Virus, vers, espions et autres ???

ça je l'ai déjà fait, mais le problème c'est que mon ordi déconne depuis un moment !!!!
Alors je ne sais plus trop a quel moment il fonctionnait bien..........en juin dernier c'était top, car un ami lui a fait un formage..........mais là, je sens bien qu'il y a un truc qui ne va pas !!!!!
Mais je vais essayer, merci !!!!!

OK, merci, je le fais ce soir !!!!!

Voici donc le rapport du scan.....par contre, depuis que j'ai lancé cette recherche, mon ordi ne fonctionnedu tout!!!!!!
Pas moyen d'accéder au panneau de confuration, ni a mes documents, ni même à outlook !!!!!

PC: Acer (TravelMate 7720 ) (X86-based PC) # Notebook
CPU: Intel(R) Core(TM)2 Duo CPU T5270 @ 1.40GHz (1401)
RAM -> [ Total : 3062 | Free : 1609 ]
BIOS: Ver 1.00PARTTBL
BOOT: Normal boot

OS: Microsoft® Windows Vista(TM) Professionnel (6.0.6002 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
AV: Kaspersky Internet Security [ (!) Disabled | Updated ]
FW: Windows FireWall Service [ Enabled ]

C:\ -> Disque fixe # 70 Go (18 Go libre(s) - 26%) [Acer] # NTFS
D:\ -> Disque fixe # 70 Go (17 Go libre(s) - 24%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 7 Go (7 Go libre(s) - 95%) [TIRAMISU] # FAT32
G:\ -> Disque amovible # 7 Go (7 Go libre(s) - 89%) [KINGSTON] # FAT32
H:\ -> CD-ROM
I:\ -> Disque fixe # 1397 Go (1308 Go libre(s) - 94%) [HP SimpleSave] # NTFS
J:\ -> Disque fixe # 466 Go (445 Go libre(s) - 96%) [ADATA CH94] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (636)
C:\Windows\system32\wininit.exe (680)
C:\Windows\system32\csrss.exe (688)
C:\Windows\system32\services.exe (724)
C:\Windows\system32\lsass.exe (740)
C:\Windows\system32\lsm.exe (748)
C:\Windows\system32\winlogon.exe (800)
C:\Windows\system32\svchost.exe (944)
C:\Windows\system32\svchost.exe (1004)
C:\Windows\System32\svchost.exe (1040)
C:\Windows\System32\svchost.exe (1168)
C:\Windows\System32\svchost.exe (1212)
C:\Windows\system32\svchost.exe (1240)
C:\Windows\system32\svchost.exe (1372)
C:\Windows\system32\SLsvc.exe (1424)
C:\Windows\system32\svchost.exe (1488)
C:\Windows\SYSTEM32\WISPTIS.EXE (1636)
C:\Windows\system32\svchost.exe (1688)
C:\Windows\System32\spoolsv.exe (1884)
C:\Windows\system32\svchost.exe (1908)
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (340)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (400)
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe (512)
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (616)
C:\Program Files\Bonjour\mDNSResponder.exe (676)
C:\Windows\system32\svchost.exe (556)
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (1068)
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe (1260)
C:\Acer\Empowering Technology\eNet\eNet Service.exe (2080)
C:\Windows\system32\FsUsbExService.Exe (2232)
C:\Windows\system32\svchost.exe (2280)
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe (2308)
C:\Program Files\Common Files\LightScribe\LSSrvc.exe (2328)
C:\Acer\Mobility Center\MobilityService.exe (2348)
C:\Windows\System32\svchost.exe (2384)
C:\Windows\System32\svchost.exe (2436)
C:\Windows\system32\svchost.exe (2464)
C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (2512)
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (2532)
C:\Windows\system32\svchost.exe (2596)
D:\Programme\TomTom HOME 2\TomTomHOMEService.exe (2640)
C:\Windows\System32\svchost.exe (2668)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2692)
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe (2768)
C:\Windows\system32\SearchIndexer.exe (2908)
C:\Windows\system32\atwtusb.exe (3028)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3192)
C:\Windows\system32\wbem\wmiprvse.exe (3204)
C:\Windows\system32\Dwm.exe (3412)
C:\Windows\system32\taskeng.exe (3488)
C:\Windows\Explorer.EXE (3496)
C:\Windows\SYSTEM32\WISPTIS.EXE (3504)
C:\Windows\system32\wbem\unsecapp.exe (3524)
C:\Windows\system32\DRIVERS\xaudio.exe (3544)
C:\Windows\system32\atwtusb.exe (3556)
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (3580)
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe (3620)
C:\Windows\system32\WUDFHost.exe (3640)
D:\Programme\Spybot - Search & Destroy\SDWinSec.exe (3776)
C:\Windows\system32\taskeng.exe (3828)
C:\Windows\system32\wbem\wmiprvse.exe (3964)
C:\Program Files\Windows Defender\MSASCui.exe (4408)
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (4464)
C:\Program Files\Synaptics\SynTP\SynTPStart.exe (4472)
C:\Windows\RtHDVCpl.exe (4504)
C:\Windows\System32\igfxtray.exe (4532)
C:\Windows\System32\hkcmd.exe (4544)
C:\Windows\System32\igfxpers.exe (4552)
C:\Windows\PLFSetI.exe (4564)
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (4584)
C:\Windows\system32\igfxsrvc.exe (4612)
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (4640)
C:\Users\ISABELLE\AppData\Local\Temp\RtkBtMnt.exe (5108)
C:\Program Files\Windows Media Player\wmpnscfg.exe (5444)
C:\Program Files\Windows Media Player\wmpnetwk.exe (6128)
C:\Program Files\Launch Manager\LManager.exe (5104)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (5128)
D:\Programme\HP\HP Software Update\hpwuSchd2.exe (5992)
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe (4268)
C:\Windows\System32\WTMKM.exe (4120)
C:\Program Files\Real\RealPlayer\Update\realsched.exe (5056)
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe (6040)
C:\Program Files\iTunes\iTunesHelper.exe (5608)
D:\Programme\TomTom HOME 2\TomTomHOMERunner.exe (5176)
D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (2928)
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (3888)
D:\Programme\ecbl-cnce.exe (1708)
D:\Programme\HP\Digital Imaging\bin\hpqtra08.exe (4452)
C:\Windows\system32\igfxext.exe (5328)
C:\Windows\system32\igfxsrvc.exe (3180)
C:\Program Files\iPod\bin\iPodService.exe (3360)
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE (4012)
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE (2660)
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE (6120)
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE (1116)
C:\Windows\system32\svchost.exe (2424)
D:\Programme\HP\Digital Imaging\bin\hpqSTE08.exe (5844)
D:\Programme\HP\Digital Imaging\bin\hpqbam08.exe (4204)
C:\Windows\System32\mobsync.exe (5760)
D:\Programme\HP\Digital Imaging\bin\hpqgpc01.exe (4904)
C:\UsbFix\Go.exe (7072)

################## | Processus Stoppés |

Stoppé! C:\Windows\system32\SLsvc.exe (1424)
Stoppé! C:\Windows\SYSTEM32\WISPTIS.EXE (1636)
Stoppé! C:\Windows\System32\spoolsv.exe (1884)
Stoppé! C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (340)
Stoppé! C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (400)
Stoppé! C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe (512)
Stoppé! C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (616)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (676)
Stoppé! C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (1068)
Stoppé! C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe (1260)
Stoppé! C:\Acer\Empowering Technology\eNet\eNet Service.exe (2080)
Stoppé! C:\Windows\system32\FsUsbExService.Exe (2232)
Stoppé! C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe (2308)
Stoppé! C:\Program Files\Common Files\LightScribe\LSSrvc.exe (2328)
Stoppé! C:\Acer\Mobility Center\MobilityService.exe (2348)
Stoppé! C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (2512)
Stoppé! C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (2532)
Stoppé! D:\Programme\TomTom HOME 2\TomTomHOMEService.exe (2640)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2692)
Stoppé! C:\Acer\Empowering Technology\ePower\ePowerSvc.exe (2768)
Stoppé! C:\Windows\system32\SearchIndexer.exe (2908)
Stoppé! C:\Windows\system32\atwtusb.exe (3028)
Stoppé! C:\Windows\system32\taskeng.exe (3488)
Stoppé! C:\Windows\SYSTEM32\WISPTIS.EXE (3504)
Stoppé! C:\Windows\system32\DRIVERS\xaudio.exe (3544)
Stoppé! C:\Windows\system32\atwtusb.exe (3556)
Stoppé! C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (3580)
Stoppé! C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe (3620)
Stoppé! C:\Windows\system32\WUDFHost.exe (3640)
Stoppé! D:\Programme\Spybot - Search & Destroy\SDWinSec.exe (3776)
Stoppé! C:\Windows\system32\taskeng.exe (3828)
Stoppé! C:\Program Files\Windows Defender\MSASCui.exe (4408)
Stoppé! C:\Program Files\Synaptics\SynTP\SynTPStart.exe (4472)
Stoppé! C:\Windows\RtHDVCpl.exe (4504)
Stoppé! C:\Windows\System32\igfxtray.exe (4532)
Stoppé! C:\Windows\System32\hkcmd.exe (4544)
Stoppé! C:\Windows\System32\igfxpers.exe (4552)
Stoppé! C:\Windows\PLFSetI.exe (4564)
Stoppé! C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (4584)
Stoppé! C:\Windows\system32\igfxsrvc.exe (4612)
Stoppé! C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (4640)
Stoppé! C:\Users\ISABELLE\AppData\Local\Temp\RtkBtMnt.exe (5108)
Stoppé! C:\Program Files\Windows Media Player\wmpnscfg.exe (5444)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (6128)
Stoppé! C:\Program Files\Launch Manager\LManager.exe (5104)
Stoppé! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (5128)
Stoppé! D:\Programme\HP\HP Software Update\hpwuSchd2.exe (5992)
Stoppé! C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe (4268)
Stoppé! C:\Windows\System32\WTMKM.exe (4120)
Stoppé! C:\Program Files\Real\RealPlayer\Update\realsched.exe (5056)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe (6040)
Stoppé! C:\Program Files\iTunes\iTunesHelper.exe (5608)
Stoppé! D:\Programme\TomTom HOME 2\TomTomHOMERunner.exe (5176)
Stoppé! D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (2928)
Stoppé! C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (3888)
Stoppé! D:\Programme\ecbl-cnce.exe (1708)
Stoppé! D:\Programme\HP\Digital Imaging\bin\hpqtra08.exe (4452)
Stoppé! C:\Windows\system32\igfxext.exe (5328)
Stoppé! C:\Windows\system32\igfxsrvc.exe (3180)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (3360)
Stoppé! C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE (4012)
Stoppé! C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE (2660)
Stoppé! C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE (6120)
Stoppé! C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE (1116)
Stoppé! D:\Programme\HP\Digital Imaging\bin\hpqSTE08.exe (5844)
Stoppé! D:\Programme\HP\Digital Imaging\bin\hpqbam08.exe (4204)
Stoppé! C:\Windows\System32\mobsync.exe (5760)
Stoppé! D:\Programme\HP\Digital Imaging\bin\hpqgpc01.exe (4904)

################## | Éléments infectieux |

Supprimé! G:\urDrive.exe
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-3360937148-209854144-2644965178-1003
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-3360937148-209854144-2644965178-1004
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-3360937148-209854144-2644965178-1003
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-3360937148-209854144-2644965178-1004
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-991495030-258404640-780119143-1003
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-991495030-258404640-780119143-1004
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-991495030-258404640-780119143-1005
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-991495030-258404640-780119143-500
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-991495030-258404640-780119143-501
Supprimé! I:\$RECYCLE.BIN\S-1-5-21-3360937148-209854144-2644965178-1003
Supprimé! I:\$RECYCLE.BIN\S-1-5-21-3360937148-209854144-2644965178-1004
Supprimé! I:\$RECYCLE.BIN\S-1-5-21-991495030-258404640-780119143-1004
Supprimé! G:\autorun.inf
Non supprimé ! H:\autorun.inf
Supprimé! I:\autorun.inf

(!) Fichiers temporaires supprimés.

################## | Registre |


################## | Mountpoints2 |


################## | Listing |

[15/03/2012 - 18:32:14 | SHD ] C:\$RECYCLE.BIN
[14/06/2011 - 22:22:28 | D ] C:\9cdb346e8ae52f4a181574eb45
[13/06/2011 - 13:39:22 | D ] C:\Acer
[18/09/2006 - 22:43:36 | N | 24] C:\autoexec.bat
[13/06/2011 - 22:22:20 | D ] C:\Book
[15/06/2011 - 08:20:07 | D ] C:\Boot
[11/04/2009 - 07:36:36 | RASH | 333257] C:\bootmgr
[15/02/2008 - 02:41:40 | N | 8192] C:\BOOTSECT.BAK
[18/09/2006 - 22:43:37 | N | 10] C:\config.sys
[02/11/2006 - 14:02:24 | SHD ] C:\Documents and Settings
[13/06/2011 - 13:42:53 | D ] C:\Elements
[15/03/2012 - 18:19:17 | ASH | 3211190272] C:\hiberfil.sys
[13/06/2011 - 13:27:50 | D ] C:\Intel
[31/03/2008 - 00:55:20 | RHD ] C:\MSOCache
[15/03/2012 - 18:19:11 | ASH | 3524980736] C:\pagefile.sys
[05/06/2008 - 06:03:10 | N | 3798] C:\Patch.rev
[01/05/2008 - 00:51:44 | N | 698] C:\Patch2.rev
[14/09/2007 - 02:59:06 | N | 631] C:\PDVD.iss
[21/01/2008 - 03:33:10 | D ] C:\PerfLogs
[31/03/2008 - 13:09:33 | N | 147] C:\preload.rev
[20/02/2012 - 16:16:11 | D ] C:\Program Files
[30/01/2012 - 14:59:53 | HD ] C:\ProgramData
[15/03/2012 - 02:54:48 | SHD ] C:\System Volume Information
[25/01/2012 - 10:27:19 | D ] C:\Temp
[15/03/2012 - 18:32:16 | D ] C:\UsbFix
[15/03/2012 - 18:26:15 | A | 13352] C:\UsbFix.txt
[13/06/2011 - 16:43:51 | D ] C:\Users
[15/03/2012 - 06:51:50 | D ] C:\Windows
[15/03/2012 - 18:32:15 | SHDC ] D:\$RECYCLE.BIN
[15/03/2010 - 09:37:36 | DC ] D:\AMAZON MP3 Downloader
[16/05/2010 - 11:11:09 | SH | 151] D:\desktop.ini
[04/03/2011 - 10:51:10 | DC ] D:\Diaporama
[11/03/2012 - 18:31:59 | DC ] D:\Documents
[14/06/2011 - 10:46:31 | DC ] D:\erData
[21/04/2010 - 18:14:38 | C | 13887] D:\FAQ.htm
[22/08/2010 - 17:53:24 | DC ] D:\Languages
[12/05/2010 - 19:22:18 | C | 1672] D:\License.txt
[08/05/2010 - 10:48:36 | C | 26299] D:\Manual.htm
[22/05/2010 - 12:33:12 | C | 72224] D:\mp3DirectCut.exe
[14/03/2011 - 10:52:12 | C | 1746] D:\mp3DirectCut.ini
[12/03/2012 - 21:57:40 | DC ] D:\Music
[05/10/2010 - 15:34:52 | DC ] D:\MyAudio
[13/03/2012 - 12:28:27 | DC ] D:\Pictures
[02/01/2012 - 22:57:45 | DC ] D:\Programme
[09/06/2011 - 20:13:54 | SHD ] D:\System Volume Information
[22/05/2010 - 12:14:12 | C | 2933] D:\Version.txt
[29/02/2012 - 10:51:49 | DC ] D:\Videos
[26/10/2011 - 12:31:00 | N | 296] F:\WMPInfo.xml
[26/10/2011 - 12:36:50 | D ] F:\Music
[29/11/2011 - 18:43:26 | D ] F:\IMAGES
[05/05/2011 - 17:08:26 | N | 361248] G:\unInstaller.exe
[10/08/2011 - 19:10:40 | D ] G:\urDrive
[23/11/2010 - 21:26:30 | D ] G:\Lightroom 3.2
[04/10/2011 - 22:28:58 | D ] G:\CS3
[08/02/2011 - 20:07:06 | D ] G:\Photomatix Fr
[30/11/2010 - 20:24:06 | D ] G:\nikon suite
[22/12/2009 - 21:20:36 | D ] G:\topaz
[18/05/2009 - 17:46:50 | R | 565248] H:\HPLauncher.exe
[12/06/2009 - 21:56:58 | RH | 30] H:\autorun.inf
[15/03/2012 - 18:32:15 | SHD ] I:\$RECYCLE.BIN
[30/08/2010 - 18:42:09 | N | 0] I:\ArcBackupedFlag
[30/08/2010 - 18:07:00 | D ] I:\Backup Files
[30/08/2010 - 17:52:27 | SH | 85] I:\desktop.ini
[14/06/2011 - 17:41:13 | D ] I:\DOC1
[20/11/2011 - 12:47:21 | D ] I:\DOCUMENTS
[12/06/2011 - 10:17:02 | D ] I:\Fonts
[03/03/2011 - 15:50:59 | D ] I:\HP SimpleSave Application
[15/12/2010 - 15:56:28 | N | 1066904] I:\HPSimpleSave.exe
[14/05/2009 - 00:21:14 | N | 410598] I:\HPSimpleSaveLOGO.ico
[21/11/2011 - 13:31:47 | D ] I:\IMAGES
[09/06/2011 - 19:52:30 | D ] I:\MUSIQUE
[14/06/2011 - 13:20:48 | D ] I:\OUTLOOK
[20/01/2012 - 12:41:31 | D ] I:\PROGRAMME
[09/06/2011 - 20:13:54 | SHD ] I:\System Volume Information
[09/06/2011 - 20:26:37 | D ] I:\VIDEOS
[21/11/2011 - 13:23:00 | SH | 85] J:\desktop.ini
[21/11/2011 - 12:24:20 | SHD ] J:\$RECYCLE.BIN
[11/01/2012 - 19:18:20 | D ] J:\IMAGES
[06/03/2012 - 23:55:52 | D ] J:\EXPO

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
I:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
J:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: \UsbFix_Upload_Me_PC-DE-DUFIL.zip
http://eldesaparecido.com/upload.html
Merci de votre contribution.

################## | E.O.F |

Fausse alerte, j'ai redémarré mon ordi, et j'ai récupéré les fonctions...........

Ok, je vais télécharger le logiciel, et je ferais l'analyse ce soir.
En ce qui concerne outlook, aujourd'hui, ça à l'air de fonctionner. Par contre, depuis ce matin, je suis obligée de redémarrer mon ordi manuellement (car je n'ai aucune icone qui fonctionne, ni même le bouton "démarrer")3 ou 4 fois de suite !!!!!!
Je pose quand même la question, mais ce n'est pas vraiment "normal" n'est ce pas ????

ça y est, j'ai fait l'analyse................voici le lien :
http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120316_r10f5d15d10q13

D'accord, je vais le faire ce soir !!!!

Voilà le rapport ...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:20:19, on 15/03/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\PLFSetI.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Users\ISABELLE\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
D:\Programme\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe
C:\Windows\System32\WTMKM.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
D:\Programme\TomTom HOME 2\TomTomHOMERunner.exe
D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
D:\Programme\ecbl-cnce.exe
D:\Programme\HP\Digital Imaging\bin\hpqtra08.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
D:\Programme\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Users\ISABELLE\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ISABELLE\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ISABELLE\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ISABELLE\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\ISABELLE\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\ISABELLE\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Country Internet Radio Toolbar - {2f5fd739-4c26-49ad-a775-cc3e68ec38d4} - C:\Program Files\Country_Internet_Radio\prxtbCou0.dll
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Country Internet Radio - {2f5fd739-4c26-49ad-a775-cc3e68ec38d4} - C:\Program Files\Country_Internet_Radio\prxtbCou0.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\ievkbd.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\klwtbbho.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Country Internet Radio Toolbar - {2f5fd739-4c26-49ad-a775-cc3e68ec38d4} - C:\Program Files\Country_Internet_Radio\prxtbCou0.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [HP Software Update] D:\Programme\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] D:\Programme\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe"
O4 - HKLM\..\Run: [MacrokeyManager] WTMKM.exe
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [*WerKernelReporting] %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "D:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Users\dufil\AppData\Local\Temp\SSUPDATE.EXE Software\SUPERAntiSpyware.com\SUPERAntiSpyware
O4 - HKCU\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-3360937148-209854144-2644965178-1004\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User 'ISABELLE')
O4 - HKUS\S-1-5-21-3360937148-209854144-2644965178-1004\..\Run: [Facebook Update] "C:\Users\ISABELLE\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User 'ISABELLE')
O4 - HKUS\S-1-5-21-3360937148-209854144-2644965178-1004\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'ISABELLE')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: e-Carte Bleue Caisse d'Epargne.lnk = D:\Programme\ecbl-cnce.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programme\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\dufil\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\klwtbbho.dll
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - D:\Programme\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TomTomHOMEService - TomTom - D:\Programme\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: WTService - Unknown owner - C:\Windows\system32\atwtusb.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Hello..........j'ai reçu une réponse sur ma boite mail, mais je ne la vois plus sur le forum.
Je dois supprimer les lignes mentionnées ou pas ??????
En tout cas merci !!!

En effet je ne vois pas le message que j'ai posté moi non plus.
Oui supprime les lignes.

Ton PC rame t'il toujours autant ? aucune amélioration ?

Ce matin j'ai du le redémarrer au moins 3 fois manuellement, car je n'avais rien qui fonctionnait......aucune icones, ni même le bouton démarrer !!!!
Pour outlook, pas de problème depuis hier, mais il est très lent................ je n'ai pas encore essayé de relancé photoshop.....
Et là, ça fait 4 heures que windows defender tourne.........j'espère qu'il va s'arrêter avant 2 heures du mat !!

Donc, je relance le scan, et je supprime les lignes........ensuite, je lance ccleaner, et je poste le résultat !!!!!!

Et moi qui pensait que + on était protégé, mieux c'était !!!!!
Ok, donc je supprime ces deux programmes....en plus c'est dommage, car ceux là, je savais m'en servir correctement (lol) !!!!

Par contre, pour "D:\Programme\ecbl-cnce.exe", j'ai vérifié, il s'agit de l'application pour "e-carte bleue"......donc, ça je garde.


Et tu penses que c'est la surmultiplication des logiciels qui a pu désactiver mon antivirus ???

J'ai quand même analyser l'application de ma e-carte bleue, pour vérifier........
Voilà le lien : https://www.virustotal.com/file/fa369e0df8479ea142215fdd4ef4b15de57bdb260d0bea3a1419c0b204a722d3/analysis/1331898633/

ok, Merci........je le ferais au retour du weekend (si ça peut attendre jusque là)!!!!
Bon weekend à toi.........je te poste les résultats lundi !!!!!

y'a pas de soucis ;)
Bon week end :)

Voilà le rapport de ZHPFix :

Rapport de ZHPFix 1.12.3381 par Nicolas Coolman, Update du 08/02/2011
Fichier d'export Registre :
Run by ISABELLE at 18/03/2012 21:23:23
Windows Vista Business Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: HKCU\Software\AppDataLow\Software\Conduit
ABSENT SearchScopes :{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine

========== Dossier(s) ==========
ABSENT C:\Users\dufil\AppData\Local\Conduit

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\dufil\appdata\local\temp\tbcou0.dll
ABSENT Folder/File: c:\users\dufil\appdata\local\conduit
ABSENT Folder/File: c:\users\dufil\appdata\locallow\conduit


========== Récapitulatif ==========
5 : Clé(s) du Registre
1 : Dossier(s)
3 : Fichier(s)


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 18/03/2012 21:23:23 [1264]

Et voici le rapport de Malwarebytes :

Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Version de la base de données: v2012.01.27.05

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
ISABELLE :: PC-DE-DUFIL [limité]

18/03/2012 21:36:28
mbam-log-2012-03-18 (21-36-28).txt

Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 318814
Temps écoulé: 5 heure(s), 14 minute(s), 34 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

t'as appuyé 2 fois sur "GO" ?
sinon ça donne quoi le pc pour l'instant ?

Houlà........ça à l'air "dangereux ce truc !!!!!
Tu crois que je vais être "capable" de le faire ????
N'oublie pas que je suis "nulle" en informatique............ça ne fait que 3 ans que j'ai commencé......

Bon, c'est fait..........mais j'ai l'impression que je n'ai pas réussi à le renommer.........car je n'ai pas eu de fenêtre avant l'enregistrement........

Petites question, je peux désinstaller tout les logiciels que j'ai installé depuis la semaine dernière (car je ne saurais pas les utiliser seule????)

Donc, voici le compte rendu :

ComboFix 12-03-18.04 - dufil 19/03/2012 21:22:32.1.2 - x86
Microsoft® Windows Vista(TM) Professionnel 6.0.6002.2.1252.33.1036.18.3062.1562 [GMT 1:00]
Lancé depuis: c:\users\ISABELLE\Downloads\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
FW: Kaspersky Internet Security *Disabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
SP: Kaspersky Internet Security *Disabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-02-19 au 2012-03-19 ))))))))))))))))))))))))))))))))))))
.
.
2012-03-16 18:11 . 2012-03-16 18:11 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2012-03-16 17:54 . 2012-03-18 20:23 -------- d-----w- C:\ZHP
2012-03-16 17:52 . 2012-03-16 18:11 -------- d-----w- c:\program files\ZHPDiag
2012-03-16 06:27 . 2012-02-08 06:03 6552120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{386706DC-BC13-43E4-8AC2-651DDE4D3569}\mpengine.dll
2012-03-15 18:17 . 2012-03-15 18:17 -------- d-----w- c:\program files\Trend Micro
2012-03-15 17:40 . 2007-08-20 20:13 184320 ----a-w- c:\windows\system32\igfxres.dll
2012-03-15 17:13 . 2012-03-15 17:40 -------- d-----w- C:\UsbFix
2012-03-14 08:56 . 2012-02-02 15:16 2044416 ----a-w- c:\windows\system32\win32k.sys
2012-03-14 08:56 . 2012-02-14 15:45 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-03-14 08:56 . 2012-02-13 14:12 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2012-03-14 08:56 . 2012-02-13 13:44 1068544 ----a-w- c:\windows\system32\DWrite.dll
2012-03-14 08:56 . 2012-02-14 15:45 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2012-03-14 08:56 . 2012-02-13 13:47 683008 ----a-w- c:\windows\system32\d2d1.dll
2012-03-14 08:56 . 2012-01-31 10:59 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2012-03-14 08:55 . 2012-01-09 15:54 613376 ----a-w- c:\windows\system32\rdpencom.dll
2012-03-14 08:55 . 2012-01-09 13:58 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-13 11:38 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-03-13 11:38 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2012-02-20 15:16 . 2012-02-20 15:16 -------- d-----w- c:\program files\PhotomatixPro4
2012-02-20 15:16 . 2012-02-20 15:16 -------- d-----w- c:\users\dufil\AppData\Roaming\HDRsoft
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-15 17:38 . 2012-03-15 17:35 691499698 ----a-w- C:\UsbFix_Upload_Me_PC-DE-DUFIL.zip
2012-03-01 06:30 . 2011-06-17 07:47 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-23 09:18 . 2011-06-13 13:13 237072 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-01-03 00:00 39472 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Device Detector"="DevDetect.exe -autorun" [X]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-07-15 102400]
"TomTomHOME.exe"="d:\programme\TomTom HOME 2\TomTomHOMERunner.exe" [2011-04-22 247728]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-06-14 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-10-03 178712]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-08 4853760]
"Skytel"="Skytel.exe" [2007-11-21 1826816]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-08-28 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-08-28 154136]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-08-28 137752]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2008-01-22 81920]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-10-11 62760]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-01-02 521776]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-01-07 858632]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"HP Software Update"="d:\programme\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="d:\programme\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security Special Ferrari Edition\avp.exe" [2011-03-02 361216]
"MacrokeyManager"="WTMKM.exe" [2009-08-11 5586664]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2011-12-02 296056]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-01-16 421736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"*WerKernelReporting"="c:\windows\SYSTEM32\WerFault.exe" [2009-04-11 217088]
"Malwarebytes Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
"Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2011-12-24 1080904]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-8-28 739880]
e-Carte Bleue Caisse d'Epargne.lnk - d:\programme\ecbl-cnce.exe [2011-6-14 278528]
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-3-31 535336]
HP Digital Imaging Monitor.lnk - d:\programme\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenu du dossier 'Tâches planifiées'
.
2012-03-19 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3360937148-209854144-2644965178-1004Core.job
- c:\users\ISABELLE\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-11-20 08:22]
.
2012-03-19 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3360937148-209854144-2644965178-1004UA.job
- c:\users\ISABELLE\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-11-20 08:22]
.
2012-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-06-14 13:16]
.
2012-03-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-06-14 13:16]
.
2012-03-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3360937148-209854144-2644965178-1004Core.job
- c:\users\ISABELLE\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-14 14:22]
.
2012-03-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3360937148-209854144-2644965178-1004UA.job
- c:\users\ISABELLE\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-14 14:22]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Envoyer au périphérique &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Envoyer l'&image au périphérique Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Free YouTube to MP3 Converter - c:\users\dufil\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHELINS SUPPRIMES - - - -
.
URLSearchHooks-{2f5fd739-4c26-49ad-a775-cc3e68ec38d4} - (no file)
WebBrowser-{2F5FD739-4C26-49AD-A775-CC3E68EC38D4} - (no file)
HKLM-Run-eRecoveryService - (no file)
HKLM-Run-NPSStartup - (no file)
HKLM-RunOnce-<NO NAME> - (no file)
AddRemove-PhotoScape - f:\programme\PhotoScape\uninstall.exe
AddRemove-RealPlayer 15.0 - c:\program files\real\realplayer\Update\r1puninst.exe
AddRemove-virtualPhotographer_is1 - c:\program files\Adobe\Adobe Photoshop CS3\Modules externes\PLUG IN\unins000.exe
AddRemove-PhotoFiltre - f:\programme\PhotoFiltre\Uninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-19 21:36
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.032"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ani"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.bay"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.bmp"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.bw"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.cr2"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.crw"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.cs1"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.cur"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.dcr"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.dcx"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.dib"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.djv"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.djvu"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.dng"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.emf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.eps"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.erf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.fff"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.fpx"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.gif"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.icl"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.icn"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ico"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.iff"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ilbm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.int"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.inta"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.iw4"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.j2c"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.j2k"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jfif"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jif"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jp2"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jpc"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jpe"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jpeg"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jpg"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jpk"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.jpx"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.lbm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.mos"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.mrw"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.nef"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.orf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pbm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pcd"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pct"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pcx"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pef"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pgm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pic"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pict"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.pix"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.png"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ppm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.psd"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.psp"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.raf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ras"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.raw"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.rgb"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.rgba"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.rle"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.rsb"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.sgi"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.sr2"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.srf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.tga"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.thm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.tif"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.tiff"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ttc"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.ttf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v9o\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.v9o"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v9p\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.v9p"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v9pf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.v9pf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.wbm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.wbmp"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.wmf"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.xbm"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.xif"
.
[HKEY_USERS\S-1-5-21-3360937148-209854144-2644965178-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 9.0.xpm"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'Explorer.exe'(2736)
c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
c:\windows\system32\btmmhook.dll
c:\acer\Empowering Technology\EPOWER\SysHook.dll
.
Heure de fin: 2012-03-19 21:42:00
ComboFix-quarantined-files.txt 2012-03-19 20:41
.
Avant-CF: 22 537 789 440 octets libres
Après-CF: 22 060 912 640 octets libres
.
- - End Of File - - FE4B13DF81E70A87FAD865F89F65A35C

OK......je vais suivre toutes tes instructions.
Voici le rapport après l'utilisation de DelFix :


# DelFix v8.8 - Rapport créé le 20/03/2012 à 12:34:21
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Windows Vista (TM) Business Service Pack 2 (32 bits)
# Nom d'utilisateur : dufil - PC-DE-DUFIL (Administrateur)
# Exécuté depuis : C:\Users\ISABELLE\Desktop\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : \Qoobox
Supprimé : \USBFix
Supprimé : \Combofix
Supprimé : \ZHP
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hijackthis
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\Program Files\Trend Micro\Hijackthis

~~~~~~ Fichier(s) ~~~~~~

Supprimé : \ComboFix.txt
Supprimé : \PhysicalDisk0_MBR.bin
Supprimé : \UsbFix.txt
Supprimé : \UsbFix_Upload_Me_PC-DE-DUFIL.zip
Supprimé : C:\Users\dufil\Desktop\HijackThis.lnk
Supprimé : C:\Users\dufil\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\SED.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\Zip.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\USBFix
Clé Supprimée : HKLM\SOFTWARE\Swearware
Clé Supprimée : HKLM\SOFTWARE\TrendMicro\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [2016 octets] - [20/03/2012 12:34:21]

########## EOF - \DelFix[S1].txt - [2140 octets] ##########

Petite question.
Tu me demandes de télécharger CCleaner......mais je l'ai déjà. Je dois le désinstaller, puis le réinstaller ????

Pour DelFix, c'est ok :)

Pour CCleaner, quand tu le lance s'il n'est pas à jour il te demande de la télécharger, donc tout va bien ;)

Alors, nettoyage et défragmentation fait.......(mais ça, je le faisais déjà en moyenne 2 à 3 fois par mois).

Par contre, pour le parfeu, j'ai celui de windows qui était déjà installé dans mon PC...........il n'est pas suffisant ?????

Et je suis pratiquement sûre de ne pas avoir de "Console Java".
J'ai Java Script avec Adobe...........mais autrement, je ne trouve rien (enfin je continue de chercher) !!!!