Bonjour à tous et surtout à Apollo vers qui je me tourne afin de solliciter ses services.
Je me retrouve avec le même problème que Julian84, à savoir ce maudit "^^" (et non je ne souris pas! grrrr!).
J'ai donc fait le scan avec le logiciel UsbFix, cependant aucun programme infectieux n'est détecté !?
Le rapport donné est le suivant :
############################## | UsbFix V 7.081 | [Recherche]
Utilisateur: Manu (Administrateur) # PC-DE-MANU
Mis à jour le 05/02/2012 par El Desaparecido
Lancé à 23:09:26 | 07/02/2012
Site Web: http://eldesaparecido.com
Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com
PC: Acer (Aspire 7738 ) (X86-based PC) # Notebook
CPU: Intel® Core2 Duo CPU P7350 @ 2.00GHz (2000)
RAM -> [ Total : 3066 | Free : 1389 ]
BIOS: Ver 1.00PARTTBL
BOOT: Normal boot
OS: Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 7.0.6002.18005
SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
AV: Avira Desktop [ Enabled | Updated ]
FW: Windows FireWall Service [ Enabled ]
C:\ (%systemdrive%) -> Disque fixe # 453 Go (125 Go libre(s) - 28%) [ACER] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> CD-ROM
################## | Processus Actif |
C:\Windows\system32\csrss.exe (600)
C:\Windows\system32\wininit.exe (656)
C:\Windows\system32\csrss.exe (664)
C:\Windows\system32\services.exe (708)
C:\Windows\system32\lsass.exe (720)
C:\Windows\system32\lsm.exe (728)
C:\Windows\system32\winlogon.exe (756)
C:\Windows\system32\svchost.exe (936)
C:\Windows\system32\nvvsvc.exe (992)
C:\Windows\system32\svchost.exe (1032)
C:\Windows\System32\svchost.exe (1076)
C:\Windows\System32\svchost.exe (1176)
C:\Windows\System32\svchost.exe (1244)
C:\Windows\system32\svchost.exe (1268)
C:\Windows\system32\SLsvc.exe (1376)
C:\Windows\system32\svchost.exe (1416)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1492)
C:\Windows\system32\nvvsvc.exe (1504)
c:\Program Files\Acer Bio Protection\CompPtcVUI.exe (1580)
C:\Windows\system32\svchost.exe (1636)
C:\Windows\System32\spoolsv.exe (1940)
C:\Program Files\Avira\AntiVir Desktop\sched.exe (1976)
C:\Windows\system32\svchost.exe (2008)
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (812)
C:\Windows\system32\agrsmsvc.exe (1432)
C:\Windows\System32\svchost.exe (1556)
C:\Program Files\Avira\AntiVir Desktop\avguard.exe (1620)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (1612)
C:\Program Files\Bonjour\mDNSResponder.exe (1028)
C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe (1820)
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe (1992)
c:\Program Files\Acer Bio Protection\BASVC.exe (2060)
C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe (2124)
C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (2152)
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (2188)
C:\Windows\system32\PnkBstrA.exe (2236)
C:\Windows\system32\PnkBstrB.exe (2252)
C:\Windows\system32\svchost.exe (2280)
C:\Program Files\Acer\Acer VCM\RS_Service.exe (2292)
C:\Windows\system32\svchost.exe (2312)
C:\Windows\System32\svchost.exe (2360)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2408)
C:\Windows\system32\SearchIndexer.exe (2480)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2844)
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (2972)
C:\Windows\system32\Dwm.exe (3544)
C:\Windows\system32\taskeng.exe (3592)
C:\Program Files\Windows Defender\MSASCui.exe (3928)
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (3936)
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe (3956)
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe (4072)
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (1884)
C:\Windows\PLFSetI.exe (1448)
C:\Program Files\Acer Bio Protection\PdtWzd.exe (2216)
C:\Program Files\Apoint2K\Apoint.exe (608)
C:\Program Files\Launch Manager\LManager.exe (2476)
C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (2648)
C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe (2820)
C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (2808)
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (1196)
C:\Program Files\Java\jre6\bin\jusched.exe (1984)
C:\Program Files\Windows Media Player\wmpnscfg.exe (1696)
C:\Program Files\Windows Media Player\wmpnetwk.exe (3172)
C:\Users\Manu\AppData\Roaming\supfc\upd.exe (3388)
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (3496)
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (3504)
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe (3588)
C:\Program Files\iTunes\iTunesHelper.exe (3468)
C:\Users\Manu\AppData\Roaming\cacaoweb\cacaoweb.exe (3652)
C:\Program Files\Steam\Steam.exe (1172)
C:\Windows\system32\taskeng.exe (1132)
C:\Program Files\Acer\Acer VCM\AcerVCM.exe (4004)
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (4080)
C:\Program Files\Apoint2K\ApMsgFwd.exe (1392)
C:\Program Files\Apoint2K\Apntex.exe (3128)
C:\Program Files\Apoint2K\HidFind.exe (2824)
C:\Program Files\Acer Bio Protection\PwdBank.exe (4448)
C:\Program Files\iPod\bin\iPodService.exe (4872)
C:\Windows\system32\wbem\unsecapp.exe (4968)
C:\Users\Manu\AppData\Local\Temp\RtkBtMnt.exe (5016)
C:\Windows\system32\wbem\wmiprvse.exe (5252)
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe (5728)
C:\Windows\system32\svchost.exe (5736)
C:\Windows\explorer.exe (4596)
C:\Program Files\Java\jre6\bin\jucheck.exe (1796)
C:\Users\Manu\AppData\Local\Akamai\netsession_win.exe (4676)
C:\Users\Manu\AppData\Local\Akamai\netsession_win.exe (1064)
C:\Program Files\Mozilla Firefox\firefox.exe (4720)
C:\Program Files\Mozilla Firefox\plugin-container.exe (1760)
C:\Program Files\VideoLAN\VLC\vlc.exe (6008)
C:\Windows\system32\taskeng.exe (5196)
C:\Windows\system32\SearchProtocolHost.exe (6136)
C:\Windows\system32\SearchFilterHost.exe (3236)
C:\UsbFix\Go.exe (6012)
C:\Windows\system32\wbem\wmiprvse.exe (5400)
################## | Éléments infectieux |
################## | Registre |
################## | Mountpoints2 |
HKCU\.\.\.\.\Explorer\MountPoints2\F
Shell\AutoRun\Command = WDSetup.exe
HKCU\.\.\.\.\Explorer\MountPoints2\G
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL MwrIoY.EXe
HKCU\.\.\.\.\Explorer\MountPoints2\{1a1a0241-4afe-11df-bf04-0022fa1b2dfa}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\CiedEI.Exe
HKCU\.\.\.\.\Explorer\MountPoints2\{1a1a025d-4afe-11df-bf04-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\CiedEI.Exe
HKCU\.\.\.\.\Explorer\MountPoints2\{1b1988bc-d04e-11df-af4b-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL MwrIoY.eXe
HKCU\.\.\.\.\Explorer\MountPoints2\{29b4d91c-77f6-11e0-afd1-001f16a3da95}
Shell\AutoRun\Command = E:\autorun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{34d960c1-c26d-11e0-89c3-806e6f6e6963}
Shell\AutoRun\Command = G:\autorun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{4092f801-0f5d-11df-ab71-001f16a3da95}
Shell\AutoRun\Command = G:\vgyn6ewc.exe
Shell\open\Command = G:\vgyn6ewc.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{51968c36-e6d3-11df-be9b-001f16a3da95}
Shell\AutoRun\Command = "G:\WD SmartWare.exe" autoplay=true
HKCU\.\.\.\.\Explorer\MountPoints2\{6f17bf87-e4ff-11df-a46d-001f16a3da95}
Shell\AutoRun\Command = "G:\WD SmartWare.exe" autoplay=true
HKCU\.\.\.\.\Explorer\MountPoints2\{7791b7e8-f8a2-11df-b269-001f16a3da95}
Shell\AutoRun\Command = "G:\WD SmartWare.exe" autoplay=true
HKCU\.\.\.\.\Explorer\MountPoints2\{7dbdeb75-971f-11de-bd9f-0022fa1b2dfa}
Shell\AutoRun\Command = G:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{860c7a7c-eb01-11de-88f0-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL qAUoYA.Exe
HKCU\.\.\.\.\Explorer\MountPoints2\{8cdf6dd9-bdd1-11de-a6fa-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\RAUoYa.EXe
HKCU\.\.\.\.\Explorer\MountPoints2\{a646991a-482d-11df-bda0-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL FiegiOk.EXE
HKCU\.\.\.\.\Explorer\MountPoints2\{a6d739eb-f9f4-11de-ac2e-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\lWrIoY.eXe
HKCU\.\.\.\.\Explorer\MountPoints2\{a9ccf25e-0d44-11e0-8c33-001f16a3da95}
Shell\AutoRun\Command = G:\start.exe
Shell\iledefrance\Command = G:\start.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{aa5fb938-ddd1-11de-94b0-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\QaUoya.Exe
HKCU\.\.\.\.\Explorer\MountPoints2\{aa5fb974-ddd1-11de-94b0-001f16a3da95}
Shell\AutoRun\Command = mbdm.exe
Shell\open\Command = mbdm.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{b4f20c53-97c2-11de-b7c5-0022fa1b2dfa}
Shell\directx\Command = E:\DirectX9\dxsetup.exe
Shell\setup\Command = E:\install.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{d288edb5-3008-11df-b009-0022fa1b2dfa}
Shell\AutoRun\Command = notepad.exe Divers\salut_toi.txt
HKCU\.\.\.\.\Explorer\MountPoints2\{d4f3c1cd-e3e1-11de-b9e2-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\MwrIOY.EXe
HKCU\.\.\.\.\Explorer\MountPoints2\{d4f3c1ce-e3e1-11de-b9e2-001f16a3da95}
Shell\AutoRun\Command = G:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{f987be4c-31c0-11df-adf9-001f16a3da95}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL QAUoYa.exe
################## | Vaccin |
(!) Cet ordinateur n'est pas vacciné!
################## | E.O.F |
Que dois-je faire à partir de là ?
Je remercie d'avance toutes personnes susceptibles de m'aider.
Bonne soirée à tous !