Virus trojan TR/Dldr.java.3090

ok merci beaucoup pour ton aide !!!

et passe de bonne fêtes !!! bonne année en avance....

ok c'est fait...

a+

oui je m'en suis rendu compte apres désolée
voila

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\UsbFix.txt: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
C:\Users\LAGHA\Desktop\ComboFix.exe: trouvé !
C:\Windows\Gmer.exe: trouvé !
C:\Windows\mbr.exe: trouvé !

---------------------------------
--> Suppression:

C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\Users\LAGHA\Desktop\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Windows\Gmer.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\UsbFix.txt: supprimé !

parce que je le vois toujours en quarantaine, bon je refait un rsit

a+

ok

voila j'ai fais l'analyse

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3456
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865

30/12/2009 23:00:51
mbam-log-2009-12-30 (23-00-51).txt

Type de recherche: Examen rapide
Eléments examinés: 108563
Temps écoulé: 7 minute(s), 8 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

y a rien c'est bizarre ? explique pourquoi je n'arrive pas a ouvrir les programmes ??? merci bcp

voila le log de combo fix

bon apres ca y a un probleme il faut que j'execute tout les programme que je veux ouvrir en "tent qu'administrateur" ???

ComboFix 09-12-29.06 - LAGHA 30/12/2009 22:06:39.1.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.1023.486 [GMT 1:00]
Lancé depuis: c:\users\LAGHA\Desktop\ComboFix.exe
SP: AVG Anti-Spyware *disabled* (Outdated) {48F2E28D-ED66-4646-9C11-B3055B0AF604}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2072162720-3656905881-2812682582-1003
c:\$recycle.bin\S-1-5-21-2072162720-3656905881-2812682582-500
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\users\LAGHA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AntiCrash.lnk
c:\users\Zahra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AntiCrash.lnk
c:\windows\system32\AutoRun.inf
c:\windows\TEMP\logishrd\LVPrcInj03.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-11-28 au 2009-12-30 ))))))))))))))))))))))))))))))))))))
.

2009-12-30 21:18 . 2009-12-30 21:18 -------- d-----w- c:\users\Zahra\AppData\Local\temp
2009-12-30 21:18 . 2009-12-30 21:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-12-30 20:03 . 2009-12-30 20:04 -------- d-----w- c:\program files\trend micro
2009-12-30 20:03 . 2009-12-30 20:04 -------- d-----w- C:\rsit
2009-12-09 23:26 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 23:26 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 23:26 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-30 20:53 . 2009-12-27 23:44 64512 ---ha-w- c:\users\LAGHA\AppData\Roaming\dach100.dll
2009-12-30 20:53 . 2009-12-27 23:44 64512 ---ha-w- c:\users\LAGHA\AppData\Roaming\dach100.dll
2009-12-29 21:17 . 2008-05-07 18:01 -------- d-----w- c:\programdata\Google Updater
2009-12-29 17:45 . 2008-08-29 16:07 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2009-12-26 11:09 . 2008-10-15 18:41 1 ----a-w- c:\users\LAGHA\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-12-25 15:19 . 2009-12-25 15:19 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-12-18 08:10 . 2009-02-10 22:48 -------- d-----w- c:\program files\McAfee
2009-12-10 15:55 . 2009-05-17 09:14 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-10 09:01 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-08 10:00 . 2008-09-20 07:54 1356 ----a-w- c:\users\LAGHA\AppData\Local\d3d9caps.dat
2009-12-05 08:27 . 2009-01-26 21:56 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-04 22:05 . 2009-02-18 13:12 4844296 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-12-03 15:14 . 2009-01-26 21:56 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-01-26 21:56 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-28 10:06 . 2009-08-22 15:17 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-11-21 11:05 . 2006-11-02 15:48 678718 ----a-w- c:\windows\system32\perfh00C.dat
2009-11-21 11:05 . 2006-11-02 15:48 127798 ----a-w- c:\windows\system32\perfc00C.dat
2009-11-21 10:56 . 2009-11-21 10:56 -------- d-----w- c:\program files\Windows Portable Devices
2009-11-21 10:56 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-21 10:55 . 2009-11-21 10:55 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-21 06:40 . 2009-12-09 16:03 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 16:03 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 06:34 . 2009-12-09 16:03 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 04:59 . 2009-12-09 16:03 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-07 10:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-11-07 10:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-11-07 10:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-11-07 10:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-11-07 10:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-11-07 10:37 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-11-07 10:34 . 2009-02-02 16:08 -------- d-----w- c:\program files\Common Files\LogiShrd
2009-11-06 21:34 . 2009-08-14 13:31 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-11-02 19:42 . 2009-10-03 08:08 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-02 08:36 . 2009-11-02 08:21 -------- d-----w- c:\programdata\ae7f177
2009-11-02 08:29 . 2009-11-02 08:36 23 ----a-w- c:\programdata\ae7f177\WSae7f.exe
2009-10-29 09:17 . 2009-11-25 22:13 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-20 11:33 . 2009-10-22 19:40 545280 ----a-w- c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\libs\PicLensHelper.exe
2009-10-20 11:33 . 2009-10-22 19:40 103424 ----a-w- c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\libs\pixomatic.dll
2009-10-20 11:33 . 2009-10-22 19:40 4716544 ----a-w- c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\components\cooliris.dll
2009-10-20 11:33 . 2009-10-22 19:40 344064 ----a-w- c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\libs\LaunchCooliris.exe
2009-10-20 11:33 . 2009-10-22 19:40 153600 ----a-w- c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
2009-10-10 13:46 . 2007-09-19 16:23 125896 ----a-w- c:\users\LAGHA\AppData\Local\GDIPFONTCACHEV1.DAT
2009-10-08 21:08 . 2009-11-20 21:28 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2009-10-08 21:08 . 2009-11-20 21:28 234496 ----a-w- c:\windows\system32\oleacc.dll
2009-10-08 21:07 . 2009-11-20 21:28 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2009-10-07 11:36 . 2009-12-09 16:03 243712 ----a-w- c:\windows\system32\rastls.dll
2009-09-25 16:41 . 2009-09-25 16:41 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-09-25 16:41 . 2009-09-25 16:41 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"Yahoo! Pager"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2007-08-30 4670704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-08-05 647520]
"WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"Athan"="c:\program files\Athan\Athan.exe" [2009-05-01 1130496]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-23 4423680]
"Skytel"="Skytel.exe" [2007-03-16 1822720]

c:\users\Zahra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Windows Calendar.lnk - c:\program files\Windows Calendar\WinCal.exe [2009-10-21 967680]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):cd,c3,d5,4d,97,5f,ca,01

R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [06/05/2007 20:33 266343]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [17/05/2009 10:14 108289]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [10/02/2009 23:48 93320]
R2 Vcs;Vcs support;c:\windows\System32\drivers\Vcs.sys [05/03/2009 15:58 6852]
S2 gupdate1ca2ba82fb78fdc;Service Google Update (gupdate1ca2ba82fb78fdc);c:\program files\Google\Update\GoogleUpdate.exe [02/09/2009 09:34 133104]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [14/05/2008 22:05 21504]
S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [02/10/2009 08:34 54632]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
S3 stinbus;NEC WMC USB_T1 Composite Device driver (WDM);c:\windows\System32\drivers\stinbus.sys [15/03/2006 23:03 58352]
S3 stinmdm;NEC WMC USB_T1 Port Drivers;c:\windows\System32\drivers\stinmdm.sys [15/05/2008 20:53 85632]
S3 WSVD;WSVD;c:\windows\System32\drivers\WSVD.sys [19/09/2007 20:43 80744]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenu du dossier 'Tâches planifiées'

2009-12-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-02 08:34]

2009-12-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-02 08:34]

2009-12-30 c:\windows\Tasks\User_Feed_Synchronization-{C96D7029-9FE3-420D-B9FB-D419B8748051}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]

2009-12-30 c:\windows\Tasks\User_Feed_Synchronization-{E47B4318-919A-4019-91C4-DE4EF9E209D7}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Examen supplémentaire -------
.
uStart Page = about:blank
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://fr.search.yahoo.com/search?fr=mcafee&p=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\windows\system32\wpclsp.dll
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game10.zylom.com/activex/zylomgamesplayer.cab
DPF: {C9386579-3C0F-4713-82C6-5BA8088C7C8D} - hxxps://secure.shared.live.com/Pa6vGqB728AxD-ckvrPc0A/etc/Microsoft.Live.Folders.RichUpload.cab
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
FF - ProfilePath - c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
FF - prefs.js: browser.search.selectedEngine - Fast Browser Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/webhp?hl=fr
FF - prefs.js: keyword.URL - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={9333F0E2-3B91-517B-84F0-755B3BB7F7FD}&q=
FF - component: c:\program files\McAfee\SiteAdvisor\components\McFFPlg.dll
FF - component: c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\components\cooliris.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\users\LAGHA\AppData\Roaming\Mozilla\Firefox\Profiles\bg60alsg.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
FF - plugin: d:\program files\DivX\DivX Player\npDivxPlayerPlugin.dll
FF - plugin: d:\program files\DivX\DivX Web Player\npdivx32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

WebBrowser-{3526DA77-E31E-43DD-94E3-16170C0AF42F} - (no file)
MSConfigStartUp-msnmsgr - ~c:\program files\Windows Live\Messenger\msnmsgr.exe

**************************************************************************
Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Tcpip6\Parameters\Interfaces\{40d77e4b-1726-469d-9861-67a0aabf6f87}]
@DACL=(02 0000)
"Dhcpv6Iaid"=dword:0c00016c
"Dhcpv6State"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Tcpip6\Parameters\Interfaces\{4525c514-87b9-454f-9c66-dd631387ad42}]
@DACL=(02 0000)
"Dhcpv6Iaid"=dword:0d020054
"Dhcpv6State"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Tcpip6\Parameters\Interfaces\{9c642153-bfe0-4511-a0b6-e778ddd5ea9e}]
@DACL=(02 0000)
"Dhcpv6Iaid"=dword:07001422
"Dhcpv6State"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Tcpip6\Parameters\Interfaces\{bf761967-b2ea-4306-ae6a-e4227625d70d}]
@DACL=(02 0000)
"Dhcpv6Iaid"=dword:0b00016c
"Dhcpv6State"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Tcpip6\Parameters\Interfaces\{f50c0996-5b4a-4c6a-a322-6e991d4caa0e}]
@DACL=(02 0000)
"Dhcpv6Iaid"=dword:06001422
"Dhcpv6State"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(9396)
c:\progra~1\mcafee\SITEAD~1\saHook.dll
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\acer\Empowering Technology\eDataSecurity\eDSService.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\windows\system32\rundll32.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\acer\Empowering Technology\eRecovery\eRecoveryService.exe
c:\windows\system32\WUDFHost.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\windows\system32\conime.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Heure de fin: 2009-12-30 22:30:47 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-12-30 21:30

Avant-CF: 2 662 555 648 octets libres
Après-CF: 2 615 599 104 octets libres

- - End Of File - - 29741641DAF8432300F12CD74AA34AD0