Rapport hijackthis

Résolu
Bonjour,
est ce que une personne aurais la sympathie de me dire si je suis infecté car j'ai un ami qui est allé sur des sites pas très catholiques comme on dit et je pense avoir attrapé une merde si joint mon rapport hijackthis.
Merci par avance

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:12, on 16/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Acer\Empowering Technology\admServ.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Maxtor\Sync\SyncServices.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\DOCUME~1\GREGOR~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Yahoo! France
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\GREGOR~1\LOCALS~1\Temp\services.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: stringsenfolie toolbar - {65e403b8-5ac4-41dc-aa6d-70ffec792a92} - C:\Program Files\stringsenfolie\tbstri.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: stringsenfolie toolbar - {65e403b8-5ac4-41dc-aa6d-70ffec792a92} - C:\Program Files\stringsenfolie\tbstri.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://fr.yahoo.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader5.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files\Maxtor\Sync\SyncServices.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

--
End of file - 13641 bytes
Configuration: windows xp 
Safari 525.13

8 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur sécurité
    slt
    oui tu es infécté!

    je pense que cette barre tu peux l'enlever via ton panneau de configuration :)

    stringsenfolie toolbar

    _______________

    Télécharge MSNFix de Laurent
    http://sosvirus.changelog.fr/MSNFix.zip

    Décompresse-le et double clic sur le fichier MSNFix.bat.
    - Exécute l'option R.
    --Si l'infection est détectée, exécute l'option N
    - Sauvegarde ce rapport puis fais un copier/coller de ce rapport sur le forum.

    Note :
    Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal
    Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.

    envoyer le fichier [b] C:\DOCUME~1\florian\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr pour faire evoluer msnfix

    __________________

    scan avec
    MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    ___________________

    ensuite colle un rapport hijakchtis et dis tes soucis
    1. Bonjour, je te remercie pour ton aide mais c'est bon j'ai nettoyé ma machine avec smitfraudfix ensuite j'ai lancé une analyse antivirus et je n'ai rien je te remercie du coup de main.
      bien a toi
  2. Contributeur sécurité
    recolle un hijackhtis pour verifier et un rapport msnfix
    1. salut l'ami te voila ce ke tu m'a demandé

      SmitFraudFix v2.314

      Rapport fait à 8:35:56,31, 17/04/2008
      Executé à partir de C:\Documents and Settings\gregory touzeau\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\ZONELABS\vsmon.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Acer\Empowering Technology\admServ.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\Program Files\Maxtor\Sync\SyncServices.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Acer\Acer Arcade\PCMService.exe
      C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
      C:\PROGRA~1\LAUNCH~1\LManager.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wbem\unsecapp.exe
      C:\WINDOWS\system32\igfxext.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
      C:\DOCUME~1\GREGOR~1\LOCALS~1\Temp\RtkBtMnt.exe
      C:\WINDOWS\system32\igfxsrvc.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Safari\Safari.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\gregory touzeau

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\gregory touzeau\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\GREGOR~1\Favoris

      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,C:\\DOCUME~1\\GREGOR~1\\LOCALS~1\\Temp\\services.exe"
      "System"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Rustock

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Carte réseau Broadcom 802.11g - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 192.168.1.1
      DNS Server Search Order: 192.168.1.1

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{EE7667DD-FBE6-4F85-82A5-9BD0E0C2F9EF}: DhcpNameServer=192.168.1.1 192.168.1.1
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{EE7667DD-FBE6-4F85-82A5-9BD0E0C2F9EF}: DhcpNameServer=192.168.1.1 192.168.1.1
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{EE7667DD-FBE6-4F85-82A5-9BD0E0C2F9EF}: DhcpNameServer=192.168.1.1 192.168.1.1
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1

      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 08:49:29, on 17/04/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16640)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\ZONELABS\vsmon.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Acer\Empowering Technology\admServ.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\Program Files\Maxtor\Sync\SyncServices.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Acer\Acer Arcade\PCMService.exe
      C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
      C:\PROGRA~1\LAUNCH~1\LManager.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wbem\unsecapp.exe
      C:\WINDOWS\system32\igfxext.exe
      C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
      C:\DOCUME~1\GREGOR~1\LOCALS~1\Temp\RtkBtMnt.exe
      C:\WINDOWS\system32\igfxsrvc.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Safari\Safari.exe
      C:\WINDOWS\explorer.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Yahoo! France
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\GREGOR~1\LOCALS~1\Temp\services.exe
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
      O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SWEETIE Class - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
      O2 - BHO: stringsenfolie toolbar - {65e403b8-5ac4-41dc-aa6d-70ffec792a92} - C:\Program Files\stringsenfolie\tbstri.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
      O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: stringsenfolie toolbar - {65e403b8-5ac4-41dc-aa6d-70ffec792a92} - C:\Program Files\stringsenfolie\tbstri.dll
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
      O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"
      O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
      O4 - HKLM\..\Run: [LaunchApp] Alaunch
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
      O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
      O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
      O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
      O4 - HKLM\..\Run: [ItsTV] "C:\Program Files\ItsLabel\ItsTV.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
      O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: BTTray.lnk = ?
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
      O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://fr.yahoo.com/
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader5.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
      O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
      O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files\Maxtor\Sync\SyncServices.exe
      O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
      1. Contributeur sécurité
        non tu es infécté

        j'ai demandé un rapport msn fix et non smitfraudfix!

        _________

        vire toujours via ton panneau de configuration
        stringsenfolie toolbar
        1. bonjour, te voila le rapport msn fix

          MSNFix 1.677

          D:\Mes documents\MSNFix
          Fix exécuté le 17/04/2008 - 12:49:53,81
          mode normal

          ************************ Recherche les fichiers présents

          ... C:\WINDOWS\system32\tmp.txt

          ************************ Recherche les dossiers présents

          Aucun dossier trouvé

          ************************ Suppression des fichiers

          .. OK ... C:\WINDOWS\system32\tmp.txt

          ************************ Nettoyage du registre

          ************************ Fichiers suspects

          Aucun Fichier trouvé

          Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 17042008_12531476.zip

          et pour la toolbar de string en folies elle n'est plus dans le panneau de configuration.
        2. re bonjour,
          j'ai réussi a trouver la toolbar de strings en folie et je l'ai supprimé.
      2. Contributeur sécurité
        ok parfait

        fais ceci par precaution

        scan avec
        MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

        https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
        ___________________

        ensuite colle un rapport hijakchtis et dis tes soucis
        1. Bonjour,
          malware ne va pas jusqu'au bout il plante kand il arrive a environ 17000 fichier g fé une analyse de spybot et je n'ai aucun mouchard donc j'en deduits ke je n'ai pas de spyware ni quoi que ce soit !!

          Voilà en tout cas si la discussion est close je te remercie pour ton aide !!
        2. bonjour, voila le rapport de spybot search & destroy

          --- Search result list ---
          Félicitations!: Aucun mouchard n'a été trouvé. ()

          --- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

          2007-08-31 blindman.exe (1.0.0.6)
          2007-08-31 SDMain.exe (1.0.0.4)
          2007-08-31 SDUpdate.exe (1.0.6.4)
          2007-08-31 SDWinSec.exe (1.0.0.8)
          2007-08-31 SpybotSD.exe (1.5.1.15)
          2007-08-31 TeaTimer.exe (1.5.0.9)
          2008-03-16 unins000.exe (51.46.0.0)
          2007-08-31 Update.exe (1.4.0.5)
          2007-08-31 advcheck.dll (1.5.3.0)
          2007-04-02 aports.dll (2.1.0.0)
          2007-04-02 DelZip179.dll (1.79.5.3)
          2007-08-31 SDHelper.dll (1.5.0.8)
          2007-08-31 Tools.dll (2.1.2.0)
          2008-03-12 Includes\Cookies.sbi (*)
          2007-12-26 Includes\Dialer.sbi (*)
          2008-03-12 Includes\DialerC.sbi (*)
          2008-03-12 Includes\HeavyDuty.sbi (*)
          2008-03-05 Includes\Hijackers.sbi (*)
          2008-03-12 Includes\HijackersC.sbi (*)
          2008-02-27 Includes\Keyloggers.sbi (*)
          2008-03-12 Includes\KeyloggersC.sbi (*)
          2004-11-29 Includes\LSP.sbi (*)
          2008-03-12 Includes\Malware.sbi (*)
          2008-03-12 Includes\MalwareC.sbi (*)
          2008-02-20 Includes\PUPS.sbi (*)
          2008-03-12 Includes\PUPSC.sbi (*)
          2008-03-12 Includes\Revision.sbi (*)
          2008-01-09 Includes\Security.sbi (*)
          2008-03-12 Includes\SecurityC.sbi (*)
          2008-02-20 Includes\Spybots.sbi (*)
          2008-03-12 Includes\SpybotsC.sbi (*)
          2007-11-06 Includes\Tracks.uti
          2008-02-27 Includes\Trojans.sbi (*)
          2008-03-12 Includes\TrojansC.sbi (*)
          2008-12-24 Plugins\TCPIPAddress.dll
          --- System information ---
          Windows XP (Build: 2600) Service Pack 2 (5.1.2600)
          / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB928366)
          / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
          / MSXML4SP2: FIX: ASP stops responding when calling Response.Redirect to another server using msxml4 sp2
          / MSXML4SP2: FIX: ASP stops responding when calling Response.Redirect to another server using msxml4 sp2
          / MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
          / Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
          / Windows / SP1: Microsoft National Language Support Downlevel APIs
          / Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
          / Windows Media Player 11: Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
          / Windows Media Player 11: Correctif pour Lecteur Windows Media 11 (KB939683)
          / Windows Media Player 6.4: Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
          / Windows Media Player 9: Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)
          / Windows XP: Mise à jour de sécurité pour Windows XP (KB923689)
          / Windows XP: Mise à jour de sécurité pour Windows XP (KB941569)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
          / Windows XP / SP0: Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)
          / Windows XP / SP0: Correctif pour Windows Internet Explorer 7 (KB947864)
          / Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
          / Windows XP / SP3: Correctif Windows XP - KB873339
          / Windows XP / SP3: Correctif Windows XP - KB885835
          / Windows XP / SP3: Correctif Windows XP - KB885836
          / Windows XP / SP3: Correctif Windows XP - KB885855
          / Windows XP / SP3: Correctif Windows XP - KB886185
          / Windows XP / SP3: Correctif Windows XP - KB887472
          / Windows XP / SP3: Correctif Windows XP - KB888302
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046)
          / Windows XP / SP3: Correctif Windows XP - KB890859
          / Windows XP / SP3: Correctif Windows XP - KB891781
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756)
          / Windows XP / SP3: Windows Installer 3.1 (KB893803)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB894391)
          / Windows XP / SP3: Correctif pour Windows XP (KB896256)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB898461)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB900485)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901190)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB903235)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB904942)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB908531)
          / Windows XP / SP3: Correctif pour Windows XP (KB909667)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB910437)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB911280)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB912945)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913580)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914388)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB914389)
          / Windows XP / SP3: Hotfix for Windows XP (KB915865)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB916595)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917344)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917422)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB917953)
          / Windows XP / SP3: Correctif pour Windows XP (KB918005)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918118)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB918439)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB919007)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920213)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920670)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920683)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB920685)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB920872)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921398)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB921503)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB922582)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922616)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB922819)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923191)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923414)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923694)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB923980)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924191)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924270)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924496)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB924667)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB925454)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB925902)
          / Windows XP / SP3: Hotfix for Windows XP (KB926239)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB926255)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB926436)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB927779)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB927802)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB927891)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB928255)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB928843)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB929123)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB929338)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB929969)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB930178)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB930916)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB931261)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB931784)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB931836)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB932168)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB933360)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB933729)
          / Windows XP / SP3: Correctif pour Windows XP (KB935448)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB935839)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB935840)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB936021)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB936357)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB938828)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB938829)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB941202)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB941568)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB941644)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB941693)
          / Windows XP / SP3: Mise à jour pour Windows XP (KB942763)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB943055)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB943460)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB943485)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB944653)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB945553)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB946026)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB948590)
          / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB948881)

          --- Startup entries list ---
          Located: HK_LM:Run, ePower_DMC
          command: C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
          file: C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
          size: 352256
          MD5: 0B947E1828A83D19E7E32997F982AA2A

          Located: HK_LM:Run, QuickTime Task
          command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
          file: C:\Program Files\QuickTime\qttask.exe
          size: 385024
          MD5: BAFCF6CF19CE4882039C52DFA17BE35F

          Located: HK_LM:Run, TkBellExe
          command: "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          file: C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          size: 185896
          MD5: 89D583FC41D48328128A974C25AFAEB7

          Located: HK_CU:Run, CTFMON.EXE
          where: .DEFAULT...
          command: C:\WINDOWS\system32\CTFMON.EXE
          file: C:\WINDOWS\system32\CTFMON.EXE
          size: 15360
          MD5: 5584247B568C2E53934873F4B655FE6A

          Located: HK_CU:Run, msnmsgr
          where: .DEFAULT...
          command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          size: 5724184
          MD5: 97384875B6D03831B2D1820AB8952F67

          Located: HK_CU:Run, CTFMON.EXE
          where: S-1-5-19...
          command: C:\WINDOWS\system32\CTFMON.EXE
          file: C:\WINDOWS\system32\CTFMON.EXE
          size: 15360
          MD5: 5584247B568C2E53934873F4B655FE6A

          Located: HK_CU:Run, CTFMON.EXE
          where: S-1-5-20...
          command: C:\WINDOWS\system32\CTFMON.EXE
          file: C:\WINDOWS\system32\CTFMON.EXE
          size: 15360
          MD5: 5584247B568C2E53934873F4B655FE6A

          Located: HK_CU:Run, BitTorrent
          where: S-1-5-21-4239196039-1937083190-1293138412-1006...
          command: "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
          file: C:\Program Files\BitTorrent\bittorrent.exe
          size: 43008
          MD5: 94E11DF6D94E3C72ECE3185B40F0BB8C

          Located: HK_CU:Run, ctfmon.exe
          where: S-1-5-21-4239196039-1937083190-1293138412-1006...
          command: C:\WINDOWS\system32\ctfmon.exe
          file: C:\WINDOWS\system32\ctfmon.exe
          size: 15360
          MD5: 5584247B568C2E53934873F4B655FE6A

          Located: HK_CU:Run, MsnMsgr
          where: S-1-5-21-4239196039-1937083190-1293138412-1006...
          command: "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          file: C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
          size: 5724184
          MD5: 97384875B6D03831B2D1820AB8952F67

          Located: HK_CU:Run, Veoh
          where: S-1-5-21-4239196039-1937083190-1293138412-1006...
          command: "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
          file: C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
          size: 3587120
          MD5: 48A00DB6BD3CDAE9ECB8827AC53E5BF8

          Located: HK_CU:Run, CTFMON.EXE
          where: S-1-5-18...
          command: C:\WINDOWS\system32\CTFMON.EXE
          file: C:\WINDOWS\system32\CTFMON.EXE
          size: 15360
          MD5: 5584247B568C2E53934873F4B655FE6A

          Located: HK_CU:Run, msnmsgr
          where: S-1-5-18...
          command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          size: 5724184
          MD5: 97384875B6D03831B2D1820AB8952F67

          Located: Démarrage (tous utilisateurs), BTTray.lnk
          where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
          command: C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
          file: C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
          size: 565309
          MD5: 878C9EADC93543A3203F585F9037DBAB

          Located: WinLogon, crypt32chain
          command: crypt32.dll
          file: crypt32.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, cryptnet
          command: cryptnet.dll
          file: cryptnet.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, cscdll
          command: cscdll.dll
          file: cscdll.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, igfxcui
          command: igfxdev.dll
          file: igfxdev.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, ScCertProp
          command: wlnotify.dll
          file: wlnotify.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, Schedule
          command: wlnotify.dll
          file: wlnotify.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, sclgntfy
          command: sclgntfy.dll
          file: sclgntfy.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, SensLogn
          command: WlNotify.dll
          file: WlNotify.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, termsrv
          command: wlnotify.dll
          file: wlnotify.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, WgaLogon
          command: WgaLogon.dll
          file: WgaLogon.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          Located: WinLogon, wlballoon
          command: wlnotify.dll
          file: wlnotify.dll
          size: 0
          MD5: D41D8CD98F00B204E9800998ECF8427E
          Warning: if the file is actually larger than 0 bytes,
          the checksum could not be properly calculated!

          --- Browser helper object list ---
          {0347C33E-8762-4905-BF09-768834316C61} (HP Print Enhancer)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: HP Print Enhancer
          Path: C:\Program Files\HP\Smart Web Printing\
          Long name: hpswp_printenhancer.dll
          Short name: HPSWP_~1.DLL
          Date (created): 02/03/2007 16:52:24
          Date (last access): 17/04/2008 17:04:48
          Date (last write): 02/03/2007 16:52:24
          Filesize: 1298024
          Attributes: readonly archive
          MD5: 1062E80907867BFC14EB844241391331
          CRC32: 4B194A34
          Version: 2.15.7.0

          {053F9267-DC04-4294-A72C-58F732D338C0} (HP Print Clips)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: HP Print Clips
          Path: C:\Program Files\HP\Smart Web Printing\
          Long name: hpswp_framework.dll
          Short name: HPSWP_~4.DLL
          Date (created): 02/03/2007 16:52:08
          Date (last access): 19/04/2008 10:41:20
          Date (last write): 02/03/2007 16:52:08
          Filesize: 177768
          Attributes: readonly archive
          MD5: A40456DE4EF7E318104955361C72AC9D
          CRC32: 6F06AAE2
          Version: 2.15.7.0

          {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} (SWEETIE Class)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: SWEETIE Class

          {3049C3E9-B461-4BC5-8870-4C09146192CA} (RealPlayer Download and Record Plugin for Internet Explorer)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: RealPlayer Download and Record Plugin for Internet Explorer
          Path: C:\Program Files\Real\RealPlayer\
          Long name: rpbrowserrecordplugin.dll
          Short name: RPBROW~1.DLL
          Date (created): 17/04/2008 14:10:26
          Date (last access): 19/04/2008 10:43:26
          Date (last write): 17/04/2008 14:10:26
          Filesize: 308856
          Attributes: archive
          MD5: 33440A3EF90AF7ED74EE55CA634A9CFA
          CRC32: B00E58A9
          Version: 1.0.1.57

          {64F56FC1-1272-44CD-BA6E-39723696E350} (EoRezoBHO)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: EoRezoBHO
          CLSID name: EoBho Class

          {65e403b8-5ac4-41dc-aa6d-70ffec792a92} ()
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name:

          {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: SSVHelper Class
          Path: C:\Program Files\Java\jre1.6.0_03\bin\
          Long name: ssv.dll
          Short name:
          Date (created): 27/11/2007 09:58:06
          Date (last access): 17/04/2008 18:04:40
          Date (last write): 25/09/2007 01:11:34
          Filesize: 501136
          Attributes: archive
          MD5: D787E3123FAD2BD58AB45B9A5C360ACD
          CRC32: DDC625C2
          Version: 6.0.30.5

          {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
          Path: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\
          Long name: WindowsLiveLogin.dll
          Short name: WINDOW~1.DLL
          Date (created): 20/09/2007 10:30:18
          Date (last access): 19/04/2008 10:43:28
          Date (last write): 20/09/2007 10:30:18
          Filesize: 328752
          Attributes: archive
          MD5: 59CF5BF6684AFCF906CADAD39B4214DE
          CRC32: C363813C
          Version: 4.200.520.1

          {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: Google Toolbar Helper
          description: Google toolbar
          classification: Open for discussion
          known filename: googletoolbar.dll<br>googletoolbar*.dll<br>(* = number)<br>googletoolbar_en_*.**-big.dll<br>Googletoolbar_en_*.*.**-deleon.dll
          info link: http://www.google.com/intl/fr/toolbar/ie/index.html
          info source: TonyKlein
          Path: c:\program files\google\
          Long name: GoogleToolbar3.dll
          Short name: GOOGLE~1.DLL
          Date (created): 05/02/2007 21:16:42
          Date (last access): 18/04/2008 15:03:18
          Date (last write): 19/01/2007 23:56:04
          Filesize: 2436160
          Attributes: readonly archive
          MD5: 6D44E0C3B43D27484FBB355E470C4188
          CRC32: 2DE875CD
          Version: 4.0.1601.4978

          {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: Google Toolbar Notifier BHO
          Path: C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\
          Long name: swg.dll
          Short name:
          Date (created): 19/03/2008 20:31:44
          Date (last access): 18/04/2008 15:03:12
          Date (last write): 19/03/2008 20:31:44
          Filesize: 654320
          Attributes: archive
          MD5: 72D6804DC43CC0CF4F10E699D7738138
          CRC32: ABF4BA3E
          Version: 2.1.1119.1736

          {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} (EpsonToolBandKicker Class)
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name:
          CLSID name: EpsonToolBandKicker Class
          Path: C:\Program Files\EPSON\EPSON Web-To-Page\
          Long name: EPSON Web-To-Page.dll
          Short name: EPSONW~1.DLL
          Date (created): 31/01/2007 10:34:18
          Date (last access): 19/04/2008 10:43:28
          Date (last write): 10/02/2004 14:08:58
          Filesize: 339968
          Attributes: archive
          MD5: 230F34EB9C919978C23E6939120DB35C
          CRC32: D4C5D89F
          Version: 1.0.0.0

          --- ActiveX list ---
          {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class)
          DPF name:
          CLSID name: Checkers Class
          Installer:
          Codebase: http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: msgrchkr.dll
          Short name:
          Date (created): 29/05/2003 15:00:18
          Date (last access): 19/04/2008 10:23:14
          Date (last write): 29/05/2003 15:00:18
          Filesize: 77408
          Attributes: archive
          MD5: 42D567DF86B9B7AC4A89664C9651B68B
          CRC32: 47FF3D19
          Version: 7.1.9502.1

          {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control)
          DPF name:
          CLSID name: Shockwave ActiveX Control
          Installer: C:\WINDOWS\Downloaded Program Files\swdir.inf
          Codebase: http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
          description: Macromedia ShockWave Flash Player 7
          classification: Unknown
          known filename: SWDIR.DLL
          info link:
          info source: Patrick M. Kolla
          Path: C:\WINDOWS\system32\Adobe\Director\
          Long name: swdir.dll
          Short name:
          Date (created): 26/03/2008 13:25:32
          Date (last access): 17/04/2008 08:39:44
          Date (last write): 19/03/2008 19:36:22
          Filesize: 202168
          Attributes: archive
          MD5: 284259B6EB9901B8978B78AFC5514627
          CRC32: 6C37B749
          Version: 11.0.0.429

          {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class)
          DPF name:
          CLSID name: Checkers Class
          Installer:
          Codebase: http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
          Path: C:\WINDOWS\Downloaded Program Files\CONFLICT.1\
          Long name: msgrchkr.dll
          Short name:
          Date (created): 28/02/2007 14:21:04
          Date (last access): 17/04/2008 08:39:40
          Date (last write): 28/02/2007 14:21:04
          Filesize: 131472
          Attributes: archive
          MD5: 1E5CFDF9AEBDD84305A4C8154277A269
          CRC32: 73C871D0
          Version: 9.5.7087.1

          {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class)
          DPF name:
          CLSID name: Solitaire Showdown Class
          Installer:
          Codebase: http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: SolitaireShowdown.dll
          Short name: SOLITA~1.DLL
          Date (created): 28/02/2007 14:21:04
          Date (last access): 19/04/2008 10:23:14
          Date (last write): 28/02/2007 14:21:04
          Filesize: 142248
          Attributes: archive
          MD5: 93F7304161C8CB7C335F99D9232BD347
          CRC32: 91D38231
          Version: 9.5.6986.1

          {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class)
          DPF name:
          CLSID name: UnoCtrl Class
          Installer: C:\WINDOWS\Downloaded Program Files\GAME_UNO1.INF
          Codebase: http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: GAME_UNO1.dll
          Short name: GAME_U~1.DLL
          Date (created): 22/11/2006 23:22:42
          Date (last access): 19/04/2008 10:23:14
          Date (last write): 22/11/2006 23:22:42
          Filesize: 372736
          Attributes: archive
          MD5: 491C8F47C0DCFBC1B1329B9B368AA78F
          CRC32: 5BFD37C9
          Version: 1.0.1123.1

          {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
          CLSID name: Java Plug-in 1.6.0_03
          Installer:
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
          description: Sun Java
          classification: Legitimate
          known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
          info link:
          info source: Patrick M. Kolla
          Path: C:\Program Files\Java\jre1.6.0_03\bin\
          Long name: npjpi160_03.dll
          Short name: NPJPI1~1.DLL
          Date (created): 24/09/2007 23:31:44
          Date (last access): 17/04/2008 18:04:38
          Date (last write): 25/09/2007 01:11:34
          Filesize: 132496
          Attributes: archive
          MD5: D6A4682A6FF41832A3F1A7AB9AE08199
          CRC32: 9080B537
          Version: 6.0.30.5

          {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class)
          DPF name:
          CLSID name: MessengerStatsClient Class
          Installer:
          Codebase: http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: messengerstatsclient.dll
          Short name: MESSEN~1.DLL
          Date (created): 29/05/2003 15:00:20
          Date (last access): 19/04/2008 10:23:14
          Date (last write): 29/05/2003 15:00:20
          Filesize: 160864
          Attributes: archive
          MD5: B069B555A00AA026F657AA4FD13AE154
          CRC32: 89BB01E1
          Version: 7.1.9502.1

          {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ()
          DPF name:
          CLSID name:
          Installer: C:\WINDOWS\Downloaded Program Files\erma.inf
          Codebase: http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

          {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer)
          DPF name:
          CLSID name: MSN Games - Installer
          Installer:
          Codebase: http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: ZIntro.ocx
          Short name:
          Date (created): 19/02/2007 11:26:28
          Date (last access): 17/04/2008 08:39:38
          Date (last write): 19/02/2007 11:26:28
          Filesize: 159128
          Attributes: archive
          MD5: E681AC948003CCA59C6C00D3F5EC3D4B
          CRC32: C8723760
          Version: 9.5.6649.1

          {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control)
          DPF name:
          CLSID name: Image Uploader Control
          Installer: C:\WINDOWS\Downloaded Program Files\ImageUploader5.inf
          Codebase: http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader5.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: ImageUploader5.ocx
          Short name: IMAGEU~1.OCX
          Date (created): 30/12/2007 12:02:56
          Date (last access): 17/04/2008 08:39:38
          Date (last write): 30/12/2007 12:02:56
          Filesize: 3008016
          Attributes: archive
          MD5: 422117D1277C55AC445C7E2D4F463920
          CRC32: 3505FCE7
          Version: 5.0.15.0

          {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class)
          DPF name:
          CLSID name: MessengerStatsClient Class
          Installer:
          Codebase: http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          Path: C:\WINDOWS\Downloaded Program Files\
          Long name: MessengerStatsPAClient.dll
          Short name: MESSEN~2.DLL
          Date (created): 22/02/2007 23:41:12
          Date (last access): 19/04/2008 10:23:14
          Date (last write): 22/02/2007 23:41:12
          Filesize: 304544
          Attributes: archive
          MD5: 8945CCA5FC4F25168E8B6F401EFAF51F
          CRC32: 0F12FD23
          Version: 9.5.6907.1

          {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0)
          DPF name: Java Runtime Environment 1.5.0
          CLSID name: Java Plug-in 1.5.0_11
          Installer:
          Codebase: http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
          Path: C:\Program Files\Java\jre1.5.0_11\bin\
          Long name: NPJPI150_11.dll
          Short name: NPJPI1~1.DLL
          Date (created): 15/12/2006 03:09:16
          Date (last access): 17/04/2008 18:04:32
          Date (last write): 15/12/2006 03:23:26
          Filesize: 75528
          Attributes: archive
          MD5: 3B3F6984DBF972DAFF1B7E9C44E2FE75
          CRC32: 4BDE2041
          Version: 5.0.110.3

          {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
          CLSID name: Java Plug-in 1.6.0_03
          Installer:
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
          Path: C:\Program Files\Java\jre1.6.0_03\bin\
          Long name: npjpi160_03.dll
          Short name: NPJPI1~1.DLL
          Date (created): 24/09/2007 23:31:44
          Date (last access): 19/04/2008 11:26:42
          Date (last write): 25/09/2007 01:11:34
          Filesize: 132496
          Attributes: archive
          MD5: D6A4682A6FF41832A3F1A7AB9AE08199
          CRC32: 9080B537
          Version: 6.0.30.5

          {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
          CLSID name: Java Plug-in 1.6.0_03
          Installer:
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
          Path: C:\Program Files\Java\jre1.6.0_03\bin\
          Long name: npjpi160_03.dll
          Short name: NPJPI1~1.DLL
          Date (created): 24/09/2007 23:31:44
          Date (last access): 19/04/2008 11:26:42
          Date (last write): 25/09/2007 01:11:34
          Filesize: 132496
          Attributes: archive
          MD5: D6A4682A6FF41832A3F1A7AB9AE08199
          CRC32: 9080B537
          Version: 6.0.30.5

          {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
          DPF name:
          CLSID name: Shockwave Flash Object
          Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
          Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          description: Macromedia Shockwave Flash Player
          classification: Legitimate
          known filename:
          info link:
          info source: Patrick M. Kolla
          Path: C:\WINDOWS\system32\Macromed\Flash\
          Long name: Flash9e.ocx
          Short name:
          Date (created): 21/11/2007 01:04:14
          Date (last access): 19/04/2008 08:09:24
          Date (last write): 21/11/2007 01:04:14
          Filesize: 2987392
          Attributes: readonly archive
          MD5: D3C50535C26190FEAD7785A03499C0AC
          CRC32: A77C3E92
          Version: 9.0.115.0

          --- Process list ---
          PID: 0 ( 0) [System]
          PID: 756 ( 0) \SystemRoot\System32\smss.exe
          size: 50688
          PID: 804 ( 0) \??\C:\WINDOWS\system32\csrss.exe
          size: 6144
          PID: 828 ( 0) \??\C:\WINDOWS\system32\winlogon.exe
          size: 506368
          PID: 872 ( 0) C:\WINDOWS\system32\services.exe
          size: 108544
          MD5: 732E0B1ABAACE15D80EC19056B0A2AF9
          PID: 884 ( 0) C:\WINDOWS\system32\lsass.exe
          size: 13312
          MD5: 9F3744A5C6F49291A7A685040A013399
          PID: 1036 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1144 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1184 ( 0) C:\WINDOWS\System32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1280 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1500 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1512 ( 0) C:\WINDOWS\Explorer.EXE
          size: 1037312
          MD5: D0288319660EDCFED07C7E74C4EA38A5
          PID: 1548 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1816 ( 0) C:\WINDOWS\system32\ZONELABS\vsmon.exe
          size: 75304
          MD5: 4BB7862806BEA6BF50D618C5D593ED54
          PID: 456 ( 0) C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          size: 17272
          MD5: 3CA72CEA90DF8DA569D35CEC89676749
          PID: 508 ( 0) C:\Program Files\Alwil Software\Avast4\ashServ.exe
          size: 144760
          MD5: 6A0A14F60654DF588F55160CB1B6DA8D
          PID: 928 ( 0) C:\WINDOWS\system32\spoolsv.exe
          size: 57856
          MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
          PID: 1976 ( 0) C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          size: 110592
          MD5: 1961CB10BB48EB4D97E37DB6373E9E63
          PID: 1988 ( 0) C:\Acer\Empowering Technology\admServ.exe
          size: 1314816
          MD5: E1EC228D87915050BDF59F6331AD7247
          PID: 124 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 180 ( 0) C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
          size: 163840
          MD5: EA3CBF6EC25BEE3304557CEE21C8819C
          PID: 168 ( 0) C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
          size: 254050
          MD5: D5C2B2085086C2B594502E23913D1CB8
          PID: 208 ( 0) C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
          size: 61440
          MD5: 5B417ED5B49D5A65355A81A2A5FBC1E0
          PID: 224 ( 0) C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
          size: 1077376
          MD5: 0F9ABC13B1254729AC71E910BD75000F
          PID: 256 ( 0) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          size: 138680
          MD5: D213C2B1CE0FAEAB59EC0C55B4493F94
          PID: 344 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 552 ( 0) C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
          size: 49152
          MD5: 86E8BCAA91FC2ACFACD99CF2BF9F1F47
          PID: 736 ( 0) C:\Program Files\Maxtor\Sync\SyncServices.exe
          size: 156976
          MD5: 3E6C47A46BDDE1B6B084012B5B69C069
          PID: 1324 ( 0) C:\WINDOWS\System32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1352 ( 0) C:\WINDOWS\System32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 1296 ( 0) C:\Program Files\CyberLink\Shared Files\RichVideo.exe
          size: 143360
          MD5: A76CDDB6D1F25797843E2557A2118E2E
          PID: 1372 ( 0) C:\WINDOWS\system32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 2084 ( 0) C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
          size: 114784
          MD5: 2303219FA3D03DF12636DBB7AD8B6801
          PID: 2412 ( 0) C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          size: 247160
          MD5: 7FBDDB77353D3EB6ABF70F8122292CEC
          PID: 2444 ( 0) C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          size: 345464
          MD5: A697E8A40037783358CD5A2CB5F532E0
          PID: 2452 ( 0) C:\WINDOWS\system32\wbem\wmiprvse.exe
          size: 218112
          MD5: DB493DD6BC2FA5B38811F2BCDCF03D2B
          PID: 2660 ( 0) C:\WINDOWS\System32\alg.exe
          size: 44544
          MD5: 2FE681D10C5FC343DBBC0610B8DD4D24
          PID: 3452 ( 0) C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          size: 185896
          MD5: 89D583FC41D48328128A974C25AFAEB7
          PID: 3472 ( 0) C:\Program Files\QuickTime\qttask.exe
          size: 385024
          MD5: BAFCF6CF19CE4882039C52DFA17BE35F
          PID: 3488 ( 0) C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
          size: 352256
          MD5: 0B947E1828A83D19E7E32997F982AA2A
          PID: 3512 ( 0) C:\WINDOWS\system32\ctfmon.exe
          size: 15360
          MD5: 5584247B568C2E53934873F4B655FE6A
          PID: 3780 ( 0) C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
          size: 565309
          MD5: 878C9EADC93543A3203F585F9037DBAB
          PID: 1424 ( 0) C:\WINDOWS\system32\wbem\wmiprvse.exe
          size: 218112
          MD5: DB493DD6BC2FA5B38811F2BCDCF03D2B
          PID: 2864 ( 0) C:\WINDOWS\system32\wbem\unsecapp.exe
          size: 16896
          MD5: E77B97D96A89DE67DEC6AD76F92C3655
          PID: 3848 ( 0) C:\WINDOWS\System32\svchost.exe
          size: 14336
          MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA
          PID: 3032 ( 0) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
          size: 4943184
          MD5: C92780F50B8BB7A89E919585916494A9

          --- Browser start & search pages list ---
          Spybot - Search & Destroy browser pages report, 19/04/2008 11:26:42

          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
          C:\windows\system32\blank.htm
          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
          http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
          https://www.orange.fr/portail
          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
          http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
          https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
          http://home.microsoft.com/access/autosearch.asp?p=%s
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
          C:\windows\system32\blank.htm
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
          http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
          http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
          http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
          http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
          https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
          HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
          https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm

          --- Winsock Layered Service Provider list ---

          --- Uninstall list ---
          (Acer French Guide Link)
          uninstall cmd: C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Acer Inc.\Acer French Guide Link\Uninst.isu"

          Adobe Flash Player ActiveX 9.0.115.0 (Adobe Flash Player ActiveX)
          uninstall cmd: C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
          publisher: Adobe Systems Incorporated
          help link: https://helpx.adobe.com/flash-player.html

          Adobe Shockwave Player 11 11 (Adobe Shockwave Player)
          version (major): 11
          install location: C:\WINDOWS\system32\Adobe\
          uninstall cmd: C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
          publisher: Adobe Systems, Inc.
          help link: https://helpx.adobe.com/shockwave.html

          avast! Antivirus 4.8 (avast!)
          version (major): 4
          version (minor): 8
          install location: C:\PROGRA~1\ALWILS~1\Avast4
          install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
          uninstall cmd: C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
          publisher: Alwil Software
          help link: https://www.avast.com/fr-fr/index

          BitTorrent 5.0.9 (BitTorrent)
          uninstall cmd: "C:\Program Files\BitTorrent\uninstall.exe"

          (Branding)

          CCleaner (remove only) (CCleaner)
          uninstall cmd: "C:\Program Files\CCleaner\uninst.exe"

          HDAUDIO Soft Data Fax Modem with SmartCP (CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_1025007F)
          uninstall cmd: C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_1025007F\HXFSETUP.EXE -U -IWstAzlK.inf

          (Connection Manager)

          Easy CD-DA Extractor 10 10 (Easy CD-DA Extractor 10)
          uninstall cmd: "C:\WINDOWS\Easy CD-DA Extractor\uninstall.exe" "/U:C:\Program Files\Easy CD-DA Extractor 10\irunin.xml"
          publisher: Poikosoft
          contact: Poikosoft Support Department
          help link: https://www.poikosoft.com/

          eMule (eMule)
          uninstall cmd: "C:\Program Files\eMule\Uninstall.exe"

          Acer ePresentation Management 1.1.4.819 (ePresentation)
          uninstall cmd: C:\WINDOWS\UnInst32.exe AcerePrj.UNI

          EPSON Logiciel imprimante (EPSON Printer and Utilities)
          uninstall cmd: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R

          EPSON Scan (EPSON Scanner)
          uninstall cmd: C:\Program Files\epson\escndv\setup\setup.exe /r

          ESPRX420 Guide de réf. (ESPRX420 Guide de réf.)
          install location: C:\Program Files\EPSON\TPMANUAL\ESPRX420\REF_G
          uninstall cmd: C:\Program Files\EPSON\TPMANUAL\ESPRX420\REF_G\DOCUNINS.EXE

          ESPRX420 Guide des logiciels (ESPRX420 Guide des logiciels)
          install location: C:\Program Files\EPSON\TPMANUAL\ESPRX420\PQU_G
          uninstall cmd: C:\Program Files\EPSON\TPMANUAL\ESPRX420\PQU_G\DOCUNINS.EXE

          Outil de mise à jour Google 2.2.1111.1511 (Google Updater)
          uninstall cmd: "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
          publisher: Google Inc.
          help link: http://pack.google.com:80/pack-support?hl=fr&gl=fr

          Acer GridVista 2.53.0209 (GridVista)
          uninstall cmd: C:\WINDOWS\UnInst32.exe GridV.UNI

          HijackThis 2.0.2 2.0.2 (HijackThis)
          uninstall cmd: "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
          publisher: TrendMicro

          HP Imaging Device Functions 9.0 9.0 (HP Imaging Device Functions)
          uninstall cmd: C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
          publisher: HP
          help link: https://support.hp.com/us-en?openCLC=true

          HP Photosmart Essential 2.01 2.01 (HP Photosmart Essential)
          uninstall cmd: C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
          publisher: HP
          help link: https://support.hp.com/us-en?openCLC=true

          HP Solution Center 9.0 9.0 (HP Solution Center & Imaging Support Tools)
          uninstall cmd: C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
          publisher: HP
          help link: https://support.hp.com/us-en?openCLC=true

          HP Customer Participation Program 9.0 9.0 (HPExtendedCapabilities)
          uninstall cmd: C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
          publisher: HP
          help link: https://support.hp.com/us-en?openCLC=true

          HP OCR Software 9.0 9.0 (HPOCR)
          uninstall cmd: C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
          publisher: HP
          help link: https://support.hp.com/us-en?openCLC=true

          Microsoft Internationalized Domain Names Mitigation APIs (IDNMitigationAPIs)
          install date: 20070112
          uninstall cmd: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
          publisher: Microsoft Corporation

          Windows Internet Explorer 7 20061107.210142 (ie7)
          install date: 20070211
          uninstall cmd: "C:\WINDOWS\ie7\spuninst\spuninst.exe"
          publisher: Microsoft Corporation
          help link: https://support.microsoft.com/en-us/office/internet-explorer-help-23360e49-9cd3-4dda-ba52-705336cc0de2?ui=en-US&rs=en-001&ad=US

          (InstallShield Uninstall Information)

          VeohTV BETA 3.9.1 (InstallShield_{0405E51E-9582-4207-8F38-AC44201D3808})
          version: 50921473
          version (major): 3
          version (minor): 9
          estimated size: 9703
          install date: 20080416
          install location: C:\Program Files\Veoh Networks\Veoh\
          install source: C:\WINDOWS\Downloaded Installations\{DAE64D1C-EFB7-4C1C-83FA-B11F8E0E85D4}\
          uninstall cmd: C:\Program Files\InstallShield Installation Information\{0405E51E-9582-4207-8F38-AC44201D3808}\setup.exe -runfromtemp -l0x0409
          publisher: Veoh Networks, Inc.

          NTI CD & DVD-Maker 7 (InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2})
          version: 117440512
          version (major): 7
          estimated size: 157163
          install date: 20060825
          install location: C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\
          install source: D:\A5680\swcd\App\CDMaker\
          uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
          publisher: NewTech Infosystems
          comments: Vos remarques
          contact: Service support clientèle
          help link: http://www.votresociété.com/aide
          help telephone: +1-555-555-4505

          Acer Empowering Technology framework 2.1.21.41 (InstallShield_{15B70821-7893-4607-805A-BB80F3EA8279})
          version: 33619989
          version (major): 2
          version (minor): 1
          estimated size: 7947
          install date: 20060825
          install location: C:\Acer\Empowering Technology\
          install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is3\
          uninstall cmd: C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{15B70821-7893-4607-805A-BB80F3EA8279}
          publisher: Acer Inc.
          comments: Thank you for using this product
          contact: Customer Support Department
          help link: https://www.acer.com/ac/fr/FR/content/home
          help telephone: Please locate your local service center on our website

          Acer eLock Management 1.7.11.23 (InstallShield_{6CA897D0-67F5-4F75-8261-DC8BFCA6DA42})
          version: 17235979
          version (major): 1
          version (minor): 7
          estimated size: 5242
          install date: 20060825
          install location: C:\Acer\Empowering Technology\eLock\
          install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is59\
          uninstall cmd: C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{6CA897D0-67F5-4F75-8261-DC8BFCA6DA42}
          publisher: Acer Inc.
          comments: Thank you for using this product
          contact: Customer Support Department
          help link: https://www.acer.com/ac/fr/FR/content/home
          help telephone: Please locate your local service center on our website

          Maxtor Manager 4.01.0227 (InstallShield_{B8281D46-D846-4BB9-BC84-F1115A7BF820})
          version: 67174627
          version (major): 4
          version (minor): 1
          estimated size: 77660
          install date: 20080221
          install location: C:\Program Files\Maxtor\
          install source: C:\WINDOWS\Downloaded Installations\{4AD32264-C7AC-4D90-903E-7924D78E1300}\
          uninstall cmd: "C:\Program Files\InstallShield Installation Information\{B8281D46-D846-4BB9-BC84-F1115A7BF820}\setup.exe" -runfromtemp -l0x040c -removeonly
          publisher: Seagate Technology
          contact: Service support clientèle
          help link: http://www.seagate.com/redirects/support/onetouch_iv/fr-fr

          Acer ePerformance Management 1.0.10.21 (InstallShield_{DEE08946-40F0-4890-853E-60A6C3306041})
          version: 16777226
          version (major): 1
          estimated size: 4426
          install date: 20060825
          install location: C:\Acer\Empowering Technology\ePerformance\
          install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is23\
          uninstall cmd: C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{DEE08946-40F0-4890-853E-60A6C3306041}
          publisher: Acer Inc.
          comments: Thank you for using this product
          contact: Customer Support Department
          help link: https://www.acer.com/ac/fr/FR/content/home
          help telephone: Please locate your local service center on our website

          Acer eSettings Management 1.3.5.42 (InstallShield_{E38BC648-883B-4EE5-966C-94C4B7AB3E0B})
          version: 16973829
          version (major): 1
          version (minor): 3
          estimated size: 6049
          install date: 20060825
          install location: C:\Acer\Empowering Technology\eSettings\
          install source: C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\_is3E\
          uninstall cmd: C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{E38BC648-883B-4EE5-966C-94C4B7AB3E0B}
          publisher: Acer Inc.
          comments: Thank you for using this product
          contact: Customer Support Department
          help link: https://www.acer.com/ac/fr/FR/content/home
          help telephone: Please locate your local service center on our website

          (KB884016)

          (KB884267)

          (KB885353)

          (KB886612)

          (KB887078)

          (KB887626)

          (KB888656)

          (KB889858)

          Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046)
          uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
          publisher: Microsoft Corporation
          help link: https://support.microsoft.com/en-us/help/890046

          (KB891122)

          (KB892313)

          (KB893240)

          (KB893241)

          3.1 (KB893803)
          help link: https://support.microsoft.com/en-us/help/893803/windows-installer-3-1-v2-3-1-4000-2435-is-available

          (KB895181)

          (KB895316)

          (KB895572)

          (KB897586)

          (KB898549)

          (KB900399)

          (KB902344)

          Mise à jour de sécurité pour Windows XP (KB903235) 1 (KB903235)
          install date: 20080313
          uninstall cmd: "C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
          publisher: Microsoft Corporation
          help link: https://support.microsoft.com/en-us/help/903235

          (KB907658)

          (KB911565)

          (KB911854)

          Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090) 20070117.120000 (KB928090-IE7)
          install date: 20070214
          uninstall cmd: "C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
          publisher: Microsoft Corporatio
      3. Contributeur sécurité
        il y a encore dessoucis que tu me colle le rapport de spybot que tu m'a dit normal?
        1. Bonjour, bé pour être honnete avec toi je ne sais pas ce que ça raconte donc c'est pour ça que je t'ai envoyé le rapport de spybot lui me dit félicitations vous n'avez aucun mouchard donc je pense que ça doit être bon maintenant si toi tu vois des soucis dans le rapport que je t'ai envoyé dis moi comment m'en débarrasser et je t'enverrai le rapport de façon a ce que tu vérifie et que tu me dise si tout est ok ou pas !!

          Bonne soirée passe un bon week end si je n'ai pas de tes nouvelles d'ici lundi.
      4. Contributeur sécurité
        le rapport est bon

        pour voir si il reste rien:

        colle le rapport d'un scan en ligne
        avec un des suivants:

        bitdefender en ligne :
        http://www.bitdefender.fr/scan_fr/scan8/ie.html

        Panda en ligne :
        http://pandasoftware.fr

        Kaspersky en ligne
        https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

        secuser en ligne :
        http://www.secuser.com/outils/antivirus.htm
        http://www.secuser.com/outils/antivirus_installation.htm

        scan en ligne firefox

        https://www.trendmicro.com/fr_fr/business.html
        1. Bonjour, voila le rapport de bitdefender

          BitDefender Online Scanner - Rapport virus en temps réel

          Généré à: Sun, Apr 20, 2008 - 17:46:22

          Info d'analyse

          Fichiers scannés

          78874

          Infectés Fichiers

          0

          Virus Détectés

          Aucun virus trouvé.

          Je pense que maintenant c'est bon il n'y a plus rien !!

          encore Merci pour le coup de main
      5. Contributeur sécurité
        ok

        bonne suite
        1. Bonjour, merci pour ton aide c'est trés sympa encore merci