Virus à volonté

Résolu
cmoi -  
Bonjour,

qui veut des virus, j'en ais plein et à volonté :

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3070
Windows 6.0.6002 Service Pack 2

23/12/2009 21:40:14
mbam-log-2009-12-23 (21-40-14).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 30444
Temps écoulé: 9 minute(s), 40 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 128
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 18

Processus mémoire infecté(s):
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.


puis j'ai fais un deuxième scan car j'ai arrêté pour supprimer ce que ça venais de trouver :

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3070
Windows 6.0.6002 Service Pack 2

23/12/2009 21:53:23
mbam-log-2009-12-23 (21-53-23).txt

Type de recherche: Examen rapide
Eléments examinés: 90313
Temps écoulé: 11 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 9
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 13
Fichier(s) infecté(s): 54

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Windows\System32\f3PSSavr.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3REGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3AUXSTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3DLGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.

donc me fait des dizaines et des dizaines d'adware et quelques trojan.

j'ai tout supprimé mais comment savoir s'il en reste encore ?

merci beaucoup et bonne soirée
Configuration: Windows Vista
Firefox 3.5.6

47 réponses

Résumé de la discussion

Plusieurs infections ont été détectées lors de l'analyse initiale, notamment Adware.MyWebSearch et Trojan.Vundo, avec Malwarebytes' Anti-Malware signalant des fichiers, modules et entrées de registre infectés sur le système Windows. Pour remédier, les outils ont mis en quarantaine et supprimé des clefs et valeurs du registre, ainsi que des fichiers et modules malveillants, principalement liés à MyWebSearch et à des composants publicitaires intrusifs. En cas de nouveau balayage rapide, les résultats ont montré la disparition des processus malveillants et une réduction significative des éléments infectés, avec plusieurs restes signalés comme Delete on reboot ou quarantined. D'autres traces persistent dans le registre et les fichiers d'installation, nécessitant une étape de vérification ou un nettoyage supplémentaire pour éviter toute réinfection ultérieure potentielle.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    @ cmoui, c encoremoui ....

    tu proposes Combofix à la va vite !!!
    je m'en passe bien de tes conseils, merci quand même :-)

    puis ceci est un extrait d'avertissement de l'éditeur de Combofix, avant son utilisation :

    Vous ne devez pas utiliser ComboFix sans qu'un assistant vous demande expressément de le faire. De plus, en raison de la puissance de cet outil, il vous est fortement conseillé de ne pas essayer de traiter les informations affichées par ComboFix sans l'aide de quelqu'un qui a suivi une formation adéquate. Si vous le faites quand même, seul, sachez qu'une mauvaise utilisation du programme pourrait entraîner des problèmes dans le fonctionnement normal de votre ordinateur.

    tu te prends pour un pro ?

    sinon y vont te cramer ton pc les autres c'est des novices

    avec tes conseils, tu risques de ne pas seulement de cramer le pc, mais le planter carrement !!!

    bonne lecture ;-)

    encore une bateille perdue d'avance contre l'ignorance !!!!
    1. RA|STL|N
      Malwarebytes' Anti-Malware est un excellent anti-spyware par contre il n'est pas parfait.

      Pour moi, tu as 2 solutions :

      la permiere : formatage si tu veux être certains de n eplus avoir de virus et auters.
      sinon : utilise Ad-aware, et fait un scan avec un bon antivirus.

      Mais sincèrement aucuns anti-virus/anti-spyware n'est parfait donc la meilleure soluce dans certains cas extreme est de tout formater et repartir sur des bases neuves.

      Joyeuse fêtes
      1. cmoi
        je ne veux pas formater et en plus j'ai pas les cd d'installation car l'ordi portable m'a été vendu sans les cd

        j'ai fais un scan hijackthis :

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 22:06:56, on 23/12/2009
        Platform: Windows Vista SP2 (WinNT 6.00.1906)
        MSIE: Internet Explorer v8.00 (8.00.6001.18865)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\Dwm.exe
        C:\Windows\Explorer.EXE
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Iminent\IMBooster\IMBooster.exe
        C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Windows\system32\taskeng.exe
        C:\Program Files\LogMeIn\x86\LMIGuardian.exe
        C:\Windows\system32\conime.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\PROGRA~1\Bandoo\BndCore.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Users\admin\Documents\HiJackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vb32&d=0409&m=aspire_5735
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
        O1 - Hosts: ::1 localhost
        O2 - BHO: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
        O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
        O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
        O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
        O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll
        O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
        O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
        O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
        O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
        O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
        O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
        O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
        O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
        O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
        O4 - HKCU\..\Run: [Memopal] C:\Program Files\Memopal\Memopal.exe
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
        O13 - Gopher Prefix:
        O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
        O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
        O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
        O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
        O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll ? C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
        O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
        O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
        O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: Bandoo Coordinator - Discordia Limited - C:\PROGRA~1\Bandoo\Bandoo.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing)
        O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
        O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
        O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
        O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
        O23 - Service: Google Desktop Manager 5.9.909.30391 (GoogleDesktopManager-093009-130223) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
        O23 - Service: Memopal Crawler - Unknown owner - C:\Program Files\Memopal\MemopalCrawler.exe
        O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
        O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
        O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
        O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
        O23 - Service: RGService - Unknown owner - C:\Program Files\RadioGet\RGService.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
        O23 - Service: STSService - Unknown owner - C:\Program Files\SoundTaxi Media Suite\STSService.exe
        3. NicoVA Contributeur sécurité
          Salut

          Juste de passage, Ad-remover traite l'infection MyWebSearch ;)

          De plus tu a une infection ASKbar et Kiwee Toolbar.

          Attend qu'un Helper vienne voir ton pb.

          NicoVA
          2. moment de grace Contributeur sécurité
            bonsoir

            C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Delete on reboot.

            => redemarrer le pc
            1. Utilisateur anonyme
              hello,
              c'est notre ami cmoi :-)
              il/elle est bien connu sur ce forum :
              https://forums.commentcamarche.net/forum/affich-15542242-pubs-intempestives-sur-ie-et-ff

              tu sais, du moment ou tu n'y vas pas jusqu'au bout de désinfection, les infections reviennent !!!
              ADR chasse ton soucis ;-)
              bonne chasse à MDG et à +++
              1. cmoi
                celui qui a écrit le topic et moi même nous sommes deux personnes et un modo peut même vérifier ça avec son super pouvoir
            3. moment de grace Contributeur sécurité
              oh je n'ai fait que passer...avec un petit conseil

              il y a assez du monde ici
              1. Utilisateur anonyme
                Continue sur le topic, c'est un habitué du forum, regarde le lien que j'ai mis ;-)

                essaie de supprimer les virus une fois pour toutes, c'est un bon exercice :-)

                il y a de tout :-)

                bonne soirée ;-)
            4. cmoi
              j'ai redémarré et le fichier infecté a disparu alors j'ai aussi supprimé le dossier mywebsearch

              mais c'est quoi ce truc ?
              un logiciel que j'ai installé ?
              1. raleuboleu
                re

                télécharge genproc ici :

                http://ww11.genproc.com/

                tu as tout sur le site : tuto pour vista etc

                poste le rapport stp

                bises et non au formatage forcé lol
                1. Utilisateur anonyme
                  Rapport GenProc 2.660 [2] - 23/12/2009 à 22:48:20
                  @ Windows VISTA Service Pack 2 - Acer - Mode normal
                  @ Mozilla Firefox 3.5.6 (fr) [Navigateur par défaut]

                  ~~ ECHEC DU TELECHARGEMENT DE CM ~~
                  ~~ ECHEC DU TELECHARGEMENT DE MBR.EXE ~~

                  GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

                  Fais scanner le(s) fichier(s) suivant(s) sur ce site https://www.virustotal.com/gui/ :

                  C:\Program Files\Memopal\MemopalCrawler.exe

                  et poste le(s) rapport(s) obtenu(s) dans ta prochaine réponse (Clique sur Réanalyser le fichier si nécessaire).

                  ~~~~ INFORMATION COMPLEMENTAIRE ~~~~

                  Rapport de ZHPDiag v1.24.39 par Nicolas Coolman
                  Run by admin at 23/12/2009 22:50:01
                  Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                  Platform : Windows Vista (TM) Home Basic (6.0.6002) Service Pack 2
                  MSIE: Internet Explorer v8.0.6001.18865
                  MFIE: Mozilla Firefox (3.5.6)

                  Boot mode: Normal (Normal boot)
                  Total RAM: 3000 MB (64% free)
                  System drive C: has 170 GB (76%) free of 223 GB

                  ---\\
                  [MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - C:\Program Files\Windows Defender\MSASCui.exe
                  [MD5.633B66014DDEDA70C21CFD327BDC214A] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                  [MD5.234051C0D242A6F4A79AE5212C1323D4] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                  [MD5.29680A793F690EEF4AAA68479D2A6DF8] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                  [MD5.33E5A8FC8EB0EE42478F8538D0215D8F] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  [MD5.3103FE27C967675B019E880AA6DA3D6D] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                  [MD5.5D456B9ED2D715DB4BA09C3DA88E0567] - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  [MD5.55D7A219AD8D0DB8980528944152A6FD] - C:\Program Files\QuickTime\QTTask.exe
                  [MD5.68A553BDFA855C4F1074696682FCDEB6] - C:\Program Files\iTunes\iTunesHelper.exe
                  [MD5.DB292C0CF78D251482F5B53E877A8ECD] - C:\Program Files\Iminent\IMBooster\imbooster.exe
                  [MD5.97BFC00E48BF7B048B0733D238E569E7] - C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                  [MD5.C5FCC0B761069FABD59E41B7C3280DDF] - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                  [MD5.18B4B12358EFCF68D76812058A26181F] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  [MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  [MD5.C2589544438721C8A971E8B5EAB41EFA] - C:\Program Files\Memopal\Memopal.exe
                  [MD5.35937EAD711207544E219C2A19A78A7D] - C:\Program Files\Windows Media Player\WMPNSCFG.exe
                  [MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - C:\Program Files\Windows Sidebar\Sidebar.exe
                  [MD5.10A1C82D74BF6B4CECFF4C303469A75F] - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  [MD5.3794B461C45882E06856F282EEF025AF] - C:\Windows\system32\svchost.exe
                  [MD5.EFBC44FBD75E4F80BD927AEBF6E7EADE] - C:\Windows\system32\agrsmsvc.exe
                  [MD5.9015BC03F62940527EC92D45EE89E46F] - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                  [MD5.B8720A787C1223492E6F319465E996CE] - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                  [MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  [MD5.33D3589DC7D20161788D169BE5EE2F3E] - C:\PROGRA~1\Bandoo\Bandoo.exe
                  [MD5.3F56903E124E820AEECE6D471583C6C1] - C:\Program Files\Bonjour\mDNSResponder.exe
                  [MD5.09E6AFFAE6C0E9158BF05C7D08D0107A] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                  [MD5.5CA9B1062C0C3E3AE19C23AD9D8A5048] - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                  [MD5.2CE2DDCB1A41ED4488A2A8B98D286B3D] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                  [MD5.A51FD9DF23720485991F56741BBEFCFB] - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                  [MD5.626A24ED1228580B9518C01930936DF9] - C:\Program Files\Google\Update\GoogleUpdate.exe
                  [MD5.5467F1FF0AF264566740F67E8B810735] - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  [MD5.793FF718477345CD5D232C50BED1E452] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                  [MD5.94F4417B3744D48F5C8A1487CFCA81C7] - C:\Program Files\Memopal\MemopalCrawler.exe
                  [MD5.1E1A308F4229FAB0011A0745EE8377AE] - C:\Acer\Mobility Center\MobilityService.exe
                  [MD5.CB76F68BA0D57C5D25B538981B1C611C] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                  [MD5.DF1C10A75DF7E50195FC417F88A33227] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                  [MD5.17E0BEF5CA5C9CE52CC8082AC6EBC449] - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                  [MD5.3978F3540329E16C0AC3BCF677E5669F] - C:\Windows\system32\lsass.exe
                  [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - C:\Windows\system32\SLsvc.exe
                  [MD5.524BFBEA40E6E404737CCBC754647A2E] - C:\Windows\System32\spoolsv.exe
                  [MD5.AED0DFF80C6B3914769407E78D7AB21A] - C:\Windows\system32\SearchIndexer.exe

                  ---\\
                  M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\linkcontent@iminent

                  ---\\
                  F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
                  F2 - REG:system.ini: Shell=explorer.exe

                  ---\\
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

                  ---\\
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

                  ---\\
                  R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  R3 - URLSearchHook: Softonic France FF Toolbar - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

                  ---\\
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                  O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
                  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                  O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll

                  ---\\
                  O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} -
                  O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
                  O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                  O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

                  ---\\
                  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                  O4 - HKLM\..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                  O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  O4 - HKLM\..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                  O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                  O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
                  O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
                  O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                  O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                  O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKCU\..\Run: [Memopal] C:\Program Files\Memopal\Memopal.exe
                  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                  O4 - HKLM\..\policies\Explorer: [BindDirectlyToPropertySetStorage] Data=0
                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
                  O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

                  ---\\
                  O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

                  ---\\
                  O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
                  O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
                  O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
                  O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
                  O10 - WLSP:\000000000005\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll
                  O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\mswsock.dll
                  O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\winrnr.dll

                  ---\\
                  O16 - DPF: CabBuilder (CabBuilder) - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                  O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - file:///C:/Windows/Java/classes/xmldso.cab
                  O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                  O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
                  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

                  ---\\
                  O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
                  O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
                  O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
                  O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
                  O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O18 - Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Windows\system32\mshtml.dll
                  O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
                  O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
                  O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

                  ---\\
                  O20 - Winlogon Notify: igfxcui - C:\Windows\System32\igfxdev.dll

                  O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll ? C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

                  ---\\
                  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

                  ---\\
                  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

                  ---\\
                  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - C:\Windows\system32\agrsmsvc.exe
                  O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                  O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                  O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: Bandoo Coordinator (Bandoo Coordinator) - C:\PROGRA~1\Bandoo\Bandoo.exe
                  O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
                  O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                  O23 - Service: CLHNService (CLHNService) - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                  O23 - Service: eDataSecurity Service (eDataSecurity Service) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                  O23 - Service: Empowering Technology Service (ETService) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                  O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - C:\Program Files\Google\Update\GoogleUpdate.exe" /svc
                  O23 - Service: Google Software Updater (gusvc) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                  O23 - Service: Memopal Crawler (Memopal Crawler) - C:\Program Files\Memopal\MemopalCrawler.exe
                  O23 - Service: MobilityService (MobilityService) - C:\Acer\Mobility Center\MobilityService.exe -p
                  O23 - Service: My Web Search Service (MyWebSearchService) - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
                  O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                  O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                  O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
                  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
                  O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding
                  O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) - C:\WindowsC:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl

                  ---\\
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{C4CEF75D-0191-45FF-8B4C-6C21161529DF}.job

                  ---\\
                  O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
                  O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
                  O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
                  O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
                  O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
                  O41 - Driver: (no object) (hdbga) - C:\WINDOWS\system32\drivers\hdbga.sys
                  O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                  O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                  O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
                  O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
                  O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
                  O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
                  O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
                  O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
                  O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
                  O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
                  O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
                  O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
                  O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
                  O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
                  O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
                  O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

                  ---\\
                  O42 - Logiciel: AbsoluCasino
                  O42 - Logiciel: Acer Arcade Deluxe
                  O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8
                  O42 - Logiciel: Acer Empowering Technology
                  O42 - Logiciel: Acer GameZone Console 2.0.1.1
                  O42 - Logiciel: Acer GridVista
                  O42 - Logiciel: Acer Mobility Center Plug-In
                  O42 - Logiciel: Acer ScreenSaver
                  O42 - Logiciel: Acer eDataSecurity Management
                  O42 - Logiciel: Acer ePower Management
                  O42 - Logiciel: Acer eRecovery Management
                  O42 - Logiciel: Acer eSettings Management
                  O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
                  O42 - Logiciel: Ad-Aware
                  O42 - Logiciel: Adobe Flash Player 10 ActiveX
                  O42 - Logiciel: Adobe Flash Player 10 Plugin
                  O42 - Logiciel: Adobe Reader 9.2 - Français
                  O42 - Logiciel: Agere Systems HDA Modem
                  O42 - Logiciel: Alice Greenfingers
                  O42 - Logiciel: Apple Application Support
                  O42 - Logiciel: Apple Mobile Device Support
                  O42 - Logiciel: Apple Software Update
                  O42 - Logiciel: ArcSoft Software Suite
                  O42 - Logiciel: Ask Toolbar
                  O42 - Logiciel: Assistant de connexion Windows Live
                  O42 - Logiciel: Audacity 1.2.6
                  O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
                  O42 - Logiciel: Azada
                  O42 - Logiciel: Bandoo
                  O42 - Logiciel: Billiard Art
                  O42 - Logiciel: Bonjour
                  O42 - Logiciel: CCleaner
                  O42 - Logiciel: Cake Mania
                  O42 - Logiciel: CamStudio 2.0 Fr
                  O42 - Logiciel: Chicken Invaders 3
                  O42 - Logiciel: ESET Online Scanner v3
                  O42 - Logiciel: Egypt Ball
                  O42 - Logiciel: FormatFactory 2.20
                  O42 - Logiciel: Funny Bricks
                  O42 - Logiciel: GIMP 2.6.7
                  O42 - Logiciel: Galerie de photos Windows Live
                  O42 - Logiciel: Google Chrome
                  O42 - Logiciel: Google Desktop
                  O42 - Logiciel: Google Toolbar for Internet Explorer
                  O42 - Logiciel: Google Update Helper
                  O42 - Logiciel: Google Earth
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
                  O42 - Logiciel: IMBooster
                  O42 - Logiciel: Installation Windows Live
                  O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver
                  O42 - Logiciel: InterActual Player
                  O42 - Logiciel: Java(TM) 6 Update 15
                  O42 - Logiciel: Java(TM) 6 Update 7
                  O42 - Logiciel: Junk Mail filter update
                  O42 - Logiciel: K-Lite Mega Codec Pack 4.9.0
                  O42 - Logiciel: Kick N Rush
                  O42 - Logiciel: Launch Manager
                  O42 - Logiciel: LauncherMA
                  O42 - Logiciel: LogMeIn
                  O42 - Logiciel: MSVCRT
                  O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
                  O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
                  O42 - Logiciel: Ma-Config.com
                  O42 - Logiciel: Mad Medley Battle
                  O42 - Logiciel: MahJongg Solitaire 3D
                  O42 - Logiciel: Malwarebytes' Anti-Malware
                  O42 - Logiciel: Marvell Miniport Driver
                  O42 - Logiciel: Memopal
                  O42 - Logiciel: Messenger Plus! Live
                  O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
                  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
                  O42 - Logiciel: Microsoft Choice Guard
                  O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
                  O42 - Logiciel: Microsoft Silverlight
                  O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
                  O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
                  O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
                  O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
                  O42 - Logiciel: Microsoft Works
                  O42 - Logiciel: MobileMe Control Panel
                  O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
                  O42 - Logiciel: Mozilla Firefox (3.5.6)
                  O42 - Logiciel: MyDSC2
                  O42 - Logiciel: Mystery Case Files - Huntsville
                  O42 - Logiciel: Mystery Solitaire - Secret Island
                  O42 - Logiciel: NTI Backup Now 5
                  O42 - Logiciel: NTI Media Maker 8
                  O42 - Logiciel: OpenOffice.org 3.0
                  O42 - Logiciel: Orion
                  O42 - Logiciel: Outil de téléchargement Windows Live
                  O42 - Logiciel: PC SECURITY TEST 2008
                  O42 - Logiciel: Panda ActiveScan 2.0
                  O42 - Logiciel: PaperPort
                  O42 - Logiciel: PhotoFiltre
                  O42 - Logiciel: PhotoNow!
                  O42 - Logiciel: PlayFLV
                  O42 - Logiciel: PowerDirector
                  O42 - Logiciel: QuickTime
                  O42 - Logiciel: RadioGet 1.3.8
                  O42 - Logiciel: Realtek High Definition Audio Driver
                  O42 - Logiciel: Realtek USB 2.0 Card Reader
                  O42 - Logiciel: Safari
                  O42 - Logiciel: SearchTheWeb
                  O42 - Logiciel: Shockwave
                  O42 - Logiciel: Skyrock Toolbar
                  O42 - Logiciel: Softonic_France_FF Toolbar
                  O42 - Logiciel: Solitaire V 1.0
                  O42 - Logiciel: SoundTaxi Media Suite 3.9.1
                  O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9
                  O42 - Logiciel: Sudoku 3D Pro
                  O42 - Logiciel: SweetIM Toolbar for Internet Explorer 3.4
                  O42 - Logiciel: SweetIM for Messenger 2.7
                  O42 - Logiciel: Synaptics Pointing Device Driver
                  O42 - Logiciel: Trial Bike Ultra
                  O42 - Logiciel: Turbo Pizza
                  O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
                  O42 - Logiciel: VirginMega.Fr Premium
                  O42 - Logiciel: Visual C++ 9.0 CRT (x86) WinSXS MSM
                  O42 - Logiciel: Windows Live Call
                  O42 - Logiciel: Windows Live Communications Platform
                  O42 - Logiciel: Windows Live FolderShare
                  O42 - Logiciel: Windows Live Mail
                  O42 - Logiciel: Windows Live Messenger
                  O42 - Logiciel: Windows Live Movie Maker
                  O42 - Logiciel: Windows Live Writer
                  O42 - Logiciel: Windows Media Player Firefox Plugin
                  O42 - Logiciel: Wondershare Photo Collage Studio 4.2.10.7
                  O42 - Logiciel: Wondershare Video to DVD Converter(Build 1.0.1.8)
                  O42 - Logiciel: Xfire (remove only)
                  O42 - Logiciel: Your monster voice 1
                  O42 - Logiciel: eSobi v2
                  O42 - Logiciel: iTunes

                  ---\\
                  O44 - LFC:Last File Created 23/12/2009 - 22:51:01 ---A- C:\Windows\WindowsUpdate.log
                  O44 - LFC:Last File Created 23/12/2009 - 22:48:13 ---A- C:\Windows\System32\LogConfigTemp.xml
                  O44 - LFC:Last File Created 23/12/2009 - 22:47:43 ---A- C:\Windows\System32\agent.log
                  O44 - LFC:Last File Created 23/12/2009 - 22:47:19 -S-A- C:\Windows\bootstat.dat
                  O44 - LFC:Last File Created 23/12/2009 - 22:47:17 ---A- C:\Windows\PFRO.log
                  O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\bhdbga
                  O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\ihdbga
                  O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\klhdbga
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:10 ---A- C:\Windows\System32\perfc00C.dat
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:10 ---A- C:\Windows\System32\perfh00C.dat
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\PerfStringBackup.INI
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\perfc009.dat
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\perfh009.dat
                  O44 - LFC:Last File Created 10/12/2009 - 18:52:40 ---A- C:\Windows\System32\drivers\avgntflt.sys
                  O44 - LFC:Last File Created 07/12/2009 - 19:03:58 ---A- C:\Windows\setupact.log
                  O44 - LFC:Last File Created 04/12/2009 - 17:43:55 ---A- C:\Windows\System32\gpupdate.bin
                  O44 - LFC:Last File Created 03/12/2009 - 14:10:20 ---A- C:\Windows\System32\prIMRecordBar.ocx
                  O44 - LFC:Last File Created 03/12/2009 - 14:10:00 ---A- C:\Windows\System32\BSwitch.ax
                  O44 - LFC:Last File Created 01/12/2009 - 21:06:19 ---A- C:\Windows\System32\mrt.exe
                  O44 - LFC:Last File Created 25/11/2009 - 13:32:45 ---A- C:\Windows\msxml4-KB973688-enu.LOG
                  O44 - LFC:Last File Created 24/11/2009 - 16:19:52 ---A- C:\Windows\System32\FNTCACHE.DAT

                  ---\\
                  O51 - MPSK:{679f2498-340c-11de-abe4-001d72eb9f34}\Shell\AutoRun\command - F:\EmDesk.exe

                  ---\\
                  O63 - Logiciel: HijackThis 2.0.2
                  O63 - Logiciel: GenProc
                  O63 - Logiciel: RSIT

                  End of the scan: 389 lines

                  ---------------------------------------------------------------------
                  Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
                  ---------------------------------------------------------------------

                  ~~ Fin à 22:51:04 ~~
                2. Utilisateur anonyme
                  Rapport GenProc 2.660 [2] - 23/12/2009 à 22:48:20
                  @ Windows VISTA Service Pack 2 - Acer - Mode normal
                  @ Mozilla Firefox 3.5.6 (fr) [Navigateur par défaut]

                  ~~ ECHEC DU TELECHARGEMENT DE CM ~~
                  ~~ ECHEC DU TELECHARGEMENT DE MBR.EXE ~~

                  GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

                  Fais scanner le(s) fichier(s) suivant(s) sur ce site https://www.virustotal.com/gui/ :

                  C:\Program Files\Memopal\MemopalCrawler.exe

                  et poste le(s) rapport(s) obtenu(s) dans ta prochaine réponse (Clique sur Réanalyser le fichier si nécessaire).

                  ~~~~ INFORMATION COMPLEMENTAIRE ~~~~

                  Rapport de ZHPDiag v1.24.39 par Nicolas Coolman
                  Run by admin at 23/12/2009 22:50:01
                  Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                  Platform : Windows Vista (TM) Home Basic (6.0.6002) Service Pack 2
                  MSIE: Internet Explorer v8.0.6001.18865
                  MFIE: Mozilla Firefox (3.5.6)

                  Boot mode: Normal (Normal boot)
                  Total RAM: 3000 MB (64% free)
                  System drive C: has 170 GB (76%) free of 223 GB

                  ---\\
                  [MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - C:\Program Files\Windows Defender\MSASCui.exe
                  [MD5.633B66014DDEDA70C21CFD327BDC214A] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                  [MD5.234051C0D242A6F4A79AE5212C1323D4] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                  [MD5.29680A793F690EEF4AAA68479D2A6DF8] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                  [MD5.33E5A8FC8EB0EE42478F8538D0215D8F] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  [MD5.3103FE27C967675B019E880AA6DA3D6D] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                  [MD5.5D456B9ED2D715DB4BA09C3DA88E0567] - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  [MD5.55D7A219AD8D0DB8980528944152A6FD] - C:\Program Files\QuickTime\QTTask.exe
                  [MD5.68A553BDFA855C4F1074696682FCDEB6] - C:\Program Files\iTunes\iTunesHelper.exe
                  [MD5.DB292C0CF78D251482F5B53E877A8ECD] - C:\Program Files\Iminent\IMBooster\imbooster.exe
                  [MD5.97BFC00E48BF7B048B0733D238E569E7] - C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                  [MD5.C5FCC0B761069FABD59E41B7C3280DDF] - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                  [MD5.18B4B12358EFCF68D76812058A26181F] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  [MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  [MD5.C2589544438721C8A971E8B5EAB41EFA] - C:\Program Files\Memopal\Memopal.exe
                  [MD5.35937EAD711207544E219C2A19A78A7D] - C:\Program Files\Windows Media Player\WMPNSCFG.exe
                  [MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - C:\Program Files\Windows Sidebar\Sidebar.exe
                  [MD5.10A1C82D74BF6B4CECFF4C303469A75F] - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  [MD5.3794B461C45882E06856F282EEF025AF] - C:\Windows\system32\svchost.exe
                  [MD5.EFBC44FBD75E4F80BD927AEBF6E7EADE] - C:\Windows\system32\agrsmsvc.exe
                  [MD5.9015BC03F62940527EC92D45EE89E46F] - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                  [MD5.B8720A787C1223492E6F319465E996CE] - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                  [MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  [MD5.33D3589DC7D20161788D169BE5EE2F3E] - C:\PROGRA~1\Bandoo\Bandoo.exe
                  [MD5.3F56903E124E820AEECE6D471583C6C1] - C:\Program Files\Bonjour\mDNSResponder.exe
                  [MD5.09E6AFFAE6C0E9158BF05C7D08D0107A] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                  [MD5.5CA9B1062C0C3E3AE19C23AD9D8A5048] - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                  [MD5.2CE2DDCB1A41ED4488A2A8B98D286B3D] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                  [MD5.A51FD9DF23720485991F56741BBEFCFB] - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                  [MD5.626A24ED1228580B9518C01930936DF9] - C:\Program Files\Google\Update\GoogleUpdate.exe
                  [MD5.5467F1FF0AF264566740F67E8B810735] - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  [MD5.793FF718477345CD5D232C50BED1E452] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                  [MD5.94F4417B3744D48F5C8A1487CFCA81C7] - C:\Program Files\Memopal\MemopalCrawler.exe
                  [MD5.1E1A308F4229FAB0011A0745EE8377AE] - C:\Acer\Mobility Center\MobilityService.exe
                  [MD5.CB76F68BA0D57C5D25B538981B1C611C] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                  [MD5.DF1C10A75DF7E50195FC417F88A33227] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                  [MD5.17E0BEF5CA5C9CE52CC8082AC6EBC449] - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                  [MD5.3978F3540329E16C0AC3BCF677E5669F] - C:\Windows\system32\lsass.exe
                  [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - C:\Windows\system32\SLsvc.exe
                  [MD5.524BFBEA40E6E404737CCBC754647A2E] - C:\Windows\System32\spoolsv.exe
                  [MD5.AED0DFF80C6B3914769407E78D7AB21A] - C:\Windows\system32\SearchIndexer.exe

                  ---\\
                  M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\linkcontent@iminent

                  ---\\
                  F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
                  F2 - REG:system.ini: Shell=explorer.exe

                  ---\\
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

                  ---\\
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

                  ---\\
                  R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  R3 - URLSearchHook: Softonic France FF Toolbar - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

                  ---\\
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                  O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
                  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                  O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll

                  ---\\
                  O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} -
                  O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
                  O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                  O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                  O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

                  ---\\
                  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                  O4 - HKLM\..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                  O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  O4 - HKLM\..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                  O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                  O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
                  O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
                  O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                  O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                  O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKCU\..\Run: [Memopal] C:\Program Files\Memopal\Memopal.exe
                  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                  O4 - HKLM\..\policies\Explorer: [BindDirectlyToPropertySetStorage] Data=0
                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
                  O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

                  ---\\
                  O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

                  ---\\
                  O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
                  O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
                  O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
                  O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
                  O10 - WLSP:\000000000005\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll
                  O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\mswsock.dll
                  O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\winrnr.dll

                  ---\\
                  O16 - DPF: CabBuilder (CabBuilder) - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                  O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - file:///C:/Windows/Java/classes/xmldso.cab
                  O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                  O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
                  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

                  ---\\
                  O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
                  O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
                  O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
                  O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
                  O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O18 - Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Windows\system32\mshtml.dll
                  O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
                  O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
                  O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

                  ---\\
                  O20 - Winlogon Notify: igfxcui - C:\Windows\System32\igfxdev.dll

                  O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll ? C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

                  ---\\
                  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

                  ---\\
                  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

                  ---\\
                  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - C:\Windows\system32\agrsmsvc.exe
                  O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                  O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                  O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: Bandoo Coordinator (Bandoo Coordinator) - C:\PROGRA~1\Bandoo\Bandoo.exe
                  O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
                  O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                  O23 - Service: CLHNService (CLHNService) - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                  O23 - Service: eDataSecurity Service (eDataSecurity Service) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                  O23 - Service: Empowering Technology Service (ETService) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                  O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - C:\Program Files\Google\Update\GoogleUpdate.exe" /svc
                  O23 - Service: Google Software Updater (gusvc) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                  O23 - Service: Memopal Crawler (Memopal Crawler) - C:\Program Files\Memopal\MemopalCrawler.exe
                  O23 - Service: MobilityService (MobilityService) - C:\Acer\Mobility Center\MobilityService.exe -p
                  O23 - Service: My Web Search Service (MyWebSearchService) - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
                  O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                  O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                  O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
                  O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
                  O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding
                  O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) - C:\WindowsC:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl

                  ---\\
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
                  O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{C4CEF75D-0191-45FF-8B4C-6C21161529DF}.job

                  ---\\
                  O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
                  O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
                  O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
                  O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
                  O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
                  O41 - Driver: (no object) (hdbga) - C:\WINDOWS\system32\drivers\hdbga.sys
                  O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                  O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                  O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
                  O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
                  O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
                  O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
                  O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
                  O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
                  O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
                  O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
                  O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
                  O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
                  O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
                  O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
                  O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
                  O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

                  ---\\
                  O42 - Logiciel: AbsoluCasino
                  O42 - Logiciel: Acer Arcade Deluxe
                  O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8
                  O42 - Logiciel: Acer Empowering Technology
                  O42 - Logiciel: Acer GameZone Console 2.0.1.1
                  O42 - Logiciel: Acer GridVista
                  O42 - Logiciel: Acer Mobility Center Plug-In
                  O42 - Logiciel: Acer ScreenSaver
                  O42 - Logiciel: Acer eDataSecurity Management
                  O42 - Logiciel: Acer ePower Management
                  O42 - Logiciel: Acer eRecovery Management
                  O42 - Logiciel: Acer eSettings Management
                  O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
                  O42 - Logiciel: Ad-Aware
                  O42 - Logiciel: Adobe Flash Player 10 ActiveX
                  O42 - Logiciel: Adobe Flash Player 10 Plugin
                  O42 - Logiciel: Adobe Reader 9.2 - Français
                  O42 - Logiciel: Agere Systems HDA Modem
                  O42 - Logiciel: Alice Greenfingers
                  O42 - Logiciel: Apple Application Support
                  O42 - Logiciel: Apple Mobile Device Support
                  O42 - Logiciel: Apple Software Update
                  O42 - Logiciel: ArcSoft Software Suite
                  O42 - Logiciel: Ask Toolbar
                  O42 - Logiciel: Assistant de connexion Windows Live
                  O42 - Logiciel: Audacity 1.2.6
                  O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
                  O42 - Logiciel: Azada
                  O42 - Logiciel: Bandoo
                  O42 - Logiciel: Billiard Art
                  O42 - Logiciel: Bonjour
                  O42 - Logiciel: CCleaner
                  O42 - Logiciel: Cake Mania
                  O42 - Logiciel: CamStudio 2.0 Fr
                  O42 - Logiciel: Chicken Invaders 3
                  O42 - Logiciel: ESET Online Scanner v3
                  O42 - Logiciel: Egypt Ball
                  O42 - Logiciel: FormatFactory 2.20
                  O42 - Logiciel: Funny Bricks
                  O42 - Logiciel: GIMP 2.6.7
                  O42 - Logiciel: Galerie de photos Windows Live
                  O42 - Logiciel: Google Chrome
                  O42 - Logiciel: Google Desktop
                  O42 - Logiciel: Google Toolbar for Internet Explorer
                  O42 - Logiciel: Google Update Helper
                  O42 - Logiciel: Google Earth
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
                  O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
                  O42 - Logiciel: IMBooster
                  O42 - Logiciel: Installation Windows Live
                  O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver
                  O42 - Logiciel: InterActual Player
                  O42 - Logiciel: Java(TM) 6 Update 15
                  O42 - Logiciel: Java(TM) 6 Update 7
                  O42 - Logiciel: Junk Mail filter update
                  O42 - Logiciel: K-Lite Mega Codec Pack 4.9.0
                  O42 - Logiciel: Kick N Rush
                  O42 - Logiciel: Launch Manager
                  O42 - Logiciel: LauncherMA
                  O42 - Logiciel: LogMeIn
                  O42 - Logiciel: MSVCRT
                  O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
                  O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
                  O42 - Logiciel: Ma-Config.com
                  O42 - Logiciel: Mad Medley Battle
                  O42 - Logiciel: MahJongg Solitaire 3D
                  O42 - Logiciel: Malwarebytes' Anti-Malware
                  O42 - Logiciel: Marvell Miniport Driver
                  O42 - Logiciel: Memopal
                  O42 - Logiciel: Messenger Plus! Live
                  O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
                  O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
                  O42 - Logiciel: Microsoft Choice Guard
                  O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
                  O42 - Logiciel: Microsoft Silverlight
                  O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
                  O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
                  O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
                  O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
                  O42 - Logiciel: Microsoft Works
                  O42 - Logiciel: MobileMe Control Panel
                  O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
                  O42 - Logiciel: Mozilla Firefox (3.5.6)
                  O42 - Logiciel: MyDSC2
                  O42 - Logiciel: Mystery Case Files - Huntsville
                  O42 - Logiciel: Mystery Solitaire - Secret Island
                  O42 - Logiciel: NTI Backup Now 5
                  O42 - Logiciel: NTI Media Maker 8
                  O42 - Logiciel: OpenOffice.org 3.0
                  O42 - Logiciel: Orion
                  O42 - Logiciel: Outil de téléchargement Windows Live
                  O42 - Logiciel: PC SECURITY TEST 2008
                  O42 - Logiciel: Panda ActiveScan 2.0
                  O42 - Logiciel: PaperPort
                  O42 - Logiciel: PhotoFiltre
                  O42 - Logiciel: PhotoNow!
                  O42 - Logiciel: PlayFLV
                  O42 - Logiciel: PowerDirector
                  O42 - Logiciel: QuickTime
                  O42 - Logiciel: RadioGet 1.3.8
                  O42 - Logiciel: Realtek High Definition Audio Driver
                  O42 - Logiciel: Realtek USB 2.0 Card Reader
                  O42 - Logiciel: Safari
                  O42 - Logiciel: SearchTheWeb
                  O42 - Logiciel: Shockwave
                  O42 - Logiciel: Skyrock Toolbar
                  O42 - Logiciel: Softonic_France_FF Toolbar
                  O42 - Logiciel: Solitaire V 1.0
                  O42 - Logiciel: SoundTaxi Media Suite 3.9.1
                  O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9
                  O42 - Logiciel: Sudoku 3D Pro
                  O42 - Logiciel: SweetIM Toolbar for Internet Explorer 3.4
                  O42 - Logiciel: SweetIM for Messenger 2.7
                  O42 - Logiciel: Synaptics Pointing Device Driver
                  O42 - Logiciel: Trial Bike Ultra
                  O42 - Logiciel: Turbo Pizza
                  O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
                  O42 - Logiciel: VirginMega.Fr Premium
                  O42 - Logiciel: Visual C++ 9.0 CRT (x86) WinSXS MSM
                  O42 - Logiciel: Windows Live Call
                  O42 - Logiciel: Windows Live Communications Platform
                  O42 - Logiciel: Windows Live FolderShare
                  O42 - Logiciel: Windows Live Mail
                  O42 - Logiciel: Windows Live Messenger
                  O42 - Logiciel: Windows Live Movie Maker
                  O42 - Logiciel: Windows Live Writer
                  O42 - Logiciel: Windows Media Player Firefox Plugin
                  O42 - Logiciel: Wondershare Photo Collage Studio 4.2.10.7
                  O42 - Logiciel: Wondershare Video to DVD Converter(Build 1.0.1.8)
                  O42 - Logiciel: Xfire (remove only)
                  O42 - Logiciel: Your monster voice 1
                  O42 - Logiciel: eSobi v2
                  O42 - Logiciel: iTunes

                  ---\\
                  O44 - LFC:Last File Created 23/12/2009 - 22:51:01 ---A- C:\Windows\WindowsUpdate.log
                  O44 - LFC:Last File Created 23/12/2009 - 22:48:13 ---A- C:\Windows\System32\LogConfigTemp.xml
                  O44 - LFC:Last File Created 23/12/2009 - 22:47:43 ---A- C:\Windows\System32\agent.log
                  O44 - LFC:Last File Created 23/12/2009 - 22:47:19 -S-A- C:\Windows\bootstat.dat
                  O44 - LFC:Last File Created 23/12/2009 - 22:47:17 ---A- C:\Windows\PFRO.log
                  O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\bhdbga
                  O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\ihdbga
                  O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\klhdbga
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:10 ---A- C:\Windows\System32\perfc00C.dat
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:10 ---A- C:\Windows\System32\perfh00C.dat
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\PerfStringBackup.INI
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\perfc009.dat
                  O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\perfh009.dat
                  O44 - LFC:Last File Created 10/12/2009 - 18:52:40 ---A- C:\Windows\System32\drivers\avgntflt.sys
                  O44 - LFC:Last File Created 07/12/2009 - 19:03:58 ---A- C:\Windows\setupact.log
                  O44 - LFC:Last File Created 04/12/2009 - 17:43:55 ---A- C:\Windows\System32\gpupdate.bin
                  O44 - LFC:Last File Created 03/12/2009 - 14:10:20 ---A- C:\Windows\System32\prIMRecordBar.ocx
                  O44 - LFC:Last File Created 03/12/2009 - 14:10:00 ---A- C:\Windows\System32\BSwitch.ax
                  O44 - LFC:Last File Created 01/12/2009 - 21:06:19 ---A- C:\Windows\System32\mrt.exe
                  O44 - LFC:Last File Created 25/11/2009 - 13:32:45 ---A- C:\Windows\msxml4-KB973688-enu.LOG
                  O44 - LFC:Last File Created 24/11/2009 - 16:19:52 ---A- C:\Windows\System32\FNTCACHE.DAT

                  ---\\
                  O51 - MPSK:{679f2498-340c-11de-abe4-001d72eb9f34}\Shell\AutoRun\command - F:\EmDesk.exe

                  ---\\
                  O63 - Logiciel: HijackThis 2.0.2
                  O63 - Logiciel: GenProc
                  O63 - Logiciel: RSIT

                  End of the scan: 389 lines

                  ----------------------------------------------------------------------
                  Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
                  ----------------------------------------------------------------------

                  ~~ Fin à 22:51:04 ~~
              2. Utilisateur anonyme
                Memopal est fait pour stocker des dossier en ligne donc c'est pas un virus et rien de suspect

                Rapport GenProc 2.660 [2] - 23/12/2009 à 22:48:20
                @ Windows VISTA Service Pack 2 - Acer - Mode normal
                @ Mozilla Firefox 3.5.6 (fr) [Navigateur par défaut]

                ~~ ECHEC DU TELECHARGEMENT DE CM ~~
                ~~ ECHEC DU TELECHARGEMENT DE MBR.EXE ~~

                GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

                Fais scanner le(s) fichier(s) suivant(s) sur ce site https://www.virustotal.com/gui/ :

                C:\Program Files\Memopal\MemopalCrawler.exe

                et poste le(s) rapport(s) obtenu(s) dans ta prochaine réponse (Clique sur Réanalyser le fichier si nécessaire).

                ~~~~ INFORMATION COMPLEMENTAIRE ~~~~

                Rapport de ZHPDiag v1.24.39 par Nicolas Coolman
                Run by admin at 23/12/2009 22:50:01
                Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                Platform : Windows Vista (TM) Home Basic (6.0.6002) Service Pack 2
                MSIE: Internet Explorer v8.0.6001.18865
                MFIE: Mozilla Firefox (3.5.6)

                Boot mode: Normal (Normal boot)
                Total RAM: 3000 MB (64% free)
                System drive C: has 170 GB (76%) free of 223 GB

                ---\\
                [MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - C:\Program Files\Windows Defender\MSASCui.exe
                [MD5.633B66014DDEDA70C21CFD327BDC214A] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                [MD5.234051C0D242A6F4A79AE5212C1323D4] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                [MD5.29680A793F690EEF4AAA68479D2A6DF8] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                [MD5.33E5A8FC8EB0EE42478F8538D0215D8F] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                [MD5.3103FE27C967675B019E880AA6DA3D6D] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                [MD5.5D456B9ED2D715DB4BA09C3DA88E0567] - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                [MD5.55D7A219AD8D0DB8980528944152A6FD] - C:\Program Files\QuickTime\QTTask.exe
                [MD5.68A553BDFA855C4F1074696682FCDEB6] - C:\Program Files\iTunes\iTunesHelper.exe
                [MD5.DB292C0CF78D251482F5B53E877A8ECD] - C:\Program Files\Iminent\IMBooster\imbooster.exe
                [MD5.97BFC00E48BF7B048B0733D238E569E7] - C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                [MD5.C5FCC0B761069FABD59E41B7C3280DDF] - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                [MD5.18B4B12358EFCF68D76812058A26181F] - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                [MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                [MD5.C2589544438721C8A971E8B5EAB41EFA] - C:\Program Files\Memopal\Memopal.exe
                [MD5.35937EAD711207544E219C2A19A78A7D] - C:\Program Files\Windows Media Player\WMPNSCFG.exe
                [MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - C:\Program Files\Windows Sidebar\Sidebar.exe
                [MD5.10A1C82D74BF6B4CECFF4C303469A75F] - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                [MD5.3794B461C45882E06856F282EEF025AF] - C:\Windows\system32\svchost.exe
                [MD5.EFBC44FBD75E4F80BD927AEBF6E7EADE] - C:\Windows\system32\agrsmsvc.exe
                [MD5.9015BC03F62940527EC92D45EE89E46F] - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                [MD5.B8720A787C1223492E6F319465E996CE] - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                [MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                [MD5.33D3589DC7D20161788D169BE5EE2F3E] - C:\PROGRA~1\Bandoo\Bandoo.exe
                [MD5.3F56903E124E820AEECE6D471583C6C1] - C:\Program Files\Bonjour\mDNSResponder.exe
                [MD5.09E6AFFAE6C0E9158BF05C7D08D0107A] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                [MD5.5CA9B1062C0C3E3AE19C23AD9D8A5048] - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                [MD5.2CE2DDCB1A41ED4488A2A8B98D286B3D] - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                [MD5.A51FD9DF23720485991F56741BBEFCFB] - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                [MD5.626A24ED1228580B9518C01930936DF9] - C:\Program Files\Google\Update\GoogleUpdate.exe
                [MD5.5467F1FF0AF264566740F67E8B810735] - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                [MD5.793FF718477345CD5D232C50BED1E452] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                [MD5.94F4417B3744D48F5C8A1487CFCA81C7] - C:\Program Files\Memopal\MemopalCrawler.exe
                [MD5.1E1A308F4229FAB0011A0745EE8377AE] - C:\Acer\Mobility Center\MobilityService.exe
                [MD5.CB76F68BA0D57C5D25B538981B1C611C] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                [MD5.DF1C10A75DF7E50195FC417F88A33227] - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                [MD5.17E0BEF5CA5C9CE52CC8082AC6EBC449] - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                [MD5.3978F3540329E16C0AC3BCF677E5669F] - C:\Windows\system32\lsass.exe
                [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - C:\Windows\system32\SLsvc.exe
                [MD5.524BFBEA40E6E404737CCBC754647A2E] - C:\Windows\System32\spoolsv.exe
                [MD5.AED0DFF80C6B3914769407E78D7AB21A] - C:\Windows\system32\SearchIndexer.exe

                ---\\
                M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\linkcontent@iminent

                ---\\
                F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
                F2 - REG:system.ini: Shell=explorer.exe

                ---\\
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

                ---\\
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

                ---\\
                R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                R3 - URLSearchHook: Softonic France FF Toolbar - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

                ---\\
                O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
                O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
                O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll

                ---\\
                O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} -
                O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
                O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

                ---\\
                O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                O4 - HKLM\..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                O4 - HKLM\..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
                O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
                O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
                O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                O4 - HKCU\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                O4 - HKCU\..\Run: [Memopal] C:\Program Files\Memopal\Memopal.exe
                O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                O4 - HKLM\..\policies\Explorer: [BindDirectlyToPropertySetStorage] Data=0
                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
                O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

                ---\\
                O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

                ---\\
                O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
                O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
                O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
                O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
                O10 - WLSP:\000000000005\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll
                O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\mswsock.dll
                O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\winrnr.dll

                ---\\
                O16 - DPF: CabBuilder (CabBuilder) - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                O16 - DPF: Microsoft XML Parser for Java (Microsoft XML Parser for Java) - file:///C:/Windows/Java/classes/xmldso.cab
                O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

                ---\\
                O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
                O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
                O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
                O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
                O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                O18 - Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Windows\system32\mshtml.dll
                O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
                O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
                O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll

                ---\\
                O20 - Winlogon Notify: igfxcui - C:\Windows\System32\igfxdev.dll

                O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll ? C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

                ---\\
                O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

                ---\\
                O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

                ---\\
                O23 - Service: Lavasoft Ad-Aware Service (aawservice) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - C:\Windows\system32\agrsmsvc.exe
                O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: Bandoo Coordinator (Bandoo Coordinator) - C:\PROGRA~1\Bandoo\Bandoo.exe
                O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
                O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                O23 - Service: CLHNService (CLHNService) - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                O23 - Service: eDataSecurity Service (eDataSecurity Service) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                O23 - Service: Empowering Technology Service (ETService) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - C:\Program Files\Google\Update\GoogleUpdate.exe" /svc
                O23 - Service: Google Software Updater (gusvc) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                O23 - Service: Memopal Crawler (Memopal Crawler) - C:\Program Files\Memopal\MemopalCrawler.exe
                O23 - Service: MobilityService (MobilityService) - C:\Acer\Mobility Center\MobilityService.exe -p
                O23 - Service: My Web Search Service (MyWebSearchService) - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
                O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
                O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
                O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding
                O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) - C:\WindowsC:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl

                ---\\
                O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job
                O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
                O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
                O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{C4CEF75D-0191-45FF-8B4C-6C21161529DF}.job

                ---\\
                O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
                O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
                O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
                O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
                O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
                O41 - Driver: (no object) (hdbga) - C:\WINDOWS\system32\drivers\hdbga.sys
                O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
                O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
                O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
                O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
                O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
                O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
                O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
                O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
                O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
                O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
                O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
                O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
                O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
                O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

                ---\\
                O42 - Logiciel: AbsoluCasino
                O42 - Logiciel: Acer Arcade Deluxe
                O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8
                O42 - Logiciel: Acer Empowering Technology
                O42 - Logiciel: Acer GameZone Console 2.0.1.1
                O42 - Logiciel: Acer GridVista
                O42 - Logiciel: Acer Mobility Center Plug-In
                O42 - Logiciel: Acer ScreenSaver
                O42 - Logiciel: Acer eDataSecurity Management
                O42 - Logiciel: Acer ePower Management
                O42 - Logiciel: Acer eRecovery Management
                O42 - Logiciel: Acer eSettings Management
                O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
                O42 - Logiciel: Ad-Aware
                O42 - Logiciel: Adobe Flash Player 10 ActiveX
                O42 - Logiciel: Adobe Flash Player 10 Plugin
                O42 - Logiciel: Adobe Reader 9.2 - Français
                O42 - Logiciel: Agere Systems HDA Modem
                O42 - Logiciel: Alice Greenfingers
                O42 - Logiciel: Apple Application Support
                O42 - Logiciel: Apple Mobile Device Support
                O42 - Logiciel: Apple Software Update
                O42 - Logiciel: ArcSoft Software Suite
                O42 - Logiciel: Ask Toolbar
                O42 - Logiciel: Assistant de connexion Windows Live
                O42 - Logiciel: Audacity 1.2.6
                O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
                O42 - Logiciel: Azada
                O42 - Logiciel: Bandoo
                O42 - Logiciel: Billiard Art
                O42 - Logiciel: Bonjour
                O42 - Logiciel: CCleaner
                O42 - Logiciel: Cake Mania
                O42 - Logiciel: CamStudio 2.0 Fr
                O42 - Logiciel: Chicken Invaders 3
                O42 - Logiciel: ESET Online Scanner v3
                O42 - Logiciel: Egypt Ball
                O42 - Logiciel: FormatFactory 2.20
                O42 - Logiciel: Funny Bricks
                O42 - Logiciel: GIMP 2.6.7
                O42 - Logiciel: Galerie de photos Windows Live
                O42 - Logiciel: Google Chrome
                O42 - Logiciel: Google Desktop
                O42 - Logiciel: Google Toolbar for Internet Explorer
                O42 - Logiciel: Google Update Helper
                O42 - Logiciel: Google Earth
                O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
                O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
                O42 - Logiciel: IMBooster
                O42 - Logiciel: Installation Windows Live
                O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver
                O42 - Logiciel: InterActual Player
                O42 - Logiciel: Java(TM) 6 Update 15
                O42 - Logiciel: Java(TM) 6 Update 7
                O42 - Logiciel: Junk Mail filter update
                O42 - Logiciel: K-Lite Mega Codec Pack 4.9.0
                O42 - Logiciel: Kick N Rush
                O42 - Logiciel: Launch Manager
                O42 - Logiciel: LauncherMA
                O42 - Logiciel: LogMeIn
                O42 - Logiciel: MSVCRT
                O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
                O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
                O42 - Logiciel: Ma-Config.com
                O42 - Logiciel: Mad Medley Battle
                O42 - Logiciel: MahJongg Solitaire 3D
                O42 - Logiciel: Malwarebytes' Anti-Malware
                O42 - Logiciel: Marvell Miniport Driver
                O42 - Logiciel: Memopal
                O42 - Logiciel: Messenger Plus! Live
                O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
                O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
                O42 - Logiciel: Microsoft Choice Guard
                O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
                O42 - Logiciel: Microsoft Silverlight
                O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
                O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
                O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
                O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
                O42 - Logiciel: Microsoft Works
                O42 - Logiciel: MobileMe Control Panel
                O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
                O42 - Logiciel: Mozilla Firefox (3.5.6)
                O42 - Logiciel: MyDSC2
                O42 - Logiciel: Mystery Case Files - Huntsville
                O42 - Logiciel: Mystery Solitaire - Secret Island
                O42 - Logiciel: NTI Backup Now 5
                O42 - Logiciel: NTI Media Maker 8
                O42 - Logiciel: OpenOffice.org 3.0
                O42 - Logiciel: Orion
                O42 - Logiciel: Outil de téléchargement Windows Live
                O42 - Logiciel: PC SECURITY TEST 2008
                O42 - Logiciel: Panda ActiveScan 2.0
                O42 - Logiciel: PaperPort
                O42 - Logiciel: PhotoFiltre
                O42 - Logiciel: PhotoNow!
                O42 - Logiciel: PlayFLV
                O42 - Logiciel: PowerDirector
                O42 - Logiciel: QuickTime
                O42 - Logiciel: RadioGet 1.3.8
                O42 - Logiciel: Realtek High Definition Audio Driver
                O42 - Logiciel: Realtek USB 2.0 Card Reader
                O42 - Logiciel: Safari
                O42 - Logiciel: SearchTheWeb
                O42 - Logiciel: Shockwave
                O42 - Logiciel: Skyrock Toolbar
                O42 - Logiciel: Softonic_France_FF Toolbar
                O42 - Logiciel: Solitaire V 1.0
                O42 - Logiciel: SoundTaxi Media Suite 3.9.1
                O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9
                O42 - Logiciel: Sudoku 3D Pro
                O42 - Logiciel: SweetIM Toolbar for Internet Explorer 3.4
                O42 - Logiciel: SweetIM for Messenger 2.7
                O42 - Logiciel: Synaptics Pointing Device Driver
                O42 - Logiciel: Trial Bike Ultra
                O42 - Logiciel: Turbo Pizza
                O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
                O42 - Logiciel: VirginMega.Fr Premium
                O42 - Logiciel: Visual C++ 9.0 CRT (x86) WinSXS MSM
                O42 - Logiciel: Windows Live Call
                O42 - Logiciel: Windows Live Communications Platform
                O42 - Logiciel: Windows Live FolderShare
                O42 - Logiciel: Windows Live Mail
                O42 - Logiciel: Windows Live Messenger
                O42 - Logiciel: Windows Live Movie Maker
                O42 - Logiciel: Windows Live Writer
                O42 - Logiciel: Windows Media Player Firefox Plugin
                O42 - Logiciel: Wondershare Photo Collage Studio 4.2.10.7
                O42 - Logiciel: Wondershare Video to DVD Converter(Build 1.0.1.8)
                O42 - Logiciel: Xfire (remove only)
                O42 - Logiciel: Your monster voice 1
                O42 - Logiciel: eSobi v2
                O42 - Logiciel: iTunes

                ---\\
                O44 - LFC:Last File Created 23/12/2009 - 22:51:01 ---A- C:\Windows\WindowsUpdate.log
                O44 - LFC:Last File Created 23/12/2009 - 22:48:13 ---A- C:\Windows\System32\LogConfigTemp.xml
                O44 - LFC:Last File Created 23/12/2009 - 22:47:43 ---A- C:\Windows\System32\agent.log
                O44 - LFC:Last File Created 23/12/2009 - 22:47:19 -S-A- C:\Windows\bootstat.dat
                O44 - LFC:Last File Created 23/12/2009 - 22:47:17 ---A- C:\Windows\PFRO.log
                O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\bhdbga
                O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\ihdbga
                O44 - LFC:Last File Created 23/12/2009 - 22:45:16 ---A- C:\Windows\klhdbga
                O44 - LFC:Last File Created 12/12/2009 - 22:18:10 ---A- C:\Windows\System32\perfc00C.dat
                O44 - LFC:Last File Created 12/12/2009 - 22:18:10 ---A- C:\Windows\System32\perfh00C.dat
                O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\PerfStringBackup.INI
                O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\perfc009.dat
                O44 - LFC:Last File Created 12/12/2009 - 22:18:09 ---A- C:\Windows\System32\perfh009.dat
                O44 - LFC:Last File Created 10/12/2009 - 18:52:40 ---A- C:\Windows\System32\drivers\avgntflt.sys
                O44 - LFC:Last File Created 07/12/2009 - 19:03:58 ---A- C:\Windows\setupact.log
                O44 - LFC:Last File Created 04/12/2009 - 17:43:55 ---A- C:\Windows\System32\gpupdate.bin
                O44 - LFC:Last File Created 03/12/2009 - 14:10:20 ---A- C:\Windows\System32\prIMRecordBar.ocx
                O44 - LFC:Last File Created 03/12/2009 - 14:10:00 ---A- C:\Windows\System32\BSwitch.ax
                O44 - LFC:Last File Created 01/12/2009 - 21:06:19 ---A- C:\Windows\System32\mrt.exe
                O44 - LFC:Last File Created 25/11/2009 - 13:32:45 ---A- C:\Windows\msxml4-KB973688-enu.LOG
                O44 - LFC:Last File Created 24/11/2009 - 16:19:52 ---A- C:\Windows\System32\FNTCACHE.DAT

                ---\\
                O51 - MPSK:{679f2498-340c-11de-abe4-001d72eb9f34}\Shell\AutoRun\command - F:\EmDesk.exe

                ---\\
                O63 - Logiciel: HijackThis 2.0.2
                O63 - Logiciel: GenProc
                O63 - Logiciel: RSIT

                End of the scan: 389 lines

                ----------------------------------------------------------------------
                Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
                ----------------------------------------------------------------------

                ~~ Fin à 22:51:04 ~~
                1. NicoVA Contributeur sécurité
                  Pour explications :
                  My Web Search est aussi connu sous le nom de My Way Speedbar qui est une toolbar pour Internet Explorer avec des utilitaires "fun" comme le Smiley Central, Cursor Mania, My Mail Stationary, My Mail Signature, PopSwatter, Popular Screensaver et My Wey website portal. La toolbar permet la recherche facile et change votre page 404

                  Source : http://www.malekal.com/MyWebSearch.php

                  NicoVA
                  1. ^^Marie^^
                    cmoi = jtmEléonore

                    ++
                    1. cmoi
                      merci de vous être servi de votre super pouvoir :-)

                      j'avais vraiment un problème avec tellement de virus alors je suis venu sur CCM car sur les autres forum il y a pas autant de gens qualifiés qu'ici

                      dsl pour avoir posté plusieurs fois la même chose mais je vois que CCM bug encore et ça même avant qu'on m'envoie à la cave :-(
                    2. cmoi
                      @cmoile numéro 17 et 18 peuvent être supprimés

                      que ça bug ccm

                      tien ça donne envie de partir voir sur les autres forum, je pense pas que ça bug chez eux et tellement longtemps
                  3. raleuboleu
                    ok ok !!!

                    lance ceci si pas déjà fait autre part :

                    https://www.commentcamarche.net/telecharger/securite/2547-ad-remover/

                    suis les instructions

                    tu ne t'aide pas a poster partout ni toi ni moi alors ............

                    merci Marie pour l'éclairage je suis rarement là alors j'ai plongée

                    bises
                    1. cmoi
                      .
                      ======= RAPPORT D'AD-REMOVER 1.1.4.6_F | UNIQUEMENT XP/VISTA/7 =======
                      .
                      Mit à jour par C_XX le 24.12.2009 à 13:08
                      Contact: AdRemover.contact@gmail.com
                      Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
                      .
                      Lancé à: 13:25:24, 24/12/2009 | Mode Normal | Option: SCAN
                      Exécuté de: C:\Program Files\Ad-Remover\
                      Système d'exploitation: Microsoft® Windows Vista™ Home Basic Service Pack 2 v6.0.6002
                      Nom du PC: PC-DE-ADMIN | Utilisateur actuel: admin

                      Bonnes fêtes de fin d'année à vous tous :)
                      .
                      ============== ÉLÉMENT(S) TROUVÉ(S) ==============
                      .

                      C:\Users\admin\AppData\Roaming\Mozilla\FireFox\Profiles\hc3d5u55.default\extensions\toolbar@ask.com
                      C:\Users\admin\AppData\Roaming\Mozilla\FireFox\Profiles\hc3d5u55.default\searchplugins\askcom.xml
                      C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                      C:\Windows\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
                      C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
                      C:\Program Files\Mozilla FireFox\extensions\linkcontent@iminent
                      C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
                      C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\IMBooster
                      C:\Program Files\Ask.com
                      C:\Program Files\Deenero
                      C:\Program Files\Iminent
                      C:\Users\admin\AppData\Local\Iminent
                      C:\Users\admin\AppData\LocalLow\AskToolbar
                      C:\Users\admin\AppData\LocalLow\FunWebProducts
                      C:\Users\admin\AppData\LocalLow\MyWebSearch
                      C:\ProgramData\Iminent
                      C:\Windows\Installer\90964e.msi
                      C:\Program Files\Windows Live\Messenger\Riched20.dll
                      .
                      HKCU\software\appdatalow\AskBarDis
                      HKCU\software\appdatalow\software\AskToolbar
                      HKCU\software\appdatalow\software\Fun Web Products
                      HKCU\software\appdatalow\software\FunWebProducts
                      HKCU\software\appdatalow\software\MyWebSearch
                      HKCU\software\Ask.com
                      HKCU\software\Iminent
                      HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65D18554-7170-44FC-938E-9572D4133DA4}
                      HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1DDD95E-D5EF-4A30-A9B4-FA5E755F43D3}
                      HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
                      HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
                      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D}
                      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
                      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
                      HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
                      HKLM\software\classes\appid\GenericAskToolbar.DLL
                      HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
                      HKLM\Software\Classes\CLSID\{696E3174-4F6C-4777-7834-654C4A705677}
                      HKLM\Software\Classes\CLSID\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
                      HKLM\Software\Classes\CLSID\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
                      HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\software\classes\GenericAskToolbar.ToolbarWnd
                      HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
                      HKLM\software\classes\IminentBHONavigationError.CHelperBHO
                      HKLM\software\classes\IminentBHONavigationError.CHelperBHO.1
                      HKLM\software\classes\IminentLinkToContent.LinkToContent
                      HKLM\software\classes\IminentLinkToContent.LinkToContent.1
                      HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\classes\installer\Products\4EEB31C8EC7E64E4DB31F814AD0DF0FE
                      HKLM\software\classes\installer\Products\53449B1EE14291541B3C4CDDE93B252A
                      HKLM\software\classes\installer\Products\652E78CE4A0B14A46828BA75FF1291D6
                      HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
                      HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
                      HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\classes\installer\Products\C73660D04266C3348A703CD454AD1B48
                      HKLM\Software\Classes\Interface\{0CA97EEE-C8C4-4B10-A332-10AF1FBEB534}
                      HKLM\Software\Classes\Interface\{12FB9C3D-0875-4CAA-B3B1-9DCCCE749DE5}
                      HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
                      HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
                      HKLM\Software\Classes\PROTOCOLS\Handler\tbr
                      HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
                      HKLM\Software\Classes\TypeLib\{2C6674DB-EFB5-464A-A715-3E770B9C8A94}
                      HKLM\Software\Classes\TypeLib\{587D1093-12E0-4B0E-9426-AF9DC5ABB77D}
                      HKLM\Software\Classes\TypeLib\{77860007-19AE-4C29-B26D-AEA48F3A05C5}
                      HKLM\software\CToolbar
                      HKLM\software\iAvatars.com
                      HKLM\software\Iminent
                      HKLM\software\Loader
                      HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
                      HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar Search Scope Monitor
                      HKLM\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin
                      HKLM\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Plugin
                      HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8ED411B7A244E0E4C82C46284CA65B81
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\4EEB31C8EC7E64E4DB31F814AD0DF0FE
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\53449B1EE14291541B3C4CDDE93B252A
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\652E78CE4A0B14A46828BA75FF1291D6
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
                      HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\C73660D04266C3348A703CD454AD1B48
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\IMBooster
                      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Iminent.Notifier
                      HKLM\software\microsoft\windows\currentversion\uninstall\{0D06637C-6624-433C-A807-C34D45DAB184}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
                      HKLM\software\microsoft\windows\currentversion\uninstall\{EC87E256-B0A4-4A41-8682-AB57FF21196D}
                      HKLM\software\microsoft\windows\currentversion\uninstall\IMBooster
                      HKLM\software\microsoft\windows\currentversion\uninstall\SearchTheWeb
                      HKLM\SYSTEM\ControlSet002\Services\MyWebSearchService
                      HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\appdatalow\AskBarDis
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\appdatalow\software\AskToolbar
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\appdatalow\software\Fun Web Products
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\appdatalow\software\FunWebProducts
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\appdatalow\software\MyWebSearch
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\Ask.com
                      HKU\s-1-5-21-3190056787-1849804901-669965420-1000\software\Iminent
                      .
                      ============== Scan additionnel ==============
                      .
                      .
                      * Mozilla FireFox Version 3.5.6 [fr] *
                      .
                      Nom du profil: hc3d5u55.default (admin)
                      .
                      (admin, prefs.js) Browser.download.dir, C:\Users\admin\Downloads
                      (admin, prefs.js) Browser.download.lastDir, C:\Users\admin\Desktop
                      (admin, prefs.js) Browser.search.defaultenginename, Fast Browser Search
                      (admin, prefs.js) Browser.search.defaulturl, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=
                      (admin, prefs.js) Browser.search.selectedEngine, Fast Browser Search
                      (admin, prefs.js) Browser.startup.homepage, hxxp://fr.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
                      (admin, prefs.js) Extensions.enabledItems, toolbar@ask.com:3.3.3.123,{0545b830-f0aa-4d7e-8820-50a4629a56fe}:4.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.5,linkcontent@iminent:1.0,fsonlinescanner@f-secure.com:1.01,illimitux@illimitux.net:3.5,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{bb628310-0ab7-11db-9cd8-0800200c9a66}:3.5.0.0,{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.2.3,{E7D21632-7AF1-62D6-9FE4-2BE8625A6FD6}:1.2.0.3,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
                      (admin, prefs.js) Keyword.URL, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=18&tid={C9A5877E-C2F8-79E1-6777-939C662D5E73}&q=
                      (admin, prefs.js) Privacy.popups.showBrowserMessage, false
                      (admin, prefs.js) Keyword.URL, hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
                      .
                      (admin, prefs.js) TROUVE - Browser.search.defaultengine, Ask.com
                      (admin, prefs.js) TROUVE - Browser.search.defaultenginename, Fast Browser Search
                      (admin, prefs.js) TROUVE - Browser.search.defaulturl, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=
                      (admin, prefs.js) TROUVE - Browser.search.order.1, Fast Browser Search
                      (admin, prefs.js) TROUVE - Browser.search.selectedEngine, Fast Browser Search
                      (admin, prefs.js) TROUVE - Extensions.asktb.cbid, FV
                      (admin, prefs.js) TROUVE - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
                      (admin, prefs.js) TROUVE - Extensions.asktb.fresh-install, false
                      (admin, prefs.js) TROUVE - Extensions.asktb.l, dis
                      (admin, prefs.js) TROUVE - Extensions.asktb.last-config-req, 1261591469004
                      (admin, prefs.js) TROUVE - Extensions.asktb.locale, en_US
                      (admin, prefs.js) TROUVE - Extensions.asktb.o, 14594
                      (admin, prefs.js) TROUVE - Extensions.asktb.overlay-reloaded-using-restart, true
                      (admin, prefs.js) TROUVE - Extensions.asktb.qsrc, 2871
                      (admin, prefs.js) TROUVE - Extensions.asktb.r, 5
                      (admin, prefs.js) TROUVE - Extensions.enabledItems, toolbar@ask.com:3.3.3.123,{0545b830-f0aa-4d7e-8820-50a4629a56fe}:4.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.5,linkcontent@iminent:1.0,fsonlinescanner@f-secure.com:1.01,illimitux@illimitux.net:3.5,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{bb628310-0ab7-11db-9cd8-0800200c9a66}:3.5.0.0,{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.2.3,{E7D21632-7AF1-62D6-9FE4-2BE8625A6FD6}:1.2.0.3,{635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.6
                      (admin, prefs.js) TROUVE - Keyword.URL, hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=18&tid={C9A5877E-C2F8-79E1-6777-939C662D5E73}&q=
                      .
                      .
                      .
                      * Internet Explorer Version 8.0.6001.18865 *
                      .
                      [HKEY_CURRENT_USER\..\Internet Explorer\Main]
                      .
                      Enable Browser Extensions: yes
                      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      Do404Search: 01000000
                      Show_ToolBar: yes
                      Use Search Asst:
                      SearchAssistant:
                      Start Page: hxxp://www.google.fr/
                      Search Page:
                      Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                      Use Custom Search URL: 1 (0x1)
                      Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      .
                      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
                      .
                      Delete_Temp_Files_On_Exit: yes
                      Enable Browser Extensions: yes
                      Use Search Asst: no
                      Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                      Search bar: hxxp://search.msn.com/spbasic.htm
                      Search page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                      Start page: hxxp://fr.msn.com/
                      .
                      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
                      .
                      Tabs: res://ieframe.dll/tabswelcome.htm
                      .
                      ===================================
                      .
                      29981 Octet(s) - C:\Ad-Report-CLEAN.log
                      12784 Octet(s) - C:\Ad-Report-SCAN.log
                      16954 Octet(s) - C:\Ad-Report-SCAN[1].log
                      .
                      678 Fichier(s) - C:\Users\admin\AppData\Local\Temp
                      17 Fichier(s) - C:\Windows\Temp
                      129 Fichier(s) - C:\Windows\Prefetch
                      .
                      22 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
                      62 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
                      .
                      Fin à: 13:52:44 | 24/12/2009 - SCAN[1]
                      .
                      ============== E.O.F ==============
                      .
                  4. Utilisateur anonyme
                    bonjour tout le monde :-)
                    juste pour avancer les choses :-)

                    @cmoi ou JTEleanor ..... :
                    tu reviens ici periodiquement tous les 15 jours !!!
                    veux tu qu'on en finisse une fois pour toute ?
                    si oui, ne change pas de pseudo et reste ici jusqu'à la fin de la désinfection, comme ça, tu seras débarasser et nous aussi :-)

                    pour la suite :
                    • Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
                    http://images.malwareremoval.com/random/RSIT.exe

                    Tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
                    Double clique sur RSIT.exe pour lancer l'outil.
                    Clique sur ' continue ' à l'écran Disclaimer.
                    Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
                    Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
                    (log.txt & info.txt)
                    (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
                    1. cmoi
                      le premier rapport :

                      info.txt logfile of random's system information tool 1.06 2009-11-03 18:04:51

                      ======Uninstall list======

                      -->MsiExec.exe /I{8A42F680-2DD6-11D4-9A8C-0040F6982C20}
                      -->MsiExec.exe /I{A2529672-574A-4A99-86A5-C1770A0E31FE}
                      -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe" -uninstall
                      -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall
                      AbsoluCasino-->C:\Program Files\GfedEurofr18F\Uninst.exe /uGfedEurofr18F
                      Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
                      Acer Crystal Eye Webcam 2.0.8-->C:\Program Files\InstallShield Installation Information\{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}\setup.exe -runfromtemp -l0x040c -removeonly
                      Acer eDataSecurity Management-->C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL
                      Acer Empowering Technology-->"C:\Program Files\InstallShield Installation Information\{8F1B6239-FEA0-450A-A950-B05276CE177C}\setup.exe" -runfromtemp -l0x040c -removeonly
                      Acer ePower Management-->"C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\setup.exe" -runfromtemp -l0x040c -removeonly
                      Acer eRecovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x040c -removeonly
                      Acer eSettings Management-->"C:\Program Files\InstallShield Installation Information\{13D85C14-2B85-419F-AC41-C7F21E68B25D}\setup.exe" -runfromtemp -l0x040c -removeonly
                      Acer GameZone Console 2.0.1.1-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe"
                      Acer GridVista-->C:\Windows\GVUni.exe GridV.UNI
                      Acer Mobility Center Plug-In-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11316260-6666-467B-AC34-183FCB5D4335}\setup.exe" -l0x40c -removeonly
                      Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly
                      Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
                      Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
                      Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
                      Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
                      Adobe Reader 9.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
                      Agere Systems HDA Modem-->agrsmdel
                      Alice Greenfingers-->"C:\Program Files\Acer GameZone\Alice Greenfingers\Uninstall.exe" "C:\Program Files\Acer GameZone\Alice Greenfingers\install.log"
                      Apple Mobile Device Support-->MsiExec.exe /I{659B48CD-0608-4ED5-94C0-0B6C87114F10}
                      Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                      Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                      Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
                      Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
                      Azada-->"C:\Program Files\Acer GameZone\Azada\Uninstall.exe" "C:\Program Files\Acer GameZone\Azada\install.log"
                      Bandoo-->C:\Program Files\Bandoo\PreUninstall.exe
                      Billiard Art-->"C:\Program Files\MyPlayCity.com\Billiard Art\unins000.exe"
                      Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
                      Cake Mania-->"C:\Program Files\Acer GameZone\Cake Mania\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania\install.log"
                      CamStudio 2.0 Fr-->"C:\Program Files\CamStudio\unins000.exe"
                      CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                      Chicken Invaders 3-->"C:\Program Files\Acer GameZone\Chicken Invaders 3\Uninstall.exe" "C:\Program Files\Acer GameZone\Chicken Invaders 3\install.log"
                      Egypt Ball-->"C:\Program Files\MyPlayCity.com\Egypt Ball\unins000.exe"
                      ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
                      eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c
                      EvJO Photo-Image Resizer v2.5-->"C:\Program Files\EvJOSoft\Photo-Image Resizer\unins000.exe"
                      FormatFactory 2.10-->C:\Program Files\FormatFactory\uninst.exe
                      Funny Bricks-->"C:\Program Files\MyPlayCity.com\Funny Bricks\unins000.exe"
                      Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
                      Google Chrome-->"C:\Program Files\Google\Chrome\Application\3.0.195.27\Installer\setup.exe" --uninstall --system-level
                      Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
                      Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
                      Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
                      Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                      Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
                      HijackThis 2.0.2-->"C:\Users\admin\Documents\HijackThis.exe" /uninstall
                      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
                      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
                      Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                      Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
                      Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
                      InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
                      iTunes-->MsiExec.exe /I{CC5702D7-86E2-45A8-99D7-E8B976ADCC56}
                      Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
                      Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
                      Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
                      Kick N Rush-->"C:\Program Files\Acer GameZone\Kick N Rush\Uninstall.exe" "C:\Program Files\Acer GameZone\Kick N Rush\install.log"
                      K-Lite Mega Codec Pack 4.9.0-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
                      Launch Manager-->C:\Windows\UNINST32.EXE LManager.UNI
                      LauncherMA-->MsiExec.exe /X{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}
                      LogMeIn-->MsiExec.exe /I{6BF2CCD4-33D1-499D-9055-49E023B5468D}
                      Ma-Config.com-->MsiExec.exe /X{6C4D4FC0-467B-4BD7-8D11-50E49B2770D2}
                      Mad Medley Battle-->"C:\Program Files\MyPlayCity.com\Mad Medley Battle\unins000.exe"
                      MahJongg Solitaire 3D-->C:\Program Files\MahJongg Solitaire 3D\Uninstal.exe
                      Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                      Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe
                      Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                      Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
                      Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
                      Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                      Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
                      Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                      Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                      Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
                      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
                      Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
                      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
                      Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
                      MobileMe Control Panel-->MsiExec.exe /I{CADBCBBA-6CDD-4119-B5ED-4AE075B153E7}
                      Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
                      Mozilla Firefox (3.5.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                      MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                      MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                      Mystery Case Files - Huntsville-->"C:\Program Files\Acer GameZone\Mystery Case Files - Huntsville\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Case Files - Huntsville\install.log"
                      Mystery Solitaire - Secret Island-->"C:\Program Files\Acer GameZone\Mystery Solitaire - Secret Island\Uninstall.exe" "C:\Program Files\Acer GameZone\Mystery Solitaire - Secret Island\install.log"
                      NTI Backup Now 5-->C:\Program Files\InstallShield Installation Information\{12EFA1A4-AC3B-443C-8143-237EDE760403}\setup.exe -runfromtemp -l0x040c
                      NTI Media Maker 8-->C:\Program Files\InstallShield Installation Information\{2413930C-8309-47A6-BC61-5EF27A4222BC}\setup.exe -runfromtemp -l0x040c
                      OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
                      Orion-->MsiExec.exe /X{5B63A470-9334-44D1-AF61-6CE2DB565AE9}
                      Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
                      Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
                      Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
                      PaperPort-->MsiExec.exe /I{A17EABB6-D0C6-44E5-820C-72DC7F495064}
                      PC SECURITY TEST 2008-->"C:\Program Files\AxBx\PC Security Test 2008\unins000.exe"
                      PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
                      PhotoNow!-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" -uninstall
                      PlayFLV-->"C:\Program Files\PlayFLV\uninstall.exe"
                      PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
                      QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
                      RadioGet 1.3.8-->"C:\Program Files\RadioGet\unins000.exe"
                      Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
                      Realtek USB 2.0 Card Reader-->C:\Program Files\InstallShield Installation Information\{DC24971E-1946-445D-8A82-CE685433FA7D}\setup.exe -runfromtemp -l0x040c -removeonly
                      Safari-->MsiExec.exe /I{E56D39F8-2A9F-44B4-B068-A72E45A073E6}
                      Shockwave-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
                      Skyrock Toolbar-->C:\Program Files\skyrocktbar\uninstall.exe
                      Softonic_France_FF Toolbar-->C:\PROGRA~1\SOFTON~1\UNWISE.EXE /U C:\PROGRA~1\SOFTON~1\INSTALL.LOG
                      Solitaire V 1.0-->"C:\Program Files\Solitaire\unins000.exe"
                      SoundTaxi Media Suite 3.9.1-->C:\Program Files\SoundTaxi Media Suite\uninst.exe
                      Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
                      Sudoku 3D Pro-->C:\Program Files\Sudoku 3D Pro\Uninstall.exe
                      SweetIM for Messenger 2.7-->MsiExec.exe /X{EC87E256-B0A4-4A41-8682-AB57FF21196D}
                      SweetIM Toolbar for Internet Explorer 3.4-->MsiExec.exe /X{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF}
                      Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
                      Trial Bike Ultra-->"C:\Program Files\MyPlayCity.com\Trial Bike Ultra\unins000.exe"
                      Turbo Pizza-->"C:\Program Files\Acer GameZone\Turbo Pizza\Uninstall.exe" "C:\Program Files\Acer GameZone\Turbo Pizza\install.log"
                      Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
                      VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}
                      Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                      Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                      Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
                      Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
                      Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
                      Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}
                      Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
                      Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
                      Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"
                      Your monster voice 1-->C:\Windows\cadkasdeinst01e.exe "C:\Program Files\Your monster voice 1\"

                      ======Hosts File======

                      127.0.0.1 www.007guard.com
                      127.0.0.1 007guard.com
                      127.0.0.1 008i.com
                      127.0.0.1 www.008k.com
                      127.0.0.1 008k.com
                      127.0.0.1 www.00hq.com
                      127.0.0.1 00hq.com
                      127.0.0.1 010402.com
                      127.0.0.1 www.032439.com
                      127.0.0.1 032439.com

                      ======Security center information======

                      AS: Windows Defender

                      ======System event log======

                      Computer Name: PC-de-admin
                      Event Code: 4376
                      Message: Servicing a requis un redémarrage pour terminer la définition du package KB948465(Service Pack) à l’état Installation demandée(Install Requested)
                      Record Number: 26948
                      Source Name: Microsoft-Windows-Servicing
                      Time Written: 20090601090632.000000-000
                      Event Type: Avertissement
                      User: PC-de-admin\admin

                      Computer Name: PC-de-admin
                      Event Code: 4376
                      Message: Servicing a requis un redémarrage pour terminer la définition du package KB948465(Service Pack) à l’état Installation demandée(Install Requested)
                      Record Number: 26946
                      Source Name: Microsoft-Windows-Servicing
                      Time Written: 20090601090632.000000-000
                      Event Type: Avertissement
                      User: PC-de-admin\admin

                      Computer Name: PC-de-admin
                      Event Code: 4376
                      Message: Servicing a requis un redémarrage pour terminer la définition du package KB948465(Service Pack) à l’état Installation demandée(Install Requested)
                      Record Number: 26944
                      Source Name: Microsoft-Windows-Servicing
                      Time Written: 20090601090632.000000-000
                      Event Type: Avertissement
                      User: PC-de-admin\admin

                      Computer Name: PC-de-admin
                      Event Code: 4376
                      Message: Servicing a requis un redémarrage pour terminer la définition du package KB948465(Service Pack) à l’état Installation demandée(Install Requested)
                      Record Number: 26936
                      Source Name: Microsoft-Windows-Servicing
                      Time Written: 20090601090631.000000-000
                      Event Type: Avertissement
                      User: PC-de-admin\admin

                      Computer Name: PC-de-admin
                      Event Code: 4376
                      Message: Servicing a requis un redémarrage pour terminer la définition du package KB948465(Service Pack) à l’état Installation demandée(Install Requested)
                      Record Number: 26934
                      Source Name: Microsoft-Windows-Servicing
                      Time Written: 20090601090631.000000-000
                      Event Type: Avertissement
                      User: PC-de-admin\admin

                      =====Application event log=====

                      Computer Name: PC-de-admin
                      Event Code: 63
                      Message: Le fournisseur HiPerfCooker_v1 a été inscrit dans l’espace de noms Windows Management Instrumentation Root\WMI, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s’il ne représente pas correctement les demandes utilisateur.
                      Record Number: 514
                      Source Name: Microsoft-Windows-WMI
                      Time Written: 20090427073733.000000-000
                      Event Type: Avertissement
                      User: AUTORITE NT\SYSTEM

                      Computer Name: PC-de-admin
                      Event Code: 63
                      Message: Le fournisseur HiPerfCooker_v1 a été inscrit dans l’espace de noms Windows Management Instrumentation Root\WMI, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s’il ne représente pas correctement les demandes utilisateur.
                      Record Number: 513
                      Source Name: Microsoft-Windows-WMI
                      Time Written: 20090427073733.000000-000
                      Event Type: Avertissement
                      User: AUTORITE NT\SYSTEM

                      Computer Name: PC-de-admin
                      Event Code: 10
                      Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
                      Record Number: 499
                      Source Name: Microsoft-Windows-WMI
                      Time Written: 20090427073334.000000-000
                      Event Type: Erreur
                      User:

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 1008
                      Message: Le service Windows Search tente de supprimer l’ancien catalogue.

                      Record Number: 485
                      Source Name: Microsoft-Windows-Search
                      Time Written: 20090427073000.000000-000
                      Event Type: Avertissement
                      User:

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 1036
                      Message: Échec de InitializePrintProvider pour le fournisseur inetpp.dll. Cela peut se produire à la suite d’une instabilité du système ou d’une insuffisance des ressources système.
                      Record Number: 472
                      Source Name: Microsoft-Windows-SpoolerSpoolss
                      Time Written: 20090427072709.000000-000
                      Event Type: Avertissement
                      User: AUTORITE NT\SYSTEM

                      =====Security event log=====

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 4648
                      Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

                      Sujet :
                      ID de sécurité : S-1-5-18
                      Nom du compte : WIN-9R6X2AVLYFI$
                      Domaine du compte : WORKGROUP
                      ID d’ouverture de session : 0x3e7
                      GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

                      Compte dont les informations d’identification ont été utilisées :
                      Nom du compte : SYSTEM
                      Domaine du compte : AUTORITE NT
                      GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

                      Serveur cible :
                      Nom du serveur cible : localhost
                      Informations supplémentaires : localhost

                      Informations sur le processus :
                      ID du processus : 0x21c
                      Nom du processus : C:\Windows\System32\services.exe

                      Informations sur le réseau :
                      Adresse du réseau : -
                      Port : -

                      Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
                      Record Number: 417
                      Source Name: Microsoft-Windows-Security-Auditing
                      Time Written: 20080526222712.991638-000
                      Event Type: Succès de l'audit
                      User:

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 4672
                      Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

                      Sujet :
                      ID de sécurité : S-1-5-18
                      Nom du compte : SYSTEM
                      Domaine du compte : AUTORITE NT
                      ID d’ouverture de session : 0x3e7

                      Privilèges : SeAssignPrimaryTokenPrivilege
                      SeTcbPrivilege
                      SeSecurityPrivilege
                      SeTakeOwnershipPrivilege
                      SeLoadDriverPrivilege
                      SeBackupPrivilege
                      SeRestorePrivilege
                      SeDebugPrivilege
                      SeAuditPrivilege
                      SeSystemEnvironmentPrivilege
                      SeImpersonatePrivilege
                      Record Number: 416
                      Source Name: Microsoft-Windows-Security-Auditing
                      Time Written: 20080526222712.776638-000
                      Event Type: Succès de l'audit
                      User:

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 4624
                      Message: L’ouverture de session d’un compte s’est correctement déroulée.

                      Sujet :
                      ID de sécurité : S-1-5-18
                      Nom du compte : WIN-9R6X2AVLYFI$
                      Domaine du compte : WORKGROUP
                      ID d’ouverture de session : 0x3e7

                      Type d’ouverture de session : 5

                      Nouvelle ouverture de session :
                      ID de sécurité : S-1-5-18
                      Nom du compte : SYSTEM
                      Domaine du compte : AUTORITE NT
                      ID d’ouverture de session : 0x3e7
                      GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

                      Informations sur le processus :
                      ID du processus : 0x21c
                      Nom du processus : C:\Windows\System32\services.exe

                      Informations sur le réseau :
                      Nom de la station de travail :
                      Adresse du réseau source : -
                      Port source : -

                      Informations détaillées sur l’authentification :
                      Processus d’ouverture de session : Advapi
                      Package d’authentification : Negotiate
                      Services en transit : -
                      Nom du package (NTLM uniquement) : -
                      Longueur de la clé : 0

                      Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

                      Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

                      Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

                      Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

                      Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

                      Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
                      - Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
                      - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
                      - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
                      - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
                      Record Number: 415
                      Source Name: Microsoft-Windows-Security-Auditing
                      Time Written: 20080526222712.776638-000
                      Event Type: Succès de l'audit
                      User:

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 4648
                      Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

                      Sujet :
                      ID de sécurité : S-1-5-18
                      Nom du compte : WIN-9R6X2AVLYFI$
                      Domaine du compte : WORKGROUP
                      ID d’ouverture de session : 0x3e7
                      GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

                      Compte dont les informations d’identification ont été utilisées :
                      Nom du compte : SYSTEM
                      Domaine du compte : AUTORITE NT
                      GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

                      Serveur cible :
                      Nom du serveur cible : localhost
                      Informations supplémentaires : localhost

                      Informations sur le processus :
                      ID du processus : 0x21c
                      Nom du processus : C:\Windows\System32\services.exe

                      Informations sur le réseau :
                      Adresse du réseau : -
                      Port : -

                      Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
                      Record Number: 414
                      Source Name: Microsoft-Windows-Security-Auditing
                      Time Written: 20080526222712.776638-000
                      Event Type: Succès de l'audit
                      User:

                      Computer Name: WIN-9R6X2AVLYFI
                      Event Code: 1102
                      Message: Le journal d’audit a été effacé.
                      Objet :
                      ID de sécurité : S-1-5-21-3179304207-2070479868-164817837-500
                      Nom de compte : Administrator
                      Nom de domaine : WIN-9R6X2AVLYFI
                      ID de connexion : 0x30f29
                      Record Number: 413
                      Source Name: Microsoft-Windows-Eventlog
                      Time Written: 20080526222706.036638-000
                      Event Type: Succès de l'audit
                      User:

                      ======Environment variables======

                      "ComSpec"=%SystemRoot%\system32\cmd.exe
                      "FP_NO_HOST_CHECK"=NO
                      "OS"=Windows_NT
                      "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Acer\Empowering Technology\eDataSecurity\;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86;C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64;C:\Program Files\QuickTime\QTSystem\
                      "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
                      "PROCESSOR_ARCHITECTURE"=x86
                      "TEMP"=%SystemRoot%\TEMP
                      "TMP"=%SystemRoot%\TEMP
                      "USERNAME"=SYSTEM
                      "windir"=%SystemRoot%
                      "PROCESSOR_LEVEL"=6
                      "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
                      "PROCESSOR_REVISION"=0f0d
                      "NUMBER_OF_PROCESSORS"=2
                      "TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
                      "DFSTRACINGON"=FALSE
                      "Pathtem"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
                      "NTIPath"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\NewTech Infosystems\NTI Backup Now 5\;
                      "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
                      "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

                      -----------------EOF-----------------
                    2. cmoi
                      @cmoideuxième :

                      Logfile of random's system information tool 1.06 (written by random/random)
                      Run by admin at 2009-12-24 16:10:53
                      Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2
                      System drive C: has 174 GB (76%) free of 228 GB
                      Total RAM: 3000 MB (51% free)

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 16:11:36, on 24/12/2009
                      Platform: Windows Vista SP2 (WinNT 6.00.1906)
                      MSIE: Internet Explorer v8.00 (8.00.6001.18865)
                      Boot mode: Normal

                      Running processes:
                      C:\Windows\system32\Dwm.exe
                      C:\Windows\Explorer.EXE
                      C:\Program Files\Windows Defender\MSASCui.exe
                      C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
                      C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                      C:\Windows\system32\taskeng.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\Program Files\Iminent\IMBooster\IMBooster.exe
                      C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\Program Files\Memopal\Memopal.exe
                      C:\Program Files\Windows Media Player\wmpnscfg.exe
                      C:\Program Files\LogMeIn\x86\LMIGuardian.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe
                      C:\Program Files\Windows Live\Contacts\wlcomm.exe
                      C:\Windows\system32\conime.exe
                      C:\PROGRA~1\Bandoo\BndCore.exe
                      C:\Windows\SYSTEM32\WISPTIS.EXE
                      C:\Windows\system32\SearchFilterHost.exe
                      C:\Users\admin\Downloads\RSIT.exe
                      C:\Program Files\trend micro\admin.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                      R3 - URLSearchHook: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                      O1 - Hosts: ::1 localhost
                      O2 - BHO: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - (no file)
                      O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
                      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                      O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
                      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                      O2 - BHO: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                      O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                      O2 - BHO: IMinent WebBooster - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files\Iminent\IMBooster4Web\Iminent.WebBooster.dll
                      O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
                      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                      O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                      O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll
                      O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
                      O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
                      O3 - Toolbar: Softonic France FF Toolbar - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - C:\Program Files\Softonic_France_FF\tbSof1.dll
                      O3 - Toolbar: Skyrock Toolbar - {A057A204-BACC-4D26-969A-2AB983EE729B} - C:\PROGRA~1\SKYROC~1\SKYROC~1.DLL
                      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                      O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
                      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                      O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
                      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
                      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                      O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\IMBooster.exe /warmup
                      O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
                      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                      O4 - HKCU\..\Run: [Memopal] C:\Program Files\Memopal\Memopal.exe
                      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
                      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
                      O13 - Gopher Prefix:
                      O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                      O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
                      O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                      O20 - AppInit_DLLs: c:\progra~1\bandoo\bndhook.dll ? C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                      O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
                      O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                      O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      O23 - Service: Bandoo Coordinator - Discordia Limited - C:\PROGRA~1\Bandoo\Bandoo.exe
                      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                      O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing)
                      O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                      O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                      O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                      O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                      O23 - Service: Google Desktop Manager 5.9.909.30391 (GoogleDesktopManager-093009-130223) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                      O23 - Service: Service Google Update (gupdate1c9c82bf41789f3) (gupdate1c9c82bf41789f3) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                      O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                      O23 - Service: Memopal Crawler - Unknown owner - C:\Program Files\Memopal\MemopalCrawler.exe
                      O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
                      O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
                      O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                      O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                      O23 - Service: RGService - Unknown owner - C:\Program Files\RadioGet\RGService.exe
                      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                      O23 - Service: STSService - Unknown owner - C:\Program Files\SoundTaxi Media Suite\STSService.exe
                  5. Utilisateur anonyme
                    on y va et dans l'ordre STP :
                    • /!\ Utilisateur de Vista : Ne pas oublier de désactiver l’UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
                    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

                    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
                    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3
                    ou ici : https://sites.google.com/site/toolbarsd/

                    * Lance l'installation du programme en exécutant le fichier téléchargé.
                    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
                    /!\Utilisateur de Vista : Clique droit sur le logo de Toolbar-S&D, « exécuter en tant qu’Administrateur »

                    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
                    * Choisis maintenant l'option 2 (suppression). Patiente jusqu'à la fin de la recherche.
                    * Poste le rapport généré. (C:\TB.txt)

                    Tuto :
                    https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/

                    •/!\ Utilisateur de Vista : Ne pas oublier de désactiver l’UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
                    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

                    tu as déjà MBAM sur ton pc :

                    C:\Program Files\Malwarebytes' Anti-Malware

                    /!\Utilisateur de Vista : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu’Administrateur »

                    Lance MBAM
                    . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
                    . si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
                    . Une fois la mise à jour terminé
                    . rend-toi dans l'onglet, Recherche
                    . Sélectionnes Exécuter un examen complet
                    . Cliques sur Rechercher
                    . Le scan démarre.
                    . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
                    . Cliques sur Ok pour poursuivre.
                    . Si des malwares ont été détectés, cliques sur Afficher les résultats
                    . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
                    . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
                    . rends toi dans l'onglet rapport/log
                    . tu cliques dessus pour l'afficher une fois affiché
                    . tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
                    . tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
                    . Tu cliques droit dans le cadre de la réponse et coller
                    . À la fin du scan, redemarre ton pc.
                    Si tu as besoin d'aide regarde ce tutoriel :
                    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

                    repasse un autre rsit et poste son rapport

                    merci et Joyeux Noël :-)
                    1. cmoi
                      sur cette page https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/ on voit qu'une fenêtre avec une fond rouge doit apparait après avoir tapé 1 ou 2 et appuyé sur entrer. c'est de loin pas la première fois que quelqu'un me dit d'utiliser ce logiciel et à chaque fois il se passe la même chose. enfait après avoir cliqué sur 2 puis sur entrer la fenêtre disparait et rien ne se passe. aucun rapport se trouve non plus à l'endroit indiqué sur le tutoriel.

                      par contre malwarebyte antimalware fonctionne et le scan est déjà en cour.
                  • 1
                  • 2
                  • 3

                  Discussions similaires

                  Softonic,est-ce un virus ?
                  techmel1

                  6 réponses
                  Chrome://newtab
                  Nova

                  14 réponses
                  Désinstaller Softonic
                  Diguimette

                  5 réponses
                  Supprimer New Tab
                  tysaozon

                  8 réponses
                  Bouton pause/break
                  frans003

                  3 réponses