/2009 - 07:48:26 | N | 0] 	C:\Debug.QC6
[13/04/2010 - 18:50:59 | D ] 	C:\Documents and Settings
[25/03/2009 - 20:05:21 | D ] 	C:\Données Ciel
[01/02/2009 - 19:02:36 | D ] 	C:\EBP
[11/05/2009 - 07:48:34 | N | 37053] 	C:\Installer.log
[06/12/2008 - 17:40:46 | N | 0] 	C:\IO.SYS
[07/10/2011 - 19:57:34 | N | 261115] 	C:\known.met
[20/12/2009 - 13:10:16 | N | 1385] 	C:\MKDEMSG.LOG
[04/02/2009 - 09:10:02 | N | 2048] 	C:\MKDEWE.TRN
[06/12/2008 - 17:40:46 | N | 0] 	C:\MSDOS.SYS
[07/12/2008 - 09:25:52 | RHD ] 	C:\MSOCache
[05/08/2004 - 13:00:00 | N | 47564] 	C:\NTDETECT.COM
[05/08/2004 - 13:00:00 | N | 251712] 	C:
tldr
[03/11/2011 - 19:27:33 | ASH | 2145386496] 	C:\pagefile.sys
[03/11/2011 - 19:34:20 | N | 512] 	C:\PhysicalDisk0_MBR.bin
[03/11/2011 - 21:00:36 | D ] 	C:\Program Files
[07/10/2011 - 19:57:34 | N | 1195] 	C:\queries-00.cache
[07/10/2011 - 19:57:34 | N | 17] 	C:\queries-07.cache
[03/11/2011 - 21:13:23 | SHD ] 	C:\RECYCLER
[07/10/2011 - 19:57:34 | N | 341] 	C:\server.met
[16/08/2009 - 11:02:45 | N | 38073] 	C:\StarBurn.log
[03/11/2011 - 19:30:08 | SHD ] 	C:\System Volume Information
[03/11/2011 - 06:59:13 | N | 3807] 	C:\TB.txt
[20/12/2010 - 20:36:40 | D ] 	C:\Temp
[03/11/2011 - 06:59:13 | D ] 	C:\ToolBar SD
[03/11/2011 - 21:13:23 | D ] 	C:\UsbFix
[03/11/2011 - 21:14:47 | A | 8703] 	C:\UsbFix.txt
[02/11/2011 - 06:34:20 | D ] 	C:\WINDOWS
[03/11/2011 - 21:01:05 | D ] 	C:\ZHP
[12/12/2008 - 20:47:28 | SHD ] 	D:\$RECYCLE.BIN
[04/02/2009 - 18:37:50 | D ] 	D:\7cec29fd6c15f079bd6d1a0cc5
[20/06/2009 - 12:15:28 | N | 40091352] 	D:\9-3_xp32_dd_ccc_wdm_enu.exe
[11/04/2009 - 17:33:11 | D ] 	D:\A Charger DD Externe
[20/03/2009 - 18:16:11 | D ] 	D:\A Charger PEEKBOX
[03/05/2009 - 19:14:26 | N | 17001840] 	D:\IE8-WindowsXP-x86-FRA.exe
[02/01/2009 - 09:15:06 | D ] 	D:\Jaquettes
[09/04/2009 - 08:01:46 | N | 10765312] 	D:\LogMeIn.msi
[28/05/2009 - 09:48:17 | N | 1665837] 	D:\pf-setup.exe
[04/06/2009 - 07:07:55 | D ] 	D:\PhotoFiltre Plugins
[04/06/2009 - 07:07:55 | D ] 	D:\PhotoPhiltre Masks
[25/05/2009 - 13:16:00 | N | 21878064] 	D:\QuickTimeInstaller.exe
[03/11/2011 - 21:13:23 | SHD ] 	D:\RECYCLER
[03/11/2011 - 19:30:09 | SHD ] 	D:\System Volume Information
[06/04/2008 - 06:28:44 | N | 110651] 	D:\UnFREEzfr.exe
[12/12/2008 - 20:47:28 | SHD ] 	E:\$RECYCLE.BIN
[20/08/2010 - 08:48:15 | N | 3978677] 	E:\billy joel & elton john - your song (live).mp3
[20/08/2010 - 08:38:17 | N | 3766272] 	E:\Blankass & Olivia Ruiz - Because The Night - Taratata.mp3
[09/12/2006 - 14:04:42 | D ] 	E:\Francois Perusse
[27/12/2009 - 10:11:37 | D ] 	E:\Jaquettes Cd
[06/04/2007 - 19:27:29 | N | 9502720] 	E:\LES ENFOIRES 2006 - Le temps qui court.mp3
[20/08/2010 - 08:48:15 | N | 3314460] 	E:\Les Enfoirés - Laissons Entrer Le Soleil (Julien Clerc, Mauranne, Marc Lavoine, Francis Cabrel - Live).mp3
[22/10/2011 - 17:59:50 | D ] 	E:\Ma musique mp 3
[11/09/2010 - 08:40:03 | D ] 	E:\Musique de films
[19/08/2010 - 18:45:24 | N | 4435009] 	E:\Nino Ferrer - Le Sud.mp3
[03/11/2011 - 21:13:23 | SHD ] 	E:\RECYCLER
[20/08/2010 - 08:48:15 | N | 9319279] 	E:\Scorpion - I still loving you.mp3
[29/11/2009 - 16:31:09 | D ] 	E:\Sonneries Portable
[03/11/2011 - 19:30:09 | SHD ] 	E:\System Volume Information
[20/08/2010 - 08:48:15 | N | 5708485] 	E:\The weather girls - its raining men.mp3
[20/03/2006 - 17:21:37 | ASH | 14848] 	E:\Thumbs.db
[03/11/2011 - 21:13:13 | SHD ] 	F:\$RECYCLE.BIN
[02/07/2011 - 19:38:35 | N | 23552] 	F:\2011 02 Contectation PV[1].doc
[14/07/2011 - 07:57:57 | N | 23552] 	F:\Assurance FNAC.doc
[25/09/2010 - 17:56:51 | D ] 	F:\Billet barcelonne 2009 2010
[02/01/2011 - 18:34:54 | D ] 	F:\Doc sandrine
[26/03/2011 - 06:50:41 | D ] 	F:\Doc Xav
[29/08/2011 - 05:36:24 | D ] 	F:\Magasin Papa
[18/09/2011 - 11:43:30 | D ] 	F:\Mes Photos
[14/09/2008 - 11:13:44 | D ] 	F:\RECETTE FABY
[03/11/2011 - 21:13:23 | SHD ] 	F:\RECYCLER
[10/01/2010 - 10:55:01 | D ] 	F:\Sauvegarde rep portable
[03/11/2011 - 19:30:08 | SHD ] 	F:\System Volume Information
[28/10/2006 - 06:31:11 | ASH | 132608] 	F:\Thumbs.db
[24/05/2010 - 10:24:54 | D ] 	F:\TRANSPORT
[03/11/2011 - 21:13:23 | SHD ] 	X:\RECYCLER
[03/11/2011 - 19:30:09 | SHD ] 	X:\System Volume Information

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
X:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_XAV-FCF9EC4FF2B.zip
http://eldesaparecido.com/support.php
Merci de votre contribution.

################## | E.O.F |

thedoct · Answer

pour l instant plus de ralentissement, ni de curseur avec le sablier
tout mes icones dans la barre des taches ont disparu carte video daemon tool ..........mais ca n a pas l air de gener
j ai ouvert un log de retouvhe photo qui d habitude fait bien mouliner le pc et ca a l air d aller
je touche du bois
en tout cas je te remercie grandemenent du temps passé et de l aide que tu m a apporté j aimerai pouvoir te rendre l appareil mais je crois qu en informatique je ne vais etre d un grand secour
jacques UN GRAND MERCI
et j espere que ca ne va pas recommencer

thedoct · Answer

bonjour jacques

je m y met des demain matin et te tiens au courant
je vais en profiter pour liberer de la place sur le dd, j ai un stock de photos a deplacer, je vais peux etre meme agrandir la partition du systeme d exploitation

thedoct · Answer

rapport delfix

# DelFix v8.6 - Rapport créé le 04/11/2011 à 21:40:49
# Mis à jour le 13/10/11 à 18h par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 2 (32 bits)
# Nom d'utilisateur : Xav - XAV-FCF9EC4FF2B (Administrateur)
# Exécuté depuis : C:\Documents and Settings\Xav\Bureau\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\USBFix
Supprimé : C:\Toolbar SD
Supprimé : C:\ZHP
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Hijackthis
Supprimé : C:\Documents and Settings\Xav\Bureau\RK_Quarantine
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\Program Files\Trend Micro\Hijackthis

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\TB.txt
Supprimé : C:\UsbFix.txt
Supprimé : C:\UsbFix_Upload_Me_XAV-FCF9EC4FF2B.zip
Supprimé : C:\Documents and Settings\Xav\Bureau\HijackThis.lnk
Supprimé : C:\Documents and Settings\Xav\Bureau\Reload_Tdsskiller.exe
Supprimé : C:\Documents and Settings\Xav\Bureau\RogueKiller.exe
Supprimé : C:\Documents and Settings\Xav\Bureau\ToolBarSD.exe
Supprimé : C:\Documents and Settings\Xav\Bureau\UsbFix.exe
Supprimé : C:\Documents and Settings\Xav\Bureau\ZHPDiag.txt
Supprimé : C:\Documents and Settings\Xav\Bureau\ZHPFixReport.txt
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\USBFix
Clé Supprimée : HKLM\SOFTWARE\TrendMicro\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [2092 octets] - [04/11/2011 21:40:49]

########## EOF - C:\DelFix[S1].txt - [2216 octets] ##########


je pense que le rete suivra demain

thedoct · Answer

alors ca y est, c etait pas une mince affaire, les mises a jour sont lancés depuis ce matin

on reprends 

rapport delfix 

# DelFix v8.6 - Rapport créé le 04/11/2011 à 21:40:49 
# Mis à jour le 13/10/11 à 18h par Xplode 
# Système d'exploitation : Microsoft Windows XP Service Pack 2 (32 bits) 
# Nom d'utilisateur : Xav - XAV-FCF9EC4FF2B (Administrateur) 
# Exécuté depuis : C:\Documents and Settings\Xav\Bureau\delfix.exe 
# Option [Suppression] 


~~~~~~ Dossiers(s) ~~~~~~ 

Supprimé : C:\USBFix 
Supprimé : C:\Toolbar SD 
Supprimé : C:\ZHP 
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP 
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Hijackthis 
Supprimé : C:\Documents and Settings\Xav\Bureau\RK_Quarantine 
Supprimé : C:\Program Files\ZHPDiag 
Supprimé : C:\Program Files\Trend Micro\Hijackthis 

~~~~~~ Fichier(s) ~~~~~~ 

Supprimé : C:\PhysicalDisk0_MBR.bin 
Supprimé : C:\TB.txt 
Supprimé : C:\UsbFix.txt 
Supprimé : C:\UsbFix_Upload_Me_XAV-FCF9EC4FF2B.zip 
Supprimé : C:\Documents and Settings\Xav\Bureau\HijackThis.lnk 
Supprimé : C:\Documents and Settings\Xav\Bureau\Reload_Tdsskiller.exe 
Supprimé : C:\Documents and Settings\Xav\Bureau\RogueKiller.exe 
Supprimé : C:\Documents and Settings\Xav\Bureau\ToolBarSD.exe 
Supprimé : C:\Documents and Settings\Xav\Bureau\UsbFix.exe 
Supprimé : C:\Documents and Settings\Xav\Bureau\ZHPDiag.txt 
Supprimé : C:\Documents and Settings\Xav\Bureau\ZHPFixReport.txt 
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk 
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk 
Supprimé : C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk 

~~~~~~ Registre ~~~~~~ 

Clé Supprimée : HKCU\Software\USBFix 
Clé Supprimée : HKLM\SOFTWARE\TrendMicro\Hijackthis 
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis 
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix 
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1 
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe 

~~~~~~ Autres ~~~~~~ 

-> Prefetch Vidé 

************************* 

DelFix[S1].txt - [2092 octets] - [04/11/2011 21:40:49] 

########## EOF - C:\DelFix[S1].txt - [2216 octets] ########## 


tout a l air de fonctionner correctement qu en penses tu ?
ccleaner m a fait aussi un grand nettoyage

thedoct · Answer

re

alors ca y est tout a ete fait a la lettre 
dans ccleaner je n ai trouver que la case automatique au demarrage et non a l arret du pc
je garde tous ces utilitaires et une fois par semaine je nettoie
encore un grand merci de ton aide, de la patience dont tu as fais part et de la clarté de tes explications
j espere a bientot  MERCI JACQUES

thedoct · Answer

ok merci pour tout  
le sujet est donc resolu  
a bientot

Curseur bloque sablier et my web search

17 réponses

Discussions similaires