Ad renover

--normalement tout va pas trop mal merci encore @
la nuit porte conseil

je suis perturbé aussi

tu a plus de problème avec ton PC ?

juste pour savoir a la longue si ces toujours résolue

salut
excuce moi pour les doublons mais j'ai ete perturbe avec le nouveau ccm

merci encore hacker13

bien tu peux mettre en résolue

--j'ai redemarer et ca beaucoup mieux je suis oblige de me deplacer maintenant je te remercie beaucoup pour ton aide hacker13 @+
la nuit porte conseil

il devrai y avoir du mieux après un redémarrage non ?

raport combofix
ComboFix 10-03-11.05 - Patrice 12/03/2010 14:10:05.2.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2046.1021 [GMT 1:00]
Lancé depuis: c:\users\Patrice\Telechargements\ComboFix.exe
AV: a-squared Anti-Malware *On-access scanning disabled* (Updated) {0F8591BB-342B-4493-91C3-4E948ED21255}
AV: Avanquest Fix-It *On-access scanning disabled* (Outdated) {964FCE60-0B18-4D30-ADD6-EB178909041C}
SP: Avanquest Fix-It *disabled* (Outdated) {9817B764-AE4E-4B29-AEE7-725B7A50BD48}
SP: SUPERAntiSpyware *disabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\temp
c:\users\Patrice\Documents\regitre avant tranformation pour icones disparus.reg
D:\install.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-02-12 au 2010-03-12 ))))))))))))))))))))))))))))))))))))
.

2010-03-12 13:18 . 2010-03-12 13:18 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2010-03-12 13:18 . 2010-03-12 13:18 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-03-12 13:18 . 2010-03-12 13:18 -------- d-----w- c:\users\LogMeInRemoteUser\AppData\Local\temp
2010-03-12 13:18 . 2010-03-12 13:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-03-10 12:10 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-03-10 12:10 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-03-10 12:10 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-03-07 10:18 . 2010-03-07 10:18 -------- d-----w- c:\programdata\Intel
2010-03-07 10:16 . 2010-03-07 10:16 -------- d-----w- c:\program files\Cisco
2010-03-07 10:16 . 2010-03-07 10:16 -------- d-----w- c:\program files\Common Files\Intel
2010-03-07 07:41 . 2010-03-07 07:41 -------- d-----w- c:\program files\TomTom International B.V
2010-03-03 04:30 . 2010-03-03 04:30 -------- d-----w- c:\program files\Common Files\Nosibay
2010-02-28 07:28 . 2010-02-28 07:28 -------- d-sh--we c:\windows\system32\config\systemprofile\Mes documents
2010-02-28 07:28 . 2010-02-28 07:28 -------- d-sh--we c:\windows\system32\config\systemprofile\Menu Démarrer
2010-02-28 06:48 . 2010-02-28 06:48 0 ----a-w- c:\users\Patrice\AppData\Roaming\Arcsoft\ArcSoft Video Downloader\2.0\Data\MediaConverter.exe
2010-02-26 17:03 . 2010-02-26 17:03 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\ICS
2010-02-24 05:00 . 2010-03-07 09:40 -------- d-----w- c:\program files\MyDefrag v4.2.8
2010-02-24 05:00 . 2010-02-13 11:23 1028608 ----a-w- c:\windows\system32\MyDefragScreenSaver v4.2.8.exe
2010-02-24 05:00 . 2010-02-05 11:00 432640 ----a-w- c:\windows\system32\MyDefragScreenSaver v4.2.8.scr
2010-02-23 18:54 . 2010-01-23 09:26 2048 ----a-w- c:\windows\system32\tzres.dll
2010-02-23 18:53 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-02-23 18:53 . 2010-01-25 12:00 471552 ----a-w- c:\windows\system32\secproc.dll
2010-02-23 18:53 . 2010-01-25 08:21 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-02-23 18:53 . 2010-01-25 08:21 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-02-23 18:53 . 2010-01-25 08:21 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-02-23 18:53 . 2010-01-25 08:21 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-02-23 18:53 . 2010-01-25 12:00 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-02-23 18:53 . 2010-01-25 12:00 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-02-23 18:53 . 2010-01-25 11:58 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-02-23 18:53 . 2010-01-06 15:39 1696256 ----a-w- c:\windows\system32\gameux.dll
2010-02-23 18:53 . 2010-01-06 15:38 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2010-02-23 18:53 . 2010-01-06 13:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-02-23 07:06 . 2009-12-16 15:05 471040 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\DictionaryCompressionFF.dll
2010-02-23 07:06 . 2009-12-16 15:05 347136 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-02-23 07:06 . 2009-12-16 15:05 340992 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-02-23 07:06 . 2009-12-16 15:05 43008 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-02-23 07:06 . 2009-12-16 15:05 1452032 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-02-18 03:13 . 2010-03-12 12:31 -------- d-----w- C:\Ad-Remover
2010-02-13 07:12 . 2010-02-13 07:12 -------- d-----w- c:\program files\JRE
2010-02-12 20:23 . 2009-12-12 14:15 178176 ----a-w- c:\windows\system32\unrar.dll
2010-02-12 20:23 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2010-02-12 20:23 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll
2010-02-12 20:23 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-02-12 20:23 . 2010-02-02 18:00 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2010-02-12 20:23 . 2010-02-12 20:31 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-02-12 07:04 . 2010-02-12 07:08 -------- d-----w- c:\program files\Frozen-Bubble
2010-02-11 17:44 . 2010-02-11 17:44 509552 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbC9B.tmp.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-12 13:18 . 2010-02-01 06:50 -------- d-----w- c:\program files\Common Files\Akamai
2010-03-12 13:18 . 2009-04-08 15:43 -------- d-----w- c:\users\Patrice\AppData\Roaming\Skype
2010-03-12 12:31 . 2009-08-16 06:34 53021 ----a-w- c:\programdata\nvModes.dat
2010-03-12 10:02 . 2008-11-23 08:06 1 ----a-w- c:\users\Patrice\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-03-11 06:30 . 2008-09-08 11:12 -------- d-----w- c:\program files\7-Zip
2010-03-10 12:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-10 12:15 . 2007-06-25 20:49 -------- d-----w- c:\programdata\Microsoft Help
2010-03-09 00:21 . 2008-12-12 14:05 680 ----a-w- c:\users\Patrice\AppData\Local\d3d9caps.dat
2010-03-07 11:34 . 2006-11-02 15:48 669566 ----a-w- c:\windows\system32\perfh00C.dat
2010-03-07 11:34 . 2006-11-02 15:48 11720 ----a-w- c:\windows\system32\perfc00C.dat
2010-03-07 09:56 . 2009-02-15 06:20 -------- d-----w- c:\programdata\ma-config.com
2010-03-07 09:56 . 2009-02-15 06:20 -------- d-----w- c:\program files\ma-config.com
2010-03-07 07:40 . 2008-09-26 13:17 -------- d-----w- c:\program files\TomTom HOME 2
2010-03-06 07:15 . 2008-10-04 00:47 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-03-06 07:13 . 2008-09-08 11:13 -------- d-----w- c:\program files\CCleaner
2010-03-03 07:23 . 2007-06-25 21:05 -------- d-----w- c:\program files\Google
2010-02-28 07:28 . 2008-09-08 17:19 -------- d-----w- c:\program files\Common Files\ArcSoft
2010-02-26 17:21 . 2010-02-26 17:21 -------- d-----w- c:\program files\LogMeIn Rescue
2010-02-26 17:02 . 2008-09-08 10:30 -------- d-----w- c:\program files\LogMeIn
2010-02-24 02:27 . 2008-09-08 10:59 126968 ----a-w- c:\users\Patrice\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-20 09:27 . 2008-09-08 16:59 -------- d-----w- c:\users\Patrice\AppData\Roaming\Image Zone Express
2010-02-16 06:56 . 2009-05-16 09:28 -------- d-----w- c:\program files\Glary Utilities
2010-02-13 07:14 . 2008-11-23 07:59 -------- d-----w- c:\program files\OpenOffice.org 3
2010-02-13 07:03 . 2007-06-25 21:26 -------- d-----w- c:\program files\Java
2010-02-13 06:02 . 2009-02-28 08:59 -------- d-----w- c:\users\Patrice\AppData\Roaming\AVS4YOU
2010-02-13 06:02 . 2009-02-28 08:57 -------- d-----w- c:\program files\AVS4YOU
2010-02-11 17:43 . 2009-03-27 11:50 86576 ----a-w- c:\users\Patrice\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2010-02-11 17:43 . 2009-03-27 11:50 392728 ----a-w- c:\users\Patrice\AppData\Roaming\Microsoft\Services Windows Live\Services Windows Live.dll
2010-02-11 17:43 . 2009-03-27 11:50 132672 ----a-w- c:\users\Patrice\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2010-02-10 18:10 . 2007-06-25 20:34 -------- d-----w- c:\programdata\Roxio
2010-02-09 17:46 . 2009-02-02 16:56 -------- d-----w- c:\program files\Paint.NET
2010-02-07 17:39 . 2010-02-03 06:39 117760 ----a-w- c:\users\Patrice\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-02-07 10:15 . 2008-11-10 07:14 -------- d-----w- c:\users\Patrice\AppData\Roaming\Facebook
2010-02-06 11:05 . 2010-02-26 17:21 87456 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\components\RescueComponent.dll
2010-02-06 11:05 . 2010-02-26 17:21 186392 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\rahook.dll
2010-02-06 11:05 . 2010-02-26 17:21 1791392 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\LMIRSrv.dll
2010-02-06 11:05 . 2010-02-26 17:21 7472528 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\npRescue.dll
2010-02-04 17:53 . 2007-06-25 21:26 -------- d-----w- c:\program files\Common Files\Java
2010-02-03 06:39 . 2010-02-03 06:39 52224 ----a-w- c:\users\Patrice\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-02-03 06:38 . 2010-02-03 06:38 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2010-02-03 06:38 . 2010-02-03 06:38 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-02-03 06:38 . 2010-02-03 06:38 -------- d-----w- c:\users\Patrice\AppData\Roaming\SUPERAntiSpyware.com
2010-02-03 06:36 . 2009-06-06 05:58 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-02-03 06:23 . 2009-01-11 21:53 -------- d-----w- c:\program files\Ad-remover
2010-02-02 16:30 . 2010-02-02 16:29 -------- d-----w- c:\program files\iTunes
2010-02-02 16:29 . 2010-02-02 16:29 -------- d-----w- c:\program files\iPod
2010-02-02 16:25 . 2010-02-02 16:25 -------- d-----w- c:\program files\QuickTime
2010-02-02 16:15 . 2010-02-02 16:15 72488 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-02-01 06:22 . 2010-01-17 20:11 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-01 04:50 . 2010-02-01 04:50 -------- d-----w- c:\program files\Speccy
2010-01-31 09:43 . 2007-06-25 20:15 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-27 16:38 . 2010-02-26 17:21 969040 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\ICSConsole32.dll
2010-01-26 05:02 . 2010-01-26 05:00 -------- d-----w- c:\programdata\OrbNetworks
2010-01-26 05:00 . 2010-01-24 09:10 -------- d-----w- c:\program files\Orb Networks
2010-01-25 20:40 . 2010-01-25 20:40 -------- d-----w- c:\users\Patrice\AppData\Roaming\VeriSoft Access Manager
2010-01-25 20:23 . 2008-09-08 11:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-25 15:06 . 2010-02-26 17:21 91536 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\LMIGuardian.exe
2010-01-25 15:06 . 2010-02-26 17:21 558464 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\LMIGuardianDll.dll
2010-01-25 15:06 . 2010-02-26 17:21 15744 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\LMIGuardianEvt.dll
2010-01-24 20:53 . 2008-10-08 13:25 5115824 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-01-24 08:19 . 2007-06-25 21:09 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-01-24 08:18 . 2010-01-24 08:18 -------- d-----w- c:\program files\Realtek
2010-01-24 08:14 . 2009-08-16 06:34 -------- d-----w- c:\programdata\NVIDIA
2010-01-24 08:14 . 2010-01-24 08:11 -------- d-----w- c:\program files\NVIDIA Corporation
2010-01-24 08:13 . 2009-08-16 06:28 -------- d-----w- c:\program files\AGEIA Technologies
2010-01-23 13:45 . 2010-01-23 13:45 -------- d-----w- c:\program files\Dictionnaire le Littré 2.0
2010-01-20 08:59 . 2008-10-29 18:18 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-19 15:58 . 2010-01-19 15:58 880640 ----a-w- c:\windows\system32\wlihvui.dll
2010-01-19 15:53 . 2010-01-19 15:53 1122304 ----a-w- c:\windows\system32\iwmssvc.dll
2010-01-13 20:16 . 2010-01-09 14:00 -------- d-----w- c:\program files\Rainlendar2
2010-01-13 07:29 . 2010-01-13 07:29 6628352 ----a-w- c:\windows\system32\drivers\NETw5v32.sys
2010-01-12 14:14 . 2010-02-26 17:21 1740288 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\amtapi32.dll
2010-01-11 16:48 . 2009-10-31 13:07 -------- d-----w- c:\users\Patrice\AppData\Roaming\Icones
2010-01-08 22:42 . 2010-01-08 22:42 3366912 ----a-w- c:\windows\system32\GPhotos.scr
2010-01-07 15:07 . 2008-09-08 11:16 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07 . 2008-09-08 11:16 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-06 15:38 . 2010-02-23 18:53 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-01-06 15:38 . 2010-02-23 18:53 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll
2010-01-06 15:38 . 2010-02-23 18:53 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll
2010-01-06 15:38 . 2010-02-23 18:53 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-01-02 06:38 . 2010-01-22 12:07 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 12:07 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-22 12:07 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-22 12:07 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-25 17:51 . 2010-01-24 08:18 1539104 ----a-w- c:\windows\system32\RtkPgExt.dll
2009-12-25 17:51 . 2010-01-24 08:18 56864 ----a-w- c:\windows\system32\RtkCoInst.dll
2009-12-25 17:51 . 2010-01-24 08:18 371232 ----a-w- c:\windows\system32\RtkApoApi.dll
2009-12-25 17:51 . 2010-01-24 08:18 2630176 ----a-w- c:\windows\system32\RtkAPO.dll
2009-12-25 17:28 . 2010-01-24 08:18 2981024 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2009-12-25 13:09 . 2009-12-25 13:09 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-12-24 17:08 . 2009-03-28 12:24 0 ----a-r- c:\users\Patrice\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
2009-12-17 16:14 . 2008-12-21 18:40 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-12-17 15:48 . 2010-02-26 17:21 8784 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\ractrlkeyhook.dll
2009-12-17 15:48 . 2010-02-26 17:21 70984 ----a-w- c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\LMIProxyHelper.exe
2009-12-17 06:47 . 2009-12-17 06:47 361288 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-12-17 06:47 . 2009-03-28 08:42 604488 ----a-w- c:\windows\system32\TUProgSt.exe
2009-12-16 06:51 . 2009-12-16 06:52 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb5FFE.tmp.exe
2009-12-16 06:51 . 2009-12-16 06:52 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb5F80.tmp.exe
2009-12-16 06:51 . 2009-12-16 06:51 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb5FCE.tmp.exe
2009-12-16 06:51 . 2009-12-16 06:52 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb5E68.tmp.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Orb"="c:\program files\Orb Networks\Orb\bin\OrbTray.exe" [2009-03-17 510416]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-03-27 24103720]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2009-08-22 5148672]
"Google Update"="c:\users\Patrice\AppData\Local\Google\Update\GoogleUpdate.exe" [2008-09-18 133104]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-09 39408]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-11-13 247144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-13 827392]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 729088]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-25 8129056]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2008-02-28 63048]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2008-06-10 1406024]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-03-12 50696]
"CognizanceTS"="c:\progra~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll" [2003-12-22 17920]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2009-10-10 203264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-07 44128]

c:\users\Patrice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Notification de cadeaux MSN.lnk - c:\users\Patrice\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2009-3-27 135680]
OneNote 2007 - Capture d'‚cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"FilterAdministratorToken"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 13:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\APSHook.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Capture Express.lnk]
backup=c:\windows\pss\Capture Express.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a-squared]
2009-02-25 17:18 2799760 ----a-w- c:\program files\a-squared Anti-Malware\a2guard.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2009-10-10 12:32 203264 ----a-w- c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FAST Defrag]
2005-08-24 11:12 97792 ----a-w- c:\progra~1\FDF\FAST2.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 14:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl]
2007-02-13 09:38 159744 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QPService]
2007-04-23 16:11 176128 ----a-w- c:\program files\HP\QuickPlay\QPService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Shareaza]
2008-10-01 10:00 5723136 ----a-w- c:\program files\Shareaza\Shareaza.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2010-01-05 06:56 2002160 ----a-w- c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-03-09 17:10 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"ArcSoft Connection Service"=c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):d4,e0,ad,1d,5a,39,ca,01

R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 135664]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2010-01-26 243056]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2010-01-05 7408]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-01-05 9968]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2010-01-05 74480]
S1 sbtis;sbtis;c:\windows\system32\drivers\sbtis.sys [2008-10-09 202928]
S2 a2AntiMalware;a-squared Anti-Malware Service;c:\program files\a-squared Anti-Malware\a2service.exe [2009-02-25 425080]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-19 21504]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 ASBroker;Courtier de session de connexion;c:\windows\System32\svchost.exe [2008-01-19 21504]
S2 ASChannel;Canal de communication local;c:\windows\System32\svchost.exe [2008-01-19 21504]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2008-02-28 12856]
S2 SBAMSvc;Fix-It;c:\program files\Common Files\AntiVirus\SBAMSvc.exe [2008-10-28 886056]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2009-11-13 92008]
S3 NETw5v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits ;c:\windows\system32\DRIVERS\NETw5v32.sys [2010-01-13 6628352]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'

2010-03-12 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-05-16 22:01]

2010-03-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 17:50]

2010-03-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 17:50]

2010-03-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3338616262-2468624330-3872013417-1000Core.job
- c:\users\Patrice\AppData\Local\Google\Update\GoogleUpdate.exe [2008-09-18 14:25]

2010-03-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3338616262-2468624330-3872013417-1000UA.job
- c:\users\Patrice\AppData\Local\Google\Update\GoogleUpdate.exe [2008-09-18 14:25]

2010-03-12 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-11-16 16:04]

2010-03-12 c:\windows\Tasks\User_Feed_Synchronization-{D80EECEA-F531-49D7-B147-3AE59A53A922}.job
- c:\windows\system32\msfeedssync.exe [2010-01-22 04:56]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Lire des données EXIF - c:\program files\ArcSoft\RAW Thumbnail Viewer\ArcEXIFM.htm
FF - ProfilePath - c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig?hl=fr
FF - component: c:\program files\ArcSoft\RAW Thumbnail Viewer\FireFox Extension\components\FirefoxMenu.dll
FF - component: c:\program files\ArcSoft\Video Downloader\Plugin_FireFox\components\nsURLRecordEx.dll
FF - component: c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\DictionaryCompressionFF.dll
FF - component: c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\components\RescueComponent.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa2.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\Patrice\AppData\Local\Google\Update\1.2.183.17\npGoogleOneClick8.dll
FF - plugin: c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\xs8f3tkv.default\extensions\TechnicianConsole@logmeinrescue.com\platform\WINNT\plugins\npRescue.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "https://www.mozilla.org/en-US/firefox/new/?redirect_source=firefox-com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-12 14:18
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2010-03-12 14:20:53
ComboFix-quarantined-files.txt 2010-03-12 13:20
ComboFix2.txt 2010-01-17 12:43

Avant-CF: 57 291 362 304 octets libres
Après-CF: 57 269 743 616 octets libres

- - End Of File - - 22DC60B0F62E659316E0E2B49B25389D

Télécharges ComboFix à partir d'un de ces liens :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
https://forospyware.com
http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/

Et important, enregistre le sur le bureau.

Avant d'utiliser ComboFix :

Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
la protection en temps réel de ton Antivirus et de tes Antispywares,
qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt,.
est automatiquement sauvegardé et rangé à C:\Combofix.txt)

Réactive la protection en temps réel de ton Antivirus et de tes Antispywares,
avant de te reconnecter à internet.

Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

je le trouve tres lent

on recontinue la s.v.p

quel sont les problème encore présent sur ton PC ?

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3838
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18882

09/03/2010 07:21:04
mbam-log-2010-03-09 (07-21-04).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 368834
Temps écoulé: 1 hour(s), 42 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Télécharge MalwareByte's Anti-Malware

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

. Enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
. Une fois la mise à jour terminé
. Rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet (examen assez long)
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, clique sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. Rends toi dans l'onglet rapport/log
. Tu cliques dessus pour l'afficher, une fois affiché
. Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
. Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller

Si tu as besoin d'aide regarde ces tutoriels :
Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

excuce le retard
--Logfile of random's system information tool 1.06 (written by random/random)
Run by Patrice at 2010-03-08 19:57:25
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 61 GB (42%) free of 145 GB
Total RAM: 2046 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:57:38, on 08/03/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
c:\Program Files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe
C:\Windows\Explorer.EXE
C:\Program Files\Orb Networks\Orb\bin\Orb.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\Patrice\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Patrice\Telechargements\RSIT(2).exe
C:\Program Files\Trend Micro\HijackThis\Patrice.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\VIDEOD~1\ArcURLRecord.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ToolbarBHO Class - {9519AF7E-638D-4933-BAD6-D33D23C79FE5} - C:\PROGRA~1\ArcSoft\RAWTHU~1\EXIFToolBar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll
O3 - Toolbar: RAW Thumbnail Viewer - {F301665A-12F8-4331-804A-5BCBD379668C} - C:\PROGRA~1\ArcSoft\RAWTHU~1\EXIFToolBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Orb Networks\Orb\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Patrice\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\Patrice\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Lire des données EXIF - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\ArcEXIFM.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll
O20 - AppInit_DLLs: C:\WINDOWS\System32\APSHook.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Fix-It Task Manager - Avanquest North America, Inc. - C:\PROGRA~1\AVANQU~1\Fix-It\mxtask.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Fix-It (SBAMSvc) - Sunbelt Software - C:\Program Files\Common Files\AntiVirus\SBAMSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

bonjour pour savoir ce qui reste comme infection

Télécharge ici : http://images.malwareremoval.com/random/RSIT.exe
random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.
• Double-clique sur RSIT.exe afin de lancer RSIT.(Avec VISTA/7 > clic-droit et > Exécuter en tant qu'administrateur.
• Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.
• Poste le contenu de log.txt ainsi que info.txt
( tu peux héberger les rapports ici http://www.cijoint.fr/ et me joindre dans ton prochain message le lien )

nouveau scan apres nettoyage
--.
======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 05.02.2010 à 17:34
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 12:57:51, 08/03/2010 | Mode Normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows Vista™ HomePremium Service Pack 2 v6.0.6002
Nom du PC: PC-DE-PATRICE | Utilisateur actuel: Patrice
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.

C:\Users\Patrice\AppData\Roaming\Mozilla\FireFox\Profiles\xs8f3tkv.default\extensions\toolbar@ask.com
C:\Users\Patrice\AppData\Roaming\Mozilla\FireFox\Profiles\xs8f3tkv.default\searchplugins\askcom.xml
C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
C:\Program Files\Ask.com
C:\Users\Patrice\AppData\LocalLow\AskToolbar
C:\ProgramData\Trymedia

(!) -- Fichiers temporaires supprimés.

.
HKCU\software\appdatalow\AskToolbarInfo
HKCU\software\appdatalow\software\AskToolbar
HKCU\software\Ask.com
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
HKLM\software\classes\appid\GenericAskToolbar.DLL
HKLM\software\classes\AskIBar.PopSwatterBarButton
HKLM\software\classes\AskIBar.PopSwatterBarButton.1
HKLM\software\classes\AskIBar.PopSwatterSettingsControl
HKLM\software\classes\AskIBar.PopSwatterSettingsControl.1
HKLM\software\classes\AskToolBar.SettingsPlugin
HKLM\software\classes\AskToolBar.SettingsPlugin.1
HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\software\classes\GenericAskToolbar.ToolbarWnd
HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 3.6 [fr] *
.
Nom du profil: xs8f3tkv.default (Patrice)
.
(Patrice, Invalidprefs.js) Browser.download.dir, C:\Users\Patrice\Downloads
(Patrice, Invalidprefs.js) Browser.download.lastDir, C:\Users\Patrice\Downloads
(Patrice, Invalidprefs.js) Extensions.enabledItems, {097d3191-e6fa-4728-9826-b533d755359d}:0.7.6,{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,twitternotifier@naan.net:1.7.2,{37fa1426-b82d-11db-8314-0800200c9a66}:1.1.5,{D5EDC062-A372-4936-B782-BD611DD18D86}:3.0.0.2,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.3
.
(Patrice, prefs.js) Browser.search.defaultenginename, Yahoo
(Patrice, prefs.js) Browser.search.defaulturl, hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
(Patrice, prefs.js) Browser.startup.homepage, hxxp://www.google.com/ig?hl=fr
(Patrice, prefs.js) Extensions.enabledItems, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3,{097d3191-e6fa-4728-9826-b533d755359d}:0.7.11,apptabs@frankyan.com:0.6.2,{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}:3.0.0.0,{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.86,{e1170235-2845-420c-acc3-42261a29dd46}:4.0.1,smarterwiki@wikiatic.com:3.1.2,{1018e4d6-728f-4b20-ad56-37578a4de76b}:4.0.2,{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{d07a4843-111f-4699-8551-8ce2afa075cd}:1.8.0.20090402101040,{20a82645-c095-46ed-80e3-08825760534b}:1.1,RAWThumbnailViewer@arcsoft.com.cn:2.0.0.11,{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20091028,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.1.20091029021655,{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,toolbar@ask.com:3.6.2.119,{3112ca9c-de6d-4884-a869-9855de68056c}:7.0.20091216Wb1,TechnicianConsole@logmeinrescue.com:6.2.0.743,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6
(Patrice, prefs.js) Keyword.URL, hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=GLSV5&o=10168&locale=fr_FR&q=
.
(Patrice, prefs.js) EFFACE - Browser.search.defaultengine, Ask.com
(Patrice, prefs.js) EFFACE - Browser.search.order.1, Ask.com
(Patrice, prefs.js) EFFACE - Extensions.asktb.cbid, GL
(Patrice, prefs.js) EFFACE - Extensions.asktb.default-channel-url-mask, hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}
(Patrice, prefs.js) EFFACE - Extensions.asktb.fresh-install, false
(Patrice, prefs.js) EFFACE - Extensions.asktb.l, dis
(Patrice, prefs.js) EFFACE - Extensions.asktb.last-config-req, 1267982409172
(Patrice, prefs.js) EFFACE - Extensions.asktb.locale, fr_FR
(Patrice, prefs.js) EFFACE - Extensions.asktb.o, 10168
(Patrice, prefs.js) EFFACE - Extensions.asktb.options-lang, fr
(Patrice, prefs.js) EFFACE - Extensions.asktb.options-locale, UK
(Patrice, prefs.js) EFFACE - Extensions.asktb.overlay-reloaded-using-restart, true
(Patrice, prefs.js) EFFACE - Extensions.asktb.qsrc, 2871
(Patrice, prefs.js) EFFACE - Extensions.asktb.r, 4
(Patrice, prefs.js) EFFACE - Extensions.enabledItems, {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3,{097d3191-e6fa-4728-9826-b533d755359d}:0.7.11,apptabs@frankyan.com:0.6.2,{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}:3.0.0.0,{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.86,{e1170235-2845-420c-acc3-42261a29dd46}:4.0.1,smarterwiki@wikiatic.com:3.1.2,{1018e4d6-728f-4b20-ad56-37578a4de76b}:4.0.2,{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04,{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{d07a4843-111f-4699-8551-8ce2afa075cd}:1.8.0.20090402101040,{20a82645-c095-46ed-80e3-08825760534b}:1.1,RAWThumbnailViewer@arcsoft.com.cn:2.0.0.11,{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20091028,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.1.20091029021655,{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}:6.0.18,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,toolbar@ask.com:3.6.2.119,{3112ca9c-de6d-4884-a869-9855de68056c}:7.0.20091216Wb1,TechnicianConsole@logmeinrescue.com:6.2.0.743,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6
(Patrice, prefs.js) EFFACE - Keyword.URL, hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=GLSV5&o=10168&locale=fr_FR&q=
.
.
.
* Internet Explorer Version 8.0.6001.18882 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Do404Search: 01000000
Show_ToolBar: yes
Enable Browser Extensions: yes
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page Redirect Cache: hxxp://fr.msn.com/?ocid=iehp
Start Page Redirect Cache_TIMESTAMP: 0093648cb347ca01
Start Page Redirect Cache AcceptLangs: fr
Local Page: C:\Windows\SYSTEM32\blank.htm
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Users\Patrice\Favorites\informatique\Forum-Windows - Patch Uxtheme.dll … t‚l‚charger pour Windows Vista.URL
.
===================================
.
6745 Octet(s) - C:\Ad-Report-CLEAN[1].log
10963 Octet(s) - C:\Ad-Report-CLEAN[2].log
11360 Octet(s) - C:\Ad-Report-CLEAN[3].log
6744 Octet(s) - C:\Ad-Report-SCAN[1].log
11224 Octet(s) - C:\Ad-Report-SCAN[2].log
11965 Octet(s) - C:\Ad-Report-SCAN[3].log
12009 Octet(s) - C:\Ad-Report-SCAN[4].log
.
12 Fichier(s) - C:\Users\Patrice\AppData\Local\Temp
2 Fichier(s) - C:\Windows\Temp
0 Fichier(s) - C:\Windows\Prefetch
.
27 Fichier(s) - C:\Ad-Remover\BACKUP
158 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 13:02:17 | 08/03/2010 - CLEAN[3]
.
============== E.O.F ==============
.

la nuit porte conseil

ok et merci pour ta reponse

BONJOUR effectivement TU EST infecter fait maintenant option L SVP