Virus Win32:Dialer-gen [Trj]

Je ne sais pas si sa va marcher mais Lolo et Seb, d'abord merci de me consacrer un peu de votre temps. Vous êtes un peu les chevaliers Jedi de l'informatique.
Voice le rapport de la recherche toolbar:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : ordi ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090217-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:26 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 18/02/2009|13:40 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\DAEMON Tools Toolbar
C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
C:\WINDOWS\iun6002.exe

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://gamespace.daemon-tools.cc/fra/home"
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Search Bar"="http://www.google.fr/toolbar/ie8/sidebar.html"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 18/02/2009|13:41 - Option : [1]

-----------\\ Fin du rapport a 13:41:35,98

Voici le rapport SDFix:

[b]SDFix: Version 1.240 [/b]
Run by ordi on 18/02/2009 at 13:56

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:



[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-18 14:02:32
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:19,d9,e7,49,f8,57,9f,99,46,56,2c,e8,b6,f5,15,94,2b,55,9c,02,3e,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,6c,31,67,2e,bd,89,49,88,04,1f,80,73,30,29,a1,3d,a2,..
"khjeh"=hex:49,3c,de,e2,d5,3e,98,6d,94,3e,be,ae,c2,a3,df,07,4c,43,5e,fc,a1,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:2a,b7,b3,cc,42,d5,72,71,7b,fd,a7,c6,78,73,a4,2f,50,78,8f,9d,e4,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:19,d9,e7,49,f8,57,9f,99,46,56,2c,e8,b6,f5,15,94,2b,55,9c,02,3e,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,6c,31,67,2e,bd,89,49,88,04,1f,80,73,30,29,a1,3d,a2,..
"khjeh"=hex:49,3c,de,e2,d5,3e,98,6d,94,3e,be,ae,c2,a3,df,07,4c,43,5e,fc,a1,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:2a,b7,b3,cc,42,d5,72,71,7b,fd,a7,c6,78,73,a4,2f,50,78,8f,9d,e4,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\EA Games\\La Bataille pour la Terre du Milieu(tm)\\game.dat"="C:\\Program Files\\EA Games\\La Bataille pour la Terre du Milieu(tm)\\game.dat:*:Enabled:La Bataille pour la Terre du Milieu(tm)"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Tue 15 Apr 2008 6,104,632 A..H. --- "C:\Program Files\Picasa2\setup.exe"
Fri 6 Feb 2009 621,568 A.SHR --- "C:\RECYCLER\k-1-3542-4232123213-7676767-8888886\Wins.exe"
Fri 4 Apr 2008 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 14 Feb 2009 9,934,392 A..H. --- "C:\Program Files\Google\Picasa3\setup.exe"
Sun 8 Feb 2009 2,362 A..H. --- "C:\Program Files\InterActual\InterActual Player\iti1.tmp"
Wed 3 Dec 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 7 Dec 2006 3,096,576 A..H. --- "C:\Documents and Settings\ordi\Application Data\U3\temp\Launchpad Removal.exe"

[b]Finished![/b]

faut-il que je désactive la protection résidente d'Avast ?

le rapport toolbar est disponible en 5)

Je suis actuellement en train de faire le scan complet avec Malwarebytes. Le rapport Toolbar ne vous convient-il pas ? ce n'est pas ce que vous voulez ?

voici le rapport suppression:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : ordi ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090217-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:26 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 18/02/2009|15:09 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\Program Files\DAEMON Tools Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://gamespace.daemon-tools.cc/fra/home"
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Search Bar"="http://www.google.fr/toolbar/ie8/sidebar.html"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 18/02/2009|13:41 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 18/02/2009|15:11 - Option : [2]

-----------\\ Fin du rapport a 15:11:07,92

voici le rapport malwarbyte:

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1773
Windows 5.1.2600 Service Pack 3

18/02/2009 15:58:59
mbam-log-2009-02-18 (15-58-52).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 107513
Temps écoulé: 42 minute(s), 36 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\BitDownload (Trojan.Lop) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pense-bête (Trojan.FakeAlert.H) -> No action taken.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\AXEL\Pense-bête\pensebet.exe (Trojan.FakeAlert.H) -> No action taken.

... et voici le rapport après suppression avec malware byte:

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1773
Windows 5.1.2600 Service Pack 3

18/02/2009 16:04:18
mbam-log-2009-02-18 (16-04-18).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 107513
Temps écoulé: 42 minute(s), 36 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pense-bête (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\AXEL\Pense-bête\pensebet.exe (Trojan.FakeAlert.H) -> Delete on reboot.

donc maintenant sur les post 3, je passe directement au RSIT ?

voici le rapport Lop S&D option 2:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : ordi ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090217-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:26 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 18/02/2009|16:24 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ordi\LOCALS~1\Temp\nsa38.tmp
Echec ! - C:\DOCUME~1\ordi\Cookies\ordi@advertising[1].txt
Echec ! - C:\DOCUME~1\ordi\Cookies\ordi@adopt.euroclick[1].txt
Supprime! - C:\DOCUME~1\ordi\Cookies\ordi@32vegas[2].txt
Supprime! - C:\DOCUME~1\ordi\Cookies\ordi@banner.32vegas[1].txt
Supprime! - C:\DOCUME~1\ordi\Cookies\ordi@www.32vegas[1].txt
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[09/12/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[21/12/2007|22:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/12/2007|22:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[02/02/2009|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[18/02/2009|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters
[18/02/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[14/02/2009|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/09/2008|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[08/12/2007|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless

[11/11/2007|07:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[03/12/2008|10:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/11/2007|07:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[01/12/2008|12:38] C:\DOCUME~1\ordi\APPLIC~1\Adobe
[19/04/2008|17:58] C:\DOCUME~1\ordi\APPLIC~1\Ahead
[09/12/2008|15:07] C:\DOCUME~1\ordi\APPLIC~1\Apple Computer
[02/02/2009|22:32] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools
[02/02/2009|22:34] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools Lite
[02/02/2009|22:32] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools Pro
[10/12/2008|10:32] C:\DOCUME~1\ordi\APPLIC~1\DMCache
[07/02/2009|23:17] C:\DOCUME~1\ordi\APPLIC~1\dvdcss
[11/11/2007|07:54] C:\DOCUME~1\ordi\APPLIC~1\Identities
[10/12/2008|11:08] C:\DOCUME~1\ordi\APPLIC~1\IDM
[22/12/2007|11:22] C:\DOCUME~1\ordi\APPLIC~1\InterTrust
[05/01/2008|19:24] C:\DOCUME~1\ordi\APPLIC~1\InterVideo
[17/02/2009|19:40] C:\DOCUME~1\ordi\APPLIC~1\LimeWire
[15/01/2008|15:04] C:\DOCUME~1\ordi\APPLIC~1\Macromedia
[18/02/2009|14:13] C:\DOCUME~1\ordi\APPLIC~1\Malwarebytes
[02/02/2009|20:35] C:\DOCUME~1\ordi\APPLIC~1\Microsoft
[02/12/2008|08:28] C:\DOCUME~1\ordi\APPLIC~1\Mozilla
[16/02/2009|12:02] C:\DOCUME~1\ordi\APPLIC~1\Panasonic
[02/02/2009|20:28] C:\DOCUME~1\ordi\APPLIC~1\Pense-bete
[12/12/2008|16:40] C:\DOCUME~1\ordi\APPLIC~1\Sierra Entertainment
[01/12/2008|18:58] C:\DOCUME~1\ordi\APPLIC~1\Sun
[18/12/2008|18:41] C:\DOCUME~1\ordi\APPLIC~1\U3
[22/12/2007|10:55] C:\DOCUME~1\ordi\APPLIC~1\vlc

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[06/02/2009 10:40][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[18/02/2009 16:08][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[24/08/2001 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/12/2007|10:54] C:\Program Files\7-Zip
[22/12/2007|11:24] C:\Program Files\Adobe
[06/01/2008|13:44] C:\Program Files\Ahead
[01/12/2008|12:17] C:\Program Files\Alwil Software
[09/12/2008|15:06] C:\Program Files\Apple Software Update
[02/02/2009|20:33] C:\Program Files\AXEL
[03/02/2009|11:24] C:\Program Files\Bullfrog
[11/02/2009|21:33] C:\Program Files\Chec
[11/11/2007|07:45] C:\Program Files\ComPlus Applications
[08/12/2007|16:07] C:\Program Files\CONEXANT
[02/02/2009|22:12] C:\Program Files\DAEMON Tools Lite
[10/12/2007|07:08] C:\Program Files\Dell
[01/12/2008|19:39] C:\Program Files\eMule
[26/12/2008|10:41] C:\Program Files\Fichiers communs
[18/02/2009|10:07] C:\Program Files\Fighters
[18/12/2008|11:32] C:\Program Files\Google
[14/02/2009|16:00] C:\Program Files\InstallShield Installation Information
[08/12/2007|16:05] C:\Program Files\Intel
[20/03/2008|13:13] C:\Program Files\InterActual
[10/12/2008|11:08] C:\Program Files\Internet Download Manager
[01/12/2008|15:33] C:\Program Files\Internet Explorer
[02/01/2008|11:29] C:\Program Files\InterVideo
[21/04/2008|17:05] C:\Program Files\iPlayer Mass Storage Driver V3.1
[09/12/2008|15:03] C:\Program Files\iPod
[09/12/2008|15:03] C:\Program Files\iTunes
[03/12/2008|12:39] C:\Program Files\Java
[03/12/2008|12:04] C:\Program Files\LimeWire
[22/12/2007|11:06] C:\Program Files\loliwin
[18/02/2009|14:13] C:\Program Files\Malwarebytes' Anti-Malware
[02/12/2008|19:30] C:\Program Files\Messenger
[11/11/2007|07:49] C:\Program Files\microsoft frontpage
[10/12/2007|08:24] C:\Program Files\Microsoft Office
[10/12/2007|08:24] C:\Program Files\Microsoft Visual Studio
[10/12/2007|08:24] C:\Program Files\Microsoft Works
[08/12/2007|16:05] C:\Program Files\Modem Helper
[01/12/2008|20:57] C:\Program Files\Movie Maker
[18/02/2009|16:18] C:\Program Files\Mozilla Firefox
[10/12/2007|08:24] C:\Program Files\MSBuild
[01/12/2008|20:57] C:\Program Files\msn
[11/11/2007|07:49] C:\Program Files\msn gaming zone
[11/11/2007|07:49] C:\Program Files\netmeeting
[01/12/2008|20:53] C:\Program Files\Outlook Express
[22/04/2008|21:01] C:\Program Files\Picasa2
[21/12/2007|22:09] C:\Program Files\PowerArchiver
[09/12/2008|15:01] C:\Program Files\QuickTime
[01/12/2008|11:10] C:\Program Files\SAGEM
[01/12/2008|11:10] C:\Program Files\SAGEM WiFi manager
[11/11/2007|07:47] C:\Program Files\Services en ligne
[08/12/2007|16:09] C:\Program Files\SigmaTel
[11/11/2007|07:54] C:\Program Files\Uninstall Information
[22/12/2007|10:54] C:\Program Files\VideoLAN
[03/12/2008|10:47] C:\Program Files\Windows Media Connect 2
[03/12/2008|10:48] C:\Program Files\Windows Media Player
[11/11/2007|07:49] C:\Program Files\Windows NT
[11/11/2007|07:47] C:\Program Files\WindowsUpdate
[11/11/2007|07:49] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/12/2007|11:24] C:\Program Files\Fichiers communs\Adobe
[06/01/2008|13:44] C:\Program Files\Fichiers communs\Ahead
[09/12/2008|15:03] C:\Program Files\Fichiers communs\Apple
[10/12/2007|08:24] C:\Program Files\Fichiers communs\DESIGNER
[24/12/2007|11:48] C:\Program Files\Fichiers communs\InstallShield
[10/12/2007|08:24] C:\Program Files\Fichiers communs\Microsoft Shared
[11/11/2007|07:46] C:\Program Files\Fichiers communs\MSSoap
[11/11/2007|08:41] C:\Program Files\Fichiers communs\ODBC
[11/11/2007|07:46] C:\Program Files\Fichiers communs\Services
[11/11/2007|08:41] C:\Program Files\Fichiers communs\SpeechEngines
[01/12/2008|20:53] C:\Program Files\Fichiers communs\System
[08/12/2007|16:15] C:\Program Files\Fichiers communs\Zeepe Framework 7

--------------------\\ Process

( 47 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-18 16:25:56
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:32][D:33]-> C:\DOCUME~1\ordi\LOCALS~1\Temp
[F:145][D:0]-> C:\DOCUME~1\ordi\Cookies
[F:581][D:8]-> C:\DOCUME~1\ordi\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 18/02/2009|16:23 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 18/02/2009|16:26 - Option : [2]

--------------------\\ Fin du rapport a 16:26:39

Re : 1)


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : ordi ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090217-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:26 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 18/02/2009|16:36 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://gamespace.daemon-tools.cc/fra/home"
"Search Page"="https://www.google.fr/?gws_rd=ssl"
"Search Bar"="http://www.google.fr/toolbar/ie8/sidebar.html"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 18/02/2009|13:41 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 18/02/2009|15:11 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 18/02/2009|16:34 - Option : [1]
4 - "C:\ToolBar SD\TB_4.txt" - 18/02/2009|16:37 - Option : [2]

-----------\\ Fin du rapport a 16:37:07,46

Ha, mince, dsl. Voici le rapport Lop 1:

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : ordi ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090217-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:26 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 18/02/2009|17:01 )

--------------------\\ Listing des dossiers dans APPLIC~1

[09/12/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[21/12/2007|22:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/12/2007|22:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[02/02/2009|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[18/02/2009|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters
[18/02/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[14/02/2009|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/09/2008|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[08/12/2007|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless

[11/11/2007|07:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[03/12/2008|10:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/11/2007|07:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[01/12/2008|12:38] C:\DOCUME~1\ordi\APPLIC~1\Adobe
[19/04/2008|17:58] C:\DOCUME~1\ordi\APPLIC~1\Ahead
[09/12/2008|15:07] C:\DOCUME~1\ordi\APPLIC~1\Apple Computer
[02/02/2009|22:32] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools
[02/02/2009|22:34] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools Lite
[02/02/2009|22:32] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools Pro
[10/12/2008|10:32] C:\DOCUME~1\ordi\APPLIC~1\DMCache
[07/02/2009|23:17] C:\DOCUME~1\ordi\APPLIC~1\dvdcss
[11/11/2007|07:54] C:\DOCUME~1\ordi\APPLIC~1\Identities
[10/12/2008|11:08] C:\DOCUME~1\ordi\APPLIC~1\IDM
[22/12/2007|11:22] C:\DOCUME~1\ordi\APPLIC~1\InterTrust
[05/01/2008|19:24] C:\DOCUME~1\ordi\APPLIC~1\InterVideo
[17/02/2009|19:40] C:\DOCUME~1\ordi\APPLIC~1\LimeWire
[15/01/2008|15:04] C:\DOCUME~1\ordi\APPLIC~1\Macromedia
[18/02/2009|14:13] C:\DOCUME~1\ordi\APPLIC~1\Malwarebytes
[02/02/2009|20:35] C:\DOCUME~1\ordi\APPLIC~1\Microsoft
[02/12/2008|08:28] C:\DOCUME~1\ordi\APPLIC~1\Mozilla
[16/02/2009|12:02] C:\DOCUME~1\ordi\APPLIC~1\Panasonic
[02/02/2009|20:28] C:\DOCUME~1\ordi\APPLIC~1\Pense-bete
[12/12/2008|16:40] C:\DOCUME~1\ordi\APPLIC~1\Sierra Entertainment
[01/12/2008|18:58] C:\DOCUME~1\ordi\APPLIC~1\Sun
[18/12/2008|18:41] C:\DOCUME~1\ordi\APPLIC~1\U3
[22/12/2007|10:55] C:\DOCUME~1\ordi\APPLIC~1\vlc

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[06/02/2009 10:40][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[18/02/2009 16:52][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[24/08/2001 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/12/2007|10:54] C:\Program Files\7-Zip
[22/12/2007|11:24] C:\Program Files\Adobe
[06/01/2008|13:44] C:\Program Files\Ahead
[01/12/2008|12:17] C:\Program Files\Alwil Software
[09/12/2008|15:06] C:\Program Files\Apple Software Update
[02/02/2009|20:33] C:\Program Files\AXEL
[03/02/2009|11:24] C:\Program Files\Bullfrog
[11/02/2009|21:33] C:\Program Files\Chec
[11/11/2007|07:45] C:\Program Files\ComPlus Applications
[08/12/2007|16:07] C:\Program Files\CONEXANT
[02/02/2009|22:12] C:\Program Files\DAEMON Tools Lite
[10/12/2007|07:08] C:\Program Files\Dell
[01/12/2008|19:39] C:\Program Files\eMule
[26/12/2008|10:41] C:\Program Files\Fichiers communs
[18/02/2009|10:07] C:\Program Files\Fighters
[18/12/2008|11:32] C:\Program Files\Google
[14/02/2009|16:00] C:\Program Files\InstallShield Installation Information
[08/12/2007|16:05] C:\Program Files\Intel
[20/03/2008|13:13] C:\Program Files\InterActual
[10/12/2008|11:08] C:\Program Files\Internet Download Manager
[01/12/2008|15:33] C:\Program Files\Internet Explorer
[02/01/2008|11:29] C:\Program Files\InterVideo
[21/04/2008|17:05] C:\Program Files\iPlayer Mass Storage Driver V3.1
[09/12/2008|15:03] C:\Program Files\iPod
[09/12/2008|15:03] C:\Program Files\iTunes
[03/12/2008|12:39] C:\Program Files\Java
[03/12/2008|12:04] C:\Program Files\LimeWire
[22/12/2007|11:06] C:\Program Files\loliwin
[18/02/2009|14:13] C:\Program Files\Malwarebytes' Anti-Malware
[02/12/2008|19:30] C:\Program Files\Messenger
[11/11/2007|07:49] C:\Program Files\microsoft frontpage
[10/12/2007|08:24] C:\Program Files\Microsoft Office
[10/12/2007|08:24] C:\Program Files\Microsoft Visual Studio
[10/12/2007|08:24] C:\Program Files\Microsoft Works
[08/12/2007|16:05] C:\Program Files\Modem Helper
[01/12/2008|20:57] C:\Program Files\Movie Maker
[18/02/2009|16:59] C:\Program Files\Mozilla Firefox
[10/12/2007|08:24] C:\Program Files\MSBuild
[01/12/2008|20:57] C:\Program Files\msn
[11/11/2007|07:49] C:\Program Files\msn gaming zone
[11/11/2007|07:49] C:\Program Files\netmeeting
[01/12/2008|20:53] C:\Program Files\Outlook Express
[22/04/2008|21:01] C:\Program Files\Picasa2
[21/12/2007|22:09] C:\Program Files\PowerArchiver
[09/12/2008|15:01] C:\Program Files\QuickTime
[01/12/2008|11:10] C:\Program Files\SAGEM
[01/12/2008|11:10] C:\Program Files\SAGEM WiFi manager
[11/11/2007|07:47] C:\Program Files\Services en ligne
[08/12/2007|16:09] C:\Program Files\SigmaTel
[11/11/2007|07:54] C:\Program Files\Uninstall Information
[22/12/2007|10:54] C:\Program Files\VideoLAN
[03/12/2008|10:47] C:\Program Files\Windows Media Connect 2
[03/12/2008|10:48] C:\Program Files\Windows Media Player
[11/11/2007|07:49] C:\Program Files\Windows NT
[11/11/2007|07:47] C:\Program Files\WindowsUpdate
[11/11/2007|07:49] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/12/2007|11:24] C:\Program Files\Fichiers communs\Adobe
[06/01/2008|13:44] C:\Program Files\Fichiers communs\Ahead
[09/12/2008|15:03] C:\Program Files\Fichiers communs\Apple
[10/12/2007|08:24] C:\Program Files\Fichiers communs\DESIGNER
[24/12/2007|11:48] C:\Program Files\Fichiers communs\InstallShield
[10/12/2007|08:24] C:\Program Files\Fichiers communs\Microsoft Shared
[11/11/2007|07:46] C:\Program Files\Fichiers communs\MSSoap
[11/11/2007|08:41] C:\Program Files\Fichiers communs\ODBC
[11/11/2007|07:46] C:\Program Files\Fichiers communs\Services
[11/11/2007|08:41] C:\Program Files\Fichiers communs\SpeechEngines
[01/12/2008|20:53] C:\Program Files\Fichiers communs\System
[08/12/2007|16:15] C:\Program Files\Fichiers communs\Zeepe Framework 7

--------------------\\ Process

( 49 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-18 17:02:46
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:30][D:33]-> C:\DOCUME~1\ordi\LOCALS~1\Temp
[F:145][D:0]-> C:\DOCUME~1\ordi\Cookies
[F:581][D:8]-> C:\DOCUME~1\ordi\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 18/02/2009|16:23 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 18/02/2009|16:26 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - 18/02/2009|17:03 - Option : [1]

--------------------\\ Fin du rapport a 17:03:33

...et voici le rapport Lop 2:


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A08
USER : ordi ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090217-0] 4.8.1335 (Activated)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:26 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 18/02/2009|17:06 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[09/12/2008|15:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[21/12/2007|22:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[21/12/2007|22:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[02/02/2009|22:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Lite
[18/02/2009|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fighters
[18/02/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[14/02/2009|16:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/09/2008|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[08/12/2007|16:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Novatel Wireless

[11/11/2007|07:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[03/12/2008|10:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/11/2007|07:48] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[01/12/2008|12:38] C:\DOCUME~1\ordi\APPLIC~1\Adobe
[19/04/2008|17:58] C:\DOCUME~1\ordi\APPLIC~1\Ahead
[09/12/2008|15:07] C:\DOCUME~1\ordi\APPLIC~1\Apple Computer
[02/02/2009|22:32] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools
[02/02/2009|22:34] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools Lite
[02/02/2009|22:32] C:\DOCUME~1\ordi\APPLIC~1\DAEMON Tools Pro
[10/12/2008|10:32] C:\DOCUME~1\ordi\APPLIC~1\DMCache
[07/02/2009|23:17] C:\DOCUME~1\ordi\APPLIC~1\dvdcss
[11/11/2007|07:54] C:\DOCUME~1\ordi\APPLIC~1\Identities
[10/12/2008|11:08] C:\DOCUME~1\ordi\APPLIC~1\IDM
[22/12/2007|11:22] C:\DOCUME~1\ordi\APPLIC~1\InterTrust
[05/01/2008|19:24] C:\DOCUME~1\ordi\APPLIC~1\InterVideo
[17/02/2009|19:40] C:\DOCUME~1\ordi\APPLIC~1\LimeWire
[15/01/2008|15:04] C:\DOCUME~1\ordi\APPLIC~1\Macromedia
[18/02/2009|14:13] C:\DOCUME~1\ordi\APPLIC~1\Malwarebytes
[02/02/2009|20:35] C:\DOCUME~1\ordi\APPLIC~1\Microsoft
[02/12/2008|08:28] C:\DOCUME~1\ordi\APPLIC~1\Mozilla
[16/02/2009|12:02] C:\DOCUME~1\ordi\APPLIC~1\Panasonic
[02/02/2009|20:28] C:\DOCUME~1\ordi\APPLIC~1\Pense-bete
[12/12/2008|16:40] C:\DOCUME~1\ordi\APPLIC~1\Sierra Entertainment
[01/12/2008|18:58] C:\DOCUME~1\ordi\APPLIC~1\Sun
[18/12/2008|18:41] C:\DOCUME~1\ordi\APPLIC~1\U3
[22/12/2007|10:55] C:\DOCUME~1\ordi\APPLIC~1\vlc

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[06/02/2009 10:40][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[18/02/2009 16:52][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[24/08/2001 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[22/12/2007|10:54] C:\Program Files\7-Zip
[22/12/2007|11:24] C:\Program Files\Adobe
[06/01/2008|13:44] C:\Program Files\Ahead
[01/12/2008|12:17] C:\Program Files\Alwil Software
[09/12/2008|15:06] C:\Program Files\Apple Software Update
[02/02/2009|20:33] C:\Program Files\AXEL
[03/02/2009|11:24] C:\Program Files\Bullfrog
[11/02/2009|21:33] C:\Program Files\Chec
[11/11/2007|07:45] C:\Program Files\ComPlus Applications
[08/12/2007|16:07] C:\Program Files\CONEXANT
[02/02/2009|22:12] C:\Program Files\DAEMON Tools Lite
[10/12/2007|07:08] C:\Program Files\Dell
[01/12/2008|19:39] C:\Program Files\eMule
[26/12/2008|10:41] C:\Program Files\Fichiers communs
[18/02/2009|10:07] C:\Program Files\Fighters
[18/12/2008|11:32] C:\Program Files\Google
[14/02/2009|16:00] C:\Program Files\InstallShield Installation Information
[08/12/2007|16:05] C:\Program Files\Intel
[20/03/2008|13:13] C:\Program Files\InterActual
[10/12/2008|11:08] C:\Program Files\Internet Download Manager
[01/12/2008|15:33] C:\Program Files\Internet Explorer
[02/01/2008|11:29] C:\Program Files\InterVideo
[21/04/2008|17:05] C:\Program Files\iPlayer Mass Storage Driver V3.1
[09/12/2008|15:03] C:\Program Files\iPod
[09/12/2008|15:03] C:\Program Files\iTunes
[03/12/2008|12:39] C:\Program Files\Java
[03/12/2008|12:04] C:\Program Files\LimeWire
[22/12/2007|11:06] C:\Program Files\loliwin
[18/02/2009|14:13] C:\Program Files\Malwarebytes' Anti-Malware
[02/12/2008|19:30] C:\Program Files\Messenger
[11/11/2007|07:49] C:\Program Files\microsoft frontpage
[10/12/2007|08:24] C:\Program Files\Microsoft Office
[10/12/2007|08:24] C:\Program Files\Microsoft Visual Studio
[10/12/2007|08:24] C:\Program Files\Microsoft Works
[08/12/2007|16:05] C:\Program Files\Modem Helper
[01/12/2008|20:57] C:\Program Files\Movie Maker
[18/02/2009|16:59] C:\Program Files\Mozilla Firefox
[10/12/2007|08:24] C:\Program Files\MSBuild
[01/12/2008|20:57] C:\Program Files\msn
[11/11/2007|07:49] C:\Program Files\msn gaming zone
[11/11/2007|07:49] C:\Program Files\netmeeting
[01/12/2008|20:53] C:\Program Files\Outlook Express
[22/04/2008|21:01] C:\Program Files\Picasa2
[21/12/2007|22:09] C:\Program Files\PowerArchiver
[09/12/2008|15:01] C:\Program Files\QuickTime
[01/12/2008|11:10] C:\Program Files\SAGEM
[01/12/2008|11:10] C:\Program Files\SAGEM WiFi manager
[11/11/2007|07:47] C:\Program Files\Services en ligne
[08/12/2007|16:09] C:\Program Files\SigmaTel
[11/11/2007|07:54] C:\Program Files\Uninstall Information
[22/12/2007|10:54] C:\Program Files\VideoLAN
[03/12/2008|10:47] C:\Program Files\Windows Media Connect 2
[03/12/2008|10:48] C:\Program Files\Windows Media Player
[11/11/2007|07:49] C:\Program Files\Windows NT
[11/11/2007|07:47] C:\Program Files\WindowsUpdate
[11/11/2007|07:49] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[22/12/2007|11:24] C:\Program Files\Fichiers communs\Adobe
[06/01/2008|13:44] C:\Program Files\Fichiers communs\Ahead
[09/12/2008|15:03] C:\Program Files\Fichiers communs\Apple
[10/12/2007|08:24] C:\Program Files\Fichiers communs\DESIGNER
[24/12/2007|11:48] C:\Program Files\Fichiers communs\InstallShield
[10/12/2007|08:24] C:\Program Files\Fichiers communs\Microsoft Shared
[11/11/2007|07:46] C:\Program Files\Fichiers communs\MSSoap
[11/11/2007|08:41] C:\Program Files\Fichiers communs\ODBC
[11/11/2007|07:46] C:\Program Files\Fichiers communs\Services
[11/11/2007|08:41] C:\Program Files\Fichiers communs\SpeechEngines
[01/12/2008|20:53] C:\Program Files\Fichiers communs\System
[08/12/2007|16:15] C:\Program Files\Fichiers communs\Zeepe Framework 7

--------------------\\ Process

( 48 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-18 17:09:23
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:31][D:33]-> C:\DOCUME~1\ordi\LOCALS~1\Temp
[F:145][D:0]-> C:\DOCUME~1\ordi\Cookies
[F:581][D:8]-> C:\DOCUME~1\ordi\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 18/02/2009|16:23 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 18/02/2009|16:26 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - 18/02/2009|17:03 - Option : [1]
4 - "C:\Lop SD\LopR_4.txt" - 18/02/2009|17:10 - Option : [2]

--------------------\\ Fin du rapport a 17:10:12

VOICI LOG txt:

Logfile of random's system information tool 1.05 (written by random/random)
Run by ordi at 2009-02-18 17:17:44
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 27 GB (48%) free of 57 GB
Total RAM: 503 MB (29% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-10 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SigmatelSysTrayApp"=C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe [2007-05-10 405504]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-06-06 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-06-06 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-06-06 118784]
"Broadcom Wireless Manager UI"=C:\WINDOWS\system32\WLTRAY.exe [2006-11-01 1392640]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"WOOWATCH"=C:\PROGRA~1\Wanadoo\Watch.exe []
"WOOTASKBARICON"=C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"spywarefighterguard"=C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe [2008-11-18 180872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"WOOKIT"=C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM= []

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk - C:\Program Files\SAGEM WiFi manager\WLANUTL.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-06-06 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\EA Games\La Bataille pour la Terre du Milieu(tm)\game.dat"="C:\Program Files\EA Games\La Bataille pour la Terre du

Milieu(tm)\game.dat:*:Enabled:La Bataille pour la Terre du Milieu(tm)"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{10e4e182-e1fa-11dc-9625-da726b9e92ce}]
shell\AutoRun\command - F:\RECYCLER\k-1-3542-4232123213-7676767-8888886\Wins.exe
shell\open\command - F:\RECYCLER\k-1-3542-4232123213-7676767-8888886\Wins.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2076d887-bd1d-11dd-980f-f3643b9842cf}]
shell\Auto\command - E:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2076d888-bd1d-11dd-980f-f3643b9842cf}]
shell\Auto\command - E:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{23e5b8be-a6e6-11dc-95a0-8a228c9c5ec8}]
shell\Auto\command - bittorrent.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL bittorrent.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ded2b5e-7b69-11dd-9775-99a2ece0afce}]
shell\AutoRun\command - wd_windows_tools\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{60e5bf28-ba74-11dd-9804-db14c71860cf}]
shell\Auto\command - E:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{69fecf23-b573-11dd-97eb-8b64cd2f8ccc}]
shell\Auto\command - E:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7322b9b1-b007-11dc-95a8-aae2d4aafbcf}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e


======List of files/folders created in the last 2 months======

2009-02-18 17:17:45 ----D---- C:\Program Files\trend micro
2009-02-18 17:17:44 ----D---- C:\rsit
2009-02-18 16:21:20 ----A---- C:\lopR.txt
2009-02-18 16:18:30 ----D---- C:\Lop SD
2009-02-18 14:13:49 ----D---- C:\Documents and Settings\ordi\Application Data\Malwarebytes
2009-02-18 14:13:31 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-02-18 14:13:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-02-18 13:54:03 ----D---- C:\WINDOWS\ERUNT
2009-02-18 13:52:23 ----A---- C:\WINDOWS\ntbtlog.txt
2009-02-18 13:46:00 ----D---- C:\SDFix
2009-02-18 13:40:14 ----A---- C:\TB.txt
2009-02-18 13:37:49 ----D---- C:\ToolBar SD
2009-02-18 12:01:40 ----HD---- C:\WINDOWS\PIF
2009-02-18 10:04:43 ----D---- C:\Program Files\Fighters
2009-02-18 10:04:43 ----D---- C:\Documents and Settings\All Users\Application Data\Fighters
2009-02-18 10:03:45 ----A---- C:\Documents and Settings\ordi\Application Data\install.txt
2009-02-14 16:08:47 ----D---- C:\Documents and Settings\ordi\Application Data\Panasonic
2009-02-14 16:07:27 ----D---- C:\WINDOWS\system32\NtmsData
2009-02-14 16:01:31 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2009-02-14 16:01:31 ----A---- C:\WINDOWS\system32\PICSDK.ini
2009-02-14 16:01:30 ----A---- C:\WINDOWS\system32\PICSDK.dll
2009-02-14 16:01:30 ----A---- C:\WINDOWS\system32\PICEntry.dll
2009-02-14 16:01:30 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2009-02-14 16:01:30 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2009-02-03 11:24:22 ----D---- C:\Program Files\Bullfrog
2009-02-03 11:24:03 ----A---- C:\WINDOWS\unin040c.exe
2009-02-03 11:16:04 ----D---- C:\theme hospital
2009-02-02 22:34:13 ----D---- C:\Team17
2009-02-02 22:32:37 ----D---- C:\Documents and Settings\ordi\Application Data\DAEMON Tools Pro
2009-02-02 22:32:37 ----D---- C:\Documents and Settings\ordi\Application Data\DAEMON Tools
2009-02-02 22:29:08 ----D---- C:\worms
2009-02-02 22:12:43 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-02-02 22:12:08 ----D---- C:\Program Files\DAEMON Tools Lite
2009-02-02 20:51:26 ----D---- C:\Documents and Settings\ordi\Application Data\DAEMON Tools Lite
2009-02-02 20:33:07 ----D---- C:\Program Files\AXEL
2009-02-02 13:29:01 ----D---- C:\Documents and Settings\ordi\Application Data\Pense-bete
2008-12-26 10:42:09 ----SHD---- C:\Config.Msi

======List of files/folders modified in the last 2 months======

2009-02-18 17:17:45 ----RD---- C:\Program Files
2009-02-18 17:17:17 ----D---- C:\WINDOWS\system32\CatRoot2
2009-02-18 17:16:39 ----D---- C:\WINDOWS\Temp
2009-02-18 16:59:56 ----D---- C:\Program Files\Mozilla Firefox
2009-02-18 16:52:41 ----D---- C:\WINDOWS
2009-02-18 16:44:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-02-18 16:07:12 ----D---- C:\WINDOWS\system32\drivers
2009-02-18 15:02:56 ----D---- C:\WINDOWS\system32
2009-02-18 14:02:23 ----D---- C:\WINDOWS\Prefetch
2009-02-18 13:55:44 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-02-18 13:25:34 ----AC---- C:\WINDOWS\NeroDigital.ini
2009-02-18 12:04:50 ----AC---- C:\WINDOWS\system.ini
2009-02-18 10:50:04 ----SHD---- C:\WINDOWS\Installer
2009-02-18 10:07:30 ----HD---- C:\WINDOWS\inf
2009-02-18 09:02:34 ----A---- C:\WINDOWS\ModemLog_Conexant HDA D110 MDC V.92 Modem.txt
2009-02-17 19:40:34 ----D---- C:\Documents and Settings\ordi\Application Data\LimeWire
2009-02-17 12:19:43 ----RSHD---- C:\RECYCLER
2009-02-17 10:13:12 ----D---- C:\restauration system
2009-02-14 16:07:26 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-02-14 16:01:23 ----RSD---- C:\WINDOWS\Fonts
2009-02-14 16:00:59 ----HD---- C:\Program Files\InstallShield Installation Information
2009-02-11 21:33:59 ----D---- C:\Program Files\Chec
2009-02-07 23:17:16 ----D---- C:\Documents and Settings\ordi\Application Data\dvdcss
2009-02-05 22:11:35 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-02-02 20:35:46 ----SD---- C:\Documents and Settings\ordi\Application Data\Microsoft
2009-01-21 13:06:44 ----D---- C:\WINDOWS\system32\wbem
2009-01-21 13:06:43 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-01-01 21:06:13 ----D---- C:\WINDOWS\system32\config
2009-01-01 21:05:49 ----D---- C:\WINDOWS\Registration
2008-12-26 10:41:51 ----D---- C:\Program Files\Fichiers communs
2008-12-26 10:41:50 ----DC---- C:\WINDOWS\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2007-12-24 271360]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2007-12-24 18048]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-10-04 12544]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 catchme;catchme; \??\C:\DOCUME~1\ordi\LOCALS~1\Temp\catchme.sys []
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys [2005-12-01 936960]
R3 HSXHWAZL;HSXHWAZL; C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys [2005-12-01 192512]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-06-06 1168860]
R3 NWADI;NWADI Bus Enumerator; C:\WINDOWS\system32\DRIVERS\NWADIenum.sys [2006-03-27 74752]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2007-05-10 1222840]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Vfscan;Vfscan; C:\WINDOWS\system32\DRIVERS\vffilter.sys [2008-11-18 15496]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys [2005-12-01 669696]
R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2006-01-18 17664]
S3 adbwqvhr;adbwqvhr; C:\WINDOWS\system32\drivers\adbwqvhr.sys []
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 PCANDIS5;PCANDIS5 Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver; C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2005-12-22 402432]
S3 UIUSys;Conexant Setup API; C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS []
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-11-07 32000]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZDCndis5;ZDCndis5 Protocol Driver; \??\C:\WINDOWS\system32\ZDCndis5.SYS []
S3 ZDPNDIS5;ZDPNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\ZDPNDIS5.SYS []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07

132424]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 FTRTSVC;France Telecom Routing Table Service; C:\WINDOWS\System32\FTRTSVC.exe [2004-08-23 40960]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-10 152984]
R2 PTK License-FIGHTERS-297811811;PTK License-FIGHTERS-297811811; C:\Program Files\Fighters\licenseservice.exe [2008-11-18 283272]
R2 PTK Live Update-FIGHTERS-297811811;PTK Live Update-FIGHTERS-297811811; C:\Program Files\Fighters\updateservice.exe [2008-11-18 307848]
R2 PTK Scanner-FIGHTERS-297811811;PTK Scanner-FIGHTERS-297811811; C:\Program Files\Fighters\ScannerService.exe [2008-11-18 311944]
R2 PTK SharedAccess-FIGHTERS-297811811;PTK SharedAccess-FIGHTERS-297811811; C:\Program Files\Fighters\configservice.exe [2008-11-18 139912]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\WINDOWS\System32\WLTRYSVC.EXE [2006-11-01 20480]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-07-31 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

voici info.txt:
info.txt logfile of random's system information tool 1.05 2009-02-18 17:17:49

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.42-->"C:\Program Files\7-Zip\Uninstall.exe"
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu"

-c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop 7.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program

Files\Adobe\Photoshop 7.0\Uninst.dll"
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil

Software\Avast4\Setup\setiface.dll",RunSetup
Conexant HDA D110 MDC V.92 Modem-->C:\Program

Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3\HXFSETUP.EXE -U -Idel1028p.inf
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Dell Mobile Broadband Card Utility-->MsiExec.exe /X{DF62D775-BB7C-4AFA-9CA4-DDA1C4855F28}
Dell Wireless WLAN Card-->"C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwlu00.exe" verbose

/rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Dell\Dell Wireless WLAN Card"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 1.99.1-->C:\Documents and Settings\ordi\Bureau\HijackThis.exe /uninstall
Intel(R) Graphics Media Accelerator Driver for Mobile-->RUNDLL32.EXE

C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592
InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation Information\{C1939820-A945-11D4-86F6-0001031E5712}\setup.exe" REMOVEALL
iPlayer Mass Storage Driver V3.1 -->C:\WINDOWS\iun6002.exe "C:\Program Files\iPlayer Mass Storage Driver

V3.1\irunin.ini"
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"
Livebox-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation Information\{FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E}\Setup.exe" -l0x40c
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation

APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel

APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup

Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10

(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7

(KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7

(KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7

(KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Modem Helper-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program

Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x40c ControlPanel
Mozilla Firefox (3.0.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Outil de connexion Wanadoo-->C:\PROGRA~1\Wanadoo\MessageDesinstallation.exe Wanadoo
Pense-bête-->"C:\Program Files\AXEL\Pense-bête\unins000.exe"
Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Sagem Wi-Fi 11g USB adapter (driver)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup

"C:\Program Files\InstallShield Installation Information\{2ED60C17-4568-4CD5-830A-03C4688B09A1}\setup.exe" -l0x40c
Sagem Wi-Fi 11g USB adapter (utility)-->RunDll32

C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation

Information\{AAFD22B6-A6C7-4134-AF4E-080BCBCD3493}\setup.exe" -l0x40c
SigmaTel Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup

"C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x40c

-remove -removeonly
SPYWAREfighter-->"C:\Program Files\Fighters\spywarefighter\Uninstall.exe" Remove
SPYWAREfighter-->MsiExec.exe /I{B940005A-1212-4E87-885B-1FF80B40D6F4}
VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wanadoo Messager-->C:\PROGRA~1\WANADO~1\UNWISE.EXE C:\PROGRA~1\WANADO~1\INSTALL.LOG
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090217-0] (disabled)

System event log

Computer Name: CUBAUD
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\CdRom0 au cours d'une opération de pagination.

Record Number: 18695
Source Name: Cdrom
Time Written: 20090128144044.000000+060
Event Type: Avertissement
User:

Computer Name: CUBAUD
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\CdRom0 au cours d'une opération de pagination.

Record Number: 18694
Source Name: Cdrom
Time Written: 20090128144044.000000+060
Event Type: Avertissement
User:

Computer Name: CUBAUD
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\CdRom0 au cours d'une opération de pagination.

Record Number: 18693
Source Name: Cdrom
Time Written: 20090128144044.000000+060
Event Type: Avertissement
User:

Computer Name: CUBAUD
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\CdRom0 au cours d'une opération de pagination.

Record Number: 18692
Source Name: Cdrom
Time Written: 20090128144044.000000+060
Event Type: Avertissement
User:

Computer Name: CUBAUD
Event Code: 51
Message: Une erreur a été détectée sur le périphérique \Device\CdRom0 au cours d'une opération de pagination.

Record Number: 18691
Source Name: Cdrom
Time Written: 20090128144044.000000+060
Event Type: Avertissement
User:

Application event log

Computer Name: CUBAUD
Event Code: 4099
Message: Échec de l'ouverture de services.

Record Number: 1736
Source Name: WmiAdapter
Time Written: 20081203104153.000000+060
Event Type: erreur
User: BUILTIN\Administrateurs

Computer Name: CUBAUD
Event Code: 4099
Message: Échec de l'ouverture de services.

Record Number: 1735
Source Name: WmiAdapter
Time Written: 20081203104153.000000+060
Event Type: erreur
User: BUILTIN\Administrateurs

Computer Name: CUBAUD
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1734
Source Name: SecurityCenter
Time Written: 20081203104151.000000+060
Event Type: Informations
User:

Computer Name: CUBAUD
Event Code: 1
Message:
Record Number: 1733
Source Name: Bonjour Service
Time Written: 20081203104146.000000+060
Event Type: Informations
User:

Computer Name: CUBAUD
Event Code: 14200
Message:
Record Number: 1732
Source Name: WMPNetworkSvc
Time Written: 20081203102541.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

voilà le hijack this seul:

Logfile of HijackThis v1.99.1
Scan saved at 17:27:38, on 18/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fighters\configservice.exe
C:\Program Files\Fighters\licenseservice.exe
C:\Program Files\Fighters\updateservice.exe
C:\Program Files\Fighters\ScannerService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Documents and Settings\ordi\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://gamespace.daemon-tools.cc/fra/home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [spywarefighterguard] C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: PTK License-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\licenseservice.exe
O23 - Service: PTK Live Update-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\updateservice.exe
O23 - Service: PTK Scanner-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\ScannerService.exe
O23 - Service: PTK SharedAccess-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\configservice.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

voici Hijack this avec la ,nouvelle version:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:23:56, on 18/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fighters\configservice.exe
C:\Program Files\Fighters\licenseservice.exe
C:\Program Files\Fighters\updateservice.exe
C:\Program Files\Fighters\ScannerService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
c:\program files\fighters\spywarefighter\SPYWAREfighterTray.exe
C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/default
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [spywarefighterguard] C:\Program Files\Fighters\spywarefighter\SpywarefighterUser.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PTK License-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\licenseservice.exe
O23 - Service: PTK Live Update-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\updateservice.exe
O23 - Service: PTK Scanner-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\ScannerService.exe
O23 - Service: PTK SharedAccess-FIGHTERS-297811811 - SPAMfighter - C:\Program Files\Fighters\configservice.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

je n'ai pas C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592 mais je n'ai qu'un fichier C:\WINDOWS\system32\ialmrem.dll.

ialmrem.dll. n'est pas un dossier, je soumet ce fichier dans la barre de virus total ?

voila pour le fichier C:\WINDOWS\system32\ialmrem.dll.


Fichier ialmrem.dll reçu le 2009.02.18 18:52:10 (CET)
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.93 2009.02.18 -
AhnLab-V3 2009.2.19.0 2009.02.18 -
AntiVir 7.9.0.83 2009.02.18 -
Authentium 5.1.0.4 2009.02.18 -
Avast 4.8.1335.0 2009.02.17 -
AVG 8.0.0.237 2009.02.18 -
BitDefender 7.2 2009.02.18 -
CAT-QuickHeal 10.00 2009.02.18 -
ClamAV 0.94.1 2009.02.18 -
Comodo 983 2009.02.18 -
DrWeb 4.44.0.09170 2009.02.18 -
eSafe 7.0.17.0 2009.02.18 -
eTrust-Vet 31.6.6363 2009.02.18 -
F-Prot 4.4.4.56 2009.02.17 -
F-Secure 8.0.14470.0 2009.02.18 -
Fortinet 3.117.0.0 2009.02.18 -
GData 19 2009.02.18 -
Ikarus T3.1.1.45.0 2009.02.18 -
K7AntiVirus 7.10.630 2009.02.18 -
Kaspersky 7.0.0.125 2009.02.18 -
McAfee 5529 2009.02.17 -
McAfee+Artemis 5529 2009.02.17 -
Microsoft 1.4306 2009.02.18 -
NOD32 3865 2009.02.18 -
Norman 6.00.06 2009.02.18 -
nProtect 2009.1.8.0 2009.02.18 -
Panda 9.4.3.20 2009.02.18 -
PCTools 4.4.2.0 2009.02.18 -
Prevx1 V2 2009.02.18 -
Rising 21.17.22.00 2009.02.18 -
SecureWeb-Gateway 6.7.6 2009.02.18 -
Sophos 4.38.0 2009.02.18 -
Sunbelt 3.2.1855.2 2009.02.17 -
Symantec 10 2009.02.18 -
TheHacker 6.3.2.2.259 2009.02.18 -
TrendMicro 8.700.0.1004 2009.02.18 -
ViRobot 2009.2.18.1613 2009.02.18 -
VirusBuster 4.5.11.0 2009.02.18 -
Information additionnelle
File size: 49152 bytes
MD5...: 43b65de9b147b9947285362fe05b8b84
SHA1..: 59abac6bcfb471f597739e111e45c34dcf2e0e91
SHA256: f7df83a6876a241153b6fbd1722201e0ae3f28e5778ac0c5f7b705b09f73849d
SHA512: fe56c95bf7fc139eb14263dcb31caad08e28929cc5848d342a1d0cdc49e6335a<br>d802f7fda91e0118807b8fa77fd3b5467b0d23be5846bab659984b876e34df8c
ssdeep: 768:EmfBolWpT7NHWKMrwKV2lK6qjfeB3k7/JKHbqw:E6Bo0pT7NfKVmZOKHv<br>
PEiD..: Armadillo v1.xx - v2.xx
TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x10001b71<br>timedatestamp.....: 0x4485ba73 (Tue Jun 06 17:25:07 2006)<br>machinetype.......: 0x14c (I386)<br><br>( 5 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x46fa 0x5000 6.19 8b52693ef9c91b4dfe96315462df9005<br>.rdata 0x6000 0xd9d 0x1000 4.75 65728a6c8141de64cc2ae826b0259e30<br>.data 0x7000 0x3188 0x3000 0.80 e8df3588e1e1761a709c4bb07957844f<br>.rsrc 0xb000 0x400 0x1000 1.09 2d20408369741c6807aefab5132eaf6c<br>.reloc 0xc000 0xcda 0x1000 3.17 fa187d43e6627cc16e20b4e76a594ece<br><br>( 4 imports ) <br>> USER32.dll: LoadCursorA, SetCursor, GetDesktopWindow<br>> SETUPAPI.dll: SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyA, SetupDiDestroyDeviceInfoList, SetupDiCallClassInstaller, SetupPromptReboot<br>> KERNEL32.dll: LoadLibraryA, GetProcAddress, GetOEMCP, GetACP, lstrlenA, LocalAlloc, LocalFree, GetStringTypeA, GetExitCodeProcess, WaitForSingleObject, CreateProcessA, GetSystemDirectoryA, lstrcpyA, GetStringTypeW, GetLastError, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, GetCommandLineA, GetVersion, HeapFree, HeapAlloc, WideCharToMultiByte, MultiByteToWideChar, LCMapStringA, LCMapStringW, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, ExitProcess, TlsSetValue, TlsAlloc, TlsFree, SetLastError, TlsGetValue, TerminateProcess, GetCurrentProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetModuleHandleA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, WriteFile, VirtualAlloc, HeapReAlloc, RtlUnwind, GetCPInfo<br>> ADVAPI32.dll: RegDeleteKeyA, OpenSCManagerA, CloseServiceHandle<br><br>( 2 exports ) <br>UninstallW2KIGfx, UninstallW2KIGfx2ID<br>

Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.93 2009.02.18 -
AhnLab-V3 2009.2.19.0 2009.02.18 -
AntiVir 7.9.0.83 2009.02.18 -
Authentium 5.1.0.4 2009.02.18 -
Avast 4.8.1335.0 2009.02.17 -
AVG 8.0.0.237 2009.02.18 -
BitDefender 7.2 2009.02.18 -
CAT-QuickHeal 10.00 2009.02.18 -
ClamAV 0.94.1 2009.02.18 -
Comodo 983 2009.02.18 -
DrWeb 4.44.0.09170 2009.02.18 -
eSafe 7.0.17.0 2009.02.18 -
eTrust-Vet 31.6.6363 2009.02.18 -
F-Prot 4.4.4.56 2009.02.17 -
F-Secure 8.0.14470.0 2009.02.18 -
Fortinet 3.117.0.0 2009.02.18 -
GData 19 2009.02.18 -
Ikarus T3.1.1.45.0 2009.02.18 -
K7AntiVirus 7.10.630 2009.02.18 -
Kaspersky 7.0.0.125 2009.02.18 -
McAfee 5529 2009.02.17 -
McAfee+Artemis 5529 2009.02.17 -
Microsoft 1.4306 2009.02.18 -
NOD32 3865 2009.02.18 -
Norman 6.00.06 2009.02.18 -
nProtect 2009.1.8.0 2009.02.18 -
Panda 9.4.3.20 2009.02.18 -
PCTools 4.4.2.0 2009.02.18 -
Prevx1 V2 2009.02.18 -
Rising 21.17.22.00 2009.02.18 -
SecureWeb-Gateway 6.7.6 2009.02.18 -
Sophos 4.38.0 2009.02.18 -
Sunbelt 3.2.1855.2 2009.02.17 -
Symantec 10 2009.02.18 -
TheHacker 6.3.2.2.259 2009.02.18 -
TrendMicro 8.700.0.1004 2009.02.18 -
ViRobot 2009.2.18.1613 2009.02.18 -
VirusBuster 4.5.11.0 2009.02.18 -

Information additionnelle
File size: 49152 bytes
MD5...: 43b65de9b147b9947285362fe05b8b84
SHA1..: 59abac6bcfb471f597739e111e45c34dcf2e0e91
SHA256: f7df83a6876a241153b6fbd1722201e0ae3f28e5778ac0c5f7b705b09f73849d
SHA512: fe56c95bf7fc139eb14263dcb31caad08e28929cc5848d342a1d0cdc49e6335a<br>d802f7fda91e0118807b8fa77fd3b5467b0d23be5846bab659984b876e34df8c
ssdeep: 768:EmfBolWpT7NHWKMrwKV2lK6qjfeB3k7/JKHbqw:E6Bo0pT7NfKVmZOKHv<br>
PEiD..: Armadillo v1.xx - v2.xx
TrID..: File type identification<br>Win32 Executable MS Visual C++ (generic) (65.2%)<br>Win32 Executable Generic (14.7%)<br>Win32 Dynamic Link Library (generic) (13.1%)<br>Generic Win/DOS Executable (3.4%)<br>DOS Executable Generic (3.4%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x10001b71<br>timedatestamp.....: 0x4485ba73 (Tue Jun 06 17:25:07 2006)<br>machinetype.......: 0x14c (I386)<br><br>( 5 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x46fa 0x5000 6.19 8b52693ef9c91b4dfe96315462df9005<br>.rdata 0x6000 0xd9d 0x1000 4.75 65728a6c8141de64cc2ae826b0259e30<br>.data 0x7000 0x3188 0x3000 0.80 e8df3588e1e1761a709c4bb07957844f<br>.rsrc 0xb000 0x400 0x1000 1.09 2d20408369741c6807aefab5132eaf6c<br>.reloc 0xc000 0xcda 0x1000 3.17 fa187d43e6627cc16e20b4e76a594ece<br><br>( 4 imports ) <br>> USER32.dll: LoadCursorA, SetCursor, GetDesktopWindow<br>> SETUPAPI.dll: SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyA, SetupDiDestroyDeviceInfoList, SetupDiCallClassInstaller, SetupPromptReboot<br>> KERNEL32.dll: LoadLibraryA, GetProcAddress, GetOEMCP, GetACP, lstrlenA, LocalAlloc, LocalFree, GetStringTypeA, GetExitCodeProcess, WaitForSingleObject, CreateProcessA, GetSystemDirectoryA, lstrcpyA, GetStringTypeW, GetLastError, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, GetCommandLineA, GetVersion, HeapFree, HeapAlloc, WideCharToMultiByte, MultiByteToWideChar, LCMapStringA, LCMapStringW, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, ExitProcess, TlsSetValue, TlsAlloc, TlsFree, SetLastError, TlsGetValue, TerminateProcess, GetCurrentProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetModuleHandleA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, WriteFile, VirtualAlloc, HeapReAlloc, RtlUnwind, GetCPInfo<br>> ADVAPI32.dll: RegDeleteKeyA, OpenSCManagerA, CloseServiceHandle<br><br>( 2 exports ) <br>UninstallW2KIGfx, UninstallW2KIGfx2ID<br>

et voilà pour le fichier C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll


Fichier Ctor.dll reçu le 2009.02.18 19:00:13 (CET)
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.93 2009.02.18 -
AhnLab-V3 2009.2.19.0 2009.02.18 -
AntiVir 7.9.0.83 2009.02.18 -
Authentium 5.1.0.4 2009.02.18 -
Avast 4.8.1335.0 2009.02.17 -
AVG 8.0.0.237 2009.02.18 -
BitDefender 7.2 2009.02.18 -
CAT-QuickHeal 10.00 2009.02.18 -
ClamAV 0.94.1 2009.02.18 -
Comodo 983 2009.02.18 -
DrWeb 4.44.0.09170 2009.02.18 -
eSafe 7.0.17.0 2009.02.18 -
eTrust-Vet 31.6.6363 2009.02.18 -
F-Prot 4.4.4.56 2009.02.17 -
F-Secure 8.0.14470.0 2009.02.18 -
Fortinet 3.117.0.0 2009.02.18 -
GData 19 2009.02.18 -
Ikarus T3.1.1.45.0 2009.02.18 -
K7AntiVirus 7.10.630 2009.02.18 -
Kaspersky 7.0.0.125 2009.02.18 -
McAfee 5529 2009.02.17 -
McAfee+Artemis 5529 2009.02.17 -
Microsoft 1.4306 2009.02.18 -
NOD32 3865 2009.02.18 -
Norman 6.00.06 2009.02.18 -
nProtect 2009.1.8.0 2009.02.18 -
Panda 9.4.3.20 2009.02.18 -
PCTools 4.4.2.0 2009.02.18 -
Prevx1 V2 2009.02.18 -
Rising 21.17.22.00 2009.02.18 -
SecureWeb-Gateway 6.7.6 2009.02.18 -
Sophos 4.38.0 2009.02.18 -
Sunbelt 3.2.1855.2 2009.02.17 -
Symantec 10 2009.02.18 -
TheHacker 6.3.2.2.259 2009.02.18 -
TrendMicro 8.700.0.1004 2009.02.18 -
VBA32 3.12.8.13 2009.02.18 -
ViRobot 2009.2.18.1613 2009.02.18 -
VirusBuster 4.5.11.0 2009.02.18 -
Information additionnelle
File size: 77824 bytes
MD5...: 003a6c011aac993bcde8c860988ce49b
SHA1..: 6d39d650dfa5ded45c4e0cb17b986893061104a7
SHA256: 590be865ddf8c8d0431d8f92aa3948cc3c1685fd0649d607776b81cd1e267d0a
SHA512: 032aba4403eb45646aa1413fdc6c5d08baab4d0306d20b4209e70c84e47f6b72<br>e68457bbc4331a5f1a5fa44aa776a89eb9fd29d0d956fa2fe11364c26ab09ee7
ssdeep: 768:uj5UUtenZewInMM66FwMd21I1FNVBt3NogjISsK7phsfTkF0kN1usI5FrAg1<br>OBoM:Q5PI9F6SCdNoe57phsgW7Ag8lj<br>
PEiD..: -
TrID..: File type identification<br>DirectShow filter (50.8%)<br>Windows OCX File (31.1%)<br>Win32 Executable MS Visual C++ (generic) (9.5%)<br>Windows Screen Saver (3.3%)<br>Win32 Executable Generic (2.1%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x10006991<br>timedatestamp.....: 0x3b95edfb (Wed Sep 05 09:18:51 2001)<br>machinetype.......: 0x14c (I386)<br><br>( 5 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x6b9c 0x7000 6.21 36def2ae458b82ee74bd36fe5374d635<br>.rdata 0x8000 0x1227 0x2000 3.82 b874a8ec2cead6396cea7cab6f5e69df<br>.data 0xa000 0x8d5 0x1000 2.60 447d3fd07062f093b35ab3f0fe3cf510<br>.rsrc 0xb000 0x6c10 0x7000 4.92 0809aa53be4e2de89c428d93edab1810<br>.reloc 0x12000 0x8f8 0x1000 4.16 0ce68ed8d63eb04bca96f4ddcad75f3d<br><br>( 5 imports ) <br>> KERNEL32.dll: HeapCreate, GetLastError, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, InterlockedIncrement, EnterCriticalSection, InterlockedDecrement, CompareStringA, CompareStringW, GetVersionExA, SetLastError, lstrlenW, lstrcmpiA, HeapDestroy, FreeLibrary, GetProcAddress, LoadLibraryA, lstrcatA, GetTempPathA, DeleteFileA, GetTempFileNameA, DebugBreak, DisableThreadLibraryCalls, CopyFileA, GetSystemInfo, HeapAlloc, lstrcpyA, CreateFileA, CreateProcessA, GetModuleFileNameA, CreateEventA, CloseHandle, GetShortPathNameA, GetModuleHandleA, HeapFree<br>> USER32.dll: CharUpperA, PeekMessageA, MsgWaitForMultipleObjects, CharNextA, wsprintfA, LoadStringA<br>> ADVAPI32.dll: RegDeleteValueA, RegQueryInfoKeyA, RegQueryValueExA, RegDeleteKeyA, RegOpenKeyA, RegCloseKey, RegSetValueExA, RegCreateKeyExA, RegQueryValueA, RegEnumKeyExA, RegOpenKeyExA<br>> ole32.dll: CLSIDFromString, CoReleaseMarshalData, CoGetClassObject, CoCreateInstance, StringFromCLSID, CoTaskMemFree, CoMarshalInterThreadInterfaceInStream<br>> OLEAUT32.dll: -, -, -, -, -, -, -, -, -<br><br>( 7 exports ) <br>DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer, LaunchSetup, LaunchiSetup, LaunchiSetupML<br>

Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.93 2009.02.18 -
AhnLab-V3 2009.2.19.0 2009.02.18 -
AntiVir 7.9.0.83 2009.02.18 -
Authentium 5.1.0.4 2009.02.18 -
Avast 4.8.1335.0 2009.02.17 -
AVG 8.0.0.237 2009.02.18 -
BitDefender 7.2 2009.02.18 -
CAT-QuickHeal 10.00 2009.02.18 -
ClamAV 0.94.1 2009.02.18 -
Comodo 983 2009.02.18 -
DrWeb 4.44.0.09170 2009.02.18 -
eSafe 7.0.17.0 2009.02.18 -
eTrust-Vet 31.6.6363 2009.02.18 -
F-Prot 4.4.4.56 2009.02.17 -
F-Secure 8.0.14470.0 2009.02.18 -
Fortinet 3.117.0.0 2009.02.18 -
GData 19 2009.02.18 -
Ikarus T3.1.1.45.0 2009.02.18 -
K7AntiVirus 7.10.630 2009.02.18 -
Kaspersky 7.0.0.125 2009.02.18 -
McAfee 5529 2009.02.17 -
McAfee+Artemis 5529 2009.02.17 -
Microsoft 1.4306 2009.02.18 -
NOD32 3865 2009.02.18 -
Norman 6.00.06 2009.02.18 -
nProtect 2009.1.8.0 2009.02.18 -
Panda 9.4.3.20 2009.02.18 -
PCTools 4.4.2.0 2009.02.18 -
Prevx1 V2 2009.02.18 -
Rising 21.17.22.00 2009.02.18 -
SecureWeb-Gateway 6.7.6 2009.02.18 -
Sophos 4.38.0 2009.02.18 -
Sunbelt 3.2.1855.2 2009.02.17 -
Symantec 10 2009.02.18 -
TheHacker 6.3.2.2.259 2009.02.18 -
TrendMicro 8.700.0.1004 2009.02.18 -
VBA32 3.12.8.13 2009.02.18 -
ViRobot 2009.2.18.1613 2009.02.18 -
VirusBuster 4.5.11.0 2009.02.18 -

Information additionnelle
File size: 77824 bytes
MD5...: 003a6c011aac993bcde8c860988ce49b
SHA1..: 6d39d650dfa5ded45c4e0cb17b986893061104a7
SHA256: 590be865ddf8c8d0431d8f92aa3948cc3c1685fd0649d607776b81cd1e267d0a
SHA512: 032aba4403eb45646aa1413fdc6c5d08baab4d0306d20b4209e70c84e47f6b72<br>e68457bbc4331a5f1a5fa44aa776a89eb9fd29d0d956fa2fe11364c26ab09ee7
ssdeep: 768:uj5UUtenZewInMM66FwMd21I1FNVBt3NogjISsK7phsfTkF0kN1usI5FrAg1<br>OBoM:Q5PI9F6SCdNoe57phsgW7Ag8lj<br>
PEiD..: -
TrID..: File type identification<br>DirectShow filter (50.8%)<br>Windows OCX File (31.1%)<br>Win32 Executable MS Visual C++ (generic) (9.5%)<br>Windows Screen Saver (3.3%)<br>Win32 Executable Generic (2.1%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x10006991<br>timedatestamp.....: 0x3b95edfb (Wed Sep 05 09:18:51 2001)<br>machinetype.......: 0x14c (I386)<br><br>( 5 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x6b9c 0x7000 6.21 36def2ae458b82ee74bd36fe5374d635<br>.rdata 0x8000 0x1227 0x2000 3.82 b874a8ec2cead6396cea7cab6f5e69df<br>.data 0xa000 0x8d5 0x1000 2.60 447d3fd07062f093b35ab3f0fe3cf510<br>.rsrc 0xb000 0x6c10 0x7000 4.92 0809aa53be4e2de89c428d93edab1810<br>.reloc 0x12000 0x8f8 0x1000 4.16 0ce68ed8d63eb04bca96f4ddcad75f3d<br><br>( 5 imports ) <br>> KERNEL32.dll: HeapCreate, GetLastError, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, InterlockedIncrement, EnterCriticalSection, InterlockedDecrement, CompareStringA, CompareStringW, GetVersionExA, SetLastError, lstrlenW, lstrcmpiA, HeapDestroy, FreeLibrary, GetProcAddress, LoadLibraryA, lstrcatA, GetTempPathA, DeleteFileA, GetTempFileNameA, DebugBreak, DisableThreadLibraryCalls, CopyFileA, GetSystemInfo, HeapAlloc, lstrcpyA, CreateFileA, CreateProcessA, GetModuleFileNameA, CreateEventA, CloseHandle, GetShortPathNameA, GetModuleHandleA, HeapFree<br>> USER32.dll: CharUpperA, PeekMessageA, MsgWaitForMultipleObjects, CharNextA, wsprintfA, LoadStringA<br>> ADVAPI32.dll: RegDeleteValueA, RegQueryInfoKeyA, RegQueryValueExA, RegDeleteKeyA, RegOpenKeyA, RegCloseKey, RegSetValueExA, RegCreateKeyExA, RegQueryValueA, RegEnumKeyExA, RegOpenKeyExA<br>> ole32.dll: CLSIDFromString, CoReleaseMarshalData, CoGetClassObject, CoCreateInstance, StringFromCLSID, CoTaskMemFree, CoMarshalInterThreadInterfaceInStream<br>> OLEAUT32.dll: -, -, -, -, -, -, -, -, -<br><br>( 7 exports ) <br>DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer, LaunchSetup, LaunchiSetup, LaunchiSetupML<br>

[ Rapport ToolsCleaner version 2.3.1 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\lopR.txt: trouvé !
C:\TB.txt: trouvé !
C:\SDFIX: trouvé !
C:\Lop SD: trouvé !
C:\Toolbar SD: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\ordi\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\ordi\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\ordi\Bureau\hijackthis.log: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\SdFix.exe: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\LopSD.exe: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\ToolBarSD.exe: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\Rsit.exe: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\rapport\hijackthis.log: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\rapport\lopR.txt: trouvé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\rapport\TB.txt: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
C:\Program Files\trend micro\HijackThis: trouvé !
C:\Program Files\trend micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\trend micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\ordi\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\ordi\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\SdFix.exe: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\LopSD.exe: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\ToolBarSD.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\Program Files\trend micro\HijackThis\HijackThis.exe: supprimé !
C:\lopR.txt: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\ordi\Bureau\hijackthis.log: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\Rsit.exe: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\rapport\hijackthis.log: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\rapport\lopR.txt: supprimé !
C:\Documents and Settings\ordi\Bureau\Anti trojan\rapport\TB.txt: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Program Files\trend micro\HijackThis\hijackthis.log: supprimé !
C:\SDFIX: supprimé !
C:\Lop SD: supprimé !
C:\Toolbar SD: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\trend micro\HijackThis: supprimé !

comment supprime t-on sur le site polonais ?