Trojan popuper

-----------------------[ Lop S&D 4.2.0-9 XP/Vista ]---------------------

[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : TOMDINE ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 27/05/2008 | 21:02:49,64 ] [ PC : PC-DE-TOMDINE ]
[ MAJ : 16-05-2008 | 23:35 ]
[ UAC => 0 ]

-------------[ Listing des dossiers dans Application Data ]------------

[06/12/2007|19:48] C:\Users\TOMDINE\AppData\Roaming\Adobe\Flash Player
[06/12/2007|14:50] C:\Users\TOMDINE\AppData\Roaming\Adobe\Linguistics
[06/12/2007|14:49] C:\Users\TOMDINE\AppData\Roaming\Adobe\Acrobat

[07/12/2007|17:24] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PlayMovie
[07/12/2007|17:23] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PowerCinema
[07/12/2007|17:20] C:\Users\TOMDINE\AppData\Roaming\CyberLink\MediaCache
[07/12/2007|17:20] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PowerProducer
[07/12/2007|17:20] C:\Users\TOMDINE\AppData\Roaming\CyberLink\PowerDVD

[11/03/2008|20:06] C:\Users\TOMDINE\AppData\Roaming\Google\Local Search History
[08/12/2007|20:32] C:\Users\TOMDINE\AppData\Roaming\Google\GoogleEarth

[06/12/2007|14:44] C:\Users\TOMDINE\AppData\Roaming\Identities\{2E2DD65D-5573-4EC0-861C-2CCB5D8C9697}

[07/12/2007|12:52] C:\Users\TOMDINE\AppData\Roaming\InstallShield\ISEngine12.0

[12/04/2008|13:35] C:\Users\TOMDINE\AppData\Roaming\Macromedia\Flash Player


[07/05/2008|13:32] C:\Users\TOMDINE\AppData\Roaming\Microsoft\eHome
[23/03/2008|20:20] C:\Users\TOMDINE\AppData\Roaming\Microsoft\MSN Messenger
[23/03/2008|20:15] C:\Users\TOMDINE\AppData\Roaming\Microsoft\IdentityCRL
[17/12/2007|23:21] C:\Users\TOMDINE\AppData\Roaming\Microsoft\ModŠles
[17/12/2007|13:33] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Word
[12/12/2007|13:25] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Internet Explorer
[10/12/2007|19:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Office
[10/12/2007|19:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Excel
[09/12/2007|01:33] C:\Users\TOMDINE\AppData\Roaming\Microsoft\PowerPoint
[07/12/2007|17:17] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Outlook
[07/12/2007|15:49] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Signatures
[07/12/2007|15:14] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Stationery
[07/12/2007|11:20] C:\Users\TOMDINE\AppData\Roaming\Microsoft\preuve
[07/12/2007|11:20] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Macros compl‚mentaires
[07/12/2007|10:25] C:\Users\TOMDINE\AppData\Roaming\Microsoft\MMC
[06/12/2007|20:17] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Templates
[06/12/2007|20:15] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Document Building Blocks
[06/12/2007|20:07] C:\Users\TOMDINE\AppData\Roaming\Microsoft\AddIns
[06/12/2007|19:05] C:\Users\TOMDINE\AppData\Roaming\Microsoft\HTML Help
[06/12/2007|15:14] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Speech
[06/12/2007|15:05] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Windows
[06/12/2007|14:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Protect
[06/12/2007|14:43] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Crypto
[06/12/2007|14:42] C:\Users\TOMDINE\AppData\Roaming\Microsoft\SystemCertificates
[06/12/2007|14:42] C:\Users\TOMDINE\AppData\Roaming\Microsoft\Credentials


[27/03/2008|20:15] C:\Users\TOMDINE\AppData\Roaming\Mozilla\Firefox



[18/03/2008|12:51] C:\Users\TOMDINE\AppData\Roaming\OpenOffice.org2\user

[26/05/2008|21:14] C:\Users\TOMDINE\AppData\Roaming\PC Tools\Spyware Doctor

[10/03/2008|17:49] C:\Users\TOMDINE\AppData\Roaming\Real\RealPlayer

[06/12/2007|19:43] C:\Users\TOMDINE\AppData\Roaming\Talkback\MozillaOrg


[10/03/2008|18:24] C:\Users\TOMDINE\AppData\Roaming\vlc\cache

----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------

[27/05/2008 21:01][--ah-----] C:\Windows\tasks\SA.DAT
[27/05/2008 21:00][--a------] C:\Windows\tasks\SCHEDLGU.TXT

------[ Listing des dossiers dans C:\ProgramData ]------

[10/08/2007|09:59] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[27/03/2008|21:22] C:\ProgramData\Adobe
[04/04/2008|14:34] C:\ProgramData\Apple
[05/04/2008|15:11] C:\ProgramData\Apple Computer
[02/11/2006|15:02] C:\ProgramData\Application Data
[06/12/2007|14:39] C:\ProgramData\Bureau
[07/12/2007|17:20] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[11/04/2008|16:29] C:\ProgramData\eMule
[06/12/2007|14:39] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[11/03/2008|16:01] C:\ProgramData\Google
[10/04/2008|11:57] C:\ProgramData\Grisoft
[06/12/2007|14:39] C:\ProgramData\Menu D‚marrer
[07/12/2007|11:18] C:\ProgramData\Microsoft
[07/12/2007|10:33] C:\ProgramData\Microsoft Help
[06/12/2007|14:39] C:\ProgramData\ModŠles
[19/05/2008|22:02] C:\ProgramData\MumboJumbo
[17/10/2007|00:08] C:\ProgramData\NVIDIA
[19/05/2008|21:27] C:\ProgramData\Sandlot Games
[12/03/2008|19:02] C:\ProgramData\Skyline
[02/11/2006|15:02] C:\ProgramData\Start Menu
[06/12/2007|18:53] C:\ProgramData\Symantec
[27/05/2008|21:02] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[23/03/2008|20:07] C:\ProgramData\WLInstaller
[06/12/2007|19:04] C:\ProgramData\Yahoo! Companion

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[17/10/2007|00:10] C:\Program Files\Acer Arcade Deluxe
[10/08/2007|10:05] C:\Program Files\Acer GameZone
[17/10/2007|00:15] C:\Program Files\Acer Inc
[10/08/2007|09:59] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[27/03/2008|21:22] C:\Program Files\Adobe
[06/12/2007|15:55] C:\Program Files\Alice
[06/12/2007|19:00] C:\Program Files\Alwil Software
[17/10/2007|00:13] C:\Program Files\Apoint2K
[04/04/2008|14:34] C:\Program Files\Apple Software Update
[10/04/2008|14:52] C:\Program Files\Common Files
[10/08/2007|08:40] C:\Program Files\CONEXANT
[10/08/2007|09:43] C:\Program Files\CyberLink
[06/12/2007|18:00] C:\Program Files\desktop.ini
[11/04/2008|16:28] C:\Program Files\eMule
[06/12/2007|14:39] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[12/03/2008|16:00] C:\Program Files\Google
[07/12/2007|12:53] C:\Program Files\InstallShield Installation Information
[17/10/2007|00:03] C:\Program Files\Intel
[10/04/2008|09:42] C:\Program Files\Internet Explorer
[14/04/2008|10:16] C:\Program Files\Java
[17/10/2007|00:09] C:\Program Files\Launch Manager
[23/03/2008|21:37] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[07/12/2007|10:56] C:\Program Files\Microsoft FrontPage
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[07/12/2007|11:05] C:\Program Files\Microsoft Money
[11/03/2008|16:07] C:\Program Files\Microsoft Office
[23/03/2008|20:17] C:\Program Files\Microsoft SQL Server Compact Edition
[07/12/2007|10:33] C:\Program Files\Microsoft Works
[02/11/2006|14:42] C:\Program Files\Movie Maker
[06/05/2008|21:07] C:\Program Files\Mozilla Firefox
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[06/12/2007|16:55] C:\Program Files\MSXML 4.0
[10/08/2007|09:18] C:\Program Files\NewTech Infosystems
[14/04/2008|10:28] C:\Program Files\OpenOffice.org 2.3
[14/04/2008|10:28] C:\Program Files\OpenOffice.org 2.4
[04/04/2008|14:37] C:\Program Files\QuickTime
[07/12/2007|11:42] C:\Program Files\Real
[10/08/2007|08:31] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[12/03/2008|19:02] C:\Program Files\Skyline
[27/05/2008|11:49] C:\Program Files\Spyware Doctor
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[10/03/2008|18:21] C:\Program Files\VideoLAN
[06/12/2007|17:57] C:\Program Files\Windows Calendar
[02/11/2006|14:42] C:\Program Files\Windows Collaboration
[10/08/2007|09:22] C:\Program Files\Windows Defender
[02/11/2006|14:42] C:\Program Files\Windows Journal
[23/03/2008|21:37] C:\Program Files\Windows Live
[15/05/2008|10:21] C:\Program Files\Windows Mail
[06/12/2007|17:56] C:\Program Files\Windows Media Player
[06/12/2007|14:39] C:\Program Files\Windows NT
[02/11/2006|14:42] C:\Program Files\Windows Photo Gallery
[10/03/2008|18:05] C:\Program Files\Windows Sidebar
[06/12/2007|14:43] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Common Files ]------

[27/03/2008|21:23] C:\Program Files\Common Files\Adobe
[10/08/2007|09:30] C:\Program Files\Common Files\InstallShield
[06/12/2007|21:38] C:\Program Files\Common Files\Java
[10/08/2007|09:18] C:\Program Files\Common Files\LightScribe
[23/03/2008|20:13] C:\Program Files\Common Files\microsoft shared
[10/08/2007|09:18] C:\Program Files\Common Files\muvee Technologies
[10/08/2007|09:19] C:\Program Files\Common Files\NewTech Infosystems
[10/08/2007|10:01] C:\Program Files\Common Files\Oberon Media
[10/03/2008|17:49] C:\Program Files\Common Files\Real
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[06/12/2007|18:54] C:\Program Files\Common Files\Symantec Shared
[07/12/2007|10:56] C:\Program Files\Common Files\System
[23/03/2008|20:13] C:\Program Files\Common Files\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 75

... OK !

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

Aucun fichier / dossier Lop trouvé !

----------------------[ Verification du Registre ]----------------------

..... OK !

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts PROPRE


----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-27 21:03:51
Windows 6.0.6000 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------


Aucune autre infection trouvée !

[F:3269][D:50]-> C:\Users\TOMDINE\AppData\Local\Temp
[F:40][D:1]-> C:\Users\TOMDINE\AppData\Roaming\MICROS~1\Windows\Cookies
[F:30][D:4]-> C:\Users\TOMDINE\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:3]-> C:\$Recycle.Bin

[ UAC => 1 ]

--------------------[ Fin du rapport a 21:05:45,73 ]----------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:33:55, on 28/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\System32\rundll32.exe
C:\Windows\BR040286.exe
C:\Windows\System32\rundll32.exe
C:\Users\TOMDINE\AppData\Local\Temp\RtkBtMnt.exe
C:\Acer\ALaunch\ALaunchSvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Users\TOMDINE\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BisonInst0402] C:\Windows\BR040286.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [SetPanel] C:\Acer\APanel\APanel.cmd
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ieservicegate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ieservicegate.com/redirect.php (file missing)
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Merci, pour l'aide...
C'est bizard, Spyware doctor a pourtant trouvé un Trojan Popuper.
Pour le scan en ligne tu n'aurais pas un autre lien parceque ma configue avec Win Vista n'est pas prise en charge...
A+

Le scan en ligne n'a pas fonctionné. J'ai télécharger la version gratuite 30jrs
detectio de:
-> Trojan-Downloader.Win32.Zlob.lar dans 3 fichiers .tmp
-> not-virus:Hoax.Win32.Renos.bmq dans 1 fichier .tmp