Trop de pub

Bonjour,
Je recois vrément trop de pub et viene même 3 a la suite abbusé
j'aimerais quon me donne un moyen de ressoudre se probleme
merci de repondre x)
Configuration: Windows Vista
Internet Explorer 7.0

8 réponses

  1. Baah oui j'ai fais tous ce que vous m'avez dit je sais pas pourquoi sa marche pas
    1. Contributeur sécurité
      Ton crack est toujours là et àa n'a pas fonctionné

      L'UAC est bien toujours désactivé ?
      Tu lances bien les commandes par un clic droit "en tant qu'administrateur" ?
      1. -----------\\ ToolBar S&D 1.2.4 XP/Vista

        Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6000 )
        X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz )
        BIOS : Ver 1.00PARTTBL
        USER : Utilisateur ( Administrator )
        BOOT : Normal boot
        Antivirus : Norton Internet Security 2007 (Activated)
        Firewall : Norton Internet Security 2007 (Not Activated)
        C:\ (Local Disk) - NTFS - Total:111 Go (Free:66 Go)
        D:\ (Local Disk) - NTFS - Total:111 Go (Free:111 Go)
        E:\ (CD or DVD)

        "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
        Option : [2] ( 14/11/2008|19:16 )

        [ UAC => 1 ]

        -----------\\ SUPPRESSION

        Echec ! - C:\Program Files\ContextAdvisor\ContextAdvisor-2.dll
        Echec ! - C:\Program Files\ContextAdvisor\ContextAdvisor.dat
        Echec ! - C:\Program Files\ContextAdvisor\pcre3.dll
        Supprime! - C:\Program Files\ContextAdvisor\uninstall.exe
        Echec ! - C:\Program Files\ContextAdvisor

        -----------\\ DEUXIEME PASSAGE

        Echec ! - C:\Program Files\ContextAdvisor\ContextAdvisor-2.dll
        Echec ! - C:\Program Files\ContextAdvisor\ContextAdvisor.dat
        Echec ! - C:\Program Files\ContextAdvisor\pcre3.dll
        Echec ! - C:\Program Files\ContextAdvisor

        -----------\\ Recherche de Fichiers / Dossiers ...

        C:\Program Files\ContextAdvisor
        C:\Program Files\ContextAdvisor\ContextAdvisor-2.dll
        C:\Program Files\ContextAdvisor\ContextAdvisor.dat
        C:\Program Files\ContextAdvisor\pcre3.dll

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\Windows\\system32\\blank.htm"
        "Search Page"="https://www.google.com/?gws_rd=ssl"
        "Start Page"="https://www.google.fr/?gws_rd=ssl"
        "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
        "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
        "Url"="https://www.msn.com/fr-fr/actualite/"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Start Page"="https://www.msn.com/fr-fr/"
        "Default_Page_URL"="https://fr.yahoo.com/"
        "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
        "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

        --------------------\\ Recherche d'autres infections

        C:\Program Files\InternetGameBox
        C:\Program Files\InternetGameBox\InternetGameBox.exe
        C:\Program Files\InternetGameBox\language
        C:\Program Files\InternetGameBox\ressources
        C:\Program Files\InternetGameBox\skins
        C:\Program Files\InternetGameBox\uninst.exe
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.url
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.url
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\D‚sinstaller.lnk
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
        C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.url

        C:\Users\UTILIS~1\AppData\Local\cemkmow.dat
        C:\Users\UTILIS~1\AppData\Local\cemkmow.exe
        C:\Users\UTILIS~1\AppData\Local\cemkmow_nav.dat
        C:\Users\UTILIS~1\AppData\Local\cemkmow_navps.dat
        [b]==> EGDACCESS <==/b

        --------------------\\ Cracks & Keygens ..

        C:\Users\UTILIS~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DMLQO5MS\keyGen[1].htm

        [ UAC => 1 ]

        1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2008|19:05 - Option : [1]
        2 - "C:\ToolBar SD\TB_2.txt" - 14/11/2008|19:17 - Option : [2]

        -----------\\ Fin du rapport a 19:17:27,15
        1. Contributeur sécurité
          Supprime ton crack :

          C:\Users\UTILIS~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DMLQO5MS\keyGen[1].htm

          Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
          ! Ne ferme pas la fenêtre lors de la suppression !
          Un rapport sera généré, poste son contenu ici.

          NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
          Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
          Tape explorer puis valide.
          1. -----------\\ ToolBar S&D 1.2.4 XP/Vista

            Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6000 )
            X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz )
            BIOS : Ver 1.00PARTTBL
            USER : Utilisateur ( Administrator )
            BOOT : Normal boot
            Antivirus : Norton Internet Security 2007 (Activated)
            Firewall : Norton Internet Security 2007 (Not Activated)
            C:\ (Local Disk) - NTFS - Total:111 Go (Free:66 Go)
            D:\ (Local Disk) - NTFS - Total:111 Go (Free:111 Go)
            E:\ (CD or DVD)

            "C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
            Option : [1] ( 14/11/2008|19:04 )

            [ UAC => 0 ]

            -----------\\ Recherche de Fichiers / Dossiers ...

            C:\Program Files\ContextAdvisor
            C:\Program Files\ContextAdvisor\ContextAdvisor-2.dll
            C:\Program Files\ContextAdvisor\ContextAdvisor.dat
            C:\Program Files\ContextAdvisor\pcre3.dll
            C:\Program Files\ContextAdvisor\uninstall.exe

            -----------\\ [..\Internet Explorer\Main]

            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
            "Local Page"="C:\\Windows\\system32\\blank.htm"
            "Search Page"="https://www.google.com/?gws_rd=ssl"
            "Start Page"="https://www.google.fr/?gws_rd=ssl"
            "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
            "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
            "Url"="https://www.msn.com/fr-fr/actualite/"

            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
            "Start Page"="https://fr.yahoo.com/"
            "Default_Page_URL"="https://fr.yahoo.com/"
            "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
            "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

            --------------------\\ Recherche d'autres infections

            C:\Program Files\InternetGameBox
            C:\Program Files\InternetGameBox\InternetGameBox.exe
            C:\Program Files\InternetGameBox\language
            C:\Program Files\InternetGameBox\ressources
            C:\Program Files\InternetGameBox\skins
            C:\Program Files\InternetGameBox\uninst.exe
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.url
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.url
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\D‚sinstaller.lnk
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
            C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.url

            C:\Users\UTILIS~1\AppData\Local\cemkmow.dat
            C:\Users\UTILIS~1\AppData\Local\cemkmow.exe
            C:\Users\UTILIS~1\AppData\Local\cemkmow_nav.dat
            C:\Users\UTILIS~1\AppData\Local\cemkmow_navps.dat
            [b]==> EGDACCESS <==/b

            --------------------\\ Cracks & Keygens ..

            C:\Users\UTILIS~1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DMLQO5MS\keyGen[1].htm

            [ UAC => 1 ]

            1 - "C:\ToolBar SD\TB_1.txt" - 14/11/2008|19:05 - Option : [1]

            -----------\\ Fin du rapport a 19:05:23,22
            1. Contributeur sécurité
              Désactive le contrôle des comptes utilisateurs
              (tu le réactiveras après ta désinfection):

              * Va dans démarrer puis panneau de configuration
              * Double Clique sur l'icône "Comptes d'utilisateurs"
              * Clique ensuite sur désactiver et valide.

              Tuto : https://forum.malekal.com/viewtopic.php?f=59&t=6517

              https://forum.pcastuces.com/navilog_de_il_mafioso_pour_vista-f31s12.htm

              Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
              https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

              * Lance l'installation du programme en exécutant le fichier téléchargé.
              * Double-clique maintenant sur le raccourci de Toolbar-S&D.
              * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
              * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
              * Poste le rapport généré. (C:\TB.txt)

              1. Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 18:55:59, on 14/11/2008
                Platform: Windows Vista (WinNT 6.00.1904)
                MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                Boot mode: Normal

                Running processes:
                C:\Windows\system32\Dwm.exe
                C:\Windows\system32\taskeng.exe
                C:\Windows\Explorer.EXE
                C:\Program Files\Windows Defender\MSASCui.exe
                C:\Windows\RtHDVCpl.exe
                C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
                C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
                C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
                C:\Program Files\Launch Manager\LManager.exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                C:\Program Files\Windows Sidebar\sidebar.exe
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
                C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
                C:\Users\UTILIS~1\AppData\Local\Temp\RtkBtMnt.exe
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
                C:\Program Files\Windows Sidebar\sidebar.exe
                C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
                C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
                C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
                C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
                C:\Windows\system32\conime.exe
                C:\Program Files\Windows Media Player\wmplayer.exe
                C:\Windows\system32\wuauclt.exe
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                C:\Program Files\eMule\emule.exe
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                O1 - Hosts: ::1 localhost
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll (file missing)
                O2 - BHO: ContextAdvisor - {87E68009-29A8-D669-F7C2-B31D08635C50} - C:\Program Files\ContextAdvisor\ContextAdvisor-2.dll
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll (file missing)
                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
                O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
                O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
                O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
                O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                O4 - HKLM\..\Run: [drv acid] "C:\ProgramData\EncCopyCopy.vv990z"
                O4 - HKLM\..\Run: [locks tick title proc] "C:\ProgramData\Kind Long Default.k2g4b"
                O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                O4 - HKCU\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
                O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
                O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
                O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                O13 - Gopher Prefix:
                O15 - Trusted Zone: http://click.getmirar.com (HKLM)
                O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
                O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
                O15 - Trusted Zone: http://awbeta.net-nucleus.com (HKLM)
                O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
                O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
                O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
                O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
                O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
                O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
                O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
                O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
                O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
                O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                1. Contributeur sécurité
                  Bonjour

                  Télécharge le fichier d’installation d’Hijackthis en cliquant sur ce lien

                  http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

                  * Enregistre HJTInstall.exe sur ton bureau.

                  * Double-clique sur HJTInstall.exe pour lancer le programme

                  Tuto : https://www.malekal.com/tutoriel-hijackthis/
                  http://pagesperso-orange.fr/rginformatique/section%20virus/Hijenr.gif
                  http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm

                  * Accepte la license en cliquant sur le bouton "I Accept"
                  * Choisis l'option "Do a system scan and save a log file"
                  * Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
                  * Clique sur "Edition -> Sélectionner tout", puis sur "Edition -> Copier" pour copier tout le contenu du rapport

                  * Colle le rapport que tu viens de copier sur ce forum