[Virus] Infecté par Trojan Skintrim [Résolu]

Salut Regis,

Norton l'a repéré deux fois dans C:\windows\system32 sous la forme de fichiers .exe (peyddlrne.exe et cfcfnqnjfd.exe) et deux fois dans C:\System Volume Information\_restore{... (A0010322.exe et A0014393.exe).

A +

herve.76

Salut Régis,

Peut-être n'as tu pas vu ma réponse car je l'ai mise dans "continuer la discussion".
Je disais :

<<Salut Regis,
L'application n'a pas pu démarrer car MSVBVM60.DLL est introuvable.
Je ne sais pas ce que ça veut dire...
Herve.>>

A +,

Hervé.

Salut,

Voici le rapport de Hijackthis :


Logfile of HijackThis v1.99.1
Scan saved at 08:33:11, on 25/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Picasa\PicasaMediaDetector.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.aceradvantage.com/stdreg
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [LifeScape Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [peyddlrne] c:\windows\system32\peyddlrne.exe peyddlrne
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


A +,

Herve.

Voilà le rapport demandé :


Search Navipromo version 1.1.5 commencé le 25/04/2007 à 8:57:18,71

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Documents and Settings\Herv‚ et C‚cile\Bureau\navilog1
Mise a jour le 13.04.2007 a 20h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Herv‚ et C‚cile\Application Data ***



*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
http://www.f-secure.com/blacklight/blacklight_help.html


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of April, 2007.
Version information: 2.2.1061.

[+] Started on 04/25/07 at 08:57:22.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items ...........................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 04/25/07 at 09:00:31 (return code = 0).


*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32\nvs2.inf trouvé !


*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



Recherche Clé Magic Control

HKEY_CURRENT_USER\Software\Lanconfig trouvé !
HKEY_USERS\S-1-5-21-1167727717-2785352923-1183495580-1006\Software\Lanconfig trouvé !


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche Heuristique :
*
C:\WINDOWS\system32\peyddlrne.dat trouvé !
**
C:\WINDOWS\system32\peyddlrne.dat trouvé !
***
****
C:\WINDOWS\system32\peyddlrne_navps.dat trouvé !
*****
C:\WINDOWS\system32\peyddlrne_nav.dat trouvé !
******
*******
********


*** Analyse Terminé le 25/04/2007 à 9:01:02,89 ***


A +,

Hervé.

Salut,

Comme tu m'avais dit de taper 2, je l'ai fait... mais il me demandait à ce momant là ce que je voulais faire, et 2 signifiait : "nettoyage automatique avec..." C'est donc ce que j'ai fait. Est-ce grave ?
Il m'a mis (à ce moment-là) des fichiers peyddlrne.* dans un dossier Backupnavi. Que fais-je de ces fichiers ?

J'ai ensuite recommencer le tout pour bien faire en mode manuel comme tu me l'avis demandé... et ja'ai suivi tes instructions.

Mon ordinateur est-il guéri ?

Hervé.

Salut Regis,

Voici le rapport de Navilog1 :

Search Navipromo version 1.1.5 commencé le 25/04/2007 à 21:01:19,84

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Documents and Settings\Herv‚ et C‚cile\Bureau\navilog1
Mise a jour le 13.04.2007 a 20h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Herv‚ et C‚cile\Application Data ***



*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
http://www.f-secure.com/blacklight/blacklight_help.html


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of April, 2007.
Version information: 2.2.1061.

[+] Started on 04/25/07 at 21:01:22.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items ......................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 04/25/07 at 21:04:16 (return code = 0).


*** Recherche fichiers ***




*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



Recherche Clé Magic Control



*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche Heuristique :
*
**
***
****
*****
******
*******
********


*** Analyse Terminé le 25/04/2007 à 21:04:46,28 ***


A +

Hervé.

Voilà Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 21:33:20, on 25/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\Acer TV-FM\PCMService.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Picasa\PicasaMediaDetector.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\notepad.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.aceradvantage.com/stdreg
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer TV-FM\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [LifeScape Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer TV-FM\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer TV-FM\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe


Hervé.

Salut Régis,

Norton ne me détecte pas Skintrim pour le moment. Est-il définitivement viré de mon ordi ?

Je ne comprends pas pourquoi Norton me le détectait de temps à autre (avec l'analyse en temps réel) alors que lorsque je scannait l'ordi avec ce même Norton ou encore avec kaspersky, a-squared, spybot et ad-aware, je ne trouvais rien !
On aurait dit qu'il disparaissait puis réapparaissait...
Pourrais-tu m'expliquer ?

J'ai une autre question : si tu regardes les deux rapport de navilog1 que je t'ai envoyés, j'ai supprimé bien plus que peyddlrne.
En effet, les lignes suivantes n'apparaissent plus dans le deuxième rapport :

*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32\nvs2.inf trouvé !


Recherche Clé Magic Control

HKEY_CURRENT_USER\Software\Lanconfig trouvé !
HKEY_USERS\S-1-5-21-1167727717-2785352923-1183495580-1006\Software\Lanconfig trouvé !

Pourrais-tu m'expliquer brièvement si c'est grave, et surtout, ce que tu m'as fait faire avec hijackthis et navilog pour que je puisse recommencer si j'ai d'autres problèmes ?

A +,

Hervé.

Salut,
Voici le rapport de virustotal : Prevx1 a trouvé quelque chose ! Que fais-je ?

Complete scanning result of "SysMonitor.exe", received in VirusTotal at 04.26.2007, 13:37:16 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.26.0 04.26.2007 no virus found
AntiVir 7.4.0.15 04.26.2007 no virus found
Authentium 4.93.8 04.26.2007 no virus found
Avast 4.7.981.0 04.26.2007 no virus found
AVG 7.5.0.464 04.25.2007 no virus found
BitDefender 7.2 04.26.2007 no virus found
CAT-QuickHeal 9.00 04.25.2007 no virus found
ClamAV devel-20070416 04.26.2007 no virus found
DrWeb 4.33 04.26.2007 no virus found
eSafe 7.0.15.0 04.25.2007 no virus found
eTrust-Vet 30.7.3597 04.26.2007 no virus found
Ewido 4.0 04.26.2007 no virus found
FileAdvisor 1 04.26.2007 no virus found
Fortinet 2.85.0.0 04.26.2007 no virus found
F-Prot 4.3.2.48 04.25.2007 no virus found
F-Secure 6.70.13030.0 04.26.2007 no virus found
Ikarus T3.1.1.5 04.26.2007 no virus found
Kaspersky 4.0.2.24 04.26.2007 no virus found
McAfee 5017 04.25.2007 no virus found
Microsoft 1.2405 04.26.2007 no virus found
NOD32v2 2220 04.26.2007 no virus found
Norman 5.80.02 04.25.2007 no virus found
Panda 9.0.0.4 04.26.2007 no virus found
Prevx1 V2 04.26.2007 Win32.Malware.gen
Sophos 4.16.0 04.23.2007 no virus found
Sunbelt 2.2.907.0 04.19.2007 no virus found
Symantec 10 04.26.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.4 04.26.2007 no virus found
VirusBuster 4.3.7:9 04.25.2007 no virus found
Webwasher-Gateway 6.0.1 04.26.2007 no virus found


Aditional Information
File size: 49152 bytes
MD5: 93ee120ae332dbe31632a00d232096d8
SHA1: 28e49e3fc8d8a6bc425db231ce4bab3fc912490f
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=cd1934490499


Je dois m'absenter. Je teste Spyware Terminator 1.8.4.965 quand je reviens.

A +,

Hervé.

Re,



Pour hijackthis, le backup se crée-t-il automatiquement ? Il me met un message d'avertissement lorsque je veux fixer la ligne qui a l'air de me dire que l'opération est irréversible sauf si je crée un backup...
Y-a-t-il d'autres lignes suspectes ou inutiles ? Comment les détermines-tu ?



Voici le rapport de Spyware Terminator :

Scan en Progrès (complet)
Heure de départ: 26/04/2007 18:36:27
Database: 1.0.694.449

Analyse des Processus
Wextract : C:\WINDOWS\SYSTEM32\ADVPACK.DLL
PowerProfile : C:\WINDOWS\SYSTEM32\POWRPROF.DLL
Shdocvw : C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
OpwareSE2 : C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE
SSJava : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL
Analyse des Démarrages Automatiques
Ctfmon : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run CTFMON.EXE
Ctfmon : C:\WINDOWS\SYSTEM32\CTFMON.EXE
MessengerService : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MSMSGS
MessengerService : C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
Invalid Startup Items : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MoneyAgent="C:\Program Files\Microsoft Money\System\mnyexpr.exe"
LaunchApp : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run LaunchApp
LaunchApp : C:\WINDOWS\ALAUNCH.EXE
ntiMUI : C:\PROGRAM FILES\NEWTECH INFOSYSTEMS\NTI CD & DVD-MAKER 7\NTIMUI.EXE
PDVDServ : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RemoteControl
PDVDServ : C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
RemoteControl : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RemoteControl
RemoteControl : C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
MSIMED : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run IMJPMIG8.1
MSIMED : C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE
MSPY2002 : C:\WINDOWS\SYSTEM32\IME\PINTLGNT\IMSCINST.EXE
PHIME2002A : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PHIME2002ASync
PHIME2002A : C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE
PHIME2002A : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PHIME2002A
SiSPower : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SiSPower
SiSPower : C:\WINDOWS\system32\SISPOWER.DLL
SoundMan : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SoundMan
SoundMan : C:\WINDOWS\SOUNDMAN.EXE
SunJavaUpdateSched : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched
SunJavaUpdateSched : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\JUSCHED.EXE
Acer Empowering Technology Monitor : C:\WINDOWS\SYSTEM32\SYSMONITOR.EXE
AspireService : C:\PROGRAM FILES\ACER\ACER EMODE MANAGEMENT\ASPIRESERVICE.EXE
MediaSync : C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASYNC.EXE
PCMService : C:\PROGRAM FILES\ACER TV-FM\PCMSERVICE.EXE
eRecoveryService : C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERAGENT.EXE
NeroFilterCheck : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run NeroCheck
NeroFilterCheck : C:\WINDOWS\SYSTEM32\NEROCHECK.EXE
OpwareSE2 : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run OpwareSE2
OpwareSE2 : C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE
SymantecAntivirus : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run vptray
SymantecAntivirus : C:\PROGRAM FILES\NAVNT\VPTRAY.EXE
LifeScape Media Detector : C:\PROGRAM FILES\PICASA\PICASAMEDIADETECTOR.EXE
!AVG Anti-Spyware : C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
ZoneLabsClient : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ZoneAlarm Client
ZoneLabsClient : C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
Spyware Terminator : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SpywareTerminator
Spyware Terminator : C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
Explorer : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Shell
Explorer : C:\WINDOWS\EXPLORER.EXE
Analyse des barres d'Outils
Shdocvw : HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}
Shdocvw : C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
Shdocvw : explorer.exe PID: 1232
Shdocvw : iexplore.exe PID: 3844
Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E61-B078-11D0-89E4-00C04FC9E26E}
Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E62-B078-11D0-89E4-00C04FC9E26E}
Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}
Analyse de Browser Helper Objects
AcroIEHelper : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
Spybot S&D : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
Spybot S&D : explorer.exe PID: 1232
Spybot S&D : iexplore.exe PID: 3844
SSJava : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
SSJava : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL
SSJava : iexplore.exe PID: 3844
IE Explorer Bars
IE Extensions
Analyse des Services
Spyware Terminator : HKLM\SYSTEM\CurrentControlSet\Services\sp_rssrv
Analyse des Protocoles
Analyse des Protocoles actifs
Analyse du WinSock2
Analyse des Désinstallateurs
C:\WINDOWS\ISUN040C.EXE
C:\PROGRAM FILES\FICHIERS COMMUNS\ADOBE\SVG VIEWER 3.0\UNINSTALL\WINSTALL.EXE
C:\PROGRAM FILES\GS\UNINSTGS.EXE
C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\UNINSTALL.EXE
C:\PROGRAM FILES\CABRI\DESINST.EXE
C:\WINDOWS\INF\FPXPRESS.INF
C:\PROGRAM FILES\GHOSTGUM\GSVIEW\UNINSTGS.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE
C:\WINDOWS\$NTSERVICEPACKUNINSTALLIDNMITIGATIONAPIS$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\IE7\SPUNINST\SPUNINST.EXE
C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriver.exe
C:\Program Files\Fichiers communs\InstallShield\Driver\7\Intel 32\IDriver.exe
C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\KAVUNINSTALL.EXE
C:\WINDOWS\$NTUNINSTALLKB867282$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB873333$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB873339$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB883939$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885250$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885835$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885836$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885884$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB886185$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB887472$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB888113$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB888302$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890046$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890047$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890175$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890859$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890923$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB891781$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB893086$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB893357$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB893756$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$MSI31UNINSTALL_KB893803V2$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB894391$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896256$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896358$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896422$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896423$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896424$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896428$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896727$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB898458$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB898461$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899587$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899588$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899589$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899591$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB900485$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB900725$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB901017$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB901190$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB901214$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB902400$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB903235$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB904706$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB904942$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB905414$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB905749$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB905915$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB906569$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB908519$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB908531$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB910437$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911280$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911562$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911564$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911927$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB912919$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB912945$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB913446$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB913580$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB914388$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB914389$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB914440$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB915865$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB916595$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917344$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917422$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917734_WMP9$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917953$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB918118$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB918439$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB919007$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920213$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920670$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920683$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920685$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920872$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB921398$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB922582$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB922616$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB922819$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923191$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923414$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923689$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923694$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\GENUINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923980$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924191$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924270$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924496$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924667$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925398_WMP64$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925454$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925486$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925902$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB926239$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB926255$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB926436$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB927779$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB927802$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\IE7UPDATES\KB928090-IE7\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB928255$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB928843$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB929338$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB929399$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\IE7UPDATES\KB929969\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB930178$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB931261$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB931784$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB931836$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB932168$\SPUNINST\SPUNINST.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\LSETUP.EXE
C:\PROGRAM FILES\MIKTEX 2.5\MIKTEX\BIN\COPYSTART.EXE
C:\PROGRAM FILES\MICROSOFT MONEY 2005\MNYCOREFILES\SETUP\UNINST.EXE
C:\WINDOWS\$NTUNINSTALLMSCOMPPACKV1$\SPUNINST\SPUNINST.EXE
C:\PROGRAM FILES\AHEAD\NERO\UNINSTALL\UNNERO.EXE
C:\WINDOWS\$NTSERVICEPACKUNINSTALLNLSDOWNLEVELMAPPING$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$UNINSTALLOCA-X86FRE-ENU$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\system32\SETUPAPI.DLL
C:\PROGRAM FILES\PHOTOFILTRE\UNINST.EXE
C:\WINDOWS\PICASA UNINSTALLER.EXE
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASHUTIL9B.EXE
C:\Program Files\SiSLan\uninst.exe
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\UNINS000.EXE
C:\PROGRAM FILES\SPYWARE TERMINATOR\UNINS000.EXE
Spyware Terminator : C:\PROGRAM FILES\SPYWARE TERMINATOR\UNINS000.EXE
Spyware Terminator : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware Terminator_is1
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMSETSDK.EXE
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\SETUP_WM.EXE
C:\PROGRAM FILES\WINSHELL\UNINS000.EXE
C:\WINDOWS\$NTUNINSTALLWMFDIST11$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLWMP11$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLWUDF01000$\SPUNINST\SPUNINST.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZAUNINST.EXE
C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\ctor.dll
C:\WINDOWS\system32\MSIEXEC.EXE
C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
Analyse du Menu Démarrer
Explorer : C:\Documents and Settings\Hervé et Cécile\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk
SynchronizationManager : C:\Documents and Settings\Hervé et Cécile\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk
Explorer : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk
Explorer : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Outils système\Tâches planifiées.lnk
Acrobat Assistant 7.0 : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acrobat Assistant.lnk
Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spyware Terminator\Spyware Terminator.lnk
Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spyware Terminator\Uninstall Spyware Terminator.lnk
MessengerService : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk
ZoneLabsClient : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZoneAlarm\ZoneAlarm Security.lnk
Analyse du Bureau
PrcRew : C:\Documents and Settings\Hervé et Cécile\Bureau\navilog1\Process.exe
Analyse des Favoris
Analyse des Cookies
Affiliate tracking cookie : C:\Documents and Settings\Hervé et Cécile\cookies\hervé_et_cécile@amazon[2].txt
Affiliate tracking cookie : C:\Documents and Settings\Hervé et Cécile\cookies\hervé_et_cécile@tribalfusion[1].txt
Analyse du Registre
AcroIEHelper : HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
MSDXM : HKCR\CLSID\{8E718888-423F-11D2-876E-00A0C9082467}
MSDXM : C:\WINDOWS\SYSTEM32\MSDXM.OCX
Spybot S&D : HKCR\CLSID\{53707962-6F74-2D53-2644-206D7942484F}
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
Spybot S&D : explorer.exe PID: 1232
Spybot S&D : iexplore.exe PID: 3844
SSJava : HKCR\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
SSJava : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL
SSJava : iexplore.exe PID: 3844
Analyse des Fichiers Connus
Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminatorshield.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminator.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\sptcontmenu.dll
Spyware Terminator : C:\Program Files\Spyware Terminator\sp_rsser.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\unins000.exe
Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\..\Application Data\Spyware Terminator\sp_rsdel.exe
SoundMan : C:\WINDOWS\soundman.exe
MessengerService : C:\Program Files\Messenger\msmsgs.exe
Ctfmon : C:\WINDOWS\system32\ctfmon.exe
PDVDServ : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
SymantecAntivirus : C:\Program Files\NavNT\vptray.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
NeroFilterCheck : C:\WINDOWS\system32\NeroCheck.exe
RemoteControl : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
MSConfig : C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
UpdateMgr : C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
ZoneLabsClient : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
SynchronizationManager : C:\WINDOWS\system32\mobsync.exe
NBJ : C:\Program Files\Ahead\Nero BackItUp\NBJ.exe
MSDXM : C:\WINDOWS\system32\msdxm.ocx
StillImageMonitor : C:\WINDOWS\system32\STIMON.EXE
MSIMED : C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
MSIMED : C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
GrpConv : C:\WINDOWS\system32\grpconv.exe
SiSPower : C:\WINDOWS\system32\SiSPower.dll
Wextract : C:\WINDOWS\system32\advpack.dll
KernelFaultCheck : C:\WINDOWS\system32\dumprep.exe
Explorer : C:\WINDOWS\explorer.exe
PowerProfile : C:\WINDOWS\system32\powrprof.dll
BluetoothControlPanel : C:\WINDOWS\system32\bthprops.cpl
SSJava : C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
SSJava : C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
SSJava : C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
Shdocvw : C:\WINDOWS\system32\shdocvw.dll
PHIME2002ASync : C:\WINDOWS\system32\dllcache\tintsetp.exe
MSPY2002 : C:\WINDOWS\system32\dllcache\imscinst.exe
PHIME2002A : C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
Acrobat Assistant 7.0 : C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
LaunchApp : C:\WINDOWS\ALAUNCH.EXE
OpwareSE2 : C:\Program Files\ScanSoft\OMNIPAGESE2.0\OPWARESE2.EXE
SpybotSDTeaTimer : C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Verclsid : C:\WINDOWS\system32\verclsid.exe
Systray : C:\WINDOWS\system32\systray.exe
comctl32 : C:\WINDOWS\WinSxS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.2180_X-WW_A84F1FF9\comctl32.dll
Prépare un Scan en profondeur
Analyse Profondes des Fichiers
PrcRew : C:\Documents and Settings\Hervé et Cécile\Bureau\navilog1\Process.exe
Acrobat Assistant 7.0 : C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
UpdateMgr : C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
NBJ : C:\Program Files\Ahead\Nero BackItUp\NBJ.exe
PDVDServ : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
RemoteControl : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
SSJava : C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
SSJava : C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
SunJavaUpdateSched : C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
SSJava : C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
MessengerService : C:\Program Files\Messenger\msmsgs.exe
SymantecAntivirus : C:\Program Files\NavNT\vptray.exe
OpwareSE2 : C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
SpybotSDTeaTimer : C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\sptcontmenu.dll
Spyware Terminator : C:\Program Files\Spyware Terminator\SpywareTerminator.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminatorshield.Exe
Spyware Terminator : C:\Program Files\Spyware Terminator\sp_rsser.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\unins000.exe
ZoneLabsClient : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
LaunchApp : C:\WINDOWS\Alaunch.exe
Explorer : C:\WINDOWS\explorer.exe
SoundMan : C:\WINDOWS\SOUNDMAN.EXE
MSIMED : C:\WINDOWS\ime\imjp8_1\imjpmig.exe
MSIMED : C:\WINDOWS\ime\imkr6_1\imekrmig.exe
MSConfig : C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
Wextract : C:\WINDOWS\system32\advpack.dll
BluetoothControlPanel : C:\WINDOWS\system32\bthprops.cpl
Ctfmon : C:\WINDOWS\system32\ctfmon.exe
MSPY2002 : C:\WINDOWS\system32\dllcache\imscinst.exe
PHIME2002ASync : C:\WINDOWS\system32\dllcache\tintsetp.exe
KernelFaultCheck : C:\WINDOWS\system32\dumprep.exe
GrpConv : C:\WINDOWS\system32\grpconv.exe
PHIME2002A : C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
SynchronizationManager : C:\WINDOWS\system32\mobsync.exe
MSDXM : C:\WINDOWS\system32\msdxm.ocx
NeroFilterCheck : C:\WINDOWS\system32\NeroCheck.exe
PowerProfile : C:\WINDOWS\system32\powrprof.dll
PrcRew : C:\WINDOWS\system32\Process.exe
Shdocvw : C:\WINDOWS\system32\shdocvw.dll
SiSPower : C:\WINDOWS\system32\SiSPower.dll
StillImageMonitor : C:\WINDOWS\system32\stimon.exe
Verclsid : C:\WINDOWS\system32\verclsid.exe
comctl32 : C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
Terminé

Sommaire du Scan:

Temps total du Scan : 1712,30 s
Eléments Scannés : 125 452
Eléments Identifiés : 94
Eléments Ignorés : 0

Eléments Critiques : 1




Si je clique sur "Voir rapport du sytème", il me mets ceci dans le bloc-note :


Spyware Terminator Version: 1.8.7.991
Start time: 26/04/2007 18:36:27
System: Windows XP
User: Limited

Processes Scan
C:\WINDOWS\SYSTEM32\WINLOGON.EXE [Microsoft Corporation] C:\WINDOWS\SYSTEM32\NAVLOGON.DLL [Empty],
vsmon.exe [file not found]
C:\WINDOWS\EXPLORER.EXE [Microsoft Corporation] C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPHOOKSE2.DLL [ScanSoft, Inc.], C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\SHELLEXECUTEHOOK.DLL [Anti-Malware Development a.s.], C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\ACROIEHELPER.DLL [Adobe Systems Incorporated], C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [Safer Networking Limited], C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\PDFSHELL.DLL [Adobe Systems, Inc.],
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE [Microsoft Corporation] C:\WINDOWS\SYSTEM32\PDFPORTS.DLL [Adobe Systems Incorporated.], C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ADISTRES.FRA [Adobe Systems Incorporated.],
C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE [Acer Inc.] ILIBN.DLL [Acer Inc.], C:\PROGRAM FILES\ACER\ACER ECONSOLE\LOG4CXX.DLL [Empty], XDB.DLL [Acer Inc.], C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIACLASS.DLL [Acer], C:\PROGRAM FILES\ACER\ACER ECONSOLE\EXTRESOURCE.DLL [acer], XDAOUTIL.DLL [Acer Inc.], C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIAUTIL.DLL [Empty],
C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\MEMCHECK.EXE [Acer Inc.] C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\MSCORLIB\1.0.5000.0__B77A5C561934E089_18450B15\MSCORLIB.DLL [Empty], C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\1.0.5000.0__B77A5C561934E089_7E40A71C\SYSTEM.DLL [Empty], ACER.EMPOWERING.SHARED.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\ACERMEMUSAGECHECKSERVINTERFACE.DLL [Empty],
guard.exe [file not found]
C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLCAPSVC.EXE [Empty] CLCAPENGINE.DLL [Empty], C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\PCMRREC4.DLL [CyberLink Corp.], MSDMO.DLL [Empty], CLCAPSVCPS.DLL [Empty],
C:\PROGRAM FILES\ACER TV-FM\KERNEL\CLML_NTSERVICE\CLMLSERVER.EXE [Cyberlink]
C:\PROGRAM FILES\NAVNT\DEFWATCH.EXE [Symantec Corporation]
C:\PROGRAM FILES\NAVNT\RTVSCAN.EXE [Symantec Corporation] DEC2.DLL [Symantec Corporation], DEC2ARJ.DLL [Symantec Corporation], DEC2ID.DLL [Symantec Corporation], DEC2LHA.DLL [Symantec Corporation], SYMLHA.DLL [Symantec Corporation], DEC2LZ.DLL [Symantec Corporation], DEC2MIME.DLL [Symantec Corporation], DEC2ZIP.DLL [Symantec Corporation], DEC2AMG.DLL [Symantec Corporation], C:\PROGRAM FILES\NAVNT\SYMAMG32.DLL [Symantec Corporation with portions by FUJITSU DEVICES INC.], DEC2UUE.DLL [Symantec Corporation], DEC2SS.DLL [Symantec Corporation], DEC2RTF.DLL [Symantec Corporation], C:\WINDOWS\SYSTEM32\CBA.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\MSGSYS.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\NTS.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\PDS.DLL [Intel Corporation], NAVLU.DLL [Symantec Corporation], C:\PROGRAM FILES\NAVNT\NAVNTUTL.DLL [Symantec/Peter Norton Group], I2LDVP3.DLL [Symantec Corporation], C:\PROGRAM FILES\NAVNT\NAVAPI32.DLL [Symantec Corp.], NAVEX32A.DLL [Symantec Corporation], NAVENG32.DLL [Symantec Corporation], NAVAP32.DLL [Symantec Corporation], VPMSECE.DLL [Symantec Corporation], C:\WINDOWS\SYSTEM32\AMSLIB.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\LOC32VC0.DLL [Intel],
C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLSCHED.EXE [Empty] CLCAPSVCPS.DLL, CLSCHMGR.DLL [Empty], CLSCHEDPS.DLL [Empty],
C:\WINDOWS\SYSTEM32\MSGSYS.EXE [Intel Corporation] NTS.DLL, CBA.DLL, MSGSYS.DLL, PDS.DLL,
C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE [Cyberlink Corp.] C:\PROGRAM FILES\CYBERLINK\POWERDVD\CLRCENGINE2.DLL [CyberLink Corp.], OPHOOKSE2.DLL,
C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERAGENT.EXE [Acer Inc.] C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\IT41.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\IMAGEFILE.DLL [Empty], OPHOOKSE2.DLL,
C:\WINDOWS\SOUNDMAN.EXE [Realtek Semiconductor Corp.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\JUSCHED.EXE [Sun Microsystems, Inc.]
C:\WINDOWS\SYSTEM32\SYSMONITOR.EXE [Empty] MSCORLIB.DLL, SYSTEM.WINDOWS.FORMS.DLL [Empty], SYSTEM.DLL, SYSTEM.DRAWING.DLL [Empty], OPHOOKSE2.DLL,
C:\PROGRAM FILES\ACER\ACER EMODE MANAGEMENT\ASPIRESERVICE.EXE [Acer Inc.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASYNC.EXE [Acer Inc.] ILIBN.DLL, XDB.DLL, MEDIACLASS.DLL, EXTRESOURCE.DLL, XDAOUTIL.DLL, MEDIAUTIL.DLL, OPHOOKSE2.DLL,
C:\PROGRAM FILES\ACER TV-FM\PCMSERVICE.EXE [CyberLink Corp.] OPHOOKSE2.DLL, CLRCENGINE3.DLL [CyberLink Corp.], C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLCAPX.DLL [Cyberlink], CLAUMIXER.DLL [CyberLink Corp.], CLSCHMGR.DLL, CLCAPSVCPS.DLL, CLCAPENGINE.DLL, PCMRREC4.DLL, MSDMO.DLL, CLSCHEDPS.DLL,
C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE [ScanSoft, Inc.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\NAVNT\VPTRAY.EXE [Symantec Corporation] OPHOOKSE2.DLL, CLIPROXY.DLL [Symantec Corporation], NAVNTUTL.DLL, CLISCAN.DLL [Symantec Corporation],
C:\PROGRAM FILES\PICASA\PICASAMEDIADETECTOR.EXE [Empty] OPHOOKSE2.DLL,
C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE [Anti-Malware Development a.s.] ENGINE.DLL [Anti-Malware Development a.s.], OPHOOKSE2.DLL,
zlclient.exe [file not found]
C:\WINDOWS\SYSTEM32\CTFMON.EXE [Microsoft Corporation] OPHOOKSE2.DLL,
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE [Microsoft Corporation] OPHOOKSE2.DLL,
C:\ACER\EMPOWERING TECHNOLOGY\ACER.EMPOWERING.FRAMEWORK.LAUNCHER.EXE [Acer Inc.] MSCORLIB.DLL, OPHOOKSE2.DLL, C:\ACER\EMPOWERING TECHNOLOGY\LOG4NET.DLL [The Apache Software Foundation], SYSTEM.DLL, C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.XML\1.0.5000.0__B77A5C561934E089_7ECD01E6\SYSTEM.XML.DLL [Empty], ACER.EMPOWERING.SHARED.DLL [Acer Inc.], SYSTEM.WINDOWS.FORMS.DLL, ACER.EMPOWERING.FRAMEWORK.PRESENTER.DLL [Acer Inc.], SYSTEM.DRAWING.DLL, ACER.EMPOWERING.FRAMEWORK.LAUNCHBARVIEW.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\ACER.EMPOWERING.WINDOWS.FORMS.DLL [acer inc.], ACER.EMPOWERING.FRAMEWORK.HOST.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\ACER.EMPOWERING.FRAMEWORK.PASSWORDSETTING.DLL [Empty], ACER.EMPOWERING.FRAMEWORK.INTERFACE.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\ECONSOLE\ECONSOLEUI.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\EMODE\EMODEUI.DLL [Empty], ACER.EMPOWERING.EPERFORMANCE.PLUGIN.DLL [Acer Inc.], VIEWS.DLL [Acer Inc.], PRESENTERS.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\WIDGET.DLL [Empty], ACER.EMPOWERING.SHARED.PATTERNS.DLL [Acer Inc.], MODELS.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\ACER.EMPOWERING.EPERFORMANCE.EPERFORMANCELIBRARY.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERECOVERYUI.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\FR\ACER.EMPOWERING.FRAMEWORK.LAUNCHBARVIEW.RESOURCES.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\FR\ERECOVERYUI.RESOURCES.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\FR\ACER.EMPOWERING.EPERFORMANCE.PLUGIN.RESOURCES.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\FR\VIEWS.RESOURCES.DLL [Empty],
C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\ZDWLAN.EXE [X-Micro Technology Corp.] C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\DOT1X_DLL.DLL [Empty], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\W32N55.DLL [Printing Communications Assoc., Inc. (PCAUSA)], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\SSLEAY32.DLL [Empty], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\LIBEAY32.DLL [Empty], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\ZDWLAN.DLL [Empty], OPHOOKSE2.DLL,
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ACROTRAY.EXE [Adobe Systems Inc.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE [Microsoft Corporation] OPHOOKSE2.DLL, ACROIEHELPER.DLL, SDHelper.dll, C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL [Sun Microsystems, Inc.],
C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATOR.EXE [Crawler.com] OPHOOKSE2.DLL,
C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE [Crawler.com] OPHOOKSE2.DLL,
C:\PROGRAM FILES\SPYWARE TERMINATOR\SP_RSSER.EXE [Crawler.com]

Startup Scan

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"CTFMON.EXE" = "C:\WINDOWS\SYSTEM32\CTFMON.EXE" [ Microsoft Corporation ]
"MSMSGS" = "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" [ Microsoft Corporation ]
"MoneyAgent" = "C:\PROGRAM FILES\MICROSOFT MONEY\SYSTEM\MNYEXPR.EXE" [ file not found ]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"LaunchApp" = "C:\WINDOWS\ALAUNCH.EXE" [ Acer Inc. ]
"ntiMUI" = "C:\PROGRAM FILES\NEWTECH INFOSYSTEMS\NTI CD & DVD-MAKER 7\NTIMUI.EXE" [ Empty ]
"RemoteControl" = "C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE" [ Cyberlink Corp. ]
"IMJPMIG8.1" = "C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE" [ Microsoft Corporation ]
"MSPY2002" = "C:\WINDOWS\SYSTEM32\IME\PINTLGNT\IMSCINST.EXE" [ Empty ]
"PHIME2002ASync" = "C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE" [ Microsoft Corporation ]
"PHIME2002A" = "C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE" [ Microsoft Corporation ]
"SiSPower" = "C:\WINDOWS\system32\SISPOWER.DLL" [ Silicon Integrated Systems Corporation ]
"SoundMan" = "C:\WINDOWS\SOUNDMAN.EXE" [ Realtek Semiconductor Corp. ]
"SunJavaUpdateSched" = "C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\JUSCHED.EXE" [ Sun Microsystems, Inc. ]
"Acer Empowering Technology Monitor" = "C:\WINDOWS\SYSTEM32\SYSMONITOR.EXE" [ Empty ]
"AspireService" = "C:\PROGRAM FILES\ACER\ACER EMODE MANAGEMENT\ASPIRESERVICE.EXE" [ Acer Inc. ]
"MediaSync" = "C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASYNC.EXE" [ Acer Inc. ]
"PCMService" = "C:\PROGRAM FILES\ACER TV-FM\PCMSERVICE.EXE" [ CyberLink Corp. ]
"eRecoveryService" = "C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERAGENT.EXE" [ Acer Inc. ]
"NeroCheck" = "C:\WINDOWS\SYSTEM32\NEROCHECK.EXE" [ Ahead Software Gmbh ]
"OpwareSE2" = "C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE" [ ScanSoft, Inc. ]
"vptray" = "C:\PROGRAM FILES\NAVNT\VPTRAY.EXE" [ Symantec Corporation ]
"LifeScape Media Detector" = "C:\PROGRAM FILES\PICASA\PICASAMEDIADETECTOR.EXE" [ Empty ]
"!AVG Anti-Spyware" = "C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE" [ Anti-Malware Development a.s. ]
"ZoneAlarm Client" = "C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE" [ Zone Labs, LLC ]
"SpywareTerminator" = "C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE" [ Crawler.com ]

BHO Scan
Adobe PDF Reader Link Helper {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [file not found]
{53707962-6F74-2D53-2644-206D7942484F} C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [Safer Networking Limited]
SSVHelper Class {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL [Sun Microsystems, Inc.]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [file not found]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} [file not found]
{e2e2dd38-d088-4134-82b7-f2ba38496583} [file not found]
{FB5F1910-F110-11d2-BB9E-00C04F795683} [file not found]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
{42071714-76d4-11d1-8b24-00a0c9068ff3} = Extension Affichage Panorama du Panneau de configuration (deskpan.dll) [file not found]
{764BF0E1-F219-11ce-972D-00AA00A14F56} = Extensions de l'environnement de compression de fichiers () [file not found]
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} = Menu contextuel de cryptage () [file not found]
{88895560-9AA2-1069-930E-00AA0030EBC8} = Extension icône HyperTerminal (C:\WINDOWS\SYSTEM32\HTICONS.DLL) [Hilgraeve, Inc.]
{0DF44EAA-FF21-4412-828E-260A8728E7F1} = Barre des tâches et menu Démarrer () [file not found]
{30D02401-6A81-11d0-8274-00C04FD5AE38} = IE Search Band (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} = Shell DocObject Viewer (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FBF23B40-E3F0-101B-8488-00AA003E56F8} = InternetShortcut (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{3C374A40-BAE4-11CF-BF7D-00AA006946EE} = Microsoft Url History Service (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FF393560-C2A7-11CF-BFF4-444553540000} = History (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{7BD29E00-76C1-11CF-9DD0-00A0C9034933} = Temporary Internet Files (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{7BD29E01-76C1-11CF-9DD0-00A0C9034933} = Temporary Internet Files (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{CFBFAE00-17A6-11D0-99CB-00C04FD64497} = Microsoft Url Search Hook (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{3DC7A020-0ACD-11CF-A9BB-00AA004AE837} = The Internet (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{871C5380-42A0-1069-A2EA-08002B30309D} = Internet Name Space (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} = Autoplay for SlideShow (C:\WINDOWS\SYSTEM32\SHIMGVW.DLL) [Microsoft Corporation]
{7A9D77BD-5403-11d2-8785-2E0420524153} = Comptes d'utilisateurs () [file not found]
{21569614-B795-46b1-85F4-E737A8DC09AD} = Shell Search Band (C:\WINDOWS\SYSTEM32\BROWSEUI.DLL) [Microsoft Corporation]
{00020D75-0000-0000-C000-000000000046} = Microsoft Office Outlook Desktop Icon Handler (C:\Program Files\Microsoft Office\OFFICE11\MLSHEXT.DLL) [Microsoft Corporation]
{0006F045-0000-0000-C000-000000000046} = Microsoft Office Outlook Custom Icon Handler (C:\Program Files\Microsoft Office\OFFICE11\OLKFSTUB.DLL) [Microsoft Corporation]
{42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler (C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE11\MSOHEV.DLL) [Microsoft Corporation]
{07C45BB1-4A8C-4642-A1F5-237E7215FF66} = IE Microsoft BrowserBand (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{1C1EDB47-CE22-4bbb-B608-77B48F83C823} = IE Fade Task (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{205D7A97-F16D-4691-86EF-F3075DCCA57D} = IE Menu Desk Bar (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{3028902F-6374-48b2-8DC6-9725E775B926} = IE AutoComplete (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{43886CD5-6529-41c4-A707-7B3C92C05E68} = IE Navigation Bar (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{44C76ECD-F7FA-411c-9929-1B77BA77F524} = IE Menu Site (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{4B78D326-D922-44f9-AF2A-07805C2A3560} = IE Menu Band (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{6038EF75-ABFC-4e59-AB6F-12D397F6568D} = IE Microsoft History AutoComplete List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} = IE Tracking Shell Menu (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{6CF48EF8-44CD-45d2-8832-A16EA016311B} = IE IShellFolderBand (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{73CFD649-CD48-4fd8-A272-2070EA56526B} = IE BandProxy (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} = IE MRU AutoComplete List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} = IE RSS Feeder Folder (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{9D958C62-3954-4b44-8FAB-C4670C1DB4C2} = IE Microsoft Shell Folder AutoComplete List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{B31C5FAE-961F-415b-BAF0-E697A5178B94} = IE Microsoft Multiple AutoComplete List Container (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{BC476F4C-D9D7-4100-8D4E-E043F6DEC409} = Microsoft Browser Architecture (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} = IE Shell Rebar BandSite (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{E6EE9AAC-F76B-4947-8260-A9F136138E11} = IE Shell Band Site Menu (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{F2CF5485-4E02-4f68-819C-B92DE9277049} = &Links (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} = IE Registry Tree Options Utility (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} = IE User Assist (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FDE7673D-2E19-4145-8376-BBD58C4BC7BA} = IE Custom MRU AutoCompleted List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{BDA77241-42F6-11d0-85E2-00AA001FE28C} = LDVP Shell Extensions (C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\SSC\VPSHELL2.DLL) [Symantec Corporation]
{640167b4-59b0-47a6-b335-a6b3c0695aea} = Portable Media Devices (C:\WINDOWS\SYSTEM32\AUDIODEV.DLL) [Microsoft Corporation]
{35786D3C-B075-49b9-88DD-029876E11C01} = Portable Devices (C:\WINDOWS\SYSTEM32\WPDSHEXT.DLL) [Microsoft Corporation]
{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} = Portable Devices Menu (C:\WINDOWS\SYSTEM32\WPDSHEXT.DLL) [Microsoft Corporation]
{AB77609F-2178-4E6F-9C4B-44AC179D937A} = a-squared Context Menu Shell Extension (C:\PROGRA~1\A-SQUA~1\A2CONT~1.DLL) [file not found]
{D9872D13-7651-4471-9EEE-F0A00218BEBB} = Multiscan (C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLAVSCAN.DLL) [Zone Labs, LLC]
{BD88A479-9623-4897-8546-BC62B9628F44} = SPTHandler (C:\PROGRAM FILES\SPYWARE TERMINATOR\SPTCONTMENU.DLL) [Crawler.com]

Winlogon Notify Scan
NavLogon = C:\WINDOWS\system32\NavLogon.dll (C:\WINDOWS\SYSTEM32\NAVLOGON.DLL) [Empty]
WgaLogon = WgaLogon.dll (C:\WINDOWS\system32\WGALOGON.DLL) [Microsoft Corporation]

Services Scan
"Acer Media Server" = C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE [Acer Inc.]
"AcerMemUsageCheckService" = C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\MEMCHECK.EXE [Acer Inc.]
"Afc" = C:\WINDOWS\SYSTEM32\DRIVERS\AFC.SYS [Arcsoft, Inc.]
"ALCXWDM" = C:\WINDOWS\SYSTEM32\DRIVERS\ALCXWDM.SYS [Realtek Semiconductor Corp.]
"AVG Anti-Spyware Driver" = C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.SYS [Empty]
"AVG Anti-Spyware Guard" = C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.EXE [Anti-Malware Development a.s.]
"AvgAsCln" = C:\WINDOWS\SYSTEM32\DRIVERS\AVGASCLN.SYS [GRISOFT, s.r.o.]
"CLCapSvc" = C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLCAPSVC.EXE [Empty]
"CLSched" = C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLSCHED.EXE [Empty]
"CyberLink Media Library Service" = C:\PROGRAM FILES\ACER TV-FM\KERNEL\CLML_NTSERVICE\CLMLSERVER.EXE [Cyberlink]
"DefWatch" = C:\PROGRAM FILES\NAVNT\DEFWATCH.EXE [Symantec Corporation]
"dmboot" = C:\WINDOWS\SYSTEM32\DRIVERS\DMBOOT.SYS [Microsoft Corp., Veritas Software]
"dmio" = C:\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS [Microsoft Corp., Veritas Software]
"dmload" = C:\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS [Microsoft Corp., Veritas Software.]
"IDriverT" = C:\PROGRAM FILES\FICHIERS COMMUNS\INSTALLSHIELD\DRIVER\1050\INTEL 32\IDRIVERT.EXE [Macrovision Corporation]
"int15.sys" = C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\INT15.SYS [Empty]
"NAVAP" = C:\PROGRAM FILES\NAVNT\NAVAP.SYS [Empty]
"NAVAPEL" = C:\PROGRAM FILES\NAVNT\NAVAPEL.SYS [Empty]
"NAVENG" = C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20070418.024\NAVENG.SYS [Symantec Corporation]
"NAVEX15" = C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20070418.024\NAVEX15.SYS [Symantec Corporation]
"Norton AntiVirus Server" = C:\PROGRAM FILES\NAVNT\RTVSCAN.EXE [Symantec Corporation]
"NTIDrvr" = C:\WINDOWS\SYSTEM32\DRIVERS\NTIDRVR.SYS [NewTech Infosystems, Inc.]
"Ptilink" = C:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS [Parallel Technologies, Inc.]
"RTL8023xp" = C:\WINDOWS\SYSTEM32\DRIVERS\RTLNICXP.SYS [Realtek Semiconductor Corporation ]
"Secdrv" = C:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS [Empty]
"SiS315" = C:\WINDOWS\SYSTEM32\DRIVERS\SISGRP.SYS [Silicon Integrated Systems Corporation]
"SiSkp" = C:\WINDOWS\SYSTEM32\DRIVERS\SRVKP.SYS [Silicon Integrated Systems Corporation]
"SISNIC" = C:\WINDOWS\SYSTEM32\DRIVERS\SISNIC.SYS [SiS Corporation]
"sp_rsdrv2" = C:\WINDOWS\SYSTEM32\DRIVERS\SP_RSDRV2.SYS [Empty]
"sp_rssrv" = C:\PROGRAM FILES\SPYWARE TERMINATOR\SP_RSSER.EXE [Crawler.com]
"srescan" = C:\WINDOWS\SYSTEM32\ZONELABS\SRESCAN.SYS [Zone Labs, LLC]
"SymEvent" = C:\PROGRAM FILES\SYMANTEC\SYMEVENT.SYS [Symantec Corporation]
"vsdatant" = C:\WINDOWS\SYSTEM32\VSDATANT.SYS [Zone Labs, LLC]
"vsmon" = C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE [Zone Labs, LLC]
"ZD1211BU(ZyDAS)" = C:\WINDOWS\SYSTEM32\DRIVERS\ZD1211BU.SYS [ZyDAS Technology Corporation]
"ZD1211U(ZyDAS)" = C:\WINDOWS\SYSTEM32\DRIVERS\ZD1211U.SYS [ZyDAS Technology Corporation]
"ZDPSp50" = C:\WINDOWS\SYSTEM32\DRIVERS\ZDPSP50.SYS [Printing Communications Assoc., Inc. (PCAUSA)]

Protocol Filters Scan
Class Install Handler = {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} (C:\WINDOWS\SYSTEM32\URLMON.DLL) [Microsoft Corporation]
text/xml = {807553E5-5146-11D5-A672-00B0D022E945} (C:\PROGRAM FILES\FICHIERS COMMUNS\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL) [Microsoft Corporation]

Hosts Scan
LOCALHOST mapping = 1

IE Scan
IERESET.INF missing Signature="$CHICAGO$"
IERESET.INF missing AdvancedINF=2.5,"You need a new version of advpack.dll"
IERESET.INF missing AddReg=RestoreHomePage.reg
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\Main","Start Page",0,%START_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main","Default_Page_URL",0,%START_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main","Default_Search_URL",0,%SEARCH_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main","Search Page",0,%SEARCH_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","1",0,"www.%s.com"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","2",0,"www.%s.org"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","3",0,"www.%s.net"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","4",0,"www.%s.edu"
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\Main","Search Page",0,%SEARCH_PAGE_URL%
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\SearchUrl","Provider",0,""
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Search","SearchAssistant",0,"http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Search","CustomizeSearch",0,"http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
IERESET.INF missing HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\SafeSites",%SAFESITE_VALUE%,0,"http://ie.search.msn.com/*"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","5"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","6"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","7"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","8"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","9"
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\Main","AutoSearch"
IERESET.INF missing SEARCH_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
IERESET.INF missing AddReg=RestoreBrowserSettings.reg
IERESET.INF missing DelReg=DeleteTemplates.reg or DelReg=DeleteTemplates.reg, DeleteAutosearch.reg
IERESET.INF missing START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=7&ar=msnhome" or START_PAGE_URL="http://www.msn.com"
IERESET.INF missing SAFESITE_VALUE="http://home.microsoft.com/" or SAFESITE_VALUE="ie.search.msn.com"
IERESET.INF missing MS_START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=7&ar=msnhome" or MS_START_PAGE_URL="http://www.msn.com"
NavigationFailure = res://ieframe.dll/navcancl.htm HIJACK WARNING!
DesktopItemNavigationFailure = res://ieframe.dll/navcancl.htm HIJACK WARNING!
NavigationCanceled = res://ieframe.dll/navcancl.htm HIJACK WARNING!
OfflineInformation = res://ieframe.dll/offcancl.htm HIJACK WARNING!
PostNotCached = res://ieframe.dll/repost.htm HIJACK WARNING!
NoAdd-ons = res://ieframe.dll/noaddon.htm HIJACK WARNING!
NoAdd-onsInfo = res://ieframe.dll/noaddoninfo.htm HIJACK WARNING!
SecurityRisk = res://ieframe.dll/securityatrisk.htm HIJACK WARNING!
Tabs = res://ieframe.dll/tabswelcome.htm HIJACK WARNING!

A +,

Hervé.

Merci pour ton aide.
A bientôt,
Hervé.

Salut Regis,
Merci pour ton aide.
J'imagine que je peux classer mon problème comme RESULU ma

Pardon... message coupé en plein milieu !
Je disais : <<RESOLU>> ?
A +,
Hervé.

Salut,

C'était exactement les deux rapports. Il n'y avait rien d'autre.
Je t'ai relancé un scan pour bien vérifier que je n'avais pas tronqué les rapports.
Voici les deux nouveaux rapports :

Le premier (onglet en haut à droite : rapport de scan) :


Scan en Progrès (complet)
Heure de départ: 27/04/2007 20:01:29
Database: 1.0.694.449

Analyse des Processus
PowerProfile : C:\WINDOWS\SYSTEM32\POWRPROF.DLL
Wextract : C:\WINDOWS\SYSTEM32\ADVPACK.DLL
Shdocvw : C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
OpwareSE2 : C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE
Analyse des Démarrages Automatiques
Ctfmon : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run CTFMON.EXE
Ctfmon : C:\WINDOWS\SYSTEM32\CTFMON.EXE
MessengerService : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MSMSGS
MessengerService : C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
Invalid Startup Items : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run MoneyAgent="C:\Program Files\Microsoft Money\System\mnyexpr.exe"
LaunchApp : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run LaunchApp
LaunchApp : C:\WINDOWS\ALAUNCH.EXE
ntiMUI : C:\PROGRAM FILES\NEWTECH INFOSYSTEMS\NTI CD & DVD-MAKER 7\NTIMUI.EXE
PDVDServ : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RemoteControl
PDVDServ : C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
RemoteControl : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RemoteControl
RemoteControl : C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
MSIMED : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run IMJPMIG8.1
MSIMED : C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE
MSPY2002 : C:\WINDOWS\SYSTEM32\IME\PINTLGNT\IMSCINST.EXE
PHIME2002A : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PHIME2002ASync
PHIME2002A : C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE
PHIME2002A : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PHIME2002A
SiSPower : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SiSPower
SiSPower : C:\WINDOWS\system32\SISPOWER.DLL
SoundMan : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SoundMan
SoundMan : C:\WINDOWS\SOUNDMAN.EXE
SunJavaUpdateSched : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched
SunJavaUpdateSched : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\JUSCHED.EXE
Acer Empowering Technology Monitor : C:\WINDOWS\SYSTEM32\SYSMONITOR.EXE
AspireService : C:\PROGRAM FILES\ACER\ACER EMODE MANAGEMENT\ASPIRESERVICE.EXE
MediaSync : C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASYNC.EXE
PCMService : C:\PROGRAM FILES\ACER TV-FM\PCMSERVICE.EXE
eRecoveryService : C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERAGENT.EXE
NeroFilterCheck : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run NeroCheck
NeroFilterCheck : C:\WINDOWS\SYSTEM32\NEROCHECK.EXE
OpwareSE2 : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run OpwareSE2
OpwareSE2 : C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE
SymantecAntivirus : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run vptray
SymantecAntivirus : C:\PROGRAM FILES\NAVNT\VPTRAY.EXE
LifeScape Media Detector : C:\PROGRAM FILES\PICASA\PICASAMEDIADETECTOR.EXE
!AVG Anti-Spyware : C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
ZoneLabsClient : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ZoneAlarm Client
ZoneLabsClient : C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
Spyware Terminator : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SpywareTerminator
Spyware Terminator : C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
Explorer : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Shell
Explorer : C:\WINDOWS\EXPLORER.EXE
Analyse des barres d'Outils
Shdocvw : HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}
Shdocvw : C:\WINDOWS\SYSTEM32\SHDOCVW.DLL
Shdocvw : explorer.exe PID: 1220
Shdocvw : msimn.exe PID: 4016
Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E61-B078-11D0-89E4-00C04FC9E26E}
Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E62-B078-11D0-89E4-00C04FC9E26E}
Shdocvw : HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}
Analyse de Browser Helper Objects
AcroIEHelper : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
Spybot S&D : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
SSJava : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
SSJava : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL
IE Explorer Bars
IE Extensions
Analyse des Services
Spyware Terminator : HKLM\SYSTEM\CurrentControlSet\Services\sp_rssrv
Analyse des Protocoles
Analyse des Protocoles actifs
Analyse du WinSock2
Analyse des Désinstallateurs
C:\WINDOWS\ISUN040C.EXE
C:\PROGRAM FILES\FICHIERS COMMUNS\ADOBE\SVG VIEWER 3.0\UNINSTALL\WINSTALL.EXE
C:\PROGRAM FILES\GS\UNINSTGS.EXE
C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\UNINSTALL.EXE
C:\PROGRAM FILES\CABRI\DESINST.EXE
C:\WINDOWS\INF\FPXPRESS.INF
C:\PROGRAM FILES\GHOSTGUM\GSVIEW\UNINSTGS.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE
C:\WINDOWS\$NTSERVICEPACKUNINSTALLIDNMITIGATIONAPIS$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\IE7\SPUNINST\SPUNINST.EXE
C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriver.exe
C:\Program Files\Fichiers communs\InstallShield\Driver\7\Intel 32\IDriver.exe
C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\KAVUNINSTALL.EXE
C:\WINDOWS\$NTUNINSTALLKB867282$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB873333$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB873339$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB883939$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885250$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885835$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885836$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB885884$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB886185$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB887472$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB888113$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB888302$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890046$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890047$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890175$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890859$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB890923$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB891781$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB893086$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB893357$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB893756$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$MSI31UNINSTALL_KB893803V2$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB894391$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896256$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896358$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896422$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896423$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896424$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896428$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB896727$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB898458$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB898461$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899587$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899588$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899589$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB899591$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB900485$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB900725$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB901017$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB901190$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB901214$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB902400$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB903235$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB904706$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB904942$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB905414$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB905749$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB905915$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB906569$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB908519$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB908531$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB910437$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911280$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911562$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911564$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB911927$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB912919$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB912945$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB913446$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB913580$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB914388$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB914389$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB914440$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB915865$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB916595$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917344$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917422$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917734_WMP9$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB917953$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB918118$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB918439$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB919007$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920213$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920670$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920683$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920685$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB920872$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB921398$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB922582$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB922616$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB922819$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923191$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923414$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923689$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923694$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\GENUINST.EXE
C:\WINDOWS\$NTUNINSTALLKB923980$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924191$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924270$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924496$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB924667$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925398_WMP64$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925454$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925486$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB925902$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB926239$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB926255$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB926436$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB927779$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB927802$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\IE7UPDATES\KB928090-IE7\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB928255$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB928843$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB929338$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB929399$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\IE7UPDATES\KB929969\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB930178$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB931261$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB931784$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB931836$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLKB932168$\SPUNINST\SPUNINST.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\LSETUP.EXE
C:\PROGRAM FILES\MIKTEX 2.5\MIKTEX\BIN\COPYSTART.EXE
C:\PROGRAM FILES\MICROSOFT MONEY 2005\MNYCOREFILES\SETUP\UNINST.EXE
C:\WINDOWS\$NTUNINSTALLMSCOMPPACKV1$\SPUNINST\SPUNINST.EXE
C:\PROGRAM FILES\AHEAD\NERO\UNINSTALL\UNNERO.EXE
C:\WINDOWS\$NTSERVICEPACKUNINSTALLNLSDOWNLEVELMAPPING$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$UNINSTALLOCA-X86FRE-ENU$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\system32\SETUPAPI.DLL
C:\PROGRAM FILES\PHOTOFILTRE\UNINST.EXE
C:\WINDOWS\PICASA UNINSTALLER.EXE
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASHUTIL9B.EXE
C:\Program Files\SiSLan\uninst.exe
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\UNINS000.EXE
C:\PROGRAM FILES\SPYWARE TERMINATOR\UNINS000.EXE
Spyware Terminator : C:\PROGRAM FILES\SPYWARE TERMINATOR\UNINS000.EXE
Spyware Terminator : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spyware Terminator_is1
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMSETSDK.EXE
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\SETUP_WM.EXE
C:\PROGRAM FILES\WINSHELL\UNINS000.EXE
C:\WINDOWS\$NTUNINSTALLWMFDIST11$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLWMP11$\SPUNINST\SPUNINST.EXE
C:\WINDOWS\$NTUNINSTALLWUDF01000$\SPUNINST\SPUNINST.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZAUNINST.EXE
C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\ctor.dll
C:\WINDOWS\system32\MSIEXEC.EXE
C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
Analyse du Menu Démarrer
Explorer : C:\Documents and Settings\Hervé et Cécile\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk
SynchronizationManager : C:\Documents and Settings\Hervé et Cécile\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk
Explorer : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\Connexions réseau.lnk
Explorer : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Outils système\Tâches planifiées.lnk
Acrobat Assistant 7.0 : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acrobat Assistant.lnk
Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spyware Terminator\Spyware Terminator.lnk
Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spyware Terminator\Uninstall Spyware Terminator.lnk
MessengerService : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk
ZoneLabsClient : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZoneAlarm\ZoneAlarm Security.lnk
Analyse du Bureau
PrcRew : C:\Documents and Settings\Hervé et Cécile\Bureau\navilog1\Process.exe
Analyse des Favoris
Analyse des Cookies
Affiliate tracking cookie : C:\Documents and Settings\Hervé et Cécile\cookies\hervé_et_cécile@tribalfusion[1].txt
Analyse du Registre
AcroIEHelper : HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
MSDXM : HKCR\CLSID\{8E718888-423F-11D2-876E-00A0C9082467}
MSDXM : C:\WINDOWS\SYSTEM32\MSDXM.OCX
Spybot S&D : HKCR\CLSID\{53707962-6F74-2D53-2644-206D7942484F}
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
SSJava : HKCR\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
SSJava : C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL
Analyse des Fichiers Connus
Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminatorshield.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminator.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\sptcontmenu.dll
Spyware Terminator : C:\Program Files\Spyware Terminator\sp_rsser.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\unins000.exe
Spyware Terminator : C:\Documents and Settings\All Users\Menu Démarrer\..\Application Data\Spyware Terminator\sp_rsdel.exe
SoundMan : C:\WINDOWS\soundman.exe
MessengerService : C:\Program Files\Messenger\msmsgs.exe
Ctfmon : C:\WINDOWS\system32\ctfmon.exe
PDVDServ : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
SymantecAntivirus : C:\Program Files\NavNT\vptray.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
NeroFilterCheck : C:\WINDOWS\system32\NeroCheck.exe
RemoteControl : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
MSConfig : C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
UpdateMgr : C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
ZoneLabsClient : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
SynchronizationManager : C:\WINDOWS\system32\mobsync.exe
NBJ : C:\Program Files\Ahead\Nero BackItUp\NBJ.exe
MSDXM : C:\WINDOWS\system32\msdxm.ocx
StillImageMonitor : C:\WINDOWS\system32\STIMON.EXE
MSIMED : C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
MSIMED : C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
GrpConv : C:\WINDOWS\system32\grpconv.exe
SiSPower : C:\WINDOWS\system32\SiSPower.dll
Wextract : C:\WINDOWS\system32\advpack.dll
KernelFaultCheck : C:\WINDOWS\system32\dumprep.exe
Explorer : C:\WINDOWS\explorer.exe
PowerProfile : C:\WINDOWS\system32\powrprof.dll
BluetoothControlPanel : C:\WINDOWS\system32\bthprops.cpl
SSJava : C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
SSJava : C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
SSJava : C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
Shdocvw : C:\WINDOWS\system32\shdocvw.dll
PHIME2002ASync : C:\WINDOWS\system32\dllcache\tintsetp.exe
MSPY2002 : C:\WINDOWS\system32\dllcache\imscinst.exe
PHIME2002A : C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
Acrobat Assistant 7.0 : C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
LaunchApp : C:\WINDOWS\ALAUNCH.EXE
OpwareSE2 : C:\Program Files\ScanSoft\OMNIPAGESE2.0\OPWARESE2.EXE
SpybotSDTeaTimer : C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Verclsid : C:\WINDOWS\system32\verclsid.exe
Systray : C:\WINDOWS\system32\systray.exe
comctl32 : C:\WINDOWS\WinSxS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.2180_X-WW_A84F1FF9\comctl32.dll
Prépare un Scan en profondeur
Analyse Profondes des Fichiers
PrcRew : C:\Documents and Settings\Hervé et Cécile\Bureau\navilog1\Process.exe
Acrobat Assistant 7.0 : C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
UpdateMgr : C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
NBJ : C:\Program Files\Ahead\Nero BackItUp\NBJ.exe
PDVDServ : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
RemoteControl : C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
SSJava : C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
SunJavaUpdateSched : C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
SSJava : C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
SunJavaUpdateSched : C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
SSJava : C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
MessengerService : C:\Program Files\Messenger\msmsgs.exe
SymantecAntivirus : C:\Program Files\NavNT\vptray.exe
OpwareSE2 : C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe
Spybot S&D : C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
SpybotSDTeaTimer : C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\sptcontmenu.dll
Spyware Terminator : C:\Program Files\Spyware Terminator\SpywareTerminator.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\Spywareterminatorshield.Exe
Spyware Terminator : C:\Program Files\Spyware Terminator\sp_rsser.exe
Spyware Terminator : C:\Program Files\Spyware Terminator\unins000.exe
ZoneLabsClient : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
LaunchApp : C:\WINDOWS\Alaunch.exe
Explorer : C:\WINDOWS\explorer.exe
SoundMan : C:\WINDOWS\SOUNDMAN.EXE
MSIMED : C:\WINDOWS\ime\imjp8_1\imjpmig.exe
MSIMED : C:\WINDOWS\ime\imkr6_1\imekrmig.exe
MSConfig : C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
Wextract : C:\WINDOWS\system32\advpack.dll
BluetoothControlPanel : C:\WINDOWS\system32\bthprops.cpl
Ctfmon : C:\WINDOWS\system32\ctfmon.exe
MSPY2002 : C:\WINDOWS\system32\dllcache\imscinst.exe
PHIME2002ASync : C:\WINDOWS\system32\dllcache\tintsetp.exe
KernelFaultCheck : C:\WINDOWS\system32\dumprep.exe
GrpConv : C:\WINDOWS\system32\grpconv.exe
PHIME2002A : C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
SynchronizationManager : C:\WINDOWS\system32\mobsync.exe
MSDXM : C:\WINDOWS\system32\msdxm.ocx
NeroFilterCheck : C:\WINDOWS\system32\NeroCheck.exe
PowerProfile : C:\WINDOWS\system32\powrprof.dll
PrcRew : C:\WINDOWS\system32\Process.exe
Shdocvw : C:\WINDOWS\system32\shdocvw.dll
SiSPower : C:\WINDOWS\system32\SiSPower.dll
StillImageMonitor : C:\WINDOWS\system32\stimon.exe
Verclsid : C:\WINDOWS\system32\verclsid.exe
comctl32 : C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
Terminé

Sommaire du Scan:

Temps total du Scan : 1664,56 s
Eléments Scannés : 125 977
Eléments Identifiés : 90
Eléments Ignorés : 0

Eléments Critiques : 1


Le deuxième (en bas à gauche : voir rapport du système) :



Spyware Terminator Version: 1.8.7.991
Start time: 27/04/2007 20:01:29
System: Windows XP
User: Limited

Processes Scan
C:\WINDOWS\SYSTEM32\WINLOGON.EXE [Microsoft Corporation] C:\WINDOWS\SYSTEM32\NAVLOGON.DLL [Empty],
vsmon.exe [file not found]
C:\WINDOWS\EXPLORER.EXE [Microsoft Corporation] C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPHOOKSE2.DLL [ScanSoft, Inc.], C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\SHELLEXECUTEHOOK.DLL [Anti-Malware Development a.s.], C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\ACTIVEX\PDFSHELL.DLL [Adobe Systems, Inc.],
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE [Microsoft Corporation] C:\WINDOWS\SYSTEM32\PDFPORTS.DLL [Adobe Systems Incorporated.], C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ADISTRES.FRA [Adobe Systems Incorporated.],
C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE [Acer Inc.] ILIBN.DLL [Acer Inc.], C:\PROGRAM FILES\ACER\ACER ECONSOLE\LOG4CXX.DLL [Empty], XDB.DLL [Acer Inc.], C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIACLASS.DLL [Acer], C:\PROGRAM FILES\ACER\ACER ECONSOLE\EXTRESOURCE.DLL [acer], XDAOUTIL.DLL [Acer Inc.], C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIAUTIL.DLL [Empty],
C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\MEMCHECK.EXE [Acer Inc.] C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\MSCORLIB\1.0.5000.0__B77A5C561934E089_18450B15\MSCORLIB.DLL [Empty], C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\1.0.5000.0__B77A5C561934E089_7E40A71C\SYSTEM.DLL [Empty], ACER.EMPOWERING.SHARED.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\ACERMEMUSAGECHECKSERVINTERFACE.DLL [Empty],
guard.exe [file not found]
C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLCAPSVC.EXE [Empty] CLCAPENGINE.DLL [Empty], C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\PCMRREC4.DLL [CyberLink Corp.], MSDMO.DLL [Empty], CLCAPSVCPS.DLL [Empty],
C:\PROGRAM FILES\ACER TV-FM\KERNEL\CLML_NTSERVICE\CLMLSERVER.EXE [Cyberlink]
C:\PROGRAM FILES\NAVNT\DEFWATCH.EXE [Symantec Corporation]
C:\PROGRAM FILES\NAVNT\RTVSCAN.EXE [Symantec Corporation] DEC2.DLL [Symantec Corporation], DEC2ARJ.DLL [Symantec Corporation], DEC2ID.DLL [Symantec Corporation], DEC2LHA.DLL [Symantec Corporation], SYMLHA.DLL [Symantec Corporation], DEC2LZ.DLL [Symantec Corporation], DEC2MIME.DLL [Symantec Corporation], DEC2ZIP.DLL [Symantec Corporation], DEC2AMG.DLL [Symantec Corporation], C:\PROGRAM FILES\NAVNT\SYMAMG32.DLL [Symantec Corporation with portions by FUJITSU DEVICES INC.], DEC2UUE.DLL [Symantec Corporation], DEC2SS.DLL [Symantec Corporation], DEC2RTF.DLL [Symantec Corporation], C:\WINDOWS\SYSTEM32\CBA.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\MSGSYS.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\NTS.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\PDS.DLL [Intel Corporation], NAVLU.DLL [Symantec Corporation], C:\PROGRAM FILES\NAVNT\NAVNTUTL.DLL [Symantec/Peter Norton Group], I2LDVP3.DLL [Symantec Corporation], C:\PROGRAM FILES\NAVNT\NAVAPI32.DLL [Symantec Corp.], NAVEX32A.DLL [Symantec Corporation], NAVENG32.DLL [Symantec Corporation], NAVAP32.DLL [Symantec Corporation], VPMSECE.DLL [Symantec Corporation], C:\WINDOWS\SYSTEM32\AMSLIB.DLL [Intel Corporation], C:\WINDOWS\SYSTEM32\LOC32VC0.DLL [Intel],
C:\PROGRAM FILES\SPYWARE TERMINATOR\SP_RSSER.EXE [Crawler.com]
C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLSCHED.EXE [Empty] CLCAPSVCPS.DLL, CLSCHMGR.DLL [Empty], CLSCHEDPS.DLL [Empty],
C:\WINDOWS\SYSTEM32\MSGSYS.EXE [Intel Corporation] NTS.DLL, CBA.DLL, MSGSYS.DLL, PDS.DLL,
C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE [Cyberlink Corp.] C:\PROGRAM FILES\CYBERLINK\POWERDVD\CLRCENGINE2.DLL [CyberLink Corp.], OPHOOKSE2.DLL,
C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERAGENT.EXE [Acer Inc.] C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\IT41.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\IMAGEFILE.DLL [Empty], OPHOOKSE2.DLL,
C:\WINDOWS\SOUNDMAN.EXE [Realtek Semiconductor Corp.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\JUSCHED.EXE [Sun Microsystems, Inc.]
C:\WINDOWS\SYSTEM32\SYSMONITOR.EXE [Empty] MSCORLIB.DLL, OPHOOKSE2.DLL, SYSTEM.WINDOWS.FORMS.DLL [Empty], SYSTEM.DLL, SYSTEM.DRAWING.DLL [Empty],
C:\PROGRAM FILES\ACER\ACER EMODE MANAGEMENT\ASPIRESERVICE.EXE [Acer Inc.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASYNC.EXE [Acer Inc.] ILIBN.DLL, XDB.DLL, MEDIACLASS.DLL, EXTRESOURCE.DLL, XDAOUTIL.DLL, MEDIAUTIL.DLL, OPHOOKSE2.DLL,
C:\PROGRAM FILES\ACER TV-FM\PCMSERVICE.EXE [CyberLink Corp.] OPHOOKSE2.DLL, CLRCENGINE3.DLL [CyberLink Corp.], C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLCAPX.DLL [Cyberlink], CLAUMIXER.DLL [CyberLink Corp.], CLSCHMGR.DLL, CLCAPSVCPS.DLL, CLCAPENGINE.DLL, PCMRREC4.DLL, MSDMO.DLL, CLSCHEDPS.DLL,
C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE [ScanSoft, Inc.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\NAVNT\VPTRAY.EXE [Symantec Corporation] OPHOOKSE2.DLL, CLIPROXY.DLL [Symantec Corporation], NAVNTUTL.DLL, CLISCAN.DLL [Symantec Corporation],
C:\PROGRAM FILES\PICASA\PICASAMEDIADETECTOR.EXE [Empty] OPHOOKSE2.DLL,
C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE [Anti-Malware Development a.s.] ENGINE.DLL [Anti-Malware Development a.s.], OPHOOKSE2.DLL,
zlclient.exe [file not found]
C:\WINDOWS\SYSTEM32\CTFMON.EXE [Microsoft Corporation] OPHOOKSE2.DLL,
C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE [Crawler.com] OPHOOKSE2.DLL,
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE [Microsoft Corporation] OPHOOKSE2.DLL,
C:\ACER\EMPOWERING TECHNOLOGY\ACER.EMPOWERING.FRAMEWORK.LAUNCHER.EXE [Acer Inc.] MSCORLIB.DLL, OPHOOKSE2.DLL, C:\ACER\EMPOWERING TECHNOLOGY\LOG4NET.DLL [The Apache Software Foundation], SYSTEM.DLL, C:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.XML\1.0.5000.0__B77A5C561934E089_7ECD01E6\SYSTEM.XML.DLL [Empty], ACER.EMPOWERING.SHARED.DLL [Acer Inc.], SYSTEM.WINDOWS.FORMS.DLL, ACER.EMPOWERING.FRAMEWORK.PRESENTER.DLL [Acer Inc.], SYSTEM.DRAWING.DLL, ACER.EMPOWERING.FRAMEWORK.LAUNCHBARVIEW.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\ACER.EMPOWERING.WINDOWS.FORMS.DLL [acer inc.], ACER.EMPOWERING.FRAMEWORK.HOST.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\ACER.EMPOWERING.FRAMEWORK.PASSWORDSETTING.DLL [Empty], ACER.EMPOWERING.FRAMEWORK.INTERFACE.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\ECONSOLE\ECONSOLEUI.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\EMODE\EMODEUI.DLL [Empty], ACER.EMPOWERING.EPERFORMANCE.PLUGIN.DLL [Acer Inc.], VIEWS.DLL [Acer Inc.], PRESENTERS.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\WIDGET.DLL [Empty], ACER.EMPOWERING.SHARED.PATTERNS.DLL [Acer Inc.], MODELS.DLL [Acer Inc.], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\ACER.EMPOWERING.EPERFORMANCE.EPERFORMANCELIBRARY.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERECOVERYUI.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\FR\ACER.EMPOWERING.FRAMEWORK.LAUNCHBARVIEW.RESOURCES.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\FR\ERECOVERYUI.RESOURCES.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\FR\ACER.EMPOWERING.EPERFORMANCE.PLUGIN.RESOURCES.DLL [Empty], C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\FR\VIEWS.RESOURCES.DLL [Empty],
C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\ZDWLAN.EXE [X-Micro Technology Corp.] C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\DOT1X_DLL.DLL [Empty], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\W32N55.DLL [Printing Communications Assoc., Inc. (PCAUSA)], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\SSLEAY32.DLL [Empty], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\LIBEAY32.DLL [Empty], C:\PROGRAM FILES\ACER WLAN 11G USB DONGLE\ZDWLAN.DLL [Empty], OPHOOKSE2.DLL,
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ACROTRAY.EXE [Adobe Systems Inc.] OPHOOKSE2.DLL,
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE [Microsoft Corporation] OPHOOKSE2.DLL, SHELLEXECUTEHOOK.DLL,
AcroRd32Info.exe [file not found]
C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATOR.EXE [Crawler.com] OPHOOKSE2.DLL,

Startup Scan

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"CTFMON.EXE" = "C:\WINDOWS\SYSTEM32\CTFMON.EXE" [ Microsoft Corporation ]
"MSMSGS" = "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" [ Microsoft Corporation ]
"MoneyAgent" = "C:\PROGRAM FILES\MICROSOFT MONEY\SYSTEM\MNYEXPR.EXE" [ file not found ]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"LaunchApp" = "C:\WINDOWS\ALAUNCH.EXE" [ Acer Inc. ]
"ntiMUI" = "C:\PROGRAM FILES\NEWTECH INFOSYSTEMS\NTI CD & DVD-MAKER 7\NTIMUI.EXE" [ Empty ]
"RemoteControl" = "C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE" [ Cyberlink Corp. ]
"IMJPMIG8.1" = "C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE" [ Microsoft Corporation ]
"MSPY2002" = "C:\WINDOWS\SYSTEM32\IME\PINTLGNT\IMSCINST.EXE" [ Empty ]
"PHIME2002ASync" = "C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE" [ Microsoft Corporation ]
"PHIME2002A" = "C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE" [ Microsoft Corporation ]
"SiSPower" = "C:\WINDOWS\system32\SISPOWER.DLL" [ Silicon Integrated Systems Corporation ]
"SoundMan" = "C:\WINDOWS\SOUNDMAN.EXE" [ Realtek Semiconductor Corp. ]
"SunJavaUpdateSched" = "C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\JUSCHED.EXE" [ Sun Microsystems, Inc. ]
"Acer Empowering Technology Monitor" = "C:\WINDOWS\SYSTEM32\SYSMONITOR.EXE" [ Empty ]
"AspireService" = "C:\PROGRAM FILES\ACER\ACER EMODE MANAGEMENT\ASPIRESERVICE.EXE" [ Acer Inc. ]
"MediaSync" = "C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASYNC.EXE" [ Acer Inc. ]
"PCMService" = "C:\PROGRAM FILES\ACER TV-FM\PCMSERVICE.EXE" [ CyberLink Corp. ]
"eRecoveryService" = "C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\ERAGENT.EXE" [ Acer Inc. ]
"NeroCheck" = "C:\WINDOWS\SYSTEM32\NEROCHECK.EXE" [ Ahead Software Gmbh ]
"OpwareSE2" = "C:\PROGRAM FILES\SCANSOFT\OMNIPAGESE2.0\OPWARESE2.EXE" [ ScanSoft, Inc. ]
"vptray" = "C:\PROGRAM FILES\NAVNT\VPTRAY.EXE" [ Symantec Corporation ]
"LifeScape Media Detector" = "C:\PROGRAM FILES\PICASA\PICASAMEDIADETECTOR.EXE" [ Empty ]
"!AVG Anti-Spyware" = "C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE" [ Anti-Malware Development a.s. ]
"ZoneAlarm Client" = "C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE" [ Zone Labs, LLC ]
"SpywareTerminator" = "C:\PROGRAM FILES\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE" [ Crawler.com ]

BHO Scan
Adobe PDF Reader Link Helper {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [file not found]
{53707962-6F74-2D53-2644-206D7942484F} C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [Safer Networking Limited]
SSVHelper Class {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\PROGRAM FILES\JAVA\JRE1.6.0_01\BIN\SSV.DLL [Sun Microsystems, Inc.]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [file not found]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} [file not found]
{e2e2dd38-d088-4134-82b7-f2ba38496583} [file not found]
{FB5F1910-F110-11d2-BB9E-00C04F795683} [file not found]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
{42071714-76d4-11d1-8b24-00a0c9068ff3} = Extension Affichage Panorama du Panneau de configuration (deskpan.dll) [file not found]
{764BF0E1-F219-11ce-972D-00AA00A14F56} = Extensions de l'environnement de compression de fichiers () [file not found]
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} = Menu contextuel de cryptage () [file not found]
{88895560-9AA2-1069-930E-00AA0030EBC8} = Extension icône HyperTerminal (C:\WINDOWS\SYSTEM32\HTICONS.DLL) [Hilgraeve, Inc.]
{0DF44EAA-FF21-4412-828E-260A8728E7F1} = Barre des tâches et menu Démarrer () [file not found]
{30D02401-6A81-11d0-8274-00C04FD5AE38} = IE Search Band (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} = Shell DocObject Viewer (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FBF23B40-E3F0-101B-8488-00AA003E56F8} = InternetShortcut (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{3C374A40-BAE4-11CF-BF7D-00AA006946EE} = Microsoft Url History Service (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FF393560-C2A7-11CF-BFF4-444553540000} = History (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{7BD29E00-76C1-11CF-9DD0-00A0C9034933} = Temporary Internet Files (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{7BD29E01-76C1-11CF-9DD0-00A0C9034933} = Temporary Internet Files (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{CFBFAE00-17A6-11D0-99CB-00C04FD64497} = Microsoft Url Search Hook (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{3DC7A020-0ACD-11CF-A9BB-00AA004AE837} = The Internet (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{871C5380-42A0-1069-A2EA-08002B30309D} = Internet Name Space (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} = Autoplay for SlideShow (C:\WINDOWS\SYSTEM32\SHIMGVW.DLL) [Microsoft Corporation]
{7A9D77BD-5403-11d2-8785-2E0420524153} = Comptes d'utilisateurs () [file not found]
{21569614-B795-46b1-85F4-E737A8DC09AD} = Shell Search Band (C:\WINDOWS\SYSTEM32\BROWSEUI.DLL) [Microsoft Corporation]
{00020D75-0000-0000-C000-000000000046} = Microsoft Office Outlook Desktop Icon Handler (C:\Program Files\Microsoft Office\OFFICE11\MLSHEXT.DLL) [Microsoft Corporation]
{0006F045-0000-0000-C000-000000000046} = Microsoft Office Outlook Custom Icon Handler (C:\Program Files\Microsoft Office\OFFICE11\OLKFSTUB.DLL) [Microsoft Corporation]
{42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler (C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE11\MSOHEV.DLL) [Microsoft Corporation]
{07C45BB1-4A8C-4642-A1F5-237E7215FF66} = IE Microsoft BrowserBand (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{1C1EDB47-CE22-4bbb-B608-77B48F83C823} = IE Fade Task (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{205D7A97-F16D-4691-86EF-F3075DCCA57D} = IE Menu Desk Bar (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{3028902F-6374-48b2-8DC6-9725E775B926} = IE AutoComplete (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{43886CD5-6529-41c4-A707-7B3C92C05E68} = IE Navigation Bar (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{44C76ECD-F7FA-411c-9929-1B77BA77F524} = IE Menu Site (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{4B78D326-D922-44f9-AF2A-07805C2A3560} = IE Menu Band (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{6038EF75-ABFC-4e59-AB6F-12D397F6568D} = IE Microsoft History AutoComplete List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} = IE Tracking Shell Menu (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{6CF48EF8-44CD-45d2-8832-A16EA016311B} = IE IShellFolderBand (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{73CFD649-CD48-4fd8-A272-2070EA56526B} = IE BandProxy (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} = IE MRU AutoComplete List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} = IE RSS Feeder Folder (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{9D958C62-3954-4b44-8FAB-C4670C1DB4C2} = IE Microsoft Shell Folder AutoComplete List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{B31C5FAE-961F-415b-BAF0-E697A5178B94} = IE Microsoft Multiple AutoComplete List Container (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{BC476F4C-D9D7-4100-8D4E-E043F6DEC409} = Microsoft Browser Architecture (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} = IE Shell Rebar BandSite (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{E6EE9AAC-F76B-4947-8260-A9F136138E11} = IE Shell Band Site Menu (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{F2CF5485-4E02-4f68-819C-B92DE9277049} = &Links (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} = IE Registry Tree Options Utility (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} = IE User Assist (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{FDE7673D-2E19-4145-8376-BBD58C4BC7BA} = IE Custom MRU AutoCompleted List (C:\WINDOWS\SYSTEM32\IEFRAME.DLL) [Microsoft Corporation]
{BDA77241-42F6-11d0-85E2-00AA001FE28C} = LDVP Shell Extensions (C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\SSC\VPSHELL2.DLL) [Symantec Corporation]
{640167b4-59b0-47a6-b335-a6b3c0695aea} = Portable Media Devices (C:\WINDOWS\SYSTEM32\AUDIODEV.DLL) [Microsoft Corporation]
{35786D3C-B075-49b9-88DD-029876E11C01} = Portable Devices (C:\WINDOWS\SYSTEM32\WPDSHEXT.DLL) [Microsoft Corporation]
{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} = Portable Devices Menu (C:\WINDOWS\SYSTEM32\WPDSHEXT.DLL) [Microsoft Corporation]
{AB77609F-2178-4E6F-9C4B-44AC179D937A} = a-squared Context Menu Shell Extension (C:\PROGRA~1\A-SQUA~1\A2CONT~1.DLL) [file not found]
{D9872D13-7651-4471-9EEE-F0A00218BEBB} = Multiscan (C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLAVSCAN.DLL) [Zone Labs, LLC]
{BD88A479-9623-4897-8546-BC62B9628F44} = SPTHandler (C:\PROGRAM FILES\SPYWARE TERMINATOR\SPTCONTMENU.DLL) [Crawler.com]

Winlogon Notify Scan
NavLogon = C:\WINDOWS\system32\NavLogon.dll (C:\WINDOWS\SYSTEM32\NAVLOGON.DLL) [Empty]
WgaLogon = WgaLogon.dll (C:\WINDOWS\system32\WGALOGON.DLL) [Microsoft Corporation]

Services Scan
"Acer Media Server" = C:\PROGRAM FILES\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE [Acer Inc.]
"AcerMemUsageCheckService" = C:\ACER\EMPOWERING TECHNOLOGY\EPERFORMANCE\MEMCHECK.EXE [Acer Inc.]
"Afc" = C:\WINDOWS\SYSTEM32\DRIVERS\AFC.SYS [Arcsoft, Inc.]
"ALCXWDM" = C:\WINDOWS\SYSTEM32\DRIVERS\ALCXWDM.SYS [Realtek Semiconductor Corp.]
"AVG Anti-Spyware Driver" = C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.SYS [Empty]
"AVG Anti-Spyware Guard" = C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\GUARD.EXE [Anti-Malware Development a.s.]
"AvgAsCln" = C:\WINDOWS\SYSTEM32\DRIVERS\AVGASCLN.SYS [GRISOFT, s.r.o.]
"CLCapSvc" = C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLCAPSVC.EXE [Empty]
"CLSched" = C:\PROGRAM FILES\ACER TV-FM\KERNEL\TV\CLSCHED.EXE [Empty]
"CyberLink Media Library Service" = C:\PROGRAM FILES\ACER TV-FM\KERNEL\CLML_NTSERVICE\CLMLSERVER.EXE [Cyberlink]
"DefWatch" = C:\PROGRAM FILES\NAVNT\DEFWATCH.EXE [Symantec Corporation]
"dmboot" = C:\WINDOWS\SYSTEM32\DRIVERS\DMBOOT.SYS [Microsoft Corp., Veritas Software]
"dmio" = C:\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS [Microsoft Corp., Veritas Software]
"dmload" = C:\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS [Microsoft Corp., Veritas Software.]
"IDriverT" = C:\PROGRAM FILES\FICHIERS COMMUNS\INSTALLSHIELD\DRIVER\1050\INTEL 32\IDRIVERT.EXE [Macrovision Corporation]
"int15.sys" = C:\ACER\EMPOWERING TECHNOLOGY\ERECOVERY\INT15.SYS [Empty]
"NAVAP" = C:\PROGRAM FILES\NAVNT\NAVAP.SYS [Empty]
"NAVAPEL" = C:\PROGRAM FILES\NAVNT\NAVAPEL.SYS [Empty]
"NAVENG" = C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20070425.033\NAVENG.SYS [Symantec Corporation]
"NAVEX15" = C:\Program Files\Fichiers communs\Symantec Shared\VirusDefs\20070425.033\NAVEX15.SYS [Symantec Corporation]
"Norton AntiVirus Server" = C:\PROGRAM FILES\NAVNT\RTVSCAN.EXE [Symantec Corporation]
"NTIDrvr" = C:\WINDOWS\SYSTEM32\DRIVERS\NTIDRVR.SYS [NewTech Infosystems, Inc.]
"Ptilink" = C:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS [Parallel Technologies, Inc.]
"RTL8023xp" = C:\WINDOWS\SYSTEM32\DRIVERS\RTLNICXP.SYS [Realtek Semiconductor Corporation ]
"Secdrv" = C:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS [Empty]
"SiS315" = C:\WINDOWS\SYSTEM32\DRIVERS\SISGRP.SYS [Silicon Integrated Systems Corporation]
"SiSkp" = C:\WINDOWS\SYSTEM32\DRIVERS\SRVKP.SYS [Silicon Integrated Systems Corporation]
"SISNIC" = C:\WINDOWS\SYSTEM32\DRIVERS\SISNIC.SYS [SiS Corporation]
"sp_rsdrv2" = C:\WINDOWS\SYSTEM32\DRIVERS\SP_RSDRV2.SYS [Empty]
"sp_rssrv" = C:\PROGRAM FILES\SPYWARE TERMINATOR\SP_RSSER.EXE [Crawler.com]
"srescan" = C:\WINDOWS\SYSTEM32\ZONELABS\SRESCAN.SYS [Zone Labs, LLC]
"SymEvent" = C:\PROGRAM FILES\SYMANTEC\SYMEVENT.SYS [Symantec Corporation]
"vsdatant" = C:\WINDOWS\SYSTEM32\VSDATANT.SYS [Zone Labs, LLC]
"vsmon" = C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE [Zone Labs, LLC]
"ZD1211BU(ZyDAS)" = C:\WINDOWS\SYSTEM32\DRIVERS\ZD1211BU.SYS [ZyDAS Technology Corporation]
"ZD1211U(ZyDAS)" = C:\WINDOWS\SYSTEM32\DRIVERS\ZD1211U.SYS [ZyDAS Technology Corporation]
"ZDPSp50" = C:\WINDOWS\SYSTEM32\DRIVERS\ZDPSP50.SYS [Printing Communications Assoc., Inc. (PCAUSA)]

Protocol Filters Scan
Class Install Handler = {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} (C:\WINDOWS\SYSTEM32\URLMON.DLL) [Microsoft Corporation]
text/xml = {807553E5-5146-11D5-A672-00B0D022E945} (C:\PROGRAM FILES\FICHIERS COMMUNS\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL) [Microsoft Corporation]

Hosts Scan
LOCALHOST mapping = 1

IE Scan
IERESET.INF missing Signature="$CHICAGO$"
IERESET.INF missing AdvancedINF=2.5,"You need a new version of advpack.dll"
IERESET.INF missing AddReg=RestoreHomePage.reg
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\Main","Start Page",0,%START_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main","Default_Page_URL",0,%START_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main","Default_Search_URL",0,%SEARCH_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main","Search Page",0,%SEARCH_PAGE_URL%
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","1",0,"www.%s.com"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","2",0,"www.%s.org"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","3",0,"www.%s.net"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","4",0,"www.%s.edu"
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\Main","Search Page",0,%SEARCH_PAGE_URL%
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\SearchUrl","Provider",0,""
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Search","SearchAssistant",0,"http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Search","CustomizeSearch",0,"http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
IERESET.INF missing HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\SafeSites",%SAFESITE_VALUE%,0,"http://ie.search.msn.com/*"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","5"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","6"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","7"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","8"
IERESET.INF missing HKLM,"Software\Microsoft\Internet Explorer\Main\UrlTemplate","9"
IERESET.INF missing HKCU,"Software\Microsoft\Internet Explorer\Main","AutoSearch"
IERESET.INF missing SEARCH_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
IERESET.INF missing AddReg=RestoreBrowserSettings.reg
IERESET.INF missing DelReg=DeleteTemplates.reg or DelReg=DeleteTemplates.reg, DeleteAutosearch.reg
IERESET.INF missing START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=7&ar=msnhome" or START_PAGE_URL="http://www.msn.com"
IERESET.INF missing SAFESITE_VALUE="http://home.microsoft.com/" or SAFESITE_VALUE="ie.search.msn.com"
IERESET.INF missing MS_START_PAGE_URL="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=7&ar=msnhome" or MS_START_PAGE_URL="http://www.msn.com"
NavigationFailure = res://ieframe.dll/navcancl.htm HIJACK WARNING!
DesktopItemNavigationFailure = res://ieframe.dll/navcancl.htm HIJACK WARNING!
NavigationCanceled = res://ieframe.dll/navcancl.htm HIJACK WARNING!
OfflineInformation = res://ieframe.dll/offcancl.htm HIJACK WARNING!
PostNotCached = res://ieframe.dll/repost.htm HIJACK WARNING!
NoAdd-ons = res://ieframe.dll/noaddon.htm HIJACK WARNING!
NoAdd-onsInfo = res://ieframe.dll/noaddoninfo.htm HIJACK WARNING!
SecurityRisk = res://ieframe.dll/securityatrisk.htm HIJACK WARNING!
Tabs = res://ieframe.dll/tabswelcome.htm HIJACK WARNING!

A +,

Hervé.