Win 32 trojan gen

bonjour
voici le rapport de toolbar avec l option 2 merci d avance
Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) Dual Core Processor 4450e )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : mayron ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:139 Go (Free:102 Go)
D:\ (USB)
E:\ (USB)
F:\ (Local Disk) - NTFS - Total:142 Go (Free:142 Go)
H:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 24/05/2009|21:00 )

[ UAC => 1 ]

-----------\\ SUPPRESSION

Supprime! - C:\ProgramData\Kiwee Toolbar\config
Supprime! - C:\ProgramData\Kiwee Toolbar\images
Supprime! - C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Kiwee Toolbar
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
Supprime! - C:\ProgramData\Kiwee Toolbar
Echec ! - C:\Program Files\Kiwee Toolbar

-----------\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
Echec ! - C:\Program Files\Kiwee Toolbar

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Kiwee Toolbar
C:\Program Files\Kiwee Toolbar\2.8.167
C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll
C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll
C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://www.shareware-fr.com/fr/index.php?rvs=hompag"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vb32&d=1006&m=aspire_x3200"
"Url"="https://www.msn.com/fr-fr/actualite/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="https://fr.yahoo.com/"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="http://www.shareware-fr.com/fr/index.php?rvs=hompag"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 23/05/2009|21:48 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 25/05/2009|13:21 - Option : [2]

bonsoir,voici le rapport
Process explorer.exe killed successfully.
Unable to kill process: kwtbaim.exe
========== FILES ==========
Folder move failed. C:\Program Files\Kiwee Toolbar\2.8.167 scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Kiwee Toolbar scheduled to be moved on reboot.
========== COMMANDS ==========
File delete failed. C:\Users\mayron\AppData\Local\Temp\~DFD09D.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05262009_192750

Files moved on Reboot...
Folder move failed. C:\Program Files\Kiwee Toolbar\2.8.167 scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Kiwee Toolbar\2.8.167 scheduled to be moved on reboot.
Folder move failed. C:\Program Files\Kiwee Toolbar scheduled to be moved on reboot.
C:\Users\mayron\AppData\Local\Temp\~DFD09D.tmp moved successfully.

re et merci de ta patience voici mon rapport
ComboFix 09-05-25.A2 - mayron 26/05/2009 20:41.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6001.1.1252.33.1036.18.2814.1819 [GMT 2:00]
Lancé depuis: c:\users\mayron\Documents\1806.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\QUAD Utilities
c:\users\mayron\AppData\Roaming\.#
c:\users\mayron\AppData\Roaming\.#\MBX@100@1722990.###
c:\users\mayron\AppData\Roaming\.#\MBX@100@17229C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@100@17229F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@10E8@1F12990.###
c:\users\mayron\AppData\Roaming\.#\MBX@10E8@1F129C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@10E8@1F129F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@12E4@1E72990.###
c:\users\mayron\AppData\Roaming\.#\MBX@12E4@1E729C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@12E4@1E729F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@1300@1C02990.###
c:\users\mayron\AppData\Roaming\.#\MBX@1300@1C029C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@1300@1C029F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@13A0@1B82990.###
c:\users\mayron\AppData\Roaming\.#\MBX@13A0@1B829C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@13A0@1B829F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@15D0@1CA2990.###
c:\users\mayron\AppData\Roaming\.#\MBX@15D0@1CA29C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@15D0@1CA29F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@15D4@1762990.###
c:\users\mayron\AppData\Roaming\.#\MBX@15D4@17629C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@15D4@17629F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@1654@1D52990.###
c:\users\mayron\AppData\Roaming\.#\MBX@1654@1D529C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@1654@1D529F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@1684@3C2990.###
c:\users\mayron\AppData\Roaming\.#\MBX@1684@3C29C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@1684@3C29F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@17D0@292990.###
c:\users\mayron\AppData\Roaming\.#\MBX@17D0@2929C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@17D0@2929F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@5B0@1B62990.###
c:\users\mayron\AppData\Roaming\.#\MBX@5B0@1B629C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@5B0@1B629F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@69C@232990.###
c:\users\mayron\AppData\Roaming\.#\MBX@69C@2329C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@69C@2329F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@904@1E82990.###
c:\users\mayron\AppData\Roaming\.#\MBX@904@1E829C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@904@1E829F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@A8C@1762990.###
c:\users\mayron\AppData\Roaming\.#\MBX@A8C@17629C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@A8C@17629F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@AD8@1A2990.###
c:\users\mayron\AppData\Roaming\.#\MBX@AD8@1A29C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@AD8@1A29F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@B2C@1722990.###
c:\users\mayron\AppData\Roaming\.#\MBX@B2C@17229C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@B2C@17229F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@BF8@2E2990.###
c:\users\mayron\AppData\Roaming\.#\MBX@BF8@2E29C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@BF8@2E29F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@C0C@1C22990.###
c:\users\mayron\AppData\Roaming\.#\MBX@C0C@1C229C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@C0C@1C229F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@D20@B12990.###
c:\users\mayron\AppData\Roaming\.#\MBX@D20@B129C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@D20@B129F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@D90@1F12990.###
c:\users\mayron\AppData\Roaming\.#\MBX@D90@1F129C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@D90@1F129F0.###
c:\users\mayron\AppData\Roaming\.#\MBX@D9C@6E2990.###
c:\users\mayron\AppData\Roaming\.#\MBX@D9C@6E29C0.###
c:\users\mayron\AppData\Roaming\.#\MBX@D9C@6E29F0.###
c:\windows\system32\Process.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-04-26 au 2009-05-26 ))))))))))))))))))))))))))))))))))))
.

2009-05-26 17:27 . 2009-05-26 17:27 -------- d-----w C:\_OTMoveIt
2009-05-26 06:18 . 2009-05-06 18:06 4784464 ----a-w c:\programdata\Microsoft\Windows Defender\Definition Updates\{121DA5A2-40EC-460D-8EB1-0E0050273200}\mpengine.dll
2009-05-24 19:50 . 2009-05-24 19:51 -------- d-----w C:\rapport de scan
2009-05-23 20:29 . 2009-05-23 20:29 -------- d-----w c:\users\mayron\AppData\Roaming\Malwarebytes
2009-05-23 20:29 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-05-23 20:29 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-23 20:29 . 2009-05-23 20:29 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-05-23 20:29 . 2009-05-23 20:29 -------- d-----w c:\programdata\Malwarebytes
2009-05-23 14:15 . 2009-05-26 12:53 -------- d-----w C:\ToolBar SD
2009-05-22 11:04 . 2009-05-22 11:04 -------- d-----w C:\MSNCleaner
2009-05-21 18:23 . 2009-05-21 18:23 -------- d-----w c:\users\mayron\AppData\Local\Apps
2009-05-21 16:27 . 2009-05-21 16:27 -------- d-----w C:\_backupD
2009-05-21 16:27 . 2009-05-21 16:27 4096 ----a-w c:\windows\system32\reboot.exe
2009-05-21 16:27 . 2009-05-21 16:27 16384 ----a-w c:\windows\system32\restart.exe
2009-05-21 16:27 . 2009-05-21 16:27 -------- d-----w c:\windows\system32\regdacl
2009-05-21 16:27 . 2009-05-21 16:27 90112 ----a-w c:\windows\system32\regdacl.exe
2009-05-21 09:08 . 2009-05-21 09:09 -------- d-----w c:\program files\Fighters
2009-05-21 09:08 . 2009-05-21 09:08 -------- d-----w c:\programdata\Fighters
2009-05-21 08:34 . 2009-05-21 08:34 -------- d-----w c:\program files\Trend Micro
2009-05-20 20:02 . 2009-05-22 05:41 680 ----a-w c:\users\mayron\AppData\Local\d3d9caps.dat
2009-05-20 19:56 . 2009-05-20 19:56 -------- d-----w c:\users\mayron\AppData\Roaming\Uniblue
2009-05-20 19:28 . 2009-05-23 14:11 -------- d-----w c:\programdata\Spybot - Search & Destroy
2009-05-20 19:28 . 2009-05-21 16:56 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-05-04 16:47 . 2009-05-04 16:47 -------- d-----w c:\users\mayron\film
2009-05-04 16:43 . 2009-05-04 16:42 410984 ----a-w c:\windows\system32\deploytk.dll
2009-05-04 15:16 . 2009-05-25 16:28 -------- d-----w c:\program files\CCleaner

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-26 17:37 . 2008-01-21 07:23 669328 ----a-w c:\windows\system32\perfh00C.dat
2009-05-26 17:37 . 2008-01-21 07:23 123350 ----a-w c:\windows\system32\perfc00C.dat
2009-05-20 20:30 . 2009-04-11 21:19 304160 ----a-w C:\PA207.DAT
2009-05-15 19:08 . 2008-05-12 17:23 -------- d-----w c:\program files\Acer GameZone
2009-05-14 18:22 . 2009-05-04 16:44 -------- d-----w c:\users\mayron\AppData\Roaming\LimeWire
2009-05-13 17:04 . 2008-05-12 17:34 -------- d-----w c:\programdata\Microsoft Help
2009-05-13 17:00 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-04-26 07:46 . 2009-02-19 07:32 10 ----a-w c:\windows\popcinfo.dat
2009-04-23 18:48 . 2008-05-12 17:18 -------- d-----w c:\programdata\McAfee
2009-04-17 10:19 . 2009-04-17 10:19 -------- d-----w c:\program files\Alwil Software
2009-04-14 18:54 . 2009-04-14 18:54 -------- d-----w c:\program files\Shareware.Pro-FR
2009-04-14 15:03 . 2009-04-14 15:02 -------- d-----w c:\users\mayron\AppData\Roaming\agi
2009-04-14 15:02 . 2009-04-14 15:02 -------- d-----w c:\program files\Kiwee Toolbar
2009-04-14 15:02 . 2009-04-14 15:02 -------- d-----w c:\programdata\agi
2009-04-14 15:02 . 2009-04-14 15:02 339968 ----a-w c:\windows\system32\pythoncom25.dll
2009-04-14 15:02 . 2009-04-14 15:02 2117632 ----a-w c:\windows\system32\python25.dll
2009-04-14 15:02 . 2009-04-14 15:02 114688 ----a-w c:\windows\system32\pywintypes25.dll
2009-04-14 15:02 . 2008-05-12 17:50 348160 ----a-w c:\windows\system32\msvcr71.dll
2009-04-14 15:01 . 2009-04-14 15:01 -------- d-----w c:\program files\AGI
2009-04-14 14:59 . 2009-04-14 14:59 -------- d-----w c:\program files\SiteAdvisor
2009-04-14 13:56 . 2009-04-14 13:56 -------- d-----w c:\program files\Conduit
2009-04-14 13:56 . 2009-04-14 13:56 -------- d-----w c:\program files\iminent-en
2009-04-14 13:55 . 2009-04-14 13:55 -------- d-----w c:\program files\Iminent
2009-04-14 13:55 . 2009-04-14 13:55 -------- d--h--w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}
2009-04-14 13:55 . 2009-04-14 13:55 -------- d-----w c:\programdata\Iminent
2009-04-12 13:42 . 2009-04-12 13:41 -------- d-----w c:\program files\Webcam 1200
2009-04-12 13:41 . 2008-05-12 16:57 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-12 13:41 . 2009-04-12 13:41 -------- d-----w c:\users\mayron\AppData\Roaming\InstallShield
2009-04-12 13:38 . 2009-02-18 16:41 -------- d-----w c:\program files\Common Files\ArcSoft
2009-04-12 13:37 . 2009-02-18 16:40 -------- d-----w c:\program files\ArcSoft
2009-04-12 09:45 . 2009-04-12 09:31 -------- d-----w c:\users\mayron\AppData\Roaming\MP-Manager
2009-04-12 09:31 . 2009-04-12 09:31 37345 ----a-r c:\users\mayron\AppData\Roaming\Microsoft\Installer\{D3263446-065A-464C-BB87-CA9D461221D6}\controlPanelIcon.exe
2009-04-12 09:31 . 2009-04-12 09:31 10134 ----a-r c:\users\mayron\AppData\Roaming\Microsoft\Installer\{D3263446-065A-464C-BB87-CA9D461221D6}\SystemFolder_msiexec.exe
2009-04-12 09:29 . 2009-04-12 09:29 -------- d-----w c:\users\mayron\AppData\Roaming\MPMAN
2009-04-12 07:50 . 2006-11-02 10:25 665600 ----a-w c:\windows\inf\drvindex.dat
2009-04-12 07:33 . 2008-05-12 17:36 -------- d-----w c:\program files\Microsoft Works
2009-04-12 07:32 . 2009-04-12 07:32 -------- d-----w c:\program files\MSXML 4.0
2009-04-12 07:27 . 2008-05-12 17:20 -------- d-----w c:\programdata\SiteAdvisor
2009-04-11 12:43 . 2009-04-11 12:43 -------- d-----w c:\program files\AxBx
2009-04-11 10:04 . 2009-04-11 10:02 -------- d-----w c:\program files\Windows Live
2009-04-11 10:03 . 2009-04-11 10:03 -------- d-----w c:\program files\Microsoft
2009-04-11 10:02 . 2009-04-11 10:02 -------- d-----w c:\program files\Windows Live SkyDrive
2009-04-11 09:56 . 2009-04-11 09:56 -------- d-----w c:\program files\Common Files\Windows Live
2009-04-10 21:56 . 2009-02-17 16:01 -------- d-----w c:\program files\Google
2009-04-09 11:43 . 2009-04-14 13:55 2439512 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\IMBoosterSetup.exe
2009-04-08 15:34 . 2009-04-14 13:55 201216 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\646BB144\AA2AC949\Iminent.WinCore.WLM.dll
2009-04-08 15:34 . 2009-04-14 13:55 101376 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\45DC9FB6\AA2AC949\Iminent.WinCore.WLM.PresenceHook.dll
2009-04-08 15:34 . 2009-04-14 13:55 42496 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\CE6A9334\AA2AC949\Iminent.WinCore.WLM.WinEvents.dll
2009-04-08 15:34 . 2009-04-14 13:55 49664 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\3ECAD1C5\AA2AC949\Iminent.WinCore.dll
2009-04-08 15:32 . 2009-04-14 13:55 7168 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\F8E33052\AAAD2BC2\Iminent.Windows.resources.dll
2009-04-08 15:32 . 2009-04-14 13:55 6656 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\A2D0D8C9\1FA51BA4\Iminent.Windows.resources.dll
2009-04-08 15:32 . 2009-04-14 13:55 241152 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\90707029\AA2AC949\Iminent.Windows.dll
2009-04-08 15:32 . 2009-04-14 13:55 13312 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\6563E87F\AA2AC949\FlvEncoder.exe
2009-04-08 15:32 . 2009-04-14 13:55 158208 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\EC9AEE9D\AA2AC949\Iminent.Workflow.dll
2009-04-08 15:32 . 2009-04-14 13:55 278528 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\426DA447\AA2AC949\Iminent.Business.XmlSerializers.dll
2009-04-08 15:32 . 2009-04-14 13:55 92160 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\74360055\AA2AC949\Iminent.Business.dll
2009-03-17 03:38 . 2009-04-15 08:38 13824 ----a-w c:\windows\system32\apilogen.dll
2009-03-17 03:38 . 2009-04-15 08:38 24064 ----a-w c:\windows\system32\amxread.dll
2009-03-03 04:46 . 2009-04-15 08:38 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-03-03 04:46 . 2009-04-15 08:38 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-03-03 04:40 . 2009-04-15 08:38 827392 ----a-w c:\windows\system32\wininet.dll
2009-03-03 04:39 . 2009-04-15 08:38 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-03-03 04:39 . 2009-04-15 08:38 551424 ----a-w c:\windows\system32\rpcss.dll
2009-03-03 04:39 . 2009-04-15 08:38 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-03-03 04:37 . 2009-04-15 08:38 78336 ----a-w c:\windows\system32\ieencode.dll
2009-03-03 04:37 . 2009-04-15 08:38 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-03-03 04:37 . 2009-04-15 08:38 54784 ----a-w c:\windows\system32\iasads.dll
2009-03-03 04:37 . 2009-04-15 08:38 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-03-03 03:04 . 2009-04-15 08:38 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-04-15 08:38 17408 ----a-w c:\windows\system32\iashost.exe
2009-03-03 02:28 . 2009-04-15 08:38 26624 ----a-w c:\windows\system32\ieUnatt.exe
2009-03-02 13:04 . 2009-04-14 13:55 905216 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\F3D3330D\AA2AC949\TVE2.dll
2009-03-02 13:04 . 2009-04-14 13:55 831488 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\36234DD\AA2AC949\Turbine.TVE2.dll
2009-03-02 13:04 . 2009-04-14 13:55 187904 ----a-w c:\programdata\{3AB7D18B-6873-453C-A0C7-D330283EDE14}\offline\7DC6F9B1\AA2AC949\Iminent.AxImp.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{280b5d37-4a76-467a-b3d6-942fca90acde}]
2009-02-16 13:44 1882136 ----a-w c:\program files\Shareware.Pro-FR\tbShar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6a7400d6-6615-4a06-a4d1-48979fa6e868}]
2008-09-15 04:47 1784856 ----a-w c:\program files\iminent-en\tbimin.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
2009-04-08 16:34 102912 ----a-w c:\program files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}]
2009-02-23 13:12 117248 ----a-w c:\program files\Iminent\IMBooster\Iminent.LinkToContent.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-03-04 21:38 121392 ----a-w c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-17 68856]
"ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2009-05-07 1561840]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2008-01-21 2153472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="c:\program files\Acer\Empowering Technology\SysMonitor.exe" [2008-04-25 319488]
"EmpoweringTechnology"="c:\program files\Acer\Empowering Technology\Framework.Launcher.exe" [2008-04-25 319488]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-01-08 68640]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-25 28672]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-04-22 13535776]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-04-22 92704]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-02-17 24064]
"IMBooster"="c:\program files\Iminent\IMBooster\imbooster.exe" [2009-04-08 365568]
"Iminent.Notifier"="c:\program files\Iminent\SearchTheWeb\Iminent.Notifier.exe" [2009-04-09 496640]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"spywarefighterguard"="c:\program files\Fighters\spywarefighter\SpywarefighterUser.exe" [2008-11-18 180872]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-03-26 5369856]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{A3381893-2AA0-4938-A355-21044CC1FD38}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{726EBDFD-BD05-4FBD-8217-24BE7CD31641}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{A2833FA7-F393-4028-90D9-94D8954EB299}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{95A5B6F1-AB4A-4C0F-B316-3D358944C376}"= c:\program files\CyberLink\PowerDVD\PowerDVD.EXE:CyberLink PowerDVD
"{8309974B-3708-450B-A465-BDD545F4C568}"= c:\program files\Acer Arcade Live\Acer DVDivine\Acer DVDivine.exe:Acer DVDivine
"{8275CD3F-1453-4C44-A1F3-8C90FF18ED20}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe
"{AA097394-2D5A-4B89-A22C-D684290F69B8}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe
"{5CFAD744-915B-4F15-8DEA-B7244EC4EBD8}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe
"{D6ADAA43-FB47-4EE8-B085-ECF97F8CB172}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe
"{9773C304-2055-4323-B6F9-58F8A64358B0}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe
"{E6598C06-23F9-45A7-AA87-F69F70F6DE5D}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe
"{8C9F5832-0AF5-452C-8980-70EB60337190}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{D2142065-9160-4F84-93F2-0275EA85408C}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [17/04/2009 12:19 114768]
R2 AGWinService;AG Windows Service;c:\program files\AGI\common\win32\pythonservice.exe [14/04/2009 17:02 10240]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [17/04/2009 12:19 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [17/04/2009 12:19 51792]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [03/03/2008 13:11 16384]
R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [12/05/2008 19:16 24576]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [25/04/2008 21:36 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [25/04/2008 21:36 131072]
R2 PTK License-FIGHTERS-297811811;PTK License-FIGHTERS-297811811;c:\program files\Fighters\LicenseService.exe [18/11/2008 11:01 283272]
R2 PTK Live Update-FIGHTERS-297811811;PTK Live Update-FIGHTERS-297811811;c:\program files\Fighters\UpdateService.exe [18/11/2008 11:01 307848]
R2 PTK Scanner-FIGHTERS-297811811;PTK Scanner-FIGHTERS-297811811;c:\program files\Fighters\ScannerService.exe [18/11/2008 11:01 311944]
R2 PTK SharedAccess-FIGHTERS-297811811;PTK SharedAccess-FIGHTERS-297811811;c:\program files\Fighters\ConfigService.exe [18/11/2008 11:01 139912]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [12/05/2008 12:42 43552]
R3 PAC207;Webcam 1200;c:\windows\System32\drivers\PFC027.SYS [18/02/2009 18:39 611584]
R3 Vfscan;Vfscan;c:\windows\System32\drivers\vffilter.sys [18/11/2008 11:01 15496]
S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [17/02/2009 18:01 24064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-eRecoveryService - (no file)
SafeBoot-procexp90.Sys


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
mWindow Title =
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
LSP: %SYSTEMROOT%\system32\nvLsp.dll
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-26 20:47
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2009-05-26 20:49
ComboFix-quarantined-files.txt 2009-05-26 18:49

Avant-CF: 106 474 872 832 octets libres
Après-CF: 106 454 736 896 octets libres

289 --- E O F --- 2009-05-26 06:18