SaveSoldier, une plaie =(

Bonjour,

télécharge GenProc http://www.genproc.com/GenProc.exe

double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre

Dernier script combofix, comme précédemment :

File::
c:\windows\system32\i5128pxa.exe

Ensuite, relance GenProc et suis ses nouvelles consignes

* Pour terminer, utilise ToolsCleaner! (de A.Rothstein et Dj Quiou) http://pc-system.fr/ pour nettoyer les utilitaires téléchargés,
* Désactive la restauration système, redémarre l'ordinateur, puis réactive-la, en procédant comme indiqué ici http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924

Installe IE8, même si tu ne l'utilises pas https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70

* Lance le nettoyage avec CCleaner régulièrement

* Visite régulièrement le site http://www.update.microsoft.com/windowsupdate/v6/default.aspx afin d'avoir un système toujours actualisé.
* Utilise hebdomadairement ce petit programme http://alt-shift-return.org/Info/Update_Checker.html pour effectuer tes mises à jour logicielles.
* N'installe jamais un programme sans avoir entièrement lu et compris les termes de son contrat d'utilisation, ou sans être définitivement certain qu'il n'installe pas discrètement un logiciel publicitaire (renseigne-toi sur Google ou sur les forums)
* Préfère l'utilisation de logiciels libres https://fr.wikipedia.org/wiki/Logiciel_libre : ils sont transparents et plus sécurisés, à l'inverse des logiciels propriétaires https://fr.wikipedia.org/wiki/Logiciel_propri%C3%A9taire ; Firefox, Thunderbird, OpenOffice, VLC... en font partie.

* A ce moment là, tu pourras marquer ton sujet "résolu" si tu estimes que c'est le cas

* Note importante : il est fortement conseillé d'utiliser un compte limité pour une utilisation classique d'un ordinateur afin de minimiser très siginificativement les risques d'infection.
Mode d'emploi : https://www.microsoft.com/de-ch

à+

Rapport GenProc 2.615 [1] - 22/08/2009 à 18:39:50
@ Windows XP Service Pack 3 - Mode normal
@ Mozilla Firefox (3.0.13) [Navigateur par défaut]

~~ CM DISK ERROR ~~
~~ INTERRUPTION REQUETES COMPTEURMAX ~~

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

Fais scanner le(s) fichier(s) suivant(s) sur ce site https://www.virustotal.com/gui/ :

C:\WINDOWS\12652hackzool495.dll
C:\WINDOWS\14099zroja5.exe
C:\WINDOWS\154989rzj3025.cpl
C:\WINDOWS\19196spamboz125.dll
C:\WINDOWS\192739ac5tzol59b.ocx

et poste le(s) rapport(s) obtenu(s) dans ta prochaine réponse.

~~~~ INFORMATION COMPLEMENTAIRE ~~~~

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:40:19, on 22/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\i5128pxa.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe
C:\Genproc\outil\Florian_GenProc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [i5128pxa.exe] C:\WINDOWS\system32\i5128pxa.exe
O4 - HKCU\..\Run: [SaveSoldier] C:\Program Files\SaveSoldier Software\SaveSoldier\SaveSoldier.exe -min
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

Poste un nouveau rapport GenProc

Rapport GenProc 2.615 [2] - 22/08/2009 à 18:44:57
@ Windows XP Service Pack 3 - Mode normal
@ Mozilla Firefox (3.0.13) [Navigateur par défaut]

~~ CM DISK ERROR ~~
~~ INTERRUPTION REQUETES COMPTEURMAX ~~

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

Fais scanner le(s) fichier(s) suivant(s) sur ce site https://www.virustotal.com/gui/ :

C:\WINDOWS\12652hackzool495.dll
C:\WINDOWS\14099zroja5.exe
C:\WINDOWS\154989rzj3025.cpl
C:\WINDOWS\19196spamboz125.dll
C:\WINDOWS\192739ac5tzol59b.ocx

et poste le(s) rapport(s) obtenu(s) dans ta prochaine réponse.

~~~~ INFORMATION COMPLEMENTAIRE ~~~~

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:45:14, on 22/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\i5128pxa.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Softwin\BitDefender10\bdlite.exe
C:\WINDOWS\system32\cmd.exe
C:\Genproc\outil\Florian_GenProc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [i5128pxa.exe] C:\WINDOWS\system32\i5128pxa.exe
O4 - HKCU\..\Run: [SaveSoldier] C:\Program Files\SaveSoldier Software\SaveSoldier\SaveSoldier.exe -min
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

en effet c'est bizarre, peux tu poster le contenu du fichier C:\GenProc\outil\Exclusions.sed, la fin : juste la partie "Déchets" ?

# Déchets

s/^O2.*(file missing)$//gi;s/^O2[01].*(file missing)$//gi;s/^[OR]3.*(file missing)$//gi;s/^O18.*(file missing)$//gi
/^$/d
s/$/\r/g

s/^.*\\12652hackzool495\.dll//g
s/^.*\\14099zroja5\.exe//g
s/^.*\\154989rzj3025\.cpl//g
s/^.*\\19196spamboz125\.dll//g
s/^.*\\192739ac5tzol59b\.ocx//g

Bien, j'ajoute ça dans mon carnet ;)

scanne quelques uns de ces fichiers sur virustotal comme suggéré, histoire de voir à quel genre de bestiole on a affaire

Je poste quoi au juste ? Parce que là il en a analysé deux ... mais je sais pas quoi poster.

résultat du rapport (liste d'antivirus avec leurs détections)

Si on y arrive pas je fais une restauration systeme au 9 juillet y a écrit " Point de verification systeme " et j'y perdrai pas trop c'était 2 3 jours avant que je parte en vacances ^^

a-squared 4.5.0.24 2009.08.22 -
AhnLab-V3 5.0.0.2 2009.08.21 -
AntiVir 7.9.1.3 2009.08.21 -
Antiy-AVL 2.0.3.7 2009.08.21 -
Authentium 5.1.2.4 2009.08.22 -
Avast 4.8.1335.0 2009.08.21 -
AVG 8.5.0.406 2009.08.22 -
BitDefender 7.2 2009.08.22 -
CAT-QuickHeal 10.00 2009.08.22 -
ClamAV 0.94.1 2009.08.22 -
Comodo 2059 2009.08.22 -
DrWeb 5.0.0.12182 2009.08.22 -
eSafe 7.0.17.0 2009.08.20 -
eTrust-Vet 31.6.6694 2009.08.21 -
F-Prot 4.4.4.56 2009.08.22 -
F-Secure 8.0.14470.0 2009.08.21 -
Fortinet 3.120.0.0 2009.08.22 -
GData 19 2009.08.22 -
Ikarus T3.1.1.68.0 2009.08.22 -
Jiangmin 11.0.800 2009.08.21 -
K7AntiVirus 7.10.825 2009.08.22 -
Kaspersky 7.0.0.125 2009.08.22 -
McAfee 5716 2009.08.21 -
McAfee+Artemis 5716 2009.08.21 -
McAfee-GW-Edition 6.8.5 2009.08.22 -
Microsoft 1.4903 2009.08.22 -
NOD32 4358 2009.08.22 -
Norman 6.01.09 2009.08.21 -
nProtect 2009.1.8.0 2009.08.22 -
Panda 10.0.0.14 2009.08.22 -
PCTools 4.4.2.0 2009.08.22 -
Prevx 3.0 2009.08.22 -
Rising 21.43.50.00 2009.08.22 -
Sophos 4.44.0 2009.08.22 -
Sunbelt 3.2.1858.2 2009.08.22 -
Symantec 1.4.4.12 2009.08.22 -
TheHacker 6.3.4.3.385 2009.08.22 -
TrendMicro 8.950.0.1094 2009.08.22 -
VBA32 3.12.10.9 2009.08.22 -
ViRobot 2009.8.22.1897 2009.08.22 -
VirusBuster 4.6.5.0 2009.08.21 -
Information additionnelle
File size: 2969 bytes
MD5...: aacecd5f208f4a53046c61ef754303df
SHA1..: cce7e29bd999442bc20d789fee127c1575ea7708
SHA256: 11d57c28226d989e99254b18c9dc1b0e9bc5f9c452de9fa42ff9d75acbda25e0
ssdeep: 48:7DnftgguqWRfgqcuWSnfVL+xwCH2W5MLXv6AKXRlrxMskHfkHq6aRZntTz9JK
/QC:ffyNqJ5u5+Ws5e673Moq/DJw9
PEiD..: -
TrID..: File type identification
Unknown!
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set
-
-

Le premier

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.24 2009.08.22 -
AhnLab-V3 5.0.0.2 2009.08.21 -
AntiVir 7.9.1.3 2009.08.21 -
Antiy-AVL 2.0.3.7 2009.08.21 -
Authentium 5.1.2.4 2009.08.22 -
Avast 4.8.1335.0 2009.08.21 -
AVG 8.5.0.406 2009.08.22 -
BitDefender 7.2 2009.08.22 -
CAT-QuickHeal 10.00 2009.08.22 -
ClamAV 0.94.1 2009.08.22 -
Comodo 2059 2009.08.22 -
DrWeb 5.0.0.12182 2009.08.22 -
eSafe 7.0.17.0 2009.08.20 -
eTrust-Vet 31.6.6694 2009.08.21 -
F-Prot 4.4.4.56 2009.08.22 -
F-Secure 8.0.14470.0 2009.08.21 -
Fortinet 3.120.0.0 2009.08.22 -
GData 19 2009.08.22 -
Ikarus T3.1.1.68.0 2009.08.22 -
Jiangmin 11.0.800 2009.08.21 -
K7AntiVirus 7.10.825 2009.08.22 -
Kaspersky 7.0.0.125 2009.08.22 -
McAfee 5716 2009.08.21 -
McAfee+Artemis 5716 2009.08.21 -
McAfee-GW-Edition 6.8.5 2009.08.22 -
Microsoft 1.4903 2009.08.22 -
NOD32 4358 2009.08.22 -
Norman 6.01.09 2009.08.21 -
nProtect 2009.1.8.0 2009.08.22 -
Panda 10.0.0.14 2009.08.22 -
PCTools 4.4.2.0 2009.08.22 -
Prevx 3.0 2009.08.22 -
Rising 21.43.50.00 2009.08.22 -
Sophos 4.44.0 2009.08.22 -
Sunbelt 3.2.1858.2 2009.08.22 -
Symantec 1.4.4.12 2009.08.22 -
TheHacker 6.3.4.3.385 2009.08.22 -
TrendMicro 8.950.0.1094 2009.08.22 -
VBA32 3.12.10.9 2009.08.22 -
ViRobot 2009.8.22.1897 2009.08.22 -
VirusBuster 4.6.5.0 2009.08.21 -
Information additionnelle
File size: 14768 bytes
MD5...: 7f4ea06acef31066ea96d1a25213cc27
SHA1..: 25d875009ae7eac2b667c7449afe4c5969b433a0
SHA256: 143b69fadd90fc314811d910689e44699505d165cb0e53d1ec852a82296261c4
ssdeep: 384:PX1rFSJyjiwo51nWqeDA9lilMUGXNOAfQhyyM:PXZFKwoDnWLkOSOAfQ3M
PEiD..: -
TrID..: File type identification
Unknown!
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set

Le second.

je fais le reste

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.24 2009.08.22 -
AhnLab-V3 5.0.0.2 2009.08.21 -
AntiVir 7.9.1.3 2009.08.21 -
Antiy-AVL 2.0.3.7 2009.08.21 -
Authentium 5.1.2.4 2009.08.22 -
Avast 4.8.1335.0 2009.08.21 -
AVG 8.5.0.406 2009.08.22 -
BitDefender 7.2 2009.08.22 -
CAT-QuickHeal 10.00 2009.08.22 -
ClamAV 0.94.1 2009.08.22 -
Comodo 2059 2009.08.22 -
DrWeb 5.0.0.12182 2009.08.22 -
eSafe 7.0.17.0 2009.08.20 -
eTrust-Vet 31.6.6694 2009.08.21 -
F-Prot 4.4.4.56 2009.08.22 -
F-Secure 8.0.14470.0 2009.08.21 -
Fortinet 3.120.0.0 2009.08.22 -
GData 19 2009.08.22 -
Ikarus T3.1.1.68.0 2009.08.22 -
Jiangmin 11.0.800 2009.08.21 -
K7AntiVirus 7.10.825 2009.08.22 -
Kaspersky 7.0.0.125 2009.08.22 -
McAfee 5716 2009.08.21 -
McAfee+Artemis 5716 2009.08.21 -
McAfee-GW-Edition 6.8.5 2009.08.22 -
Microsoft 1.4903 2009.08.22 -
NOD32 4358 2009.08.22 -
Norman 6.01.09 2009.08.21 -
nProtect 2009.1.8.0 2009.08.22 -
Panda 10.0.0.14 2009.08.22 -
PCTools 4.4.2.0 2009.08.22 -
Prevx 3.0 2009.08.22 -
Rising 21.43.50.00 2009.08.22 -
Sophos 4.44.0 2009.08.22 -
Sunbelt 3.2.1858.2 2009.08.22 -
Symantec 1.4.4.12 2009.08.22 -
TheHacker 6.3.4.3.385 2009.08.22 -
TrendMicro 8.950.0.1094 2009.08.22 -
VBA32 3.12.10.9 2009.08.22 -
ViRobot 2009.8.22.1897 2009.08.22 -
VirusBuster 4.6.5.0 2009.08.21 -
Information additionnelle
File size: 13684 bytes
MD5...: c6f825f3256e3fb4f9d118cdba063fd8
SHA1..: ec68ec778b7a5d4cbb7a5c840ea1ab96f96add8c
SHA256: 7f2baf52186faac23bc6e40ef470f39eafafc7ee70c5f7001eb83bf9de96bd25
ssdeep: 384:bVyUzlpvaeeSO3ZDqxVzyW4xDEpz76hQGMp2:zpCeetZmLzyWL576hVMp2
PEiD..: -
TrID..: File type identification
Unknown!
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set
-

3eme.

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.24 2009.08.22 -
AhnLab-V3 5.0.0.2 2009.08.21 -
AntiVir 7.9.1.3 2009.08.21 -
Antiy-AVL 2.0.3.7 2009.08.21 -
Authentium 5.1.2.4 2009.08.22 -
Avast 4.8.1335.0 2009.08.21 -
AVG 8.5.0.406 2009.08.22 -
BitDefender 7.2 2009.08.22 -
CAT-QuickHeal 10.00 2009.08.22 -
ClamAV 0.94.1 2009.08.22 -
Comodo 2059 2009.08.22 -
DrWeb 5.0.0.12182 2009.08.22 -
eSafe 7.0.17.0 2009.08.20 -
eTrust-Vet 31.6.6694 2009.08.21 -
F-Prot 4.4.4.56 2009.08.22 -
F-Secure 8.0.14470.0 2009.08.21 -
Fortinet 3.120.0.0 2009.08.22 -
GData 19 2009.08.22 -
Ikarus T3.1.1.68.0 2009.08.22 -
Jiangmin 11.0.800 2009.08.21 -
K7AntiVirus 7.10.825 2009.08.22 -
Kaspersky 7.0.0.125 2009.08.22 -
McAfee 5716 2009.08.21 -
McAfee+Artemis 5716 2009.08.21 -
McAfee-GW-Edition 6.8.5 2009.08.22 -
Microsoft 1.4903 2009.08.22 -
NOD32 4358 2009.08.22 -
Norman 6.01.09 2009.08.21 -
nProtect 2009.1.8.0 2009.08.22 -
Panda 10.0.0.14 2009.08.22 -
PCTools 4.4.2.0 2009.08.22 -
Prevx 3.0 2009.08.22 -
Rising 21.43.50.00 2009.08.22 -
Sophos 4.44.0 2009.08.22 -
Sunbelt 3.2.1858.2 2009.08.22 -
Symantec 1.4.4.12 2009.08.22 -
TheHacker 6.3.4.3.385 2009.08.22 -
TrendMicro 8.950.0.1094 2009.08.22 -
VBA32 3.12.10.9 2009.08.22 -
ViRobot 2009.8.22.1897 2009.08.22 -
VirusBuster 4.6.5.0 2009.08.21 -
Information additionnelle
File size: 7169 bytes
MD5...: ec7d3aeecfa90fedfbc37ddcbd4c8707
SHA1..: 237c89a8b562bd03633f647b79c5579c25564019
SHA256: 3ab76016fae4f23bece84c89c0dbb1f00999df95dc76d0039ea73d99ff80d752
ssdeep: 192:mrnD6WlA7Bnaik9yL+USfsnwOciMNYFdl8urEflI6B2dck:mD6ICaiyy+fCM
NuHroFU
PEiD..: -
TrID..: File type identification
Unknown!
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set

4eme.

Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.24 2009.08.22 -
AhnLab-V3 5.0.0.2 2009.08.21 -
AntiVir 7.9.1.3 2009.08.21 -
Antiy-AVL 2.0.3.7 2009.08.21 -
Authentium 5.1.2.4 2009.08.22 -
Avast 4.8.1335.0 2009.08.21 -
AVG 8.5.0.406 2009.08.22 -
BitDefender 7.2 2009.08.22 -
CAT-QuickHeal 10.00 2009.08.22 -
ClamAV 0.94.1 2009.08.22 -
Comodo 2059 2009.08.22 -
DrWeb 5.0.0.12182 2009.08.22 -
eSafe 7.0.17.0 2009.08.20 -
eTrust-Vet 31.6.6694 2009.08.21 -
F-Prot 4.4.4.56 2009.08.22 -
F-Secure 8.0.14470.0 2009.08.21 -
Fortinet 3.120.0.0 2009.08.22 -
GData 19 2009.08.22 -
Ikarus T3.1.1.68.0 2009.08.22 -
Jiangmin 11.0.800 2009.08.21 -
K7AntiVirus 7.10.825 2009.08.22 -
Kaspersky 7.0.0.125 2009.08.22 -
McAfee 5716 2009.08.21 -
McAfee+Artemis 5716 2009.08.21 -
McAfee-GW-Edition 6.8.5 2009.08.22 -
Microsoft 1.4903 2009.08.22 -
NOD32 4358 2009.08.22 -
Norman 6.01.09 2009.08.21 -
nProtect 2009.1.8.0 2009.08.22 -
Panda 10.0.0.14 2009.08.22 -
PCTools 4.4.2.0 2009.08.22 -
Prevx 3.0 2009.08.22 -
Rising 21.43.50.00 2009.08.22 -
Sophos 4.44.0 2009.08.22 -
Sunbelt 3.2.1858.2 2009.08.22 -
Symantec 1.4.4.12 2009.08.22 -
TheHacker 6.3.4.3.385 2009.08.22 -
TrendMicro 8.950.0.1094 2009.08.22 -
VBA32 3.12.10.9 2009.08.22 -
ViRobot 2009.8.22.1897 2009.08.22 -
VirusBuster 4.6.5.0 2009.08.21 -
Information additionnelle
File size: 17445 bytes
MD5...: 05f43063c4d4efe501cd586ed7cfcc67
SHA1..: b1b392606a24f73ed851a183a4057c98592f0a6e
SHA256: 3e3e38cbb77f0c8ca9ffae14124b316d6e464b4e45a14b23fdfcd4e617c0f41d
ssdeep: 384:XearMy3ZST/44NjJQXNyNN4DLwrPJ3wJgHxKW/2fc/I1AUVH+x9NGTDb0:Oa
gyJSU4NjC04DLgR3wKKiIyQg9sb0
PEiD..: -
TrID..: File type identification
Unknown!
PEInfo: -
PDFiD.: -
RDS...: NSRL Reference Data Set

dernier.

Pas beaucoup de resultats non plus ^^

On va déjà essayer qques manips.

Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
Double clique combofix.exe et suis les instructions.
Installe la console de récupération si proposé et continue.
Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Il veut pas s'executer cet abruti.

renomme-le braviax.exe

ComboFix 09-08-21.02 - Florian 22/08/2009 19:22.1.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.3070.2607 [GMT 2:00]
Running from: c:\documents and settings\Florian\Bureau\braviax.exe.exe
AV: Bitdefender Antivirus *On-access scanning enabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Pare-feu *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\10805spaz9ot49a.ocx
c:\windows\10909viru9554z.cpl
c:\windows\109csteal2645z.ocx
c:\windows\1111zdd9are15695.bin
c:\windows\11559y2z1.ocx
c:\windows\12042w95m4b3z.exe
c:\windows\12201zp5mbo912f.dll
c:\windows\12526zot-a-viru9696.exe
c:\windows\1252zviru9212.bin
c:\windows\125baddware17z9.cpl
c:\windows\12652hackzool495.dll
c:\windows\12984szy6259.bin
c:\windows\12984v5ruz73c.ocx
c:\windows\12b8sparse596z.bin
c:\windows\12z9thief3507.bin
c:\windows\13696ha5ktool7dz.exe
c:\windows\13z84not-a-virus559.exe
c:\windows\14099zroja5.exe
c:\windows\1449zw5rmb4.ocx
c:\windows\14942spambzt75f.ocx
c:\windows\1515addw9re3z4.cpl
c:\windows\1524sp9w5re8z5.ocx
c:\windows\154989rzj3025.cpl
c:\windows\1549thief18z8.ocx
c:\windows\15543zroj694.exe
c:\windows\15550hac9tzol1a0.ocx
c:\windows\15592spambot520z.dll
c:\windows\155z2troj798.ocx
c:\windows\156179oz-a-5irus558.ocx
c:\windows\1589thre9t6610z.ocx
c:\windows\1590zhief5773.cpl
c:\windows\1592spz25c.exe
c:\windows\168z3wo9m51f.dll
c:\windows\169zdownload9r2592.cpl
c:\windows\17054ha9ktzol59d.bin
c:\windows\1730hacktoo5494z.dll
c:\windows\17ee5ddware39z.bin
c:\windows\184z4spam5ot339.dll
c:\windows\185z1tro915d.exe
c:\windows\18869a5kdzor3153.ocx
c:\windows\18976wozm5f.exe
c:\windows\19053zirus565.bin
c:\windows\19196spamboz125.dll
c:\windows\191zs9am5ot49c.cpl
c:\windows\192739ac5tzol59b.ocx
c:\windows\19516ha9ktzol453.bin
c:\windows\19523spzmbot9f.dll
c:\windows\19548spambzt329.dll
c:\windows\19752troj56z.ocx
c:\windows\1999vir58z.cpl
c:\windows\1az95ir2286.exe
c:\windows\1c1b5hrezt93999.cpl
c:\windows\1c9athiez1555.cpl
c:\windows\1de5spyw9re1915z.ocx
c:\windows\1e56szarse5916.cpl
c:\windows\1ezcthreat95483.exe
c:\windows\1f6fste951z73.bin
c:\windows\1z238tr9j345.cpl
c:\windows\202ft9rea53189z.bin
c:\windows\204azd5ware9731.exe
c:\windows\206z8sp53099.bin
c:\windows\208149paz5ot72d.ocx
c:\windows\21520not-a9virus55z5.bin
c:\windows\21878spamz9t95.bin
c:\windows\21978spz55d.exe
c:\windows\219z99py5ad.exe
c:\windows\2252vz9351.dll
c:\windows\227zworm395.dll
c:\windows\2284zirus795.cpl
c:\windows\22993spy5z3.bin
c:\windows\230009pazbot735.dll
c:\windows\23449zot-a9vi5us91.ocx
c:\windows\2348spa9s52z64.dll
c:\windows\23523t9ojz1b.dll
c:\windows\23733zp955c.dll
c:\windows\2395downlo9dzr1506.bin
c:\windows\2457z9oj21e.exe
c:\windows\24919za95tool4f6.ocx
c:\windows\24fatz5eat9180.dll
c:\windows\24z79tro5e3.ocx
c:\windows\250319orm2z5.dll
c:\windows\250zspyware29669.dll
c:\windows\25192not-a-vi9zs728.exe
c:\windows\25256zot-9-virus41c.exe
c:\windows\2551spzw9re1125.exe
c:\windows\2551zspa9bot4.exe
c:\windows\2568szeal3296.ocx
c:\windows\257z5ir9151.cpl
c:\windows\2595zddware1095.bin
c:\windows\25z89not-a-v9rus299.ocx
c:\windows\25z8s9yware2061.dll
c:\windows\2651zspy469.bin
c:\windows\269dth5ef255z.dll
c:\windows\27941not-a-virus559z.dll
c:\windows\2816b9ckdoor15z7.dll
c:\windows\28489hack9oo5z21.cpl
c:\windows\2893thze9t156525.bin
c:\windows\28985spa5bot1z.bin
c:\windows\2899spazs59010.dll
c:\windows\28z05ot-a9virus10a.exe
c:\windows\29392wo5m644z.exe
c:\windows\29458not-a-vzrus19f5.bin
c:\windows\29467spambo59zb.ocx
c:\windows\29555spy52z.dll
c:\windows\295daddware2959z.bin
c:\windows\29665ir197z.bin
c:\windows\2978sp5mbzt339.dll
c:\windows\29829sp5z44.dll
c:\windows\2a8athi9z705.dll
c:\windows\2b33vir9z315.ocx
c:\windows\2ce3sparse4z95.exe
c:\windows\2ef7bazkd5or20049.dll
c:\windows\2fb6th5eaz5597.cpl
c:\windows\2z1925ack9ool6b4.cpl
c:\windows\3012wzrm659.ocx
c:\windows\30175hazkto9l4f05.exe
c:\windows\30279hackt5o9253z.dll
c:\windows\3072addwarz90795.ocx
c:\windows\3078z9r5s14c.ocx
c:\windows\30952haz95ool7ab.exe
c:\windows\30f9a59ware2864z.bin
c:\windows\3117ztro5679.ocx
c:\windows\31z8s5y9are1495.ocx
c:\windows\32519viru5392z.bin
c:\windows\32615sp9z5e.ocx
c:\windows\3395thizf756.dll
c:\windows\33zthief1095.cpl
c:\windows\3599zroj594.bin
c:\windows\359z0spy39c.exe
c:\windows\35zdthie91322.bin
c:\windows\3739szars51831.ocx
c:\windows\378czhief14935.ocx
c:\windows\3935noz-a-vi5us17a.ocx
c:\windows\3940vi9uz452.ocx
c:\windows\397675oz-a-virus402.exe
c:\windows\399e5teal1806z.dll
c:\windows\39a2szeal552.bin
c:\windows\3a49thzef1151.exe
c:\windows\3a5at9izf5143.exe
c:\windows\3a75addw9ze1217.dll
c:\windows\3b059hzef240.cpl
c:\windows\3ba5azd9are40.bin
c:\windows\3c64azdw9re5110.cpl
c:\windows\3fa6thzef359.ocx
c:\windows\3z95v5r1506.bin
c:\windows\4009spyware5595z.bin
c:\windows\40145zy2b9.cpl
c:\windows\40dzv9r754.dll
c:\windows\40f9a5dzar9740.exe
c:\windows\42899ownloazer5043.exe
c:\windows\4296vir14z95.cpl
c:\windows\439asz9al18495.cpl
c:\windows\44509hiez5549.exe
c:\windows\450adowzlo5der89.cpl
c:\windows\451aback5oorz296.bin
c:\windows\4599spywarz2522.dll
c:\windows\45cestea9z000.exe
c:\windows\4606z9r51fb.cpl
c:\windows\4758stezl1098.exe
c:\windows\476dth95zt8673.bin
c:\windows\4952zir1845.exe
c:\windows\49ce5dd9are175z.dll
c:\windows\49eeth5ea927z64.ocx
c:\windows\49fzbackdoor5615.cpl
c:\windows\49zdsteal5740.cpl
c:\windows\4a59down5oazer2190.bin
c:\windows\4a93tzi5f3189.bin
c:\windows\4ba5za9se2356.cpl
c:\windows\4d95th9ezt5545.cpl
c:\windows\4z29w5rm4f0.exe
c:\windows\4z92spy559.cpl
c:\windows\4z9fdownload5r2047.ocx
c:\windows\4zebac5door5819.bin
c:\windows\4zf9sp5rse2696.exe
c:\windows\505zad9ware1083.cpl
c:\windows\50b5thz9at20370.ocx
c:\windows\5125hackzool60b9.exe
c:\windows\513bstzal2596.cpl
c:\windows\5203ztroj3ab9.dll
c:\windows\52365szam9ot393.bin
c:\windows\52bcthi9fz15.dll
c:\windows\535dthzeat51579.dll
c:\windows\53azdownload9r2721.bin
c:\windows\53cb5pars93039z.dll
c:\windows\53d79tealz057.cpl
c:\windows\53z0tr9j72c5.cpl
c:\windows\54981virus41az.cpl
c:\windows\5509backdozr7795.cpl
c:\windows\5549zirus2f0.bin
c:\windows\5558zp9mbot91.ocx
c:\windows\5578vzrus5349.cpl
c:\windows\55799rzj1a7.ocx
c:\windows\5594sparze2999.exe
c:\windows\55cfthrea5z32719.ocx
c:\windows\55e1ba9kdoor3z37.bin
c:\windows\55z7st59l3082.dll
c:\windows\56291szambot6a9.bin
c:\windows\5635not-a-viru9433z.dll
c:\windows\56975p92ccz.ocx
c:\windows\56b9vzr2964.ocx
c:\windows\574zdownloade93052.cpl
c:\windows\5750zt9oj5d6.cpl
c:\windows\57c0ste9z1845.cpl
c:\windows\57f9viz954.exe
c:\windows\57zthre9t14236.exe
c:\windows\5811stea930z5.exe
c:\windows\584adoz9loader2665.bin
c:\windows\5859zt9al2295.dll
c:\windows\58ezsparse5309.exe
c:\windows\5905addware2z549.exe
c:\windows\5933thzeat15941.ocx
c:\windows\5952steal2806z.bin
c:\windows\5981bac95ozr1828.bin
c:\windows\59890szy453.bin
c:\windows\59c0vir5z7.exe
c:\windows\59virusz279.ocx
c:\windows\59z11troj589.ocx
c:\windows\59z9spy252.dll
c:\windows\5a32za9kdoor3199.ocx
c:\windows\5ae0szyware1398.dll
c:\windows\5bczaddwa5e8439.ocx
c:\windows\5bfdv9z2301.cpl
c:\windows\5c19steaz746.dll
c:\windows\5c9sp59sz2095.exe
c:\windows\5cf9spazse3193.cpl
c:\windows\5czdaddwar51569.cpl
c:\windows\5d81tzi9f1708.cpl
c:\windows\5e3spyza5e20539.dll
c:\windows\5e72stea92z62.exe
c:\windows\5eezthreat324869.cpl
c:\windows\5faf5tez93163.dll
c:\windows\5z6a9teal2655.bin
c:\windows\5z86s9y65c.ocx
c:\windows\5z86th9ef2524.ocx
c:\windows\5z90st9al22455.ocx
c:\windows\5za6vir9665.exe
c:\windows\5zd6addware9899.exe
c:\windows\60e7s5ealz903.dll
c:\windows\60f7tz5e92005.cpl
c:\windows\61dbszy9are2154.cpl
c:\windows\61z09r5j5aa.bin
c:\windows\6285v9rus3cz.cpl
c:\windows\62c3downloa5e9z12.bin
c:\windows\6395steal16z3.dll
c:\windows\63z69p5ware1797.bin
c:\windows\64ffspa5sz769.bin
c:\windows\6545zac9tool116.exe
c:\windows\65z3download9r5258.bin
c:\windows\664hacktz954aa.dll
c:\windows\673b9ir2645z.exe
c:\windows\67a9backdooz22859.exe
c:\windows\68595parse2636z.dll
c:\windows\6965zh9ef2016.ocx
c:\windows\6c75s5eaz1299.dll
c:\windows\6e9threat54z90.bin
c:\windows\6f5aaddza9e7965.exe
c:\windows\6f95addzar53245.ocx
c:\windows\6fezvir18495.cpl
c:\windows\6z94t5reat3703.exe
c:\windows\7044z5yb9.ocx
c:\windows\7054thr9at46z9.cpl
c:\windows\71d6th5zat99629.dll
c:\windows\71zfs95rse1001.dll
c:\windows\7212th9eatz325.dll
c:\windows\7335threat2z495.ocx
c:\windows\734zthie51719.dll
c:\windows\7389zhreat24285.ocx
c:\windows\7391st95z327.cpl
c:\windows\7452azdwar9315.dll
c:\windows\753z9teal1275.ocx
c:\windows\754ed9wnloadzr5175.exe
c:\windows\7580th9ez648.cpl
c:\windows\763z5pywar92178.dll
c:\windows\7652thzeat29864.dll
c:\windows\7767ste5l182z9.bin
c:\windows\7888s9y5arz3053.cpl
c:\windows\7895trojzd.exe
c:\windows\78a5ddwarz109.exe
c:\windows\794athzeat25551.dll
c:\windows\79abaddwarz1995.dll
c:\windows\79z5ste9l1503.ocx
c:\windows\7a9zd5w9loader1377.cpl
c:\windows\7af9zhreat57722.ocx
c:\windows\7c7c9pywar51z40.exe
c:\windows\7e59pywaze24745.bin
c:\windows\7e80spyw9r5271z.ocx
c:\windows\7e9eaddwzre8695.ocx
c:\windows\7f89backdzor805.cpl
c:\windows\7z925ir782.cpl
c:\windows\7zb3back59or2555.exe
c:\windows\8029vizus354.dll
c:\windows\8216t9oj32z5.cpl
c:\windows\83895zj3e5.exe
c:\windows\858t5i9f11z6.exe
c:\windows\8945not-a-zirus4c8.cpl
c:\windows\8993n5t-a-virusz0d.ocx
c:\windows\8abac5doo916z6.ocx
c:\windows\90138trojz65.cpl
c:\windows\90339zro519b.cpl
c:\windows\903not-azv5rus38a.ocx
c:\windows\90cct5ief3216z.exe
c:\windows\911fthief15z9.bin
c:\windows\91382t5oj583z.dll
c:\windows\913z95irus428.exe
c:\windows\928zthre5t13525.ocx
c:\windows\92azhief569.dll
c:\windows\92dzownloader552.exe
c:\windows\9335downzo5der959.bin
c:\windows\9350not-a5virusz279.ocx
c:\windows\9350spzmbot751.dll
c:\windows\93dz5yware1560.bin
c:\windows\93z425roj4eb.bin
c:\windows\94145tzoj350.exe
c:\windows\95088s5ambot3z7.ocx
c:\windows\9533tzoj15a.bin
c:\windows\95384hacztool390.exe
c:\windows\9546zpyware935.dll
c:\windows\955avirz77.bin
c:\windows\958ad95are252z.cpl
c:\windows\95z73troj4f3.dll
c:\windows\9648sp5mbo9zbf.exe
c:\windows\9683woz5559.exe
c:\windows\974vir2965z.bin
c:\windows\97699o5m15z.exe
c:\windows\98845ir9s5zc.ocx
c:\windows\98z0sparse2551.exe
c:\windows\99297z5oj2c6.dll
c:\windows\9954troz4ac.bin
c:\windows\9957worz35a.dll
c:\windows\99zpars5787.cpl
c:\windows\9czsp5rse2352.exe
c:\windows\9fbbszeal2957.dll
c:\windows\a9zdown59ader2447.bin
c:\windows\b58threzt91551.exe
c:\windows\c5azhief5945.bin
c:\windows\d17sza5se949.dll
c:\windows\Fonts\a.zip
c:\windows\system32\10059worm1zd.cpl
c:\windows\system32\1009vir95z65.ocx
c:\windows\system32\10509troj2z0.dll
c:\windows\system32\1059hrezt50988.bin
c:\windows\system32\1092th5ez1987.cpl
c:\windows\system32\109305iruze1.dll
c:\windows\system32\113429zy59a5.exe
c:\windows\system32\1159zddware2443.ocx
c:\windows\system32\11805hz5ktool968.dll
c:\windows\system32\11973no5-a9vizus3ab.exe
c:\windows\system32\12104nzt-a-viru95f9.dll
c:\windows\system32\12bzthreat30589.cpl
c:\windows\system32\12z61troj951.ocx
c:\windows\system32\130s59warez783.exe
c:\windows\system32\13982sp5mb9t16z.dll
c:\windows\system32\13d5szar9e22555.bin
c:\windows\system32\14205tz9j3d1.ocx
c:\windows\system32\14349wzrm515.bin
c:\windows\system32\14449zpambot66d5.dll
c:\windows\system32\1456spywz9e2101.dll
c:\windows\system32\14757z5ru9670.ocx
c:\windows\system32\14eedownloa5ez2289.dll
c:\windows\system32\1509spywaze91.exe
c:\windows\system32\152179pambot596z.exe
c:\windows\system32\1535hackt9oz4fb.exe
c:\windows\system32\155339pz506.ocx
c:\windows\system32\15594zorm351.cpl
c:\windows\system32\15599nzt-a-virus654.exe
c:\windows\system32\15661t9zj595.ocx
c:\windows\system32\156z1w9rm5d.exe
c:\windows\system32\1593zownloader19645.dll
c:\windows\system32\15z25spambot9d3.bin
c:\windows\system32\16115zpambot4955.exe
c:\windows\system32\1690zt9oj55d.exe
c:\windows\system32\169av5r316z.dll
c:\windows\system32\17442wzr597e.ocx
c:\windows\system32\1815not-azvir9sef.bin
c:\windows\system32\18388wor5z29.cpl
c:\windows\system32\185z65p959f.ocx
c:\windows\system32\18z40s591c2.cpl
c:\windows\system32\19130not-5-zirus757.exe
c:\windows\system32\195485orz531.bin
c:\windows\system32\19z58v9rus109.bin
c:\windows\system32\19z95hacktoo561f.ocx
c:\windows\system32\1a16a9dwar5z744.exe
c:\windows\system32\1a9fthief199z5.dll
c:\windows\system32\1b4dthre9525466z.ocx
c:\windows\system32\1cz9t9ief2564.ocx
c:\windows\system32\1d29zteal31995.ocx
c:\windows\system32\1d709ac5dzor1302.cpl
c:\windows\system32\1d9fspy5are351z.exe
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\drivers\MSIVXltpogrkcxeypapydobvdyibhoygvkkye.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\MSIVXbiqtgenaltikmkvwaqjtoyunowuijtbt.dll
c:\windows\system32\MSIVXcount
c:\windows\system32\MSIVXifmcdtomkhbpnrnomqsqdulynyvxtssv.dll
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
c:\windows\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job
c:\windows\z01479r5j2d5.dll
c:\windows\z054worm695.bin
c:\windows\z1019irus5b1.ocx
c:\windows\z11205py519.bin
c:\windows\z15975irus132.ocx
c:\windows\z2326no59a-virus285.exe
c:\windows\z326s59rse2483.bin
c:\windows\z3613n5t-9-virus11f.bin
c:\windows\z40vi5290.bin
c:\windows\z46cthrea925154.dll
c:\windows\z5862troj509.exe
c:\windows\z6295pambot27b.bin
c:\windows\z6509hief2911.cpl
c:\windows\z6b9ckd5or2517.cpl
c:\windows\z92baddw9re53.dll
c:\windows\z9bbadd9are5183.ocx
c:\windows\zb22s9yware5057.exe
c:\windows\zbc0steal9065.exe
c:\windows\ze89vi51911.exe
c:\windows\zf09vir18315.cpl

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_MSIVXserv.sys
-------\Legacy_MSIVXserv.sys

((((((((((((((((((((((((( Files Created from 2009-07-22 to 2009-08-22 )))))))))))))))))))))))))))))))
.

2009-12-10 22:59 . 2009-12-10 22:59 2771 ----a-w- c:\windows\system32\609no5-a-vir9s7z9.exe
2009-12-09 19:51 . 2009-12-09 19:51 7385 ----a-w- c:\windows\system32\90csparsz1925.dll
2009-12-04 17:38 . 2009-12-04 17:38 15851 ----a-w- c:\windows\system32\65z6vi959.exe
2009-12-02 05:04 . 2009-12-02 05:04 11325 ----a-w- c:\windows\system32\2z35sp932d5.dll
2009-11-27 23:08 . 2009-11-27 23:08 5371 ----a-w- c:\windows\system32\29912spamb5t75fz.dll
2009-11-27 21:33 . 2009-11-27 21:33 9538 ----a-w- c:\windows\system32\55c9azdware35989.dll
2009-11-26 20:18 . 2009-11-26 20:18 8341 ----a-w- c:\windows\system32\20052spambot9zc.dll
2009-11-22 01:40 . 2009-11-22 01:40 13216 ----a-w- c:\windows\system32\32181hacktz9l6d5.dll
2009-11-21 16:29 . 2009-11-21 16:29 16893 ----a-w- c:\windows\system32\55e6thief19z4.bin
2009-11-13 20:56 . 2009-11-13 20:56 10811 ----a-w- c:\windows\system32\7e80downlo9dzr1551.dll
2009-10-27 19:28 . 2009-10-27 19:28 3728 ----a-w- c:\windows\system32\1z6895p9mbot71b.dll
2009-10-21 14:03 . 2009-10-21 14:03 10404 ----a-w- c:\windows\system32\6946sp5waze961.dll
2009-10-20 22:48 . 2009-10-20 22:48 6498 ----a-w- c:\windows\system32\6c95a9zware465.bin
2009-10-17 15:41 . 2009-10-17 15:41 11946 ----a-w- c:\windows\system32\d9z5hreat27973.exe
2009-10-10 19:38 . 2009-10-10 19:38 11834 ----a-w- c:\windows\system32\2z7735ir9s71e.exe
2009-10-07 20:50 . 2009-10-07 20:50 17186 ----a-w- c:\windows\system32\29441hackt9ol5f8z.bin
2009-10-05 05:01 . 2009-10-05 05:01 2721 ----a-w- c:\windows\system32\20125v9rus34z.bin
2009-09-24 21:50 . 2009-09-24 21:50 7202 ----a-w- c:\windows\system32\6583viruz5d59.bin
2009-09-23 02:52 . 2009-09-23 02:52 11381 ----a-w- c:\windows\system32\21513spa95ot2z2.exe
2009-09-22 20:31 . 2009-09-22 20:31 12747 ----a-w- c:\windows\system32\313509ozm99.bin
2009-09-22 02:41 . 2009-09-22 02:41 12665 ----a-w- c:\windows\system32\52a3adzware1059.bin
2009-09-19 04:07 . 2009-09-19 04:07 15029 ----a-w- c:\windows\system32\251asteal2z279.bin
2009-09-17 07:50 . 2009-09-17 07:50 4119 ----a-w- c:\windows\system32\37875ot-a-9irus71cz.dll
2009-09-11 23:05 . 2009-09-11 23:05 8990 ----a-w- c:\windows\system32\28058t9ojz54.exe
2009-09-06 19:37 . 2009-09-06 19:37 13986 ----a-w- c:\windows\system32\3ac25te9l169z.bin
2009-08-28 18:39 . 2009-08-28 18:39 16077 ----a-w- c:\windows\system32\z6b1thief19795.bin
2009-08-22 16:39 . 2009-08-22 16:44 -------- d-----w- C:\Genproc
2009-08-22 15:33 . 2009-08-22 15:33 -------- d-----w- c:\documents and settings\Florian\Application Data\Bitdefender
2009-08-22 15:29 . 2009-08-22 15:29 -------- d-----w- c:\program files\Softwin
2009-08-22 15:27 . 2009-01-18 21:30 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-08-22 15:27 . 2009-08-22 15:39 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-08-22 15:27 . 2009-01-18 21:43 2892112 -c--a-w- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
2009-08-22 15:22 . 2009-08-22 15:22 -------- d-----w- c:\program files\CCleaner
2009-08-22 12:47 . 2009-08-22 16:17 -------- d-----w- c:\documents and settings\Florian\Tracing
2009-08-22 08:24 . 2009-08-22 08:24 -------- d-----w- c:\program files\Microsoft
2009-08-22 08:20 . 2009-08-22 08:20 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-08-21 14:58 . 2009-08-22 08:15 132 ----a-w- c:\windows\system32\rezumatenoi.dat
2009-08-21 14:51 . 2009-08-22 15:23 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-21 14:51 . 2009-08-22 15:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-21 14:50 . 2009-08-22 15:27 -------- d-----w- c:\program files\Lavasoft
2009-08-20 19:07 . 2009-08-20 19:07 0 ----a-w- c:\windows\system32\wsbl.dat
2009-08-20 19:07 . 2009-08-20 19:07 0 ----a-w- c:\windows\system32\ph_white.dat
2009-08-20 19:07 . 2009-08-20 19:07 0 ----a-w- c:\windows\system32\ph_summ.dat
2009-08-20 19:07 . 2009-08-20 19:07 0 ----a-w- c:\windows\system32\ph_black.dat
2009-08-20 14:17 . 2009-08-20 14:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment
2009-08-20 13:37 . 2009-08-20 13:37 4 ----a-w- c:\windows\system32\aspdict-en.dat
2009-08-20 13:37 . 2009-08-20 13:37 16 ----a-w- c:\windows\system32\asdict.dat
2009-08-20 13:37 . 2009-08-20 13:37 0 ----a-w- c:\windows\system32\pcwords.dat
2009-08-20 13:30 . 2009-08-22 15:13 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
2009-08-20 13:12 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-08-12 12:00 . 2009-08-12 12:00 14994 ----a-w- c:\windows\system32\z43t9o57b3.bin
2009-08-10 06:08 . 2009-08-10 06:08 16703 ----a-w- c:\windows\system32\53759ackdooz2528.bin
2009-08-05 09:00 . 2009-08-05 09:00 205312 -c----w- c:\windows\system32\dllcache\mswebdvd.dll
2009-07-29 04:35 . 2009-07-29 04:35 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2009-07-29 04:35 . 2009-07-29 04:35 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2009-07-27 21:21 . 2009-07-27 21:21 4382 ----a-w- c:\windows\system32\z769vi5us665.exe
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-22 17:20 . 2008-10-15 12:22 81984 ----a-w- c:\windows\system32\bdod.bin
2009-08-22 17:20 . 2008-10-15 20:57 -------- d-sh--w- c:\windows\Fonts\'
2009-08-22 16:32 . 2009-03-21 16:17 -------- d-----w- c:\program files\trend micro
2009-08-22 15:29 . 2008-10-15 12:18 -------- d-----w- c:\program files\Fichiers communs\Softwin
2009-08-22 15:27 . 2009-07-11 00:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-08-22 15:13 . 2008-12-11 16:10 -------- d-----w- c:\program files\Fichiers communs\BitDefender
2009-08-22 08:24 . 2008-10-15 12:39 -------- d-----w- c:\program files\Windows Live
2009-08-22 08:18 . 2008-10-15 12:36 -------- d-----w- c:\program files\MSN Messenger
2009-08-20 14:45 . 2008-12-24 11:29 -------- d-----w- c:\program files\World of Warcraft
2009-08-20 13:30 . 2008-12-11 16:11 -------- d-----w- c:\program files\BitDefender
2009-08-05 09:00 . 2008-10-15 11:30 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-29 04:35 . 2001-08-28 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-29 04:35 . 2001-08-28 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-23 11:58 . 2009-07-23 11:58 5240 ----a-w- c:\windows\system32\5d56viz5959.dll
2009-07-20 07:09 . 2009-07-20 07:09 5768 ----a-w- c:\windows\system32\9895spamb5t4z3.dll
2009-07-17 19:03 . 2008-10-25 14:30 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 08:28 . 2009-07-13 08:28 8713 ----a-w- c:\windows\system32\25499zo5m73c.dll
2009-07-12 14:48 . 2009-07-12 14:48 16960 ----a-w- c:\windows\system32\6008tr9j25z.dll
2009-07-12 10:21 . 2008-10-25 14:58 233472 ------w- c:\windows\system32\wmpdxm.dll
2009-07-11 00:53 . 2009-06-30 23:16 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-07-09 06:50 . 2009-07-09 06:50 13753 ----a-w- c:\windows\system32\25595worm728z.exe
2009-07-05 18:09 . 2009-07-05 18:09 12871 ----a-w- c:\windows\system32\4795h5ckzool635.exe
2009-07-03 20:53 . 2009-02-14 23:39 -------- d-----w- c:\program files\DivX
2009-07-01 08:08 . 2009-07-01 08:08 -------- d-----w- c:\documents and settings\Florian\Application Data\Friday's games
2009-06-26 16:50 . 2008-10-25 14:30 670720 ----a-w- c:\windows\system32\wininet.dll
2009-06-26 16:50 . 2008-10-25 14:58 81920 ------w- c:\windows\system32\ieencode.dll
2009-06-25 08:26 . 2008-10-25 14:30 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:26 . 2001-08-28 12:00 736768 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:26 . 2001-08-28 12:00 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:26 . 2001-08-28 12:00 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:26 . 2001-08-28 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-25 08:26 . 2008-10-25 14:30 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-24 11:18 . 2001-08-28 12:00 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-22 01:58 . 2009-06-22 01:58 15218 ----a-w- c:\windows\system32\26939spamb5tz4.bin
2009-06-20 09:22 . 2009-06-20 09:22 15728 ----a-w- c:\windows\system32\994wo5m1bz.exe
2009-06-15 10:44 . 2002-08-29 09:45 78848 ----a-w- c:\windows\system32\telnet.exe
2009-06-15 10:44 . 2008-10-25 14:30 82944 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-13 21:10 . 2009-06-13 21:10 3347 ----a-w- c:\windows\system32\3881z9o5504.dll
2009-06-10 14:14 . 2008-10-25 14:30 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:21 . 2008-10-25 14:30 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:15 . 2001-08-28 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 20:25 . 2009-06-05 20:25 11916 ----a-w- c:\windows\system32\2z547spambot97b.dll
2009-06-03 19:10 . 2008-10-15 11:30 1297408 ----a-w- c:\windows\system32\quartz.dll
2009-05-25 16:04 . 2009-05-25 16:04 17177 ----a-w- c:\windows\system32\4z19spywa5e3249.bin
2009-08-21 08:34 . 2009-08-20 13:32 44544 ----a-w- c:\program files\mozilla firefox\components\FFComm.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"i5128pxa.exe"="c:\windows\system32\i5128pxa.exe" [2009-08-22 396800]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2008-03-24 13524992]
"NvMediaCenter"="c:\windows\System32\NvMcTray.dll" [2008-03-24 86016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-15 136600]
"ISUSPM"="c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-01-18 506712]
"BDMCon"="c:\program files\Softwin\BitDefender10\bdmcon.exe" [2007-04-02 290816]
"BDAgent"="c:\program files\Softwin\BitDefender10\bdagent.exe" [2007-03-26 69632]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-03-24 1626112]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-02-13 16857600]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456]
hpoddt01.exe.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\E:\0autocheck autochk *

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\InterVideo\\DVD8\\WinDVD.exe"=
"c:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"=
"c:\\Program Files\\World of Warcraft\\Launcher.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.0.9.9551-to-3.1.0.9767-frFR-downloader.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-3.2.0.10192-to-3.2.0.10314-frFR-downloader.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [22/08/2009 17:27 64160]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18/01/2009 23:34 921936]
.
Contents of the 'Scheduled Tasks' folder

2009-08-22 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 21:34]

2009-08-21 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8240074929.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 22:52]

2009-08-21 c:\windows\Tasks\WebReg 20090821111624.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqwrg.exe [2003-04-05 23:01]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-SaveSoldier - c:\program files\SaveSoldier Software\SaveSoldier\SaveSoldier.exe
HKLM-Run-GEST - (no file)

.
------- Supplementary Scan -------
.
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Florian\Application Data\Mozilla\Firefox\Profiles\uf3rv23o.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-22 19:27
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2009-08-22 19:27
ComboFix-quarantined-files.txt 2009-08-22 17:27

Pre-Run: 98 925 191 168 octets libres
Post-Run: 99 217 162 240 octets libres

629 --- E O F --- 2009-08-20 17:56

C'pas du scan de chochotte ça xD

J'ai pas trop compris, il fait quoi ce truc ? Car certes j'ai plus de pubs ni de savesoldier pour l'instant, mais j'avais pas non plus d'antivirus ( j'ai du le remettre ) ... Est-ce qu'il a tout desactivé ? Et ce que ça va rester comme ça au prochain démarrage ou alors je vais a nouveau me faire envahir ? =D