Sujet Précédent Sujet Suivant

Help win 32 renos imposible de supprimer

tarktark -  
 gijojo -
bonjour, mon ordi est vérolé par Win 32 renos pouriez vous m'aider SVP
A voir également:

1 réponse

Réponse 1 / 1
papyber Messages postés 6430 Statut Contributeur sécurité 257
 
télécharge GenProc de Lazzzy et Narco4 sur ton bureau
http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre

Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
0
gijojo
 
Rapport GenProc 2.660 [1] - 27/12/2009 à 11:31:56
@ Windows VISTA - Acer - Mode normal
@ Internet Explorer 7.0.6000.16945 [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt



~~~~ INFORMATION COMPLEMENTAIRE ~~~~


Rapport de ZHPDiag v1.24.39 par Nicolas Coolman
Run by jo at 27/12/2009 11:40:26
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium
MSIE: Internet Explorer v7.0.6000.16945

Boot mode: Normal (Normal boot)
Total RAM: 1789 MB (38% free)
System drive C: has 70 GB (62%) free of 112 GB

---\\
[MD5.9AD9E2FB2811123DA13DE84CC154AB77] - C:\Program Files\Windows Defender\MSASCui.exe
[MD5.DFFC976A9D802FAA434052A8EF6C34CB] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[MD5.033FF248550305ED52ED2D2844A8A11B] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[MD5.B2B2FE2671DD98A322B0AD7079C0B2B2] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
[MD5.2798313DBB6AE778207EB1B1C68A1988] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
[MD5.E090EE780714E376062198C6625D5B51] - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
[MD5.EB471FE81AC7235AC40F01091BCEDC54] - C:\PROGRA~1\LAUNCH~1\LManager.exe
[MD5.BBADDD291165F398BA4F058287175209] - C:\Acer\WR_PopUp\WarReg_PopUp.exe
[MD5.1ECD388C55B7BD4468395CDFD4488F3D] - C:\Acer\AcerTour\Reminder.exe
[MD5.2D7B9072D6CC30B0B6B1A3662F455FC0] - C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
[MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
[MD5.836DC47E6CAD975304D1D3EB2F516A1C] - C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
[MD5.8B9145D229D4E89D15ACB820D4A3A90F] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[MD5.DB2BC9FB2C904B3C6944BBEB02A62008] - C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe
[MD5.8B625CAD4036DE135B5C1B04233A55DE] - C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
[MD5.5D24868CAC87DCD70C5B71101D39B0DE] - C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
[MD5.55D7A219AD8D0DB8980528944152A6FD] - C:\Program Files\QuickTime\QTTask.exe
[MD5.68A553BDFA855C4F1074696682FCDEB6] - C:\Program Files\iTunes\iTunesHelper.exe
[MD5.2E0953919779A44BF9DFB7B07C58535A] - C:\Windows\ehome\ehTray.exe
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.A64777D6E6640F00FF630EEE22D0964B] - C:\Users\jo\AppData\Local\Temp\c.exe
[MD5.582F3A0BA61D8F0D50C66B592808B6D6] - C:\Program Files\Windows Sidebar\Sidebar.exe
[MD5.10DA15933D582D2FEDCF705EFE394B09] - C:\Windows\system32\svchost.exe
[MD5.4B5AE15E5C73EB4DC8DBEC2788230D41] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.5DEBC3519D489411073FA7E56FFB4A93] - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
[MD5.983F6E0FEBE34A887633581B948D0ED6] - C:\Windows\system32\Ati2evxx.exe
[MD5.0AAF6B848185899CF76AE04E62EAB3D2] - C:\Program Files\Alwil Software\Avast4\ashServ.exe
[MD5.6163664C7E9CD110AF70180C126C3FDC] - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.F54907AA07F60AFF81E1E09E97AF98B0] - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
[MD5.A7B5F3B9363F9AB1D4FE459BAF3B15D6] - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
[MD5.207E2DDA01AAC6AD64F0368CA59FC179] - C:\Acer\Empowering Technology\eNet\eNet Service.exe
[MD5.59FCCAF915BA89DD98CADF08DA91AFEE] - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
[MD5.06484E97D22F06DE8DE0F8E2BEC6FA9E] - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
[MD5.20DFB4BD5DE8585FDDA02F4C9D00308C] - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
[MD5.793FF718477345CD5D232C50BED1E452] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
[MD5.842684E0DF20A59E293DA1C6F0DFE261] - C:\Acer\Mobility Center\MobilityService.exe
[MD5.D955D5DE998DB2476BF0892BE3A96C26] - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
[MD5.2DE0A33A7E58BEDC8D70B1940E0FFE28] - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
[MD5.C731B1FE449D4E9CEA358C9D55B69BE9] - C:\Windows\system32\lsass.exe
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
[MD5.A1DCD30534835CB67733AD00175125A6] - C:\Windows\system32\SLsvc.exe
[MD5.DA612EF2556776DF2630B68BF2D48935] - C:\Windows\System32\spoolsv.exe
[MD5.B2EC3E1DEAC5F0A764BD3486D213A0AF] - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
[MD5.D2F4F32B59440011174B4F8137AF4E0C] - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
[MD5.E8781CF1A4262881897444D22921A3A6] - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
[MD5.5DE40982E3AE45DC00586A93637B351B] - C:\Windows\system32\SearchIndexer.exe
[MD5.28DC5D626E036A75A572556F0A6EB1F6] - C:\Windows\system32\DRIVERS\xaudio.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emule-france.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

---\\
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll

---\\
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

---\\
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
O4 - HKLM\..\Run: [Smart Start UP] C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe /Automation
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas.dll,AddAtomAW
O4 - HKCU\..\Run: [J8RPLTROBQ] C:\Users\jo\AppData\Local\Temp\c.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - Global Startup: Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

---\\
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

---\\
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll

---\\
O15 - Trusted Zone: [HKCU\...\Domains] mappy.com
O15 - Trusted Zone: [HKCU\...\Domains] orange.fr

---\\
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/interim/ractrl.cab?lmi=100

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Service de démarrage SQL Server pour le Gestionnaire de contacts professionnels (BcmSqlStartupSvc) - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
O23 - Service: eDSService.exe (eDataSecurity Service) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service (eNet Service) - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService (MobilityService) - C:\Acer\Mobility Center\MobilityService.exe -p
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SeaPort (SeaPort) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: SQL Server Browser (SQLBrowser) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
O23 - Service: Enregistreur VSS SQL Server (SQLWriter) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
O23 - Service: ePower Service (WMIService) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding
O23 - Service: XAudioService (XAudioService) - C:\Windows\system32\DRIVERS\xaudio.exe
O23 - Service: {95808DC4-FA4A-4c74-92FE-5B863F82066B} ({95808DC4-FA4A-4c74-92FE-5B863F82066B}) - C:\WindowsC:\Program Files\CyberLink\PowerDVD\000.fcl

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: Dfs Client Driver (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50003 (Tcpip) - C:\WINDOWS\System32\drivers\tcpip.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\
O42 - Logiciel: Acer Crystal Eye webcam
O42 - Logiciel: Acer Empowering Technology
O42 - Logiciel: Acer GridVista
O42 - Logiciel: Acer Mobility Center Plug-In
O42 - Logiciel: Acer ScreenSaver
O42 - Logiciel: Acer Tour
O42 - Logiciel: Acer eDataSecurity Management
O42 - Logiciel: Acer eLock Management
O42 - Logiciel: Acer eNet Management
O42 - Logiciel: Acer ePower Management
O42 - Logiciel: Acer ePresentation Management
O42 - Logiciel: Acer eSettings Management
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
O42 - Logiciel: Adobe Reader 8.1.2
O42 - Logiciel: Adobe Reader 8.1.2 Security Update 1 (KB403742)
O42 - Logiciel: Apple Application Support
O42 - Logiciel: Apple Mobile Device Support
O42 - Logiciel: Apple Software Update
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: Bonjour
O42 - Logiciel: Catalyst Control Center - Branding
O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)
O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)
O42 - Logiciel: Galerie de photos Windows Live
O42 - Logiciel: Gestionnaire de contacts professionnels pour Outlook 2007 SP2
O42 - Logiciel: Google Earth
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: Installation Windows Live
O42 - Logiciel: Java(TM) 6 Update 4
O42 - Logiciel: Java(TM) 6 Update 5
O42 - Logiciel: Junk Mail filter update
O42 - Logiciel: Launch Manager
O42 - Logiciel: LimeWire 4.18.8
O42 - Logiciel: Logiciel d'archivage WinRAR
O42 - Logiciel: Logitech Desktop Messenger
O42 - Logiciel: Logitech SetPoint
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
O42 - Logiciel: MSXML 4.0 SP2 (KB941833)
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: MUSICMATCH Jukebox
O42 - Logiciel: Macromedia Flash Player 8
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Choice Guard
O42 - Logiciel: Microsoft Office 2003 Web Components
O42 - Logiciel: Microsoft Office 2007 Primary Interop Assemblies
O42 - Logiciel: Microsoft Office Small Business Connectivity Components
O42 - Logiciel: Microsoft SQL Server 2005
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
O42 - Logiciel: Microsoft SQL Server Native Client
O42 - Logiciel: Microsoft SQL Server VSS Writer
O42 - Logiciel: Microsoft Search Enhancement Pack
O42 - Logiciel: Microsoft Silverlight
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86)
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86)
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: NTI Backup NOW! 4.7
O42 - Logiciel: NTI CD & DVD-Maker
O42 - Logiciel: NTI Shadow
O42 - Logiciel: O2Micro Flash Memory Card Reader Driver Installer(x86)
O42 - Logiciel: OpenOffice.org 2.4
O42 - Logiciel: Orange - Logiciels Internet
O42 - Logiciel: Outil de téléchargement Windows Live
O42 - Logiciel: PowerDVD
O42 - Logiciel: Presto! Mr. Photo 4
O42 - Logiciel: QuickTime
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Security Update for CAPICOM (KB931906)
O42 - Logiciel: Smart Start UP
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
O42 - Logiciel: VLC media player 0.9.2
O42 - Logiciel: Windows Live Call
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live Contrôle parental
O42 - Logiciel: Windows Live FolderShare
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live Movie Maker
O42 - Logiciel: Windows Live Toolbar
O42 - Logiciel: Windows Live Writer
O42 - Logiciel: Yahoo! Toolbar avec bloqueur de fenêtres pop-up
O42 - Logiciel: avast! Antivirus
O42 - Logiciel: eMule
O42 - Logiciel: iTunes

---\\
O44 - LFC:Last File Created 27/12/2009 - 09:39:45 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 27/12/2009 - 08:10:55 ---A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 25/12/2009 - 19:22:35 ---A- C:\Windows\msa.exe
O44 - LFC:Last File Created 25/12/2009 - 19:22:09 ---A- C:\Windows\System32\sshnas.dll
O44 - LFC:Last File Created 24/12/2009 - 18:17:12 ---A- C:\Windows\setupact.log
O44 - LFC:Last File Created 07/12/2009 - 19:17:37 ---A- C:\Windows\MEMORY.DMP
O44 - LFC:Last File Created 02/12/2009 - 17:10:41 ---A- C:\Windows\PFRO.log
O44 - LFC:Last File Created 02/12/2009 - 16:17:56 ---A- C:\Windows\ie8_main.log
O44 - LFC:Last File Created 02/12/2009 - 16:13:01 ---A- C:\Windows\System32\config.nt
O44 - LFC:Last File Created 01/12/2009 - 21:06:19 ---A- C:\Windows\System32\mrt.exe
O44 - LFC:Last File Created 27/11/2009 - 18:25:39 ---A- C:\Windows\msxml4-KB973688-fra.LOG

---\\
O63 - Logiciel: HijackThis 2.0.2


End of the scan: 346 lines


----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 11:41:02 ~~
0
gijojo
 
Pouvez vous m'aider svp je suis également infecté par ce virus. Voici mon rapport
Rapport GenProc 2.660 [1] - 27/12/2009 à 11:31:56
@ Windows VISTA - Acer - Mode normal
@ Internet Explorer 7.0.6000.16945 [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt



~~~~ INFORMATION COMPLEMENTAIRE ~~~~


Rapport de ZHPDiag v1.24.39 par Nicolas Coolman
Run by jo at 27/12/2009 11:40:26
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium
MSIE: Internet Explorer v7.0.6000.16945

Boot mode: Normal (Normal boot)
Total RAM: 1789 MB (38% free)
System drive C: has 70 GB (62%) free of 112 GB

---\\
[MD5.9AD9E2FB2811123DA13DE84CC154AB77] - C:\Program Files\Windows Defender\MSASCui.exe
[MD5.DFFC976A9D802FAA434052A8EF6C34CB] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[MD5.033FF248550305ED52ED2D2844A8A11B] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[MD5.B2B2FE2671DD98A322B0AD7079C0B2B2] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
[MD5.2798313DBB6AE778207EB1B1C68A1988] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
[MD5.E090EE780714E376062198C6625D5B51] - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
[MD5.EB471FE81AC7235AC40F01091BCEDC54] - C:\PROGRA~1\LAUNCH~1\LManager.exe
[MD5.BBADDD291165F398BA4F058287175209] - C:\Acer\WR_PopUp\WarReg_PopUp.exe
[MD5.1ECD388C55B7BD4468395CDFD4488F3D] - C:\Acer\AcerTour\Reminder.exe
[MD5.2D7B9072D6CC30B0B6B1A3662F455FC0] - C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
[MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
[MD5.836DC47E6CAD975304D1D3EB2F516A1C] - C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
[MD5.8B9145D229D4E89D15ACB820D4A3A90F] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[MD5.DB2BC9FB2C904B3C6944BBEB02A62008] - C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe
[MD5.8B625CAD4036DE135B5C1B04233A55DE] - C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
[MD5.5D24868CAC87DCD70C5B71101D39B0DE] - C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
[MD5.55D7A219AD8D0DB8980528944152A6FD] - C:\Program Files\QuickTime\QTTask.exe
[MD5.68A553BDFA855C4F1074696682FCDEB6] - C:\Program Files\iTunes\iTunesHelper.exe
[MD5.2E0953919779A44BF9DFB7B07C58535A] - C:\Windows\ehome\ehTray.exe
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.A64777D6E6640F00FF630EEE22D0964B] - C:\Users\jo\AppData\Local\Temp\c.exe
[MD5.582F3A0BA61D8F0D50C66B592808B6D6] - C:\Program Files\Windows Sidebar\Sidebar.exe
[MD5.10DA15933D582D2FEDCF705EFE394B09] - C:\Windows\system32\svchost.exe
[MD5.4B5AE15E5C73EB4DC8DBEC2788230D41] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.5DEBC3519D489411073FA7E56FFB4A93] - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
[MD5.983F6E0FEBE34A887633581B948D0ED6] - C:\Windows\system32\Ati2evxx.exe
[MD5.0AAF6B848185899CF76AE04E62EAB3D2] - C:\Program Files\Alwil Software\Avast4\ashServ.exe
[MD5.6163664C7E9CD110AF70180C126C3FDC] - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.F54907AA07F60AFF81E1E09E97AF98B0] - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
[MD5.A7B5F3B9363F9AB1D4FE459BAF3B15D6] - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
[MD5.207E2DDA01AAC6AD64F0368CA59FC179] - C:\Acer\Empowering Technology\eNet\eNet Service.exe
[MD5.59FCCAF915BA89DD98CADF08DA91AFEE] - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
[MD5.06484E97D22F06DE8DE0F8E2BEC6FA9E] - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
[MD5.20DFB4BD5DE8585FDDA02F4C9D00308C] - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
[MD5.793FF718477345CD5D232C50BED1E452] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
[MD5.842684E0DF20A59E293DA1C6F0DFE261] - C:\Acer\Mobility Center\MobilityService.exe
[MD5.D955D5DE998DB2476BF0892BE3A96C26] - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
[MD5.2DE0A33A7E58BEDC8D70B1940E0FFE28] - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
[MD5.C731B1FE449D4E9CEA358C9D55B69BE9] - C:\Windows\system32\lsass.exe
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
[MD5.A1DCD30534835CB67733AD00175125A6] - C:\Windows\system32\SLsvc.exe
[MD5.DA612EF2556776DF2630B68BF2D48935] - C:\Windows\System32\spoolsv.exe
[MD5.B2EC3E1DEAC5F0A764BD3486D213A0AF] - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
[MD5.D2F4F32B59440011174B4F8137AF4E0C] - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
[MD5.E8781CF1A4262881897444D22921A3A6] - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
[MD5.5DE40982E3AE45DC00586A93637B351B] - C:\Windows\system32\SearchIndexer.exe
[MD5.28DC5D626E036A75A572556F0A6EB1F6] - C:\Windows\system32\DRIVERS\xaudio.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emule-france.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

---\\
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll

---\\
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

---\\
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
O4 - HKLM\..\Run: [Smart Start UP] C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe /Automation
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas.dll,AddAtomAW
O4 - HKCU\..\Run: [J8RPLTROBQ] C:\Users\jo\AppData\Local\Temp\c.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - Global Startup: Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

---\\
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

---\\
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll

---\\
O15 - Trusted Zone: [HKCU\...\Domains] mappy.com
O15 - Trusted Zone: [HKCU\...\Domains] orange.fr

---\\
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/interim/ractrl.cab?lmi=100

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Service de démarrage SQL Server pour le Gestionnaire de contacts professionnels (BcmSqlStartupSvc) - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
O23 - Service: eDSService.exe (eDataSecurity Service) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service (eNet Service) - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService (MobilityService) - C:\Acer\Mobility Center\MobilityService.exe -p
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SeaPort (SeaPort) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: SQL Server Browser (SQLBrowser) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
O23 - Service: Enregistreur VSS SQL Server (SQLWriter) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
O23 - Service: ePower Service (WMIService) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding
O23 - Service: XAudioService (XAudioService) - C:\Windows\system32\DRIVERS\xaudio.exe
O23 - Service: {95808DC4-FA4A-4c74-92FE-5B863F82066B} ({95808DC4-FA4A-4c74-92FE-5B863F82066B}) - C:\WindowsC:\Program Files\CyberLink\PowerDVD\000.fcl

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: Dfs Client Driver (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50003 (Tcpip) - C:\WINDOWS\System32\drivers\tcpip.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\
O42 - Logiciel: Acer Crystal Eye webcam
O42 - Logiciel: Acer Empowering Technology
O42 - Logiciel: Acer GridVista
O42 - Logiciel: Acer Mobility Center Plug-In
O42 - Logiciel: Acer ScreenSaver
O42 - Logiciel: Acer Tour
O42 - Logiciel: Acer eDataSecurity Management
O42 - Logiciel: Acer eLock Management
O42 - Logiciel: Acer eNet Management
O42 - Logiciel: Acer ePower Management
O42 - Logiciel: Acer ePresentation Management
O42 - Logiciel: Acer eSettings Management
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
O42 - Logiciel: Adobe Reader 8.1.2
O42 - Logiciel: Adobe Reader 8.1.2 Security Update 1 (KB403742)
O42 - Logiciel: Apple Application Support
O42 - Logiciel: Apple Mobile Device Support
O42 - Logiciel: Apple Software Update
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: Bonjour
O42 - Logiciel: Catalyst Control Center - Branding
O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)
O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)
O42 - Logiciel: Galerie de photos Windows Live
O42 - Logiciel: Gestionnaire de contacts professionnels pour Outlook 2007 SP2
O42 - Logiciel: Google Earth
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: Installation Windows Live
O42 - Logiciel: Java(TM) 6 Update 4
O42 - Logiciel: Java(TM) 6 Update 5
O42 - Logiciel: Junk Mail filter update
O42 - Logiciel: Launch Manager
O42 - Logiciel: LimeWire 4.18.8
O42 - Logiciel: Logiciel d'archivage WinRAR
O42 - Logiciel: Logitech Desktop Messenger
O42 - Logiciel: Logitech SetPoint
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
O42 - Logiciel: MSXML 4.0 SP2 (KB941833)
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: MUSICMATCH Jukebox
O42 - Logiciel: Macromedia Flash Player 8
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Choice Guard
O42 - Logiciel: Microsoft Office 2003 Web Components
O42 - Logiciel: Microsoft Office 2007 Primary Interop Assemblies
O42 - Logiciel: Microsoft Office Small Business Connectivity Components
O42 - Logiciel: Microsoft SQL Server 2005
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
O42 - Logiciel: Microsoft SQL Server Native Client
O42 - Logiciel: Microsoft SQL Server VSS Writer
O42 - Logiciel: Microsoft Search Enhancement Pack
O42 - Logiciel: Microsoft Silverlight
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86)
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86)
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: NTI Backup NOW! 4.7
O42 - Logiciel: NTI CD & DVD-Maker
O42 - Logiciel: NTI Shadow
O42 - Logiciel: O2Micro Flash Memory Card Reader Driver Installer(x86)
O42 - Logiciel: OpenOffice.org 2.4
O42 - Logiciel: Orange - Logiciels Internet
O42 - Logiciel: Outil de téléchargement Windows Live
O42 - Logiciel: PowerDVD
O42 - Logiciel: Presto! Mr. Photo 4
O42 - Logiciel: QuickTime
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Security Update for CAPICOM (KB931906)
O42 - Logiciel: Smart Start UP
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
O42 - Logiciel: VLC media player 0.9.2
O42 - Logiciel: Windows Live Call
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live Contrôle parental
O42 - Logiciel: Windows Live FolderShare
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live Movie Maker
O42 - Logiciel: Windows Live Toolbar
O42 - Logiciel: Windows Live Writer
O42 - Logiciel: Yahoo! Toolbar avec bloqueur de fenêtres pop-up
O42 - Logiciel: avast! Antivirus
O42 - Logiciel: eMule
O42 - Logiciel: iTunes

---\\
O44 - LFC:Last File Created 27/12/2009 - 09:39:45 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 27/12/2009 - 08:10:55 ---A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 25/12/2009 - 19:22:35 ---A- C:\Windows\msa.exe
O44 - LFC:Last File Created 25/12/2009 - 19:22:09 ---A- C:\Windows\System32\sshnas.dll
O44 - LFC:Last File Created 24/12/2009 - 18:17:12 ---A- C:\Windows\setupact.log
O44 - LFC:Last File Created 07/12/2009 - 19:17:37 ---A- C:\Windows\MEMORY.DMP
O44 - LFC:Last File Created 02/12/2009 - 17:10:41 ---A- C:\Windows\PFRO.log
O44 - LFC:Last File Created 02/12/2009 - 16:17:56 ---A- C:\Windows\ie8_main.log
O44 - LFC:Last File Created 02/12/2009 - 16:13:01 ---A- C:\Windows\System32\config.nt
O44 - LFC:Last File Created 01/12/2009 - 21:06:19 ---A- C:\Windows\System32\mrt.exe
O44 - LFC:Last File Created 27/11/2009 - 18:25:39 ---A- C:\Windows\msxml4-KB973688-fra.LOG

---\\
O63 - Logiciel: HijackThis 2.0.2


End of the scan: 346 lines


----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 11:41:02 ~~
0
gijojo
 
Pouvez vous m'aider svp je suis également infecté par ce virus. Voici mon rapport
Rapport GenProc 2.660 [1] - 27/12/2009 à 11:31:56
@ Windows VISTA - Acer - Mode normal
@ Internet Explorer 7.0.6000.16945 [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt



~~~~ INFORMATION COMPLEMENTAIRE ~~~~


Rapport de ZHPDiag v1.24.39 par Nicolas Coolman
Run by jo at 27/12/2009 11:40:26
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium
MSIE: Internet Explorer v7.0.6000.16945

Boot mode: Normal (Normal boot)
Total RAM: 1789 MB (38% free)
System drive C: has 70 GB (62%) free of 112 GB

---\\
[MD5.9AD9E2FB2811123DA13DE84CC154AB77] - C:\Program Files\Windows Defender\MSASCui.exe
[MD5.DFFC976A9D802FAA434052A8EF6C34CB] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[MD5.033FF248550305ED52ED2D2844A8A11B] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[MD5.B2B2FE2671DD98A322B0AD7079C0B2B2] - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
[MD5.2798313DBB6AE778207EB1B1C68A1988] - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
[MD5.E090EE780714E376062198C6625D5B51] - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
[MD5.EB471FE81AC7235AC40F01091BCEDC54] - C:\PROGRA~1\LAUNCH~1\LManager.exe
[MD5.BBADDD291165F398BA4F058287175209] - C:\Acer\WR_PopUp\WarReg_PopUp.exe
[MD5.1ECD388C55B7BD4468395CDFD4488F3D] - C:\Acer\AcerTour\Reminder.exe
[MD5.2D7B9072D6CC30B0B6B1A3662F455FC0] - C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
[MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
[MD5.836DC47E6CAD975304D1D3EB2F516A1C] - C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
[MD5.8B9145D229D4E89D15ACB820D4A3A90F] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[MD5.DB2BC9FB2C904B3C6944BBEB02A62008] - C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe
[MD5.8B625CAD4036DE135B5C1B04233A55DE] - C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
[MD5.5D24868CAC87DCD70C5B71101D39B0DE] - C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
[MD5.55D7A219AD8D0DB8980528944152A6FD] - C:\Program Files\QuickTime\QTTask.exe
[MD5.68A553BDFA855C4F1074696682FCDEB6] - C:\Program Files\iTunes\iTunesHelper.exe
[MD5.2E0953919779A44BF9DFB7B07C58535A] - C:\Windows\ehome\ehTray.exe
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.A64777D6E6640F00FF630EEE22D0964B] - C:\Users\jo\AppData\Local\Temp\c.exe
[MD5.582F3A0BA61D8F0D50C66B592808B6D6] - C:\Program Files\Windows Sidebar\Sidebar.exe
[MD5.10DA15933D582D2FEDCF705EFE394B09] - C:\Windows\system32\svchost.exe
[MD5.4B5AE15E5C73EB4DC8DBEC2788230D41] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.5DEBC3519D489411073FA7E56FFB4A93] - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
[MD5.983F6E0FEBE34A887633581B948D0ED6] - C:\Windows\system32\Ati2evxx.exe
[MD5.0AAF6B848185899CF76AE04E62EAB3D2] - C:\Program Files\Alwil Software\Avast4\ashServ.exe
[MD5.6163664C7E9CD110AF70180C126C3FDC] - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.F54907AA07F60AFF81E1E09E97AF98B0] - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
[MD5.A7B5F3B9363F9AB1D4FE459BAF3B15D6] - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
[MD5.207E2DDA01AAC6AD64F0368CA59FC179] - C:\Acer\Empowering Technology\eNet\eNet Service.exe
[MD5.59FCCAF915BA89DD98CADF08DA91AFEE] - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
[MD5.06484E97D22F06DE8DE0F8E2BEC6FA9E] - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
[MD5.20DFB4BD5DE8585FDDA02F4C9D00308C] - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
[MD5.793FF718477345CD5D232C50BED1E452] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
[MD5.842684E0DF20A59E293DA1C6F0DFE261] - C:\Acer\Mobility Center\MobilityService.exe
[MD5.D955D5DE998DB2476BF0892BE3A96C26] - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
[MD5.2DE0A33A7E58BEDC8D70B1940E0FFE28] - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
[MD5.C731B1FE449D4E9CEA358C9D55B69BE9] - C:\Windows\system32\lsass.exe
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
[MD5.A1DCD30534835CB67733AD00175125A6] - C:\Windows\system32\SLsvc.exe
[MD5.DA612EF2556776DF2630B68BF2D48935] - C:\Windows\System32\spoolsv.exe
[MD5.B2EC3E1DEAC5F0A764BD3486D213A0AF] - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
[MD5.D2F4F32B59440011174B4F8137AF4E0C] - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
[MD5.E8781CF1A4262881897444D22921A3A6] - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
[MD5.5DE40982E3AE45DC00586A93637B351B] - C:\Windows\system32\SearchIndexer.exe
[MD5.28DC5D626E036A75A572556F0A6EB1F6] - C:\Windows\system32\DRIVERS\xaudio.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emule-france.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm

---\\
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll

---\\
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

---\\
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
O4 - HKLM\..\Run: [Smart Start UP] C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe /Automation
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LosAlamos] rundll32.exe C:\Windows\system32\sshnas.dll,AddAtomAW
O4 - HKCU\..\Run: [J8RPLTROBQ] C:\Users\jo\AppData\Local\Temp\c.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - Global Startup: Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

---\\
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

---\\
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll

---\\
O15 - Trusted Zone: [HKCU\...\Domains] mappy.com
O15 - Trusted Zone: [HKCU\...\Domains] orange.fr

---\\
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/interim/ractrl.cab?lmi=100

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Service de démarrage SQL Server pour le Gestionnaire de contacts professionnels (BcmSqlStartupSvc) - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
O23 - Service: eDSService.exe (eDataSecurity Service) - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service (eNet Service) - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService (MobilityService) - C:\Acer\Mobility Center\MobilityService.exe -p
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SeaPort (SeaPort) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: SQL Server Browser (SQLBrowser) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
O23 - Service: Enregistreur VSS SQL Server (SQLWriter) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
O23 - Service: ePower Service (WMIService) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding
O23 - Service: XAudioService (XAudioService) - C:\Windows\system32\DRIVERS\xaudio.exe
O23 - Service: {95808DC4-FA4A-4c74-92FE-5B863F82066B} ({95808DC4-FA4A-4c74-92FE-5B863F82066B}) - C:\WindowsC:\Program Files\CyberLink\PowerDVD\000.fcl

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: Dfs Client Driver (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50003 (Tcpip) - C:\WINDOWS\System32\drivers\tcpip.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\
O42 - Logiciel: Acer Crystal Eye webcam
O42 - Logiciel: Acer Empowering Technology
O42 - Logiciel: Acer GridVista
O42 - Logiciel: Acer Mobility Center Plug-In
O42 - Logiciel: Acer ScreenSaver
O42 - Logiciel: Acer Tour
O42 - Logiciel: Acer eDataSecurity Management
O42 - Logiciel: Acer eLock Management
O42 - Logiciel: Acer eNet Management
O42 - Logiciel: Acer ePower Management
O42 - Logiciel: Acer ePresentation Management
O42 - Logiciel: Acer eSettings Management
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
O42 - Logiciel: Adobe Reader 8.1.2
O42 - Logiciel: Adobe Reader 8.1.2 Security Update 1 (KB403742)
O42 - Logiciel: Apple Application Support
O42 - Logiciel: Apple Mobile Device Support
O42 - Logiciel: Apple Software Update
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: Bonjour
O42 - Logiciel: Catalyst Control Center - Branding
O42 - Logiciel: Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)
O42 - Logiciel: GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)
O42 - Logiciel: Galerie de photos Windows Live
O42 - Logiciel: Gestionnaire de contacts professionnels pour Outlook 2007 SP2
O42 - Logiciel: Google Earth
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: Installation Windows Live
O42 - Logiciel: Java(TM) 6 Update 4
O42 - Logiciel: Java(TM) 6 Update 5
O42 - Logiciel: Junk Mail filter update
O42 - Logiciel: Launch Manager
O42 - Logiciel: LimeWire 4.18.8
O42 - Logiciel: Logiciel d'archivage WinRAR
O42 - Logiciel: Logitech Desktop Messenger
O42 - Logiciel: Logitech SetPoint
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
O42 - Logiciel: MSXML 4.0 SP2 (KB941833)
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: MUSICMATCH Jukebox
O42 - Logiciel: Macromedia Flash Player 8
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Choice Guard
O42 - Logiciel: Microsoft Office 2003 Web Components
O42 - Logiciel: Microsoft Office 2007 Primary Interop Assemblies
O42 - Logiciel: Microsoft Office Small Business Connectivity Components
O42 - Logiciel: Microsoft SQL Server 2005
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
O42 - Logiciel: Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
O42 - Logiciel: Microsoft SQL Server Native Client
O42 - Logiciel: Microsoft SQL Server VSS Writer
O42 - Logiciel: Microsoft Search Enhancement Pack
O42 - Logiciel: Microsoft Silverlight
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86)
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86)
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: NTI Backup NOW! 4.7
O42 - Logiciel: NTI CD & DVD-Maker
O42 - Logiciel: NTI Shadow
O42 - Logiciel: O2Micro Flash Memory Card Reader Driver Installer(x86)
O42 - Logiciel: OpenOffice.org 2.4
O42 - Logiciel: Orange - Logiciels Internet
O42 - Logiciel: Outil de téléchargement Windows Live
O42 - Logiciel: PowerDVD
O42 - Logiciel: Presto! Mr. Photo 4
O42 - Logiciel: QuickTime
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Security Update for CAPICOM (KB931906)
O42 - Logiciel: Smart Start UP
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
O42 - Logiciel: VLC media player 0.9.2
O42 - Logiciel: Windows Live Call
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live Contrôle parental
O42 - Logiciel: Windows Live FolderShare
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live Movie Maker
O42 - Logiciel: Windows Live Toolbar
O42 - Logiciel: Windows Live Writer
O42 - Logiciel: Yahoo! Toolbar avec bloqueur de fenêtres pop-up
O42 - Logiciel: avast! Antivirus
O42 - Logiciel: eMule
O42 - Logiciel: iTunes

---\\
O44 - LFC:Last File Created 27/12/2009 - 09:39:45 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 27/12/2009 - 08:17:06 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 27/12/2009 - 08:10:55 ---A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 25/12/2009 - 19:22:35 ---A- C:\Windows\msa.exe
O44 - LFC:Last File Created 25/12/2009 - 19:22:09 ---A- C:\Windows\System32\sshnas.dll
O44 - LFC:Last File Created 24/12/2009 - 18:17:12 ---A- C:\Windows\setupact.log
O44 - LFC:Last File Created 07/12/2009 - 19:17:37 ---A- C:\Windows\MEMORY.DMP
O44 - LFC:Last File Created 02/12/2009 - 17:10:41 ---A- C:\Windows\PFRO.log
O44 - LFC:Last File Created 02/12/2009 - 16:17:56 ---A- C:\Windows\ie8_main.log
O44 - LFC:Last File Created 02/12/2009 - 16:13:01 ---A- C:\Windows\System32\config.nt
O44 - LFC:Last File Created 01/12/2009 - 21:06:19 ---A- C:\Windows\System32\mrt.exe
O44 - LFC:Last File Created 27/11/2009 - 18:25:39 ---A- C:\Windows\msxml4-KB973688-fra.LOG

---\\
O63 - Logiciel: HijackThis 2.0.2


End of the scan: 346 lines


----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 11:41:02 ~~
0