Ordi devenu bcp - performant+problème de song

Question

Bonjour,

j'ai depuis un long moment de gos problèmme avec mon ordinateur portable (acer aspire 9410, problème de lenteur, song qui foire et lancement de l'ordi trèèèèès long). Je soupsonne des hijack et autre spam ou bot d'être l'auteur de ces crimes, en naviguant sur les forum de ccm, j'ai vu que beaucoup demandait de faire une analyse avec hijackthis et de montrer le raports, le voici donc : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:55:31, on 6/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\acer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\PowerStrip\PStrip.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32	askmgr.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWSegedit.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9DEC81A1-919F-41F0-A983-7F202E3EBBB3} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb125\SearchSettings.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [amok team] C:\DOCUME~1\acer\APPLIC~1\HTMSAF~1\Default Inter Meet.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

Destrio5 · Answer

Salut,

---> Télécharge Lop S&D sur ton Bureau
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
---> Double-clique dessus pour lancer l'installation
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
---> Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
---> Patiente jusqu'à la fin du scan
---> Poste le rapport généré (C:\lopR.txt)

kuitar · Answer

D'abord merci d'avoir repondu si rapidement, ensuite voila le rapport de lop s&d
Ps: pour le nettoyage de l'ordi c'est fait et les defragmentation j'en ai fait et refait


   --------------------\  Lop S&D 4.2.4-5   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU           T2250  @ 1.73GHz )
   BIOS : Ver 1.00PARTTBLa
   USER : acer ( Administrator )
   BOOT : Normal boot
   Antivirus : Spyware Doctor with AntiVirus 5.5.1.2 (Activated)
   C:\ (Local Disk) - FAT32 - Total : 111 Go Free : 57 Go
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
   Option : [1] ( lun. 06/10/2008|19:27 )
 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [15/10/2004|12:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [15/10/2004|11:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [06/10/2008|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151}
   [14/04/2006|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [07/09/2008|14:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Blender Foundation
   [29/06/2008|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [03/10/2007|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [05/06/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Disk Cleaner
   [02/09/2008|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\file joy proc deaf
   [29/06/2008|23:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [03/10/2007|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [03/10/2007|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
   [24/08/2008|16:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [30/01/2008|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [15/10/2004|11:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [24/09/2008|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [10/11/2007|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [15/02/2008|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
   [01/08/2008|14:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [14/04/2006|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [03/10/2007|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [17/04/2008|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [03/10/2007|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [23/10/2007|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [15/10/2004|11:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [15/10/2004|11:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [18/10/2007|22:54] C:\DOCUME~1\acer\APPLIC~1\Adobe
   [29/10/2007|15:57] C:\DOCUME~1\acer\APPLIC~1\AdobeUM
   [18/01/2008|00:50] C:\DOCUME~1\acer\APPLIC~1\Ahead
   [11/06/2008|17:18] C:\DOCUME~1\acer\APPLIC~1\Blender Foundation
   [16/01/2008|19:22] C:\DOCUME~1\acer\APPLIC~1\Creative
   [04/11/2007|20:58] C:\DOCUME~1\acer\APPLIC~1\CyberLink
   [12/01/2008|15:19] C:\DOCUME~1\acer\APPLIC~1\GetRightToGo
   [03/10/2007|18:19] C:\DOCUME~1\acer\APPLIC~1\Google
   [30/04/2008|17:23] C:\DOCUME~1\acer\APPLIC~1\gtk-2.0
   [02/09/2008|22:51] C:\DOCUME~1\acer\APPLIC~1\htm safe okay
   [15/10/2004|12:05] C:\DOCUME~1\acer\APPLIC~1\Identities
   [14/02/2008|19:12] C:\DOCUME~1\acer\APPLIC~1\InstallShield
   [11/10/2007|23:06] C:\DOCUME~1\acer\APPLIC~1\LimeWire
   [03/10/2007|13:22] C:\DOCUME~1\acer\APPLIC~1\Macromedia
   [15/10/2004|11:51] C:\DOCUME~1\acer\APPLIC~1\Microsoft
   [25/10/2007|18:25] C:\DOCUME~1\acer\APPLIC~1\Mozilla
   [15/02/2008|18:34] C:\DOCUME~1\acer\APPLIC~1\PC Tools
   [16/12/2007|23:38] C:\DOCUME~1\acer\APPLIC~1\Real
   [20/01/2008|19:24] C:\DOCUME~1\acer\APPLIC~1\Search Settings
   [28/10/2007|13:47] C:\DOCUME~1\acer\APPLIC~1\SecuROM
   [03/10/2007|22:54] C:\DOCUME~1\acer\APPLIC~1\Sun
   [28/11/2007|16:24] C:\DOCUME~1\acer\APPLIC~1	eamspeak2
   [08/04/2008|20:27] C:\DOCUME~1\acer\APPLIC~1\U3
   [28/10/2007|12:42] C:\DOCUME~1\acer\APPLIC~1\Ubisoft
   [03/06/2008|18:18] C:\DOCUME~1\acer\APPLIC~1\vlc
   [22/12/2007|12:52] C:\DOCUME~1\acer\APPLIC~1\WinRAR
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [06/10/2008 19:00][--ah-----] C:\WINDOWS	asks\A57C2DA1906FA88D.job
   [06/10/2008 12:29][--a------] C:\WINDOWS	asks\GoogleUpdateTaskUser.job
   [06/10/2008 18:52][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [06/10/2008 12:03][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 05:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   ( A57C2DA1906FA88D.job )=( c:\docume~1\acer\applic~1\htmsaf~1\bodyeachbib.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [13/07/2008|17:43] C:\Program Files\1964
   [27/08/2008|14:04] C:\Program Files\3DO
   [17/12/2007|12:10] C:\Program Files\7-Zip
   [03/10/2007|13:18] C:\Program Files\Acer
   [14/04/2006|16:22] C:\Program Files\Acer Inc
   [16/12/2007|13:01] C:\Program Files\Activision
   [14/04/2006|16:23] C:\Program Files\Adobe
   [18/01/2008|00:49] C:\Program Files\Ahead
   [05/08/2008|16:59] C:\Program Files\Ascaron Entertainment
   [25/10/2007|14:25] C:\Program Files\Audacity
   [23/07/2008|20:16] C:\Program Files\Beneton Movie GIF
   [29/10/2007|15:59] C:\Program Files\Blender Foundation
   [03/03/2008|19:40] C:\Program Files\Bodom-Child - RaBBi
   [29/06/2008|23:04] C:\Program Files\Bonjour
   [29/06/2008|17:26] C:\Program Files\Boonty
   [29/06/2008|17:26] C:\Program Files\BoontyGames
   [12/01/2008|19:22] C:\Program Files\BrowsingAdvisor
   [19/07/2008|13:51] C:\Program Files\CCleaner
   [02/09/2008|22:51] C:\Program Files\Circle Developement
   [15/10/2004|11:58] C:\Program Files\ComPlus Applications
   [16/01/2008|18:54] C:\Program Files\Creative
   [03/10/2007|13:18] C:\Program Files\CyberLink
   [02/07/2008|14:12] C:\Program Files\DAZ
   [01/11/2007|22:20] C:\Program Files\DivX
   [25/03/2008|13:02] C:\Program Files\Dofus
   [17/09/2008|19:23] C:\Program Files\Doom Builder
   [27/04/2008|19:14] C:\Program Files\Fable - The Lost Chapters
   [15/10/2004|11:52] C:\Program Files\Fichiers communs
   [18/01/2008|00:39] C:\Program Files\Free Audio Pack
   [30/04/2008|17:11] C:\Program Files\Gimp Pack Mode
   [03/10/2007|18:18] C:\Program Files\Google
   [02/06/2008|21:50] C:\Program Files\gtkmm
   [24/09/2008|23:59] C:\Program Files\htm safe okay
   [14/04/2006|16:05] C:\Program Files\InstallShield Installation Information
   [14/04/2006|16:01] C:\Program Files\Intel
   [15/10/2004|11:58] C:\Program Files\Internet Explorer
   [03/10/2007|22:53] C:\Program Files\Java
   [03/10/2007|13:22] C:\Program Files\Launch Manager
   [14/07/2008|20:41] C:\Program Files\LibUSB-Win32-0.1.10.1
   [11/10/2007|23:06] C:\Program Files\LimeWire
   [15/10/2004|11:57] C:\Program Files\Messenger
   [29/01/2008|19:19] C:\Program Files\Messenger Plus! Live
   [24/10/2007|16:19] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [15/10/2004|12:01] C:\Program Files\microsoft frontpage
   [03/10/2007|19:18] C:\Program Files\Microsoft Office
   [05/09/2008|14:54] C:\Program Files\Microsoft Silverlight
   [10/01/2008|20:05] C:\Program Files\Microsoft SQL Server Compact Edition
   [03/10/2007|19:19] C:\Program Files\Microsoft Visual Studio
   [15/10/2004|11:58] C:\Program Files\Movie Maker
   [25/10/2007|18:25] C:\Program Files\Mozilla Firefox
   [15/10/2004|11:57] C:\Program Files\MSN
   [15/10/2004|11:57] C:\Program Files\MSN Gaming Zone
   [03/10/2007|19:22] C:\Program Files\MSXML 4.0
   [15/10/2004|11:58] C:\Program Files\NetMeeting
   [14/04/2006|16:22] C:\Program Files\NewTech Infosystems
   [24/09/2008|22:49] C:\Program Files\NOS
   [15/10/2004|11:57] C:\Program Files\Online Services
   [10/08/2008|22:29] C:\Program Files\Online TV & Radio Stations
   [15/10/2004|11:58] C:\Program Files\Outlook Express
   [28/10/2007|13:18] C:\Program Files\PlayLinc
   [17/09/2008|21:18] C:\Program Files\PowerStrip
   [13/06/2008|18:55] C:\Program Files\Project64
   [29/06/2008|22:24] C:\Program Files\QuickTime
   [16/12/2007|23:39] C:\Program Files\Real
   [14/04/2006|16:05] C:\Program Files\Realtek
   [04/10/2007|20:26] C:\Program Files\scrabbleproB1.0.7
   [18/01/2008|00:41] C:\Program Files\Search Settings
   [15/10/2004|11:59] C:\Program Files\Services en ligne
   [15/02/2008|18:30] C:\Program Files\Set up
   [14/07/2008|20:44] C:\Program Files\SixaxisDriver
   [01/08/2008|14:35] C:\Program Files\Spybot - Search & Destroy
   [15/02/2008|18:34] C:\Program Files\Spyware Doctor
   [26/03/2008|16:24] C:\Program Files\Steam
   [14/04/2006|16:24] C:\Program Files\Symantec
   [14/04/2006|16:04] C:\Program Files\Synaptics
   [29/06/2008|17:26] C:\Program Files\T‚l‚chargeur de Tom Clancy Splinter Cell
   [16/04/2008|20:33] C:\Program Files\TmNationsForever
   [06/10/2008|18:54] C:\Program Files\Trend Micro
   [06/10/2008|19:19] C:\Program Files\Uniblue
   [15/10/2004|12:05] C:\Program Files\Uninstall Information
   [26/04/2008|19:26] C:\Program Files\Valve
   [03/06/2008|18:16] C:\Program Files\VideoLAN
   [11/03/2008|23:08] C:\Program Files\Virtual Earth 3D
   [23/10/2007|19:24] C:\Program Files\Windows Live
   [23/10/2007|19:34] C:\Program Files\Windows Live Toolbar
   [17/01/2008|20:32] C:\Program Files\Windows Media Connect 2
   [15/10/2004|11:57] C:\Program Files\Windows Media Player
   [15/10/2004|11:57] C:\Program Files\Windows NT
   [15/10/2004|11:59] C:\Program Files\WindowsUpdate
   [03/10/2007|13:25] C:\Program Files\WinPCap
   [22/12/2007|12:52] C:\Program Files\WinRAR
   [15/10/2004|12:01] C:\Program Files\xerox
   [04/01/2008|15:31] C:\Program Files\Xfire

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [03/10/2007|13:27] C:\Program Files\Fichiers communs\Acer
   [14/04/2006|16:23] C:\Program Files\Fichiers communs\Adobe
   [24/09/2008|23:28] C:\Program Files\Fichiers communs\Adobe AIR
   [24/08/2008|16:18] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [18/01/2008|00:49] C:\Program Files\Fichiers communs\Ahead
   [29/06/2008|17:26] C:\Program Files\Fichiers communs\BOONTY Shared
   [02/07/2008|14:10] C:\Program Files\Fichiers communs\DAZ
   [03/10/2007|19:19] C:\Program Files\Fichiers communs\Designer
   [14/04/2006|16:04] C:\Program Files\Fichiers communs\InstallShield
   [03/10/2007|22:52] C:\Program Files\Fichiers communs\Java
   [03/10/2007|13:27] C:\Program Files\Fichiers communs\Logitech
   [29/06/2008|22:20] C:\Program Files\Fichiers communs\Macrovision Shared
   [15/10/2004|11:52] C:\Program Files\Fichiers communs\Microsoft Shared
   [15/10/2004|11:58] C:\Program Files\Fichiers communs\MSSoap
   [14/04/2006|16:23] C:\Program Files\Fichiers communs\muvee Technologies
   [14/04/2006|16:22] C:\Program Files\Fichiers communs\NewTech Infosystems
   [15/10/2004|11:52] C:\Program Files\Fichiers communs\ODBC
   [15/02/2008|18:45] C:\Program Files\Fichiers communs\PC Tools
   [16/12/2007|23:39] C:\Program Files\Fichiers communs\Real
   [15/10/2004|11:58] C:\Program Files\Fichiers communs\Services
   [15/10/2004|11:52] C:\Program Files\Fichiers communs\SpeechEngines
   [14/04/2006|16:24] C:\Program Files\Fichiers communs\Symantec Shared
   [15/10/2004|11:58] C:\Program Files\Fichiers communs\System
   [06/01/2008|12:42] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [21/12/2007|10:26] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 60 Processes )

   IEXPLORE.EXE ~ [PID:460]
   IEXPLORE.EXE ~ [PID:656]
   iexplore.exe ~ [PID:4052]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Joy Proc Deaf
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Joy Proc Deaf\Move Platform.exe
   C:\DOCUME~1\acer\APPLIC~1\htmsaf~1
   C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\Default Inter Meet.exe
   C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\fxybilqt.exe
   C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\TrustLiveTheBind.exe
   C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\body each bib.exe
   C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\ezhhljbx.exe
   C:\Program Files\htmsaf~1
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
   C:\WINDOWS\Tasks\A57C2DA1906FA88D.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "amok team"="C:\DOCUME~1\acer\APPLIC~1\HTMSAF~1\Default Inter Meet.exe"

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-10-06 19:29:13
   Windows 5.1.2600 Service Pack 2 FAT NTAPI
   detected NTDLL code modification:
   ZwClose
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\Flash_Pro_CS3_Keygen_+_Activation_ZWT.zip
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack\Flash Video Encoder.exe
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack\Flash.exe
   C:\DOCUME~1\acer\Favoris\Axel\Orkiller.com - Gravure, cracks de jeux, logiciels -.url
   C:\DOCUME~1\acer\Favoris\L‚vi\Punkcracks.url


   [F:10][D:4]-> C:\DOCUME~1\acer\LOCALS~1\Temp
   [F:3][D:0]-> C:\DOCUME~1\acer\Cookies
   [F:54][D:9]-> C:\DOCUME~1\acer\LOCALS~1\TEMPOR~1\content.IE5
   [F:2][D:0]-> C:\Recycled

   1 - "C:\Lop SD\LopR_1.txt" - lun. 06/10/2008|19:30 - Option : [1]

   --------------------\  Fin du rapport a 19:30:28

Destrio5 · Answer

---> Relance Lop S&D
---> Choisis cette fois-ci l'option 2 (Suppression)
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt)

kuitar · Answer

Voila voila


   --------------------\  Lop S&D 4.2.4-5   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU           T2250  @ 1.73GHz )
   BIOS : Ver 1.00PARTTBLa
   USER : acer ( Administrator )
   BOOT : Normal boot
   Antivirus : Spyware Doctor with AntiVirus 5.5.1.2 (Activated)
   C:\ (Local Disk) - FAT32 - Total : 111 Go Free : 57 Go
   D:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
   Option : [2] ( lun. 06/10/2008|19:40 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Joy Proc Deaf\Move Platform.exe
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\Default Inter Meet.exe
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\fxybilqt.exe
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\TrustLiveTheBind.exe
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\body each bib.exe
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\htmsaf~1\ezhhljbx.exe
   Supprime! - C:\Program Files\Circle Developement\Uninstall.exe
   Supprime! - C:\WINDOWS\Tasks\A57C2DA1906FA88D.job 
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\File Joy Proc Deaf
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\htmsaf~1
   Supprime! - C:\Program Files\htmsaf~1
   Supprime! - C:\Program Files\Circle Developement
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1  

   [15/10/2004|12:05] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [15/10/2004|11:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [06/10/2008|19:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151}
   [14/04/2006|16:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [07/09/2008|14:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Blender Foundation
   [29/06/2008|17:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [03/10/2007|13:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [05/06/2008|18:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Disk Cleaner
   [29/06/2008|23:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [03/10/2007|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [03/10/2007|13:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
   [24/08/2008|16:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
   [30/01/2008|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [15/10/2004|11:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [24/09/2008|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [10/11/2007|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1
View_Profiles
   [15/02/2008|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
   [01/08/2008|14:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [14/04/2006|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [03/10/2007|18:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [17/04/2008|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [03/10/2007|17:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [23/10/2007|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

   [15/10/2004|11:51] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [15/10/2004|11:51] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [18/10/2007|22:54] C:\DOCUME~1\acer\APPLIC~1\Adobe
   [29/10/2007|15:57] C:\DOCUME~1\acer\APPLIC~1\AdobeUM
   [18/01/2008|00:50] C:\DOCUME~1\acer\APPLIC~1\Ahead
   [11/06/2008|17:18] C:\DOCUME~1\acer\APPLIC~1\Blender Foundation
   [16/01/2008|19:22] C:\DOCUME~1\acer\APPLIC~1\Creative
   [04/11/2007|20:58] C:\DOCUME~1\acer\APPLIC~1\CyberLink
   [12/01/2008|15:19] C:\DOCUME~1\acer\APPLIC~1\GetRightToGo
   [03/10/2007|18:19] C:\DOCUME~1\acer\APPLIC~1\Google
   [30/04/2008|17:23] C:\DOCUME~1\acer\APPLIC~1\gtk-2.0
   [15/10/2004|12:05] C:\DOCUME~1\acer\APPLIC~1\Identities
   [14/02/2008|19:12] C:\DOCUME~1\acer\APPLIC~1\InstallShield
   [11/10/2007|23:06] C:\DOCUME~1\acer\APPLIC~1\LimeWire
   [03/10/2007|13:22] C:\DOCUME~1\acer\APPLIC~1\Macromedia
   [15/10/2004|11:51] C:\DOCUME~1\acer\APPLIC~1\Microsoft
   [25/10/2007|18:25] C:\DOCUME~1\acer\APPLIC~1\Mozilla
   [15/02/2008|18:34] C:\DOCUME~1\acer\APPLIC~1\PC Tools
   [16/12/2007|23:38] C:\DOCUME~1\acer\APPLIC~1\Real
   [20/01/2008|19:24] C:\DOCUME~1\acer\APPLIC~1\Search Settings
   [28/10/2007|13:47] C:\DOCUME~1\acer\APPLIC~1\SecuROM
   [03/10/2007|22:54] C:\DOCUME~1\acer\APPLIC~1\Sun
   [28/11/2007|16:24] C:\DOCUME~1\acer\APPLIC~1	eamspeak2
   [08/04/2008|20:27] C:\DOCUME~1\acer\APPLIC~1\U3
   [28/10/2007|12:42] C:\DOCUME~1\acer\APPLIC~1\Ubisoft
   [06/10/2008|19:30] C:\DOCUME~1\acer\APPLIC~1\Uniblue
   [03/06/2008|18:18] C:\DOCUME~1\acer\APPLIC~1\vlc
   [22/12/2007|12:52] C:\DOCUME~1\acer\APPLIC~1\WinRAR
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [06/10/2008 12:29][--a------] C:\WINDOWS	asks\GoogleUpdateTaskUser.job
   [06/10/2008 18:52][--a------] C:\WINDOWS	asks\V‚rifier les mises … jour de Windows Live Toolbar.job
   [06/10/2008 12:03][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 05:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [13/07/2008|17:43] C:\Program Files\1964
   [27/08/2008|14:04] C:\Program Files\3DO
   [17/12/2007|12:10] C:\Program Files\7-Zip
   [03/10/2007|13:18] C:\Program Files\Acer
   [14/04/2006|16:22] C:\Program Files\Acer Inc
   [16/12/2007|13:01] C:\Program Files\Activision
   [14/04/2006|16:23] C:\Program Files\Adobe
   [18/01/2008|00:49] C:\Program Files\Ahead
   [05/08/2008|16:59] C:\Program Files\Ascaron Entertainment
   [25/10/2007|14:25] C:\Program Files\Audacity
   [23/07/2008|20:16] C:\Program Files\Beneton Movie GIF
   [29/10/2007|15:59] C:\Program Files\Blender Foundation
   [03/03/2008|19:40] C:\Program Files\Bodom-Child - RaBBi
   [29/06/2008|23:04] C:\Program Files\Bonjour
   [29/06/2008|17:26] C:\Program Files\Boonty
   [29/06/2008|17:26] C:\Program Files\BoontyGames
   [12/01/2008|19:22] C:\Program Files\BrowsingAdvisor
   [19/07/2008|13:51] C:\Program Files\CCleaner
   [15/10/2004|11:58] C:\Program Files\ComPlus Applications
   [16/01/2008|18:54] C:\Program Files\Creative
   [03/10/2007|13:18] C:\Program Files\CyberLink
   [02/07/2008|14:12] C:\Program Files\DAZ
   [01/11/2007|22:20] C:\Program Files\DivX
   [25/03/2008|13:02] C:\Program Files\Dofus
   [17/09/2008|19:23] C:\Program Files\Doom Builder
   [27/04/2008|19:14] C:\Program Files\Fable - The Lost Chapters
   [15/10/2004|11:52] C:\Program Files\Fichiers communs
   [18/01/2008|00:39] C:\Program Files\Free Audio Pack
   [30/04/2008|17:11] C:\Program Files\Gimp Pack Mode
   [03/10/2007|18:18] C:\Program Files\Google
   [02/06/2008|21:50] C:\Program Files\gtkmm
   [14/04/2006|16:05] C:\Program Files\InstallShield Installation Information
   [14/04/2006|16:01] C:\Program Files\Intel
   [15/10/2004|11:58] C:\Program Files\Internet Explorer
   [03/10/2007|22:53] C:\Program Files\Java
   [03/10/2007|13:22] C:\Program Files\Launch Manager
   [14/07/2008|20:41] C:\Program Files\LibUSB-Win32-0.1.10.1
   [11/10/2007|23:06] C:\Program Files\LimeWire
   [15/10/2004|11:57] C:\Program Files\Messenger
   [29/01/2008|19:19] C:\Program Files\Messenger Plus! Live
   [24/10/2007|16:19] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [15/10/2004|12:01] C:\Program Files\microsoft frontpage
   [03/10/2007|19:18] C:\Program Files\Microsoft Office
   [05/09/2008|14:54] C:\Program Files\Microsoft Silverlight
   [10/01/2008|20:05] C:\Program Files\Microsoft SQL Server Compact Edition
   [03/10/2007|19:19] C:\Program Files\Microsoft Visual Studio
   [15/10/2004|11:58] C:\Program Files\Movie Maker
   [25/10/2007|18:25] C:\Program Files\Mozilla Firefox
   [15/10/2004|11:57] C:\Program Files\MSN
   [15/10/2004|11:57] C:\Program Files\MSN Gaming Zone
   [03/10/2007|19:22] C:\Program Files\MSXML 4.0
   [15/10/2004|11:58] C:\Program Files\NetMeeting
   [14/04/2006|16:22] C:\Program Files\NewTech Infosystems
   [24/09/2008|22:49] C:\Program Files\NOS
   [15/10/2004|11:57] C:\Program Files\Online Services
   [10/08/2008|22:29] C:\Program Files\Online TV & Radio Stations
   [15/10/2004|11:58] C:\Program Files\Outlook Express
   [28/10/2007|13:18] C:\Program Files\PlayLinc
   [17/09/2008|21:18] C:\Program Files\PowerStrip
   [13/06/2008|18:55] C:\Program Files\Project64
   [29/06/2008|22:24] C:\Program Files\QuickTime
   [16/12/2007|23:39] C:\Program Files\Real
   [14/04/2006|16:05] C:\Program Files\Realtek
   [04/10/2007|20:26] C:\Program Files\scrabbleproB1.0.7
   [18/01/2008|00:41] C:\Program Files\Search Settings
   [15/10/2004|11:59] C:\Program Files\Services en ligne
   [15/02/2008|18:30] C:\Program Files\Set up
   [14/07/2008|20:44] C:\Program Files\SixaxisDriver
   [01/08/2008|14:35] C:\Program Files\Spybot - Search & Destroy
   [15/02/2008|18:34] C:\Program Files\Spyware Doctor
   [26/03/2008|16:24] C:\Program Files\Steam
   [14/04/2006|16:24] C:\Program Files\Symantec
   [14/04/2006|16:04] C:\Program Files\Synaptics
   [29/06/2008|17:26] C:\Program Files\T‚l‚chargeur de Tom Clancy Splinter Cell
   [16/04/2008|20:33] C:\Program Files\TmNationsForever
   [06/10/2008|18:54] C:\Program Files\Trend Micro
   [06/10/2008|19:19] C:\Program Files\Uniblue
   [15/10/2004|12:05] C:\Program Files\Uninstall Information
   [26/04/2008|19:26] C:\Program Files\Valve
   [03/06/2008|18:16] C:\Program Files\VideoLAN
   [11/03/2008|23:08] C:\Program Files\Virtual Earth 3D
   [23/10/2007|19:24] C:\Program Files\Windows Live
   [23/10/2007|19:34] C:\Program Files\Windows Live Toolbar
   [17/01/2008|20:32] C:\Program Files\Windows Media Connect 2
   [15/10/2004|11:57] C:\Program Files\Windows Media Player
   [15/10/2004|11:57] C:\Program Files\Windows NT
   [15/10/2004|11:59] C:\Program Files\WindowsUpdate
   [03/10/2007|13:25] C:\Program Files\WinPCap
   [22/12/2007|12:52] C:\Program Files\WinRAR
   [15/10/2004|12:01] C:\Program Files\xerox
   [04/01/2008|15:31] C:\Program Files\Xfire

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [03/10/2007|13:27] C:\Program Files\Fichiers communs\Acer
   [14/04/2006|16:23] C:\Program Files\Fichiers communs\Adobe
   [24/09/2008|23:28] C:\Program Files\Fichiers communs\Adobe AIR
   [24/08/2008|16:18] C:\Program Files\Fichiers communs\Adobe Systems Shared
   [18/01/2008|00:49] C:\Program Files\Fichiers communs\Ahead
   [29/06/2008|17:26] C:\Program Files\Fichiers communs\BOONTY Shared
   [02/07/2008|14:10] C:\Program Files\Fichiers communs\DAZ
   [03/10/2007|19:19] C:\Program Files\Fichiers communs\Designer
   [14/04/2006|16:04] C:\Program Files\Fichiers communs\InstallShield
   [03/10/2007|22:52] C:\Program Files\Fichiers communs\Java
   [03/10/2007|13:27] C:\Program Files\Fichiers communs\Logitech
   [29/06/2008|22:20] C:\Program Files\Fichiers communs\Macrovision Shared
   [15/10/2004|11:52] C:\Program Files\Fichiers communs\Microsoft Shared
   [15/10/2004|11:58] C:\Program Files\Fichiers communs\MSSoap
   [14/04/2006|16:23] C:\Program Files\Fichiers communs\muvee Technologies
   [14/04/2006|16:22] C:\Program Files\Fichiers communs\NewTech Infosystems
   [15/10/2004|11:52] C:\Program Files\Fichiers communs\ODBC
   [15/02/2008|18:45] C:\Program Files\Fichiers communs\PC Tools
   [16/12/2007|23:39] C:\Program Files\Fichiers communs\Real
   [15/10/2004|11:58] C:\Program Files\Fichiers communs\Services
   [15/10/2004|11:52] C:\Program Files\Fichiers communs\SpeechEngines
   [14/04/2006|16:24] C:\Program Files\Fichiers communs\Symantec Shared
   [15/10/2004|11:58] C:\Program Files\Fichiers communs\System
   [06/01/2008|12:42] C:\Program Files\Fichiers communs\WindowsLiveInstaller
   [21/12/2007|10:26] C:\Program Files\Fichiers communs\xing shared

   --------------------\  Process

   ( 53 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-10-06 19:42:30
   Windows 5.1.2600 Service Pack 2 FAT NTAPI
   detected NTDLL code modification:
   ZwClose
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\Flash_Pro_CS3_Keygen_+_Activation_ZWT.zip
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack\Flash Video Encoder.exe
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack\Flash.exe
   C:\DOCUME~1\acer\Favoris\Axel\Orkiller.com - Gravure, cracks de jeux, logiciels -.url
   C:\DOCUME~1\acer\Favoris\L‚vi\Punkcracks.url


   [F:11][D:4]-> C:\DOCUME~1\acer\LOCALS~1\Temp
   [F:15][D:0]-> C:\DOCUME~1\acer\Cookies
   [F:256][D:9]-> C:\DOCUME~1\acer\LOCALS~1\TEMPOR~1\content.IE5
   [F:2][D:0]-> C:\Recycled

   1 - "C:\Lop SD\LopR_1.txt" - lun. 06/10/2008|19:30 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - lun. 06/10/2008|19:43 - Option : [2]

   --------------------\  Fin du rapport a 19:43:38

Destrio5 · Answer

---> Supprime Lop S&D

---> Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

kuitar · Answer

Heu c'est juste pour demander si c'est normale que cela prenne autant de temps, surtout qu'il est mit la même chose depuis assez longtemp : Recherche d'autre infections -- WINDOWS\ban_list.txt
Encorre merci d'être la et aussi rapide :p

Destrio5 · Answer

Je ne sais pas.

kuitar · Answer

Ok, ça fait rien j'atendrait ^^

Destrio5 · Answer

Toujours bloqué ?

kuitar · Answer

Waip... O_o

kuitar · Answer

Mais j'ai deja ca dans le fichier : 
   -----------\  ToolBar S&D 1.2.2   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU           T2250  @ 1.73GHz )
   BIOS : Ver 1.00PARTTBLa
   USER : acer ( Administrator )
   BOOT : Normal boot
   Antivirus : Spyware Doctor with AntiVirus 5.5.1.2 (Activated)
   C:\ (Local Disk) - FAT32 - Total : 111 Go Free : 57 Go
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
   Option : [1] ( lun. 06/10/2008|19:49 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\BrowsingAdvisor
   C:\Program Files\BrowsingAdvisor\BrowsingAdvisor.dat
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
   C:\DOCUME~1\acer\APPLIC~1\Search Settings
   C:\DOCUME~1\acer\APPLIC~1\Search Settings\kb125
   C:\Program Files\Search Settings
   C:\Program Files\Search Settings\kb125
   C:\Program Files\Search Settings\SearchSettings.exe

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\windows\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\windows\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"


   --------------------\  Recherche d'autres infections

Destrio5 · Answer

Relance ToolBar S&D, fais l'option 2 et poste le rapport.

kuitar · Answer

ok ok, je fais ça je t'envoi le raport après, merci de soutient ^^

kuitar · Answer

Voila le raport :


   -----------\  ToolBar S&D 1.2.2   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU           T2250  @ 1.73GHz )
   BIOS : Ver 1.00PARTTBLa
   USER : acer ( Administrator )
   BOOT : Normal boot
   Antivirus : Spyware Doctor with AntiVirus 5.5.1.2 (Activated)
   C:\ (Local Disk) - FAT32 - Total : 111 Go Free : 57 Go
   D:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 04-10-2008|21:00 )
   Option : [2] ( lun. 06/10/2008|21:43 )

   -----------\ SUPPRESSION

   Supprime! - C:\Program Files\BrowsingAdvisor\BrowsingAdvisor.dat
   Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\Search Settings\kb125
   Supprime! - C:\Program Files\Search Settings\kb125
   Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
   Supprime! - C:\Program Files\BrowsingAdvisor
   Supprime! - C:\DOCUME~1\acer\APPLIC~1\Search Settings
   Supprime! - C:\Program Files\Search Settings

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\windows\system32\blank.htm"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\windows\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\Flash_Pro_CS3_Keygen_+_Activation_ZWT.zip
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack\Flash Video Encoder.exe
   C:\DOCUME~1\acer\Mes documents\L‚vi\Cs3 flash\ADOBE.FLASH.CS3.PROFESSIONAL.ISO-LZ0\Crack\Flash.exe
   C:\DOCUME~1\acer\Favoris\Axel\Orkiller.com - Gravure, cracks de jeux, logiciels -.url
   C:\DOCUME~1\acer\Favoris\L‚vi\Punkcracks.url



   1 - "C:\ToolBar SD\TB_1.txt" - lun. 06/10/2008|21:45 - Option : [2]

   -----------\  Fin du rapport a 21:45:40,64

Destrio5 · Answer

---> Supprime ToolBar S&D

---> Fais un scan rapide avec MBAM, supprime tout ce qu'il trouve et poste le rapport :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

kuitar · Answer

voili voilou (3 élements infecter) : 
Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1234
Windows 5.1.2600 Service Pack 2

6/10/2008 22:31:16
mbam-log-2008-10-06 (22-31-16).txt

Type de recherche: Examen rapide
Eléments examinés: 48349
Temps écoulé: 17 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Audio-Video Enhance (Trojan.Zlob) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\mlJCVnoO.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\17PHolmes1423.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

Destrio5 · Answer

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix.txt

kuitar · Answer

Merci encore et encore, voila le raport ( en plus ça rime xD ) : ComboFix 08-10-06.03 - acer 2008-10-06 22:56:17.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.1563 [GMT 2:00] Lancé depuis: C:\Documents and Settings\acer\Mes documents\Lévi\ComboFix.exe [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\acer\Bureaublackbird.jpg C:\WINDOWS\Downloaded Program Files\setup.inf C:\WINDOWS\system32\^^^^^^.exe C:\WINDOWS\system32\drivers pf.sys C:\WINDOWS\system32\packet.dll C:\WINDOWS\system32\pthreadVC.dll C:\WINDOWS\system32\WanPacket.dll C:\WINDOWS\system32\wpcap.dll . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games -------\Service_NPF ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-06 au 2008-10-06 )))))))))))))))))))))))))))))))))))) . 2008-10-06 22:12 . 2008-10-06 22:12 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-06 22:12 . 2008-10-06 22:12 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-06 22:12 . 2008-10-06 22:12 d-------- C:\Documents and Settings\acer\Application Data\Malwarebytes 2008-10-06 22:12 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-06 22:12 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-06 19:50 . 2008-10-06 21:44 1,518 --a------ C:\Documents and Settings\Orph.egd 2008-10-06 19:49 . 2008-10-06 19:49 d-------- C:\ToolBar SD 2008-10-06 19:30 . 2008-10-06 19:30 d-------- C:\Documents and Settings\acer\Application Data\Uniblue 2008-10-06 19:26 . 2008-10-06 19:26 d-------- C:\Lop SD 2008-10-06 19:19 . 2008-10-06 19:19 d-------- C:\Program Files\Uniblue 2008-10-06 19:17 . 2008-10-06 19:17 d--h----- C:\Documents and Settings\All Users\Application Data\{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151} 2008-10-06 18:54 . 2008-10-06 18:54 d-------- C:\Program Files\Trend Micro 2008-10-06 18:42 . 2008-10-06 18:42 72,192 --a------ C:\WINDOWS\system32 asklist.exe 2008-09-24 23:28 . 2008-09-24 23:28 d-------- C:\Program Files\Fichiers communs\Adobe AIR 2008-09-24 22:49 . 2008-09-24 22:49 d-------- C:\Program Files\NOS 2008-09-24 22:49 . 2008-09-24 22:49 d-------- C:\Documents and Settings\All Users\Application Data\NOS 2008-09-17 21:18 . 2008-09-17 21:18 d-------- C:\Program Files\PowerStrip 2008-09-17 21:18 . 2008-09-17 21:18 59 --a------ C:\WINDOWS\wininit.ini 2008-09-17 19:23 . 2008-09-17 19:23 d-------- C:\Program Files\Doom Builder 2008-09-17 19:23 . 2003-02-19 15:06 438,272 --a------ C:\WINDOWS\system32\cmcs21.ocx 2008-09-17 19:23 . 2003-02-19 15:07 303,104 --a------ C:\WINDOWS\system32\cmcs21.dll 2008-09-17 19:23 . 2004-02-08 19:55 180,132 --a------ C:\WINDOWS\system32\GDIPlus.tlb 2008-09-16 22:07 . 2004-03-08 23:00 124,688 --a------ C:\WINDOWS\system32\MSWINSCK.OCX 2008-09-07 14:55 . 2008-09-07 14:55 d-------- C:\Documents and Settings\All Users\Application Data\Blender Foundation . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-06 16:32 1,510 ----a-w C:\WINDOWS\system32 mp.reg 2008-10-01 13:51 87,552 ----a-w C:\WINDOWS\system32\VACFix.exe 2008-09-21 16:56 138,912 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2008-09-21 16:54 183,256 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2008-09-19 10:26 82,944 ----a-w C:\WINDOWS\system32\o4Patch.exe 2008-09-19 10:26 82,944 ----a-w C:\WINDOWS\system32\IEDFix.C.exe 2008-09-08 21:38 88,576 ----a-w C:\WINDOWS\system32\AntiXPVSTFix.exe 2008-09-05 12:54 --------- d-----w C:\Program Files\Microsoft Silverlight 2008-08-27 12:04 --------- d-----w C:\Program Files\3DO 2008-08-25 19:00 42,752 ----a-w C:\Documents and Settings\acer\Application Data\GDIPFONTCACHEV1.DAT 2008-08-24 14:18 --------- d-----w C:\Program Files\Fichiers communs\Adobe Systems Shared 2008-08-24 14:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision 2008-08-18 10:19 82,432 ----a-w C:\WINDOWS\system32\404Fix.exe 2008-08-10 20:29 --------- d-----w C:\Program Files\Online TV & Radio Stations 2008-08-05 15:55 265,720 ----a-w C:\WINDOWS\system32\msdbg2.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll 2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll 2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll 2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR 2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\dllcache\es.dll 2008-02-14 17:10 1 ----a-w C:\Documents and Settings\acer\SI.bin .

Destrio5 · Answer

/!\ Seul kuitar peut suivre cette procédure /!\


1/

---> Clique sur Démarrer, Exécuter, tape notepad clique sur OK.

---> Copie le texte ci-dessous par sélection puis Ctrl+C :






KillAll::

File::
C:\WINDOWS\system32	mp.reg
C:\WINDOWS\system32\VACFix.exe 
C:\WINDOWS\system32\IEDFix.C.exe
C:\WINDOWS\system32\AntiXPVSTFix.exe 
C:\WINDOWS\system32\404Fix.exe 

Folder::
C:\Lop SD  
C:\ToolBar SD 






---> Colle la sélection dans le bloc-notes

---> Enregistre ce fichier sur le bureau (Impératif)

---> Nom du fichier : CFScript
---> Type du fichier : tous les fichiers
---> Clique sur Enregistrer
---> Quitte le bloc-notes


2/

---> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

[*] Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

[*] Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
Ne touche à rien tant que le scan n'est pas terminé.

[*] Une fois le scan achevé, un rapport va s'afficher : poste-le

[*] Si le fichier ne s'ouvre pas, il se trouve ici C:\ComboFix.txt

kuitar · Answer

Bon allais je suis gentil alors voila le rapport : ComboFix 08-10-06.03 - acer 2008-10-08 19:02:16.1 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.1625 [GMT 2:00] Lancé depuis: C:\Documents and Settings\acer\Mes documents\Lévi\ComboFix.exe Commutateurs utilisés :: C:\Documents and Settings\acer\Bureau\CFScript.txt [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR] FILE :: C:\WINDOWS\system32\404Fix.exe C:\WINDOWS\system32\AntiXPVSTFix.exe C:\WINDOWS\system32\IEDFix.C.exe C:\WINDOWS\system32 mp.reg C:\WINDOWS\system32\VACFix.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Lop SD C:\Lop SD\Backup-Lop\DOCUME~1\acer\APPLIC~1\HTMSAF~1\body each bib.exe C:\Lop SD\Backup-Lop\DOCUME~1\acer\APPLIC~1\HTMSAF~1\Default Inter Meet.exe C:\Lop SD\Backup-Lop\DOCUME~1\acer\APPLIC~1\HTMSAF~1\ezhhljbx.exe C:\Lop SD\Backup-Lop\DOCUME~1\acer\APPLIC~1\HTMSAF~1\fxybilqt.exe C:\Lop SD\Backup-Lop\DOCUME~1\acer\APPLIC~1\HTMSAF~1\TrustLiveTheBind.exe C:\Lop SD\Backup-Lop\DOCUME~1\ALLUSE~1\APPLIC~1\file joy proc deaf\Move Platform.exe C:\Lop SD\Backup-Lop\Program Files\Circle Developement\Uninstall.exe C:\Lop SD\Backup-Lop\Reg\HKCU_Run.reg C:\Lop SD\Backup-Lop\Reg\HKLM_Run.reg C:\Lop SD\Backup-Lop\Reg\HKLM_Uninstall.reg C:\Lop SD\Backup-Lop\WINDOWS\Tasks\A57C2DA1906FA88D.job C:\Lop SD\catchme.log C:\Lop SD\Changelog Lop SD.txt C:\Lop SD\Crack.txt C:\Lop SD\Discl_en.vbs C:\Lop SD\Discl_fr.vbs C:\Lop SD\Discl_ne.vbs C:\Lop SD\Discl_sp.vbs C:\Lop SD\Discl_su.vbs C:\Lop SD\exist.txt C:\Lop SD\LopR_1.txt C:\Lop SD\LopR_2.txt C:\Lop SD\Orph.egd C:\Lop SD\OsV.exe C:\Lop SD\Proc.txt C:\Lop SD\pv.exe C:\Lop SD\RKit.lsd C:\Lop SD\RoGUeS.lsd C:\Lop SD\RunTool.txt C:\Lop SD ask.txt C:\ToolBar SD C:\ToolBar SD\Autrinf.cmd C:\ToolBar SD\Back.cmd C:\ToolBar SD\Backup-TB\Program Files\BrowsingAdvisor\BrowsingAdvisor.dat C:\ToolBar SD\Backup-TB\Program Files\Mozilla Firefox\extensions\chrome.manifest C:\ToolBar SD\Backup-TB\Program Files\Mozilla Firefox\extensions\install.rdf C:\ToolBar SD\Backup-TB\Program Files\Search Settings\SearchSettings.dll C:\ToolBar SD\Backup-TB\Program Files\Search Settings\SearchSettings.exe C:\ToolBar SD\Backup-TB\Reg\HKCU_Run.reg C:\ToolBar SD\Backup-TB\Reg\HKLM_BHO.reg C:\ToolBar SD\Backup-TB\Reg\HKLM_Classes.reg C:\ToolBar SD\Backup-TB\Reg\HKLM_Run.reg C:\ToolBar SD\Backup-TB\Reg\HKLM_ToolBar.reg C:\ToolBar SD\Backup-TB\Reg\HKLM_Uninstall.reg C:\ToolBar SD\Changelog ToolBar.txt C:\ToolBar SD\Crack.txt C:\ToolBar SD\DemP.cmd C:\ToolBar SD\DirectFix.cmd C:\ToolBar SD\Discl_en.vbs C:\ToolBar SD\Discl_fr.vbs C:\ToolBar SD\Discl_sp.vbs C:\ToolBar SD\Doss.tbsd C:\ToolBar SD\Fich.cmd C:\ToolBar SD\FixExt.cmd C:\ToolBar SD\Kill.cmd C:\ToolBar SD\Langues.cmd C:\ToolBar SD\OsV.exe C:\ToolBar SD\paths.bat C:\ToolBar SD\pv.exe C:\ToolBar SD\Rech.cmd C:\ToolBar SD\RegP2.txt C:\ToolBar SD\RegP3.txt C:\ToolBar SD\RegP4.txt C:\ToolBar SD\RegP5.txt C:\ToolBar SD\RegPCU.txt C:\ToolBar SD\RegPLM.txt C:\ToolBar SD\RegTBSD.reg C:\ToolBar SD\RKit.lsd C:\ToolBar SD\RoGUeS.lsd C:\ToolBar SD\RunTool.txt C:\ToolBar SD\sed.exe C:\ToolBar SD\setpath.exe C:\ToolBar SD\TB_1.txt C:\ToolBar SD\ToolBarSD.cmd C:\ToolBar SD\ToolBarSD.ico C:\ToolBar SD\Uninstal.exe C:\WINDOWS\system32\404Fix.exe C:\WINDOWS\system32\AntiXPVSTFix.exe C:\WINDOWS\system32\IEDFix.C.exe C:\WINDOWS\system32 mp.reg C:\WINDOWS\system32\VACFix.exe . ---- Previous Run ------- . C:\Documents and Settings\acer\Bureaublackbird.jpg C:\WINDOWS\Downloaded Program Files\setup.inf C:\WINDOWS\system32\^^^^^^.exe C:\WINDOWS\system32\drivers pf.sys C:\WINDOWS\system32\packet.dll C:\WINDOWS\system32\pthreadVC.dll C:\WINDOWS\system32\WanPacket.dll C:\WINDOWS\system32\wpcap.dll . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games -------\Service_NPF ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-08 au 2008-10-08 )))))))))))))))))))))))))))))))))))) . 2008-10-06 22:12 . 2008-10-06 22:12 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-06 22:12 . 2008-10-06 22:12 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-06 22:12 . 2008-10-06 22:12 d-------- C:\Documents and Settings\acer\Application Data\Malwarebytes 2008-10-06 22:12 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-06 22:12 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-06 19:50 . 2008-10-06 21:44 1,518 --a------ C:\Documents and Settings\Orph.egd 2008-10-06 19:30 . 2008-10-06 19:30 d-------- C:\Documents and Settings\acer\Application Data\Uniblue 2008-10-06 19:19 . 2008-10-06 19:19 d-------- C:\Program Files\Uniblue 2008-10-06 19:17 . 2008-10-06 19:17 d--h----- C:\Documents and Settings\All Users\Application Data\{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151} 2008-10-06 18:54 . 2008-10-06 18:54 d-------- C:\Program Files\Trend Micro 2008-10-06 18:42 . 2008-10-06 18:42 72,192 --a------ C:\WINDOWS\system32 asklist.exe 2008-10-06 18:06 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2008-10-06 18:06 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2008-10-06 18:06 . 2008-09-19 12:26 82,944 --a------ C:\WINDOWS\system32\o4Patch.exe 2008-10-06 18:06 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe 2008-10-06 18:06 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2008-10-06 18:06 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2008-10-06 18:06 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2008-09-24 23:28 . 2008-09-24 23:28 d-------- C:\Program Files\Fichiers communs\Adobe AIR 2008-09-24 22:49 . 2008-09-24 22:49 d-------- C:\Program Files\NOS 2008-09-24 22:49 . 2008-09-24 22:49 d-------- C:\Documents and Settings\All Users\Application Data\NOS 2008-09-17 21:18 . 2008-09-17 21:18 d-------- C:\Program Files\PowerStrip 2008-09-17 21:18 . 2008-09-17 21:18 59 --a------ C:\WINDOWS\wininit.ini 2008-09-17 19:23 . 2008-09-17 19:23 d-------- C:\Program Files\Doom Builder 2008-09-17 19:23 . 2003-02-19 15:06 438,272 --a------ C:\WINDOWS\system32\cmcs21.ocx 2008-09-17 19:23 . 2003-02-19 15:07 303,104 --a------ C:\WINDOWS\system32\cmcs21.dll 2008-09-17 19:23 . 2004-02-08 19:55 180,132 --a------ C:\WINDOWS\system32\GDIPlus.tlb 2008-09-16 22:07 . 2004-03-08 23:00 124,688 --a------ C:\WINDOWS\system32\MSWINSCK.OCX . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-06 21:31 183,256 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2008-10-06 21:31 138,912 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2008-09-07 12:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\Blender Foundation 2008-09-05 12:54 --------- d-----w C:\Program Files\Microsoft Silverlight 2008-08-27 12:04 --------- d-----w C:\Program Files\3DO 2008-08-25 19:00 42,752 ----a-w C:\Documents and Settings\acer\Application Data\GDIPFONTCACHEV1.DAT 2008-08-24 14:18 --------- d-----w C:\Program Files\Fichiers communs\Adobe Systems Shared 2008-08-24 14:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision 2008-08-10 20:29 --------- d-----w C:\Program Files\Online TV & Radio Stations 2008-08-05 15:55 265,720 ----a-w C:\WINDOWS\system32\msdbg2.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll 2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll 2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll 2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR 2008-02-14 17:10 1 ----a-w C:\Documents and Settings\acer\SI.bin .

Destrio5 · Answer

---> Poste un nouveau rapport HijackThis

kuitar · Answer

hijackthis rapport : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:35, on 2008-10-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

Destrio5 · Answer

---> Mets à jour Java :
https://www.java.com/fr/download/manual.jsp

Tu n'as pas d'antivirus, il en faut un.

As-tu encore des problèmes ou on peut passer à la dernière étape ?

kuitar · Answer

Heu si j'ai spywar doctor, enfin j esais pas trop si l'on peut le considerer comme un anti virrus mais bon. Je instale java, je verifie pour les problème de song et je te transmet

Destrio5 · Answer

Spyware Doctor n'est pas un antivirus.

kuitar · Answer

Ok, heu comme gratuit tu me consierais quoi en atendant d'en payé un ou bien si c'est vraiment un bon autant le garder.

Destrio5 · Answer

Antivir.

kuitar · Answer

En plus de spywar doctor ou bien ils risquent de ne pas très bien coexister ? xD

Destrio5 · Answer

Pas de problème.

kuitar · Answer

Je fais une petite analyse avec je supose... ^-^

Destrio5 · Answer

C'est préférable.

Ordi devenu bcp - performant+problème de song - Page 2

Newsletters