Top rated et autres pub g besoin d'aide [Résolu]

voila comme dmd le rapport combo-fix ComboFix 08-04-02.1 - paola 2008-04-03 14:39:11.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.480 [GMT 2:00]
Endroit: C:\Users\paola\Desktop\killbagle.exe
* Création d'un nouveau point de restauration
.
TimedOut: Windir.dat

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\.protected
C:\Users\paola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\.protected
C:\Users\paola\Desktopblackbird.jpg
C:\Users\paola\DesktopEditorFKWP1.5.exe
C:\Users\paola\DesktopEditorFKWP2.0.exe
C:\Users\paola\Desktopfilemanagerclient.exe
C:\Users\paola\Desktopfkwp1.5.exe
C:\Users\paola\Desktopfkwp2.0.exe
C:\Users\paola\Desktopfwebd.exe
C:\Users\paola\DesktopFWebdEditor.exe
C:\Users\paola\DesktopTrojan.Win32.BlackBird.exe
C:\Users\paola\Desktopvirii
C:\Windows\system32\drivers\etc\.protected

.
((((((((((((((((((((((((((((( Fichiers créés 2008-03-03 to 2008-04-03 ))))))))))))))))))))))))))))))))))))
.

Pas de nouveau fichier créé dans cet espace de temps

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-03 08:24 --------- d-----w C:\Users\paola\AppData\Roaming\Skype
2008-04-02 08:14 --------- d-----w C:\Program Files\CCleaner
2008-04-02 07:37 --------- d-----w C:\Program Files\Navilog1
2008-04-01 19:06 --------- d-----w C:\Program Files\Everest Poker
2008-04-01 13:27 --------- d-----w C:\Program Files\Trend Micro
2008-03-31 12:38 --------- d-----w C:\Users\lloyd\AppData\Roaming\Grisoft
2008-03-31 12:36 --------- d-----w C:\ProgramData\bwnmbeje
2008-03-30 17:42 --------- d-----w C:\Program Files\Java
2008-03-30 17:39 --------- d-----w C:\Program Files\Windows Live
2008-03-30 17:38 --------- d-----w C:\Program Files\Google
2008-03-30 17:34 --------- d-----w C:\Users\paola\AppData\Roaming\Grisoft
2008-03-30 17:33 --------- d-----w C:\ProgramData\Grisoft
2008-03-28 21:19 86,528 ----a-w C:\Windows\System32\VACFix.exe
2008-03-26 13:04 --------- d---a-w C:\ProgramData\TEMP
2008-03-26 12:25 --------- d-----w C:\Users\paola\AppData\Roaming\PC-Cleaner
2008-03-26 06:50 82,432 ----a-w C:\Windows\System32\IEDFix.exe
2008-03-25 17:11 --------- d-----w C:\Program Files\Lexmark Fax Solutions
2008-03-25 17:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-25 15:44 --------- d-----w C:\Program Files\City of Heroes
2008-03-25 12:51 --------- d-----w C:\ProgramData\bcdqwjyn
2008-03-13 09:29 --------- d-----w C:\Program Files\Windows Mail
2008-03-13 08:49 --------- d-----w C:\ProgramData\Microsoft Help
2008-03-12 15:53 --------- d-----w C:\Users\lloyd\AppData\Roaming\LimeWire
2008-03-10 20:06 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition
2008-03-10 20:04 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-03-10 20:03 --------- d-----w C:\Program Files\MSN Messenger
2008-03-10 19:47 --------- d-----w C:\ProgramData\WLInstaller
2008-03-04 20:05 --------- d-----w C:\Users\paola\AppData\Roaming\LimeWire
2008-02-25 15:15 --------- d-----w C:\Program Files\eMule
2008-02-13 22:52 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-02-13 22:52 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-02-13 22:48 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys
2008-02-13 22:48 3,504,696 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-02-13 22:48 3,470,392 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-02-13 22:48 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-02-13 22:48 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-02-13 22:48 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-02-13 22:48 109,624 ----a-w C:\Windows\system32\drivers\ataport.sys
2008-02-13 22:47 803,328 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-02-13 22:47 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-02-13 22:47 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-02-13 22:47 4,247,552 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-13 22:47 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-02-13 22:47 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-02-13 22:47 216,632 ----a-w C:\Windows\system32\drivers\netio.sys
2008-02-13 22:47 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-02-13 22:47 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-02-13 22:47 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-02-13 22:47 1,686,528 ----a-w C:\Windows\System32\gameux.dll
2008-02-13 22:44 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-13 22:44 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-13 22:44 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-13 22:44 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-10 19:38 --------- d-----w C:\ProgramData\Apple Computer
2008-02-06 18:06 --------- d-----w C:\Users\lloyd\AppData\Roaming\vlc
2008-01-23 16:34 78,336 ----a-w C:\Windows\pysoft_uninstaller.exe
2008-01-10 08:21 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-01-10 05:50 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2007-08-29 20:21 174 --sha-w C:\Program Files\desktop.ini
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10F0C2A9-8E38-43e3-204D-45524C494E20}]
C:\Program Files\PC-Antispyware\IeExtension.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"pZsliMYlWa"="C:\ProgramData\bwnmbeje\hyrkzcno.exe" [ ]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 10:21 1232896]
"MsnMsgr"="C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" [2007-10-18 12:34 5724184]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-08-17 03:45 23120680]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2004-11-22 08:18 307200]
"bcdqwjyn"="C:\ProgramData\bcdqwjyn\vefodsxi.exe" [2008-03-25 14:51 106496]
"WINSOS VERIFY"="C:\Program Files\Winsos\WINSOS.exe" [ ]
"ccleaner"="C:\Program Files\CCleaner\CCleaner.exe" [2008-03-25 11:48 906480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Tour"="" []
"eRecoveryService"="" []
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-08-22 16:13 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-02-15 11:07 4390912 C:\Windows\RtHDVCpl.exe]
"Acer Empowering Technology Monitor"="C:\Acer\Empowering Technology\SysMonitor.exe" [2007-01-24 10:27 319488]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-02-07 00:04 464168]
"Apanel"="C:\ACERSW\config\SetApanel.cmd" [ ]
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 21:48 57344]
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-02-15 18:39 151552]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"BigDogPath"="C:\Windows\VM_STI.exe" [2004-06-09 15:37 40960]
"lxczbmgr.exe"="C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2007-01-29 19:15 74672]
"PC-Antispyware"="C:\Program Files\PC-Antispyware\PC-Antispyware.exe" [ ]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-02-15 18:39 151552]

C:\Users\paola\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d'‚cran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2007-08-24 05:45:42 101784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
"pZsliMYlWa"= C:\ProgramData\bwnmbeje\hyrkzcno.exe
path=
backup=

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{961AB48E-6697-4189-8FBD-131B0713996C}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{034F51FA-FCAD-4B55-8793-957D19524827}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{10CF8975-3348-4535-8A94-4F28A8CA4EFD}"= C:\Program Files\Acer Zone\Acer Zone Main Page\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{5F1A8C6F-2D8F-40D4-A4E1-DFBC47283A12}"= C:\Program Files\Acer Zone\Acer Picture Slide DVD\Component\CLSLDVD.exe:Cyberlink Picture Slide DVD workprocess
"{F972CEBB-4B6A-46EB-AFBD-DF1055890DBA}"= C:\Program Files\Acer Zone\Acer Plug and Record\Component\ARAWP.exe:Cyberlink Plug and Record ARA workprocess
"{2BA32163-A3D0-40C4-8405-E935A60E1B57}"= C:\Program Files\Acer Zone\Acer Plug and Record\Component\DVAX2Process.exe:Cyberlink Plug and Record AVAX workprocess
"TCP Query User{CDD33DD9-F08B-4CE9-9481-001557C87D56}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule
"UDP Query User{C5576A31-436B-4354-B956-68598E3D8251}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule
"{362D6DF9-E293-46B5-95EE-107ACA8BA31D}"= UDP:C:\Windows\System32\lxcecoms.exe:Lexmark Communications System
"{62263286-2AA1-4A33-A6F7-1D9FF50886EC}"= TCP:C:\Windows\System32\lxcecoms.exe:Lexmark Communications System
"{4CA2B8D6-F297-4C50-9B58-A62CAB707CCB}"= UDP:C:\Windows\System32\lxczcoms.exe:Lexmark Communications System
"{C2610688-FE0C-4B27-82D1-D5ABBC54587B}"= TCP:C:\Windows\System32\lxczcoms.exe:Lexmark Communications System
"{CD9917A8-0A24-493A-91B5-2807CAFC892E}"= UDP:C:\Windows\System32\spool\drivers\w32x86\3\lxczpswx.exe:Printer Status Window
"{5A28BBEE-5DBD-4F8B-B18C-23CE82C97153}"= TCP:C:\Windows\System32\spool\drivers\w32x86\3\lxczpswx.exe:Printer Status Window
"{765B9C90-7C35-4AD1-9EAE-AB02140EA0A1}"= UDP:C:\Program Files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe:FineScanManager
"{A6C76BEE-BDFE-4754-939D-D2F466669485}"= TCP:C:\Program Files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe:FineScanManager
"{E9FEB3EC-2029-4526-9C97-CD7695BC1873}"= Disabled:UDP:C:\Program Files\IncrediMail\bin\ImpCnt.exe:IncrediMail
"{B0E6F9EA-A8B0-4BB6-87D5-8FAFBD98671C}"= Disabled:TCP:C:\Program Files\IncrediMail\bin\ImpCnt.exe:IncrediMail
"{BF1EDEBF-68B2-442F-B2BE-D7B3E6A6D931}"= Disabled:UDP:C:\Program Files\IncrediMail\bin\ImApp.exe:IncrediMail
"{A54099AF-A8D1-4175-9035-AE18AFC49BFF}"= Disabled:TCP:C:\Program Files\IncrediMail\bin\ImApp.exe:IncrediMail
"{036CB621-CF48-470E-89C8-095DF05E7C55}"= Disabled:UDP:C:\Program Files\IncrediMail\bin\IncMail.exe:IncrediMail
"{4BCDB102-7D80-46C3-B969-2AA37AB27209}"= Disabled:TCP:C:\Program Files\IncrediMail\bin\IncMail.exe:IncrediMail
"{5E2FFAA1-37C2-4950-8258-C0C566C448BF}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{E1953AD6-3062-4BE5-83DD-273F050AB006}C:\\config.msi\\2e616.rbf"= UDP:C:\config.msi\2e616.rbf:Messenger
"UDP Query User{286A6E53-3478-4F85-BFF9-8FBAA69F7BBE}C:\\config.msi\\2e616.rbf"= TCP:C:\config.msi\2e616.rbf:Messenger
"TCP Query User{E803EE6F-F120-4FD8-A4B0-D264BE525041}C:\\program files\\skype\\phone\\skype.exe"= Disabled:UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{E0833F9C-823E-4F30-B292-5249C95C6EF8}C:\\program files\\skype\\phone\\skype.exe"= Disabled:TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-02-07 00:04]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-02-07 00:04]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2007-02-07 00:04]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-02-07 00:04]
R2 lxcz_device;lxcz_device;C:\Windows\system32\lxczcoms.exe [2007-01-29 19:11]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-05-17 16:01]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\system32\DRIVERS\SiSGB6.sys [2007-01-22 10:09]
S3 SiS6350;SiS6350;C:\Windows\system32\DRIVERS\SISGRKMD.sys [2007-02-16 07:13]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-03 12:23:06 C:\Windows\Tasks\User_Feed_Synchronization-{D4059DDC-7CAB-4B7D-9A80-BED50A2FD751}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-03 14:41:58
Windows 6.0.6000 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-04-03 14:42:32
ComboFix-quarantined-files.txt 2008-04-03 12:42:29
Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
.
2008-04-02 06:41:56 --- E O F ---

merci de ton aide voici le rapport omt : eFile/Folder C:\Program Files\PC-Antispyware\PC-Antispyware.exe not found.
File/Folder C:\ProgramData\bwnmbeje\hyrkzcno.exe not found.
C:\ProgramData\bcdqwjyn\vefodsxi.exe moved successfully.
File/Folder C:\ProgramData\bwnmbeje\hyrkzcno.exe not found.

OTMoveIt2 by OldTimer - Version 1.0.4.0 log created on 04032008_145502
t

comme dmd j'ai suivi la procedure otm mé g ommis d'editer le rapport veux tu ke je le refasse?

voila le rapport hijjackthisLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:27, on 03/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\VM_STI.EXE
C:\Program Files\Lexmark 1200 Series\LXCZbmgr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PC-Antispyware Site Blocker Button - {10F0C2A9-8E38-43e3-204D-45524C494E20} - C:\Program Files\PC-Antispyware\IeExtension.dll (file missing)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\SetApanel.cmd
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [BigDogPath] C:\Windows\VM_STI.EXE %;USB\VID_0AC8&PID_0302.DeviceDesc%
O4 - HKLM\..\Run: [lxczbmgr.exe] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [PC-Antispyware] "C:\Program Files\PC-Antispyware\PC-Antispyware.exe" hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [pZsliMYlWa] C:\ProgramData\bwnmbeje\hyrkzcno.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [bcdqwjyn] C:\ProgramData\bcdqwjyn\vefodsxi.exe
O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\Winsos\WINSOS.EXE" MINI
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKLM\..\Policies\Explorer\Run: [pZsliMYlWa] C:\ProgramData\bwnmbeje\hyrkzcno.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Crawler Screensaver - {CDAFD956-97BE-443D-8EF7-F4F094EB5766} - C:\Program Files\Crawler\SSaver\CSSaver.exe
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcz_device - - C:\Windows\system32\lxczcoms.exe

je t'ai envoyé les 2 et pour l'instant g plus ni le triangle jaune ni les 2 autres en esperant ke ça continue comme ça

re y as aucun des trois scan en ligne ki passe

pour le reste tout est fait :-)

le scan ne detecte ni virus ni rien et je n'arrive pas a l'editer

pour l'instant le probleme semble etre reslue merci pour ton aide et bravo ::-))