Vérifier HIJACKTHIS SVP

merci de votre aide
j'ai désactivé les comptes utilisateurs

et fait te que décrit excusez s cela a pris beaucoup de temps

voici la copie de la manipe.


-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:28 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [1] ( 27-10-08|15:02 )

[ UAC => 0 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Users\Linda\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Crawler Radio & MP3 Player
C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Barre d'outils Crawler
C:\Program Files\Crawler
C:\Program Files\Crawler\Download
C:\Program Files\Crawler\Radio
C:\Program Files\Crawler\Shared
C:\Program Files\Crawler\Toolbar
C:\Program Files\Crawler\UserData

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.ledevoir.com/"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://fr.ca.acer.yahoo.com"
"Default_Page_URL"="http://fr.ca.acer.yahoo.com"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 27-10-08|15:03 - Option : [1]

-----------\\ Fin du rapport a 15:03:11,40

voilà
la fenetre c: est resté ouverte cette fois-ci
je l'ai fermer en cliquant sur le X
est-ce correcte?
voici le log


-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:28 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [2] ( 27-10-08|16:34 )

[ UAC => 1 ]

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.ledevoir.com/"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="http://fr.ca.acer.yahoo.com"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 27-10-08|15:03 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 27-10-08|16:35 - Option : [2]

-----------\\ Fin du rapport a 16:35:38,44

hé bien, ocmment tu sais ça que le uac était activé pourtant ce n'est pas moi qui la recoché....
enfin bref, cette fois-ci j'ai bien vérifié avant de démarrer le log.

le voila
-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:28 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [2] ( 27-10-08|17:01 )

[ UAC => 0 ]

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.ledevoir.com/"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="http://fr.ca.acer.yahoo.com"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 27-10-08|15:03 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 27-10-08|16:35 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 27-10-08|17:02 - Option : [2]

-----------\\ Fin du rapport a 17:02:05,75

en passant je viens de retourner voir et pouffff!! c'est encore coché
c'est normal ?

merci de prendre le temps de m'aider je l'apprécie beaucoup

j'ai vérifié avant de lancer le scan que le uac soit pas cocher


EST ce que mon ordi est infecté?



--------------------\\ Lop S&D 4.2.4-8 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:28 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 27-10-2008|09:15 )
Option : [1] ( 27-10-08|17:52 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[19-09-08|12:16] C:\Users\Linda\AppData\Local\Acer Arcade Deluxe
[17-09-08|15:40] C:\Users\Linda\AppData\Local\acer eNM
[06-10-08|08:37] C:\Users\Linda\AppData\Local\Adobe
[17-09-08|15:37] C:\Users\Linda\AppData\Local\Application Data
[07-10-08|23:11] C:\Users\Linda\AppData\Local\d3d9caps.dat
[25-10-08|12:13] C:\Users\Linda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[20-09-08|15:43] C:\Users\Linda\AppData\Local\GDIPFONTCACHEV1.DAT
[25-09-08|00:17] C:\Users\Linda\AppData\Local\Google
[17-09-08|15:37] C:\Users\Linda\AppData\Local\Historique
[27-10-08|16:58] C:\Users\Linda\AppData\Local\IconCache.db
[11-10-08|09:55] C:\Users\Linda\AppData\Local\Magentic
[25-10-08|13:24] C:\Users\Linda\AppData\Local\Microsoft
[18-10-08|22:28] C:\Users\Linda\AppData\Local\Microsoft Games
[19-10-08|12:56] C:\Users\Linda\AppData\Local\Oberon Games
[17-09-08|15:55] C:\Users\Linda\AppData\Local\PlayMovie
[18-09-08|18:06] C:\Users\Linda\AppData\Local\PowerCinema
[20-09-08|15:36] C:\Users\Linda\AppData\Local\Seven Zip
[27-10-08|17:51] C:\Users\Linda\AppData\Local\Temp
[17-09-08|15:37] C:\Users\Linda\AppData\Local\Temporary Internet Files
[19-09-08|12:04] C:\Users\Linda\AppData\Local\tjnet
[22-09-08|20:03] C:\Users\Linda\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[27-10-08 17:49][--ah-----] C:\Windows\tasks\SA.DAT
[27-10-08 17:48][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[26-09-08|22:28] C:\ProgramData\Adobe
[02-11-06|09:02] C:\ProgramData\Application Data
[26-09-08|07:02] C:\ProgramData\Avira
[17-09-08|15:33] C:\ProgramData\Bureau
[18-09-08|18:07] C:\ProgramData\CyberLink
[02-11-06|09:02] C:\ProgramData\Desktop
[02-11-06|09:02] C:\ProgramData\Documents
[26-09-08|20:09] C:\ProgramData\EA
[17-09-08|15:33] C:\ProgramData\Favoris
[02-11-06|09:02] C:\ProgramData\Favorites
[21-03-08|00:46] C:\ProgramData\FloodLightGames
[25-09-08|00:04] C:\ProgramData\Google
[15-10-08|03:44] C:\ProgramData\Lavasoft
[23-10-08|18:18] C:\ProgramData\ma-config.com
[25-09-08|09:48] C:\ProgramData\Malwarebytes
[26-09-08|06:59] C:\ProgramData\McAfee
[17-09-08|15:33] C:\ProgramData\Menu D‚marrer
[19-09-08|18:15] C:\ProgramData\Messenger Plus!
[18-10-08|18:04] C:\ProgramData\Microsoft
[20-09-08|15:41] C:\ProgramData\Microsoft Help
[17-09-08|15:33] C:\ProgramData\ModŠles
[26-09-08|20:25] C:\ProgramData\PlayFirst
[19-09-08|08:58] C:\ProgramData\Pure Networks
[26-09-08|06:56] C:\ProgramData\SiteAdvisor
[21-09-08|00:08] C:\ProgramData\SpinTop Games
[27-10-08|14:58] C:\ProgramData\Spybot - Search & Destroy
[24-10-08|10:18] C:\ProgramData\Spyware Terminator
[02-11-06|09:02] C:\ProgramData\Start Menu
[27-10-08|17:49] C:\ProgramData\TEMP
[02-11-06|09:02] C:\ProgramData\Templates
[19-10-08|12:17] C:\ProgramData\Trymedia
[20-09-08|12:38] C:\ProgramData\VistaCodecs

--------------------\\ Listing des dossiers dans C:\Program Files

[17-09-08|15:49] C:\Program Files\Acer
[17-09-08|15:56] C:\Program Files\Acer Inc
[26-09-08|22:29] C:\Program Files\Adobe
[17-09-08|15:50] C:\Program Files\Apoint2K
[26-09-08|07:02] C:\Program Files\Avira
[19-10-08|12:04] C:\Program Files\BFG
[24-09-08|23:51] C:\Program Files\CCleaner
[15-10-08|03:46] C:\Program Files\Common Files
[20-03-08|08:44] C:\Program Files\CONEXANT
[21-03-08|00:39] C:\Program Files\CyberLink
[15-10-08|13:08] C:\Program Files\Fast Image Resizer
[11-10-08|12:47] C:\Program Files\GameHouse
[25-09-08|00:04] C:\Program Files\Google
[21-09-08|19:47] C:\Program Files\InstallShield Installation Information
[20-03-08|08:33] C:\Program Files\Intel
[20-01-08|22:35] C:\Program Files\Internet Explorer
[30-09-08|15:31] C:\Program Files\Java
[17-09-08|15:40] C:\Program Files\Launch Manager
[15-10-08|03:47] C:\Program Files\Lavasoft
[23-10-08|18:19] C:\Program Files\ma-config.com
[11-10-08|09:10] C:\Program Files\Magentic
[24-10-08|10:07] C:\Program Files\Malwarebytes' Anti-Malware
[19-09-08|18:06] C:\Program Files\Messenger Plus! Live
[11-10-08|12:59] C:\Program Files\Microsoft Games
[21-09-08|19:54] C:\Program Files\Microsoft Office
[20-09-08|15:40] C:\Program Files\Microsoft Works
[20-01-08|22:35] C:\Program Files\Movie Maker
[02-11-06|08:37] C:\Program Files\MSBuild
[21-09-08|19:54] C:\Program Files\MSECache
[19-09-08|18:06] C:\Program Files\MSN Messenger
[21-03-08|00:25] C:\Program Files\NewTech Infosystems
[18-10-08|18:32] C:\Program Files\PC Tools Firewall Plus
[20-03-08|08:39] C:\Program Files\Realtek
[02-11-06|08:37] C:\Program Files\Reference Assemblies
[19-10-08|12:47] C:\Program Files\ReflexiveArcade
[05-10-08|13:22] C:\Program Files\Spybot - Search & Destroy
[18-10-08|18:38] C:\Program Files\Spyware Terminator
[27-10-08|11:36] C:\Program Files\Trend Micro
[27-10-08|17:50] C:\Program Files\WinClamAVShield
[20-01-08|22:35] C:\Program Files\Windows Calendar
[20-01-08|22:35] C:\Program Files\Windows Collaboration
[20-01-08|22:35] C:\Program Files\Windows Defender
[20-01-08|22:35] C:\Program Files\Windows Journal
[19-09-08|18:06] C:\Program Files\Windows Live
[22-09-08|22:50] C:\Program Files\Windows Live Safety Center
[19-10-08|12:09] C:\Program Files\Windows Mail
[20-01-08|22:35] C:\Program Files\Windows Media Player
[17-09-08|15:33] C:\Program Files\Windows NT
[20-01-08|22:35] C:\Program Files\Windows Photo Gallery
[20-01-08|22:35] C:\Program Files\Windows Sidebar
[25-09-08|08:30] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[26-09-08|22:28] C:\Program Files\Common Files\Adobe
[21-03-08|00:39] C:\Program Files\Common Files\InstallShield
[30-09-08|15:31] C:\Program Files\Common Files\Java
[21-03-08|00:25] C:\Program Files\Common Files\LightScribe
[21-09-08|19:54] C:\Program Files\Common Files\microsoft shared
[21-03-08|00:24] C:\Program Files\Common Files\muvee Technologies
[21-03-08|00:25] C:\Program Files\Common Files\NewTech Infosystems
[21-09-08|19:35] C:\Program Files\Common Files\Oberon Media
[25-09-08|17:34] C:\Program Files\Common Files\PC Tools
[02-11-06|07:18] C:\Program Files\Common Files\Services
[02-11-06|07:18] C:\Program Files\Common Files\SpeechEngines
[20-01-08|22:35] C:\Program Files\Common Files\System
[15-10-08|03:46] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 74 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Users\Linda\AppData\Roaming\MICROS~1\Windows\Cookies\linda@advertising[1].txt
C:\Users\Linda\AppData\Roaming\MICROS~1\Windows\Cookies\linda@adopt.euroclick[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-27 17:53:08
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:13][D:5]-> C:\Users\Linda\AppData\Local\Temp
[F:42][D:1]-> C:\Users\Linda\AppData\Roaming\MICROS~1\Windows\Cookies
[F:544][D:5]-> C:\Users\Linda\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:10]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 27-10-08|17:54 - Option : [1]

--------------------\\ Fin du rapport a 17:54:30
[ UAC => 1 ]

voilà j'ai refais un LOP comme tu m'as demandé et aussi hijackthis

je dois quitter pour le boulot je reviens dans 8-9h encore merci de ton aide.

voici les deux logs


--------------------\\ Lop S&D 4.2.4-8 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:28 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 27-10-2008|09:15 )
Option : [2] ( 28-10-08| 8:49 )

[ UAC => 0 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans Local

[19-09-08|12:16] C:\Users\Linda\AppData\Local\Acer Arcade Deluxe
[17-09-08|15:40] C:\Users\Linda\AppData\Local\acer eNM
[06-10-08|08:37] C:\Users\Linda\AppData\Local\Adobe
[17-09-08|15:37] C:\Users\Linda\AppData\Local\Application Data
[07-10-08|23:11] C:\Users\Linda\AppData\Local\d3d9caps.dat
[27-10-08|18:03] C:\Users\Linda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[20-09-08|15:43] C:\Users\Linda\AppData\Local\GDIPFONTCACHEV1.DAT
[25-09-08|00:17] C:\Users\Linda\AppData\Local\Google
[17-09-08|15:37] C:\Users\Linda\AppData\Local\Historique
[28-10-08|08:46] C:\Users\Linda\AppData\Local\IconCache.db
[11-10-08|09:55] C:\Users\Linda\AppData\Local\Magentic
[25-10-08|13:24] C:\Users\Linda\AppData\Local\Microsoft
[18-10-08|22:28] C:\Users\Linda\AppData\Local\Microsoft Games
[27-10-08|19:46] C:\Users\Linda\AppData\Local\Mozilla
[19-10-08|12:56] C:\Users\Linda\AppData\Local\Oberon Games
[17-09-08|15:55] C:\Users\Linda\AppData\Local\PlayMovie
[18-09-08|18:06] C:\Users\Linda\AppData\Local\PowerCinema
[20-09-08|15:36] C:\Users\Linda\AppData\Local\Seven Zip
[28-10-08|08:49] C:\Users\Linda\AppData\Local\Temp
[17-09-08|15:37] C:\Users\Linda\AppData\Local\Temporary Internet Files
[19-09-08|12:04] C:\Users\Linda\AppData\Local\tjnet
[22-09-08|20:03] C:\Users\Linda\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[28-10-08 08:47][--ah-----] C:\Windows\tasks\SA.DAT
[28-10-08 08:46][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[26-09-08|22:28] C:\ProgramData\Adobe
[02-11-06|09:02] C:\ProgramData\Application Data
[26-09-08|07:02] C:\ProgramData\Avira
[17-09-08|15:33] C:\ProgramData\Bureau
[18-09-08|18:07] C:\ProgramData\CyberLink
[02-11-06|09:02] C:\ProgramData\Desktop
[02-11-06|09:02] C:\ProgramData\Documents
[26-09-08|20:09] C:\ProgramData\EA
[17-09-08|15:33] C:\ProgramData\Favoris
[02-11-06|09:02] C:\ProgramData\Favorites
[21-03-08|00:46] C:\ProgramData\FloodLightGames
[25-09-08|00:04] C:\ProgramData\Google
[15-10-08|03:44] C:\ProgramData\Lavasoft
[23-10-08|18:18] C:\ProgramData\ma-config.com
[25-09-08|09:48] C:\ProgramData\Malwarebytes
[26-09-08|06:59] C:\ProgramData\McAfee
[17-09-08|15:33] C:\ProgramData\Menu D‚marrer
[19-09-08|18:15] C:\ProgramData\Messenger Plus!
[18-10-08|18:04] C:\ProgramData\Microsoft
[20-09-08|15:41] C:\ProgramData\Microsoft Help
[17-09-08|15:33] C:\ProgramData\ModŠles
[26-09-08|20:25] C:\ProgramData\PlayFirst
[19-09-08|08:58] C:\ProgramData\Pure Networks
[26-09-08|06:56] C:\ProgramData\SiteAdvisor
[21-09-08|00:08] C:\ProgramData\SpinTop Games
[27-10-08|14:58] C:\ProgramData\Spybot - Search & Destroy
[24-10-08|10:18] C:\ProgramData\Spyware Terminator
[02-11-06|09:02] C:\ProgramData\Start Menu
[28-10-08|08:47] C:\ProgramData\TEMP
[02-11-06|09:02] C:\ProgramData\Templates
[19-10-08|12:17] C:\ProgramData\Trymedia
[20-09-08|12:38] C:\ProgramData\VistaCodecs

--------------------\\ Listing des dossiers dans C:\Program Files

[17-09-08|15:49] C:\Program Files\Acer
[17-09-08|15:56] C:\Program Files\Acer Inc
[26-09-08|22:29] C:\Program Files\Adobe
[17-09-08|15:50] C:\Program Files\Apoint2K
[26-09-08|07:02] C:\Program Files\Avira
[19-10-08|12:04] C:\Program Files\BFG
[24-09-08|23:51] C:\Program Files\CCleaner
[15-10-08|03:46] C:\Program Files\Common Files
[20-03-08|08:44] C:\Program Files\CONEXANT
[28-10-08|08:42] C:\Program Files\Crawler
[21-03-08|00:39] C:\Program Files\CyberLink
[15-10-08|13:08] C:\Program Files\Fast Image Resizer
[11-10-08|12:47] C:\Program Files\GameHouse
[25-09-08|00:04] C:\Program Files\Google
[21-09-08|19:47] C:\Program Files\InstallShield Installation Information
[20-03-08|08:33] C:\Program Files\Intel
[20-01-08|22:35] C:\Program Files\Internet Explorer
[30-09-08|15:31] C:\Program Files\Java
[17-09-08|15:40] C:\Program Files\Launch Manager
[15-10-08|03:47] C:\Program Files\Lavasoft
[23-10-08|18:19] C:\Program Files\ma-config.com
[11-10-08|09:10] C:\Program Files\Magentic
[24-10-08|10:07] C:\Program Files\Malwarebytes' Anti-Malware
[19-09-08|18:06] C:\Program Files\Messenger Plus! Live
[11-10-08|12:59] C:\Program Files\Microsoft Games
[21-09-08|19:54] C:\Program Files\Microsoft Office
[20-09-08|15:40] C:\Program Files\Microsoft Works
[20-01-08|22:35] C:\Program Files\Movie Maker
[02-11-06|08:37] C:\Program Files\MSBuild
[21-09-08|19:54] C:\Program Files\MSECache
[19-09-08|18:06] C:\Program Files\MSN Messenger
[21-03-08|00:25] C:\Program Files\NewTech Infosystems
[18-10-08|18:32] C:\Program Files\PC Tools Firewall Plus
[20-03-08|08:39] C:\Program Files\Realtek
[02-11-06|08:37] C:\Program Files\Reference Assemblies
[19-10-08|12:47] C:\Program Files\ReflexiveArcade
[05-10-08|13:22] C:\Program Files\Spybot - Search & Destroy
[18-10-08|18:38] C:\Program Files\Spyware Terminator
[27-10-08|11:36] C:\Program Files\Trend Micro
[28-10-08|08:47] C:\Program Files\WinClamAVShield
[20-01-08|22:35] C:\Program Files\Windows Calendar
[20-01-08|22:35] C:\Program Files\Windows Collaboration
[20-01-08|22:35] C:\Program Files\Windows Defender
[20-01-08|22:35] C:\Program Files\Windows Journal
[19-09-08|18:06] C:\Program Files\Windows Live
[22-09-08|22:50] C:\Program Files\Windows Live Safety Center
[19-10-08|12:09] C:\Program Files\Windows Mail
[20-01-08|22:35] C:\Program Files\Windows Media Player
[17-09-08|15:33] C:\Program Files\Windows NT
[20-01-08|22:35] C:\Program Files\Windows Photo Gallery
[20-01-08|22:35] C:\Program Files\Windows Sidebar
[25-09-08|08:30] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[26-09-08|22:28] C:\Program Files\Common Files\Adobe
[21-03-08|00:39] C:\Program Files\Common Files\InstallShield
[30-09-08|15:31] C:\Program Files\Common Files\Java
[21-03-08|00:25] C:\Program Files\Common Files\LightScribe
[21-09-08|19:54] C:\Program Files\Common Files\microsoft shared
[21-03-08|00:24] C:\Program Files\Common Files\muvee Technologies
[21-03-08|00:25] C:\Program Files\Common Files\NewTech Infosystems
[21-09-08|19:35] C:\Program Files\Common Files\Oberon Media
[25-09-08|17:34] C:\Program Files\Common Files\PC Tools
[02-11-06|07:18] C:\Program Files\Common Files\Services
[02-11-06|07:18] C:\Program Files\Common Files\SpeechEngines
[20-01-08|22:35] C:\Program Files\Common Files\System
[15-10-08|03:46] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 71 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-28 08:49:43
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:17][D:7]-> C:\Users\Linda\AppData\Local\Temp
[F:25][D:1]-> C:\Users\Linda\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1][D:0]-> C:\Users\Linda\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:3][D:10]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 27-10-08|17:54 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 28-10-08| 8:51 - Option : [2]

--------------------\\ Fin du rapport a 8:51:20
[ UAC => 1 ]


et le hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:01:38, on 28-10-08
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Users\Linda\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\Windows\system32\NOTEPAD.EXE
D:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Crawler\CToolbar.exe
C:\Users\Public\Downloads\firefox-téléchargement\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ledevoir.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [cdloader] "C:\Users\Linda\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

alors voila
j,ai désinstaller et réinstallé le toolbar S&D
le post


-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:28 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)
J:\ (CD or DVD)
K:\ (USB) - FAT - Total:29 Mo (Free:0 Go)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [1] ( 28-10-08|16:09 )

[ UAC => 0 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Barre d'outils Crawler
C:\Program Files\Crawler
C:\Program Files\Crawler\adrkeys.dat
C:\Program Files\Crawler\COMMON_FF.dat
C:\Program Files\Crawler\confirm.dat
C:\Program Files\Crawler\ctbcomm.dll
C:\Program Files\Crawler\ctbr.dll
C:\Program Files\Crawler\CTConf.dat
C:\Program Files\Crawler\CTipsDef.dll
C:\Program Files\Crawler\CToolbar.exe
C:\Program Files\Crawler\CUpdate.exe
C:\Program Files\Crawler\Download
C:\Program Files\Crawler\firefox
C:\Program Files\Crawler\Languages
C:\Program Files\Crawler\lookfor.dat
C:\Program Files\Crawler\majorse.dat
C:\Program Files\Crawler\rootmenu.dat
C:\Program Files\Crawler\services.dat
C:\Program Files\Crawler\STWSGLanguageAct
C:\Program Files\Crawler\STWSG_FF.dat
C:\Program Files\Crawler\TBR5LanguageAct
C:\Program Files\Crawler\Update
C:\Program Files\Crawler\WebSecurityGuard.dll
C:\Program Files\Crawler\WSGData

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.ledevoir.com/"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="http://fr.ca.acer.yahoo.com"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 27-10-08|15:03 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 27-10-08|16:35 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 27-10-08|17:02 - Option : [2]
4 - "C:\ToolBar SD\TB_4.txt" - 28-10-08|16:09 - Option : [1]

-----------\\ Fin du rapport a 16:09:35,24

***********************************



je viens de désinstaller hijackthis et vais poster le log

pourquoi le UAC s'active tout le temps meme lorsque je le décoche ?

je te remerci de ta patience et de ton aide tu es vraiment très sympa


-----------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T1400 @ 1.73GHz )
BIOS : Default System BIOS
USER : Linda ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:50 Go (Free:27 Go)
D:\ (Local Disk) - NTFS - Total:49 Go (Free:42 Go)
E:\ (CD or DVD)
J:\ (CD or DVD)
K:\ (USB) - FAT - Total:29 Mo (Free:0 Go)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [2] ( 29-10-08| 6:55 )

[ UAC => 0 ]

-----------\\ SUPPRESSION

Supprime! - C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Barre d'outils Crawler
Supprime! - C:\Program Files\Crawler\adrkeys.dat
Supprime! - C:\Program Files\Crawler\COMMON_FF.dat
Supprime! - C:\Program Files\Crawler\confirm.dat
Supprime! - C:\Program Files\Crawler\ctbcomm.dll
Supprime! - C:\Program Files\Crawler\ctbr.dll
Supprime! - C:\Program Files\Crawler\CTConf.dat
Supprime! - C:\Program Files\Crawler\CTipsDef.dll
Supprime! - C:\Program Files\Crawler\CToolbar.exe
Supprime! - C:\Program Files\Crawler\CUpdate.exe
Supprime! - C:\Program Files\Crawler\Download
Supprime! - C:\Program Files\Crawler\firefox
Supprime! - C:\Program Files\Crawler\Languages
Supprime! - C:\Program Files\Crawler\lookfor.dat
Supprime! - C:\Program Files\Crawler\majorse.dat
Supprime! - C:\Program Files\Crawler\rootmenu.dat
Supprime! - C:\Program Files\Crawler\services.dat
Supprime! - C:\Program Files\Crawler\STWSGLanguageAct
Supprime! - C:\Program Files\Crawler\STWSG_FF.dat
Supprime! - C:\Program Files\Crawler\TBR5LanguageAct
Supprime! - C:\Program Files\Crawler\Update
Supprime! - C:\Program Files\Crawler\WebSecurityGuard.dll
Supprime! - C:\Program Files\Crawler\WSGData
Supprime! - C:\Program Files\Crawler

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.ledevoir.com/"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="http://fr.ca.acer.yahoo.com"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 27-10-08|15:03 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 27-10-08|16:35 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 27-10-08|17:02 - Option : [2]
4 - "C:\ToolBar SD\TB_4.txt" - 28-10-08|16:09 - Option : [1]
5 - "C:\ToolBar SD\TB_5.txt" - 29-10-08| 6:56 - Option : [2]

-----------\\ Fin du rapport a 6:56:18,75

le voila

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:31:56, on 29-10-08
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Users\Linda\AppData\Local\Temp\RtkBtMnt.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ledevoir.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [cdloader] "C:\Users\Linda\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

voila
malaware a trouve 3 infections voici le log que jai refais apres avoir éliminé

et jai aussi fait un scan avec hijackthis

il est bizarre mon portable !!!! avec explorer il est au ralenti et avec firefox il roule assez bien
de toute facon je voudrais ÉLIMINER explorer completement apres avoir bien nettoyer le tout

Vista j'ai pas le choix de le garder car il venait avec le portable sauf qu'il prend beaucoup beaucoup de place.
enfin une chose à la fois

MERCI cousin français pour ton aide


Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1335
Windows 6.0.6001 Service Pack 1

29-10-08 10:36:50
mbam-log-2008-10-29 (10-36-50).txt

Type de recherche: Examen complet (C:\|D:\|E:\|J:\|K:\|)
Eléments examinés: 99843
Temps écoulé: 12 minute(s), 21 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


voici le LOG DU hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:38:22, on 29-10-08
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Safe mode

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\System32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ledevoir.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [cdloader] "C:\Users\Linda\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

merci pour cette précision pour l'explorer je vais l'utiliser que pour le hotmail et msn

je préfère firefox

voila le log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:38:22, on 29-10-08
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Safe mode

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\System32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ledevoir.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [cdloader] "C:\Users\Linda\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

encore merci pour ton aide

je dois quitter pour aller déneiger ma voiture et quelques HÉ oui l'hiver est arrivé ici
je reviens dans quelques heures

bonne soirée

hello mon cher monsieur Belge ;-)

bien j'ai un BUG* je n'arrive tout simplement pas a retracer le javara.log j'ai lancé une recherche et rien..pourtant j'ai suivi a la lettre tes instructions et celle du programme ;(

en plus juste avant de fermer le programme dit * it will open now the file log .et il ne l'ouvre pas

j'ai réussis apres 3 tentatives a éliminer les lignes dans le hijackthis

en voici le log pour le javara tu as un astuce pour le retrouver.....j'ai essayer *.log
j'ai tenter en écrivant javara.....a partir de la racine de c: il est tout simplemement pas là

comme je disais pour la vitesse cela est revenu à la normal je peut taper mes 50mots minutes ah ah ha au clavier et il me suis sans corriger mes fautes de frappe dommage :)

donc mon portable avait VRAIMENT un virus bordel il a pas 30 jours que déjà il est infecter

est ce que je peux pousser mon audace en te posant une autre question..dis moi?

oupsss
j'ai oublier de copier le log de hijack le voici

Please help us improve HijackThis by reporting this error

Click 'Yes' to submit

Error Details:

An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
Error #5 - Invalid procedure call or argument

Windows version: Windows NT 6.00.1905
MSIE version: 7.0.6001.18000
HijackThis version: 2.0.2


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:48:09, on 29-10-08
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\mobsync.exe
C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Linda\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\PROGRA~1\Magentic\bin\MgApp.exe
C:\Users\Linda\AppData\Roaming\mjusbsp\magicJack.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.ledevoir.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer\Acer Registration\ACE1.exe" /startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [cdloader] "C:\Users\Linda\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

dis moi tout les Belges sont aussi gentil que toi?

sérieusement voici ma question

que proposes tu pour bien protéger mon portable .....
pourtant je ne suis pas une adepte de téléchargement

j'ai présentement comme

pare-feu PC Tools firewall plus

anti-virus avira


spyware Terminator en protection réel

CCcleaner

windows defender


une fois semaine je scan avec
malabyte malaware

alors avec anti-virus et pare-feu comment j'ai choppé ce bug??

autre question

comment savoir si ma connection est sécuritaire je suis connecté wireless a l'achat j'ai du sécurisé le réseau je crois mais comment savoir si j'ai réussis la manipe?

merci de prendre de ton temps pour m'aider je l'apprécie beaucoup

bonne journée

oufffffffffffff ça en fait des manipulations ça
ayolle, faut que je fasse tout ca a chaque semaine? je suis ben trop paresseuse ;-(


************
les mises à jours de windows se font automatiquement et je soupçonne la dernière mise à jour d'être à l,origine du ralentissement de mon portable

**************
sous windows VISTA Programmes et fonctionnalité = pour désinstaller et ajouter un programme ( cela ma pris des heures pour le trouver ah ah ah et fière de partager ma découverte avec toi ) je sais, je pouvais surement poser la question en ligne mais j'ai pas encore ce réflexe je cherche et cherche jusqu'à ce que je *pogne les nerfs et demande l'aide d'un faux-belge bien aimable de m'aider ;-)
********************
le cccleaner est déja en mode nettoyage au démarrage

************
je n'utilise pas de P2P a moins que youtube et daylimotion sont des P2P ?

***************
dis donc ces fastidieux de tenir un pc sécurisé encore chanceux que dans le monde réel cela ne soit pas autant demandant de ce protéger des virus. condom du plaisir lol

************

en utilisant MSN si je n'accepte aucun fichier j'ai pas de chance de contaminer le portable exacte?

********************

j'ai un disque dur externe qui contient tout pleins de trucs de mon ancien pc qui lui a rendu l'âme il a attraper un truc et la carte-mère a été bousillé......j'ai transféré quelques dossiers et jeux ( avec crack shutttttt)
pourtant j'ai passer l'anti-virus a jour et cccleaner et spy-bot dessus pour être certaine que je n'infecterais pas mon portable.........
Je croyais que l'anti-virus inoculerait d'ancien virus si il en trouvait.....?
donc cela veut dire je ne peux ré-installer ces jeux sniffffffff snifffffffffff.....
****************************

merci mille fois pour ton aide et conseils je vais aller lire j'en ai pour la journée ah ah tout en regardant la neige tomber
bonne soirée

shion-ares,

excuse moi je ne comprend pas ton dernier post?

il va faire quoi le tools-cleaners?

rebonjour Shion-ares,

SUPER intéressant et instructif les liens que tu as partagé avec moi wow je vais devenir une pro un grand merci. de plus c'est très bien expliqué et avec des images encore mieux ;-)

j'ai pas tout fait les manipulations que tu m,.as recommandé je manque un peu de temps ( halloween et grand-maman doit déguiser 7 petits monstres aujourd'hui ) mais je vais me reprendre ce weekend.

*************
voici le log du toolscleaner tel que tu me l'as demandé j'ai du m'y prendre par deux fois car il ne voulait pas supprimé le hijackthis.

********************
maintenant comment fait-on pour mettre ce message comme RÉSOLU ? Cela ne me donne pas le choix
la raison peut-elle être que le message initial a été fait sous EXPLORER et que je suis sous firefox présentement?

*************
je te souhaite un très bon Halloween si vous célébrer l'équinox de l,automne de cette façon chez toi.

encore merci pour ton aide précieuse et surement que cela va aider plusieurs autres personnes

bon weekend

************

[ Rapport ToolsCleaner version 2.2.4 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\lopR.txt: trouvé !
C:\TB.txt: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !

---------------------------------
-->- Suppression:

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: supprimé !
C:\lopR.txt: supprimé !
C:\TB.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: supprimé !