Détection d'un virus

Résolu
franky dubois -  
Bonjour,

en ouvrant mon fureteur (firefox) mon anti-virus a détecté un virus
c:\programfiles\searchsettings\ff1\components\searchsettingss|
win32 : trojan-gen virus/ver

j'aimerais qu,on puisse me dire comment je peux nettoyer tout ça.. moi à se que je sache je n'ai rien fait pour attrapé quelque chose, mais ma blonde utilise mon ordi également alors...

32 réponses

Résumé de la discussion

Un utilisateur signale qu’un trojan est détecté par l’antivirus dans le répertoire c:\programfiles\searchsettings\ff1\components\searchsettingss| après l’ouverture du navigateur Firefox, et demande des méthodes de nettoyage fiables. Plusieurs solutions essentielles sont proposées, notamment l’utilisation d’AD-Remover avec désactivation temporaire de la protection en temps réel, puis l’exécution de l’outil et le relevé du rapport généré. D’autres échanges recommandent aussi d’employer Malwarebytes, RSIT et HijackThis, puis de désinstaller les programmes obsolètes via le Panneau de configuration et de prévenir les ralentissements. Comme étape finale, le fil suggère de relancer les outils de nettoyage et, après détection négative, d’éventuellement approfondir la vérification selon le besoin.

Bobot (l’IA à votre service)
  1. archet9
    Salut,

    Ha.... les blondes!!!!

    Searchsettings ...dont tu es victimes est un prg maveillant qui sera
    supprimé avec ce qui suit :

    * Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
    http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

    Miroir:

    https://www.androidworld.fr/

    /!\ Ferme toutes applications en cours /!\

    /!\ Désactive provisoirement et seulement le temps de l'utilisation de AD-Remover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

    - Double-clique sur l'icône Ad-remover située sur ton Bureau.
    - Sur la page, clique sur le bouton « Nettoyer »
    - Confirme lancement du scan
    - Laisse travailler l'outil.
    - Poste le rapport qui apparaît à la fin.

    (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)
    2. franky dubois Auteur
      merci grandement pour ton aide !!!

      enfin un ordi propre :-)
      1. archet9
        "j'ai ccleaner et spybot and destroy et un ad-adware mais c tout je connais pas d'autres facon de vérifier l'ordi"

        Quand tu as dis cela, je me suis trompé ds ma réponse !!!

        Ccleaner est à garder...Ce sont les 2 autres qui sont à virer...

        Utilises Malwarebytes régulièrement en le mettant à jour à chaque utilisation.

        Pour desinstaller les outils utilisés

        Télécharge OTCleanIt sur ton Bureau: http://www.geekstogo.com/forum/files/file/403-otc-oldtimers-clean-it/

        Lance OTCleanIt avec un double-clic (sous Vista, lance-le en cliquant droit sur OTCleanIt.exe et en sélectionnant "exécuter en tant qu'administrateur")

        Appuie sur le bouton "CleanUp!"

        A la question "begin cleanup process?", réponds "YES"

        A la fin de l'opération, si OTCleanIt demande de redémarrer ("Do you want to reboot now?"), ferme ce que tu es en train de faire (internet, documents divers...) et clique sur "YES":

        Au redémarrage, OTCleanIt aura supprimé les outils de désinfection, et se sera même autodétruit!

        puis

        ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
        https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

        * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
        * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
        * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre).
        * Décoche la case plus vieux que 24 h

        TRES IMPORTANT:

        ---> Il est nécessaire de désactiver,redémarrer puis réactiver la restauration système pour la purger :
        XP:
        http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924
        VISTA:
        https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista

        ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
        https://www.vulgarisation-informatique.com/creer-point-restauration.php

        ---> Changes le statut de ce topic :
        et mets le en "résolu"
        https://www.commentcamarche.net/infos/25917-forum-ccm-mode-d-emploi-marquer-mon-sujet-comme-resolu/

        a+
        2. franky dubois Auteur
          il semble aller bien
          maintenant que je n'ai plus de ccleaner et de spybot ... existe t-il d'autre logiciel pour faire le travail ou je répète ses étapes une fois de temps en temps?
          2. franky dubois Auteur
            ¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.0.0.4 ¤¤¤¤¤¤¤¤¤¤

            User : Franky (Administrateurs)
            Update on 23/05/2010 by g3n-h@ckm@n ::::: 15.00
            Start at: 16:23:57 | 2010-08-19

            Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
            Microsoft® Windows Vista(TM) Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
            Internet Explorer 8.0.6001.18943
            Windows Firewall Status : Disabled
            AV : avast! antivirus 4.8.1356 [VPS 091010-0] 4.8.1356 [ Enabled | Updated ]

            C:\ -> Disque fixe local | 97,66 Go (57,96 Go free) | NTFS
            D:\ -> Disque fixe local | 51,39 Go (37,74 Go free) | NTFS
            E:\ -> Disque CD-ROM | 4,05 Go (0 Mo free) [MyDisc] | CDFS

            ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

            C:\Windows\System32\smss.exe
            C:\Windows\system32\csrss.exe
            C:\Windows\system32\wininit.exe
            C:\Windows\system32\csrss.exe
            C:\Windows\system32\services.exe
            C:\Windows\system32\lsass.exe
            C:\Windows\system32\lsm.exe
            C:\Windows\system32\winlogon.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\SLsvc.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe
            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            C:\Program Files\Alwil Software\Avast4\ashServ.exe
            C:\Windows\system32\Dwm.exe
            C:\Windows\System32\spoolsv.exe
            C:\Windows\system32\taskeng.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\Explorer.EXE
            C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
            C:\Program Files\CDBurnerXP\NMSAccessU.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\system32\SearchIndexer.exe
            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
            C:\Windows\system32\runonce.exe
            C:\Windows\system32\cmd.exe
            C:\Windows\system32\conime.exe
            C:\Windows\system32\wbem\wmiprvse.exe
            C:\Program Files\List_Kill'em\ERUNT.EXE
            C:\Program Files\List_Kill'em\pv.exe

            ¤¤¤¤¤¤¤¤¤¤ Files/folders :

            Quarantined & Deleted !! : C:\ProgramData\xml91D3.tmp
            Quarantined & Deleted !! : C:\ProgramData\xml952E.tmp
            Quarantined & Deleted !! : C:\ProgramData\xml9667.tmp
            Quarantined & Deleted !! : C:\ProgramData\xml987B.tmp
            Quarantined & Deleted !! : C:\ProgramData\Application Data\.zreglib

            Quarantined & Deleted !! : C:\Windows\System32\x64
            Quarantined & Deleted !! : C:\Users\Franky\AppData\Local\d3d8caps.dat
            Quarantined & Deleted !! : C:\Users\Franky\AppData\Local\d3d9caps.dat
            Quarantined & Deleted !! : C:\Users\Franky\AppData\Local\GDIPFONTCACHEV1.DAT
            Quarantined & Deleted !! : C:\Users\Franky\Application Data\Skinux
            Deleted !! : C:\$Recycle.bin\S-1-5-21-2356678355-4250095907-2822896115-1001\$I0YG1KY.lnk
            Deleted !! : C:\$Recycle.bin\S-1-5-21-2356678355-4250095907-2822896115-1001\$I7FKU5E.lnk
            Deleted !! : C:\$Recycle.bin\S-1-5-21-2356678355-4250095907-2822896115-1001\$INUYLFZ.lnk
            Deleted !! : C:\$Recycle.bin\S-1-5-21-2356678355-4250095907-2822896115-1001\$R0YG1KY.lnk
            Deleted !! : C:\$Recycle.bin\S-1-5-21-2356678355-4250095907-2822896115-1001\$R7FKU5E.lnk
            Deleted !! : C:\$Recycle.bin\S-1-5-21-2356678355-4250095907-2822896115-1001\$RNUYLFZ.lnk

            =======
            Hosts :
            =======

            127.0.0.1 localhost

            ========
            Registry
            ========

            Deleted : "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}"
            Deleted : HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
            =================
            Internet Explorer
            =================

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
            Start Page REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
            Local Page REG_SZ C:\WINDOWS\system32\blank.htm
            Default_Search_URL REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            Default_Page_URL REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
            Search Page REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
            Start Page REG_SZ https://www.google.com/?gws_rd=ssl
            Local Page REG_SZ C:\WINDOWS\system32\blank.htm
            Search Page REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

            ===============
            Security Center
            ===============

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
            cval REG_DWORD 1 (0x1)
            FirstRunDisabled REG_DWORD 1 (0x1)
            AntiVirusDisableNotify REG_DWORD 0 (0x0)
            FirewallDisableNotify REG_DWORD 0 (0x0)
            UpdatesDisableNotify REG_DWORD 0 (0x0)
            AntiVirusOverride REG_DWORD 1 (0x1)
            FirewallOverride REG_DWORD 1 (0x1)

            ========
            Services
            =========

            Ndisuio : Start = 3
            EapHost : Start = 2
            Wlansvc : Start = 2
            SharedAccess : Start = 2
            windefend : Start = 2
            wuauserv : Start = 2
            wscsvc : Start = 2

            ============
            Disk Cleaned
            anti-ver blaster : OK
            Prefetch cleaned
            ================

            Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

            device: opened successfully
            user: MBR read successfully
            called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll intelide.sys PCIIDEX.SYS atapi.sys
            kernel: MBR read successfully
            user & kernel MBR OK

            ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
            1. archet9
              Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
              mais cette fois-ci :

              choisis l'option clean
              ton PC va redemarrer,

              laisse travailler l'outil.

              en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

              colle le contenu dans ta reponse
              1. franky dubois Auteur
                ========
                Safemode
                ========

                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !!
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !!
                HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !!

                =========
                Atapi.sys
                =========

                C:\Windows\System32\drivers\atapi.sys :
                MD5 :: [1f05b78ab91c9075565a9d8a4b880bc4]
                SHA256 :: [737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd]

                C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys :
                MD5 :: [b35cfcef838382ab6490b321c87edf17]
                SHA256 :: [a13985b87b5918d123072c7128e12dc28b0fcfd68383afa6e1da72a25bd781e0]

                C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys :
                MD5 :: [1f05b78ab91c9075565a9d8a4b880bc4]
                SHA256 :: [737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd]

                C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys :
                MD5 :: [4f4fcb8b6ea06784fb6d475b7ec7300f]
                SHA256 :: [6202d85c9a75e3f01f5f94f069c4cd8a2b9295a182301eae5940ec3bc2c1d896]

                C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys :
                MD5 :: [2d9c903dc76a66813d350a562de40ed9]
                SHA256 :: [82609f01a08c6842e4c17c077bb641c1429c0e6657964b7f2d114035e1bdcbf3]

                C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys :
                MD5 :: [b35cfcef838382ab6490b321c87edf17]
                SHA256 :: [a13985b87b5918d123072c7128e12dc28b0fcfd68383afa6e1da72a25bd781e0]

                C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys :
                MD5 :: [e03e8c99d15d0381e02743c36afc7c6f]
                SHA256 :: [8217348674fc4d0c6d567ffc95b14dfd507f47c5a4728c2ba93d72c412e8527b]

                C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys :
                MD5 :: [2d9c903dc76a66813d350a562de40ed9]
                SHA256 :: [82609f01a08c6842e4c17c077bb641c1429c0e6657964b7f2d114035e1bdcbf3]

                C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys :
                MD5 :: [1f05b78ab91c9075565a9d8a4b880bc4]
                SHA256 :: [737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd]

                Référence :
                ==========

                Win 2000_SP2 : ff953a8f08ca3f822127654375786bbe
                Win 2000_SP4 : 8c718aa8c77041b3285d55a0ce980867
                Win XP_32b : a64013e98426e1877cb653685c5c0009
                Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
                Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
                Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
                Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
                Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
                Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
                Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
                Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C
                Windows 7_32b_Ultimate : 338c86357871c167a96ab976519bf59e

                =======
                Drive :
                =======

                D'fragmenteur de disque Windows
                Copyright (c) 2006 Microsoft Corp.

                Rapport d'analyse pour le volume C:

                Taille du volume = 97.66 Go
                Espace libre = 57.87 Go
                tendue d'espace libre la plus grande = 13.46 Go
                Pourcentage de fragmentation des fichiers = 1 %

                Remarqueÿ: sur les volumes NTFS, les fragments de fichiers de plus de 64ÿMo ne sont pas inclus dans les statistiques de fragmentation.

                Il n'est pas n'cessaire de d'fragmenter ce volume.

                ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                Present !! : C:\ProgramData\xml91D3.tmp
                Present !! : C:\ProgramData\xml952E.tmp
                Present !! : C:\ProgramData\xml9667.tmp
                Present !! : C:\ProgramData\xml987B.tmp
                Present !! : C:\ProgramData\Application Data\.zreglib
                Present !! : C:\ProgramData\xml91D3.tmp
                Present !! : C:\ProgramData\xml952E.tmp
                Present !! : C:\ProgramData\xml9667.tmp
                Present !! : C:\ProgramData\xml987B.tmp
                Present !! : C:\ProgramData\xml91D3.tmp
                Present !! : C:\ProgramData\xml952E.tmp
                Present !! : C:\ProgramData\xml9667.tmp
                Present !! : C:\ProgramData\xml987B.tmp
                Present !! : C:\ProgramData\xml91D3.tmp
                Present !! : C:\ProgramData\xml952E.tmp
                Present !! : C:\ProgramData\xml9667.tmp
                Present !! : C:\ProgramData\xml987B.tmp
                Present !! : C:\ProgramData\xml91D3.tmp
                Present !! : C:\ProgramData\xml952E.tmp
                Present !! : C:\ProgramData\xml9667.tmp
                Present !! : C:\ProgramData\xml987B.tmp
                Present !! : C:\ProgramData\.zreglib
                Present !! : C:\Windows\System32\x64
                Present !! : C:\Users\Franky\AppData\Local\d3d8caps.dat
                Present !! : C:\Users\Franky\AppData\Local\d3d9caps.dat
                Present !! : C:\Users\Franky\AppData\Local\GDIPFONTCACHEV1.DAT
                Present !! : C:\Users\Franky\Application Data\Skinux

                ¤¤¤¤¤¤¤¤¤¤ Keys :

                Present !! : "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}"
                Present !! : HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
                Present !! : HKLM\Software\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}

                ============

                catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2010-08-19 06:55:59
                Windows 6.0.6002 Service Pack 2 FAT NTAPI

                scanning hidden processes ...

                [0] 0x0000F3E9

                scanning hidden services ...

                scanning hidden autostart entries ...

                scanning hidden files ...

                scan completed successfully
                hidden processes: 1
                hidden services: 0
                hidden files: 0

                Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

                device: opened successfully
                user: MBR read successfully
                called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll intelide.sys PCIIDEX.SYS atapi.sys
                kernel: MBR read successfully
                user & kernel MBR OK

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
                cval REG_DWORD 1 (0x1)

                ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

                End of scan : 6:56:00,38
                1. franky dubois Auteur
                  ===============
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3C3901C5-3455-3E0A-A214-0B093A5070A6}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{72E7D204-8696-A6C4-3A14-DB4CB97F7A0A}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]

                  ==============
                  BHO :
                  ======

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]

                  ===
                  DNS
                  ===

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{0769241C-5845-4C26-BA99-262F6BEA3D2B}: DhcpNameServer=205.151.67.2 205.151.67.6
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{0769241C-5845-4C26-BA99-262F6BEA3D2B}: DhcpNameServer=205.151.67.2 205.151.67.6
                  HKLM\SYSTEM\CS2\Services\Tcpip\..\{0769241C-5845-4C26-BA99-262F6BEA3D2B}: DhcpNameServer=205.151.67.2 205.151.67.6
                  HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=205.151.67.2 205.151.67.6
                  HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=205.151.67.2 205.151.67.6
                  HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=205.151.67.2 205.151.67.6

                  ================
                  Internet Explorer :
                  ================

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  Start Page REG_SZ https://www.msn.com/fr-fr
                  Local Page REG_SZ C:\Windows\System32\blank.htm
                  Default_Search_URL REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  Default_Page_URL REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  Search Page REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  Start Page REG_SZ https://www.msn.com/fr-fr
                  Local Page REG_SZ C:\Windows\system32\blank.htm

                  ========
                  Services
                  ========

                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

                  Ndisuio : 0x3 ( OK = 3 )
                  EapHost : 0x3 ( OK = 2 )
                  Wlansvc : 0x2 ( OK = 2 )
                  SharedAccess : 0x3 ( OK = 2 )
                  windefend : 0x2 ( OK = 2 )
                  wuauserv : 0x2 ( OK = 2 )
                  wscsvc : 0x2 ( OK = 2 )
                  1. franky dubois Auteur
                    ¤¤¤¤¤¤¤¤¤¤ List'em by g3n-h@ckm@n 2.0.0.4 ¤¤¤¤¤¤¤¤¤¤

                    User : Franky (Administrateurs)
                    Update on 23/05/2010 by g3n-h@ckm@n ::::: 15.00
                    Start at: 06:43:42 | 2010-08-19

                    Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
                    Microsoft® Windows Vista(TM) Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
                    Internet Explorer 8.0.6001.18943
                    Windows Firewall Status : Disabled
                    AV : avast! antivirus 4.8.1356 [VPS 091010-0] 4.8.1356 [ Enabled | Updated ]

                    C:\ -> Disque fixe local | 97,66 Go (57,85 Go free) | NTFS
                    D:\ -> Disque fixe local | 51,39 Go (37,74 Go free) | NTFS
                    E:\ -> Disque CD-ROM | 4,05 Go (0 Mo free) [MyDisc] | CDFS

                    Boot: Normal
                    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                    C:\Windows\System32\smss.exe
                    C:\Windows\system32\csrss.exe
                    C:\Windows\system32\csrss.exe
                    C:\Windows\system32\wininit.exe
                    C:\Windows\system32\services.exe
                    C:\Windows\system32\lsass.exe
                    C:\Windows\system32\lsm.exe
                    C:\Windows\system32\winlogon.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\SLsvc.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\Windows\System32\spoolsv.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
                    C:\Program Files\CDBurnerXP\NMSAccessU.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\system32\SearchIndexer.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Program Files\Windows Media Player\wmpnetwk.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\Explorer.EXE
                    C:\Program Files\Windows Defender\MSASCui.exe
                    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
                    C:\Program Files\Common Files\Java\Java Update\jusched.exe
                    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
                    C:\Program Files\Windows Sidebar\sidebar.exe
                    C:\Program Files\Free Download Manager\fdm.exe
                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                    C:\Program Files\Windows Live\Contacts\wlcomm.exe
                    C:\Program Files\Mozilla Firefox\firefox.exe
                    C:\Windows\system32\igfxsrvc.exe
                    C:\Windows\system32\rundll32.exe
                    C:\Windows\system32\FirewallControlPanel.exe
                    C:\Windows\system32\SearchProtocolHost.exe
                    C:\Windows\system32\SearchFilterHost.exe
                    C:\Program Files\List_Kill'em\List_Kill'em.exe
                    C:\Windows\system32\conime.exe
                    C:\Windows\system32\cmd.exe
                    C:\Windows\system32\wbem\wmiprvse.exe
                    C:\Program Files\List_Kill'em\pv.exe

                    ======================
                    Keys "Run"
                    ======================

                    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                    Free Download Manager REG_SZ C:\Program Files\Free Download Manager\fdm.exe -autorun
                    MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                    avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    RtHDVCpl REG_SZ C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
                    IgfxTray REG_SZ C:\Windows\system32\igfxtray.exe
                    HotKeysCmds REG_SZ C:\Windows\system32\hkcmd.exe
                    Persistence REG_SZ C:\Windows\system32\igfxpers.exe
                    SunJavaUpdateSched REG_SZ "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
                    ArcSoft Connection Service REG_SZ C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
                    Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                    Adobe ARM REG_SZ "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
                    QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                    Malwarebytes' Anti-Malware REG_SZ C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

                    =====================
                    Other Keys
                    =====================

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                    ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
                    ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
                    EnableInstallerDetection REG_DWORD 1 (0x1)
                    EnableLUA REG_DWORD 1 (0x1)
                    EnableSecureUIAPaths REG_DWORD 1 (0x1)
                    EnableVirtualization REG_DWORD 1 (0x1)
                    PromptOnSecureDesktop REG_DWORD 1 (0x1)
                    ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
                    dontdisplaylastusername REG_DWORD 0 (0x0)
                    scforceoption REG_DWORD 0 (0x0)
                    shutdownwithoutlogon REG_DWORD 1 (0x1)
                    undockwithoutlogon REG_DWORD 1 (0x1)
                    FilterAdministratorToken REG_DWORD 0 (0x0)
                    LegalNoticeText REG_SZ
                    LegalNoticeCaption REG_SZ
                    EnableUIADesktopToggle REG_DWORD 0 (0x0)

                    ===============

                    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

                    ===============

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                    BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)

                    ===============

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    AppInit_DLLS REG_SZ

                    ===============

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    ReportBootOk REG_SZ 1
                    Shell REG_SZ explorer.exe
                    Userinit REG_SZ C:\Windows\system32\userinit.exe,
                    VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
                    AutoRestartShell REG_DWORD 1 (0x1)
                    PowerdownAfterShutdown REG_SZ 0
                    ShutdownWithoutLogon REG_SZ 0
                    cachedlogonscount REG_SZ 10
                    forceunlocklogon REG_DWORD 0 (0x0)
                    passwordexpirywarning REG_DWORD 14 (0xe)
                    Background REG_SZ 0 0 0
                    DebugServerCommand REG_SZ no
                    WinStationsDisabled REG_SZ 0
                    DisableCAD REG_DWORD 1 (0x1)
                    scremoveoption REG_SZ 0
                    ShutdownFlags REG_DWORD 39 (0x27)
                    AutoAdminLogon REG_SZ 0
                    allocatecdroms REG_SZ 0
                    DefaultUserName REG_SZ franky
                    LegalNoticeText REG_SZ
                    LegalNoticeCaption REG_SZ

                    ===============

                    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\igfxcui]

                    ===============

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

                    ===============

                    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                    C:\Program Files\Orbitdownloader\orbitdm.exe REG_SZ C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit
                    C:\Program Files\Orbitdownloader\orbitnet.exe REG_SZ C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit

                    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                    ===============
                    ActivX controls
                    ===============

                    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}]
                    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
                    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
                    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}]
                    1. archet9
                      DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

                      Télécharge List_Kill'em et enregistre le sur ton bureau

                      http://sd-1.archive-host.com/...

                      double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

                      une fois terminée , clic sur "terminer" et le programme se lancera seul

                      choisis choisis l'option Search

                      un icone blanc et noir va s'afficher sur le bureau , il te servira à rappeler le programme si besoin.

                      laisse travailler l'outil

                      à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

                      un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , , il s'auto supprimera a la fin du scan

                      Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"
                      1. franky dubois Auteur
                        Malwarebytes' Anti-Malware 1.46
                        www.malwarebytes.org

                        Version de la base de données: 4447

                        Windows 6.0.6002 Service Pack 2
                        Internet Explorer 8.0.6001.18943

                        2010-08-18 20:06:17
                        mbam-log-2010-08-18 (20-06-17).txt

                        Type d'examen: Examen rapide
                        Elément(s) analysé(s): 145623
                        Temps écoulé: 5 minute(s), 46 seconde(s)

                        Processus mémoire infecté(s): 0
                        Module(s) mémoire infecté(s): 0
                        Clé(s) du Registre infectée(s): 0
                        Valeur(s) du Registre infectée(s): 0
                        Elément(s) de données du Registre infecté(s): 0
                        Dossier(s) infecté(s): 0
                        Fichier(s) infecté(s): 0

                        Processus mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Module(s) mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Clé(s) du Registre infectée(s):
                        (Aucun élément nuisible détecté)

                        Valeur(s) du Registre infectée(s):
                        (Aucun élément nuisible détecté)

                        Elément(s) de données du Registre infecté(s):
                        (Aucun élément nuisible détecté)

                        Dossier(s) infecté(s):
                        (Aucun élément nuisible détecté)

                        Fichier(s) infecté(s):
                        (Aucun élément nuisible détecté)
                        1. archet9
                          Bah ouais t'as réussi mais pas terrible non plus!!!!!

                          Fais un scan avec cet antispyware :
                          Malwarebytes + tutoriel

                          Tu l'installes; mets le a jour...(onglet mise a jour)
                          Click maintenant sur l'onglet recherche et coche la case :
                          "Executer un examen rapide".
                          Puis click sur "rechercher".
                          Laisses le scanner le pc...
                          A la fin du scan, clique sur Afficher les résultats
                          Si des elements on ete trouvés :
                          > click sur supprimer la selection.                          si il t'es demandé de redemarrer > click sur "oui".
                          A la fin un rapport va s'ouvrir;
                          sauvegarde le de maniere a le retrouver en vue de le poster sur le forum.
                          Copies et colles le rapport stp.

                          a+
                          2. franky dubois Auteur
                            2010-07-30 11:36:27 ----D---- C:\Program Files\BoontyGames
                            2010-07-30 11:35:08 ----D---- C:\Boonty
                            2010-07-30 11:11:51 ----D---- C:\ProgramData\PhotoMail
                            2010-07-30 11:11:51 ----D---- C:\Program Files\PhotoMail Maker
                            2010-07-26 21:58:03 ----D---- C:\Program Files\Defraggler
                            2010-07-26 16:39:40 ----SHD---- C:\Windows\Installer
                            2010-07-26 16:39:19 ----A---- C:\Windows\system32\AudPlayer.dll
                            2010-07-26 16:39:19 ----A---- C:\Windows\system32\AudioVisu.dll
                            2010-07-26 16:39:19 ----A---- C:\Windows\system32\AudioRecord.dll
                            2010-07-26 16:39:18 ----A---- C:\Windows\system32\AudDisplay.dll
                            2010-07-26 16:39:18 ----A---- C:\Windows\system32\AudDesign.dll
                            2010-07-26 16:39:17 ----A---- C:\Windows\system32\TABCTFR.DLL
                            2010-07-26 16:39:14 ----A---- C:\Windows\system32\Mscc2fr.dll
                            2010-07-26 16:39:08 ----D---- C:\Users\Franky\AppData\Roaming\FreeAudioPack
                            2010-07-26 16:39:08 ----D---- C:\Program Files\Free Audio Pack
                            2010-07-26 15:12:49 ----D---- C:\Program Files\Audacity

                            ======List of files/folders modified in the last 1 months======

                            2010-08-18 18:31:42 ----D---- C:\Users\Franky\AppData\Roaming\Free Download Manager
                            2010-08-18 18:31:30 ----D---- C:\Windows\Prefetch
                            2010-08-18 18:31:16 ----RD---- C:\Program Files
                            2010-08-18 18:30:44 ----D---- C:\Windows\Temp
                            2010-08-18 18:29:17 ----D---- C:\Program Files\Spybot - Search & Destroy
                            2010-08-18 18:29:16 ----D---- C:\ProgramData\Spybot - Search & Destroy
                            2010-08-18 18:22:24 ----D---- C:\Users\Franky\AppData\Roaming\LimeWire
                            2010-08-18 18:18:48 ----D---- C:\Windows\Tasks
                            2010-08-18 17:22:10 ----D---- C:\Windows\system32\Tasks
                            2010-08-18 00:00:29 ----SHD---- C:\System Volume Information
                            2010-08-16 17:30:18 ----D---- C:\Program Files\Common Files
                            2010-08-15 15:36:35 ----D---- C:\Windows\Debug
                            2010-08-15 15:36:35 ----D---- C:\Windows
                            2010-08-13 17:01:23 ----HD---- C:\ProgramData
                            2010-08-13 17:01:23 ----D---- C:\Windows\system32\drivers
                            2010-08-13 14:00:47 ----D---- C:\Windows\system32\Adobe
                            2010-08-13 14:00:31 ----SD---- C:\Windows\Downloaded Program Files
                            2010-08-13 07:01:35 ----D---- C:\Windows\winsxs
                            2010-08-12 19:57:22 ----D---- C:\Windows\Microsoft.NET
                            2010-08-12 19:56:37 ----RSD---- C:\Windows\assembly
                            2010-08-12 19:08:30 ----D---- C:\Windows\system32\migration
                            2010-08-12 19:08:30 ----D---- C:\Windows\System32
                            2010-08-12 19:08:30 ----D---- C:\Program Files\Movie Maker
                            2010-08-12 19:08:30 ----D---- C:\Program Files\Internet Explorer
                            2010-08-12 19:03:12 ----D---- C:\Windows\system32\catroot
                            2010-08-12 19:02:56 ----D---- C:\Program Files\Windows Mail
                            2010-08-12 17:29:57 ----D---- C:\Windows\system32\catroot2
                            2010-08-09 16:54:25 ----D---- C:\Windows\inf
                            2010-08-09 16:54:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
                            2010-08-04 17:38:52 ----D---- C:\Downloads
                            2010-08-03 22:28:47 ----D---- C:\Users\Franky\AppData\Roaming\Media Player Classic
                            2010-08-03 21:57:34 ----D---- C:\Program Files\Mozilla Firefox
                            2010-08-03 14:09:31 ----A---- C:\Windows\system32\mrt.exe
                            2010-07-30 11:11:32 ----D---- C:\Program Files\IncrediMail
                            2010-07-26 16:48:24 ----D---- C:\Program Files\Recuva
                            2010-07-26 11:42:36 ----SHD---- C:\$Recycle.Bin
                            2010-07-26 11:08:47 ----RD---- C:\Users
                            2010-07-24 13:02:53 ----D---- C:\Users\Franky\AppData\Roaming\Orbit

                            ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                            R0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys [2009-09-23 64288]
                            R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-11-24 23120]
                            R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-09-15 114768]
                            R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-11-24 48560]
                            R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-09-11 24744]
                            R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
                            R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-09-15 53328]
                            R3 AnyDVD;AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [2009-09-24 104512]
                            R3 BCM43XV;Pilote de la carte réseau extensible Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
                            R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-09-16 2771104]
                            R3 OVT511Plus;Dual Mode USB Camera Plus; C:\Windows\System32\Drivers\omcamvid.sys [2001-09-18 167816]
                            R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-09-02 176128]
                            S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2009-09-23 14336]
                            S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
                            S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
                            S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
                            S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-02-26 4569088]
                            S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
                            S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
                            S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
                            S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
                            S3 Pcouffin;Low level access layer for CD devices; C:\Windows\System32\Drivers\Pcouffin.sys []
                            S3 RimUsb;Téléphone intelligent BlackBerry ; C:\Windows\System32\Drivers\RimUsb.sys [2008-04-16 22784]
                            S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP4\WNt500x86\Sandra.sys []
                            S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 7168]
                            S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
                            S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
                            S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
                            S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
                            S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-09-30 40448]
                            S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

                            ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                            R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
                            R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-24 18752]
                            R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-24 138680]
                            R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-02-04 1181328]
                            R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
                            R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-24 254040]
                            R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-24 352920]
                            S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
                            S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [2010-07-30 69120]
                            S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
                            S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
                            S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-09-23 238960]
                            S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

                            -----------------EOF-----------------
                            1. franky dubois Auteur
                              [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                              "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
                              "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-24 81000]
                              "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-09-16 7739936]
                              "IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-02-26 141848]
                              "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-02-26 173592]
                              "Persistence"=C:\Windows\system32\igfxpers.exe [2009-02-26 150552]
                              "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
                              "ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-03-18 207360]
                              "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-19 35760]
                              "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
                              "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

                              [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                              "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
                              "Free Download Manager"=C:\Program Files\Free Download Manager\fdm.exe [2009-01-31 3399727]
                              "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-07-26 3883856]

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
                              C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Franky^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CCleaner - Raccourci.lnk]
                              C:\PROGRA~1\CCleaner\CCleaner.exe []

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Franky^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
                              C:\PROGRA~1\LimeWire\LimeWire.exe [2009-12-16 503808]

                              C:\Users\Franky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
                              LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
                              C:\Windows\system32\igfxdev.dll [2009-02-26 210432]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

                              [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                              "dontdisplaylastusername"=0
                              "shutdownwithoutlogon"=1
                              "undockwithoutlogon"=1
                              "LegalNoticeText"=
                              "LegalNoticeCaption"=
                              "EnableUIADesktopToggle"=0

                              [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                              "BindDirectlyToPropertySetStorage"=0

                              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                              "C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
                              "C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"

                              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

                              ======File associations======

                              .js - edit - C:\Windows\System32\Notepad.exe %1
                              .js - open - C:\Windows\System32\WScript.exe "%1" %*

                              ======List of files/folders created in the last 1 months======

                              2010-08-18 18:31:16 ----D---- C:\Program Files\trend micro
                              2010-08-18 18:31:15 ----D---- C:\rsit
                              2010-08-16 17:30:18 ----D---- C:\Program Files\Common Files\Symantec Shared
                              2010-08-13 17:01:23 ----D---- C:\Windows\system32\drivers\NSS
                              2010-08-13 17:01:23 ----D---- C:\ProgramData\Symantec
                              2010-08-13 17:01:23 ----D---- C:\ProgramData\Norton
                              2010-08-13 17:01:23 ----D---- C:\Program Files\Norton Security Scan
                              2010-08-13 17:01:20 ----D---- C:\ProgramData\NortonInstaller
                              2010-08-13 17:01:20 ----D---- C:\Program Files\NortonInstaller
                              2010-08-12 17:30:56 ----A---- C:\Windows\system32\mshtml.dll
                              2010-08-12 17:30:56 ----A---- C:\Windows\system32\iertutil.dll
                              2010-08-12 17:30:54 ----A---- C:\Windows\system32\ieframe.dll
                              2010-08-12 17:30:53 ----A---- C:\Windows\system32\urlmon.dll
                              2010-08-12 17:30:52 ----A---- C:\Windows\system32\msfeeds.dll
                              2010-08-12 17:30:52 ----A---- C:\Windows\system32\ie4uinit.exe
                              2010-08-12 17:30:51 ----A---- C:\Windows\system32\wininet.dll
                              2010-08-12 17:30:51 ----A---- C:\Windows\system32\mstime.dll
                              2010-08-12 17:30:51 ----A---- C:\Windows\system32\iedkcs32.dll
                              2010-08-12 17:30:50 ----A---- C:\Windows\system32\occache.dll
                              2010-08-12 17:30:50 ----A---- C:\Windows\system32\ieUnatt.exe
                              2010-08-12 17:30:50 ----A---- C:\Windows\system32\ieui.dll
                              2010-08-12 17:30:50 ----A---- C:\Windows\system32\iesysprep.dll
                              2010-08-12 17:30:50 ----A---- C:\Windows\system32\iepeers.dll
                              2010-08-12 17:30:49 ----A---- C:\Windows\system32\msfeedssync.exe
                              2010-08-12 17:30:49 ----A---- C:\Windows\system32\msfeedsbs.dll
                              2010-08-12 17:30:49 ----A---- C:\Windows\system32\jsproxy.dll
                              2010-08-12 17:30:49 ----A---- C:\Windows\system32\iesetup.dll
                              2010-08-12 17:30:49 ----A---- C:\Windows\system32\iernonce.dll
                              2010-08-12 17:30:47 ----A---- C:\Windows\system32\iccvid.dll
                              2010-08-12 17:30:45 ----A---- C:\Windows\system32\schannel.dll
                              2010-08-12 17:30:38 ----A---- C:\Windows\system32\win32k.sys
                              2010-08-12 17:30:36 ----A---- C:\Windows\system32\rtutils.dll
                              2010-08-12 17:30:25 ----A---- C:\Windows\system32\ntkrnlpa.exe
                              2010-08-12 17:30:23 ----A---- C:\Windows\system32\ntoskrnl.exe
                              2010-08-12 17:30:20 ----A---- C:\Windows\system32\msxml3.dll
                              2010-08-12 17:30:18 ----A---- C:\Windows\system32\drivers\srv.sys
                              2010-08-12 17:30:17 ----A---- C:\Windows\system32\drivers\srv2.sys
                              2010-08-12 17:30:15 ----A---- C:\Windows\system32\drivers\tcpip.sys
                              2010-08-02 21:35:51 ----A---- C:\Windows\system32\shell32.dll
                              2010-07-30 11:36:44 ----D---- C:\ProgramData\BOONTY
                              2010-07-30 11:36:40 ----D---- C:\Program Files\Common Files\BOONTY Shared
                              1. franky dubois Auteur
                                C:\Windows\servicing\TrustedInstaller.exe
                                O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
                                O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
                                O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
                                O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
                                O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
                                O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
                                O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
                                O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
                                O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                1. franky dubois Auteur
                                  Logfile of random's system information tool 1.08 (written by random/random)
                                  Run by Franky at 2010-08-18 18:31:16
                                  Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2
                                  System drive C: has 58 GB (58%) free of 100 GB
                                  Total RAM: 1011 MB (14% free)

                                  Logfile of Trend Micro HijackThis v2.0.4
                                  Scan saved at 18:31:54, on 2010-08-18
                                  Platform: Windows Vista SP2 (WinNT 6.00.1906)
                                  MSIE: Internet Explorer v8.00 (8.00.6001.18943)
                                  Boot mode: Normal

                                  Running processes:
                                  C:\Windows\system32\taskeng.exe
                                  C:\Windows\system32\Dwm.exe
                                  C:\Windows\Explorer.EXE
                                  C:\Program Files\Windows Defender\MSASCui.exe
                                  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                  C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
                                  C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
                                  C:\Program Files\Common Files\Java\Java Update\jusched.exe
                                  C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
                                  C:\Program Files\Windows Sidebar\sidebar.exe
                                  C:\Program Files\Free Download Manager\fdm.exe
                                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                  C:\Program Files\Windows Live\Contacts\wlcomm.exe
                                  C:\Program Files\Mozilla Firefox\firefox.exe
                                  C:\Windows\system32\conime.exe
                                  C:\Windows\system32\igfxsrvc.exe
                                  C:\Windows\system32\SearchFilterHost.exe
                                  C:\Users\Franky\Desktop\RSIT.exe
                                  C:\Program Files\trend micro\Franky.exe

                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                  O1 - Hosts: ::1 localhost
                                  O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
                                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                                  O2 - BHO: Windows Live OneCare Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
                                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                  O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
                                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                  O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
                                  O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
                                  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
                                  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
                                  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
                                  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
                                  O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
                                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                                  O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
                                  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                  O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
                                  O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
                                  O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
                                  O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
                                  O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
                                  O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
                                  O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
                                  O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
                                  O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
                                  O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
                                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                                  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                                  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
                                  O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
                                  O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
                                  O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                  O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
                                  O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe
                                  O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
                                  O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
                                  O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\maconfservice.exe
                                  O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
                                  O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
                                  O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
                                  O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
                                  O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
                                  O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
                                  O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
                                  O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
                                  O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
                                  O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
                                  O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner -
                                  • 1
                                  • 2

                                  Discussions similaires

                                  Verrouillage par fermeture de coque Samsung Galaxy
                                  jicece33

                                  8 réponses
                                  Softonic,est-ce un virus ?
                                  techmel1

                                  6 réponses
                                  Chrome://newtab
                                  Nova

                                  14 réponses
                                  Désinstaller Softonic
                                  Diguimette

                                  5 réponses
                                  Samsung S22 Allumage écran à l ouverture clapet ?
                                  broccoli

                                  3 réponses