Dd wd detecté mais pas sur poste de travail

voila le rapport!
############################## | FindyKill V6.005 |

# User : yaya (Administrateurs) # PC-DE-YAYA
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 16:22:17 | 12/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html

# Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 8.0.6001.18783
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 144,04 Go (68,6 Go free) [ACER] # NTFS
# D:\ # Disque fixe local # 139,5 Go (139,41 Go free) [DATA] # NTFS
# F:\ # Disque CD-ROM # 7,16 Go (0 Mo free) [RA3] # UDF
# I:\ # Disque CD-ROM

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\vfsFPService.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Program Files\Nosibay\Mon Widget RMC\Launcher.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\PnkBstrB.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Program Files\Acer\Acer VCM\RS_Service.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Larousse\Petit Larousse 2009\bin\Hyperappel.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Nosibay\Mon Widget RMC\Mon Widget RMC.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Users\khaled\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\conime.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\IncrediMail\bin\ImNotfy.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## | Registre Startup |

R1 - HKCU\..\Main: "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
R1 - HKCU\..\Main: "Start Page"="https://gamespace.daemon-tools.cc/fra/home"
R1 - HKCU\..\Main: "Secondary Start Pages"=hex(7):68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,77,00,\
F2 - HKLM\..\logon:"Userinit"="C:\\Windows\\system32\\userinit.exe,"
F2 - HKLM\..\logon:"LegalNoticeCaption"=""
F2 - HKLM\..\logon:"LegalNoticeText"=""
04 - HKLM\..\Run: Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run: RtHDVCpl=RtHDVCpl.exe
04 - HKLM\..\Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run: AppleSyncNotifier=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
04 - HKLM\..\Run: iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run: Windows Mobile Device Center=%windir%\WindowsMobile\wmdc.exe
04 - HKLM\..\Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
04 - HKCU\..\Run: uTorrent="C:\Program Files\uTorrent\uTorrent.exe"
04 - HKCU\..\Run: Mon Widget RMC="C:\Program Files\Nosibay\Mon Widget RMC\launcher.exe"
04 - HKCU\..\Run: WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
04 - HKCU\..\Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

################## | Fichiers # Dossiers infectieux |


################## | C:\Users\khaled\Temporary Internet Files |


################## | All Drives ... |

Présent ! F:\autorun.inf [a5c971483a8c89d0408e7e270c3a2f4a]

################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\E
shell\AutoRun\command =E:\SETUP.EXE
shell\configure\command =E:\SETUP.EXE
shell\install\command =E:\SETUP.EXE

HKCU\..\..\Explorer\MountPoints2\K
shell\AutoRun\command =K:\SETUP.EXE
shell\configure\command =K:\SETUP.EXE
shell\install\command =K:\SETUP.EXE

HKCU\..\..\Explorer\MountPoints2\{1e1720da-518d-11de-b2c1-00a0d1aaaada}
shell\AutoRun\command =J:\Autorun.exe

HKCU\..\..\Explorer\MountPoints2\{471dbc52-7c91-11dd-a89c-806e6f6e6963}
shell\AutoRun\command =F:\Autorun.exe

HKCU\..\..\Explorer\MountPoints2\{48941178-fafd-11dd-9e9c-0016ea7214a6}
shell\AutoRun\command =

HKCU\..\..\Explorer\MountPoints2\{48941190-fafd-11dd-9e9c-0016ea7214a6}
shell\AutoRun\command =E:\SETUP.EXE
shell\configure\command =E:\SETUP.EXE
shell\install\command =E:\SETUP.EXE

HKCU\..\..\Explorer\MountPoints2\{5e50cb13-1d6c-11de-a78e-00a0d1aaaada}
shell\AutoRun\command =

HKCU\..\..\Explorer\MountPoints2\{63616158-4965-11de-a0ff-00a0d1aaaada}
shell\AutoRun\command =I:\Autorun.exe

HKCU\..\..\Explorer\MountPoints2\{84952e48-4626-11de-a496-00a0d1aaaada}
shell\AutoRun\command =G:\Autorun.exe

################## | Etat / Services / Informations |

# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# (!) Uac = 0x0

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 3 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )


################## | Cracks / Keygens / Serials |