Virus - W32/Sality

moi j'ai le mm problème de sality.j'ai telecharger l'utilitaire comme tu l"as demandé,je te poste mes deux rapports.
info.txt logfile of random's system information tool 1.06 2010-01-11 14:38:31

======Uninstall list======

-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
-->C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe /uninstall
-->C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe /uninstall
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 7.0.8 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70800000002}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Altiris Application Metering Agent-->MsiExec.exe /I{4A702DA1-9E48-4346-8030-26B399CCFA8C}
Altiris Carbon Copy Solution Agent -->MsiExec.exe /X{332454D8-73B0-4B4A-954C-D96089CD898A}
Altiris Carbon Copy Solution Agent 6.2-->MsiExec.exe /x {332454D8-73B0-4b4a-954C-D96089CD898A} /qf
Altiris Client Task Agent-->MsiExec.exe /I{A407490A-166A-464A-BB97-457732BDB7BD}
Altiris Power Management Agent-->MsiExec.exe /I{AD85A594-6928-4F8C-A32E-039F3670F31B}
Altiris Script Task Agent-->MsiExec.exe /I{E0AFFA7A-E135-4CA5-9836-297F042D7130}
Altiris Service Control Task Agent-->MsiExec.exe /I{D4BB3396-F72E-4074-9631-D9BBF264F8D9}
Altiris Software Delivery Solution Agent-->MsiExec.exe /X{A0A1EB01-A6FD-423A-8480-364055A7C961}
Altiris Task Synchronization Agent-->MsiExec.exe /X{2851123E-5786-41BE-A3F1-A9B21E499EEB}
Broadcom Gigabit Integrated Controller-->MsiExec.exe /X{A64A5576-D862-44F8-89DC-2B17FCC9B86E}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
e/pop 3.0 Spell Check & Thesaurus-->MsiExec.exe /I{3AF3CB05-EE06-46B0-B209-EE343BBD6A2D}
e/pop Desktop 3.1.3.605-->MsiExec.exe /I{125DAF1E-E671-405C-A4C3-E4E90FEC27FA}
Euroglot 4.5-->MsiExec.exe /I{ECD28038-9F24-4D1F-94A2-DA378597B7D5}
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\DOCUME~1\CI015786\LOCALS~1\Temp\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB896344)-->"C:\WINDOWS\$NtUninstallKB896344$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
HP Install Network Printer Wizard-->MsiExec.exe /X{EFBD6F61-53E8-4F5F-8B30-1BB65BAD3EE6}
iGraal Toolbar for Internet Explorer-->"C:\Program Files\iGraal\uninstall.exe"
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
J2SE Runtime Environment 5.0 Update 9-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
Livelink Imaging 9.5-->MsiExec.exe /I{96538711-469D-4B19-B2F3-F1E49F4A9E0E}
LiveUpdate 3.1 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
Lotus Notes 7.0.2 fr-->MsiExec.exe /I{5406E11A-EB38-486E-8C9D-770B5F34F71D}
Lotus Notes Dictionary-->MsiExec.exe /I{A4C6828B-AA60-4085-8722-654A8ABADA2D}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Base Smart Card Cryptographic Service Provider Package-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office 2003 French User Interface Pack-->MsiExec.exe /I{901E040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office 2003 Proofing Tools-->MsiExec.exe /I{901F0409-6000-11D3-8CFE-0150048383C9}
Microsoft Office Standard Edition 2003-->MsiExec.exe /I{90120409-6000-11D3-8CFE-0150048383C9}
Microsoft redistributable runtime DLLs VS2005 SP1(x86)-->MsiExec.exe /I{8E770F99-CF23-4BF9-BF4E-E3A2924FEB27}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML4.0 redistributable-->MsiExec.exe /I{44D66AD9-AE19-4AFD-BE7E-A1B44C856697}
PDF-XChange Registered Release-->MsiExec.exe /I{CBC5921A-8601-4A76-A003-0770345DA502}
Proxy Host-->MsiExec.exe /I{8B519E5C-409B-4332-9A64-CCF1836A3424}
Proxy Master-->MsiExec.exe /I{0840F8AF-756F-4E60-818F-72A3C94B9063}
SAP Business Explorer-->"C:\Program Files\SAP\SAPsetup\setup\NwSapSetup.exe" /product="SAPBI" /uninstall
SAP GUI 7.10-->"C:\Program Files\SAP\SAPsetup\setup\NwSapSetup.exe" /product="SAPGUI710" /uninstall
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Windows Media Player (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows Media Player 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Security Update for Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Security Update for Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Security Update for Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Security Update for Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Security Update for Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Security Update for Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Security Update for Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Security Update for Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Security Update for Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Security Update for Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Security Update for Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Security Update for Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Security Update for Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Security Update for Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Security Update for Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Security Update for Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Security Update for Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Security Update for Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Security Update for Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Security Update for Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Security Update for Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Security Update for Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Security Update for Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Security Update for Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Security Update for Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Security Update for Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Security Update for Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Security Update for Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Security Update for Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Security Update for Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Security Update for Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Security Update for Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Security Update for Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Security Update for Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Security Update for Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971032)-->"C:\WINDOWS\$NtUninstallKB971032$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974455)-->"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
SnagIt 7-->MsiExec.exe /I{4360BB46-507E-4361-8DCB-4FF9BDC9907B}
SoundMAX-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x9 -removeonly
Symantec AntiVirus-->MsiExec.exe /I{50E125D1-88E5-48CE-80AE-98EC9698E639}
Update for Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB904942)-->"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Update for Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Update for Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Update for Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Update for Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Update for Windows XP (KB920342)-->"C:\WINDOWS\$NtUninstallKB920342$\spuninst\spuninst.exe"
Update for Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Update for Windows XP (KB925876)-->"C:\WINDOWS\$NtUninstallKB925876$\spuninst\spuninst.exe"
Update for Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Update for Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Update for Windows XP (KB933360)-->"C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
Update for Windows XP (KB936357)-->"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Update for Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Hotfix - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Windows XP Hotfix - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Windows XP Hotfix - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Windows XP Hotfix - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Windows XP Hotfix - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Windows XP Hotfix - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Windows XP Hotfix - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Windows XP Hotfix - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
WinZip-->"C:\Progra~1\WinZip\WINZIP32.EXE" /uninstall
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
ZipMail V8 for Lotus Notes-->MsiExec.exe /I{EB3433D0-C17F-4D00-95DF-5BFB9E478DA1}

=====HijackThis Backups=====

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe [2010-01-11]

======Hosts File======

127.0.0.1 www.Merijn.org
127.0.0.1 www.spywareinfo.com
127.0.0.1 www.spybot.info
127.0.0.1 www.hijackthis.de
127.0.0.1 www.majorgeeks.com
127.0.0.1 www.virustotal.com
127.0.0.1 www.avg-antivirus.net
127.0.0.1 www.kaspersky-labs.com
127.0.0.1 www.bleepingcomputer.com
127.0.0.1 www.free.grisoft.com

======Security center information======

AV: Symantec AntiVirus Corporate Edition

======System event log======

Computer Name: CIZ4W286
Event Code: 7036
Message: Le service COM+ System Application est entré dans l'état : running.

Record Number: 5
Source Name: Service Control Manager
Time Written: 20091224084741.000000+000
Event Type: Informations
User:

Computer Name: CIZ4W286
Event Code: 7035
Message: Un contrôle start a correctement été envoyé au service COM+ System Application.

Record Number: 4
Source Name: Service Control Manager
Time Written: 20091224084741.000000+000
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: CIZ4W286
Event Code: 7036
Message: Le service Cryptographic Services est entré dans l'état : running.

Record Number: 3
Source Name: Service Control Manager
Time Written: 20091224084741.000000+000
Event Type: Informations
User:

Computer Name: CIZ4W286
Event Code: 7035
Message: Un contrôle start a correctement été envoyé au service Cryptographic Services.

Record Number: 2
Source Name: Service Control Manager
Time Written: 20091224084741.000000+000
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: CIZ4W286
Event Code: 7005
Message: L'appel LoadUserProfile a échoué avec l'erreur :
Le périphérique n'est pas prêt.


Record Number: 1
Source Name: Service Control Manager
Time Written: 20091224084741.000000+000
Event Type: erreur
User:

=====Application event log=====

Computer Name: CIZ4W286
Event Code: 11707
Message: Product: Altiris Patch Management Agent -- Installation operation completed successfully.

Record Number: 5
Source Name: MsiInstaller
Time Written: 20091224091923.000000+000
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: CIZ4W286
Event Code: 1000
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 4
Source Name: LoadPerf
Time Written: 20091224084949.000000+000
Event Type: Informations
User:

Computer Name: CIZ4W286
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés.
Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système
et les dernières entrées du registre d'aide.

Record Number: 3
Source Name: LoadPerf
Time Written: 20091224084949.000000+000
Event Type: Informations
User:

Computer Name: CIZ4W286
Event Code: 11728
Message: Product: WebFldrs XP -- Configuration completed successfully.

Record Number: 2
Source Name: MsiInstaller
Time Written: 20091224084840.000000+000
Event Type: Informations
User: CIZ4W286\Administrator

Computer Name: CIZ4W286
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 1
Source Name: SecurityCenter
Time Written: 20091224084832.000000+000
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\IXOS\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

Logfile of random's system information tool 1.06 (written by random/random)
Run by CI015786 at 2010-01-11 14:38:28
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 139 GB (91%) free of 153 GB
Total RAM: 2037 MB (65% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\CCleaner.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
HelperObject Class - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll [2005-10-14 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-01-12 63128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll [2006-10-12 434279]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF3C5900-BEC0-470E-AEE8-CE277C60667C}]
iGraal Module - C:\Program Files\iGraal\BHO.dll [2009-10-12 61640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll [2005-10-14 131072]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
{D01B1F7D-9D7F-46C3-8DB9-5A55819E2A7F} - iGraal Toolbar - C:\Program Files\iGraal\Toolbar.dll [2009-10-12 92872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AeXAgentLogon"=C:\Program Files\Altiris\Altiris Agent\AeXAgentActivate.exe [2008-05-12 143360]
"AClntUsr"=C:\Program Files\Altiris\AClient\AClntUsr.EXE [2010-01-11 184320]
"ProxyHostTrayIcon"=C:\Program Files\Funk Software\Proxy Host\phtray.exe [2004-02-17 230544]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2006-11-21 52840]
"vptray"=C:\PROGRA~1\SYMANT~1\VPTray.exe [2007-03-14 125632]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe [2006-10-12 49263]
"CfgDownload"=C:\Program Files\IXOS\bin\CfgDownload.exe [2006-03-10 172032]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-08-01 1036288]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-06-05 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-06-05 162328]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
EPop.lnk - C:\Program Files\WiredRed\EPop\EPop.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" AMINIT.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-06-05 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
C:\WINDOWS\system32\NavLogon.dll [2007-03-14 43712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-04-10 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-01-11 14:38:28 ----D---- C:\rsit
2010-01-11 14:38:28 ----D---- C:\Program Files\trend micro
2010-01-11 14:36:44 ----D---- C:\Documents and Settings\CI015786\Application Data\Mozilla
2010-01-11 14:36:43 ----D---- C:\Program Files\iGraal
2010-01-08 18:20:45 ----D---- C:\Program Files\Hewlett-Packard
2010-01-07 12:27:56 ----D---- C:\Documents and Settings\CI015786\Application Data\Malwarebytes
2010-01-07 12:27:52 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-07 12:27:52 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-01-07 12:16:19 ----D---- C:\Documents and Settings\CI015786\Application Data\Yahoo!
2010-01-07 12:16:19 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2010-01-07 12:16:18 ----D---- C:\Program Files\Yahoo!
2010-01-07 12:16:17 ----D---- C:\Program Files\CCleaner
2010-01-07 10:38:35 ----A---- C:\WINDOWS\VPC32.INI
2010-01-07 10:32:38 ----HD---- C:\WINDOWS\PIF
2010-01-07 09:34:59 ----ASH---- C:\Documents and Settings\CI015786\Application Data\desktop.ini
2010-01-07 09:34:58 ----SD---- C:\Documents and Settings\CI015786\Application Data\Microsoft
2010-01-07 09:34:58 ----D---- C:\Documents and Settings\CI015786\Application Data\Macromedia
2010-01-07 09:34:58 ----D---- C:\Documents and Settings\CI015786\Application Data\Identities
2010-01-07 09:34:58 ----D---- C:\Documents and Settings\CI015786\Application Data\Adobe
2010-01-07 08:56:15 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-01-07 08:46:29 ----D---- C:\WINDOWS\SchCache
2010-01-05 13:44:52 ----A---- C:\WINDOWS\system32\kbdkor.dll
2010-01-05 13:44:52 ----A---- C:\WINDOWS\system32\kbdjpn.dll
2010-01-05 13:44:52 ----A---- C:\WINDOWS\system32\kbd106.dll
2010-01-05 13:44:52 ----A---- C:\WINDOWS\system32\kbd103.dll
2010-01-05 13:44:52 ----A---- C:\WINDOWS\system32\kbd101c.dll
2010-01-05 13:44:50 ----A---- C:\WINDOWS\system32\kbd101b.dll
2010-01-05 13:22:06 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-01-05 08:45:45 ----D---- C:\Program Files\Broadcom
2010-01-05 08:45:04 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-01-05 08:45:03 ----D---- C:\WINDOWS\system32\Lang
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igxpun.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igxprd32.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igxpgd32.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igxpdx32.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igxpdv32.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\iglicd32.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igldev32.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxtray.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxress.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxpph.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxpers.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxext.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxexps.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxdo.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxdev.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxCoIn_v4837.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\hkcmd.exe
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\hccutils.dll
2010-01-05 08:45:03 ----A---- C:\WINDOWS\system32\difxapi.dll
2010-01-05 08:43:54 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-01-05 08:43:51 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-05 08:43:51 ----D---- C:\Program Files\Analog Devices
2010-01-05 08:43:51 ----A---- C:\WINDOWS\system32\DSndUp.exe
2010-01-05 08:43:51 ----A---- C:\WINDOWS\system32\CleanUp.exe
2010-01-05 08:43:39 ----A---- C:\WINDOWS\system32\PostProc.dll
2010-01-05 08:43:38 ----A---- C:\WINDOWS\system32\a3d.dll
2010-01-05 08:42:27 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-01-05 08:42:27 ----D---- C:\Program Files\Intel
2010-01-05 08:42:27 ----A---- C:\WINDOWS\system32\CSVer.dll
2010-01-05 08:42:20 ----D---- C:\Intel
2010-01-05 08:31:44 ----D---- C:\WINDOWS\ServicePackFiles
2010-01-05 08:27:05 ----D---- C:\Program Files\MSXML 4.0
2010-01-05 08:22:15 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2010-01-04 11:09:16 ----D---- C:\Program Files\IXOS
2010-01-04 11:09:08 ----D---- C:\Program Files\Common Files\InstallShield
2010-01-04 11:08:35 ----D---- C:\Program Files\WiredRed
2010-01-04 11:07:28 ----D---- C:\WINDOWS\system32\1036
2010-01-04 11:07:28 ----A---- C:\WINDOWS\system32\WMErrFRA.dll
2010-01-04 11:06:09 ----D---- C:\Program Files\TechSmith
2010-01-04 11:05:59 ----D---- C:\Program Files\WinZip
2010-01-04 11:05:26 ----D---- C:\Program Files\Linguistic Systems
2010-01-04 11:04:49 ----D---- C:\Program Files\Common Files\Adobe
2010-01-04 11:04:47 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-01-04 11:04:43 ----D---- C:\Program Files\Adobe
2010-01-04 11:04:40 ----D---- C:\Program Files\PDF-XChange
2010-01-04 11:04:37 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-04 11:04:37 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-04 11:04:37 ----A---- C:\WINDOWS\system32\java.exe
2010-01-04 11:04:12 ----D---- C:\Program Files\Java
2010-01-04 11:04:10 ----D---- C:\Program Files\Common Files\Java
2010-01-04 11:04:08 ----A---- C:\WINDOWS\notes.ini
2010-01-04 11:03:35 ----D---- C:\lotus
2010-01-04 11:03:27 ----D---- C:\Microsoft
2010-01-04 11:03:26 ----A---- C:\WINDOWS\SAPlogon.ini
2010-01-04 11:02:51 ----A---- C:\WINDOWS\system32\icuuc34.dll
2010-01-04 11:02:51 ----A---- C:\WINDOWS\system32\icuin34.dll
2010-01-04 11:02:51 ----A---- C:\WINDOWS\system32\icu_license.txt
2010-01-04 11:02:50 ----A---- C:\WINDOWS\system32\libsapu16vc80.dll
2010-01-04 11:02:50 ----A---- C:\WINDOWS\system32\librfc32u.dll
2010-01-04 11:02:50 ----A---- C:\WINDOWS\system32\icudt34.dll
2010-01-04 11:02:47 ----A---- C:\WINDOWS\system32\grsapx32.dll
2010-01-04 11:02:47 ----A---- C:\WINDOWS\system32\grfcxl32.dll
2010-01-04 11:02:45 ----A---- C:\WINDOWS\system32\vrfc32.dll
2010-01-04 11:02:45 ----A---- C:\WINDOWS\system32\Vbar332.dll
2010-01-04 11:02:45 ----A---- C:\WINDOWS\system32\Vb5db.dll
2010-01-04 11:02:45 ----A---- C:\WINDOWS\system32\msrepl35.dll
2010-01-04 11:02:45 ----A---- C:\Program Files\Common Files\sapxlhelper.dll
2010-01-04 11:02:45 ----A---- C:\Program Files\Common Files\sapconsr3.dll
2010-01-04 11:02:45 ----A---- C:\Program Files\Common Files\sapconsaccess.dll
2010-01-04 11:02:43 ----A---- C:\WINDOWS\system32\vb40032.dll
2010-01-04 11:02:02 ----D---- C:\Program Files\Common Files\ESRI
2010-01-04 11:02:02 ----A---- C:\WINDOWS\system32\wdba.dll
2010-01-04 11:01:33 ----A---- C:\WINDOWS\system32\h5tool32.dll
2010-01-04 11:01:33 ----A---- C:\WINDOWS\system32\h5rtf32.dll
2010-01-04 11:01:33 ----A---- C:\WINDOWS\system32\h5menu32.dll
2010-01-04 11:01:33 ----A---- C:\WINDOWS\system32\h5krnl32.dll
2010-01-04 11:01:33 ----A---- C:\WINDOWS\system32\h5icon32.dll
2010-01-04 11:01:33 ----A---- C:\WINDOWS\system32\h5dlg32.dll
2010-01-04 11:01:31 ----A---- C:\WINDOWS\system32\SAPbtmp.dll
2010-01-04 11:01:30 ----D---- C:\Program Files\Common Files\SAP Shared
2010-01-04 11:01:30 ----A---- C:\WINDOWS\system32\vtssm32.dll
2010-01-04 11:01:30 ----A---- C:\WINDOWS\system32\vtssdl32.dll
2010-01-04 11:01:30 ----A---- C:\WINDOWS\system32\oc30.dll
2010-01-04 11:01:30 ----A---- C:\WINDOWS\system32\mfcans32.dll
2010-01-04 11:01:29 ----A---- C:\WINDOWS\system32\librfc32.dll
2010-01-04 11:01:12 ----A---- C:\WINDOWS\system32\tlbinf32.dll
2010-01-04 11:01:10 ----D---- C:\Program Files\SAP
2010-01-04 11:01:03 ----A---- C:\WINDOWS\ODBC.INI
2010-01-04 11:00:58 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-01-04 11:00:36 ----D---- C:\Program Files\Common Files\L&H
2010-01-04 11:00:30 ----D---- C:\Program Files\Microsoft ActiveSync
2010-01-04 11:00:27 ----D---- C:\Program Files\Common Files\DESIGNER
2010-01-04 11:00:25 ----D---- C:\Program Files\Microsoft Works
2010-01-04 11:00:21 ----D---- C:\Program Files\Microsoft Visual Studio
2010-01-04 11:00:17 ----D---- C:\WINDOWS\SHELLNEW
2010-01-04 11:00:16 ----D---- C:\Program Files\Microsoft.NET
2010-01-04 11:00:16 ----D---- C:\Program Files\Microsoft Office
2010-01-04 10:19:19 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2010-01-04 10:19:11 ----D---- C:\Program Files\Symantec
2010-01-04 10:19:11 ----A---- C:\WINDOWS\system32\capicom.dll
2010-01-04 10:19:06 ----D---- C:\Program Files\Symantec AntiVirus
2010-01-04 10:19:06 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-01-04 10:19:06 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-12-24 10:25:15 ----A---- C:\WINDOWS\client.INI
2009-12-24 09:51:44 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-12-24 09:46:21 ----A---- C:\WINDOWS\system32\hccoin.dll
2009-12-24 09:46:19 ----A---- C:\WINDOWS\system32\usbui.dll
2009-12-24 08:47:33 ----D---- C:\WINDOWS\system32\Downloaded Installations
2009-12-24 08:47:33 ----D---- C:\Program Files\Funk Software
2009-12-24 08:47:33 ----D---- C:\Program Files\Common Files\Funk Software

======List of files/folders modified in the last 1 months======

2010-01-11 14:38:28 ----RD---- C:\Program Files
2010-01-11 14:38:14 ----D---- C:\WINDOWS\Temp
2010-01-11 14:36:44 ----D---- C:\WINDOWS\Prefetch
2010-01-11 12:01:00 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-11 10:00:09 ----SHD---- C:\WINDOWS\Installer
2010-01-11 09:05:26 ----RSD---- C:\WINDOWS\Fonts
2010-01-11 09:05:26 ----D---- C:\WINDOWS\system32\drivers
2010-01-11 09:05:26 ----D---- C:\WINDOWS\system32
2010-01-11 09:04:37 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-11 07:47:41 ----D---- C:\WINDOWS\security
2010-01-11 07:43:43 ----D---- C:\WINDOWS\Registration
2010-01-11 07:43:40 ----D---- C:\WINDOWS
2010-01-11 07:43:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-08 16:03:27 ----D---- C:\WINDOWS\system32\LogFiles
2010-01-08 16:03:26 ----D---- C:\WINDOWS\Debug
2010-01-08 16:03:16 ----SHD---- C:\RECYCLER
2010-01-08 13:27:39 ----SD---- C:\WINDOWS\Tasks
2010-01-07 10:05:28 ----HD---- C:\WINDOWS\inf
2010-01-07 09:34:57 ----D---- C:\Documents and Settings
2010-01-07 07:42:19 ----D---- C:\WINDOWS\system32\config
2010-01-05 13:44:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-05 13:23:51 ----A---- C:\WINDOWS\system.ini
2010-01-05 10:26:38 ----D---- C:\WINDOWS\system32\wbem
2010-01-05 10:26:38 ----D---- C:\WINDOWS\system32\Setup
2010-01-05 10:26:37 ----D---- C:\WINDOWS\AppPatch
2010-01-05 08:54:06 ----RSD---- C:\WINDOWS\assembly
2010-01-05 08:53:39 ----D---- C:\WINDOWS\Microsoft.NET
2010-01-05 08:46:04 ----D---- C:\Drvs
2010-01-05 08:43:55 ----D---- C:\WINDOWS\system
2010-01-05 08:39:38 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-05 08:37:59 ----D---- C:\WINDOWS\WinSxS
2010-01-05 08:33:32 ----D---- C:\Program Files\Internet Explorer
2010-01-04 11:16:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-04 11:16:18 ----D---- C:\Program Files\Common Files\System
2010-01-04 11:09:08 ----D---- C:\Program Files\Common Files
2010-01-04 11:08:30 ----D---- C:\WINDOWS\mui
2010-01-04 11:08:25 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-04 11:07:32 ----D---- C:\WINDOWS\pchealth
2010-01-04 11:07:32 ----D---- C:\WINDOWS\Help
2010-01-04 11:07:28 ----D---- C:\Program Files\Windows Media Player
2010-01-04 11:07:22 ----RD---- C:\WINDOWS\Web
2010-01-04 11:07:22 ----D---- C:\WINDOWS\system32\oobe
2010-01-04 11:01:07 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-01-04 09:57:10 ----SHD---- C:\WINDOWS\CSC
2009-12-24 11:26:10 ----D---- C:\Program Files\Altiris
2009-12-24 09:45:42 ----D---- C:\WINDOWS\repair
2009-12-24 08:47:39 ----SHD---- C:\System Volume Information
2009-12-24 08:47:39 ----D---- C:\Sysprep
2009-12-24 08:46:46 ----RASH---- C:\boot.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 CCDevice;CCDevice; C:\WINDOWS\system32\drivers\CCDevice.sys [2007-05-29 9216]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]
R1 ProxyHostDriver;Proxy Host Driver; C:\WINDOWS\System32\Drivers\phw2ksys.sys [2004-02-17 61008]
R1 ProxyHostMirrorDisplay;Proxy Host Mirror Display; C:\WINDOWS\System32\Drivers\phmmini.sys [2004-02-17 11472]
R1 SAVRT;SAVRT; \??\C:\Program Files\Symantec AntiVirus\savrt.sys []
R1 SAVRTPEL;SAVRTPEL; \??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys []
R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-08-03 307712]
R3 AlKernel;Altiris Kernel Driver; C:\WINDOWS\System32\Drivers\AlKernel.sys [2010-01-11 2401]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-03-19 175104]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2004-08-12 137728]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-06-05 5761728]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20100110.017\naveng.sys []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20100110.017\navex15.sys []
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080]
S3 PCnet;AMD PCNET Compatable Adapter Driver; C:\WINDOWS\system32\DRIVERS\pcntpci5.sys [2001-08-17 35328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AClient;Altiris Client Service; C:\Program Files\Altiris\AClient\AClient.exe [2006-04-14 5005388]
R2 AeXNSClient;Altiris Agent; C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe [2008-05-12 1523712]
R2 CarbonCopy32;Altiris Carbon Copy; C:\WINDOWS\system32\ccsrvc.exe [2007-05-29 49152]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe [2006-11-21 192104]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe [2006-11-21 169576]
R2 DefWatch;Symantec AntiVirus Definition Watcher; C:\Program Files\Symantec AntiVirus\DefWatch.exe [2007-03-14 31424]
R2 Lotus Notes Single Logon;Ouverture de session unique de Lotus Notes; C:\lotus\notes\nslsvice.exe [2006-09-27 7680]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Multi-user Cleanup Service;Multi-user Cleanup Service; C:\lotus\notes\ntmulti.exe [2006-09-27 53248]
R2 ProxyHostService;Proxy Host Service; C:\Program Files\Funk Software\Proxy Host\ph32svc.exe [2004-02-17 287888]
R2 SavRoam;SAVRoam; C:\Program Files\Symantec AntiVirus\SavRoam.exe [2007-03-14 116416]
R2 SPBBCSvc;Symantec SPBBCSvc; C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe [2007-01-10 1160792]
R2 Symantec AntiVirus;Symantec AntiVirus; C:\Program Files\Symantec AntiVirus\Rtvscan.exe [2007-03-14 1816768]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-09-02 2528960]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]

-----------------EOF-----------------

Rapport de Antivir - oartie 1 (oui, sinon le message ne part pas :x )

Avira AntiVir Personal
Date de création du fichier de rapport : dimanche 30 août 2009 13:52

La recherche porte sur 1669782 souches de virus.

Détenteur de la licence : Avira AntiVir Personal - FREE Antivirus
Numéro de série : 0000149996-ADJIE-0000001
Plateforme : Windows Vista
Version de Windows : (plain) [6.0.6000]
Mode Boot : Démarré normalement
Identifiant : odewit
Nom de l'ordinateur : ODEWIT-VISTA

Informations de version :
BUILD.DAT : 9.0.0.67 Bytes 04/08/2009 14:47:00
AVSCAN.EXE : 9.0.3.7 466689 Bytes 30/08/2009 11:49:57
AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11
LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 24/06/2009 11:49:57
ANTIVIR2.VDF : 7.1.5.146 3087360 Bytes 21/08/2009 11:49:57
ANTIVIR3.VDF : 7.1.5.180 249856 Bytes 30/08/2009 11:49:57
Version du moteur : 8.2.1.7
AEVDF.DLL : 8.1.1.1 106868 Bytes 30/08/2009 11:49:57
AESCRIPT.DLL : 8.1.2.26 463227 Bytes 30/08/2009 11:49:57
AESCN.DLL : 8.1.2.4 127348 Bytes 30/08/2009 11:49:57
AERDL.DLL : 8.1.2.4 430452 Bytes 30/08/2009 11:49:57
AEPACK.DLL : 8.1.3.18 401783 Bytes 30/08/2009 11:49:57
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 30/08/2009 11:49:57
AEHEUR.DLL : 8.1.0.155 1921400 Bytes 30/08/2009 11:49:57
AEHELP.DLL : 8.1.6.0 233846 Bytes 30/08/2009 11:49:57
AEGEN.DLL : 8.1.1.59 356725 Bytes 30/08/2009 11:49:57
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40
AECORE.DLL : 8.1.7.6 184694 Bytes 30/08/2009 11:49:57
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30
AVPREF.DLL : 9.0.0.1 43777 Bytes 03/12/2008 10:39:26
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57
NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 30/08/2009 11:49:57
RCTEXT.DLL : 9.0.37.0 88321 Bytes 15/04/2009 09:07:05

Configuration pour la recherche actuelle :
Nom de la tâche...............................: ShlExt
Fichier de configuration......................: C:\Users\odewit\AppData\Local\Temp\a6104cda.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: F:,
Recherche dans les programmes actifs..........: arrêt
Recherche en cours sur l'enregistrement.......: arrêt
Recherche de Rootkits.........................: arrêt
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Sélection de fichiers intelligente
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: élevé
Catégories de dangers divergentes.............: +APPL,+GAME,+JOKE,+PCK,+SPR,

Début de la recherche : dimanche 30 août 2009 13:52

La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'F:\Berserk'
Recherche débutant dans 'F:\Cassherns Sins'
Recherche débutant dans 'F:\DBZ OAV'
Recherche débutant dans 'F:\DBZ_Sound_pack'
Recherche débutant dans 'F:\Dessins avec elea'
Recherche débutant dans 'F:\Divers_son_DBZ'
Recherche débutant dans 'F:\DMC'
Recherche débutant dans 'F:\Evangelion'
Recherche débutant dans 'F:\Favoris'
Recherche débutant dans 'F:\Fichier Installation Prmeière CS3'
F:\Fichier Installation Prmeière CS3\All_adobe_CS3_Kegens___Activations.zip
[0] Type d'archive: ZIP
--> All adobe CS3 Kegens & Activations/Acrobat 8 Pro Keygen.exe
[RESULTAT] Contient le cheval de Troie TR/Agent.53760.O
--> All adobe CS3 Kegens & Activations/Adobe CS3 Design Premium Keygen.exe
[RESULTAT] Contient le modèle de détection du programme backdoor (dangereux) BDS/Pcclient.578
--> All adobe CS3 Kegens & Activations/Adobe CS3 Master Activation/keygen.exe
[RESULTAT] Contient le modèle de détection du programme backdoor (dangereux) BDS/Gendal.131072.3
--> All adobe CS3 Kegens & Activations/Adobe CS3 Web Premium Keygen.exe
[RESULTAT] Contient le modèle de détection du programme backdoor (dangereux) BDS/Pcclient.581
--> All adobe CS3 Kegens & Activations/After Effects CS3.exe
[RESULTAT] Contient le modèle de détection du programme backdoor (dangereux) BDS/Pcclient.584
--> All adobe CS3 Kegens & Activations/Audition 2.0.exe
[RESULTAT] Contient le cheval de Troie TR/PSWeric5.AFKC
--> All adobe CS3 Kegens & Activations/Dreamweaver CS3 VLK.exe
[RESULTAT] Contient le cheval de Troie TR/Spy.Agent.34816
--> All adobe CS3 Kegens & Activations/Encore DVD 2.0.exe
[RESULTAT] Contient le cheval de Troie TR/PSWeric5.AFKE
--> All adobe CS3 Kegens & Activations/Fireworks CS3 VLK.exe
[RESULTAT] Contient le cheval de Troie TR/Spy.Agent.34816.A
--> All adobe CS3 Kegens & Activations/GoLive CS3 Keygen.exe
[RESULTAT] Contient le cheval de Troie TR/Packed.7703
--> All adobe CS3 Kegens & Activations/InCopy CS3 VLK.exe
[RESULTAT] Contient le cheval de Troie TR/PSWeric5.AFKG
--> All adobe CS3 Kegens & Activations/Photoshop CS3 Activation Keygen.exe
[RESULTAT] Contient le cheval de Troie TR/Smalltroj.ELLI
--> All adobe CS3 Kegens & Activations/SoundBooth CS3.exe
[RESULTAT] Contient le modèle de détection du programme backdoor (dangereux) BDS/Pcclient.580
F:\Fichier Installation Prmeière CS3\Adobe CS3\Setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\After Effects\Adobe CS3\Setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\After Effects\Adobe CS3\redist\WindowsInstaller-KB893803-v2-x86.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\After Effects\Adobe CS3\redist\WindowsServer2003-KB898715-ia64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\After Effects\Adobe CS3\redist\WindowsServer2003-KB898715-x64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\After Effects\Adobe CS3\redist\WindowsServer2003-KB898715-x86-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\After Effects\Adobe CS3\redist\WindowsXP-KB898715-x64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\Photoshop\Adobe CS3\Setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\Photoshop\Adobe CS3\redist\WindowsInstaller-KB893803-v2-x86.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\Photoshop\Adobe CS3\redist\WindowsServer2003-KB898715-ia64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\Photoshop\Adobe CS3\redist\WindowsServer2003-KB898715-x64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\Photoshop\Adobe CS3\redist\WindowsServer2003-KB898715-x86-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\Photoshop\Adobe CS3\redist\WindowsXP-KB898715-x64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\redist\WindowsInstaller-KB893803-v2-x86.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\redist\WindowsServer2003-KB898715-ia64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\redist\WindowsServer2003-KB898715-x64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\redist\WindowsServer2003-KB898715-x86-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Fichier Installation Prmeière CS3\Adobe CS3\redist\WindowsXP-KB898715-x64-enu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\FLCL'
Recherche débutant dans 'F:\Galileo'
Recherche débutant dans 'F:\Gankutsuou'
Recherche débutant dans 'F:\GenArts (program files)'
F:\GenArts (program files)\SapphireAE\install-ae-custom.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\GenArts (program files)\SapphireAE\license-install.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\GenArts (program files)\SapphireAE\UNWISE.EXE
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\IRC'
Recherche débutant dans 'F:\Jeux vidéo'
F:\Jeux vidéo\bgb.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\dayofthe.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\DOSBox0.72-win32-installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\dosshell.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\Atari ST\steemupdate.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\cave-story_cave_story_1.0.0.6_multi-langues_15068\dou_1006\Cave Story Translation Installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\cave-story_cave_story_1.0.0.6_multi-langues_15068\dou_1006\DoConfig.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\cave-story_cave_story_1.0.0.6_multi-langues_15068\dou_1006\Doukutsu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\cave-story_cave_story_1.0.0.6_multi-langues_15068\dou_1006\OrgView Translation Installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\Descent\DESCENT\SETUP.EXE
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\Descent\DESCENT\_ISDEL.EXE
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\dou_1006\DoConfig.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\dou_1006\Doukutsu.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\Goo\TowerOfGooUnlimited.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\h84k050220\YGS2000.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\sumotori102\sumotori.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Jeux vidéo\ttn\ttn.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\Kaiba'
Recherche débutant dans 'F:\Lucky Star'
Recherche débutant dans 'F:\M.U.G.E.N'
F:\M.U.G.E.N\Winmugen.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\M.U.G.E.N\Winmugen_debug.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\M.U.G.E.N\chars\Chibi Trunks\CharSffDtoW.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\M.U.G.E.N\tools\aireditw.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\Ma musique'
Recherche débutant dans 'F:\Manga'
Recherche débutant dans 'F:\Megadrive'
F:\Megadrive\Fusion.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\Mes Historiques de Conversation'
Recherche débutant dans 'F:\Mes images'
Recherche débutant dans 'F:\Mes vidéos'
F:\Mes vidéos\Download_vcsbasic60.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Mes vidéos\sapphire-ae-install-1.07.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Mes vidéos\Xtremsplit.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\Nadia'
Recherche débutant dans 'F:\Neo Geo'
Recherche débutant dans 'F:\Nes'
F:\Nes\nestopia.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\Online Snes'
F:\Online Snes\HamachiSetup-1.0.2.2-fr.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Online Snes\zsnesw.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
Recherche débutant dans 'F:\OST'
Recherche débutant dans 'F:\Pale Cocoon'
Recherche débutant dans 'F:\Phantom -Requiem For The Phantom-'
Recherche débutant dans 'F:\Photo, Vidéos'
Recherche débutant dans 'F:\Photos-Vidéo'
Recherche débutant dans 'F:\Prout'
Recherche débutant dans 'F:\Roms'
Recherche débutant dans 'F:\Snes'
Recherche débutant dans 'F:\SNES 9X'
Recherche débutant dans 'F:\Soul Eater'
Recherche débutant dans 'F:\South park'
Recherche débutant dans 'F:\Tanky'
Recherche débutant dans 'F:\Downloads'
F:\Downloads\Aegisub-1.10.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\atomixmp3.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\auxsetup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\avicodec_avicodec_1.2_build_110_francais_11101.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\BitTorrent-6.1.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\ccsetup210_slim.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\daemon4301-lite.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\dotNetFx35setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\FileZilla_3.0.11_win32-setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\FileZilla_3.1.1.1_win32-setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Firefox Setup 3.0.1.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Firefox Setup 3.0.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\flv-player_flv_player_2.2_anglais_28810.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Google_Earth_CZXV.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\HamachiSetup-1.0.2.2-fr.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\HamachiSetup-1.0.3.0-en.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\IE7-WindowsXP-x86-fra.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\incredimail_install.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Installation_WLMessenger2009.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\install_flash_player_active_x.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\JournalViewer1.5_KB886179_FRA.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\lego factory.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\mkvtoolnix-unicode-2.4.0-setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\MsgPlusLive-450.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\PowerPointViewer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\QuickTimeInstaller.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\SetupDVDDecrypter_3.5.4.0.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\VirtualDubMOD_1.5.10.2_b2540_Fr.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/Rabio.DB
F:\Downloads\VirtualDubMOD_1.5.10.2_b2540_Fr.rar
[0] Type d'archive: RAR
--> VirtualDubMOD_1.5.10.2_b2540_Fr.exe
[RESULTAT] Contient le modèle de détection du logiciel espion ou publicitaire ADSPY/Rabio.DB
F:\Downloads\WormsWorldParty-dm.exe
[RESULTAT] Contient le modèle de détection du programme de jeu GAME/Dldr.TryMedia.Gen
F:\Downloads\Dictaphone\DVE2PATCHA.EXE
[RESULTAT] Contient le code suspect : HEUR/Malware
F:\Downloads\Dictaphone\DVE2_HI-CPU_UPDATER_E.EXE
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Dictaphone\PLAYERPLUGINSETUP129.EXE
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\freezer v1.4 fr\freezer v1.4 fr\freezer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Incredimail Convert\Incredimail Convert.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\lame-3.97\lame.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Manga.Reader-1.0\setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\media-player-classic_media_player_classic_6.4.9.1_beta_xp_.exe_francais_11019\mplayerc.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\mkv tool nix\mkvtoolnix-unicode-2.3.0-setup.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\mkv tool nix\MKVExtractGUI-1.6.4\MKVExtractGUI-1.6.4\MKVextractGUI.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\mkv tool nix\MKVExtractGUI-1.6.4\MKVExtractGUI-1.6.4\mkxuncat.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\msnimagetext(www.MsnTrucAstuce.fr)\MSNIT110.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\(PC) - Heretic Shadow Of The Serpent Riders 1.3\DOOM's Days Eng. 1.8.6.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\(PC) - Heretic Shadow Of The Serpent Riders 1.3\Enhanced Heretic Texture Set (To Use With DOOM's Days).exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\Trapcode 3DStroke v2.04\Trapcode 3DStroke v2.04\3DStroke204Installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\Trapcode Echospace v1.0.1\Trapcode Echospace v1.0.1\echospace101installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\Trapcode Lux v1.01\Trapcode Lux v1.01\Lux101Installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\Trapcode Particular v1.50\Trapcode Particular v1.50\Particular150Installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Nouveau dossier\Trapcode Starglow v1.03\Trapcode Starglow v1.03\Starglow103Installer.exe
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Screen Savers\coxpaint.scr
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Screen Savers\gtlb02.scr
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Screen Savers\gtlb04B.scr
[RESULTAT] Contient le code du virus Windows W32/Sality
F:\Downloads\Screen Savers\mg01.scr
[RESULTAT] Contient le code du virus Windows W32/Sality

Et hop !
Je l'avais pas éxectué en tant qu'administrateur (un réflexe que je prendrais plus souvent)

voici !


############################## | UsbFix V6.023 |

User : odewit (Administrateurs) # ODEWIT-VISTA
Update on 29/08/09 by Chiquitine29, C_XX & Chimay8
Start at: 00:09:02 | 01/09/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

AMD Turion(tm) 64 X2 Mobile Technology TL-50
Microsoft® Windows Vista™ Professionnel (6.0.6000 32-bit) #
Internet Explorer 8.0.6001.18813
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

C:\ -> Disque fixe local # 149,05 Go (94,5 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM
F:\ -> Disque fixe local # 298,09 Go (104,75 Go free) [Wexterne] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\LogonUI.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Pen_Tablet.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Windows\system32\WTablet\Pen_TabletUser.exe
C:\Windows\system32\Pen_Tablet.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\runonce.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## | Fichiers # Dossiers infectieux |

Supprimé ! F:\.\recycled\info.exe
Supprimé ! F:\autorun.inf

################## | Autres |


################## | Suspect ! ... | https://www.virustotal.com/gui/ |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\##odewitMacVista#Dev\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\F\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\G\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{0a34fac2-1f9c-11de-a286-001060d2e988}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{215ac330-2e53-11de-9739-001060d2e988}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{3d501213-ef86-11dd-ab80-001060d2e988}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{4d29f407-f032-11dd-a86d-001060d2e988}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{8044eda7-9555-11de-8e53-001060d2e988}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{9fd1ca2e-35a9-11de-80e8-001060d2e988}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{9fd1ca3c-35a9-11de-80e8-001060d2e988}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[18/09/2006 23:43|--a------|24] -> C:\autoexec.bat
[02/11/2006 11:53|-rahs----|438840] -> C:\bootmgr
[29/01/2009 22:07|-ra-s----|8192] -> C:\BOOTSECT.BAK
[18/09/2006 23:43|--a------|10] -> C:\config.sys
[?|?|?] -> C:\hiberfil.sys
[?|?|?] -> C:\pagefile.sys
[29/01/2009 22:47|--a------|351] -> C:\RHDSetup.log
[01/09/2009 00:14|--a------|3927] -> C:\UsbFix.txt
[21/08/2009 12:24|--a------|99503] -> F:\(???) ??????? ?26?.torrent
[13/02/2009 19:59|--a------|191380] -> F:\2340330319_26b2105bcc.jpg
[11/05/2009 11:45|--a------|471644034] -> F:\Adobe Photoshop CS3 Extended.rar
[11/08/2009 00:00|--a------|294956] -> F:\bite.wav
[17/08/2009 21:43|--a------|177524736] -> F:\Bottle Fairy 01 Fullanimes.free.fr.avi
[21/08/2009 23:41|--a------|174995456] -> F:\Bottle Fairy 02 Fullanimes.free.fr.avi
[17/08/2009 00:01|--a------|180] -> F:\cheesy.gif
[28/08/2009 00:58|--a------|789678] -> F:\Dessins avec elea.rar
[28/04/2009 17:24|--a------|19214874] -> F:\f.e.a.r._combat_patch_v1.08_francais_26743.exe
[18/04/2009 21:35|--a------|1896155930] -> F:\fearcombat_en_107.exe
[15/03/2009 14:27|--a------|15724273] -> F:\IC18-zic.rar
[16/08/2009 21:39|--a------|9454792] -> F:\install_msn_messenger_7_5.exe
[18/02/2009 19:25|--a------|39532] -> F:\moi rc.jpg
[18/02/2009 19:24|--a------|193001] -> F:\moi rc.xcf
[22/08/2009 13:35|--a------|104179376] -> F:\motor action stunt show.avi
[16/08/2009 21:32|--a------|421096] -> F:\msicuu2-155.exe
[18/02/2009 19:01|--a------|92630] -> F:\scary cat.jpg
[21/08/2009 19:32|--a------|17431] -> F:\tangerine.txt
[14/08/2009 23:28|--a------|6651904] -> F:\test berserk.avi
[14/08/2009 23:25|--a------|451329804] -> F:\test bite.avi
[11/08/2009 00:03|--a------|10080256] -> F:\ultraman.avi
[14/08/2009 18:13|--a------|25878] -> F:\Voix-0016.amr
[14/08/2009 18:32|--a------|5704116] -> F:\voix0016.wav
[22/07/2009 12:45|--a------|19750] -> F:\Xcite, ce clown.odt
[21/08/2009 12:23|--a------|14069] -> F:\[EG]Evangelion_OP[79EB3084].mkv.torrent
[22/07/2008 13:00|--a------|161326431] -> F:\[KgK][HD]Gurren_Lagann_11[x264-MP3].mkv
[22/07/2008 13:30|--a------|186017391] -> F:\[KgK][HD]Gurren_Lagann_27v2_FIN[x264-MP3].mkv
[17/08/2009 20:40|--a------|18010] -> F:\[Llumina] Bottle Fairy.torrent

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.023 ! |