Bonjour,

● Désactive l'UAC le temps de la désinfection.

● Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

/!\ Déconnecte-toi d'Internet et ferme toutes applications en cours. /!\

● Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program Files).
● Double-clique sur le raccourci d'Ad-Remover située sur ton Bureau.
(Sous Vista, il faut cliquer droit sur le raccourci d'Ad-Remover et choisir Exécuter en tant qu'administrateur)
● Au menu principal, choisis l'option L.
● Poste le rapport généré (C:\Ad-Report-(date).log).

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.

Wé dsl pour le doublon c mon pc qui bugg donc j'ais essayer mais il mettent que il manque un process.exe manquant

Cela signifie que ton antivirus a supprimé Process.exe.

Désactive ton antivirus le temps de la manipulation.

--> Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

--> Double-clique sur RSIT.exe afin de lancer le programme.
(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

--> Clique sur Continue à l'écran Disclaimer.

--> Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

--> Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Lefeve Catherine at 2009-06-01 02:48:04
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 58 GB (40%) free of 144 GB
Total RAM: 2814 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:48:21, on 01/06/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Users\Lefeve Catherine\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpda­teHP.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\conime.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\Lefeve Catherine\Downloads\RSIT.exe
C:\Users\Lefeve Catherine\Downloads\Lefeve Catherine.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ORAHSSSessionManager] "C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [WarReg_PopUp] "C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe"
O4 - HKLM\..\Run: [RtHDVCpl] "C:\Windows\RtHDVCpl.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\RunOnce: [SoftwareHelper] C:\Users\Lefeve Catherine\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe -runonce
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - Global Startup: Wireless Configuration Utility.lnk = C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com/srl_bin/sysreqlab_srl.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Eset HTTP Server (EHttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\bin32\nSvcAppFlt.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe (file missing)
O23 - Service: Service Google Update (gupdate1c9a0149615d04d) (gupdate1c9a0149615d04d) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\bin32\nSvcIp.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\Windows\system32\UAService7.exe
O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Unknown owner - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe (file missing)
End of file - 9563 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachine.job
C:\Windows\tasks\Norton Security Scan for Lefeve Catherine.job
C:\Windows\tasks\NSSstub.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-28 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-25 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-05-17 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-03-04 142896]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-28 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2008-02-20 1443072]
"WarReg_PopUp"=C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [2008-01-29 303104]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-03-26 5369856]
"Google Quick Search Box"=C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [2009-05-17 68592]
"EoEngine"= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SoftwareHelper"=C:\Users\Lefeve Catherine\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-05-26 414480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-25 39408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"ccleaner"=C:\Program Files\CCleaner\CCleaner.exe [2009-05-07 1561840]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"Steam"=c:\program files\valve\steam\steam.exe [2009-05-21 1217784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer Empowering Technology Monitor]
C:\Program Files\Acer\Empowering Technology\SysMonitor.exe [2008-04-25 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BkupTray]
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-25 28672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader]
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [2008-03-04 526896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EmpoweringTechnology]
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe [2008-04-25 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\filehippo.com]
C:\Program Files\filehippo.com\UpdateChecker.exe /background []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe /startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2008-04-22 13535776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\Windows\system32\NvMcTray.dll [2008-04-22 92704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMMediaSharing]
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [2008-01-25 204908]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Wireless Configuration Utility.lnk - C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoViewContextMenu"=0
"NoWinKeys"=0
"NoDriveAutoRun"=FFFFFFFF
"NoDriveTypeAutoRun"=36

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"NoLogOff"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe"="C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Nexon\Combat Arms\CombatArms.exe"="C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms\Engine.exe"="C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-05-30 16:00:32 ----D---- C:\Windows\system32\AGEIA
2009-05-30 16:00:30 ----D---- C:\Program Files\AGEIA Technologies
2009-05-30 15:59:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-05-30 15:43:47 ----A---- C:\Windows\IsUn040c.exe
2009-05-30 15:41:34 ----D---- C:\Program Files\Wall Street Tycoon
2009-05-30 14:19:57 ----D---- C:\Program Files\SystemRequirementsLab
2009-05-29 17:30:26 ----D---- C:\Program Files\OpenAL
2009-05-29 17:30:26 ----A---- C:\Windows\system32\wrap_oal.dll
2009-05-29 17:30:26 ----A---- C:\Windows\system32\OpenAL32.dll
2009-05-29 15:57:03 ----D---- C:\Program Files\Ad-remover
2009-05-26 23:01:55 ----D---- C:\rsit
2009-05-26 20:47:29 ----D---- C:\Program Files\OutClock
2009-05-26 01:18:24 ----D---- C:\ProgramData\WLInstaller
2009-05-26 00:41:18 ----D---- C:\Users\Lefeve Catherine\AppData\Roaming\EoRezo
2009-05-26 00:19:50 ----D---- C:\Program Files\CleanUp!
2009-05-25 23:43:49 ----D---- C:\Program Files\Microsoft
2009-05-25 23:43:37 ----D---- C:\Program Files\Windows Live SkyDrive
2009-05-22 10:44:25 ----D---- C:\temp
2009-05-21 20:49:22 ----D---- C:\Users\Lefeve Catherine\AppData\Roaming\Mozilla
2009-05-21 20:49:07 ----D---- C:\Program Files\Mozilla Firefox
2009-05-21 14:24:49 ----D---- C:\Program Files\Valve
2009-05-21 11:54:04 ----D---- C:\ProgramData\Muzzy Lane Software
2009-05-21 11:43:56 ----D---- C:\Users\Lefeve Catherine\AppData\Roaming\SecuROM
2009-05-21 11:43:39 ----A---- C:\Windows\system32\UAService7.exe
2009-05-21 01:34:08 ----D---- C:\Users\Lefeve Catherine\AppData\Roaming\Broken Rules
2009-05-18 19:34:59 ----D---- C:\ProgramData\is-DMFL9
2009-05-17 18:06:19 ----D---- C:\Users\Lefeve Catherine\AppData\Roaming\SUPERAntiSpyware.com
2009-05-16 00:20:29 ----A---- C:\Windows\system32\mshtmler.dll
2009-05-16 00:20:29 ----A---- C:\Windows\system32\mshtmled.dll
2009-05-16 00:20:29 ----A---- C:\Windows\system32\ieui.dll
2009-05-16 00:20:29 ----A---- C:\Windows\system32\icardie.dll
2009-05-16 00:20:29 ----A---- C:\Windows\system32\admparse.dll
2009-05-16 00:20:28 ----A---- C:\Windows\system32\msls31.dll
2009-05-16 00:20:28 ----A---- C:\Windows\system32\jsproxy.dll
2009-05-16 00:20:28 ----A---- C:\Windows\system32\corpol.dll
2009-05-16 00:20:27 ----A---- C:\Windows\system32\imgutil.dll
2009-05-16 00:20:27 ----A---- C:\Windows\system32\iernonce.dll
2009-05-16 00:20:27 ----A---- C:\Windows\system32\ieakeng.dll
2009-05-16 00:20:27 ----A---- C:\Windows\system32\dxtmsft.dll
2009-05-16 00:20:26 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-05-16 00:20:26 ----A---- C:\Windows\system32\licmgr10.dll
2009-05-16 00:20:26 ----A---- C:\Windows\system32\inseng.dll
2009-05-16 00:20:26 ----A---- C:\Windows\system32\iepeers.dll
2009-05-16 00:20:26 ----A---- C:\Windows\system32\dxtrans.dll
2009-05-16 00:20:25 ----A---- C:\Windows\system32\wextract.exe
2009-05-16 00:20:25 ----A---- C:\Windows\system32\webcheck.dll
2009-05-16 00:20:25 ----A---- C:\Windows\system32\occache.dll
2009-05-16 00:20:25 ----A---- C:\Windows\system32\msrating.dll
2009-05-16 00:20:25 ----A---- C:\Windows\system32\iesetup.dll
2009-05-16 00:20:25 ----A---- C:\Windows\system32\ieakui.dll
2009-05-16 00:20:25 ----A---- C:\Windows\system32\ieaksie.dll
2009-05-16 00:20:24 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-05-16 00:20:24 ----A---- C:\Windows\system32\pngfilt.dll
2009-05-16 00:20:24 ----A---- C:\Windows\system32\mstime.dll
2009-05-16 00:20:24 ----A---- C:\Windows\system32\msfeedssync.exe
2009-05-16 00:20:24 ----A---- C:\Windows\system32\msfeeds.dll
2009-05-16 00:20:24 ----A---- C:\Windows\system32\advpack.dll
2009-05-16 00:20:23 ----A---- C:\Windows\system32\ieapfltr.dll
2009-05-16 00:20:22 ----A---- C:\Windows\system32\vbscript.dll
2009-05-16 00:20:22 ----A---- C:\Windows\system32\url.dll
2009-05-16 00:20:22 ----A---- C:\Windows\system32\jscript.dll
2009-05-16 00:20:21 ----A---- C:\Windows\system32\iedkcs32.dll
2009-05-16 00:20:19 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-05-16 00:20:19 ----A---- C:\Windows\system32\SetDepNx.exe
2009-05-16 00:20:19 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-05-16 00:20:19 ----A---- C:\Windows\system32\mshta.exe
2009-05-16 00:20:19 ----A---- C:\Windows\system32\iexpress.exe
2009-05-16 00:20:19 ----A---- C:\Windows\system32\iesysprep.dll
2009-05-16 00:20:18 ----A---- C:\Windows\system32\wininet.dll
2009-05-16 00:20:18 ----A---- C:\Windows\system32\PDMSetup.exe
2009-05-16 00:20:18 ----A---- C:\Windows\system32\ieUnatt.exe
2009-05-16 00:20:18 ----A---- C:\Windows\system32\iertutil.dll
2009-05-16 00:20:18 ----A---- C:\Windows\system32\ie4uinit.exe
2009-05-16 00:20:17 ----A---- C:\Windows\system32\urlmon.dll
2009-05-16 00:20:16 ----A---- C:\Windows\system32\ieframe.dll
2009-05-16 00:20:15 ----A---- C:\Windows\system32\mshtml.dll
2009-05-13 00:10:54 ----D---- C:\Users\Lefeve Catherine\AppData\Roaming\vlc
2009-05-13 00:09:09 ----D---- C:\Program Files\VideoLAN
2009-05-10 10:36:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2009-05-10 10:36:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2009-05-10 10:36:58 ----A---- C:\Windows\system32\D3DX9_40.dll
2009-05-10 10:36:58 ----A---- C:\Windows\system32\d3dx10_40.dll
2009-05-10 10:36:58 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2009-05-10 10:36:57 ----A---- C:\Windows\system32\XAudio2_2.dll
2009-05-10 10:36:57 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2009-05-10 10:36:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2009-05-10 10:36:57 ----A---- C:\Windows\system32\xactengine3_2.dll
2009-05-10 10:36:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2009-05-10 10:36:56 ----A---- C:\Windows\system32\XAudio2_1.dll
2009-05-10 10:36:56 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2009-05-10 10:36:56 ----A---- C:\Windows\system32\D3DX9_39.dll
2009-05-10 10:36:56 ----A---- C:\Windows\system32\d3dx10_39.dll
2009-05-10 10:36:56 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2009-05-10 10:36:55 ----A---- C:\Windows\system32\xactengine3_1.dll
2009-05-10 10:36:55 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2009-05-10 10:36:55 ----A---- C:\Windows\system32\d3dx10_38.dll
2009-05-10 10:36:55 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2009-05-10 10:36:54 ----A---- C:\Windows\system32\XAudio2_0.dll
2009-05-10 10:36:54 ----A---- C:\Windows\system32\xactengine3_0.dll
2009-05-10 10:36:54 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2009-05-10 10:36:54 ----A---- C:\Windows\system32\D3DX9_38.dll
2009-05-10 10:36:54 ----A---- C:\Windows\system32\d3dx10_37.dll
2009-05-10 10:36:54 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2009-05-10 10:36:53 ----A---- C:\Windows\system32\xactengine2_10.dll
2009-05-10 10:36:53 ----A---- C:\Windows\system32\D3DX9_37.dll
2009-05-10 10:36:52 ----A---- C:\Windows\system32\d3dx9_36.dll
2009-05-10 10:36:52 ----A---- C:\Windows\system32\d3dx10_36.dll
2009-05-10 10:36:52 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2009-05-10 10:36:51 ----A---- C:\Windows\system32\xactengine2_9.dll
2009-05-10 10:36:50 ----A---- C:\Windows\system32\xactengine2_8.dll
2009-05-10 10:36:50 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2009-05-10 10:36:47 ----A---- C:\Windows\system32\xactengine2_7.dll
2009-05-10 10:36:47 ----A---- C:\Windows\system32\d3dx10_33.dll
2009-05-10 10:36:47 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2009-05-10 10:36:46 ----A---- C:\Windows\system32\xactengine2_6.dll
2009-05-10 10:36:46 ----A---- C:\Windows\system32\xactengine2_5.dll
2009-05-10 10:36:46 ----A---- C:\Windows\system32\d3dx9_33.dll
2009-05-10 10:36:46 ----A---- C:\Windows\system32\d3dx10.dll
2009-05-10 10:36:42 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-05-10 10:36:42 ----A---- C:\Windows\system32\x3daudio1_1.dll
2009-05-10 10:36:42 ----A---- C:\Windows\system32\d3dx9_31.dll
2009-05-10 10:36:41 ----A---- C:\Windows\system32\xinput1_2.dll
2009-05-10 10:36:41 ----A---- C:\Windows\system32\xinput1_1.dll
2009-05-10 10:36:41 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-05-10 10:36:41 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-05-10 10:36:40 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-05-10 10:36:29 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-05-10 10:36:29 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-05-10 10:36:29 ----A---- C:\Windows\system32\d3dx9_30.dll
2009-05-10 10:36:29 ----A---- C:\Windows\system32\d3dx9_29.dll
2009-05-10 10:36:28 ----A---- C:\Windows\system32\d3dx9_28.dll
2009-05-10 10:36:27 ----A---- C:\Windows\system32\d3dx9_26.dll
2009-05-10 10:17:52 ----D---- C:\Program Files\Samsung
2009-05-08 02:39:20 ----D---- C:\Program Files\Yahoo!
2009-05-06 17:16:28 ----A---- C:\resultat.txt
2009-05-05 20:12:33 ----D---- C:\Program Files\trend micro
2009-05-02 19:40:04 ----D---- C:\Program Files\Common Files\Steam
2009-05-02 19:39:07 ----D---- C:\Program Files\Steam

======List of files/folders modified in the last 1 months======

2009-06-01 02:48:21 ----D---- C:\Windows\Prefetch
2009-06-01 02:48:18 ----D---- C:\Windows\Temp
2009-06-01 02:16:23 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-01 02:16:19 ----D---- C:\Windows\system32\drivers
2009-06-01 01:19:29 ----D---- C:\Windows
2009-05-31 23:16:33 ----D---- C:\Windows\Tasks
2009-05-31 23:16:33 ----D---- C:\Windows\system32\Tasks
2009-05-31 23:16:06 ----D---- C:\Windows\System32
2009-05-31 23:16:06 ----D---- C:\Windows\inf
2009-05-31 23:16:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-05-31 23:08:39 ----D---- C:\Windows\system32\wbem
2009-05-31 23:08:08 ----D---- C:\Windows\system32\config
2009-05-31 23:08:02 ----D---- C:\Windows\system32\spool
2009-05-31 23:08:02 ----D---- C:\Windows\system32\catroot2
2009-05-31 23:08:00 ----D---- C:\Windows\registration
2009-05-31 23:06:28 ----SHD---- C:\System Volume Information
2009-05-31 16:16:22 ----RSD---- C:\Windows\assembly
2009-05-30 22:31:37 ----D---- C:\ProgramData\Google Updater
2009-05-30 16:00:48 ----SHD---- C:\Windows\Installer
2009-05-30 16:00:48 ----D---- C:\Windows\system32\catroot
2009-05-30 16:00:30 ----RD---- C:\Program Files
2009-05-30 15:59:36 ----D---- C:\Program Files\Common Files
2009-05-30 14:19:44 ----SD---- C:\Windows\Downloaded Program Files
2009-05-29 17:30:22 ----D---- C:\Windows\winsxs
2009-05-27 20:59:21 ----SD---- C:\Users\Lefeve Catherine\AppData\Roaming\Microsoft
2009-05-27 12:30:58 ----D---- C:\Windows\Microsoft.NET
2009-05-26 22:14:18 ----D---- C:\Program Files\Internet Explorer
2009-05-26 22:14:15 ----D---- C:\Program Files\Common Files\microsoft shared
2009-05-26 21:54:44 ----D---- C:\Windows\system32\Msdtc
2009-05-26 01:37:47 ----D---- C:\Program Files\Windows Live
2009-05-26 01:18:24 ----HD---- C:\ProgramData
2009-05-25 16:30:20 ----A---- C:\TCleaner.txt
2009-05-24 14:03:31 ----D---- C:\Windows\Minidump
2009-05-22 10:44:40 ----D---- C:\ProgramData\Google
2009-05-21 21:45:34 ----A---- C:\Windows\_MSRSTRT.EXE
2009-05-21 21:29:07 ----D---- C:\Program Files\Google
2009-05-21 11:43:39 ----A---- C:\Windows\system32\CmdLineExt.dll
2009-05-19 21:26:25 ----D---- C:\Windows\system32\CodeIntegrity
2009-05-16 18:20:04 ----D---- C:\Windows\BDOSCAN8
2009-05-16 00:44:42 ----D---- C:\Windows\rescache
2009-05-16 00:26:59 ----D---- C:\Windows\system32\fr-FR
2009-05-16 00:26:56 ----D---- C:\Windows\system32\migration
2009-05-16 00:26:56 ----D---- C:\Windows\system32\en-US
2009-05-16 00:26:56 ----D---- C:\Windows\PolicyDefinitions
2009-05-16 00:25:50 ----D---- C:\ProgramData\Microsoft Help
2009-05-16 00:24:41 ----RSD---- C:\Windows\Fonts
2009-05-16 00:24:18 ----D---- C:\Program Files\Microsoft Works
2009-05-13 13:29:07 ----D---- C:\Windows\Debug
2009-05-13 13:24:12 ----D---- C:\Program Files\Windows Mail
2009-05-10 10:36:04 ----D---- C:\Windows\Logs
2009-05-09 14:11:14 ----D---- C:\Program Files\Common Files\Adobe
2009-05-07 09:16:29 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2008-02-20 29704]
R1 epfwtdir;epfwtdir; C:\Windows\system32\DRIVERS\epfwtdir.sys [2008-02-20 33800]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2008-02-20 39944]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-04-25 15392]
R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-03-04 16944]
R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-03-04 60464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-03-26 2103512]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2008-01-29 1042464]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-04-22 43552]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-04-22 7451040]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2007-10-12 13312]
R3 RTL8187B;TRENDnet TEW-424UB 54M USB Dongle; C:\Windows\system32\DRIVERS\RTL8187B.sys [2007-07-19 281088]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2008-03-17 101632]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\lvusbsta.sys [2005-01-31 22016]
S3 mbr;mbr; \??\C:\Users\LEFEVE~1\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2008-05-02 20864]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCAMp50.sys [2006-11-28 28224]
S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2006-11-28 27072]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-01-01 47360]
S3 PID_0920;Logitech QuickCam Express(PID_0920); C:\Windows\system32\DRIVERS\LV532AV.SYS [2005-01-31 163328]
S3 sony_ssm.sys;sony_ssm.sys; \??\C:\Users\LEFEVE~1\AppData\Local\Temp\sony_ssm.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbser;Nokia USB Serial Port; C:\Windows\system32\DRIVERS\usbser.sys [2008-01-21 28160]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-02 8064]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-03-04 500784]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-02-20 472320]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-04-25 24576]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\bin32\nSvcAppFlt.exe [2008-01-29 598016]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 nSvcIp;ForceWare IP service; C:\Program Files\bin32\nSvcIp.exe [2008-01-29 163840]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-04-22 118784]
R2 UserAccess7;SecuROM User Access Service (V7); C:\Windows\system32\UAService7.exe [2009-05-21 122880]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe []
S2 gupdate1c9a0149615d04d;Service Google Update (gupdate1c9a0149615d04d); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-08 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-25 183280]
S2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe []
S2 WebrootSpySweeperService;Moteur Webroot Spy Sweeper; C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe []
S3 EHttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2008-02-20 19200]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-05-21 322032]
S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

-----------------EOF-----------------

Peux-tu poster le rapport info situé dans C:\rsit ?

J'aimerais bien ms il n'est ni dans la barre de tâches ni dans C

Dans C, tu n'as pas un dossier RSIT ?

Si mais il n'ya que le log.txt pas info.txt

Spy Sweeper est désinstallé ?

Je n'ais pas spy weeper dans mon ordi

---> Désactive ton antivirus le temps de la manipulation car OTM est détecté comme une infection à tort.

---> Télécharge OTM (OldTimer) sur ton Bureau.

---> Clique droit sur OTM.exe et choisis Exécuter en tant qu'administrateur.

---> Copie (Ctrl+C) le texte suivant ci-dessous :





:processes
explorer.exe

:services
mbr
sony_ssm.sys
WebrootSpySweeperService

:files
C:\Users\Lefeve Catherine\AppData\Roaming\eoRezo
C:\Users\LEFEVE~1\AppData\Local\Temp\sony_ssm.sys

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EoEngine"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SoftwareHelper"=-

:commands
[purity]
[emptytemp]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTM.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========

Service\Driver mbr deleted successfully.

Service\Driver sony_ssm.sys deleted successfully.

Service\Driver WebrootSpySweeperService deleted successfully.
========== FILES ==========
C:\Users\Lefeve Catherine\AppData\Roaming\EoRezo\eoStats moved successfully.
C:\Users\Lefeve Catherine\AppData\Roaming\EoRezo\eoDesktop moved successfully.
C:\Users\Lefeve Catherine\AppData\Roaming\EoRezo\db moved successfully.
C:\Users\Lefeve Catherine\AppData\Roaming\EoRezo moved successfully.
File/Folder C:\Users\LEFEVE~1\AppData\Local\Temp\sony_ssm.sys not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] => Microsoft MSN/WL\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\EoEngine deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SoftwareHelper deleted successfully.
========== COMMANDS ==========
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\fla11FA.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\flaB2EF.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\GoogleQuickSearchBox.log scheduled to be deleted on reboot.
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\~DF847A.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\~DF8488.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\~DFDEFB.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\LEFEVE~1\AppData\Local\Temp\~DFDF19.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be deleted on reboot.
File delete failed. C:\Windows\temp\CLDigitalHome\PCMMediaServer.log scheduled to be deleted on reboot.
Windows Temp folder emptied.
FireFox cache emptied.
Temp folders emptied.

OTM by OldTimer - Version 2.1.0.0 log created on 06012009_030706

Files moved on Reboot...
File C:\Users\LEFEVE~1\AppData\Local\Temp\fla11FA.tmp not found!
File C:\Users\LEFEVE~1\AppData\Local\Temp\flaB2EF.tmp not found!
C:\Users\LEFEVE~1\AppData\Local\Temp\GoogleQuickSearchBox.log moved successfully.
File C:\Users\LEFEVE~1\AppData\Local\Temp\~DF847A.tmp not found!
File C:\Users\LEFEVE~1\AppData\Local\Temp\~DF8488.tmp not found!
File C:\Users\LEFEVE~1\AppData\Local\Temp\~DFDEFB.tmp not found!
File C:\Users\LEFEVE~1\AppData\Local\Temp\~DFDF19.tmp not found!
File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\CLDigitalHome\PCMMediaServer.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Bien.

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

Ok bah déja merci de m'aider et ca te dérange pas si je te ferais cela demain car la je suis KO lol?

Pas de problème.

Ton PC n'a pas l'air très infecté.

Bonne nuit ;)