rundll32.exe

Question

Bonjour,

J'ai télécharger un logiciel de costomisation  et j'ai voulu changer mon fond d'écran sauf que mon ordinateur me marquer : " [url=http://mabul.org/][img]http://apu.mabul.org/up/apu/2008/07/27/img-0152000hb2r.jpg[/img][/url]" comment faire ?




PS : Je n'ai pas le Cd de windows 


Cordialement,
Nounours

gen-hackman · Answer

J'ai télécharger un logiciel de costomisation et j'ai voulu changer mon fond d'écran sauf que mon ordinateur me marquer : " [url=http://mabul.org/][img]http://apu.mabul.org/up/apu/2008­/07/27/img-0152000hb2r.jpg/img/url" comment faire ? 




PS : Je n'ai pas le Cd de windows 

????????????????????????????????????.....

nounours-10 · Answer

Excusez moi j'ai pour le lien j'ai pas vérifier ! 
Voilà enfaite se que cela me marque : 

http://apu.mabul.org/up/apu/2008/07/27/img-0152000hb2r.jpg

gen-hackman · Answer

et il se passe quoi apres?

nounours-10 · Answer

il me marque fermez le programme et il ferme le programme donc je recommence et il fait pareil !

gen-hackman · Answer

ok fais ceci :


Fais une analyse par HijackThis, comme ceci: 

1)- Avec connexion au Net en service, 
Télécharge la version finale de Hijackthis (Trend Secure) ==> HijackThis™ 2.0 .2 https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html ou 
http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis
avec un installeur. Sur la page, choisis « Download HijackThis Installer » et enregistre-le sur le bureau. Tu dois voir une nouvelle icône « HJTInstall.exe » sur le bureau. 

2)- Installation : clic-droit sur l’ icône « HJTInstall.exe » présente sur ton bureau et choisis : "Exécuter en tant qu'administrateur" dans le menu déroulant qui s'affiche. 
- Ensuite, clic sur « Exécuter », puis sur « Install ». 
- Accepte la licence en cliquant sur le bouton "I Accept" 
- Le programme s’installe de lui-même dans un dossier dédié. 
- Par défaut, il s'installera en C:\Program Files\Trend Micro\HijackThis 
- Et un raccourci pour lancer l’analyse apparaît sur le bureau. 

Note: Comme cette version est appelée à rester sur le PC, faire un clic-droit sur HJTInstall.exe > Propriétés > Onglet compatibilité > coche la case "Exécuter en tant qu'administrateur" en bas . 
- Cette solution pérennise le choix qui peut être obtenu de manière provisoire par « clic-droit sur l'icône de raccourci/Exécuter en tant qu'administrateur» dans le menu contextuel. 

3)Analyse : 
•-Important à faire en priorité si tu possèdes le logiciel Spybot S&D > Désactive le Tea Timer de Spybot en passant par les options de Spybot: il faut une fois dans le logiciel il faut aller dans le menu "Mode" => coche "Mode avancé" => "Outils"(en bas de page)=> "Résident" => et tu décoches cette case: "Résident Tea Timer" . 
- Tu ne dois plus voir l'icône du Tea Timer dans la barre de tâches (Systray près de l’horloge)! 

•-Arrête tous les programmes en cours et ferme toutes les fenêtres. 
•- Puis, double-clic sur le raccourci HJT créé sur le bureau, et clic sur "Do a system scan and save a logfile" pour lancer l'analyse. 
- À la fin du scan le bloc-notes va s'ouvrir sur le bureau 
- Tu fais un copier/coller de tout son contenu. 
- Et tu le postes sur le forum. 
- Il sera enregistré dans le dossier C:\Program Files\Trend Micro\HijackThis, sous hijackthis.log.

nounours-10 · Answer

Voilà ! 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:27:02, on 27/07/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICEE.EXE
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\charles\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb125\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll (file missing)
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb125\SearchSettings.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb125\Dealio.dll
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing)
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll (file missing)
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_S3A13.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: &Search - ?p=ZJfox000
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\charles\AppData\LocalLow\Dealio\kb125es\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb125\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb125\Dealio.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix: 
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Filesnamfler
aofsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

gen-hackman · Answer

bonjour......

fais ceci :


1) Télécharge et installe Malwarebyte's Anti-Malware: 

http://www.malwarebytes.org/mbam/program/mbam-setup.exe 

A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée. >>> clique sur OK 

Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur ton Bureau. 
Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur OK 

Laisse les Mises à jour se télécharger 

*** Referme le programme *** 

2) Redémarre en "Mode sans échec" 

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows. 
Sélectionner "Mode sans échec" et appuie sur [Entrée] 
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre. 
Regarde ici si besoin : https://www.malekal.com/demarrer-windows-mode-sans-echec/

Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut. 

3) Scan avec Malwarebyte's Anti-Malware 

Lance Malwarebyte's Anti-Malware 
Onglet "Recherche" >>> coche Executer un exame complet >>> Rechercher sélectionne tes disques durs puis clique sur Lancer l’examen 
A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport 
Suppression des éléments détectés >>>> 
supprime ce qu'il a trouvé vide également les éléments de la quarantaine
S'il t'es demandé de redémarrer >>> clique sur "Yes" 

--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse. 

quand tu demande une analyse, demande en mode sans échec. 

Pourquoi en mode sans échec: 

*Car déjà l'analyse cherche plus de fichiers en mode sans échec que en mode normal. 
*Et aussi en mode normal les virus ( trojans, cheval de troie, vers, spywares , malwares et autres ... sont actif) donc ne se supprimes pas donc ils faut le faire en mode sans échec . 

_______________________________________________

nounours-10 · Answer

J'espere que c'est se scan là !
 Malwarebytes' Anti-Malware 1.23
Version de la base de données: 997
Windows 6.0.6001 Service Pack 1

22:19:43 27/07/2008
mbam-log-7-27-2008 (22-19-36).txt

Type de recherche: Examen complet (C:\|F:\|)
Eléments examinés: 150838
Temps écoulé: 45 minute(s), 24 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 19
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 10

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1962c5bc-e475-465b-823b-133e711bceb9} (Adware.Starware) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5f90c0e3-4c0a-4d54-a8ac-5afe6163a99e} (Adware.Starware) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure (Rogue.Spyware-Secure) -> No action taken.

Fichier(s) infecté(s):
C:\Users\charles\Local Settings\Application Data\gcimc_navps.dat (Adware.Navipromo) -> No action taken.
C:\Users\charles\Local Settings\Application Data\gcimc_nav.dat (Adware.Navipromo) -> No action taken.
C:\Users\charles\Local Settings\Application Data\gcimc.dat (Adware.Navipromo) -> No action taken.
C:\Users\charles\Local Settings\Application Data\sjuroyyoag_navps.dat (Adware.Navipromo) -> No action taken.
C:\Users\charles\Local Settings\Application Data\sjuroyyoag_nav.dat (Adware.Navipromo) -> No action taken.
C:\Users\charles\Local Settings\Application Data\sjuroyyoag.dat (Adware.Navipromo) -> No action taken.
C:\Acer\AcerReg\PAREG\INSTALLREG.EXE (Adware.Agent) -> No action taken.
C:\Program Files\Internet Explorer\msimg32.dll (Adware.MyWebSearch) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Spyware-Secure trial.lnk (Rogue.Spyware-Secure) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Website.lnk (Rogue.Spyware-Secure) -> No action taken.

gen-hackman · Answer

ok fais ceci :

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Vas dans "Démarrer" puis Panneau de configuration. 
- Double Clique sur l'icône Comptes d'utilisateurs et sur Activer ou désactiver le contrôle des comptes d'utilisateurs. 
- Clique sur Continuer. 
- Décoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur. 
- Valide par OK et redémarre. 

Tuto : https://forum.malekal.com/viewtopic.php?f=59&t=6517 

Télécharge maintenant Navilog1 depuis-ce lien : 

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, Fais un Clic-droit sur le raccourci Navilog1 présent sur ton bureau et choisis : 

"Exécuter en tant qu'administrateur". 

Au menu principal, Fais le choix 1 
Laisse toi guider et patiente. 
Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche le blocnote va s'ouvrir. 
Copie-colle l'intégralité du rapport dans une réponse. 
Referme le blocnote 
Le rapport fixnavi.txt est en outre sauvegardé a la racine du disque 

Tuto : http://www.malekal.com/Adware.Magic_Control.php

nounours-10 · Answer

Search Navipromo version 3.6.1 commencé le 28/07/2008 à 12:11:59,17

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "charles" 

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6001 
Internet Explorer : 7.0.6001.18000 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***


*** Recherche dossiers dans "C:\Windows" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***


*** Recherche dossiers dans "C:\ProgramData" ***


*** Recherche dossiers dans "c:\users\charles\appdataoaming\micros~1\windows\startm~1\programs" ***


*** Recherche dossiers dans "C:\Users\charles\AppData\Local\virtualstore\Program Files" ***


*** Recherche dossiers dans "C:\Users\charles\AppData\Roaming" ***


*** Recherche dossiers dans "C:\Users\INVIT~1\appdataoaming" ***


*** Recherche dossiers dans "C:\Users\Musiqu\appdataoaming" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier Navipromo trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\charles\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\charles\AppData\Local\virtualstore\windows\system32" *

* Recherche dans "C:\Users\charles\AppData\Local" *

* Recherche dans "C:\Users\INVIT~1\AppData\Local" * 

* Recherche dans "C:\Users\Musiqu\AppData\Local" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\Windows\system32" :


* Dans "C:\Users\charles\AppData\Local\Microsoft" :


* Dans "C:\Users\charles\AppData\Local\virtualstore\windows\system32" :


* Dans "C:\Users\charles\AppData\Local" :

cwwkzfwvwu_navtmp.dat trouvé !

* Dans "C:\Users\INVIT~1\AppData\Local" : 


* Dans "C:\Users\Musiqu\AppData\Local" : 


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 28/07/2008 à 12:23:00,50 ***

gen-hackman · Answer

je vois que tu n as pas supprime apres malwarebytes
tu l'as fait en sans echec ?
tu as vide la quarantaine ?

continue quand meme navilog rapport a l appui :


Veille à ce que le contrôle des comptes utilisateurs (UAC) soit désactivé. 
Fais un Clic-droit sur le raccourci Navilog1 présent sur ton bureau et choisis "Exécuter en tant qu'administrateur". 

Au menu principal, Fais le choix 2 
Laisse toi guider et patiente. 
Le fix va t'informer qu'il va alors redémarrer ton PC 
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts 
Appuie sur une touche comme demandé. 
(si ton Pc ne redémarre pas automatiquement, fais-le toi-même) 
Au redémarrage de ton PC, choisis ta session habituelle si nécessaire. 
Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le blocnote va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le blocnote. Ton bureau va réapparaître 
Réactive le contrôle des comptes utilisateurs (UAC) 

PS:Si ton bureau ne réapparaît pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Cela te fera apparaître ton bureau

nounours-10 · Answer

j'ai suivi a la lettre ! enfin je croit !
sinon il y a un rapport a poster après que le bloc note sois ouvert ??

nounours-10 · Answer

quand je vais sur navilog  je fait se qu'il y a de marquer sauf  premierement il ma donner le  rapport avant le redémarrage  et la maintenat que je veut recommencer des que je choisi le choix numéro 2 il se ferme comment faire ??

gen-hackman · Answer

oui tu copies colles

nounours-10 · Answer

Clean Navipromo version 3.6.1 commencé le 28/07/2008 à 13:15:59,64

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "charles" 

Mise à jour le 19.07.2008 à 20h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6001 
Internet Explorer : 7.0.6001.18000
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


[b] Nettoyage executé en mode normal sans redémarrage
!! Les résultats ne seront pas optimisés !! [/b]

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\Windows\System32" *


* Suppression dans "C:\Users\charles\AppData\Local\Microsoft" *


* Suppression dans "C:\Users\charles\AppData\Local\virtualstore\windows\system32" *


* Suppression dans "C:\Users\charles\AppData\Local" *


* Suppression dans "C:\Users\INVIT~1\AppData\Local" *


* Suppression dans "C:\Users\Musiqu\AppData\Local" *



*** Suppression dossiers dans "C:\Windows" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***


*** Suppression dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***


*** Suppression dossiers dans "C:\ProgramData" ***


*** Suppression dossiers dans c:\users\charles\appdataoaming\micros~1\windows\startm~1\programs ***


*** Suppression dossiers dans "C:\Users\INVIT~1\appdataoaming\micros~1\windows\startm~1\programs" ***


*** Suppression dossiers dans "C:\Users\Musiqu\appdataoaming\micros~1\windows\startm~1\programs" ***


*** Suppression dossiers dans "C:\Users\charles\AppData\Local\virtualstore\Program Files" ***


*** Suppression dossiers dans "C:\Users\charles\AppData\Roaming" ***


*** Suppression dossiers dans "C:\Users\INVIT~1\appdataoaming" *** 


*** Suppression dossiers dans "C:\Users\Musiqu\appdataoaming" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\charles\AppData\Local\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\Windows\system32" *


* Dans "C:\Users\charles\AppData\Local\Microsoft" *


* Dans "C:\Users\charles\AppData\Local\virtualstore\windows\system32" *


* Dans "C:\Users\charles\AppData\Local" *


* Dans "C:\Users\INVIT~1\AppData\Local" * 


* Dans "C:\Users\Musiqu\AppData\Local" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !


*** Nettoyage terminé le 28/07/2008 à 13:19:43,62 ***

gen-hackman · Answer

on est pas mal là....refais le post 7 a la lettre surveille les caracteres gras

nounours-10 · Answer

une question : 
Si le compte habituelle est le compte administrateur comment faire ??

gen-hackman · Answer

alors utilise celui ci

nounours-10 · Answer

Malwarebytes' Anti-Malware 1.23
Version de la base de données: 997
Windows 6.0.6001 Service Pack 1

14:19:33 28/07/2008
mbam-log-7-28-2008 (14-19-33).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 149662
Temps écoulé: 24 minute(s), 56 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

gen-hackman · Answer

R-hosts http://siri.urz.free.fr/RHosts.php 
tu cliques sur Download 
tu l'enregistre sur le bureau 
tu double-cliques sur hosts 
puis sur Restaurer 
tu confirmes par OK et puis tu fermes la fenêtre

nounours-10 · Answer

avant est ce que je redémarre mon ordi normalement ??

gen-hackman · Answer

tu peux

nounours-10 · Answer

RHoosts ne fonctionne pas sur Windows vista !:'(

gen-hackman · Answer

ok fais ceci :

refais hijackthis et coches ces lignes puis "fix checked" :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*http://f­r.yahoo.com 
O1 - Hosts: ::1 localhost 
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file) 
O2 - BHO: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing) 
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing) 
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb125\Dealio.dll 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll (file missing) 
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL 
O3 - Toolbar: VMN Toolbar - {4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33} - C:\PROGRA~1\VMNTOO~1\VMNTOO~1.DLL (file missing) 
O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll (file missing) 
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL 
O8 - Extra context menu item: &Search - ?p=ZJfox000 
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\charles\AppData\LocalLow\Dealio\kb125\res\DealioSea­rch.html 
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb125\Dealio.dll 
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb125\Dealio.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll 
O20 - AppInit_DLLs: eNetHook.dll 
 
ensuite redemarres en mode sans echec :

Comment aller en Mode sans échec 
1) Redémarres ton ordi 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisis la première option : Sans Échec, et valide avec "Entrée" 
5) Choisis ton compte habituel, et non Administrateur (si besoin ... ) 
(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...) 

et fais un nettoyage avec ccleaner puis reviens refais hijackthis et poste le rapport

nounours-10 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:48:17, on 28/07/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Safe mode

Running processes:
C:\Windows\Explorer.EXE
C:\Users\charles\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb125\SearchSettings.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_S3A13.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix: 
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Filesnamfler
aofsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

gen-hackman · Answer

pardon mais le hijackthis tu devais le refaire en normal(autant pour moi je n ai pas precise)
car la il n y a aucun processus de visible

nounours-10 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:14:26, on 28/07/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Users\charles\Desktop\HiJackThis.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb125\SearchSettings.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_S3A13.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix: 
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Filesnamfler
aofsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

gen-hackman · Answer

tu n as aucun antivirus apparemment ....je te suggere ceci :

https://www.clubic.com/telecharger-fiche10821-avira-antivir-personal-free-antivirus.html

tuto ici :

https://www.malekal.com/avira-free-security-antivirus-gratuit/

ensuite un antispyware grauit aussi :

https://www.clubic.com/telecharger-fiche41677-spyware-terminator.html

ttuto ici :

http://www.malekal.com/tutorial_SpywareTerminator.html

et enfin un parefeu gratuit aussi :

https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html

tuto ici :

http://www.zataz.com/tutorial/1187985539/Tuto-Sunbelt-Personal-Firewall-(ex-Kerio).html

mets tout a jour,

fais un scan avec l antivirus
fais un scan avec spywareT.

nounours-10 · Answer

j'ai windows live Onecacare en antivirus

gen-hackman · Answer

euh....c est un antivirus ca ?lol

nounours-10 · Answer

je sais pas je croit

gen-hackman · Answer

suis ce que je t ai indique

nounours-10 · Answer

j'ai supprime Windows live Oncare et installer les 3 logiciel que tu ma dit d'installer !

gen-hackman · Answer

mets tout a jour, 

fais un scan avec l antivirus 
fais un scan avec spywareT.

nounours-10 · Answer

Voici le rapport de Spyware Terminator :

Logfile of Spyware Terminator v2.3.0.481 (db:2.007.028.000)
Scan Time: 28/07/2008 19:18:40  length: 3906 s
Platform: VISTA (6.0.0.6001)
User: Admin
Boot Mode: Normal
Scan type: Full_Spyware_Scan
Scanned Objects: 157683 (Critical:4)
Filter: No System items, No Safe items, No Invalid items

Running Processes
SLsvc.exe [Microsoft Corporation] : C:\Windows\system32\SLsvc.exe
sched.exe [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
avgnt.exe [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
wmpnscfg.exe [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnscfg.exe
ALaunchSvc.exe : C:\Acer\ALaunch\ALaunchSvc.exe
avguard.exe [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
eDSService.exe [HiTRSUT] : C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
eLockServ.exe [Acer Inc.] : C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
eNet Service.exe [Acer Inc.] : C:\Acer\Empowering Technology\eNet\eNet Service.exe
FTRTSVC.exe [France Telecom SA] : C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
LSSrvc.exe [Hewlett-Packard Company] : C:\Program Files\Common Files\LightScribe\LSSrvc.exe
MobilityService.exe : C:\Acer\Mobility Center\MobilityService.exe
naofsvc.exe : C:\Program Filesnamfler
aofsvc.exe
RichVideo.exe : C:\Program Files\CyberLink\Shared Files\RichVideo.exe
SbPFLnch.exe [Sunbelt Software, Inc.] : C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
SbPFSvc.exe [Sunbelt Software, Inc.] : C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
eNMTray.exe [Acer Inc.] : C:\Acer\Empowering Technology\eNet\eNMTray.exe
ePower_DMC.exe [Acer Inc.] : C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
Acer.Empowering.Framework.Supervisor.exe [Acer Inc.] : C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe
eRAgent.exe [Acer Inc.] : C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
XAudio.exe [Conexant Systems, Inc.] : C:\Windows\system32\drivers\XAudio.exe
eRecoveryService.exe [Acer Inc.] : C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
capuserv.exe : C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
ePowerSvc.exe [acer] : C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
wmpnetwk.exe [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnetwk.exe
SbPFCl.exe [Sunbelt Software, Inc.] : C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
avscan.exe [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
avscan.exe [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe

Internet Settings
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = https://fr.yahoo.com/
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain = 
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName = 

BHO
02 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} -  [Yahoo! Inc.] : C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
02 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -  [Vendio Services, Inc.] : C:\Program Files\Search Settings\kb125\SearchSettings.dll

Toolbars
03 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} -  [HiTRUST] : C:\Windows\system32\eDStoolbar.dll
03 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -  [Yahoo! Inc.] : C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, EPSON Stylus DX8400 Series :  [SEIKO EPSON CORPORATION] : C:\Windows\system32\SPOOL\DRIVERS\W32X86\3\E_FATICEE.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avgnt :  [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
04 - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, AppInit_DLLs :  [acer] : C:\Windows\system32\eNetHook.dll
04 - Startup: %STARTUPALL%\Empowering Technology Launcher.lnk [Acer Inc.] : C:\Acer\Empowering Technology\eAPLauncher.exe

Shell Extensions
CLSID_PreviewMime - {92dbad9f-5025-49b0-9078-2d78f935e341} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
CLSID_PreviewEmail - {b9815375-5d7f-4ce2-9245-c9d4da436930} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
CLSID_PreviewHtml - {f8b8412b-dea3-4130-b36c-5e8be73106ac} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
Shell Message Handler - {5FA29220-36A1-40f9-89C6-F4B384B7642E} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
Microsoft Agent Character Property Sheet Handler - {143A62C8-C33B-11D1-84FE-00C04FA34A14} -  [Microsoft Corporation] : C:\Windows\MSAgent\agentpsh.dll
CompressedFolder - {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder Right Drag Handler - {BD472F60-27FA-11cf-B8B4-444553540000} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder SendTo Target - {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder Context Menu - {b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder DropHandler - {ed9d80b9-d157-457b-9192-0e7280313bf0} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Windows Photo Gallery Viewer Video Verbs - {E598560B-28D5-46aa-A14A-8A3BEA34B576} -  [Microsoft Corporation] : C:\Program Files\Windows Photo Gallery\PhotoViewer.dll
&Windows Media Player - {0a4286ea-e355-44fb-8086-af3df7645bd9} -  [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpband.dll
 - {BB6B2374-3D79-41DB-87F4-896C91846510} -  [Microsoft Corporation] : C:\Windows\system32\emdmgmt.dll
Windows Photo Gallery Viewer Autoplay Handler - {9D687A4C-1404-41ef-A089-883B6FBECDE6} -  [Microsoft Corporation] : C:\Windows\system32\RUNDLL32.EXE
Portable Media Devices - {640167b4-59b0-47a6-b335-a6b3c0695aea} -  [Microsoft Corporation] : C:\Windows\system32\audiodev.dll
PhotoAcqDropTarget - {00f20eb5-8fd6-4d9d-b75e-36801766c8f1} -  [Microsoft Corporation] : C:\Program Files\Windows Photo Gallery\PhotoAcq.dll
Windows Defender IOfficeAntiVirus implementation - {2781761E-28E0-4109-99FE-B9D127C57AFE} -  [Microsoft Corporation] : C:\Program Files\Windows Defender\MpOav.dll
Windows Photo Gallery Viewer Image Verbs - {FFE2A43C-56B9-4bf5-9A79-CC6D4285608A} -  [Microsoft Corporation] : C:\Program Files\Windows Photo Gallery\PhotoViewer.dll
Tablet PC Input Panel - {15D633E2-AD00-465b-9EC7-F56B7CDF8E27} -  [Microsoft Corporation] : C:\Program Files\Common Files\microsoft shared\ink\TipBand.dll
Windows gadget DropTarget - {6b9228da-9c15-419e-856c-19e768a13bdc} -  [Microsoft Corporation] : C:\Program Files\Windows Sidebar\sbdrop.dll
Microsoft Office OneNote Namespace Extension for Windows Desktop Search - {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\ONFILTER.DLL
Microsoft Office Metadata Handler - {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} -  [Microsoft Corporation] : C:\Program Files\Common Files\microsoft shared\OFFICE12\msoshext.dll
Microsoft Office Thumbnail Handler - {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} -  [Microsoft Corporation] : C:\Program Files\Common Files\microsoft shared\OFFICE12\msoshext.dll
 - {06A2568A-CED6-4187-BB20-400B8C02BE5A} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe
Windows Live Photo Gallery Import Autoplay Shim - {00F33137-EE26-412F-8D71-F84E4C2C6625} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Windows Live Photo Gallery Viewer Shim - {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Windows Live Photo Gallery Editor Shim - {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Windows Live Photo Gallery Viewer Autoplay Shim - {00F30F90-3E96-453B-AFCD-D71989ECC2C7} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll
Mes dossiers de partage - {FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\fsshext.8.5.1302.1018.dll
 - {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} -  [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.4\PROGRAM\SHLXTHDL.DLL
 - {087B3AE3-E237-4467-B8DB-5A38AB959AC9} -  [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.4\PROGRAM\SHLXTHDL.DLL
 - {63542C48-9552-494A-84F7-73AA6A7C99C1} -  [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.4\PROGRAM\SHLXTHDL.DLL
 - {3B092F0C-7696-40E3-A80F-68D74DA84210} -  [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.4\PROGRAM\SHLXTHDL.DLL
Shell Extension for Malware scanning - {45AC2688-0253-4ED8-97DE-B5370FA7D48A} -  [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll

Protocol Handler
 - {828030A1-22C1-4009-854F-8E305202313F} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
MHTML Asynchronous Pluggable Protocol Handler - {05300401-BCBC-11d0-85E3-00C04FD85AB4} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
 - {828030A1-22C1-4009-854F-8E305202313F} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll

Services
23 - : C:\Acer\ALaunch\ALaunchSvc.exe
23 - [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
23 - [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
23 - [Alps Electric Co., Ltd.] : C:\Windows\system32\DRIVERS\Apfiltr.sys
23 - : C:\Windows\system32\DRIVERS\atksgt.sys
23 - [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys
23 - [Avira GmbH] : C:\Windows\system32\DRIVERS\avipbb.sys
23 - [Broadcom Corporation] : C:\Windows\system32\DRIVERS\bcmwl6.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\bowser.sys
23 - [Microsoft Corporation] : C:\Windows\system32\Drivers\dfsc.sys
23 - [Dritek System Inc.] : C:\Windows\system32\DRIVERS\DKbFltr.sys
23 - [Dritek System Inc.] : C:\Program Files\Launch Manager\DPortIO.sys
23 - [HiTRSUT] : C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
23 - [Acer Inc.] : C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
23 - [Acer Inc.] : C:\Acer\Empowering Technology\eNet\eNet Service.exe
23 - [Acer Inc.] : C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
23 - : C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
23 - [France Telecom SA] : C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
23 - [Conexant Systems, Inc.] : C:\Windows\system32\DRIVERS\HSX_DPV.sys
23 - [Conexant Systems, Inc.] : C:\Windows\system32\DRIVERS\HSXHWAZL.sys
23 - [Intel Corporation] : C:\Windows\system32\DRIVERS\igdkmd32.sys
23 - : C:\Acer\Empowering Technology\eRecovery\int15.sys
23 - [Realtek Semiconductor Corp.] : C:\Windows\system32\drivers\RTKVHDA.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\msiscsi.sys
23 - [Hewlett-Packard Company] : C:\Program Files\Common Files\LightScribe\LSSrvc.exe
23 - : C:\Windows\system32\DRIVERS\lirsgt.sys
23 - [Conexant] : C:\Windows\system32\DRIVERS\mdmxsdk.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\mrxsmb10.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\mssmbios.sys
23 - [NewTech Infosystems, Inc.] : C:\Windows\system32\DRIVERS\NTIDrvr.sys
23 - [HiTRUST] : C:\Windows\system32\DRIVERS\psdfilter.sys
23 - [HiTRUST] : C:\Windows\system32\drivers\PSDNServ.sys
23 - [HiTRUST] : C:\Windows\system32\drivers\psdvdisk.sys
23 - [Sonic Solutions] : C:\Windows\system32\Drivers\PxHelp20.sys
23 - : C:\Program Filesnamfler
aofsvc.exe
23 - [Microsoft Corporation] : C:\Windows\system32\driversdpencdd.sys
23 - : C:\Program Files\CyberLink\Shared Files\RichVideo.exe
23 - [Sunbelt Software, Inc.] : C:\Windows\system32\drivers\SbFw.sys
23 - [Sunbelt Software, Inc.] : C:\Windows\system32\DRIVERS\sbfwim.sys
23 - [Sunbelt Software, Inc.] : C:\Windows\system32\drivers\sbhips.sys
23 - [Sunbelt Software, Inc.] : C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
23 - [Microsoft Corporation] : C:\Windows\system32\SLsvc.exe
23 - [Sunbelt Software, Inc.] : C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
23 - [Avira GmbH] : C:\Windows\system32\DRIVERS\ssmdrv.sys
23 - [Conexant Systems, Inc.] : C:\Windows\system32\DRIVERS\HSX_CNXT.sys
23 - [acer] : C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
23 - [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnetwk.exe
23 - [Conexant Systems, Inc.] : C:\Windows\system32\DRIVERS\xaudio.sys
23 - [Conexant Systems, Inc.] : C:\Windows\system32\drivers\XAudio.exe
23 - [Cyberlink Corp.] : C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl

Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui, DLLName :  [Intel Corporation] : C:\Windows\system32\igfxdev.dll

IE URL Search Hooks
Search Class - {{08C06D61-F1F3-4799-86F8-BE1A89362C85}} -  [France Telecom SA] : C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {{EF99BD32-C1FB-11D2-892F-0090271D4F88}} -  [Yahoo! Inc.] : C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll

Threat Files
<RiskTool.Reboot.f> : C:\Program Files\Navilog1\Reboot.exe

Advanced Files Report
%SYSDIR%\RtkAPO.dll [Realtek Semiconductor Corp.] [Realtek(r) LFX/GFX DSP component] MD5=CFD7A46928597BF4FA8C1A268D1F6A08 SIZE=2045440
%SYSDIR%\SLsvc.exe [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=0BA91E1358AD25236863039BB2609A2E SIZE=2623488
%SYSDIR%\CNBLM3_2.DLL [CANON INC.] [Canon Inkjet Printer Driver] MD5=B511B56672169526847240CD4FA30AA3 SIZE=172544
%SYSDIR%\EP0SLM00.DLL [SEIKO EPSON CORPORATION] [EPSON Printer Driver] MD5=4AB80A11CFB0FEEFAACFDB71B1DFEFE8 SIZE=62976
%SYSDIR%\E_FLBCEE.DLL [SEIKO EPSON CORPORATION] [EPSON Bi-directional Printer] MD5=A4EC6B9766E2A7FAA77283697BC5C307 SIZE=76800
%SYSDIR%\spool\PRTPROCS\W32X86\CNBPP3.DLL [CANON INC.] [Canon Inkjet Printer Driver] MD5=CE859BBE55692678C20D99B68690F808 SIZE=70144
%SYSDIR%\spool\PRTPROCS\W32X86\EP0NPP01.DLL [SEIKO EPSON CORPORATION] [EPSON Print Processor ESC/P] MD5=1A2CB2A86A6C3F0571394A9BBC0FB805 SIZE=32768
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\sched.exe [Avira GmbH] [AntiVir Workstation] MD5=1C51917C9B30530A781F438F6A4AC49F SIZE=68865
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\schedr.dll [Avira GmbH] [AntiVir Workstation] MD5=EFBABD350FA0E4804CD98CE6FFE98743 SIZE=7937
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\avevtlog.dll [Avira GmbH] [AntiVir Workstation] MD5=3A5874F76D8EA78F5AB0B158191C1EE4 SIZE=114945
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\sqlite3.dll [SQLite Database] MD5=A467ACDA6C73AE3F8DBC6B94602921B5 SIZE=339968
%SYSDIR%\igfxTMM.dll [Intel Corporation] [Intel(R) Common User Interface] MD5=412C0E1B515AB44F45037CD495D6A1BE SIZE=245760
%SYSDIR%\igfxdev.dll [Intel Corporation] [Intel(R) Common User Interface] MD5=6B01DAD4CB6B2BB507A268DD0DFEF04F SIZE=204800
%SYSDIR%\l3codeca.acm [Fraunhofer Institut Integrierte Schaltungen IIS] [MPEG Layer-3 Audio Codec for MSACM] MD5=733A9243A14753652F9FA9C8BBC44F98 SIZE=62464
%SystemDiskRoot%\Acer\Empowering Technology\EPOWER\SysHook.dll [SysHook Dynamic Link Library] MD5=DBEBE0C451F1EE6ED9028D116E77495B SIZE=208896
%PROGRAMFILES%\Malwarebytes' Anti-Malware\mbamext.dll [Malwarebytes Corporation] [Malwarebytes' Anti-Malware] MD5=B3D6BE8F68F4AAF9065B3A77E236F6DD SIZE=73336
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\shlext.dll [Avira GmbH] [AntiVir  Workstation] MD5=655A36AB49696FFE33FB376719B298C1 SIZE=69889
%PROGRAMFILES%\EPSON\Creativity Suite\Easy Photo Print\EPPShell.dll [SEIKO EPSON CORPORATION] [EPPShell] MD5=5E009CF8CB2AB33E1BA2856CF2231A6D SIZE=69632
%SYSDIR%\eDSshellExt.dll [HiTRUST] [eDSshellExt Module] MD5=AE90C8CDA79B9DBE2D8DA3AE11BCB8A2 SIZE=315392
%SYSDIR%\CryptoAPI.dll [HiTRUST] [CryptoAPI] MD5=DF53B8BD2C2D86E8CFEB4BB488B5EA37 SIZE=401408
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\cclib.dll [Avira GmbH] [AntiVir Workstation] MD5=18F68A243BDA79BBA9D01FA39ECE8598 SIZE=160001
%PROGRAMFILES%\avira\antivir personaledition classic\ccgen.dll [Avira GmbH] [AntiVir Workstation] MD5=B9875A5471B3CF425BAAF9B3CE813A9C SIZE=270593
%PROGRAMFILES%\avira\antivir personaledition classic\ccgenrc.dll [Avira GmbH] [AntiVir Workstation] MD5=856DBDB418067A7E87A2302F94AC31F5 SIZE=17665
%PROGRAMFILES%\avira\antivir personaledition classic\ccguard.dll [Avira GmbH] [AntiVir Workstation] MD5=3E1F96DE993B8D6E87ACF9146F9DF0D9 SIZE=217345
%PROGRAMFILES%\avira\antivir personaledition classic\ccgrdrc.dll [Avira GmbH] [AntiVir Workstation] MD5=B09D14A806D30132C427AA3745C46D54 SIZE=20225
%PROGRAMFILES%\avira\antivir personaledition classic\avipc.dll [Avira GmbH] [AntiVir Workstation] MD5=922EE25E719104E6D0E166451118E9F4 SIZE=73985
%PROGRAMFILES%\avira\antivir personaledition classic\ccupdate.dll [Avira GmbH] [AntiVir Workstation] MD5=E19C269071C08D9D30D91CE896480CA6 SIZE=114945
%PROGRAMFILES%\avira\antivir personaledition classic\ccupdrc.dll [Avira GmbH] [AntiVir Workstation] MD5=445F5AF6DFC84EFECB242209F3C12412 SIZE=12545
%PROGRAMFILES%\avira\antivir personaledition classic\cclic.dll [Avira GmbH] [AntiVir Workstation] MD5=708A5119B4C625B1AD300CD351A61F9B SIZE=61697
%PROGRAMFILES%\avira\antivir personaledition classic\cclicrc.dll [Avira GmbH] [AntiVir Workstation] MD5=35443145C1F3987262B8DD2AC6D53B05 SIZE=5889
%PROGRAMFILES%\avira\antivir personaledition classic\ccmsg.dll [Avira GmbH] [AntiVir Workstation] MD5=61DFF7D04472B97F33D66BF0934A4D48 SIZE=155905
%PROGRAMFILES%\Windows Media Player\wmpnscfg.exe [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=35937EAD711207544E219C2A19A78A7D SIZE=202240
%SystemDiskRoot%\Acer\ALaunch\ALaunchSvc.exe [ALaunchSvc Service Image] MD5=3845B6555DE995F6C0C07AE2ABCC0532 SIZE=50688
%SystemDiskRoot%\Acer\ALaunch\ALaunchInterface.dll [Acer Inc.] [ALaunchInterface Dynamic Link Library] MD5=4E39A623E762CB08AD0308F2A1858086 SIZE=32256
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\avguard.exe [Avira GmbH] [AntiVir Workstation] MD5=980825559F7C70B565ADD5F5C71CFE8F SIZE=147201
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\guardmsg.dll [Avira GmbH] [AntiVir Workstation] MD5=0F3552C80887EB93BE8FFAF26F8D7006 SIZE=46849
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVPREF.DLL [Avira GmbH] [AntiVir Workstation] MD5=0B4552C1E399392E0494D074941C6218 SIZE=25857
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\SMTPLIB.DLL [Avira GmbH] [AntiVir Workstation] MD5=F2D83E33EC3F82835FA631F8FF2CCE64 SIZE=28929
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVGIO.DLL [Avira GmbH] MD5=24D54A9DF157869A7DE4D61D37D10FC8 SIZE=122113
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aecore.dll [Avira GmbH] [AVCORE] MD5=071A19036ED2E1529B80DEA1831F4DF7 SIZE=168309
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aevdf.dll [Avira GmbH] [AVVDF] MD5=C9FFFD5005F4FE7131DF6128E98E3A6A SIZE=102772
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aescript.dll [Avira GmbH] [AVSCRIPT] MD5=B49404B1A7B0E0478BAA9F1B5BF9392A SIZE=229754
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aescn.dll [Avira GmbH] [AVSCN] MD5=62AC4FEC92B9528525F8D8205A835281 SIZE=115060
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aerdl.dll [Avira GmbH] [AVRDL] MD5=332C130AB913BEA0A40930E5D4FB0B22 SIZE=418164
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aepack.dll [Avira GmbH] [AVPACK] MD5=B34B6ED9BD1AF12CAA6E3A6B59DCC1C6 SIZE=364918
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\unacev2.dll [ACE Compression Software] [UNACE - freeware ACE extraction component] MD5=DE02C4D04088B69E64ECC30A3D9E22E5 SIZE=77312
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aeoffice.dll [Avira GmbH] [AVOFFICE] MD5=0269D183AFF171EF315F20C1AB6CA901 SIZE=192889
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aeheur.dll [Avira GmbH] [AVHEUR] MD5=8B520347B5D27B251B68EB3323F78031 SIZE=1147253
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aehelp.dll [Avira GmbH] [AVHELP] MD5=90037FB231278570579CDA92618517CE SIZE=115061
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aegen.dll [Avira GmbH] [AVGEN] MD5=CF96C4B8743FDFBE0CFC48050322D8AA SIZE=299379
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\aeemu.dll [Avira GmbH] [AVEMU] MD5=6C91B7298E48DF6D3A0DB7F922975103 SIZE=430450
%SystemDiskRoot%\Acer\Empowering Technology\eDataSecurity\eDSService.exe [HiTRSUT] [eDataSecurity Management] MD5=F54907AA07F60AFF81E1E09E97AF98B0 SIZE=457512
%SYSDIR%\PSDUtil.dll [HiTRUST] MD5=36B091CB0B6FDBE01DF37425014B2BB2 SIZE=121344
%SYSDIR%\sysenv.dll [HiTRUST] [SysEnv] MD5=2FB1494C450FB7B0C350492ACC24607D SIZE=286720
%SystemDiskRoot%\Acer\Empowering Technology\eLock\Service\eLockServ.exe [Acer Inc.] [Acer eLock Management] MD5=FB5383BFD4DEC6792AAEF76C9343ECFF SIZE=24576
%SystemDiskRoot%\Acer\Empowering Technology\eLock\Service\eLock.Serv.Main.dll [Acer Inc.] [Acer eLock Management] MD5=741FF64FC61769C18B949E86FD96CD82 SIZE=69632
%SystemDiskRoot%\Acer\Empowering Technology\eLock\Service\eLock.Serv.Interface.dll [Acer Inc.] [Acer eLock Management] MD5=503A72D3B29427A80C610C92163830E7 SIZE=20480
%SystemDiskRoot%\Acer\Empowering Technology\eLock\Service\eLock.Serv.Library.dll [Acer Inc.] [Acer eLock Management] MD5=9C37157E995C4F14112B437FBC445B88 SIZE=102400
%SystemDiskRoot%\Acer\Empowering Technology\eNet\eNet Service.exe [Acer Inc.] [Acer eNet Management] MD5=9316C26F089CF2CEA2BD1496AC9F38A4 SIZE=135168
%SystemDiskRoot%\Acer\Empowering Technology\eNet\eNetServiceInterface.dll [Acer Inc.] [Acer eNet Management] MD5=84E951281677788DB8FD9D0A669A8E0F SIZE=34816
%COMMONFILES%\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [France Telecom SA] [CSS-Corporate] MD5=7DB02C7ED0C79C40EC1D845691E98FF5 SIZE=57344
%COMMONFILES%\France Telecom\Shared Modules\FTRTSVC\0\IfHelper.dll [France Telecom SA] [CSS-Corporate] MD5=C91343ADCA50FA8168BC6EFFC6721511 SIZE=22016
%COMMONFILES%\LightScribe\LSSrvc.exe [Hewlett-Packard Company] [LightScribe] MD5=793FF718477345CD5D232C50BED1E452 SIZE=61440
%COMMONFILES%\LightScribe\LSSProxy.dll [Hewlett-Packard Company] [LightScribe] MD5=D7EB32B51B7472FBEE86BFA47B3C4BC5 SIZE=81920
%COMMONFILES%\LightScribe\LSLog.dll [Hewlett-Packard Company] [LightScribe] MD5=0EE266A90D43E82A07CF33755D6DE1CC SIZE=32768
%SystemDiskRoot%\Acer\Mobility Center\MobilityService.exe MD5=842684E0DF20A59E293DA1C6F0DFE261 SIZE=107008
%SystemDiskRoot%\Acer\Mobility Center\MobilityInterface.dll MD5=30A8C2FBE6A8585A4A7151EDF1F61F79 SIZE=33280
%PROGRAMFILES%namfler
aofsvc.exe MD5=F91DADB2654E29363ADB16717D323441 SIZE=55296
%PROGRAMFILES%\CyberLink\Shared Files\RichVideo.exe [RichVideo Module] MD5=0A468612A19FEB657D127E7C4810F6FC SIZE=266343
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbPFLnch.exe [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=87CDF3330768BD122112CE6D43462E15 SIZE=95528
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbPFSvc.exe [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=A75C076E29B93C951A7E4B9BEF1E169A SIZE=1357096
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\kticonv.dll [Free Software Foundation] [libiconv: character set conversion library] MD5=EADF6E67D2F2B445E07B55073264B4FF SIZE=888832
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\PocoFoundation.dll MD5=8342EA2FB9B9DED9634D5E684A81AF0A SIZE=859648
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\PocoXml.dll MD5=668AAB2221F2C588A2200543CCF14FEA SIZE=470016
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\PocoExt.dll MD5=50764019F146982007AC5DEF44971708 SIZE=18432
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\LibEay32.dll MD5=96373C802D27D4F942B3D8E24F1CBDCE SIZE=827392
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SSLeay32.dll MD5=E4DF774312A6C2215D36F42E2CE8D4D8 SIZE=155648
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\CurlLib.dll [The cURL library, https://curl.se/] [The cURL library] MD5=8156230FCFFADDB2A6B4623D64CE8282 SIZE=290816
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbPFWsc.dll [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=D6AEE19386A291E94A4816F871F234EF SIZE=79144
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbFwe.dll [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=AE67C16B002357489D69E12A04D20ACD SIZE=275752
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbFw.dll [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=98C7C959AE8BF88DEA33AB08DFB9C8A7 SIZE=95528
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbFwIm.dll [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=7AB2E1FE7DF367526F9955F2B34F3935 SIZE=91432
%SystemDiskRoot%\Acer\Empowering Technology\eNet\eNMTray.exe [Acer Inc.] [Acer eNet Management] MD5=5B1A52A2F4573A1CA947A3AF859CF6F7 SIZE=753664
%SystemDiskRoot%\Acer\Empowering Technology\ENET\eNMIPCmm.dll [Acer Inc.] [Acer eNet Management] MD5=90E857889D71C3D46D60BD352C8DAB99 SIZE=77824
%SystemDiskRoot%\Acer\Empowering Technology\ENET\Network.dll [Acer Inc.] [Acer eNet Management] MD5=E6AE8A882646891C35AF11300BF9A7EA SIZE=135168
%SystemDiskRoot%\Acer\Empowering Technology\ENET\NetworkCardMgr.dll [Acer Inc.] [Acer eNet Management] MD5=0DD9A112F0FA435D354EB4BDF3298B7D SIZE=11776
%SystemDiskRoot%\Acer\Empowering Technology\ENET\eNetHook.dll [acer] [acer eNetManagement] MD5=2BB5B239A4501C0A846A2E43D3A98986 SIZE=90112
%SystemDiskRoot%\Acer\Empowering Technology\eNet\ICmdDispatcher.dll [Acer Inc.] [Acer eNet Management] MD5=44DB6DFF9CF3902B120BF846F1AE96D6 SIZE=43520
%SystemDiskRoot%\Acer\Empowering Technology\eNet\PfMgr.dll [Acer Inc.] [Acer eNet Management] MD5=CA4DA3278410FF88A6B56FD4213963C2 SIZE=118784
%SystemDiskRoot%\Acer\Empowering Technology\eNet\Wlan.dll [Acer Inc.] [Acer eNet Management] MD5=152DBB3DBBB3B7110FECEBDB34CC7248 SIZE=75264
%SystemDiskRoot%\Acer\Empowering Technology\eNet\Acer.Empowering.Windows.Forms.dll [Acer inc.] [Acer Empowering UI Components] MD5=72A2A89CFE8ECEEBE84EFBE5CBBC1DD7 SIZE=1503232
%SystemDiskRoot%\Acer\Empowering Technology\eNet\MultiLang.dll [Acer Inc.] [Acer eNet Management] MD5=A36A62960D9DA21FB5FDD7276C5BEACD SIZE=39424
%SystemDiskRoot%\Acer\Empowering Technology\eNet\ProfileSwitch.dll [Acer Inc.] [Acer eNet Management] MD5=F9BD37444B07018D5BF56D49EC12DC03 SIZE=88064
%SystemDiskRoot%\Acer\Empowering Technology\eNet\Diagnosis.dll [Acer Inc.] [Acer eNet Management] MD5=76605BBAC5E28AB48EC0FACE46EE743E SIZE=78336
%SystemDiskRoot%\Acer\Empowering Technology\ePower\ePower_DMC.exe [Acer Inc.] [Acer ePower Management] MD5=0F0E9EBE47A7B2BD7444424473FA3962 SIZE=528384
%SystemDiskRoot%\Acer\Empowering Technology\ePower\WMIInterface.dll [acer] [WMIInter Dynamic Link Library] MD5=442E9FBBEEBD916519D8381BC2F71EA9 SIZE=34816
%SystemDiskRoot%\Acer\Empowering Technology\ePower\Acer.Empowering.Windows.Forms.dll [Acer inc.] [Acer Empowering UI Components] MD5=72A2A89CFE8ECEEBE84EFBE5CBBC1DD7 SIZE=1503232
%SystemDiskRoot%\Acer\Empowering Technology\ePower\Wlan.dll [Wlan Dynamic Link Library] MD5=929D862F229AB1CD4BD38714D7554AC2 SIZE=73216
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe [Acer Inc.] MD5=39CBE2E778299F468BBD5B45CFB90A70 SIZE=323584
%SystemDiskRoot%\Acer\Empowering Technology\log4net.dll [The Apache Software Foundation] [log4net] MD5=5F3BD963F02108C36592B5728FA725C5 SIZE=270336
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll [DialogManager] MD5=4CD3DCA5F48D7DCE9A3EE90DF83A1223 SIZE=57344
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Shared.UI.dll [Acer Inc.] MD5=6D0DB7B8895BBBD610A8D6AF9672431A SIZE=53248
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Windows.Forms.dll [Acer inc.] [Acer Empowering UI Components] MD5=72A2A89CFE8ECEEBE84EFBE5CBBC1DD7 SIZE=1503232
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Presenter.dll [Acer Inc.] MD5=13A8CEC1D544C448F974912690277B7E SIZE=49152
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.LaunchBarView.dll [Acer Inc.] MD5=8092BC19097A8D5B07A44E49D3AA239D SIZE=1851392
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Shared.dll [Acer Inc.] MD5=B044D50A56FE16FC9F3D5445E9BF106F SIZE=32768
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Host.dll [Acer Inc.] [Empowering Technology] MD5=1B05CFDBF6E769028703B6368E91BA8D SIZE=45056
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll MD5=50413B53240D067EADF1E7BD6A38D0F2 SIZE=24576
%SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Interface.dll [Acer Inc.] [Empowering Technology] MD5=363EC83893477E492C2EA52FA95253DC SIZE=20480
%SystemDiskRoot%\Acer\Empowering Technology\fr\Acer.Empowering.Framework.LaunchBarView.resources.dll [Acer Inc.] MD5=98B06B65AC756BF586D8BBDA859AEE0A SIZE=110592
%SystemDiskRoot%\Acer\Empowering Technology\ePower\ePower_UI.dll [Acer Inc.] [Empowering Technology] MD5=E75999892CEC703B3E1B5221B5BAC92A SIZE=1454080
%SystemDiskRoot%\Acer\Empowering Technology\ePresentation\ePresentationCTL.dll MD5=E09F72B19D45906CEB2115E55005BFC5 SIZE=307200
%SystemDiskRoot%\Acer\Empowering Technology\ePresentation\fr\ePresentationCTL.resources.dll MD5=F87747EEEC1912AADC3D4497741E4639 SIZE=77824
%SystemDiskRoot%\Acer\Empowering Technology\eDataSecurity\eDSplugin.dll [HiTRUST Inc.] [Acer eDataSecurity Management] MD5=320D3528DE1771C8C7E9B53DB0EBEF74 SIZE=217088
%SYSDIR%\ADMIN_CLASS_LIB.dll [HiTRUST] [eDataSecurity Aministration Core Class library] MD5=B9876A758B370FF98E21B95A855BFE9B SIZE=122880
%SYSDIR%\keyManager.dll [HiTRSUT] [keyManager] MD5=69A6F66E921AE6A6814F021F7E9FA1D0 SIZE=237568
%SYSDIR%\ShowErrMsg.dll [ShowErrMsg] MD5=FF265743D5FA487D5721B4E94D17842A SIZE=63488
%SystemDiskRoot%\Acer\Empowering Technology\ePower\fr\ePower_UI.resources.dll [Acer Inc.] [Empowering Technology] MD5=7EF3AD3261C43E0D6D7BDE8568C3C9F6 SIZE=503808
%SystemDiskRoot%\Acer\Empowering Technology\eLock\eLockCTL.dll MD5=59870ABA7EAB51EBD56F21D90FBD456B SIZE=831488
%SystemDiskRoot%\Acer\Empowering Technology\eLock.Serv.Interface.dll [Acer Inc.] [Acer eLock Management] MD5=503A72D3B29427A80C610C92163830E7 SIZE=20480
%SystemDiskRoot%\Acer\Empowering Technology\eLock\eLock.Client.dll [Acer Inc.] [Acer eLock Management] MD5=490001CC1C1A5B2E120199480BA6ADFF SIZE=20480
%SystemDiskRoot%\Acer\Empowering Technology\eLock\fr\eLockCTL.resources.dll MD5=8C19F89198CD81726FAAF2C8B4B56866 SIZE=143360
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\eRecoveryUI.dll [Acer Inc.] [Empowering Technology] MD5=4F0D42339259D4AB955B565845BBE583 SIZE=2584576
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\ServiceInterface.dll [ServiceInterface] MD5=6B46E837EC3FF448A0665DC86C5208DC SIZE=16384
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\eSettings.Plugin.dll [eSettings.Plugin] MD5=A2906F5E57E6787E5C47BA0948C99C29 SIZE=28672
%SystemDiskRoot%\Acer\Empowering Technology\eSettings.Model.ComputerInterfaces.dll [ComputerInterfaces] MD5=AA6B27692B551811EC2F4E0D0D886197 SIZE=32768
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\eSettings.View.dll [eSettings.View] MD5=06D9E19A9AB02A26B8A9E553F6893B0C SIZE=983040
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\eSettings.Presenter.dll [Presenter.Provider] MD5=9BEEE0B1EF8904F69F36710A4382FA39 SIZE=143360
%SystemDiskRoot%\Acer\Empowering Technology\eNet\eNetPlugin.dll MD5=72EE63FF69A73BA13DBB8FC9FB69ACBB SIZE=249856
%SystemDiskRoot%\Acer\Empowering Technology\eNet\eNet.dll [Acer Inc.] [Acer eNet Management] MD5=282ABEBF70112D79CD92DFD3046CDEEA SIZE=1589248
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\fr\eRecoveryUI.resources.dll [Acer Inc.] [Empowering Technology] MD5=2B71B6F1880119D1706854ECE560BF8B SIZE=135168
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\fr\eSettings.Plugin.resources.dll [eSettings.Plugin] MD5=27BB06D529424198535C54EF75A80CB8 SIZE=3584
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\fr\eSettings.Presenter.resources.dll [Presenter.Provider] MD5=A8F37FEB1D030ECDEFAF43765A2A48C2 SIZE=11264
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\eRAgent.exe [Acer Inc.] [Acer eRecovery Management] MD5=4F779AD993A2975D945EE6985CAC0FEA SIZE=397312
%SYSDIR%\xrwcscd.dll [Xerox Corporation] [WorkCentre/Pro] MD5=0DE9ACF3287002C3D982CA80BE2289A5 SIZE=96768
%SYSDIR%\xrwc4ppb.dll [Xerox] [Xerox WorkCentre/Pro] MD5=28804418C0109F94CC700050678CA437 SIZE=83456
%SYSDIR%\drivers\XAudio.exe [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=F82FC2C30A19442B95AE554215837C46 SIZE=386560
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [Acer Inc.] [eRecoveryService] MD5=3D184410EF5EE017E186AC96181B3FF8 SIZE=53248
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\IERYETF.dll [IERYETF] MD5=DADAD303DC0871591997A05CAAB891AE SIZE=16384
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\Service\capuserv.exe [Service] MD5=CF2584CDF90DA24D3044021AAAD5DBAB SIZE=24576
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\Service\log4net.dll [The Apache Software Foundation] [log4net] MD5=5F3BD963F02108C36592B5728FA725C5 SIZE=270336
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\Service\eSettings.Model.Computer.dll [Computer] MD5=8746B3414581B8ADA2B7B309E024094F SIZE=114688
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\Service\eSettings.Model.ComputerInterfaces.dll [ComputerInterfaces] MD5=AA6B27692B551811EC2F4E0D0D886197 SIZE=32768
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\Service\eSettings.Model.Library.dll [Library] MD5=BC7373BD61CCC341487212B1986A6895 SIZE=114688
%SystemDiskRoot%\Acer\Empowering Technology\eSettings\Service\CPUID.dll MD5=D5258948FF159510D16D55FD4CF7A41B SIZE=6656
%SystemDiskRoot%\Acer\Empowering Technology\ePower\ePowerSvc.exe [acer] [Acer ePower Management] MD5=EE80AC462A171DBF06EEB2058B5D3BC6 SIZE=163840
%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=3978704576A121A9204F8CC49A301A9B SIZE=896512
%PROGRAMFILES%\Sunbelt Software\Personal Firewall\SbPFCl.exe [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=6C31956255BF3371E5A7A7A1A242C38C SIZE=1705256
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\avscan.exe [Avira GmbH] [AntiVir Workstation] MD5=5C8E965EA3C4B01AD8B60BB3C4BB8696 SIZE=311553
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVSCAN.DLL [Avira GmbH] [AntiVir Workstation] MD5=C4323619B4871E6AF195919884203F34 SIZE=53505
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\LUKE.DLL [Avira GmbH] [AntiVir Workstation] MD5=C23305C10C07203AF8502929EBE70EBC SIZE=151809
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\LUKERES.DLL [Avira GmbH] [AntiVir Workstation] MD5=F47F23C1FA2BCDABC430333C0E8C71CD SIZE=12033
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVREP.DLL [Avira GmbH] [AVREP] MD5=6760E9DF90E779A073830888F55C03AE SIZE=155688
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVWINLL.DLL [Avira GmbH] [AntiVir Windows Workstation] MD5=FF508E14A676503D279D2C1D8B25C01A SIZE=14593
%SystemDiskRoot%\Acer\Empowering Technology\eAPLauncher.exe [Acer Inc.] [Acer eAP Launch Tool] MD5=57554A2CA345734696AF72BEEE28B718 SIZE=535336
%PROGRAMFILES%\Yahoo!\Companion\Installs\cpn0\yt.dll [Yahoo! Inc.] [Yahoo! Toolbar] MD5=3374C2A0344BE49368DC342329404B49 SIZE=436288
%SYSDIR%\inetcomm.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=366DE53C91D95F081907FEEC352EDA2C SIZE=738304
%WINDIR%\MSAgent\agentpsh.dll [Microsoft Corporation] [Microsoft Agent Property Sheet Handler] MD5=F0B6186AEB591642784D6FFDC2D625BC SIZE=30720
%SYSDIR%\zipfldr.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=F41857E440A9DF3FD5A543C8B2A53048 SIZE=342016
%PROGRAMFILES%\Windows Photo Gallery\PhotoViewer.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=2AAD5D8541ABFD8EC8877773291250AC SIZE=2314240
%PROGRAMFILES%\Windows Media Player\wmpband.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=E7369CA015162EF4F9E207897EF7DED8 SIZE=99328
%SYSDIR%\emdmgmt.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=669019C26C94C013C889C0E5CF087C69 SIZE=564736
%SYSDIR%\RUNDLL32.EXE [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=4B555106290BD117334E9A08761C035A SIZE=44544
%SYSDIR%\audiodev.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=67C30FAFA58BD7E02A9DA8BE28512934 SIZE=244224
%PROGRAMFILES%\Windows Photo Gallery\PhotoAcq.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=B5D79B4F81DAA75BBB3DD9F481ADF41B SIZE=1030144
%PROGRAMFILES%\Windows Defender\MpOav.dll [Microsoft Corporation] [Windows Defender] MD5=B7DC98F6F4E7611A9C0849945FB28FB9 SIZE=90680
%COMMONFILES%\microsoft shared\ink\TipBand.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=A8F2BB769FA35F9C2867746B671EB662 SIZE=114688
%PROGRAMFILES%\Windows Sidebar\sbdrop.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=A74701976D6D75099B9FCA993685C452 SIZE=66048
epm-po.dll
%PROGRAMFILES%\Microsoft Office\Office12\ONFILTER.DLL [Microsoft Corporation] [Microsoft Office OneNote] MD5=DF8AADA641FE10C4748899F62A530A28 SIZE=75144
%COMMONFILES%\microsoft shared\OFFICE12\msoshext.dll [Microsoft Corporation] [Microsoft Office] MD5=0079E7EE294AC629D57FB8259F5A803E SIZE=935832
%PROGRAMFILES%\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe [Microsoft Corporation] [Windows Live Photo Gallery] MD5=86C67242AC4ADA2C20D0748157E3ED8C SIZE=227456
%PROGRAMFILES%\Windows Live\Photo Gallery\PhotoViewerShim.dll [Microsoft Corporation] [Windows Live Photo Gallery] MD5=024F4D95154039B2292F4B856A52AB7D SIZE=46112
%SYSDIR%undll32.exe "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoViewer.dll",PhotoViewerComServer {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C}
%SYSDIR%undll32.exe "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoViewer.dll",PhotoViewerComServer {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C}
%SYSDIR%undll32.exe "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoViewer.dll",PhotoViewerComServer {00F374B7-B390-4884-B372-2FC349F2172B}
%PROGRAMFILES%\Windows Live\Messenger\fsshext.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=8BDE1F61DFBAAE7A2916170E8B75FE0F SIZE=329240
%PROGRAMFILES%\OPENOFFICE.ORG 2.4\PROGRAM\SHLXTHDL.DLL [Sun Microsystems, Inc.] MD5=6CAAD84E67A4C29EFEDE6C7CDC369158 SIZE=339968
%SYSDIR%\svchost.exe -k netsvcs
%SYSDIR%\DRIVERS\Apfiltr.sys [Alps Electric Co., Ltd.] [Alps Touch Pad Driver] MD5=DB8EA68E5864ADF61B73516788659E71 SIZE=154624
%SYSDIR%\DRIVERS\atksgt.sys MD5=5B80E84AF6B02ECAB72DAE9AFEE06309 SIZE=165376
%SYSDIR%\svchost.exe -k LocalSystemNetworkRestricted
%SYSDIR%\svchost.exe -k LocalServiceNetworkRestricted
%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [Avira GmbH] [AntiVir Workstation] MD5=D1A025056656C572AD90CC6C2BFBE9F6 SIZE=49472
%SYSDIR%\DRIVERS\avipbb.sys [Avira GmbH] MD5=1A1068D7C0E1C836164ED924390CB407 SIZE=79424
%SYSDIR%\DRIVERS\bcmwl6.sys [Broadcom Corporation] [Broadcom 802.11 Network Adapter wireless driver] MD5=C052C0B184FA6801C43CEE12145C397A SIZE=691192
%SYSDIR%\svchost.exe -k LocalServiceNoNetwork
%SYSDIR%\DRIVERS\bowser.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=74B442B2BE1260B7588C136177CEAC66 SIZE=69632
%SYSDIR%\svchost.exe -k bthsvcs
%SYSDIR%\svchost.exe -k DcomLaunch
%SYSDIR%\Drivers\dfsc.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=9E635AE5E8AD93E2B5989E2E23679F97 SIZE=75264
%SYSDIR%\DRIVERS\DKbFltr.sys [Dritek System Inc.] [Dritek Keyboard Filter Driver] MD5=73BAF270D24FE726B9CD7F80BB17A23D SIZE=21264
%SYSDIR%\svchost.exe -k NetworkService
%PROGRAMFILES%\Launch Manager\DPortIO.sys [Dritek System Inc.] [DPortIO] MD5=5C918D413F5837E67A85775C9873775E SIZE=20112
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\DRIVERS\HSX_DPV.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=3F53B4AF98F8FD83B7F0B8B65D2D90A7 SIZE=984064
%SYSDIR%\DRIVERS\HSXHWAZL.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=194BC52FC0F53E540FAF9DE8A9C05255 SIZE=208384
%SYSDIR%\DRIVERS\igdkmd32.sys [Intel Corporation] [Intel Graphics Accelerator Drivers for Windows Vista(R)] MD5=9378D57E2B96C0A185D844770AD49948 SIZE=2302976
%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\int15.sys MD5=9D64201C9E5AC8D1F088762BA00FF3AB SIZE=76584
%SYSDIR%\drivers\RTKVHDA.sys [Realtek Semiconductor Corp.] [Realtek(r) High Definition Audio Function Driver] MD5=90A10B39896040B3154613C11C932AEB SIZE=1792792
%SYSDIR%\DRIVERS\msiscsi.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=F247EEC28317F6C739C16DE420097301 SIZE=181304
%SYSDIR%\DRIVERS\lirsgt.sys MD5=975B6CF65F44E95883F3855BAE8CECAF SIZE=18048
%SYSDIR%\DRIVERS\mdmxsdk.sys [Conexant] [Diagnostic Interface x86 Driver] MD5=0CEA2D0D3FA284B85ED5B68365114F76 SIZE=12672
%SystemDiskRoot%\Acer\Mobility Center\MobilityService.exe -p
%SYSDIR%\DRIVERS\mrxsmb10.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=67E55CED3FC143C82A8197988BFC1F9A SIZE=211968
%SYSDIR%\DRIVERS\mssmbios.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=E384487CB84BE41D09711C30CA79646C SIZE=31288
%SYSDIR%\DRIVERS\NTIDrvr.sys [NewTech Infosystems, Inc.] MD5=7F1C1F78D709C4A54CBB46EDE7E0B48D SIZE=6144
%SYSDIR%\svchost.exe -k NetworkServiceNetworkRestricted
%SYSDIR%\DRIVERS\psdfilter.sys [HiTRUST] MD5=E801D5CC24E1CF18FA87D24D7074B876 SIZE=20776
%SYSDIR%\drivers\PSDNServ.sys [HiTRUST] MD5=24B5E3429F7F0E779FC2E6E36A0A5F73 SIZE=16680
%SYSDIR%\drivers\psdvdisk.sys [HiTRUST] MD5=01CBFD08C0E8A6106BB26FCDA297154E SIZE=60712
%SYSDIR%\Drivers\PxHelp20.sys [Sonic Solutions] [PxHelp20] MD5=D86B4A68565E444D76457F14172C875A SIZE=43528
%SYSDIR%\driversdpencdd.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=9D91FE5286F748862ECFFA05F8A0710C SIZE=6144
%SYSDIR%\svchost.exe -k rpcss
%SYSDIR%\drivers\SbFw.sys [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=8FD0B55C7C800754FD83C6C270830071 SIZE=269736
%SYSDIR%\DRIVERS\sbfwim.sys [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=F01B8409A11C319E3C5B9DD418676D2C SIZE=65576
%SYSDIR%\drivers\sbhips.sys [Sunbelt Software, Inc.] [Sunbelt Personal Firewall] MD5=31CA701F26EA66468AD3C3C6498755CE SIZE=66600
%SYSDIR%\DRIVERS\ssmdrv.sys [Avira GmbH] MD5=3D2829FDE1C52FC64DA5413889CE4DEE SIZE=28352
%SYSDIR%\svchost.exe -k imgsvc
%SYSDIR%\svchost.exe -k swprv
%SYSDIR%\svchost.exe -k WerSvcGroup
%SYSDIR%\DRIVERS\HSX_CNXT.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=C9C63410D8CF98F621B9CC62243FB877 SIZE=660480
%SYSDIR%\svchost.exe -k secsvcs
%SYSDIR%\SearchIndexer.exe \Embedding
%SYSDIR%\DRIVERS\xaudio.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=2E579520E114A9CA309F13BF40AD8292 SIZE=8704
%PROGRAMFILES%\Acer Arcade Deluxe\Play Movie\000.fcl [Cyberlink Corp.] [CyberLink FCL Driver] MD5=8098180B3F6C430A4E60333BC036F936 SIZE=13560
%SYSDIR%\mscoree.dll [Microsoft Corporation] [Microsoft® .NET Framework] MD5=24084D13982FFE48C5BF931F1E5DD707 SIZE=282112
%PROGRAMFILES%\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=56319E6B4D190A2DEB4463A9CE4D4F74 SIZE=66072
%PROGRAMFILES%\OrangeHSS\SearchURLHook\SearchPageURL.dll [France Telecom SA] [CSS-Corporate] MD5=CABA90BF77307A99C4BC7D73FD2043C0 SIZE=77824
%SYSDIR%\igfxpers.exe [Intel Corporation] [Intel(R) Common User Interface] MD5=D8A33AF26E4143F7A892009890BB6F64 SIZE=133656
%SYSDIR%\MACROMED\SHOCKWAVE 10\GTAPI.DLL MD5=AE5CDA196A69F583DD356E7487AF3B49 SIZE=52288
%SYSDIR%\WPDSP.DLL [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=F9A1336E8AAB8B90E86C43C292B38D72 SIZE=349184

End of Report

gen-hackman · Answer

desinstalle ta yahoo toolbar

et :

Affiche les fichiers et dossiers cachés … 
Pour ce faire, tu vas dans un dossier, par ex. "Mes Images". 
Ensuite, clique sur > Outils > Options des dossiers ... 
clique sur l' onglet « Affichage » et ... 
coche ---> Afficher les fichiers et dossiers cachés 
décoche > Masquer les extensions des fichiers dont le type est connu 
décoche > Masquer les fichiers protégés du système d' exploitation (recommandé). 
« Appliquer » et « OK ». 

2) Télécharge VundoFix.exe (par Atribune) sur ton Bureau. 

http://www.atribune.org/ccount/click.php?id=4 

· Double-clique VundoFix.exe afin de le lancer 
· Clique sur le bouton Scan for Vundo 
· Lorsque le scan est complété, clique sur le bouton Remove Vundo 
· Une invite te demandera si tu veux supprimer les fichiers, clique YES 
· Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers 
· Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK 
· Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse 

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-dessus, à partir de "clique sur le bouton Scan for Vundo".

nounours-10 · Answer

Avira AntiVir Personal
Report file date: lundi 28 juillet 2008  19:17

Scanning for 1165085 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows Vista
Windows version:  (Service Pack 1)  [6.0.6001]
Boot mode:        Normally booted
Username:         SYSTEM
Computer name:    PC-DE-CHARLES

Version information:
BUILD.DAT     : 8.1.00.295      16479 Bytes  09/04/2008 16:24:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:56
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:37
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:23
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:40
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.3.2       5447168 Bytes  07/03/2008 13:08:58
ANTIVIR2.VDF  : 7.0.3.62       337408 Bytes  21/03/2008 19:12:34
ANTIVIR3.VDF  : 7.0.3.68        57856 Bytes  25/03/2008 08:27:50
Engineversion : 8.1.0.28  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:21
AESCRIPT.DLL  : 8.1.0.19       229754 Bytes  07/04/2008 15:34:44
AESCN.DLL     : 8.1.0.12       115060 Bytes  07/04/2008 15:34:44
AERDL.DLL     : 8.1.0.19       418164 Bytes  07/04/2008 15:34:44
AEPACK.DLL    : 8.1.1.0        364918 Bytes  18/03/2008 11:20:42
AEOFFICE.DLL  : 8.1.0.15       192889 Bytes  07/04/2008 15:34:44
AEHEUR.DLL    : 8.1.0.15      1147253 Bytes  07/04/2008 15:34:44
AEHELP.DLL    : 8.1.0.11       115061 Bytes  07/04/2008 15:34:43
AEGEN.DLL     : 8.1.0.15       299379 Bytes  07/04/2008 15:34:43
AEEMU.DLL     : 8.1.0.5        430450 Bytes  07/04/2008 15:34:43
AECORE.DLL    : 8.1.0.25       168309 Bytes  08/04/2008 09:58:32
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:53
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:50
AVREP.DLL     : 7.0.0.1        155688 Bytes  16/04/2007 13:26:47
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:49
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:23
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:31
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:02
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:39
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:10
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:25
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 28 juillet 2008  19:17

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'taskmgr.exe' - '0' Module(s) have been scanned
Scan process 'SpywareTerminator.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'VSSVC.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'update.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'SbPFCl.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'ePowerSvc.exe' - '1' Module(s) have been scanned
Scan process 'WUDFHost.exe' - '1' Module(s) have been scanned
Scan process 'capuserv.exe' - '1' Module(s) have been scanned
Scan process 'eRecoveryService.exe' - '1' Module(s) have been scanned
Scan process 'XAudio.exe' - '1' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sp_rsser.exe' - '1' Module(s) have been scanned
Scan process 'eRAgent.exe' - '1' Module(s) have been scanned
Scan process 'Acer.Empowering.Framework.Supervisor.ex' - '1' Module(s) have been scanned
Scan process 'ePower_DMC.exe' - '1' Module(s) have been scanned
Scan process 'eNMTray.exe' - '1' Module(s) have been scanned
Scan process 'SbPFSvc.exe' - '1' Module(s) have been scanned
Scan process 'SbPFLnch.exe' - '1' Module(s) have been scanned
Scan process 'RichVideo.exe' - '1' Module(s) have been scanned
Scan process 'naofsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MobilityService.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'FTRTSVC.exe' - '1' Module(s) have been scanned
Scan process 'eNet Service.exe' - '1' Module(s) have been scanned
Scan process 'eLockServ.exe' - '1' Module(s) have been scanned
Scan process 'eDSService.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'ALaunchSvc.exe' - '1' Module(s) have been scanned
Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'ehtray.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'dwm.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
66 processes with 66 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
      [INFO]      No virus was found!
Master boot sector HD1
      [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
      [INFO]      No virus was found!

Starting to scan the registry.
The registry was scanned ( '5' files ).


Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\pagefile.sys
      [WARNING]   The file could not be opened!


End of the scan: lundi 28 juillet 2008  20:41
Used time:  1:24:05 min

The scan has been done completely.

  19439 Scanning directories
 298867 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      1 Files cannot be scanned
 298867 Files not concerned
   2170 Archives were scanned
      1 Warnings
      0 Notes

nounours-10 · Answer

Je rencontre un petit probleme.
quand je clique sur le lien cela me donne une page blanche avec d'écrit en petit : " Ad blocked here by SPF "!
Je pense que c'est le firewall

EDIT : Enfaite j'ai trouver !!

gen-hackman · Answer

ca veut dire quoi ?ton probleme est réglé ?

nounours-10 · Answer

non c'était juste pour le téléchargement du logiciel car il marque un truc !
Mais j'ai toujours le probleme avec rundll32

gen-hackman · Answer

reprends au post 36

nounours-10 · Answer

· Lorsque le scan est complété, clique sur le bouton Remove Vundo
· Une invite te demandera si tu veux supprimer les fichiers, clique YES
· Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
· Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK
· Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport



Le logiciel ne me fait rien de tout sa ( il scan, me dit de chose ou je doit cliquer sur ok et revien au début)

gen-hackman · Answer

??????????????????????????????????????

nounours-10 · Answer

le logiciel Vundofix me dit que je ne suis pas infecter (donc pas de rapport)
Maintenant je vais lancer l'analyse avec hijackthis

nounours-10 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:51:26, on 29/07/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\System32\mobsync.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\charles\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb125\SearchSettings.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_S3A13.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix: 
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Filesnamfler
aofsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

nounours-10 · Answer

Qu'est - ce que je dois faire maintenant ??

gen-hackman · Answer

ben là je vois plus........vista n est pas ma tasse de thé en plus

nounours-10 · Answer

Pas grave de toute façons mon ordi ne démarre plus

Rundll32.exe

48 réponses

Votre réponse

Discussions similaires

Newsletters