Ordinateur très vérolé

Bonjour et bienvenue sur CCM ,

Fait ceci :

~~~~~~~~~~~~~~~> Hijack This <~~~~~~~~~~~~~~~~~~~

- Telecharger Hijack
>http://www.infos-du-net.com/telecharger/HijackThis.html

Une fois Hijack installer, exécuter le :
- Cliquer sur "Do a system scan and save a logfile"

- Un fichier texte s'ouvre, si ce n'est pas le cas celui-ci se trouve dans le même dossier que hijackthis.exe .
- Faire édition / sélectionner tout
- Clic droit / copier

- Poste moi le rapport entier

Tout d'abord un grand merci pour cette réponse si rapide.
Après avoir fait ce que vous me demandez j'obtiens le rapport suivant :

"Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:20:12, on 15/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msword98.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\braviax.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Documents and Settings\Caligone\Mes documents\Téléchargements\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [msword98] C:\WINDOWS\system32\msword98.exe
O4 - HKCU\..\Run: [msword98] C:\Documents and Settings\Caligone\msword98.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: ikowin32.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.21.0.cab
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

Ok !

Fait ceci :

~~~~~~~~~~~~~~> Malwarebytes <~~~~~~~~~~~~~~~~~~~

- Télécharger Malwarebytes
- Enregistre le sur le bureau
- Double clique sur le fichier téléchargé pour lancer le processus d’installation
- Lorsqu’il te le sera demandé, mets à jour Malwarebytes anti malware
- Si le pare-feu demande l’autorisation de se connecter pour malwarebytes, acceptes
- Une fois la mise à jour terminée, ferme Malwarebytes

- Double-clique sur l’icône de malwarebytes pour le relancer
- Dans l’onglet, Recherche, probablement ouvert par défaut,
- Sélectionne Exécuter un examen complet
- Clique sur Rechercher
- Le scan démarre

- A la fin de l’analyse, un message s’affiche : L’examen s’est terminé normalement. Cliquez sur ‘Afficher les résultats’ pour afficher tous les objets trouvés.
- Clique sur Ok pour poursuivre.
- Si des malwares ont été détectés, cliques sur Afficher les résultats
- Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

- Malwarebytes va ouvrir le bloc-notes et y copier le rapport d’analyse.
- Rends toi dans l’onglet rapport/log
- Tu clique dessus pour l’afficher.
- Une fois affiché, cliques sur édition en haut du bloc notes, et puis sur sélectionner tout
- Tu recliques sur édition et puis sur copier et tu reviens sur le forum et dans ta réponse
- Tu clique droit dans le cadre de la réponse et coller

Après avoir effectué une analyse avec Malwarebytes anti malware, voici le rapport :
"Malwarebytes' Anti-Malware 1.40
Version de la base de données: 2630
Windows 5.1.2600 Service Pack 3

15/08/2009 18:23:18
mbam-log-2009-08-15 (18-23-18).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 124179
Temps écoulé: 10 minute(s), 43 second(s)

Processus mémoire infecté(s): 4
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 6
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 21

Processus mémoire infecté(s):
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Unloaded process successfully.
C:\WINDOWS\Temp\wpv201250109698.exe (Trojan.Agent) -> Unloaded process successfully.
C:\Documents and Settings\Caligone\msword98.exe (Trojan.Agent) -> Unloaded process successfully.
C:\WINDOWS\system32\msword98.exe (Trojan.Agent) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msword98 (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msword98 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\msword98.exe (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wisdstr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\beep.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\figaro.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\beep.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3FFD409C-A779-4E68-83FD-8EA2CEAF0EFF}\RP25\A0010492.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3FFD409C-A779-4E68-83FD-8EA2CEAF0EFF}\RP25\A0010493.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\WINDOWS\system32\wisdstr.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\WINDOWS\system32\dllcache\figaro.sys.vir (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\Local Settings\Temp\BN4.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\Local Settings\Temp\BN5.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\Local Settings\Temp\BN6.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\Local Settings\Temp\BN7.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\wpv201250109698.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\wpv291250315064.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\delself.bat (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\oashdihasidhasuidhiasdhiashdiuasdhasd (Trace.Pandex) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\Menu Démarrer\Programmes\Démarrage\ikowin32.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Caligone\msword98.exe (Trojan.Agent) -> Quarantined and deleted successfully."

Au démarage de Windows, Avast n'a pas bronché une seule fois, peut-être que mon ordinateur est totalement propre maintenant? Mais j'aimerai en être sur, comment puis-je faire? De plus d'après certaines sources, Avast n'est pas un très bonne antivirus...Que puis-je prendre comme antivirus?
Merci beaucoup

Rectification : Alerte Avast : Un Rootkit a été trouvé !

Nom du fichier : C:\WINDOWS\System32\drivers\c201fdcd.sys
Type : services cachés
Nom du malware : Wi????????

Choix possible : Supprimer maintenant ou ignorer

Comment puis-je me sortir de tout cela? =(
Un conseil pour changer d'antivirus ou/et de parefeu?
Merci
Cordialement

Après avoir suivis la procédure, je n'ai pas eu de message de proposant d'installer la console de recuperation. Important?

Voici le log :
"ComboFix 09-08-10.06 - Caligone 16/08/2009 12:27.3.1 - FAT32x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.445.178 [GMT 2:00]
Running from: c:\documents and settings\Caligone\Mes documents\Téléchargements\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090815-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\c201fdcd.sys

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_c201fdcd

((((((((((((((((((((((((( Files Created from 2009-07-16 to 2009-08-16 )))))))))))))))))))))))))))))))
.

2009-08-16 10:15 . 2009-08-16 10:15 -------- d-----w- c:\documents and settings\Caligone\Bluetooth Software
2009-08-16 10:15 . 2008-04-13 17:33 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-08-16 10:15 . 2008-04-13 17:33 21504 ----a-w- c:\windows\system32\dllcache\hidserv.dll
2009-08-16 10:12 . 2007-03-23 02:50 67960 ----a-w- c:\windows\system32\drivers\btwusb.sys
2009-08-16 10:12 . 2007-03-23 02:50 106557 ----a-w- c:\windows\system32\btw_ci.dll
2009-08-16 10:12 . 2007-03-31 05:02 55352 ----a-w- c:\windows\system32\drivers\btwhid.sys
2009-08-16 10:12 . 2007-03-23 02:50 149123 ----a-w- c:\windows\system32\drivers\btwdndis.sys
2009-08-16 10:12 . 2007-03-23 02:50 37424 ----a-w- c:\windows\system32\drivers\btport.sys
2009-08-16 10:12 . 2007-03-31 05:02 876384 ----a-w- c:\windows\system32\drivers\btkrnl.sys
2009-08-16 10:12 . 2007-03-23 02:49 539072 ----a-w- c:\windows\system32\drivers\btaudio.sys
2009-08-16 10:12 . 2009-08-16 10:12 -------- d-----w- c:\program files\WIDCOMM
2009-08-16 06:45 . 2009-08-16 06:45 -------- d-sh--w- C:\FOUND.000
2009-08-15 07:22 . 2004-08-05 03:00 2944 ----a-w- c:\windows\system32\drivers\null.sys
2009-08-15 07:22 . 2004-08-05 03:00 2944 ----a-w- c:\windows\system32\dllcache\null.sys
2009-08-13 07:17 . 2008-11-06 00:03 -------- d-----w- C:\SDFix
2009-08-12 19:23 . 2009-08-12 19:23 -------- d-----w- c:\documents and settings\Caligone\Application Data\Malwarebytes
2009-08-12 19:23 . 2009-08-03 11:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-12 19:23 . 2009-08-12 19:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-08-12 19:23 . 2009-08-12 19:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-12 19:23 . 2009-08-03 11:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-12 19:14 . 2009-08-12 19:14 -------- d-----w- c:\documents and settings\Caligone\Local Settings\Application Data\Adobe
2009-08-12 17:58 . 2009-08-12 17:58 -------- d-----w- c:\program files\ioIsland
2009-08-12 17:18 . 2009-08-12 17:18 -------- d-----w- C:\PunkBuster
2009-08-12 17:00 . 2009-08-12 17:00 0 ----a-w- c:\windows\nsreg.dat
2009-08-12 17:00 . 2009-08-12 17:00 -------- d-----w- c:\documents and settings\Caligone\Local Settings\Application Data\Mozilla
2009-08-12 11:32 . 2009-08-12 11:32 -------- d-----w- c:\documents and settings\NetworkService\Application Data\Xfire
2009-08-12 09:38 . 2009-08-12 09:23 729088 ----a-w- c:\windows\iun6002.exe
2009-08-12 09:23 . 2009-07-10 13:27 1315328 ------w- c:\windows\system32\dllcache\msoe.dll
2009-08-11 15:12 . 2009-08-14 20:25 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-08-11 15:12 . 2009-08-11 15:12 139152 ----a-w- c:\documents and settings\Caligone\Application Data\PnkBstrK.sys
2009-08-11 15:12 . 2009-08-14 20:24 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-08-11 15:12 . 2009-08-11 15:12 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-08-11 15:12 . 2009-08-11 15:12 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-08-11 12:37 . 2009-08-11 12:37 -------- d-----w- c:\documents and settings\Caligone\Application Data\Xfire
2009-08-11 12:37 . 2009-08-11 12:37 -------- d-----w- c:\program files\Xfire
2009-08-11 12:24 . 2009-08-11 12:24 532 ----a-w- c:\windows\eReg.dat
2009-08-10 11:41 . 2009-08-10 11:41 -------- d-----w- c:\documents and settings\Caligone\Application Data\teamspeak2
2009-08-10 11:40 . 2009-08-10 11:40 -------- d-----w- c:\program files\Teamspeak2_RC2
2009-08-10 11:37 . 2009-08-10 11:37 -------- d-sh--w- c:\documents and settings\Caligone\IECompatCache
2009-08-09 08:59 . 2009-08-09 08:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-08-09 08:57 . 2009-08-09 08:57 -------- d-----w- c:\windows\system32\NtmsData
2009-08-09 07:19 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-08-09 07:19 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-08-08 15:46 . 2008-03-16 13:30 216064 --sh--r- c:\windows\system32\nbDX.dll
2009-08-08 15:46 . 2007-02-21 11:47 31232 --sh--r- c:\windows\system32\msfDX.dll
2009-08-08 15:46 . 2006-05-03 10:06 163328 --sh--r- c:\windows\system32\flvDX.dll
2009-08-08 15:46 . 2009-08-08 15:46 -------- d-----w- c:\program files\eRightSoft
2009-08-08 11:48 . 2009-08-08 11:48 -------- d-----w- c:\program files\IZArc
2009-08-05 16:47 . 2008-04-13 17:33 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
2009-08-05 16:47 . 2008-04-13 17:33 54784 ----a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2009-08-05 16:40 . 2005-03-15 15:04 161792 ------w- c:\windows\system32\drivers\ov530vid.sys
2009-08-05 16:40 . 2004-11-08 22:37 25177 ------w- c:\windows\system32\drivers\ov530cmd.sys
2009-08-05 16:40 . 2009-08-05 16:40 -------- d-----w- c:\windows\OvtCam
2009-08-05 16:40 . 2005-09-30 07:42 40960 ------w- c:\windows\system32\ov530ext.dll
2009-08-05 16:40 . 2004-08-05 15:34 61440 ------w- c:\windows\ov530dib.dll
2009-08-05 16:40 . 2004-07-19 23:50 16440 ------w- c:\windows\system32\ov530usd.dll
2009-08-05 16:37 . 2008-04-13 09:45 60032 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys
2009-08-05 16:37 . 2008-04-13 09:45 60032 ----a-w- c:\windows\system32\dllcache\usbaudio.sys
2009-08-05 16:37 . 2004-08-05 03:00 26496 ----a-w- c:\windows\system32\dllcache\usbstor.sys
2009-08-05 16:36 . 2004-08-05 03:00 31616 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2009-08-05 16:36 . 2004-08-05 03:00 31616 ----a-w- c:\windows\system32\dllcache\usbccgp.sys
2009-08-05 09:00 . 2009-08-05 09:00 205312 ------w- c:\windows\system32\dllcache\mswebdvd.dll
2009-08-04 18:33 . 2009-08-04 18:33 -------- d-----w- c:\documents and settings\Caligone\Application Data\Apple Computer
2009-08-04 18:32 . 2009-03-19 14:32 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-08-04 18:32 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2009-08-04 18:32 . 2009-08-04 18:32 -------- d-----w- c:\program files\iPod
2009-08-04 18:32 . 2009-08-04 18:32 -------- d-----w- c:\program files\iTunes
2009-08-04 18:32 . 2009-08-04 18:32 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-08-04 18:32 . 2009-08-04 18:32 -------- d-----w- c:\program files\Bonjour
2009-08-04 18:31 . 2009-08-04 18:31 -------- d-----w- c:\program files\QuickTime
2009-08-04 18:31 . 2009-08-04 18:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-08-04 18:31 . 2009-08-04 18:31 -------- d-----w- c:\documents and settings\Caligone\Local Settings\Application Data\Apple
2009-08-04 18:31 . 2009-08-04 18:31 -------- d-----w- c:\program files\Apple Software Update
2009-08-04 18:30 . 2009-08-04 18:31 -------- d-----w- c:\windows\system32\DRVSTORE
2009-08-04 18:30 . 2009-08-04 18:30 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-08-04 18:30 . 2009-08-04 18:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-08-04 18:30 . 2009-08-04 18:30 -------- d-----w- c:\documents and settings\Caligone\Local Settings\Application Data\Apple Computer
2009-08-04 18:22 . 2009-08-04 18:22 -------- d-----w- c:\program files\Messenger Plus! Live
2009-08-04 18:19 . 2009-08-04 18:19 -------- d-----w- c:\documents and settings\Caligone\Tracing
2009-08-04 18:16 . 2009-08-04 18:16 -------- d-----w- c:\windows\system32\XPSViewer
2009-08-04 18:16 . 2009-08-04 18:16 -------- d-----w- c:\program files\MSBuild
2009-08-04 18:16 . 2009-08-04 18:16 -------- d-----w- c:\program files\Reference Assemblies
2009-08-04 18:15 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-08-04 18:15 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-08-04 18:15 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-08-04 18:15 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-08-04 18:15 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll
2009-08-04 18:15 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-08-04 18:15 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-08-04 18:15 . 2009-08-04 18:15 -------- d-----w- C:\cf65f597773f3b45d06320727ff57b5d
2009-08-04 18:10 . 2009-08-04 18:10 -------- d-----w- c:\program files\Microsoft
2009-08-04 18:10 . 2009-08-04 18:10 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-08-04 18:10 . 2009-08-04 18:10 -------- d-----w- c:\documents and settings\Caligone\Local Settings\Application Data\Identities
2009-08-04 18:10 . 2009-08-04 18:10 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-08-04 18:09 . 2009-08-04 18:09 -------- d-----w- c:\program files\Windows Live
2009-08-04 18:09 . 2009-08-04 18:09 -------- d-----w- c:\windows\system32\GroupPolicy
2009-08-04 18:09 . 2009-08-04 18:09 -------- d-----w- c:\program files\Windows Desktop Search
2009-08-04 18:08 . 2008-03-07 17:02 98304 ------w- c:\windows\system32\dllcache\nlhtml.dll
2009-08-04 18:08 . 2008-03-07 17:02 29696 ------w- c:\windows\system32\dllcache\mimefilt.dll
2009-08-04 18:08 . 2008-03-07 17:02 192000 ------w- c:\windows\system32\dllcache\offfilt.dll
2009-08-04 18:07 . 2009-08-04 18:07 -------- d-----w- c:\program files\Windows Media Connect 2
2009-08-04 18:05 . 2009-08-04 18:05 -------- d-----w- c:\windows\system32\LogFiles
2009-08-04 18:05 . 2009-08-04 18:05 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-08-04 18:02 . 2009-08-04 18:02 -------- d-----w- c:\program files\VideoLAN
2009-08-04 18:01 . 2009-08-04 18:01 -------- d-----w- c:\windows\system32\URTTemp
2009-08-04 18:01 . 2009-08-04 18:01 -------- d-----w- c:\program files\CCleaner
2009-08-04 18:00 . 2009-08-04 18:00 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-08-04 18:00 . 2009-08-10 15:29 35600 ----a-w- c:\documents and settings\Caligone\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-04 17:40 . 2009-08-04 17:40 -------- d-sh--w- c:\documents and settings\Caligone\PrivacIE
2009-08-04 17:39 . 2009-08-04 17:39 -------- d-sh--w- c:\documents and settings\Caligone\IETldCache
2009-08-04 17:31 . 2009-07-03 16:57 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-08-04 17:31 . 2009-07-03 16:57 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2009-08-04 17:31 . 2009-07-03 16:57 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2009-08-04 17:31 . 2009-07-03 16:57 594432 ------w- c:\windows\system32\dllcache\msfeeds.dll
2009-08-04 17:31 . 2009-07-03 16:57 1985536 ------w- c:\windows\system32\dllcache\iertutil.dll
2009-08-04 17:31 . 2009-07-19 16:45 11067392 ------w- c:\windows\system32\dllcache\ieframe.dll
2009-08-04 17:31 . 2009-08-04 17:31 -------- d-----w- c:\windows\ie8updates
2009-08-04 17:31 . 2009-07-01 07:08 101376 ------w- c:\windows\system32\dllcache\iecompat.dll
2009-08-04 17:29 . 2009-08-04 17:29 -------- d--h--w- c:\windows\ie8
2009-08-04 17:26 . 2009-08-04 17:26 -------- d-----w- c:\program files\MSXML 4.0
2009-08-04 17:18 . 2008-04-21 21:15 219136 ------w- c:\windows\system32\dllcache\wordpad.exe
2009-08-04 17:18 . 2008-12-11 10:57 333952 ------w- c:\windows\system32\dllcache\srv.sys
2009-08-04 17:16 . 2008-10-24 11:21 455296 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2009-08-04 17:16 . 2008-09-04 17:16 1106944 ------w- c:\windows\system32\dllcache\msxml3.dll
2009-08-04 17:16 . 2008-10-15 16:35 337408 ------w- c:\windows\system32\dllcache\netapi32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-16 06:51 . 2005-08-06 18:19 85834 ----a-w- c:\windows\system32\perfc00C.dat
2009-08-16 06:51 . 2005-08-06 18:19 512530 ----a-w- c:\windows\system32\perfh00C.dat
2009-08-05 09:00 . 2004-08-05 03:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 16:52 . 2005-08-06 18:09 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-08-04 16:17 . 2009-08-04 16:17 -------- d-----w- c:\program files\Launch Manager
2009-08-04 16:12 . 2004-06-25 00:13 925 ----a-w- c:\windows\HotFix.bat
2009-08-04 16:12 . 2005-03-09 19:12 657 ----a-w- c:\windows\CLEANUP.CMD
2009-07-17 19:03 . 2004-08-05 03:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 2004-08-05 03:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-13 12:22 . 2009-07-13 12:22 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.1.6\SetupAdmin.exe
2009-07-03 16:57 . 2004-08-05 03:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-06-26 16:50 . 2009-06-26 16:50 81920 ------w- c:\windows\system32\ieencode.dll
2009-06-25 08:26 . 2004-08-05 03:00 736768 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:26 . 2004-08-05 03:00 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:26 . 2004-08-05 03:00 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:26 . 2004-08-05 03:00 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:26 . 2004-08-05 03:00 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:26 . 2004-08-05 03:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-24 11:18 . 2004-08-05 03:00 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-16 14:40 . 2004-08-05 03:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2004-08-05 03:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 10:44 . 2004-08-05 03:00 78848 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:14 . 2004-08-05 03:00 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:21 . 2004-08-05 03:00 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:15 . 2004-08-05 03:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:10 . 2004-08-05 03:00 1297408 ----a-w- c:\windows\system32\quartz.dll
2006-05-03 10:06 . 2009-08-08 15:46 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2009-08-08 15:46 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2009-08-08 15:46 216064 --sh--r- c:\windows\system32\nbDX.dll
.

------- Sigcheck -------

[7] 2008-04-13 10:15 574976 78A08DD6A8D65E697C18E1DB01C5CDCA c:\windows\system32\dllcache\cache\ntfs.sys
[7] 2004-08-05 03:00 574592 B78BE402C3F63DD55521F73876951CDD c:\windows\$NtServicePackUninstall$\ntfs.sys
[7] 2008-04-13 10:15 574976 78A08DD6A8D65E697C18E1DB01C5CDCA c:\windows\ServicePackFiles\i386\ntfs.sys

c:\windows\system32\appmgmts.dll ... is missing !!
c:\windows\system32\drivers\beep.sys ... is missing !!
c:\windows\system32\drivers\ntfs.sys ... is missing !!
.
((((((((((((((((((((((((((((( SnapShot@2009-08-15_07.22.55 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-16 06:46 . 2009-08-16 06:46 16384 c:\windows\Temp\Perflib_Perfdata_6bc.dat
+ 2009-08-16 10:42 . 2009-08-16 10:42 16384 c:\windows\Temp\Perflib_Perfdata_5bc.dat
+ 2009-08-16 10:13 . 2007-03-23 02:50 67960 c:\windows\system32\ReinstallBackups\0005\DriverFiles\btwusb.sys
+ 2005-08-06 18:19 . 2009-08-16 06:51 72066 c:\windows\system32\perfc009.dat
- 2005-08-06 18:19 . 2009-08-15 06:52 72066 c:\windows\system32\perfc009.dat
+ 2007-04-01 06:37 . 2007-04-01 06:37 24576 c:\windows\system32\BtXpShell.dll
+ 2007-04-01 06:39 . 2007-04-01 06:39 45056 c:\windows\system32\btwpimif.dll
+ 2007-04-01 06:59 . 2007-04-01 06:59 90112 c:\windows\system32\BtWiaExt.dll
+ 2007-04-01 06:44 . 2007-04-01 06:44 49152 c:\windows\system32\btsendto_notes.dll
+ 2007-04-01 06:46 . 2007-04-01 06:46 81920 c:\windows\system32\btsendto_ie.dll
+ 2007-04-01 06:48 . 2007-04-01 06:48 98304 c:\windows\system32\btsec.dll
+ 2007-04-01 06:30 . 2007-04-01 06:30 94208 c:\windows\system32\btrezxp.dll
+ 2007-04-01 06:41 . 2007-04-01 06:41 90112 c:\windows\system32\btprn2k.dll
+ 2007-03-31 15:35 . 2007-03-31 15:35 65536 c:\windows\system32\BTNCopy.dll
+ 2007-04-01 07:00 . 2007-04-01 14:00 86016 c:\windows\system32\BtMmHook.dll
+ 2007-04-01 06:31 . 2007-04-01 06:31 36864 c:\windows\system32\btdev.dll
+ 2007-04-01 06:37 . 2007-04-01 06:37 77824 c:\windows\system32\BtAudioHelper.dll
+ 2009-08-16 10:12 . 2009-08-16 10:12 33982 c:\windows\Installer\{84814E6B-2581-46EC-926A-823BD1C670F6}\ARPPRODUCTICON.exe
+ 2009-08-16 10:31 . 2009-08-16 10:31 16384 c:\windows\ERDNT\subs\Users\00000006\UsrClass.dat
+ 2009-08-16 10:31 . 2009-08-16 10:31 8192 c:\windows\ERDNT\subs\Users\00000004\UsrClass.dat
+ 2009-08-16 10:31 . 2009-08-16 10:31 8192 c:\windows\ERDNT\subs\Users\00000002\UsrClass.dat
+ 2007-04-01 06:22 . 2007-04-01 06:22 581632 c:\windows\system32\WidcommSdk.dll
+ 2007-04-01 06:23 . 2007-04-01 06:23 491581 c:\windows\system32\wbtapi.dll
- 2005-08-06 18:19 . 2009-08-15 06:52 442800 c:\windows\system32\perfh009.dat
+ 2005-08-06 18:19 . 2009-08-16 06:51 442800 c:\windows\system32\perfh009.dat
+ 2007-04-01 06:37 . 2007-04-01 06:37 106496 c:\windows\system32\BTXPPanel.dll
+ 2007-04-01 06:51 . 2007-04-01 06:51 987201 c:\windows\system32\BtWizard.dll
+ 2007-04-01 06:52 . 2007-04-01 06:52 229376 c:\windows\system32\btwhidcs.dll
+ 2007-04-01 06:45 . 2007-04-01 06:45 155699 c:\windows\system32\btsendto_wab.dll
+ 2007-04-01 06:46 . 2007-04-01 06:46 176128 c:\windows\system32\btsendto_office.dll
+ 2007-04-01 06:39 . 2007-04-01 06:39 217088 c:\windows\system32\btsendto.dll
+ 2007-04-01 06:43 . 2007-04-01 06:43 143360 c:\windows\system32\btosif_olx.dll
+ 2007-04-01 06:43 . 2007-04-01 06:43 208896 c:\windows\system32\btosif_ol.dll
+ 2007-04-01 06:42 . 2007-04-01 06:42 159744 c:\windows\system32\btosif_notes.dll
+ 2007-04-01 06:38 . 2007-04-01 06:38 122880 c:\windows\system32\btosif.dll
+ 2007-04-01 06:50 . 2007-04-01 06:50 962637 c:\windows\system32\BTNeighborhood.dll
+ 2007-04-01 06:31 . 2007-04-01 06:31 417792 c:\windows\system32\btins.dll
+ 2007-04-01 06:41 . 2007-04-01 06:41 126976 c:\windows\system32\bthcrpui.dll
+ 2007-04-01 06:40 . 2007-04-01 06:40 114688 c:\windows\system32\bthcrp.dll
+ 2007-04-01 06:48 . 2007-04-01 06:48 421947 c:\windows\system32\btcss.dll
+ 2007-04-01 06:39 . 2007-04-01 06:39 618496 c:\windows\system32\BTChooser.dll
+ 2007-04-01 06:22 . 2007-04-01 06:22 159744 c:\windows\system32\btbip.dll
+ 2007-04-01 06:37 . 2007-04-01 06:37 135168 c:\windows\system32\btbigbmp.dll
+ 2007-04-01 06:32 . 2007-04-01 06:32 135233 c:\windows\system32\bt2k_ins.dll
+ 2009-08-16 10:31 . 2009-08-16 10:31 237568 c:\windows\ERDNT\subs\Users\00000003\ntuser.dat
+ 2009-08-16 10:31 . 2009-08-16 10:31 233472 c:\windows\ERDNT\subs\Users\00000001\ntuser.dat
+ 2001-11-14 11:56 . 2001-11-14 11:56 1802240 c:\windows\system32\lcppn21.dll
+ 2007-04-01 07:00 . 2007-04-01 07:00 2842624 c:\windows\system32\btwicons.dll
+ 2007-04-01 06:30 . 2007-04-01 00:08 3190784 c:\windows\system32\btrez.dll
+ 2009-08-16 10:12 . 2009-08-16 10:12 2298880 c:\windows\Installer\bed27a.msi
+ 2009-08-16 10:31 . 2009-08-16 10:31 2015232 c:\windows\ERDNT\subs\Users\00000005\ntuser.dat
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"SiS Windows KeyHook"="c:\windows\system32\keyhook.exe" [2005-03-04 32768]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-07 98394]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-07 688218]
"PCMService"="c:\program files\Arcade\PCMService.exe" [2005-03-09 49152]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"LManager"="c:\program files\Launch Manager\QtZgAcer.EXE" [2005-03-28 315392]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-07-13 292128]
"SiSPower"="SiSPower.dll" - c:\windows\system32\SiSPower.dll [2005-02-25 49152]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-02-23 77824]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Utility Tray.lnk - c:\windows\system32\sistray.exe [2005-1-4 331776]
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\WINDOWS\\System32\\PnkBstrA.exe"=
"c:\\WINDOWS\\System32\\PnkBstrB.exe"=
"f:\\Program Files\\MTA\\MTAServer0.3.1.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [04/08/2009 18:31 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [04/08/2009 18:31 20560]
R3 HSFHWSIS;HSFHWSIS;c:\windows\system32\drivers\HSFHWSIS.sys [15/12/2004 00:18 200576]
S1 soqwx32;soqwx32;\??\c:\windows\system32\drivers\soqwx32.sys --> c:\windows\system32\drivers\soqwx32.sys [?]
S3 ovt530;Webcam Deluxe;c:\windows\system32\drivers\ov530vid.sys [05/08/2009 18:40 161792]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-08-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = hxxp://global.acer.com/
uInternet Settings,ProxyOverride = *.local
IE: envoyer au périphérique &bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} - hxxps://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.21.0.cab
FF - ProfilePath - c:\documents and settings\Caligone\Application Data\Mozilla\Firefox\Profiles\a7qw3z66.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-16 12:42
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(2576)
c:\windows\system32\btmmhook.dll
c:\program files\CyberLink\Shared Files\CLRCEngine.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
c:\program files\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
c:\acer\EMANAGER\ANBMSERV.EXE
c:\program files\FICHIERS COMMUNS\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
c:\program files\BONJOUR\MDNSRESPONDER.EXE
c:\windows\SYSTEM32\PNKBSTRA.EXE
c:\program files\ALWIL SOFTWARE\AVAST4\ASHDISP.EXE
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-08-16 12:44 - machine was rebooted
ComboFix-quarantined-files.txt 2009-08-16 10:44
ComboFix2.txt 2009-08-15 15:05
ComboFix3.txt 2009-08-15 07:24

Pre-Run: 2 477 744 128 octets libres
Post-Run: 2 492 563 456 octets libres

414 --- E O F --- 2009-08-14 14:39"

Merci une fois de plus pour votre aide.
Cordialement

Voici le log :
"Logfile of random's system information tool 1.06 (written by random/random)
Run by Caligone at 2009-08-16 12:54:34
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 2 GB (24%) free of 10 GB
Total RAM: 445 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:54:38, on 16/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Caligone\Mes documents\Téléchargements\RSIT.exe
C:\Documents and Settings\Caligone\Mes documents\Téléchargements\Caligone.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.acer.com/worldwide/selection.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: envoyer au périphérique &bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: @btrez.dll,-4015 - {cca281ca-c863-46ef-9331-5c8d4460577f} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {cca281ca-c863-46ef-9331-5c8d4460577f} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.21.0.cab
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

Et voila l'info :
"info.txt logfile of random's system information tool 1.06 2009-08-16 12:54:40

======Uninstall list======

-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Acer Inc.\Acer French Guide Link\Uninst.isu"
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E06E4F4E-72D6-4497-BFFD-BCB43077C2F4}\setup.exe" -l0x40c -uninst
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Acer eManager for Notebook-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{827289F5-B44F-4E49-9993-840741585A62}
Acer GridVista-->C:\WINDOWS\UnInst32.exe GridV.UNI
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
Apple Mobile Device Support-->MsiExec.exe /I{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Arcade 3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Battlefield 1942-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}\setup.exe" -l0x40c
Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
ClearType Tuning Control Panel Applet-->MsiExec.exe /I{C9E4932C-8417-4E4C-A0E3-EE534810AB4D}
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
DesertCombat 0.7-->C:\WINDOWS\iun6002.exe "F:\Program Files\EA GAMES\Battlefield 1942\DesertCombat.ini"
GTAIII-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{92B94569-6683-4617-8C54-EB27A1B51B30}\Setup.exe" -l0x40c
Guitar Pro 5.2-->"F:\Program Files\Guitar Pro 5\unins000.exe"
Hercules Webcam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A250D351-A07F-4D5D-AB6C-693C69B9BFAF}\Setup.exe" -l0x40c
HijackThis 2.0.2-->"C:\Documents and Settings\Caligone\Mes documents\Téléchargements\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
ioIsland.com ClearTweak-->C:\PROGRA~1\IOISLAND\CLEART~1\UNWISE.EXE C:\PROGRA~1\IOISLAND\CLEART~1\ClearTweak.LOG
iTunes-->MsiExec.exe /I{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}
IZArc 4.0 beta 1-->"C:\Program Files\IZArc\unins000.exe"
Launch Manager-->C:\WINDOWS\UnInst32.exe QtZgAcer.UNI
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Mozilla Firefox (3.5.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
NTI Backup NOW! 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1036 BUN4
NTI CD & DVD-Maker-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.EXE" -uninstall
PunkBuster pour Battlefield 1942-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{127B684B-A002-44C8-99A7-6CF8F1E26873}\setup.exe" -l0x40c
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe"
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SiS 900 PCI Fast Ethernet Adapter Driver-->C:\WINDOWS\SiS\900\Uninst.exe
SiS VGA Utilities-->Rundll32 SiSInst.dll,Uninstall VGA,R,oem3.inf
SiSAGP driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC226AC9-0314-496C-BE6A-B6A132628466}\setup.exe" -l0x40c
SoftV90 Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1039&DEV_7013&SUBSYS_00821025\HXFSETUP.EXE -U -IAcrSisK.inf
SUPER © Version 2009.bld.35 (Jan 5, 2009)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
WIDCOMM Bluetooth Software-->MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090815-0] (disabled)

======System event log======

Computer Name: ACER-79F6FF2248
Event Code: 7036
Message: Le service HTTP SSL est entré dans l'état : en cours d'exécution.

Record Number: 2094
Source Name: Service Control Manager
Time Written: 20090815084837.000000+120
Event Type: Informations
User:

Computer Name: ACER-79F6FF2248
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service HTTP SSL.

Record Number: 2093
Source Name: Service Control Manager
Time Written: 20090815084836.000000+120
Event Type: Informations
User: AUTORITE NT\SERVICE LOCAL

Computer Name: ACER-79F6FF2248
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.

Record Number: 2092
Source Name: Service Control Manager
Time Written: 20090815084831.000000+120
Event Type: Informations
User:

Computer Name: ACER-79F6FF2248
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 2091
Source Name: Service Control Manager
Time Written: 20090815084830.000000+120
Event Type: Informations
User:

Computer Name: ACER-79F6FF2248
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 2090
Source Name: Service Control Manager
Time Written: 20090815084830.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: ACER-79F6FF2248
Event Code: 1
Message:
Record Number: 283
Source Name: Bonjour Service
Time Written: 20090812092217.000000+120
Event Type: Informations
User:

Computer Name: ACER-79F6FF2248
Event Code: 4097
Message: L'application, F:\Program Files\Rockstar Games\Grand Theft Auto Vice City\gta-vc.exe, a généré une erreur d'application
L'erreur s'est produite le 08/11/2009 à 17:53:55.625
L'exception générée était c0000005 à l'adresse 0046352F (gta-vc)

Record Number: 282
Source Name: DrWatson
Time Written: 20090811175355.000000+120
Event Type: Informations
User:

Computer Name: ACER-79F6FF2248
Event Code: 1000
Message: Application défaillante gta-vc.exe, version 0.0.0.0, module défaillant gta-vc.exe, version 0.0.0.0, adresse de défaillance 0x0006352f.

Record Number: 281
Source Name: Application Error
Time Written: 20090811175354.000000+120
Event Type: erreur
User:

Computer Name: ACER-79F6FF2248
Event Code: 4097
Message: L'application, F:\Program Files\Rockstar Games\Grand Theft Auto Vice City\gta-vc.exe, a généré une erreur d'application
L'erreur s'est produite le 08/11/2009 à 17:49:20.921
L'exception générée était c0000005 à l'adresse 0046352F (gta-vc)

Record Number: 280
Source Name: DrWatson
Time Written: 20090811174921.000000+120
Event Type: Informations
User:

Computer Name: ACER-79F6FF2248
Event Code: 1000
Message: Application défaillante gta-vc.exe, version 0.0.0.0, module défaillant gta-vc.exe, version 0.0.0.0, adresse de défaillance 0x0006352f.

Record Number: 279
Source Name: Application Error
Time Written: 20090811174918.000000+120
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------"

Merci encore

Voici le rapport de OTM :
"All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
c:\windows\AntiV.EXE moved successfully.
File/Folder c:\windows\system32\drivers\soqwx32.sys not found.
C:\WINDOWS\PEV.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: All Users

User: NetworkService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Caligone
->Temp folder emptied: 46636168 bytes
->Temporary Internet Files folder emptied: 24794375 bytes
->FireFox cache emptied: 47063869 bytes

User: Administrateur
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_59c.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 652205 bytes
RecycleBin emptied: 187491596 bytes

Total Files Cleaned = 292,61 mb

OTM by OldTimer - Version 3.0.0.6 log created on 08182009_072933

Files moved on Reboot...
File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!
File C:\WINDOWS\temp\Perflib_Perfdata_59c.dat not found!

Registry entries deleted on Reboot..."

Si comme je le pense, la suppression est terminée, je me permet de vous demandez quelques petits conseils :
-Qu'installer comme Antivirus? (efficace sans manger toutes mes ressources)
-Qu'installer comme Pare-Feu? (celui de Windows ne me parait pas très fiable)
-Qu'installer comment Antispyware?(je n'en n'ai pas, peut-être est-ce a cause de cela que j'ai été infecté)

Un grand merci a vous pour votre précieuse aide sans laquelle j'aurais du passer par le formatage.
Cordialement

il va falloir voir celui ci pourquoi OTM ne là pas trouvé : c:\windows\system32\drivers\soqwx32.sys not found.

nathandre, s'il ne là pas trouvé peut être qu'il n'est plus présent, à voir avec RSIT

possible aussi les fichiers cachés j'y avait pas pensé je te laisse lui expliqué .

Le fichier c:\windows\system32\drivers\soqwx32.sys est bien introuvable. Même en affichant les fichiers cachés (option de dossier) je n'ai pas pu mettre la main dessus. Faut-il que j'utilise RSIT? Comment?
Merci a vous deux

Voici le rapport :
"Logfile of random's system information tool 1.06 (written by random/random)
Run by Caligone at 2009-08-19 08:07:02
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 2 GB (21%) free of 10 GB
Total RAM: 445 MB (23% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"=Alaunch []
"SiSPower"=SiSPower.dll,ModeAgent []
"SiS Windows KeyHook"=C:\WINDOWS\system32\keyhook.exe [2005-03-04 32768]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-02-23 77824]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-10-07 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-10-07 688218]
"PCMService"=C:\Program Files\Arcade\PCMService.exe [2005-03-09 49152]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
"LManager"=C:\Program Files\Launch Manager\QtZgAcer.EXE [2005-03-28 315392]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-05-26 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-07-13 292128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
BTTray.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\WINDOWS\System32\PnkBstrA.exe"="C:\WINDOWS\System32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\System32\PnkBstrB.exe"="C:\WINDOWS\System32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"F:\Program Files\MTA\MTAServer0.3.1.exe"="F:\Program Files\MTA\MTAServer0.3.1.exe:*:Enabled:MTAServer0.3.1"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.ini - open - notepad.exe %1
.txt - open - notepad.exe %1

======List of files/folders created in the last 2 months======

2009-08-19 08:07:07 ----D---- C:\Program Files\trend micro
2009-08-18 07:29:33 ----D---- C:\_OTM
2009-08-16 20:44:06 ----D---- C:\Documents and Settings\Caligone\Application Data\vlc
2009-08-16 20:23:45 ----D---- C:\Program Files\Notepad++
2009-08-16 20:23:45 ----D---- C:\Documents and Settings\Caligone\Application Data\Notepad++
2009-08-16 15:51:42 ----SHD---- C:\FOUND.001
2009-08-16 13:59:18 ----SHD---- C:\Recycled
2009-08-16 12:54:34 ----D---- C:\rsit
2009-08-16 12:44:43 ----A---- C:\ComboFix.txt
2009-08-16 12:15:24 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-08-16 12:12:50 ----A---- C:\WINDOWS\system32\btw_ci.dll
2009-08-16 12:12:31 ----D---- C:\Program Files\WIDCOMM
2009-08-16 08:45:26 ----SHD---- C:\FOUND.000
2009-08-15 18:56:56 ----A---- C:\WINDOWS\WPE PRO.INI
2009-08-15 16:55:31 ----A---- C:\WINDOWS\system32\hprfqe.txt
2009-08-15 09:17:53 ----A---- C:\WINDOWS\zip.exe
2009-08-15 09:17:53 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-08-15 09:17:53 ----A---- C:\WINDOWS\SWSC.exe
2009-08-15 09:17:53 ----A---- C:\WINDOWS\SWREG.exe
2009-08-15 09:17:53 ----A---- C:\WINDOWS\sed.exe
2009-08-15 09:17:53 ----A---- C:\WINDOWS\NIRCMD.exe
2009-08-15 09:17:53 ----A---- C:\WINDOWS\grep.exe
2009-08-15 09:17:48 ----D---- C:\WINDOWS\ERDNT
2009-08-15 09:17:44 ----D---- C:\Qoobox
2009-08-15 09:07:19 ----D---- C:\WINDOWS\pss
2009-08-14 16:39:43 ----HD---- C:\WINDOWS\$NtUninstallKB968389$
2009-08-13 14:10:42 ----A---- C:\WINDOWS\ntbtlog.txt
2009-08-13 11:04:43 ----HD---- C:\WINDOWS\$NtUninstallKB960859$
2009-08-13 11:04:37 ----HD---- C:\WINDOWS\$NtUninstallKB971657$
2009-08-13 11:04:32 ----HD---- C:\WINDOWS\$NtUninstallKB971557$
2009-08-13 11:04:26 ----HD---- C:\WINDOWS\$NtUninstallKB956744$
2009-08-13 11:04:21 ----HD---- C:\WINDOWS\$NtUninstallKB973869$
2009-08-13 11:04:16 ----HD---- C:\WINDOWS\$NtUninstallKB973507$
2009-08-13 11:04:10 ----HD---- C:\WINDOWS\$NtUninstallKB973354$
2009-08-13 11:03:59 ----HD---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-08-13 11:03:51 ----A---- C:\WINDOWS\system32\MRT.INI
2009-08-13 11:02:23 ----HD---- C:\WINDOWS\$NtUninstallKB973815$
2009-08-13 09:17:04 ----D---- C:\SDFix
2009-08-12 21:23:31 ----D---- C:\Documents and Settings\Caligone\Application Data\Malwarebytes
2009-08-12 21:23:10 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-08-12 21:23:09 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-08-12 19:58:43 ----D---- C:\Program Files\ioIsland
2009-08-12 19:18:24 ----D---- C:\PunkBuster
2009-08-12 19:00:29 ----D---- C:\Documents and Settings\Caligone\Application Data\Mozilla
2009-08-12 19:00:10 ----D---- C:\Program Files\Mozilla Firefox
2009-08-12 11:38:29 ----A---- C:\WINDOWS\iun6002.exe
2009-08-12 11:23:43 ----A---- C:\WINDOWS\DesertCombat Setup Log.txt
2009-08-11 17:23:37 ----A---- C:\WINDOWS\mta.ini
2009-08-11 17:12:26 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-08-11 17:12:19 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-08-11 17:12:19 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-08-11 14:37:15 ----D---- C:\Documents and Settings\Caligone\Application Data\Xfire
2009-08-11 14:37:09 ----D---- C:\Program Files\Xfire
2009-08-10 18:12:22 ----HD---- C:\WINDOWS\$NtUninstallKB939683$
2009-08-10 13:41:07 ----D---- C:\Documents and Settings\Caligone\Application Data\teamspeak2
2009-08-10 13:40:54 ----D---- C:\Program Files\Teamspeak2_RC2
2009-08-09 10:59:51 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-08-09 10:57:51 ----D---- C:\WINDOWS\system32\NtmsData
2009-08-09 10:39:19 ----HD---- C:\WINDOWS\$NtUninstallKB961503$
2009-08-09 10:37:55 ----HD---- C:\WINDOWS\$NtUninstallKB961118$
2009-08-09 10:37:32 ----HD---- C:\WINDOWS\$NtUninstallKB941569$
2009-08-09 10:37:17 ----HD---- C:\WINDOWS\$NtUninstallKB963093$
2009-08-09 10:37:03 ----HD---- C:\WINDOWS\$NtUninstallKB929399$
2009-08-09 10:36:32 ----HD---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-08-09 10:34:55 ----HD---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-08-09 10:34:43 ----HD---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-08-09 09:19:57 ----A---- C:\WINDOWS\system32\muweb.dll
2009-08-09 09:19:57 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-08-09 09:19:56 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-08-08 17:46:15 ----RSH---- C:\WINDOWS\system32\nbDX.dll
2009-08-08 17:46:15 ----RSH---- C:\WINDOWS\system32\msfDX.dll
2009-08-08 17:46:14 ----RSH---- C:\WINDOWS\system32\flvDX.dll
2009-08-08 17:46:02 ----D---- C:\Program Files\eRightSoft
2009-08-08 15:31:41 ----D---- C:\Documents and Settings\Caligone\Application Data\Adobe
2009-08-08 13:48:40 ----D---- C:\Program Files\IZArc
2009-08-05 18:47:32 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-08-05 18:40:08 ----N---- C:\WINDOWS\system32\ov530usd.dll
2009-08-05 18:40:08 ----N---- C:\WINDOWS\system32\ov530ext.dll
2009-08-05 18:40:08 ----N---- C:\WINDOWS\ov530dib.dll
2009-08-05 18:40:08 ----D---- C:\WINDOWS\OvtCam
2009-08-04 20:33:11 ----D---- C:\Documents and Settings\Caligone\Application Data\Apple Computer
2009-08-04 20:32:49 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-08-04 20:32:25 ----D---- C:\Program Files\iPod
2009-08-04 20:32:20 ----D---- C:\Program Files\iTunes
2009-08-04 20:32:20 ----D---- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-08-04 20:32:04 ----D---- C:\Program Files\Bonjour
2009-08-04 20:31:27 ----D---- C:\Program Files\QuickTime
2009-08-04 20:31:26 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-08-04 20:31:06 ----D---- C:\Program Files\Apple Software Update
2009-08-04 20:30:58 ----D---- C:\WINDOWS\system32\DRVSTORE
2009-08-04 20:30:40 ----D---- C:\Program Files\Fichiers communs\Apple
2009-08-04 20:30:40 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-08-04 20:22:44 ----D---- C:\Program Files\Messenger Plus! Live
2009-08-04 20:16:15 ----D---- C:\WINDOWS\system32\XPSViewer
2009-08-04 20:16:10 ----D---- C:\Program Files\MSBuild
2009-08-04 20:16:07 ----D---- C:\WINDOWS\system32\en-US
2009-08-04 20:16:00 ----D---- C:\Program Files\Reference Assemblies
2009-08-04 20:15:28 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-08-04 20:15:28 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-08-04 20:15:28 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-08-04 20:15:27 ----D---- C:\cf65f597773f3b45d06320727ff57b5d
2009-08-04 20:10:42 ----HD---- C:\WINDOWS\$NtUninstallbasecsp$
2009-08-04 20:10:40 ----D---- C:\Program Files\Microsoft
2009-08-04 20:10:09 ----D---- C:\Program Files\Windows Live SkyDrive
2009-08-04 20:09:19 ----D---- C:\Program Files\Windows Live
2009-08-04 20:09:13 ----D---- C:\WINDOWS\system32\GroupPolicy
2009-08-04 20:09:13 ----D---- C:\Program Files\Windows Desktop Search
2009-08-04 20:08:39 ----HD---- C:\WINDOWS\$NtUninstallKB915800-v4$
2009-08-04 20:08:11 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-04 20:08:10 ----HD---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-08-04 20:07:45 ----D---- C:\Program Files\Windows Media Connect 2
2009-08-04 20:07:29 ----HD---- C:\WINDOWS\$NtUninstallwmp11$
2009-08-04 20:06:13 ----HD---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-08-04 20:05:41 ----D---- C:\WINDOWS\system32\LogFiles
2009-08-04 20:05:35 ----HD---- C:\WINDOWS\$NtUninstallWudf01000$
2009-08-04 20:02:53 ----D---- C:\Program Files\VideoLAN
2009-08-04 20:01:43 ----RSD---- C:\WINDOWS\assembly
2009-08-04 20:01:43 ----D---- C:\WINDOWS\Microsoft.NET
2009-08-04 20:01:41 ----D---- C:\WINDOWS\system32\URTTemp
2009-08-04 20:01:03 ----D---- C:\Program Files\CCleaner
2009-08-04 20:00:28 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-08-04 19:33:11 ----HD---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-04 19:33:03 ----HD---- C:\WINDOWS\$NtUninstallKB973346$
2009-08-04 19:32:09 ----HD---- C:\WINDOWS\$NtUninstallKB961371$
2009-08-04 19:32:04 ----HD---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-04 19:31:59 ----HD---- C:\WINDOWS\$NtUninstallKB970238$
2009-08-04 19:31:53 ----HD---- C:\WINDOWS\$NtUninstallKB968537$
2009-08-04 19:31:49 ----HD---- C:\WINDOWS\$NtUninstallKB961501$
2009-08-04 19:31:10 ----D---- C:\WINDOWS\ie8updates
2009-08-04 19:30:54 ----D---- C:\WINDOWS\WBEM
2009-08-04 19:29:57 ----HD---- C:\WINDOWS\ie8
2009-08-04 19:29:05 ----A---- C:\WINDOWS\system32\MRT.exe
2009-08-04 19:26:43 ----D---- C:\Program Files\MSXML 4.0
2009-08-04 19:26:21 ----HD---- C:\WINDOWS\$NtUninstallKB959426$
2009-08-04 19:26:14 ----HD---- C:\WINDOWS\$NtUninstallKB960803$
2009-08-04 19:26:06 ----HD---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-04 19:25:48 ----HD---- C:\WINDOWS\$NtUninstallKB956572$
2009-08-04 19:25:40 ----HD---- C:\WINDOWS\$NtUninstallKB923561$
2009-08-04 19:25:29 ----HD---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-04 19:25:23 ----HD---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-08-04 19:25:17 ----HD---- C:\WINDOWS\$NtUninstallKB960225$
2009-08-04 19:25:09 ----HD---- C:\WINDOWS\$NtUninstallKB958687$
2009-08-04 19:25:04 ----HD---- C:\WINDOWS\$NtUninstallKB956803$
2009-08-04 19:24:59 ----HD---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-04 19:24:55 ----HD---- C:\WINDOWS\$NtUninstallKB955839$
2009-08-04 19:24:49 ----HD---- C:\WINDOWS\$NtUninstallKB956802$
2009-08-04 19:24:45 ----HD---- C:\WINDOWS\$NtUninstallKB954600$
2009-08-04 19:24:40 ----HD---- C:\WINDOWS\$NtUninstallKB957097$
2009-08-04 19:24:35 ----HD---- C:\WINDOWS\$NtUninstallKB954459$
2009-08-04 19:24:30 ----HD---- C:\WINDOWS\$NtUninstallKB955069$
2009-08-04 19:24:25 ----HD---- C:\WINDOWS\$NtUninstallKB958644$
2009-08-04 19:24:20 ----HD---- C:\WINDOWS\$NtUninstallKB952287$
2009-08-04 19:24:16 ----HD---- C:\WINDOWS\$NtUninstallKB950974$
2009-08-04 19:24:12 ----HD---- C:\WINDOWS\$NtUninstallKB952954$
2009-08-04 19:24:07 ----HD---- C:\WINDOWS\$NtUninstallKB946648$
2009-08-04 19:24:02 ----HD---- C:\WINDOWS\$NtUninstallKB951066$
2009-08-04 19:23:57 ----HD---- C:\WINDOWS\$NtUninstallKB951748$
2009-08-04 19:23:50 ----HD---- C:\WINDOWS\$NtUninstallKB951978$
2009-08-04 19:23:46 ----HD---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-08-04 19:23:39 ----HD---- C:\WINDOWS\$NtUninstallKB950762$
2009-08-04 19:14:46 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-08-04 19:13:10 ----D---- C:\WINDOWS\system32\PreInstall
2009-08-04 19:13:07 ----HD---- C:\WINDOWS\$NtUninstallKB898461$
2009-08-04 19:07:41 ----A---- C:\WINDOWS\system32\wups2.dll
2009-08-04 19:07:41 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2009-08-04 19:07:41 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2009-08-04 19:07:40 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-08-04 19:07:40 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2009-08-04 19:04:15 ----D---- C:\WINDOWS\Prefetch
2009-08-04 18:50:20 ----N---- C:\WINDOWS\system32\msxml6r.dll
2009-08-04 18:50:20 ----A---- C:\WINDOWS\system32\msxml6.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\azroles.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ati3duag.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2009-08-04 18:50:07 ----N---- C:\WINDOWS\system32\aaclient.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eapsvc.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eapqec.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eappprxy.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eapphost.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eappgnui.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eappcfg.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\eapolqec.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3ui.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3svc.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3msm.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dot3api.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dimsroam.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2009-08-04 18:50:06 ----N---- C:\WINDOWS\system32\credssp.dll
2009-08-04 18:50:05 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2009-08-04 18:50:05 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\mmcperf.exe
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\mmcex.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\kmsvc.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\kbdpash.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2009-08-04 18:50:04 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\onex.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\napstat.exe
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\napmontr.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\napipsec.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2009-08-04 18:50:03 ----N---- C:\WINDOWS\system32\mssha.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\slserv.exe
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\slrundll.exe
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\slgen.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\slextspk.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\slcoinst.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\setupn.exe
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\s3gnb.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\rasqec.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\qutil.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\qcliprov.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\qagentrt.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\qagent.dll
2009-08-04 18:50:02 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2009-08-04 18:50:01 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2009-08-04 18:50:01 ----N---- C:\WINDOWS\system32\verclsid.exe
2009-08-04 18:50:01 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-08-04 18:50:01 ----N---- C:\WINDOWS\system32\tspkg.dll
2009-08-04 18:50:01 ----N---- C:\WINDOWS\system32\tsgqec.dll
2009-08-04 18:50:00 ----N---- C:\WINDOWS\system32\wmphoto.dll
2009-08-04 18:50:00 ----N---- C:\WINDOWS\system32\wlanapi.dll
2009-08-04 18:50:00 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2009-08-04 18:49:59 ----A---- C:\WINDOWS\system32\xmllite.dll
2009-08-04 18:49:58 ----N---- C:\WINDOWS\slrundll.exe
2009-08-04 18:49:58 ----D---- C:\WINDOWS\system32\fr-fr
2009-08-04 18:49:58 ----D---- C:\WINDOWS\l2schemas
2009-08-04 18:49:57 ----D---- C:\WINDOWS\system32\fr
2009-08-04 18:49:57 ----D---- C:\WINDOWS\system32\bits
2009-08-04 18:48:20 ----D---- C:\WINDOWS\ServicePackFiles
2009-08-04 18:46:33 ----D---- C:\WINDOWS\network diagnostic
2009-08-04 18:45:05 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-08-04 18:41:50 ----HD---- C:\WINDOWS\$NtServicePackUninstall$
2009-08-04 18:41:39 ----D---- C:\WINDOWS\EHome
2009-08-04 18:31:04 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-08-04 18:31:01 ----D---- C:\Program Files\Alwil Software
2009-08-04 18:23:58 ----D---- C:\Documents and Settings\Caligone\Application Data\Macromedia
2009-08-04 18:20:21 ----HD---- C:\WINDOWS\$NtUninstallKB912945$
2009-08-04 18:20:20 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-04 18:18:19 ----A---- C:\WINDOWS\system32\Uninstall_eRecovery.exe
2009-08-04 18:17:52 ----D---- C:\Program Files\Launch Manager
2009-08-04 18:17:51 ----A---- C:\WINDOWS\UNINST32.EXE
2009-08-04 18:17:51 ----A---- C:\WINDOWS\system32\QtBtLib.dll
2009-08-04 18:17:23 ----ASH---- C:\Documents and Settings\Caligone\Application Data\desktop.ini
2009-08-04 18:17:21 ----SD---- C:\Documents and Settings\Caligone\Application Data\Microsoft
2009-08-04 18:17:21 ----D---- C:\Documents and Settings\Caligone\Application Data\Identities
2009-08-04 18:16:21 ----SHD---- C:\System Volume Information
2009-08-04 18:12:33 ----A---- C:\WINDOWS\KB912945.EXE
2009-08-04 18:12:33 ----A---- C:\WINDOWS\AExec.exe
2009-08-04 18:12:32 ----A---- C:\WINDOWS\AntiV.INI
2009-07-24 03:58:12 ----A---- C:\WINDOWS\system32\xfcodec.dll
2009-06-26 18:50:29 ----N---- C:\WINDOWS\system32\ieencode.dll

======List of files/folders modified in the last 2 months======

2009-08-19 08:07:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-19 08:02:34 ----A---- C:\WINDOWS\ModemLog_SoftV90 Data Fax Modem with SmartCP.txt
2009-08-18 22:11:38 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-16 12:42:58 ----A---- C:\WINDOWS\system.ini
2009-08-13 11:04:48 ----A---- C:\WINDOWS\imsins.BAK
2009-08-05 11:00:38 ----A---- C:\WINDOWS\system32\mswebdvd.dll
2009-08-04 20:07:56 ----A---- C:\WINDOWS\win.ini
2009-08-04 19:05:26 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-04 19:04:48 ----A---- C:\WINDOWS\setuplog.txt
2009-08-04 18:20:46 ----A---- C:\WINDOWS\ALaunch.ini
2009-08-04 18:16:20 ----RASH---- C:\boot.ini
2009-08-04 18:12:36 ----A---- C:\WINDOWS\HotFix.bat
2009-08-04 18:12:34 ----A---- C:\WINDOWS\CLEANUP.CMD
2009-07-19 18:45:00 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-07-19 15:15:02 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-07-18 18:03:50 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-07-17 21:03:34 ----A---- C:\WINDOWS\system32\atl.dll
2009-07-13 23:43:24 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2009-07-13 23:43:24 ----A---- C:\WINDOWS\system32\wmp.dll
2009-07-03 18:57:52 ----N---- C:\WINDOWS\system32\occache.dll
2009-07-03 18:57:52 ----A---- C:\WINDOWS\system32\wininet.dll
2009-07-03 18:57:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-07-03 18:57:46 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\msfeeds.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-07-03 18:57:44 ----A---- C:\WINDOWS\system32\iepeers.dll
2009-07-03 18:57:42 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2009-07-03 13:01:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2009-06-25 10:26:32 ----A---- C:\WINDOWS\system32\wdigest.dll
2009-06-25 10:26:32 ----A---- C:\WINDOWS\system32\secur32.dll
2009-06-25 10:26:32 ----A---- C:\WINDOWS\system32\schannel.dll
2009-06-25 10:26:32 ----A---- C:\WINDOWS\system32\msv1_0.dll
2009-06-25 10:26:32 ----A---- C:\WINDOWS\system32\lsasrv.dll
2009-06-25 10:26:32 ----A---- C:\WINDOWS\system32\kerberos.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-02-25 13312]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-16 13059]
R2 osaio;osaio; \??\C:\WINDOWS\system32\drivers\osaio.sys []
R2 osanbm;osanbm; \??\C:\WINDOWS\system32\drivers\osanbm.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-02-23 2311680]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2004-12-21 369024]
R3 btaudio;Périphérique audio Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2007-03-23 539072]
R3 btdriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2007-03-23 37424]
R3 btkrnl;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2007-03-31 876384]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2004-12-08 16896]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-12-15 1038208]
R3 HSFHWSIS;HSFHWSIS; C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys [2004-12-15 200576]
R3 KMWDFILTER;HIDUASDesc; C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-08-06 6144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-03-01 240640]
R3 SISNICXP;SiS PCI Fast Ethernet Adapter Driver for NDIS51; C:\WINDOWS\system32\DRIVERS\sisnicxp.sys [2004-11-05 32768]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-07 185824]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-05 26496]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-12-15 703232]
S1 soqwx32;soqwx32; \??\C:\WINDOWS\system32\drivers\soqwx32.sys []
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 btwdndis;Serveur d'accès au réseau local Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2007-03-23 149123]
S3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2007-03-31 55352]
S3 btwusb;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-03-23 67960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 ovt530;Webcam Deluxe; C:\WINDOWS\System32\Drivers\ov530vid.sys [2005-03-15 161792]
S3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-05 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-05 15360]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-05 31616]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 anbmService;Notebook Manager Service; C:\Acer\eManager\anbmServ.exe [2005-06-06 1273344]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2007-04-01 273256]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-08-11 75064]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-13 268800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------"

Nathandre pour C:\WINDOWS\iun6002.exe c'est tool bar qui le supprime

tu verra fait le et il sera supprimé.

J'ai supprimé en mode sans echec :
C:\WINDOWS\iun6002.exe
C:\WINDOWS\AntiV.INI

Mais S1 soqwx32;soqwx32; est introuvable dans msconfig.

Merci

S1 soqwx32;soqwx32; \??\C:\WINDOWS\system32\drivers\soqwx32.sys []
c'est le rootkit que l'anti-virus détecte

Le scan antivirus n'a rien donné et le fichier C:\WINDOWS\system32\drivers\soqwx32.sys est introuvable.
Que faire?
Merci