Alerte repeté de spyware et pb windows

Bonjour merci de ta reponse je commençais a desesperer voici le premier rapport de Combo-fix

ComboFix 08-04-03.3 - Alex 2008-04-04 9:59:23.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.1084 [GMT 2:00]
Endroit: C:\Users\Alex\Desktop\Combo-Fix.exe
* Création d'un nouveau point de restauration
.

((((((((((((((((((((((((((((( Fichiers créés 2008-03-04 to 2008-04-04 ))))))))))))))))))))))))))))))))))))
.

Pas de nouveau fichier créé dans cet espace de temps

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-31 20:05 --------- d-----w C:\Program Files\PC-Cleaner
2008-03-30 21:01 --------- d-----w C:\Program Files\PC-Antispyware
2008-03-30 18:56 --------- d-----w C:\ProgramData\yskpidgq
2008-03-30 18:56 --------- d-----w C:\ProgramData\jwxutynk
2008-03-30 12:35 --------- d--h--w C:\ProgramData\CanonBJ
2008-03-30 11:42 --------- d-----w C:\Program Files\Common Files\Adobe
2008-03-30 11:05 --------- d-----w C:\Users\Alex\AppData\Roaming\AdobeUM
2008-03-30 09:21 --------- d-----w C:\ProgramData\Symantec
2008-03-28 02:01 --------- d-----w C:\ProgramData\Microsoft Help
2008-03-27 23:53 --------- d-----w C:\Program Files\Real
2008-03-27 23:53 --------- d-----w C:\Program Files\Common Files\xing shared
2008-03-27 23:53 --------- d-----w C:\Program Files\Common Files\Real
2008-03-27 20:48 174 --sha-w C:\Program Files\desktop.ini
2008-03-27 20:44 --------- d-----w C:\Program Files\Norton Internet Security
2008-03-27 20:43 --------- d-----w C:\Program Files\Windows Sidebar
2008-03-27 20:43 --------- d-----w C:\Program Files\Windows Mail
2008-03-27 20:43 --------- d-----w C:\Program Files\Windows Defender
2008-03-27 20:43 --------- d-----w C:\Program Files\Windows Calendar
2008-03-27 20:22 87,040 ----a-w C:\Windows\System32\msoert2.dll
2008-03-27 20:20 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-03-27 20:20 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-03-27 20:19 805 ----a-w C:\Windows\system32\drivers\SYMEVENT.INF
2008-03-27 20:19 49,664 ----a-w C:\Windows\System32\csrsrv.dll
2008-03-27 20:19 376,320 ----a-w C:\Windows\System32\winsrv.dll
2008-03-27 20:19 123,952 ----a-w C:\Windows\system32\drivers\SYMEVENT.SYS
2008-03-27 20:19 10,740 ----a-w C:\Windows\system32\drivers\SYMEVENT.CAT
2008-03-27 20:19 --------- d-----w C:\Program Files\Symantec
2008-03-27 20:14 41,984 ----a-w C:\Windows\system32\drivers\monitor.sys
2008-03-27 20:14 374,456 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll
2008-03-27 20:14 1,060,920 ----a-w C:\Windows\system32\drivers\ntfs.sys
2008-03-27 20:13 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2008-03-27 20:13 7,680 ----a-w C:\Windows\System32\spwmp.dll
2008-03-27 20:13 414,208 ----a-w C:\Windows\System32\msscp.dll
2008-03-27 20:13 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2008-03-27 20:13 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2008-03-27 20:12 86,016 ----a-w C:\Windows\System32\icfupgd.dll
2008-03-27 20:12 63,488 ----a-w C:\Windows\system32\drivers\mpsdrv.sys
2008-03-27 20:12 61,952 ----a-w C:\Windows\System32\cmifw.dll
2008-03-27 20:12 396,800 ----a-w C:\Windows\System32\MPSSVC.dll
2008-03-27 20:12 392,192 ----a-w C:\Windows\System32\FirewallAPI.dll
2008-03-27 20:12 23,040 ----a-w C:\Windows\system32\drivers\tunnel.sys
2008-03-27 20:12 178,688 ----a-w C:\Windows\System32\iphlpsvc.dll
2008-03-27 20:12 16,896 ----a-w C:\Windows\System32\wfapigp.dll
2008-03-27 20:12 15,360 ----a-w C:\Windows\system32\drivers\TUNMP.SYS
2008-03-27 20:11 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys
2008-03-27 20:11 3,505,720 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-03-27 20:11 3,471,928 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-03-27 20:11 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys
2008-03-27 20:11 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-03-27 20:11 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-03-27 20:11 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-03-27 20:11 109,624 ----a-w C:\Windows\system32\drivers\ataport.sys
2008-03-27 20:11 1,191,936 ----a-w C:\Windows\System32\msxml3.dll
2008-03-27 20:09 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2008-03-27 20:09 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2008-03-27 20:09 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-03-27 20:08 57,856 ----a-w C:\Windows\System32\SLUINotify.dll
2008-03-27 20:08 566,784 ----a-w C:\Windows\System32\SLCommDlg.dll
2008-03-27 20:08 39,936 ----a-w C:\Windows\System32\slcinst.dll
2008-03-27 20:08 351,232 ----a-w C:\Windows\System32\SLUI.exe
2008-03-27 20:08 33,280 ----a-w C:\Windows\System32\slwmi.dll
2008-03-27 20:08 268,288 ----a-w C:\Windows\System32\mcbuilder.exe
2008-03-27 20:08 223,232 ----a-w C:\Windows\System32\SLC.dll
2008-03-27 20:08 2,605,568 ----a-w C:\Windows\System32\SLsvc.exe
2008-03-27 20:08 186,368 ----a-w C:\Windows\System32\SLLUA.exe
2008-03-27 20:08 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2008-03-27 20:06 84,480 ----a-w C:\Windows\System32\INETRES.dll
2008-03-27 20:06 737,792 ----a-w C:\Windows\System32\inetcomm.dll
2008-03-27 20:06 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-03-27 20:06 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-03-27 20:06 4,247,552 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-03-27 20:06 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-03-27 20:06 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-03-27 20:06 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-03-27 20:06 1,686,528 ----a-w C:\Windows\System32\gameux.dll
2008-03-27 20:05 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-03-27 20:05 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
2008-03-27 20:05 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-03-27 20:05 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-03-27 20:05 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-03-27 20:04 5,120 ----a-w C:\Windows\System32\wmi.dll
2008-03-27 20:04 152,576 ----a-w C:\Windows\System32\imagehlp.dll
2008-03-27 20:04 12,800 ----a-w C:\Windows\system32\drivers\fs_rec.sys
2008-03-27 20:03 --------- d-----w C:\Program Files\MSXML 4.0
2008-03-27 20:02 633,856 ----a-w C:\Windows\System32\user32.dll
2008-03-27 20:01 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-03-27 20:01 750,080 ----a-w C:\Windows\System32\qmgr.dll
2008-03-27 20:01 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-03-27 20:01 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-03-27 20:01 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-03-27 20:00 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2008-03-26 19:31 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-03-26 19:31 --------- d-----w C:\Program Files\Windows Live
2008-03-26 19:20 --------- d-----w C:\ProgramData\WLInstaller
2008-03-26 19:18 --------- d-----w C:\Users\Alex\AppData\Roaming\eSobi
2008-03-26 19:18 --------- d-----w C:\ProgramData\eSobi
2008-03-26 19:00 --------- d-----w C:\Users\Alex\AppData\Roaming\CyberLink
2008-03-26 18:29 80,896 ----a-w C:\Windows\System32\wudriver.dll
2008-03-26 18:29 549,720 ----a-w C:\Windows\System32\wuapi.dll
2008-03-26 18:29 53,080 ----a-w C:\Windows\System32\wuauclt.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-03-27 22:06 1232896]
"WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 14:34 2159104 C:\Windows\System32\oobefldr.dll]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472]
"yskpidgq"="C:\ProgramData\yskpidgq\dujqvgdy.exe" [2008-03-30 20:56 110592]
"y8J9A2Sq9c"="C:\ProgramData\jwxutynk\pwdotctk.exe" [2008-03-30 20:56 37376]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-03-27 22:15 1006264]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-11-21 06:33 107112]
"osCheck"="c:\Program Files\Norton Internet Security\osCheck.exe" [2006-11-21 06:30 22696]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-01 09:38 4390912 C:\Windows\RtHDVCpl.exe]
"Acer Empowering Technology Monitor"="C:\Acer\Empowering Technology\SysMonitor.exe" [2007-01-24 10:27 319488]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-02-07 00:04 464168]
"Acer Tour"="" []
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112]
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 22:48 57344]
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-02-15 18:39 151552]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-03-28 01:53 185896]
"PC-Antispyware"="C:\Program Files\PC-Antispyware\PC-Antispyware.exe" [ ]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-02-15 18:39 151552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-04-24 14:53:40 528384]
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
PCM Media Sharing.lnk - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [2007-04-24 14:32:04 200812]
WiFi Station pour Livebox.lnk - C:\Program Files\Cl‚ WiFi\WiFi Station pour Livebox\WiFiLB.exe [2008-03-26 20:25:05 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{F95798C9-BF0A-4D20-BD7C-6B38E7FF9FEE}"= C:\Program Files\Acer Arcade Live\Acer Arcade Live Main Page\Acer Arcade Live.exe:Acer Arcade Live
"{A5333138-7820-4A45-A0F8-9FD93BB4D627}"= C:\Program Files\Acer Arcade Live\Acer DV Magician\Component\ARAWP.exe:DV Magician ARA workprocess
"{D585109C-A3E9-47A0-B1F8-BEF827E9F6D7}"= C:\Program Files\Acer Arcade Live\Acer DV Magician\Component\DVAX2Process.exe:DV Magician AVAX workprocess
"{31A60708-F002-42F4-9908-B33BD16550DD}"= C:\Program Files\Acer Arcade Live\SlideShow DVD\Component\CLSLDVD.exe:SlideShow DVD workprocess
"{932D4E56-6D5F-4909-A913-8B5947834283}"= C:\Program Files\Acer Arcade Live\Acer VideoMagician\VideoMagician.exe:VideoMagician
"{B4E3A7E7-6249-4309-B05F-B68B9B030828}"= C:\Program Files\Acer Arcade Live\Acer DVDivine\DVDivine.exe:DVDivine
"{383C1570-BA3C-4015-8188-2C4B6D3284C4}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia\HomeMedia.exe:HomeMedia
"{96FB5B8F-6D95-4F7A-809C-7952FC936ACB}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\HomeMedia Connect.exe:HomeMedia Connect
"{4FF06BD9-4370-4B76-ACF7-40542F1CF716}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.EXE:HomeMedia Connect Service
"{A3545E1B-C746-447F-9041-B38D5406AB1D}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B27F2B2A-F1C3-4E65-8725-F857C07B7BEF}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{80E66A1B-8998-4596-98AF-1889E2A521D6}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-02-07 00:04]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-02-07 00:04]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2007-02-07 00:04]
R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20080331.001\IDSvix86.sys [2008-03-12 09:30]
R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;"C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe" [2007-04-04 18:54]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-02-07 00:04]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-06-27 00:00]
R3 netr73;Hercules Wireless USB Dongle Driver for Vista;C:\Windows\system32\DRIVERS\netr73.sys [2007-01-31 18:01]
R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2006-11-21 06:34]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-09 03:52]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-06-27 00:00]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\shell\Auto\command - AdobeR.exe e
\shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0ed54905-fcd5-11dc-96af-001d920d2a53}]
\shell\Setup\command - J:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4107f1e1-00ad-11dd-ab14-001d920d2a53}]
\shell\Setup\command - I:\setup.exe

*Newly Created Service* - COMHOST
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-29 00:39:32 C:\Windows\Tasks\Norton Internet Security - Analyse système complète - Alex.job"
- c:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeB/TASK:
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-04 10:01:41
Windows 6.0.6000 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-04-04 10:02:07
ComboFix-quarantined-files.txt 2008-04-04 08:02:04
Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
.
2008-04-04 07:00:51 --- E O F ---

j'en ai refait un entre temps!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:39:20, on 02/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\ProgramData\yskpidgq\dujqvgdy.exe
C:\ProgramData\jwxutynk\pwdotctk.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Program Files\Clé WiFi\WiFi Station pour Livebox\WiFiLB.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Windows Media Player\wmplayer.exe
I:\software\hijackthis.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PC-Antispyware] "C:\Program Files\PC-Antispyware\PC-Antispyware.exe" hide
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [yskpidgq] C:\ProgramData\yskpidgq\dujqvgdy.exe
O4 - HKCU\..\Run: [y8J9A2Sq9c] C:\ProgramData\jwxutynk\pwdotctk.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: Validation de mot de passe Symantec IS (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

Malwarebytes' Anti-Malware 1.10
Version de la base de données: 589

Type de recherche: Examen complet (C:\|)
Eléments examinés: 112602
Temps écoulé: 17 minute(s), 1 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000000da-0786-4633-87c6-1aa7a4429ef1} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9dd4258a-7138-49c4-8d34-587879a5c7a4} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b8c0220d-763d-49a4-95f4-61dfdec66ee6} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3bcc488-1ae7-11d4-ab82-0010a4ec2338} (Fake.Dropped.Malware) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Inet Delivery (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\mslagent (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorertoolbar (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Golden Palace Casino NEW (Trojan.DNSChanger) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC-Antispyware (Rogue.PC-Antispyware) -> No action taken.

Fichier(s) infecté(s):
C:\_OTMoveIt\MovedFiles\04042008_101140\ProgramData\jwxutynk\pwdotctk.exe (Trojan.FakeAlert) -> No action taken.
C:\_OTMoveIt\MovedFiles\04042008_101140\ProgramData\yskpidgq\dujqvgdy.exe (Trojan.FakeAlert) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC-Antispyware\PC-Antispyware Uninstall.lnk (Rogue.PC-Antispyware) -> No action taken.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC-Antispyware\PC-Antispyware.lnk (Rogue.PC-Antispyware) -> No action taken.