mais du temps à s'éteindre

[Jim@il]

bonjour à tous
depuis hier mon ordi mais du temps à s'éteindre
j'ai fais des analyses mais rien de se coté là.

si quelqu'un pourrait me conseiller.
merci

System Information
------------------
Time of this report: 1/31/2010, 16:36:45
Machine name: PC-DE-JIMMY
Operating System: Windows Vista™ Édition Familiale Premium (6.0, Build 6002) Service Pack 2 (6002.vistasp2_gdr.090803-2339)
Language: French (Regional Setting: French)
System Manufacturer: Acer
System Model: Aspire M7720
BIOS: Default System BIOS
Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz (8 CPUs), ~2.7GHz
Memory: 4086MB RAM
Page File: 2179MB used, 6202MB available
Windows Dir: C:\Windows
DirectX Version: DirectX 11
DX Setup Parameters: Not found
DxDiag Version: 7.00.6002.18107 64bit Unicode

[H3bus]

Pas d'autres symptomes ?

Quand tu dis "du temps", c'est de l'ordre de combien ?

Pour écarter la piste d'un éventuel virus :

Commence pas suivre ce tuto, puis poste nous le rapport généré par MBAM.

Ensuite,

Télécharge RSIT et sauvegarde-le sur le Bureau:

Double clique sur RSIT.exe qui se trouve sur ton bureau pour le lancer:
Pour VISTA :
Clic-droit et choisis "Exécuter en tant qu'administrateur".
Ensuite :
Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Le rapport va se créer. Pour le mettre sur le forum.

Tout sélectionner : CRTL+ A
Tout copier : CRTL+ C
Tout coller : CRTL+ V


Vous pouvez, une fois posté, le fermer. Ce rapport s’appelle.log.txt

Le rapport est sauvegardé à la racine du disque: C:\rsit\info.txt et C:\rsit\log.txt

[Jim@il]

d'habitude ça met quelques secondes
et là la page "arrêt" mais pas loin de 1 minutes à venir donc environ entre 1 et 3 min

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jim@il at 2010-01-31 17:12:25
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 84 GB (35%) free of 238 GB
Total RAM: 4086 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:12:27, on 31/01/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Users\Jim@il\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe
C:\Windows\System32\spool\drivers\x64\3\E_FATIBVE.EXE
C:\Program Files (x86)\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files (x86)\CyberLink\PCM4Everio\EverioService.exe
C:\Program Files (x86)\Common Files\Logishrd\LComMgr\Communications_Helper.exe
C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
J:\programmes\utorrent\uTorrent.exe
C:\Users\Jim@il\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jim@il\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jim@il\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jim@il\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Jim@il\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Jim@il.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.googlesayfa.com/en
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... pire_m7720
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... pire_m7720
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 91.121.97.18 http://www.thepiratebay.org
O1 - Hosts: 91.121.97.18 thepiratebay.org
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - (no file)
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [PCMMediaSharing] "C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe"
O4 - HKLM\..\Run: [BkupTray] "C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
O4 - HKLM\..\Run: [WarReg_PopUp] "C:\Program Files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe"
O4 - HKLM\..\Run: [EverioService] "C:\Program Files (x86)\CyberLink\PCM4Everio\EverioService.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jim@il\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [Grid] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe"
O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBVE.EXE /FU "C:\Windows\TEMP\E_S429D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [svchost] C:\WINDOWS\system32\config\svchost.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: Windows Updater.lnk = C:\Users\Jim@il\AppData\Local\Temp\JDstart.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O8 - Extra context menu item: Download with NetPumper - C:\Program Files (x86)\NetPumper\AddUrl.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CANALPLAY Installer - http://www.canalplay.com/cabs/CanalInstaller.CAB
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HASP License Manager (hasplms) - Unknown owner - C:\Windows\system32\hasplms.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: winlog (svlostServices) - Unknown owner - C:\Windows\SysWOW64\svlostSrv.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14818 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2420105194-4270431021-54118395-1000Core1ca7a89235e5f40.job
C:\Windows\tasks\User_Feed_Synchronization-{03EEA8D6-E433-4252-9E49-014CF179B18D}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-12-21 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-31 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-01-31 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-07-29 142896]
{66886C4D-B307-4ECA-A228-52CA9B9851A4}
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-31 279664]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PCMMediaSharing"=C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [2008-07-01 204896]
"BkupTray"=C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-25 28672]
"eRecoveryService"= []
"WarReg_PopUp"=C:\Program Files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe [2008-01-29 303104]
"EverioService"=C:\Program Files (x86)\CyberLink\PCM4Everio\EverioService.exe [2007-11-01 151552]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-02 98304]
"AdobeCS4ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2009-09-05 417792]
"LogitechCommunicationsManager"=C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-02-08 488984]
"LogitechQuickCamRibbon"=C:\Program Files (x86)\Logitech\QuickCam10\QuickCam10.exe [2007-02-08 774168]
"TkBellExe"=C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe [2009-12-21 198160]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-01-28 2757512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 138240]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968]
"Google Update"=C:\Users\Jim@il\AppData\Local\Google\Update\GoogleUpdate.exe [2009-06-15 133104]
"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2009-11-13 247144]
"Grid"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe [2009-05-15 376832]
"EPSON Stylus DX5000 Series"=C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBVE.EXE [2006-09-22 139264]
"svchost"=C:\WINDOWS\system32\config\svchost.exe []
"swg"=C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-06-15 68856]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan.lnk - C:\Program Files (x86)\McAfee Security Scan\1.0.150\SSScheduler.exe

C:\Users\Jim@il\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
Windows Updater.lnk - C:\Users\Jim@il\AppData\Local\Temp\JDstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe"="C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4bd95b69-9018-11de-a8ab-0022684a2683}]
shell\AutoRun\command - F:\Toshiba\more4you.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ace235db-80e7-11de-98ca-0022684a2683}]
shell\AutoRun\command - L:\InstallTomTomHOME.exe


======File associations======

.js - edit - C:\Windows\SysWOW64\Notepad.exe %1
.js - open - C:\Windows\SysWOW64\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-01-31 17:10:52 ----D---- C:\rsit
2010-01-31 17:10:52 ----D---- C:\Program Files (x86)\trend micro
2010-01-31 16:49:23 ----SHD---- C:\Config.Msi
2010-01-31 12:29:36 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2010-01-31 12:28:49 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2010-01-31 12:28:05 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2010-01-31 12:27:38 ----D---- C:\Windows\PCHEALTH
2010-01-31 12:15:25 ----D---- C:\Program Files (x86)\7-Zip
2010-01-30 21:34:57 ----D---- C:\Users\Jim@il\AppData\Roaming\Template
2010-01-30 20:21:06 ----A---- C:\Windows\system32\aswBoot.exe
2010-01-30 19:55:05 ----D---- C:\ProgramData\Alwil Software
2010-01-28 18:54:28 ----D---- C:\Users\Jim@il\AppData\Roaming\EDrawings
2010-01-28 18:54:28 ----D---- C:\Users\Jim@il\AppData\Roaming\DassaultSystemes
2010-01-28 18:54:28 ----D---- C:\ProgramData\DassaultSystemes
2010-01-28 18:54:08 ----D---- C:\Users\Jim@il\AppData\Roaming\DWGeditor
2010-01-28 18:50:05 ----D---- C:\ProgramData\Macrovision
2010-01-28 18:49:17 ----D---- C:\Program Files (x86)\Common Files\Aladdin Shared
2010-01-28 18:48:04 ----D---- C:\Program Files (x86)\SolidWorks SolidNetWork License Manager
2010-01-28 18:45:40 ----D---- C:\VaultData
2010-01-28 18:45:40 ----D---- C:\Program Files (x86)\Common Files\SolidWorks Shared
2010-01-28 18:44:37 ----A---- C:\Windows\eDrawingOfficeAutomator.INI
2010-01-28 18:43:29 ----D---- C:\Program Files (x86)\DWGeditor
2010-01-27 17:09:27 ----A---- C:\Windows\system32\tasman.exe
2010-01-27 17:09:27 ----A---- C:\Windows\system32\svlostSrv.exe
2010-01-27 17:09:27 ----A---- C:\Windows\system32\svlostb.dll
2010-01-27 17:09:27 ----A---- C:\Windows\system32\svlosta.dll
2010-01-27 17:09:27 ----A---- C:\Windows\system32\svlost.exe
2010-01-27 17:09:27 ----A---- C:\Windows\system32\ssleay32.dll
2010-01-27 17:09:27 ----A---- C:\Windows\system32\libeay32.dll
2010-01-26 20:29:26 ----D---- C:\Program Files (x86)\Microsoft Office Outlook Connector
2010-01-23 16:00:52 ----A---- C:\Windows\system32\mshtml.dll
2010-01-23 16:00:51 ----A---- C:\Windows\system32\ieframe.dll
2010-01-23 16:00:50 ----A---- C:\Windows\system32\wininet.dll
2010-01-23 16:00:50 ----A---- C:\Windows\system32\urlmon.dll
2010-01-23 16:00:50 ----A---- C:\Windows\system32\iertutil.dll
2010-01-23 16:00:49 ----A---- C:\Windows\system32\occache.dll
2010-01-23 16:00:49 ----A---- C:\Windows\system32\msfeeds.dll
2010-01-23 16:00:49 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\msfeedssync.exe
2010-01-23 16:00:48 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\jsproxy.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\ieUnatt.exe
2010-01-23 16:00:48 ----A---- C:\Windows\system32\ieui.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\iesysprep.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\iesetup.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\iernonce.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\iepeers.dll
2010-01-23 16:00:48 ----A---- C:\Windows\system32\ie4uinit.exe
2010-01-13 19:54:35 ----A---- C:\Windows\system32\t2embed.dll
2010-01-13 19:54:35 ----A---- C:\Windows\system32\fontsub.dll
2010-01-12 18:17:45 ----D---- C:\Users\Jim@il\AppData\Roaming\Icones
2010-01-03 18:50:59 ----D---- C:\Program Files (x86)\FreeTime

======List of files/folders modified in the last 1 months======

2010-01-31 17:12:26 ----D---- C:\Windows\Temp
2010-01-31 17:12:18 ----D---- C:\Windows\Prefetch
2010-01-31 17:12:12 ----D---- C:\Users\Jim@il\AppData\Roaming\uTorrent
2010-01-31 17:10:52 ----RD---- C:\Program Files (x86)
2010-01-31 16:51:29 ----SHD---- C:\Windows\Installer
2010-01-31 16:51:29 ----D---- C:\Windows\Microsoft.NET
2010-01-31 16:51:16 ----D---- C:\Program Files (x86)\Windows Live
2010-01-31 16:51:15 ----RSD---- C:\Windows\assembly
2010-01-31 16:50:51 ----D---- C:\Windows\winsxs
2010-01-31 16:50:21 ----D---- C:\Windows
2010-01-31 16:49:56 ----SHD---- C:\System Volume Information
2010-01-31 13:10:15 ----D---- C:\Windows\System32
2010-01-31 13:10:15 ----D---- C:\Windows\inf
2010-01-31 12:30:00 ----RD---- C:\Program Files
2010-01-31 12:28:19 ----D---- C:\Windows\SysWOW64
2010-01-31 12:25:58 ----D---- C:\Program Files (x86)\Microsoft
2010-01-31 12:16:43 ----D---- C:\Windows\Tasks
2010-01-31 12:16:37 ----D---- C:\Program Files (x86)\Google
2010-01-30 21:36:58 ----SD---- C:\Users\Jim@il\AppData\Roaming\Microsoft
2010-01-30 21:32:35 ----AD---- C:\ProgramData\TEMP
2010-01-30 19:57:01 ----HD---- C:\ProgramData
2010-01-30 19:57:00 ----D---- C:\Program Files (x86)\SweetIM
2010-01-28 19:32:35 ----D---- C:\Program Files (x86)\Common Files
2010-01-28 19:32:32 ----RSD---- C:\Windows\Fonts
2010-01-28 19:04:40 ----D---- C:\Windows\system32\drivers
2010-01-28 19:00:32 ----D---- C:\ProgramData\Microsoft Help
2010-01-28 19:00:29 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-01-28 19:00:29 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2010-01-28 19:00:28 ----D---- C:\Program Files (x86)\Microsoft Office
2010-01-28 18:58:35 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2010-01-28 18:50:05 ----D---- C:\ProgramData\FLEXnet
2010-01-27 17:48:13 ----D---- C:\ProgramData\Adobe
2010-01-27 17:48:13 ----D---- C:\Program Files (x86)\Common Files\Adobe
2010-01-27 17:23:52 ----D---- C:\Program Files (x86)\Internet Explorer
2010-01-26 20:29:26 ----D---- C:\Program Files (x86)\Common Files\System
2010-01-23 19:21:13 ----D---- C:\Windows\system32\migration
2010-01-23 19:21:10 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-01-13 20:00:30 ----D---- C:\Program Files (x86)\Windows Mail
2010-01-12 18:31:37 ----A---- C:\Windows\win.ini
2010-01-12 18:20:36 ----SHD---- C:\$RECYCLE.BIN
2010-01-11 20:07:02 ----D---- C:\Users\Jim@il\AppData\Roaming\dvdcss
2010-01-03 19:33:25 ----D---- C:\Users\Jim@il\AppData\Roaming\Audacity

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys []
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys []
R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 aksdf;aksdf; \??\C:\Windows\system32\drivers\aksdf.sys []
R2 aksfridge;aksfridge; \??\C:\Windows\system32\drivers\aksfridge.sys []
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys []
R2 Hardlock;Hardlock; \??\C:\Windows\system32\drivers\hardlock.sys []
R2 int15;int15; \??\C:\Windows\SysWOW64\drivers\int15_64.sys [2008-08-19 17952]
R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys []
R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys []
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\Windows\system32\drivers\AtiHdmi.sys []
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
R3 CamDrL64;Logitech QuickCam Pro 3000(PID_08B0); C:\Windows\system32\DRIVERS\CamDrL64.sys []
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver; C:\Windows\system32\DRIVERS\e1y60x64.sys []
R3 gwfilt64;gwfilt64; C:\Windows\system32\drivers\gwfilt64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys []
R3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys []
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys []
R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys []
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\Drivers\NTIDrvr.sys []
R3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys []
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys []
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys []
S3 athrusb;Atheros Wireless LAN USB device driver; C:\Windows\system32\DRIVERS\athrxusb.sys []
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys []
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys []
S3 ITEIO.SYS;ITEIO.SYS; \??\c:\Windows\System32\drivers\ITEIO.sys []
S3 LVcKap64;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap64.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys []
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys []
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys []
S3 NAL;Nal Service ; \??\C:\Windows\system32\Drivers\iqvw64e.sys []
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\Windows\system32\DRIVERS\s0016bus.sys []
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0016mdfl.sys []
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0016mdm.sys []
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0016mgmt.sys []
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\Windows\system32\DRIVERS\s0016nd5.sys []
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0016obex.sys []
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\Windows\system32\DRIVERS\s0016unic.sys []
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys []
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe []
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-07-29 500784]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-08-19 24576]
R2 hasplms;HASP License Manager; C:\Windows\system32\hasplms.exe -run []
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 LVPrcS64;Process Monitor; c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe [2007-02-06 173344]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [2008-06-13 241734]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 svlostServices;winlog; C:\Windows\SysWOW64\svlostSrv.exe [2010-01-27 243200]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2009-11-13 92008]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 2297216]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-01-28 40384]
S2 gupdate;Service Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-31 135664]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-02-06 173344]
S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-03-30 89920]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2009-08-18 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-08-18 655624]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-15 182768]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2010-01-28 79360]
S4 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-07-01 270422]

-----------------EOF-----------------

[bernard53]

bonjour

si H3bus me permet.

Jim@il fait ceci.

Relance HijackThis >puis : Do a system scan only > coche ces lignes: ensuite valides sur Fix checked

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.googlesayfa.com/en
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O1 - Hosts: 91.121.97.18 http://www.thepiratebay.org
O1 - Hosts: 91.121.97.18 thepiratebay.org
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - (no file)
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKCU\..\Run: [svchost] C:\WINDOWS\system32\config\svchost.exe
O4 - Startup: Windows Updater.lnk = C:\Users\Jim@il\AppData\Local\Temp\JDstart.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O8 - Extra context menu item: Download with NetPumper - C:\Program Files (x86)\NetPumper\AddUrl.htm

Puis ceci.

Télécharge >>OTM<< (de Old_Timer) sur ton Bureau.


>> Pour VISTA : Clic-droit et choisis "Exécuter en tant qu'administrateur".

>> AVAST reconnait ce logiciel comme un intrus, donc le désactiver le temps des manipulations.

Double-clique sur OTM pour le lancer.

Copie la liste qui se trouve en citation ci-dessous:

:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"svchost"=-

:Files
c:\windows\system32\config\svchost.exe
:Commands
[purity]
[emptytemp]
]
[Reboot]

et colle-la dans le cadre de gauche de OTM sous ceci:



Clique sur pour lancer la suppression.
attendre la fin du travail de l'outil puis fermer OTM

Le résultat apparaitra dans le cadre Results.
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTM\MovedFiles\06092009_130526.log "Exemple"

NB: Il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Oui/Yes.

Puis ceci.

Téléchargez MyHosts sur votre bureau .

Pour le lancer, faites un double-clic sur l'icône de MyHosts qui se trouve sur votre bureau.

Le rapport " MyHosts.txt " s'ouvre quelques secondes après, copiez son contenu et postez-le sur le forum où vous vous faites aider.

Si par erreur vous avez fermé le rapport " MyHosts.txt " avant de le copier, vous pouvez le retrouver à la racine de votre disque système ( par exemple C:\MyHosts.txt ) .


IMPORTANT :
MyHosts doit être lancé sur une session ayant des droits "administrateur", toute exécution sur un compte "limité" entraînera l'apparition d'une fenêtre DOS vous demandant de le relancer à partir d'un compte administrateur.


et ceci.

Installe Malewarebytes' Antimalware,
Téléchargement et tuto

*** Met-le à jour puis choisi, Exécuter un examen complet

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

Poste le rapport final.
*** il est conseillé de désactivé Tea-Timer si tu as Spybot-S&D juste le temps du scan.

Voici comment faire: Lancez Spybot-S&D, passez en Mode avancé via le Menu Mode (en haut) → cliquez sur Oui--> choisissez Outils dans la barre de navigation sur la gauche -->Résident et là vous pouvez décocher les cases situées devant les deux outils.

[H3bus]

si H3bus me permet.

Bien sur que je permets, voyons !

[bernard53]

si H3bus me permet.

Bien sur que je permets, voyons !

OK H3bus

[Jim@il]

merci pour l'aide
écoute bernard53 "valides sur Fix checked"
quand je lance rist ça m'ouvre une fenetre qui me dit continue ou exit
donc je clique sur continue et là ça m'ouvre directement un log c'est tout
donc je fais quoi??

[Jim@il]

j'ai fais un scan avec malwarebytes
es ce que c'est sur qu'il faut tout suprimer?
car je ne veux pas que ça supprime des fichiers du système.
merci

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3672
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18882

01/02/2010 18:28:09
mbam-log-2010-02-01 (18-28-00).txt

Type de recherche: Examen complet (C:\|D:\|J:\|)
Eléments examinés: 321570
Temps écoulé: 37 minute(s), 36 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 8
Fichier(s) infecté(s): 213

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\Windows\System32\svlosta.dll (Worm.Messenger) -> No action taken.
C:\Windows\System32\svlostb.dll (Worm.Messenger) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\netpumper (Adware.NetPumper) -> No action taken.
HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-netpumper-detector (Adware.NetPumper) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Download with NetPumper (Adware.NetPumper) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\NetPumper (Adware.NetPumper) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\svlostServices (Worm.Messenger) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Netscape\Netscape Navigator\Automation Protocols\ftp (Adware.NetPumper) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Netscape\Netscape Navigator\Automation Protocols\http (Adware.NetPumper) -> No action taken.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):
C:\Users\Jim@il\AppData\Roaming\NetPumper (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base (Adware.NetPumper) -> No action taken.
C:\Users\Jim@il\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetPumper (Adware.NetPumper) -> No action taken.

Fichier(s) infecté(s):
C:\Program Files (x86)\HTDivx\Uninstall.exe (Trojan.Dropper) -> No action taken.
C:\Program Files (x86)\NetPumper\addurl.exe (Trojan.Swizzor) -> No action taken.
C:\Users\Jim@il\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9050OGJ3\JDstart[1].exe (Trojan.Dropper) -> No action taken.
C:\Users\Jim@il\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NEM7YXFO\silentcleanup[1].exe (Virus.Virut) -> No action taken.
C:\Users\Jim@il\AppData\Local\Temp\JDstart.exe (Trojan.Dropper) -> No action taken.
C:\Users\Jim@il\AppData\Local\Temp\silentcleanup.exe (Virus.Virut) -> No action taken.
C:\Users\Jim@il\AppData\Local\Temp\svcchst32.exe (Trojan.Dropper) -> No action taken.
J:\$RECYCLE.BIN\S-1-5-21-2420105194-4270431021-54118395-1000\$R90IWQG\Adobe Photoshop CS4 Extended + Keygen\keygen.EXE (Trojan.Downloader) -> No action taken.
J:\programmes\utorrent\film\programme\3 Serial Microsoft Office Home And Student 2007 Key.exe (Trojan.Dropper) -> No action taken.
C:\Program Files (x86)\NetPumper\AddUrl.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\icon-uninstall.ico (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\NetPumper.url (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\README.txt (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\uninst.exe (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\x.bat (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\commonheadfoot.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\compat.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\details.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\features.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\index.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\mainwin.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\nphelp.css (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\prefwindow.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\register.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\schedwin.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\tips.htm (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\apllimit.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\bandwidthpanel.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\buttons.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdadd.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdaddtoschedule.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmddetails.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdeditschedule.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdfolder.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdhelp.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdopen.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdopenfolder.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdpause.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdprefs.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdremove.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdresume.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\cmdselectall.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\detailwin-wide.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\detailwin.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\droptoschedule.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\editbandwidth.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\ignlimit.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\limserver.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\limservergold.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\limuser.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\mainwin.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\moveicons.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-bandwidth.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-connections.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-general.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-login.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-monitoring.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-proxy-ftp.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\prefw-proxy-http.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\register-1.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\register-2.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\register-3-1.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\register-3-2.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\schedulewin.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\scnoresume.bmp (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\scnoresume.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\scresumes.bmp (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\scresumes.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\scunk.bmp (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\scunk.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stanalyzing.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\starticon.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stcompleted.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stfatal.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stinpro.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stnhelp-old.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stnhelp.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stopicon.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stpaused.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stqueued.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stretrying.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\stscheduled.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\summary.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\throtdn.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\zoombtn.gif (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\entries (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\format (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\apllimit.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\bandwidthpanel.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\buttons.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdadd.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdaddtoschedule.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmddetails.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdeditschedule.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdfolder.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdhelp.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdopen.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdopenfolder.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdpause.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdprefs.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdremove.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdresume.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\cmdselectall.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\detailwin-wide.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\detailwin.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\droptoschedule.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\editbandwidth.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\ignlimit.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\limserver.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\limservergold.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\limuser.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\mainwin.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\moveicons.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-bandwidth.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-connections.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-general.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-login.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-monitoring.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-proxy-ftp.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\prefw-proxy-http.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\register-1.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\register-2.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\register-3-1.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\register-3-2.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\schedulewin.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\scnoresume.bmp.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\scnoresume.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\scresumes.bmp.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\scresumes.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\scunk.bmp.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\scunk.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stanalyzing.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\starticon.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stcompleted.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stfatal.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stinpro.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stnhelp-old.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stnhelp.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stopicon.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stpaused.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stqueued.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stretrying.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\stscheduled.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\summary.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\throtdn.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\prop-base\zoombtn.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\apllimit.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\bandwidthpanel.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\buttons.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdadd.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdaddtoschedule.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmddetails.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdeditschedule.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdfolder.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdhelp.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdopen.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdopenfolder.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdpause.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdprefs.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdremove.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdresume.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\cmdselectall.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\detailwin-wide.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\detailwin.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\droptoschedule.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\editbandwidth.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\ignlimit.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\limserver.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\limservergold.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\limuser.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\mainwin.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\moveicons.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-bandwidth.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-connections.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-general.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-login.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-monitoring.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-proxy-ftp.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\prefw-proxy-http.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\register-1.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\register-2.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\register-3-1.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\register-3-2.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\schedulewin.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\scnoresume.bmp.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\scnoresume.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\scresumes.bmp.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\scresumes.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\scunk.bmp.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\scunk.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stanalyzing.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\starticon.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stcompleted.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stfatal.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stinpro.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stnhelp-old.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stnhelp.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stopicon.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stpaused.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stqueued.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stretrying.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\stscheduled.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\summary.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\throtdn.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Program Files (x86)\NetPumper\help\images\.svn\text-base\zoombtn.gif.svn-base (Adware.NetPumper) -> No action taken.
C:\Users\Jim@il\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetPumper\HomePage.lnk (Adware.NetPumper) -> No action taken.
C:\Users\Jim@il\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetPumper\NetPumper.lnk (Adware.NetPumper) -> No action taken.
C:\Users\Jim@il\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetPumper\Uninstall.lnk (Adware.NetPumper) -> No action taken.
C:\Windows\System32\winhost.exe (Trojan.Agent) -> No action taken.
C:\Windows\System32\svlosta.dll (Worm.Messenger) -> No action taken.
C:\Windows\System32\svlost.exe (Worm.Messenger) -> No action taken.
C:\Windows\System32\svlostb.dll (Worm.Messenger) -> No action taken.
C:\Windows\System32\svlostSrv.exe (Worm.Messenger) -> No action taken.

[bernard53]

dis moi tu as bien tout supprimer avec MalwaresBytes!


Fait ceci pour accéder a "hijackthis"

Fait ceci pour accéder a hijackthis qui a été renommé.

Démarrer>Exécuter ou (Touche windows+R) puis fait un copier coller de ceci.

C:\Program Files (x86)\trend micro

Ensuite clique droit sur Jim@il.exe puis

Relance HijackThis renommé en Jim@il.exe >puis : Do a system scan only > coche ces lignes: ensuite valides sur Fix checked puis fixe les lignes que je t'ai signalé.

Tu as bien passés MyHosts aussi?