Infection virale plus de wifi au secours

Bonjour

Voici le rapport émi avex Findykill

C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAP\DAP.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conime.exe
C:\Users\PATRICK\Desktop\Tools\Proc.exe

A bientôt
mohhican81

Re bonjour ,

j'ai reéssayé avec hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:01, on 2008-12-14
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAP\DAP.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [ChangeFilterMerit] C:\Program Files\NewSoft\Presto! PVR\ChangeFilterMerit.exe
O4 - HKLM\..\Run: [Presto! PVR Monitor] C:\Program Files\NewSoft\Presto! PVR\Monitor.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [toscdspd] TOSCDSPD.EXE
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - https://www.ebay.fr (file missing)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - https://www.amazon.fr/exec/obidos/subst/home/home.html/262-6263521-6325360?_encoding=UTF8&link_code=hom&tag=Toshibafrbholink-21 (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/fr/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe (file missing)
O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - Unknown owner - C:\Program Files\McAfee\MSK\MskSrver.exe (file missing)
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Bonsoir,

Désolé la seule chose que je peu avoir de findykill tu la eux un post avant . J'ai suivi ta procédure mais je n'ai que sa , c'est pour sa que je t'ai envoyé l'autre . Attention le pc en question est sous vista .

Merci d'avance

Mohhican81

Bonjour,

Je viens de retrouver ma connection wifi en suivant tes conseils merci beaucoup pour sa .

Ensuite aprés avoir télécharger ComboFix et suivi les instruction à la lettre, la console de récupération s'installe mais j'ai ce message qui s'affiche

- "Failed to get data 'EnableLUA' " avant que combo fix ne démarre l'analyse

Ps: tous systéme de protection désactivé biensùr (parefeu antivirus etc...)

Ensuite aprés l'analyse au moment de la création du fichier txt ce message s'affiche " Find String (QGREP) Utility a cessé de fonctionner" .

Et la pas de rapport à transmettre

Ma wifi fonctionne trés bien mais il y a toujours ses messages du style:

" C:\Program Files\Windows Defender\MSASCui.exe n'est pas une application Win32 valide" et ceci n'est qu'un exemple quant je clique sur certain raccourci

En espérant que ceci éclaire ton chemin

A bientôt

MOHHICAN81

Bonjour,

Je viens d'essayé à nouveau findykill et là à ma grande surprise il ne fonctionne pas .

je viens d'essayé à nouveau Combofix que j'ai renommé

PAR CONTRTE TOUJOURS CECI AU DEMARAGE

Ensuite aprés avoir télécharger ComboFix et suivi les instruction à la lettre, la console de récupération s'installe mais j'ai ce message qui s'affiche

- "Failed to get data 'EnableLUA' " avant que combo fix ne démarre l'analyse ET AUSSI PENDANT L'ANALYSE

Ps: tous systéme de protection désactivé biensùr (parefeu antivirus etc...)

Ensuite aprés l'analyse au moment de la création du fichier txt ce message s'affiche " Find String (QGREP) Utility a cessé de fonctionner

donc pas de rapport grrr!!!!

me revoilà

Bon impossible de lancer le scan en ligne

sa deviens catastrophique

Bon toujours pas possible même en le renommant killfix


Il y a vraiment un soucis

Bonjour,

Aprés une multitude d'essai aucuns des scans en ligne possible , ils sont tous systématiquement bloqués .

Impossible d'envoyé un rapport toujours une erreur en cours de route.

J'ai essayé par le biais d'une clée USB VIA MON ORDI de bureau idem.

J'ai essayé en mode sans échec pareil .

Peut on trouvez une solution

Mohhican81

Je viens de faire une nouvelle analyse voilà le nouveau rapport

il y a ce message aussi "UTILITAIRE (QGREP) a cesser de fonctionner"

je vire mac afee et je te tiens au courant

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Turion(tm) X2 Dual-Core Mobile RM-70 )
BIOS : Ver 1.00PARTTBL
USER : PATRICK ( Not Administrator ! )
BOOT : Normal boot
Antivirus : Kaspersky Anti-Virus 8.0.0.357 (Not Activated)
C:\ (Local Disk) - NTFS - Total:150 Go (Free:93 Go)
D:\ (USB) - FAT - Total:247 Mo (Free:0 Go)
E:\ (Local Disk) - NTFS - Total:147 Go (Free:124 Go)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 2008-12-17|17:22 )

--------------------\\ Listing des dossiers dans Local

[2008-12-01|00:52] C:\Users\PATRICK\AppData\Local\Adobe
[2008-09-14|09:45] C:\Users\PATRICK\AppData\Local\Apple
[2008-10-17|19:22] C:\Users\PATRICK\AppData\Local\Apple Computer
[2008-09-12|17:47] C:\Users\PATRICK\AppData\Local\Application Data
[2008-09-12|17:53] C:\Users\PATRICK\AppData\Local\ATI
[2008-11-25|13:32] C:\Users\PATRICK\AppData\Local\d3d9caps.dat
[2008-12-16|12:49] C:\Users\PATRICK\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-09-13|21:42] C:\Users\PATRICK\AppData\Local\eMule
[2008-12-13|11:21] C:\Users\PATRICK\AppData\Local\FASTWiz.log
[2008-11-30|19:52] C:\Users\PATRICK\AppData\Local\GDIPFONTCACHEV1.DAT
[2008-09-12|18:24] C:\Users\PATRICK\AppData\Local\Google
[2008-09-12|17:47] C:\Users\PATRICK\AppData\Local\Historique
[2008-12-17|11:08] C:\Users\PATRICK\AppData\Local\IconCache.db
[2008-12-07|18:23] C:\Users\PATRICK\AppData\Local\IM
[2008-12-01|18:48] C:\Users\PATRICK\AppData\Local\Innovative Solutions
[2008-09-15|12:03] C:\Users\PATRICK\AppData\Local\LCIbanner0.html
[2008-09-15|12:05] C:\Users\PATRICK\AppData\Local\LCIbanner1.html
[2008-09-15|12:01] C:\Users\PATRICK\AppData\Local\LciData
[2008-09-15|12:06] C:\Users\PATRICK\AppData\Local\LciPersonalization.data
[2008-09-15|12:06] C:\Users\PATRICK\AppData\Local\Lcistatistics.xml
[2008-11-10|19:38] C:\Users\PATRICK\AppData\Local\Microsoft
[2008-11-03|22:07] C:\Users\PATRICK\AppData\Local\Microsoft Games
[2008-10-29|17:09] C:\Users\PATRICK\AppData\Local\Microsoft Help
[2008-12-13|11:15] C:\Users\PATRICK\AppData\Local\MigWiz
[2008-11-05|21:57] C:\Users\PATRICK\AppData\Local\Newsoft
[2008-12-17|17:21] C:\Users\PATRICK\AppData\Local\Temp
[2008-09-12|17:47] C:\Users\PATRICK\AppData\Local\Temporary Internet Files
[2008-09-12|17:53] C:\Users\PATRICK\AppData\Local\Toshiba
[2008-09-12|18:14] C:\Users\PATRICK\AppData\Local\VirtualStore

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[2008-12-17 12:03][--ah-----] C:\Windows\tasks\SA.DAT
[2008-12-17 11:14][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[2008-05-30|11:34] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[2008-12-01|20:27] C:\ProgramData\Acronis
[2008-12-01|00:51] C:\ProgramData\Adobe
[2008-09-14|09:45] C:\ProgramData\Apple
[2008-09-14|09:47] C:\ProgramData\Apple Computer
[2006-11-02|14:02] C:\ProgramData\Application Data
[2008-09-12|17:53] C:\ProgramData\ATI
[2008-09-12|18:41] C:\ProgramData\Bluetooth
[2008-09-12|17:47] C:\ProgramData\Bureau
[2006-11-02|14:02] C:\ProgramData\Desktop
[2006-11-02|14:02] C:\ProgramData\Documents
[2008-09-13|21:43] C:\ProgramData\eMule
[2008-09-12|17:47] C:\ProgramData\Favoris
[2006-11-02|14:02] C:\ProgramData\Favorites
[2008-11-05|21:43] C:\ProgramData\GeoVid
[2008-05-29|10:45] C:\ProgramData\Google
[2008-09-13|08:40] C:\ProgramData\IM
[2008-09-13|08:38] C:\ProgramData\IncrediMail
[2008-09-12|18:10] C:\ProgramData\IsolatedStorage
[2008-12-17|12:05] C:\ProgramData\Kaspersky Lab
[2008-09-12|23:49] C:\ProgramData\LGMOBILEAX
[2008-12-17|12:25] C:\ProgramData\Malwarebytes
[2008-11-25|13:49] C:\ProgramData\McAfee
[2008-09-12|17:47] C:\ProgramData\Menu Démarrer
[2008-12-05|09:41] C:\ProgramData\Microsoft
[2008-12-12|03:11] C:\ProgramData\Microsoft Help
[2008-09-12|17:47] C:\ProgramData\Modèles
[2008-12-16|23:01] C:\ProgramData\SiteAdvisor
[2008-09-15|08:55] C:\ProgramData\Skyline
[2008-10-20|09:00] C:\ProgramData\Skype
[2008-09-16|21:23] C:\ProgramData\SpeedBit
[2006-11-02|14:02] C:\ProgramData\Start Menu
[2008-11-28|19:39] C:\ProgramData\SUPERAntiSpyware.com
[2008-12-16|16:35] C:\ProgramData\TEMP
[2006-11-02|14:02] C:\ProgramData\Templates
[2008-09-12|17:51] C:\ProgramData\Toshiba
[2008-09-12|17:48] C:\ProgramData\ToshibaEurope
[2008-05-29|10:30] C:\ProgramData\Ulead Systems
[2008-11-24|22:45] C:\ProgramData\WindowsSearch
[2008-12-05|09:29] C:\ProgramData\WLInstaller

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-05-30|11:34] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[2008-12-01|00:51] C:\Program Files\Adobe
[2008-11-24|18:10] C:\Program Files\Alwil Software
[2008-09-13|11:22] C:\Program Files\Anaconda
[2008-09-12|16:39] C:\Program Files\Apoint2K
[2008-09-14|09:45] C:\Program Files\Apple Software Update
[2008-09-12|16:36] C:\Program Files\ATI
[2008-09-12|16:38] C:\Program Files\ATI Technologies
[2008-09-12|16:39] C:\Program Files\Camera Assistant Software for Toshiba
[2008-12-17|11:26] C:\Program Files\CCleaner
[2008-12-16|17:23] C:\Program Files\Common Files
[2008-05-29|09:59] C:\Program Files\CONEXANT
[2008-09-16|21:24] C:\Program Files\DAP
[2008-11-02|20:43] C:\Program Files\DEXXON
[2008-09-13|21:42] C:\Program Files\eMule
[2008-12-12|18:51] C:\Program Files\EPSON
[2008-09-12|17:47] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[2008-11-05|21:43] C:\Program Files\GeoVid
[2008-05-29|10:46] C:\Program Files\Google
[2008-09-13|08:39] C:\Program Files\IncrediMail
[2008-11-29|16:39] C:\Program Files\InstallShield Installation Information
[2008-11-25|13:22] C:\Program Files\Internet Explorer
[2008-05-29|10:31] C:\Program Files\InterVideo
[2008-09-12|18:31] C:\Program Files\IVT Corporation
[2008-05-29|09:50] C:\Program Files\Java
[2008-11-25|14:00] C:\Program Files\Kaspersky Lab
[2008-09-15|11:59] C:\Program Files\LCI
[2008-12-17|14:38] C:\Program Files\Malwarebytes' Anti-Malware
[2008-11-26|12:47] C:\Program Files\Marvell
[2008-11-24|20:44] C:\Program Files\McAfee
[2008-11-24|20:25] C:\Program Files\McAfee.com
[2008-11-30|12:53] C:\Program Files\Micro Application
[2008-12-05|09:44] C:\Program Files\Microsoft
[2006-11-02|13:37] C:\Program Files\Microsoft Games
[2008-11-05|21:43] C:\Program Files\Microsoft Office
[2008-05-30|11:38] C:\Program Files\Microsoft Works
[2008-05-30|11:32] C:\Program Files\Microsoft.NET
[2008-01-21|03:35] C:\Program Files\Movie Maker
[2006-11-02|13:37] C:\Program Files\MSBuild
[2008-05-29|09:44] C:\Program Files\MSXML 4.0
[2008-05-29|10:45] C:\Program Files\myphotobook
[2008-05-29|10:00] C:\Program Files\NetWaiting
[2008-11-02|21:07] C:\Program Files\NewSoft
[2008-05-29|10:00] C:\Program Files\O2Micro Flash Memory Card Driver
[2008-09-16|19:34] C:\Program Files\Olitec
[2008-11-25|13:56] C:\Program Files\Panda Security
[2008-09-13|15:53] C:\Program Files\Picasa2
[2008-09-14|09:48] C:\Program Files\QuickTime
[2008-09-12|16:43] C:\Program Files\REALTEK RTL8187B Wireless LAN Driver
[2006-11-02|13:37] C:\Program Files\Reference Assemblies
[2008-12-01|01:00] C:\Program Files\RegCleaner
[2008-11-30|10:58] C:\Program Files\Serif
[2008-12-16|23:00] C:\Program Files\SiteAdvisor
[2008-09-15|08:55] C:\Program Files\Skyline
[2008-10-20|09:00] C:\Program Files\Skype
[2008-11-25|14:21] C:\Program Files\SMC
[2008-12-17|12:07] C:\Program Files\SomeWare
[2008-11-30|12:10] C:\Program Files\SUPERAntiSpyware
[2008-09-12|17:51] C:\Program Files\Toshiba
[2008-11-09|22:49] C:\Program Files\Toshiba TEMPRO
[2008-12-14|18:59] C:\Program Files\Trend Micro
[2008-05-29|10:27] C:\Program Files\Ulead Systems
[2006-11-02|14:01] C:\Program Files\Uninstall Information
[2008-12-16|13:38] C:\Program Files\VS Revo Group
[2008-01-21|03:35] C:\Program Files\Windows Calendar
[2008-01-21|03:35] C:\Program Files\Windows Collaboration
[2008-01-21|03:35] C:\Program Files\Windows Defender
[2008-01-21|03:35] C:\Program Files\Windows Journal
[2008-12-05|09:45] C:\Program Files\Windows Live
[2008-09-13|08:18] C:\Program Files\Windows Live Safety Center
[2008-12-12|03:16] C:\Program Files\Windows Mail
[2008-05-29|10:30] C:\Program Files\Windows Media Components
[2008-01-21|03:35] C:\Program Files\Windows Media Player
[2008-09-12|17:47] C:\Program Files\Windows NT
[2008-01-21|03:35] C:\Program Files\Windows Photo Gallery
[2008-01-21|03:35] C:\Program Files\Windows Sidebar

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[2008-12-01|00:51] C:\Program Files\Common Files\Adobe
[2008-09-14|09:47] C:\Program Files\Common Files\Apple
[2008-05-30|11:32] C:\Program Files\Common Files\DESIGNER
[2008-10-14|20:11] C:\Program Files\Common Files\GeoVid
[2008-05-29|10:31] C:\Program Files\Common Files\InstallShield
[2008-05-29|09:50] C:\Program Files\Common Files\Java
[2008-11-24|20:26] C:\Program Files\Common Files\McAfee
[2008-09-13|23:08] C:\Program Files\Common Files\microsoft shared
[2008-11-30|10:59] C:\Program Files\Common Files\MSSoap
[2008-11-02|21:08] C:\Program Files\Common Files\NewSoft
[2006-11-02|12:18] C:\Program Files\Common Files\Services
[2008-10-20|09:00] C:\Program Files\Common Files\Skype
[2006-11-02|12:18] C:\Program Files\Common Files\SpeechEngines
[2008-01-21|03:35] C:\Program Files\Common Files\System
[2008-09-12|17:52] C:\Program Files\Common Files\Toshiba Shared
[2008-05-29|10:31] C:\Program Files\Common Files\Ulead Systems
[2008-12-05|09:42] C:\Program Files\Common Files\Windows Live
[2008-09-12|23:55] C:\Program Files\Common Files\WindowsLiveInstaller
[2008-11-28|19:38] C:\Program Files\Common Files\Wise Installation Wizard

--------------------\\ Process

( 90 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\Users\PATRICK\AppData\Roaming\MICROS~1\Windows\Cookies\patrick@advertising[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-17 17:34:55
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwEnumerateKey, ZwQueryKey, ZwOpenKey, ZwClose, ZwEnumerateValueKey, ZwQueryValueKey, ZwOpenFile, ZwQueryDirectoryFile, ZwQuerySystemInformation
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 30

--------------------\\ Recherche d'autres infections

bonjour ,

j'ai réussi à viré quelque virus avec panda pro 2009

voici le rapport

Rapport des incidents de Panda Antivirus Pro 2009
Filtre sélectionné :Virus détecté, Fichier suspect, Fichier dangereux, Exécution du script, Connexion téléphonique, Tentative de connexion, Attaque d'analyse de ports, Attaque de type refus de service, Usurpation d'identité, Blocage d'IP attaquant, Activation, Désactivation, Mise à jour, Début de l'analyse, Fin de l'analyse, Date : toutes
INCIDENT SOURCE DATE - HEURE RESULTAT INFORMATION SUPPLEMENTAIRE
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Fin de l'analyse Analyse antivirus immédiate 2008-12-21 02:30 Analyse : Analyse de tout le système
Virus détecté : Application/Psexec.A Analyse antivirus immédiate 2008-12-21 01:59 Supprimé Emplacement : C:\Windows\PSEXESVC.EXE
Programme potentiellement indésirabl... Protection antivirus 2008-12-21 01:58 Désinfecté Emplacement : C:\WINDOWS\PSEXESVC.EXE
Virus détecté : Generic Malware Analyse antivirus immédiate 2008-12-21 00:43 Signalé Emplacement : C:\Users\PATRICK\Documents\SDFix.exe[C:\Users\PATRICK\Documents\SDFix.exe][SDFix\apps\Cghtme.exe]
Virus détecté : Generic Malware Analyse antivirus immédiate 2008-12-21 00:43 Signalé Emplacement : C:\Users\PATRICK\Documents\SDFix.exe[C:\Users\PATRICK\Documents\SDFix.exe][SDFix\catchme.exe]
Virus détecté : Generic Malware Analyse antivirus immédiate 2008-12-21 00:31 Supprimé Emplacement : C:\SDFix\catchme.exe
Virus détecté : Generic Malware Analyse antivirus immédiate 2008-12-21 00:31 Supprimé Emplacement : C:\SDFix\apps\Cghtme.exe
Logiciel espion détecté : Cookie/Adv... Analyse antivirus immédiate 2008-12-21 00:16 Supprimé Emplacement : C:\Lop SD\Backup-Lop\Users\PATRICK\AppData\Roaming\MICROS~1\Windows\Cookies\patrick@advertising[2].txt
Début de l'analyse Analyse antivirus immédiate 2008-12-21 00:15 Analyse : Analyse de tout le système
Fin de l'analyse Analyse antivirus immédiate 2008-12-20 23:55 Analyse :
Mise à jour Système d'actualisation 2008-12-20 23:54 Correct Type : Protection d'identité
Début de l'analyse Analyse antivirus immédiate 2008-12-20 23:54 Analyse :
Mise à jour Système d'actualisation 2008-12-20 23:54 Correct Signatures de menaces
Mise à jour Système d'actualisation 2008-12-20 23:54 Correct Type : autofix hft80807s7
Mise à jour Système d'actualisation 2008-12-20 23:54 Correct Fichier : Signatures de menaces

a bientôt

Bonjour,

Je n'est pas pu faire fonctionner Tools cleaner

mais j'ai un rapport avec rsit

Logfile of random's system information tool 1.05 (written by random/random)
Run by PATRICK at 2008-12-21 12:09:28
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 95 GB (62%) free of 154 GB
Total RAM: 3070 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:09, on 2008-12-21
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApVxdWin.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\PATRICK\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\PATRICK.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\avciman.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [ChangeFilterMerit] C:\Program Files\NewSoft\Presto! PVR\ChangeFilterMerit.exe
O4 - HKLM\..\Run: [Presto! PVR Monitor] C:\Program Files\NewSoft\Presto! PVR\Monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [toscdspd] TOSCDSPD.EXE
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - https://www.ebay.fr (file missing)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - https://www.amazon.fr/exec/obidos/subst/home/home.html/262-6263521-6325360?_encoding=UTF8&link_code=hom&tag=Toshibafrbholink-21 (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/fr/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - https://www.f-secure.com/en/home/support
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe (file missing)
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe (file missing)
O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - Unknown owner - C:\Program Files\McAfee\MSK\MskSrver.exe (file missing)
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrvx86.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe