Ralentissement PC

Bonjour

1- Télécharge et installe le logiciel HijackThis :

https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

-->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

(Ne lance pas ce prg pour l'instant et fais la suite ... )

2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer.

Clic droit sous VISTA (exécuter en tant que…)

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ...
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

Merci

log.txt l[url=https://www.luanagames.com/index.fr.html]log.txt[/url]

info.txt [url=https://www.luanagames.com/index.fr.html]info.txt[/url]

voila le rapport

ComboFix 09-10-01.05 - windows 03/10/2009 18:50.1.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1535 [GMT 2:00]
Lancé depuis: c:\documents and settings\windows\Bureau\combofix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\windows\Application Data\addons.dat
c:\documents and settings\windows\Application Data\Microsoft\Clip Organizer\mstore10.mgc
c:\documents and settings\windows\Application Data\Microsoft\Clip Organizer\Offic10.MGC
c:\windows\Installer\11230.msi
c:\windows\Installer\16d6fc.msi
c:\windows\Installer\19a579.msi
c:\windows\Installer\1b9edc2.msi
c:\windows\Installer\287a9.msp
c:\windows\Installer\29d44.msp
c:\windows\Installer\29d58.msp
c:\windows\Installer\29d6c.msp
c:\windows\Installer\29d82.msp
c:\windows\Installer\29d97.msp
c:\windows\Installer\2a18d.msp
c:\windows\Installer\61438c.msi
c:\windows\Installer\96086.msp
c:\windows\patch.exe
c:\windows\system32\muzapp.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-03 au 2009-10-03 ))))))))))))))))))))))))))))))))))))
.

2009-10-03 16:15 . 2009-10-03 16:15 -------- d-----w- C:\rsit
2009-10-03 15:45 . 2009-10-03 15:45 -------- d-----w- c:\documents and settings\windows\Application Data\Avira
2009-10-03 08:39 . 2009-10-03 08:39 -------- d-----w- c:\windows\LastGood
2009-09-29 18:17 . 2007-09-27 10:14 1069568 ----a-w- c:\program files\altbinz.exe
2009-09-29 05:37 . 2009-09-29 18:18 -------- d-----w- c:\program files\AltBinz
2009-09-25 13:48 . 2009-10-02 19:54 -------- d-----w- C:\xnews
2009-09-19 18:09 . 2009-09-19 18:09 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2009-09-12 15:08 . 2009-09-12 15:08 -------- d-----w- c:\program files\StreamTorrent 1.0
2009-09-12 15:08 . 2009-09-12 15:08 -------- d-----w- c:\documents and settings\windows\Application Data\StreamTorrent
2009-09-12 13:42 . 2009-09-12 13:42 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-09-12 13:36 . 2009-09-12 14:42 8 ----a-w- c:\windows\system32\nvModes.dat
2009-09-12 09:21 . 2009-09-12 09:21 -------- d-sh--w- c:\documents and settings\windows\IECompatCache
2009-09-10 12:41 . 2008-06-14 17:33 272768 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-09-10 12:40 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-09-10 12:40 . 2009-03-06 14:20 286720 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-09-10 12:40 . 2009-02-09 11:24 2191104 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-10 12:40 . 2009-02-09 11:23 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-09-10 12:40 . 2009-02-09 10:53 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-09-10 12:40 . 2009-02-09 10:53 735744 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-09-10 12:40 . 2009-02-09 10:53 739840 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-09-10 12:40 . 2009-02-09 10:53 685568 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-09-10 12:40 . 2009-02-09 10:53 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-09-10 12:40 . 2009-02-09 10:53 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-09-10 12:40 . 2009-02-09 11:23 2147328 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-10 12:40 . 2009-02-09 11:23 2025984 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-10 12:39 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2009-09-10 12:39 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-09-10 12:39 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-09-10 12:39 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-09-10 12:39 . 2008-04-11 19:05 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2009-09-10 12:38 . 2008-12-16 12:31 354304 -c----w- c:\windows\system32\dllcache\winhttp.dll
2009-09-10 12:38 . 2008-10-15 16:35 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\system32\fr
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\system32\bits
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\l2schemas
2009-09-10 10:33 . 2009-09-10 10:33 -------- d-----w- c:\windows\EHome
2009-09-10 10:20 . 2009-09-10 10:20 -------- d-----w- C:\Classeur
2009-09-10 10:20 . 2009-09-10 10:20 -------- d-----w- C:\Barre personnelle
2009-09-04 15:15 . 2009-09-19 14:37 -------- d-----w- c:\program files\Eidos
2009-09-04 13:47 . 2009-09-04 13:47 -------- d-----w- c:\windows\system32\wbem\Repository
2009-09-03 17:34 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-09-03 17:34 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-09-03 17:34 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-09-03 17:34 . 2009-09-03 17:34 -------- d-----w- c:\program files\Avira

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-03 16:49 . 2009-04-30 12:59 -------- d-----w- c:\documents and settings\windows\Application Data\DMCache
2009-10-03 16:07 . 2009-01-04 09:43 -------- d-----w- c:\program files\CV Expert 3
2009-10-03 16:06 . 2008-06-14 11:58 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-03 15:54 . 2008-08-22 18:05 -------- d-----w- c:\program files\Trend Micro
2009-10-03 15:41 . 2009-07-05 11:42 -------- d-----w- c:\program files\CAPCOM
2009-10-03 15:30 . 2009-08-21 10:11 -------- d-----w- c:\documents and settings\windows\Application Data\vlc
2009-10-03 15:25 . 2009-07-08 18:23 -------- d-----w- c:\program files\Mumble
2009-10-03 14:25 . 2008-08-17 12:15 -------- d-----w- c:\documents and settings\windows\Application Data\dvdcss
2009-10-02 14:22 . 2008-06-27 10:00 -------- d-----w- c:\program files\KONAMI
2009-09-30 05:11 . 2009-03-24 17:22 -------- d-----w- c:\documents and settings\windows\Application Data\mIRC
2009-09-30 04:50 . 2009-06-18 09:31 -------- d-----w- c:\program files\mIRC
2009-09-29 18:51 . 2009-02-14 18:26 -------- d-----w- c:\program files\Windows Live Safety Center
2009-09-29 18:11 . 2008-10-27 14:28 -------- d-----w- c:\documents and settings\windows\Application Data\GrabIt
2009-09-26 19:09 . 2009-01-30 06:22 -------- d-----w- c:\program files\Gabest
2009-09-23 19:47 . 2009-05-15 22:20 2332440 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-09-23 13:19 . 2009-04-30 12:59 -------- d-----w- c:\documents and settings\windows\Application Data\IDM
2009-09-19 18:11 . 2008-12-17 15:19 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-19 18:10 . 2008-01-16 14:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-09-18 14:49 . 2007-12-22 15:37 -------- d-----w- c:\program files\Windows Live
2009-09-18 14:46 . 2008-12-17 15:16 -------- d-----w- c:\program files\Microsoft
2009-09-12 21:16 . 2009-07-11 21:16 -------- d-----w- c:\documents and settings\windows\Application Data\Pro Cycling Manager 2009
2009-09-12 10:07 . 2008-08-22 14:58 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-11 19:57 . 2007-12-22 15:54 72056 ----a-w- c:\documents and settings\windows\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-09-11 19:55 . 2009-07-09 13:47 -------- d-----w- c:\program files\Ubisoft
2009-09-11 08:45 . 2009-07-06 08:29 -------- d-----w- c:\program files\Left 4 Dead
2009-09-11 08:39 . 2009-03-25 12:38 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-09-11 08:38 . 2009-03-25 12:38 -------- d-----w- c:\program files\AGEIA Technologies
2009-09-11 08:25 . 2006-03-02 12:00 85834 ----a-w- c:\windows\system32\perfc00C.dat
2009-09-11 08:25 . 2006-03-02 12:00 512628 ----a-w- c:\windows\system32\perfh00C.dat
2009-09-10 12:54 . 2008-08-22 14:58 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2008-08-22 14:58 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-10 10:26 . 2009-07-28 12:56 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-04 15:15 . 2007-12-01 15:49 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-03 19:55 . 2009-08-05 11:12 -------- d-----w- c:\documents and settings\windows\Application Data\uTorrent
2009-09-03 17:38 . 2009-05-09 07:35 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-09-03 17:34 . 2008-08-31 15:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-08-29 11:26 . 2009-02-10 08:42 -------- d-----w- c:\program files\Xfire
2009-08-29 11:12 . 2007-12-01 15:49 -------- d-----w- c:\program files\Realtek
2009-08-29 09:43 . 2009-08-29 09:43 -------- d-----w- c:\program files\Driver-Soft
2009-08-28 09:51 . 2009-02-10 08:42 -------- d-----w- c:\documents and settings\windows\Application Data\Xfire
2009-08-26 15:42 . 2009-08-26 15:42 -------- d-----w- c:\program files\NVIDIA Corporation
2009-08-26 15:32 . 2008-06-10 15:52 -------- d-----w- c:\program files\SystemRequirementsLab
2009-08-26 15:28 . 2008-06-10 15:52 -------- d-----w- c:\documents and settings\windows\Application Data\SystemRequirementsLab
2009-08-26 09:10 . 2007-12-23 09:05 -------- d-----w- c:\program files\Java
2009-08-24 15:29 . 2009-06-16 15:16 -------- d-----w- c:\documents and settings\windows\Application Data\Hamachi
2009-08-24 09:48 . 2008-06-14 11:58 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-23 09:32 . 2009-08-23 09:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Skyline
2009-08-23 09:32 . 2009-08-23 09:32 -------- d-----w- c:\program files\Skyline
2009-08-23 09:12 . 2009-08-23 09:12 -------- d-----w- c:\documents and settings\All Users\Application Data\3DVIA
2009-08-23 09:12 . 2009-08-23 09:12 -------- d-----w- c:\program files\Virtools
2009-08-22 07:22 . 2007-12-27 14:40 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-08-21 13:11 . 2008-10-10 17:51 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-08-21 13:11 . 2008-10-10 17:51 139152 ----a-w- c:\documents and settings\windows\Application Data\PnkBstrK.sys
2009-08-21 13:10 . 2008-10-10 17:51 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-08-21 13:10 . 2008-10-29 09:50 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-08-21 13:10 . 2008-10-10 17:51 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-08-21 12:43 . 2009-03-25 13:05 -------- d-----w- c:\program files\DAEMON Tools Pro
2009-08-21 08:31 . 2008-12-12 15:51 -------- d-----w- c:\program files\UseNeXT
2009-08-21 08:28 . 2009-04-30 12:59 -------- d-----w- c:\program files\Internet Download Manager
2009-08-19 11:47 . 2008-10-08 20:00 -------- d-----w- c:\program files\Activision
2009-08-18 20:50 . 2008-12-12 15:51 -------- d-----w- c:\documents and settings\windows\Application Data\UseNeXT
2009-08-17 01:03 . 2009-08-17 01:03 3674112 ----a-w- c:\windows\system32\nvwssr.dll
2009-08-17 01:02 . 2009-08-17 01:02 229376 ----a-w- c:\windows\system32\nvmccs.dll
2009-08-15 15:43 . 2009-08-15 15:43 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2009-08-14 11:36 . 2009-08-14 11:36 70936 ----a-w- c:\windows\system32\PhysXLoader.dll
2009-08-13 19:53 . 2009-08-13 19:53 41872 ----a-w- c:\windows\system32\xfcodec.dll
2009-08-11 10:35 . 2009-08-26 15:41 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-08-09 18:47 . 2009-02-12 09:34 -------- d-----w- c:\documents and settings\windows\Application Data\teamspeak2
2009-08-07 22:15 . 2009-08-07 22:15 -------- d-----w- c:\program files\AMD
2009-08-06 17:24 . 2007-12-01 15:34 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 17:24 . 2007-12-01 15:34 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 17:24 . 2007-12-01 15:34 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-08-06 17:24 . 2006-03-02 12:00 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 17:23 . 2007-12-01 15:34 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 17:23 . 2007-12-01 15:34 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-06 10:24 . 2009-08-06 10:21 -------- d-----w- c:\program files\Hannes Converter
2009-08-05 11:15 . 2009-08-05 11:15 -------- d-----w- c:\program files\uTorrent
2009-08-05 09:00 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-05 05:41 . 2008-10-23 18:42 -------- d-----w- c:\program files\NBA 2K9
2009-08-02 22:21 . 2009-08-02 22:21 23320 ----a-w- c:\windows\system32\PhysXDevice.dll
2009-08-01 16:15 . 2009-08-01 16:15 604488 ----a-w- c:\windows\system32\TUProgSt.exe
2009-08-01 16:15 . 2009-08-01 16:15 361288 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-07-29 04:35 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-29 04:35 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 03:23 . 2009-06-13 14:15 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-17 18:56 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-15 09:48 . 2009-08-01 16:15 29000 ----a-w- c:\windows\system32\uxtuneup.dll
2009-07-13 08:08 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-10 11:01 . 2009-07-10 11:01 307560 ----a-w- c:\windows\WLXPGSS.SCR
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-08-25 185896]
"LXSUPMON"="c:\windows\system32\LXSUPMON.EXE" [2002-01-28 885760]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2009-02-27 640376]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2009-08-12 1657376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-08-17 13877248]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-08-17 86016]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-09-10 420176]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-05-10 16342528]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2006-03-02 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\acaptuser32.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^e-Carte Bleue Caisse d'Epargne.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\e-Carte Bleue Caisse d'Epargne.lnk
backup=c:\windows\pss\e-Carte Bleue Caisse d'Epargne.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Sipru.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Sipru.lnk
backup=c:\windows\pss\Sipru.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2009\\PCM.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GoalWebServer2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GoalServer2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\stunnel\\stunnel.exe"=
"c:\\Program Files\\Qtracker\\qtracker.exe"=
"c:\\Program Files\\Left 4 Dead\\left4dead.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GCP2009.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Documents and Settings\\windows\\Mes documents\\Downloads\\Compressed\\RatioMaster-1.8.8\\RatioMaster.exe"=
"c:\\Documents and Settings\\windows\\Bureau\\fichiers\\RFG_i_upload_to_my_love_6\\Pro Evolution Soccer 6 RipForGames\\RFG_PES6\\pes6.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\TvAnts\\Tvants.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Hercules\\Deluxe Optical Glass\\Station2.exe"=
"c:\\Program Files\\Eidos\\Batman Arkham Asylum\\Binaries\\ShippingPC-BmGame.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\StreamTorrent 1.0\\StreamTorrent.exe"=
"c:\\Program Files\\CAPCOM\\RESIDENT EVIL 5\\RE5DX9.EXE"=
"c:\\Program Files\\CAPCOM\\RESIDENT EVIL 5\\RE5DX10.EXE"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Electronic Arts\\Dead Space\\Dead Space.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57803:TCP"= 57803:TCP:Pando P2P TCP Listening Port
"57803:UDP"= 57803:UDP:Pando P2P UDP Listening Port
"3478:UDP"= 3478:UDP:stun
"3479:UDP"= 3479:UDP:stun 2
"6112:UDP"= 6112:UDP:stun 3
"5730:UDP"= 5730:UDP:game
"5739:UDP"= 5739:UDP:game 1
"9001:TCP"= 9001:TCP:game 2
"11881:TCP"= 11881:TCP:game 3

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [05/07/2006 14:46 63352]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28/06/2009 19:13 3033712]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [03/09/2009 19:34 194817]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [03/09/2009 19:34 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [03/09/2009 19:34 434945]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [20/02/2009 18:10 44776]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [22/08/2008 16:58 269648]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [01/08/2009 18:15 604488]
R3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [22/12/2007 16:04 94720]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22/08/2008 16:58 19160]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [01/07/2009 11:16 17424]
S3 CrystalSysInfo;CrystalSysInfo;\??\c:\documents and settings\All Users\Documents\e-Carte Bleue\Caisse Epargne\Ma e-Carte Bleue\SysInfo.sys --> c:\documents and settings\All Users\Documents\e-Carte Bleue\Caisse Epargne\Ma e-Carte Bleue\SysInfo.sys [?]
S3 HexTunnelDevice;Hexago Multi-Virtual Tunnel Adapter;c:\windows\system32\drivers\hextun.sys [06/06/2008 15:17 22176]
S3 jfdcd;jfdcd;\??\c:\docume~1\windows\LOCALS~1\Temp\jfdcd.sys --> c:\docume~1\windows\LOCALS~1\Temp\jfdcd.sys [?]
S3 wip0203;Wippien Network Adapter 2.3;c:\windows\system32\drivers\wip0203.sys [02/09/2008 09:57 23224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
vvdsvc REG_MULTI_SZ vvdsvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-10-03 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-07-16 09:00]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.wanadoo.fr
mWindow Title =
uInternet Settings,ProxyOverride = local
IE: Ajouter la cible du lien à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger le contenu de video FLV avec IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
Trusted Zone: secuser.com\www
DPF: {62BA437C-7712-48C6-9F0B-D251FA43192B}
DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A}
DPF: {D4ACE027-B115-4181-82CF-831C68235CAB} - hxxp://hot1.vdown.21cn.com/rmdownload/drm/data3/eyejoy/PpsSetup.cab
FF - ProfilePath - c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://portail.dartybox.com/
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - component: c:\documents and settings\windows\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
FF - plugin: c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp07073001.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll
FF - plugin: c:\program files\Opera\program\plugins\npmmaud.dll
FF - plugin: c:\program files\Opera\program\plugins\npmmprog.dll
FF - plugin: c:\program files\Opera\program\plugins\npmmvid.dll
FF - plugin: c:\program files\Opera\program\plugins\npmmzip.dll
FF - plugin: c:\program files\Opera\program\plugins\nppdf32.dll
FF - plugin: c:\program files\Opera\program\plugins\nppl3260.dll
FF - plugin: c:\program files\Opera\program\plugins\nprjplug.dll
FF - plugin: c:\program files\Opera\program\plugins\nprpjplug.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Virtools\3D Life Player\npvirtools.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

SafeBoot-Lrx40.sys

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-03 18:55
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-682003330-842925246-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:12,71,89,de,06,ca,e5,1c,06,09,72,56,b4,25,a2,d6,84,86,b7,66,86,4b,cb,
c6,63,31,1b,22,b3,ca,e1,67,75,1f,d3,b1,c1,55,c2,c6,69,3b,de,c8,ac,9a,2f,b2,\
"??"=hex:53,b0,ee,a4,e5,e3,d4,b1,b9,b4,bf,1b,3d,24,b8,93

[HKEY_USERS\S-1-5-21-682003330-842925246-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:ef,b7,07,0a,85,69,e3,80,e7,87,17,84,a4,d6,9f,66,4f,ac,a2,6a,dd,
c6,c4,85,4c,ac,75,2b,f7,d9,e0,e9,0d,97,07,e9,dc,c1,51,4a,8e,a4,6f,fa,ac,48,\
"rkeysecu"=hex:b7,94,b0,33,55,58,c6,09,c6,6e,8a,e9,e6,0f,e4,68

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{518d3900-11f4-4dcb-9f0d-6f40726f4fb4}]
@Denied: (Full) (Everyone)
"Model"=dword:00000113
"Therad"=dword:0000001b
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,98,07,ff,fc,5d,
df,1c,2f,3b,8a,0a,32,11,89,01,b5,c6,84,ce,58,55,ee,66,da,ee,2b,56,62,14,94,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):90,2a,06,5e,2c,7e,bf,a1,25,b4,f3,38,56,64,e1,8c,26,71,ba,e5,5c,
8b,e7,2c,2b,36,9b,1c,1c,8e,3e,de,df,2d,21,51,bf,e5,0b,9e,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):11,62,20,2d,f6,44,fd,2a,51,3a,27,1f,ca,a7,51,4d,80,99,28,80,81,
7b,47,93,16,c3,02,8a,63,81,b4,0f,5e,06,0d,e1,bc,7c,0e,88,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb0bc8da-4eca-4130-b289-db837301a55e}]
@Denied: (Full) (Everyone)
"Model"=dword:000000d2
"Therad"=dword:00000015
.
Heure de fin: 2009-10-03 18:58
ComboFix-quarantined-files.txt 2009-10-03 16:57

Avant-CF: 76 943 519 744 octets libres
Après-CF: 76 931 223 552 octets libres

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
369 --- E O F --- 2009-09-19 18:10

Depuis que j'ai redémarré mon PC, l'utilisation de l'UC est à 0% !
alors je ne sais pas si c'est cela qui a réglé le problème mais merci beaucoup en tout cas ! :)

ok voici le rapport malwares bytes :

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2896
Windows 5.1.2600 Service Pack 3

04/10/2009 13:17:06
mbam-log-2009-10-04 (13-17-06).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 371067
Temps écoulé: 4 hour(s), 38 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{F4514199-AEAD-4F8B-BBBE-A54FE4BB38CB}\RP133\A0038680.sys (Worm.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F4514199-AEAD-4F8B-BBBE-A54FE4BB38CB}\RP133\A0038774.sys (Worm.Agent) -> Quarantined and deleted successfully.

De plus, antivirus à trouver des chevals de troie que j'ai mis en quarantaine, je peux les supprimer?

e

rsit à juste créer un rapport log.txt et n'a pas fait d'analyse
voici le rapport log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by windows at 2009-10-04 15:50:33
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 74 GB (24%) free of 305 GB
Total RAM: 2047 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:50:42, on 04/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\COMODO\EasyVPN\Vpnservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\windows\Mes documents\Downloads\Programs\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\windows.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {62BA437C-7712-48C6-9F0B-D251FA43192B} -
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A} -
O16 - DPF: {A903E5AB-C67E-40FB-94F1-E1305982F6E0} -
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Java Plug-in 1.6.0_02) -
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.tvucricket.com/player/vjocx-en.cab
O16 - DPF: {D4ACE027-B115-4181-82CF-831C68235CAB} (PPSBase Control) - http://hot1.vdown.21cn.com/rmdownload/drm/data3/eyejoy/PpsSetup.cab
O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\acaptuser32.dll
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO EasyVPN Service (EasyVpnAdpt) - Unknown owner - C:\Program Files\COMODO\EasyVPN\Vpnservice.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

J'ai installé la console de récupération Microsoft, ça ma était demandé pour continuer (j'espère que j'ai bien fait) un rapport log.txt s'est aussi créer :

combofix.txt
ComboFix 09-10-01.05 - windows 04/10/2009 16:45.2.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1527 [GMT 2:00]
Lancé depuis: c:\documents and settings\windows\Bureau\combofix.exe
Commutateurs utilisés :: c:\documents and settings\windows\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}

FILE ::
"c:\program files\rhcl2mj0enb3\rhcl2mj0enb3.exe"
"c:\windows\system32\lphcg2mj0enb3.exe"
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-09-04 au 2009-10-04 ))))))))))))))))))))))))))))))))))))
.

2009-10-03 16:15 . 2009-10-04 13:53 -------- d-----w- C:\rsit
2009-10-03 15:45 . 2009-10-03 15:45 -------- d-----w- c:\documents and settings\windows\Application Data\Avira
2009-09-29 18:17 . 2007-09-27 10:14 1069568 ----a-w- c:\program files\altbinz.exe
2009-09-29 05:37 . 2009-09-29 18:18 -------- d-----w- c:\program files\AltBinz
2009-09-25 13:48 . 2009-10-02 19:54 -------- d-----w- C:\xnews
2009-09-19 18:09 . 2009-09-19 18:09 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2009-09-12 15:08 . 2009-09-12 15:08 -------- d-----w- c:\program files\StreamTorrent 1.0
2009-09-12 15:08 . 2009-09-12 15:08 -------- d-----w- c:\documents and settings\windows\Application Data\StreamTorrent
2009-09-12 13:42 . 2009-09-12 13:42 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-09-12 13:36 . 2009-09-12 14:42 8 ----a-w- c:\windows\system32\nvModes.dat
2009-09-12 09:21 . 2009-09-12 09:21 -------- d-sh--w- c:\documents and settings\windows\IECompatCache
2009-09-10 12:41 . 2008-06-14 17:33 272768 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-09-10 12:40 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-09-10 12:40 . 2009-03-06 14:20 286720 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-09-10 12:40 . 2009-02-09 11:24 2191104 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-10 12:40 . 2009-02-09 11:23 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-09-10 12:40 . 2009-02-09 10:53 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-09-10 12:40 . 2009-02-09 10:53 735744 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-09-10 12:40 . 2009-02-09 10:53 739840 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-09-10 12:40 . 2009-02-09 10:53 685568 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-09-10 12:40 . 2009-02-09 10:53 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-09-10 12:40 . 2009-02-09 10:53 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-09-10 12:40 . 2009-02-09 11:23 2147328 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-10 12:40 . 2009-02-09 11:23 2025984 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-10 12:39 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2009-09-10 12:39 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-09-10 12:39 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-09-10 12:39 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-09-10 12:39 . 2008-04-11 19:05 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2009-09-10 12:38 . 2008-12-16 12:31 354304 -c----w- c:\windows\system32\dllcache\winhttp.dll
2009-09-10 12:38 . 2008-10-15 16:35 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\system32\fr
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\system32\bits
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\l2schemas
2009-09-10 10:33 . 2009-09-10 10:33 -------- d-----w- c:\windows\EHome
2009-09-10 10:20 . 2009-09-10 10:20 -------- d-----w- C:\Classeur
2009-09-10 10:20 . 2009-09-10 10:20 -------- d-----w- C:\Barre personnelle
2009-09-04 15:15 . 2009-09-19 14:37 -------- d-----w- c:\program files\Eidos

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-04 14:38 . 2009-04-30 12:59 -------- d-----w- c:\documents and settings\windows\Application Data\DMCache
2009-10-04 13:39 . 2008-06-14 11:58 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-04 11:26 . 2009-08-21 10:11 -------- d-----w- c:\documents and settings\windows\Application Data\vlc
2009-10-03 16:07 . 2009-01-04 09:43 -------- d-----w- c:\program files\CV Expert 3
2009-10-03 15:54 . 2008-08-22 18:05 -------- d-----w- c:\program files\Trend Micro
2009-10-03 15:41 . 2009-07-05 11:42 -------- d-----w- c:\program files\CAPCOM
2009-10-03 15:25 . 2009-07-08 18:23 -------- d-----w- c:\program files\Mumble
2009-10-03 14:25 . 2008-08-17 12:15 -------- d-----w- c:\documents and settings\windows\Application Data\dvdcss
2009-10-02 14:22 . 2008-06-27 10:00 -------- d-----w- c:\program files\KONAMI
2009-09-30 05:11 . 2009-03-24 17:22 -------- d-----w- c:\documents and settings\windows\Application Data\mIRC
2009-09-30 04:50 . 2009-06-18 09:31 -------- d-----w- c:\program files\mIRC
2009-09-29 18:51 . 2009-02-14 18:26 -------- d-----w- c:\program files\Windows Live Safety Center
2009-09-29 18:11 . 2008-10-27 14:28 -------- d-----w- c:\documents and settings\windows\Application Data\GrabIt
2009-09-26 19:09 . 2009-01-30 06:22 -------- d-----w- c:\program files\Gabest
2009-09-23 19:47 . 2009-05-15 22:20 2332440 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-09-23 13:19 . 2009-04-30 12:59 -------- d-----w- c:\documents and settings\windows\Application Data\IDM
2009-09-19 18:11 . 2008-12-17 15:19 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-19 18:10 . 2008-01-16 14:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-09-18 14:49 . 2007-12-22 15:37 -------- d-----w- c:\program files\Windows Live
2009-09-18 14:46 . 2008-12-17 15:16 -------- d-----w- c:\program files\Microsoft
2009-09-12 21:16 . 2009-07-11 21:16 -------- d-----w- c:\documents and settings\windows\Application Data\Pro Cycling Manager 2009
2009-09-12 10:07 . 2008-08-22 14:58 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-11 19:57 . 2007-12-22 15:54 72056 ----a-w- c:\documents and settings\windows\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-09-11 19:55 . 2009-07-09 13:47 -------- d-----w- c:\program files\Ubisoft
2009-09-11 08:45 . 2009-07-06 08:29 -------- d-----w- c:\program files\Left 4 Dead
2009-09-11 08:39 . 2009-03-25 12:38 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-09-11 08:38 . 2009-03-25 12:38 -------- d-----w- c:\program files\AGEIA Technologies
2009-09-11 08:25 . 2006-03-02 12:00 85834 ----a-w- c:\windows\system32\perfc00C.dat
2009-09-11 08:25 . 2006-03-02 12:00 512628 ----a-w- c:\windows\system32\perfh00C.dat
2009-09-10 12:54 . 2008-08-22 14:58 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2008-08-22 14:58 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-10 10:26 . 2009-07-28 12:56 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-04 15:15 . 2007-12-01 15:49 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-03 19:55 . 2009-08-05 11:12 -------- d-----w- c:\documents and settings\windows\Application Data\uTorrent
2009-09-03 17:38 . 2009-05-09 07:35 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-09-03 17:34 . 2009-09-03 17:34 -------- d-----w- c:\program files\Avira
2009-09-03 17:34 . 2008-08-31 15:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-08-29 11:26 . 2009-02-10 08:42 -------- d-----w- c:\program files\Xfire
2009-08-29 11:12 . 2007-12-01 15:49 -------- d-----w- c:\program files\Realtek
2009-08-29 09:43 . 2009-08-29 09:43 -------- d-----w- c:\program files\Driver-Soft
2009-08-28 09:51 . 2009-02-10 08:42 -------- d-----w- c:\documents and settings\windows\Application Data\Xfire
2009-08-26 15:42 . 2009-08-26 15:42 -------- d-----w- c:\program files\NVIDIA Corporation
2009-08-26 15:32 . 2008-06-10 15:52 -------- d-----w- c:\program files\SystemRequirementsLab
2009-08-26 15:28 . 2008-06-10 15:52 -------- d-----w- c:\documents and settings\windows\Application Data\SystemRequirementsLab
2009-08-26 09:10 . 2007-12-23 09:05 -------- d-----w- c:\program files\Java
2009-08-24 15:29 . 2009-06-16 15:16 -------- d-----w- c:\documents and settings\windows\Application Data\Hamachi
2009-08-24 09:48 . 2008-06-14 11:58 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-23 09:32 . 2009-08-23 09:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Skyline
2009-08-23 09:32 . 2009-08-23 09:32 -------- d-----w- c:\program files\Skyline
2009-08-23 09:12 . 2009-08-23 09:12 -------- d-----w- c:\documents and settings\All Users\Application Data\3DVIA
2009-08-23 09:12 . 2009-08-23 09:12 -------- d-----w- c:\program files\Virtools
2009-08-22 07:22 . 2007-12-27 14:40 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-08-21 13:11 . 2008-10-10 17:51 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-08-21 13:11 . 2008-10-10 17:51 139152 ----a-w- c:\documents and settings\windows\Application Data\PnkBstrK.sys
2009-08-21 13:10 . 2008-10-10 17:51 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-08-21 13:10 . 2008-10-29 09:50 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-08-21 13:10 . 2008-10-10 17:51 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-08-21 12:43 . 2009-03-25 13:05 -------- d-----w- c:\program files\DAEMON Tools Pro
2009-08-21 08:31 . 2008-12-12 15:51 -------- d-----w- c:\program files\UseNeXT
2009-08-21 08:28 . 2009-04-30 12:59 -------- d-----w- c:\program files\Internet Download Manager
2009-08-19 11:47 . 2008-10-08 20:00 -------- d-----w- c:\program files\Activision
2009-08-18 20:50 . 2008-12-12 15:51 -------- d-----w- c:\documents and settings\windows\Application Data\UseNeXT
2009-08-17 01:03 . 2009-08-17 01:03 3674112 ----a-w- c:\windows\system32\nvwssr.dll
2009-08-17 01:02 . 2009-08-17 01:02 229376 ----a-w- c:\windows\system32\nvmccs.dll
2009-08-15 15:43 . 2009-08-15 15:43 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2009-08-14 11:36 . 2009-08-14 11:36 70936 ----a-w- c:\windows\system32\PhysXLoader.dll
2009-08-13 19:53 . 2009-08-13 19:53 41872 ----a-w- c:\windows\system32\xfcodec.dll
2009-08-11 10:35 . 2009-08-26 15:41 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-08-09 18:47 . 2009-02-12 09:34 -------- d-----w- c:\documents and settings\windows\Application Data\teamspeak2
2009-08-07 22:15 . 2009-08-07 22:15 -------- d-----w- c:\program files\AMD
2009-08-06 17:24 . 2007-12-01 15:34 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 17:24 . 2007-12-01 15:34 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 17:24 . 2007-12-01 15:34 35552 ----a-w- c:\windows\system32\wups.dll
2009-08-06 17:24 . 2007-07-30 18:19 44768 ----a-w- c:\windows\system32\wups2.dll
2009-08-06 17:24 . 2007-12-01 15:34 53472 ------w- c:\windows\system32\wuauclt.exe
2009-08-06 17:24 . 2006-03-02 12:00 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 17:23 . 2007-12-01 15:34 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 17:23 . 2007-12-22 15:46 215920 ----a-w- c:\windows\system32\muweb.dll
2009-08-06 17:23 . 2007-12-22 15:46 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-08-06 17:23 . 2007-12-01 15:34 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-06 10:24 . 2009-08-06 10:21 -------- d-----w- c:\program files\Hannes Converter
2009-08-05 09:00 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-02 22:21 . 2009-08-02 22:21 23320 ----a-w- c:\windows\system32\PhysXDevice.dll
2009-08-01 16:15 . 2009-08-01 16:15 604488 ----a-w- c:\windows\system32\TUProgSt.exe
2009-08-01 16:15 . 2009-08-01 16:15 361288 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-07-29 04:35 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-29 04:35 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 03:23 . 2009-06-13 14:15 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-17 18:56 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-15 09:48 . 2009-08-01 16:15 29000 ----a-w- c:\windows\system32\uxtuneup.dll
2009-07-13 08:08 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-10 11:01 . 2009-07-10 11:01 307560 ----a-w- c:\windows\WLXPGSS.SCR
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-10-03_16.55.34 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-04 14:50 . 2009-10-04 14:50 16384 c:\windows\temp\Perflib_Perfdata_4b4.dat
+ 2007-12-01 15:34 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-08-25 185896]
"LXSUPMON"="c:\windows\system32\LXSUPMON.EXE" [2002-01-28 885760]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2009-02-27 640376]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2009-08-12 1657376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-08-17 13877248]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-08-17 86016]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-09-10 420176]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-05-10 16342528]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2006-03-02 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\acaptuser32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lrx40.sys]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^e-Carte Bleue Caisse d'Epargne.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\e-Carte Bleue Caisse d'Epargne.lnk
backup=c:\windows\pss\e-Carte Bleue Caisse d'Epargne.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Sipru.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Sipru.lnk
backup=c:\windows\pss\Sipru.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2009\\PCM.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GoalWebServer2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GoalServer2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\stunnel\\stunnel.exe"=
"c:\\Program Files\\Qtracker\\qtracker.exe"=
"c:\\Program Files\\Left 4 Dead\\left4dead.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Documents and Settings\\windows\\Mes documents\\Downloads\\Compressed\\RatioMaster-1.8.8\\RatioMaster.exe"=
"c:\\Documents and Settings\\windows\\Bureau\\fichiers\\RFG_i_upload_to_my_love_6\\Pro Evolution Soccer 6 RipForGames\\RFG_PES6\\pes6.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\TvAnts\\Tvants.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Hercules\\Deluxe Optical Glass\\Station2.exe"=
"c:\\Program Files\\Eidos\\Batman Arkham Asylum\\Binaries\\ShippingPC-BmGame.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\StreamTorrent 1.0\\StreamTorrent.exe"=
"c:\\Program Files\\CAPCOM\\RESIDENT EVIL 5\\RE5DX9.EXE"=
"c:\\Program Files\\CAPCOM\\RESIDENT EVIL 5\\RE5DX10.EXE"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Electronic Arts\\Dead Space\\Dead Space.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57803:TCP"= 57803:TCP:Pando P2P TCP Listening Port
"57803:UDP"= 57803:UDP:Pando P2P UDP Listening Port
"3478:UDP"= 3478:UDP:stun
"3479:UDP"= 3479:UDP:stun 2
"6112:UDP"= 6112:UDP:stun 3
"5730:UDP"= 5730:UDP:game
"5739:UDP"= 5739:UDP:game 1
"9001:TCP"= 9001:TCP:game 2
"11881:TCP"= 11881:TCP:game 3

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [05/07/2006 14:46 63352]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28/06/2009 19:13 3033712]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [03/09/2009 19:34 194817]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [03/09/2009 19:34 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [03/09/2009 19:34 434945]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [20/02/2009 18:10 44776]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [22/08/2008 16:58 269648]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [01/08/2009 18:15 604488]
R3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [22/12/2007 16:04 94720]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22/08/2008 16:58 19160]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [01/07/2009 11:16 17424]
S3 CrystalSysInfo;CrystalSysInfo;\??\c:\documents and settings\All Users\Documents\e-Carte Bleue\Caisse Epargne\Ma e-Carte Bleue\SysInfo.sys --> c:\documents and settings\All Users\Documents\e-Carte Bleue\Caisse Epargne\Ma e-Carte Bleue\SysInfo.sys [?]
S3 HexTunnelDevice;Hexago Multi-Virtual Tunnel Adapter;c:\windows\system32\drivers\hextun.sys [06/06/2008 15:17 22176]
S3 jfdcd;jfdcd;\??\c:\docume~1\windows\LOCALS~1\Temp\jfdcd.sys --> c:\docume~1\windows\LOCALS~1\Temp\jfdcd.sys [?]
S3 wip0203;Wippien Network Adapter 2.3;c:\windows\system32\drivers\wip0203.sys [02/09/2008 09:57 23224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
vvdsvc REG_MULTI_SZ vvdsvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-10-04 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-07-16 09:00]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.wanadoo.fr
mWindow Title =
uInternet Settings,ProxyOverride = local
IE: Ajouter la cible du lien à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger le contenu de video FLV avec IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
Trusted Zone: secuser.com\www
DPF: {62BA437C-7712-48C6-9F0B-D251FA43192B}
DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A}
DPF: {D4ACE027-B115-4181-82CF-831C68235CAB} - hxxp://hot1.vdown.21cn.com/rmdownload/drm/data3/eyejoy/PpsSetup.cab
FF - ProfilePath - c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://portail.dartybox.com/
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - component: c:\documents and settings\windows\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
FF - plugin: c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp07073001.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Virtools\3D Life Player\npvirtools.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-04 16:50
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-682003330-842925246-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:12,71,89,de,06,ca,e5,1c,06,09,72,56,b4,25,a2,d6,84,86,b7,66,86,4b,cb,
c6,63,31,1b,22,b3,ca,e1,67,75,1f,d3,b1,c1,55,c2,c6,69,3b,de,c8,ac,9a,2f,b2,\
"??"=hex:53,b0,ee,a4,e5,e3,d4,b1,b9,b4,bf,1b,3d,24,b8,93

[HKEY_USERS\S-1-5-21-682003330-842925246-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:ef,b7,07,0a,85,69,e3,80,e7,87,17,84,a4,d6,9f,66,4f,ac,a2,6a,dd,
c6,c4,85,4c,ac,75,2b,f7,d9,e0,e9,0d,97,07,e9,dc,c1,51,4a,8e,a4,6f,fa,ac,48,\
"rkeysecu"=hex:b7,94,b0,33,55,58,c6,09,c6,6e,8a,e9,e6,0f,e4,68

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{518d3900-11f4-4dcb-9f0d-6f40726f4fb4}]
@Denied: (Full) (Everyone)
"Model"=dword:00000113
"Therad"=dword:0000001b
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,98,07,ff,fc,5d,
df,1c,2f,3b,8a,0a,32,11,89,01,b5,c6,84,ce,58,55,ee,66,da,ee,2b,56,62,14,94,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):90,2a,06,5e,2c,7e,bf,a1,25,b4,f3,38,56,64,e1,8c,26,71,ba,e5,5c,
8b,e7,2c,2b,36,9b,1c,1c,8e,3e,de,df,2d,21,51,bf,e5,0b,9e,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):11,62,20,2d,f6,44,fd,2a,51,3a,27,1f,ca,a7,51,4d,80,99,28,80,81,
7b,47,93,16,c3,02,8a,63,81,b4,0f,5e,06,0d,e1,bc,7c,0e,88,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb0bc8da-4eca-4130-b289-db837301a55e}]
@Denied: (Full) (Everyone)
"Model"=dword:000000d2
"Therad"=dword:00000015
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3056)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\rundll32.exe
.
**************************************************************************
.
Heure de fin: 2009-10-04 16:59 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-10-04 14:59
ComboFix2.txt 2009-10-03 16:58

Avant-CF: 77 018 415 104 octets libres
Après-CF: 76 978 126 848 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect /usepmtimer

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
374 --- E O F --- 2009-09-19 18:10

log.txt :

ComboFix 09-10-01.05 - windows 04/10/2009 16:45.2.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1527 [GMT 2:00]
Lancé depuis: c:\documents and settings\windows\Bureau\combofix.exe
Commutateurs utilisés :: c:\documents and settings\windows\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}

FILE ::
"c:\program files\rhcl2mj0enb3\rhcl2mj0enb3.exe"
"c:\windows\system32\lphcg2mj0enb3.exe"
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-09-04 au 2009-10-04 ))))))))))))))))))))))))))))))))))))
.

2009-10-03 16:15 . 2009-10-04 13:53 -------- d-----w- C:\rsit
2009-10-03 15:45 . 2009-10-03 15:45 -------- d-----w- c:\documents and settings\windows\Application Data\Avira
2009-09-29 18:17 . 2007-09-27 10:14 1069568 ----a-w- c:\program files\altbinz.exe
2009-09-29 05:37 . 2009-09-29 18:18 -------- d-----w- c:\program files\AltBinz
2009-09-25 13:48 . 2009-10-02 19:54 -------- d-----w- C:\xnews
2009-09-19 18:09 . 2009-09-19 18:09 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2009-09-12 15:08 . 2009-09-12 15:08 -------- d-----w- c:\program files\StreamTorrent 1.0
2009-09-12 15:08 . 2009-09-12 15:08 -------- d-----w- c:\documents and settings\windows\Application Data\StreamTorrent
2009-09-12 13:42 . 2009-09-12 13:42 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-09-12 13:36 . 2009-09-12 14:42 8 ----a-w- c:\windows\system32\nvModes.dat
2009-09-12 09:21 . 2009-09-12 09:21 -------- d-sh--w- c:\documents and settings\windows\IECompatCache
2009-09-10 12:41 . 2008-06-14 17:33 272768 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-09-10 12:40 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-09-10 12:40 . 2009-03-06 14:20 286720 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-09-10 12:40 . 2009-02-09 11:24 2191104 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-10 12:40 . 2009-02-09 11:23 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-09-10 12:40 . 2009-02-09 10:53 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-09-10 12:40 . 2009-02-09 10:53 735744 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-09-10 12:40 . 2009-02-09 10:53 739840 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-09-10 12:40 . 2009-02-09 10:53 685568 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-09-10 12:40 . 2009-02-09 10:53 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-09-10 12:40 . 2009-02-09 10:53 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-09-10 12:40 . 2009-02-09 11:23 2147328 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-10 12:40 . 2009-02-09 11:23 2025984 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-10 12:39 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2009-09-10 12:39 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-09-10 12:39 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-09-10 12:39 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-09-10 12:39 . 2008-04-11 19:05 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2009-09-10 12:38 . 2008-12-16 12:31 354304 -c----w- c:\windows\system32\dllcache\winhttp.dll
2009-09-10 12:38 . 2008-10-15 16:35 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\system32\fr
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\system32\bits
2009-09-10 10:40 . 2009-09-10 10:40 -------- d-----w- c:\windows\l2schemas
2009-09-10 10:33 . 2009-09-10 10:33 -------- d-----w- c:\windows\EHome
2009-09-10 10:20 . 2009-09-10 10:20 -------- d-----w- C:\Classeur
2009-09-10 10:20 . 2009-09-10 10:20 -------- d-----w- C:\Barre personnelle
2009-09-04 15:15 . 2009-09-19 14:37 -------- d-----w- c:\program files\Eidos

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-04 14:38 . 2009-04-30 12:59 -------- d-----w- c:\documents and settings\windows\Application Data\DMCache
2009-10-04 13:39 . 2008-06-14 11:58 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-04 11:26 . 2009-08-21 10:11 -------- d-----w- c:\documents and settings\windows\Application Data\vlc
2009-10-03 16:07 . 2009-01-04 09:43 -------- d-----w- c:\program files\CV Expert 3
2009-10-03 15:54 . 2008-08-22 18:05 -------- d-----w- c:\program files\Trend Micro
2009-10-03 15:41 . 2009-07-05 11:42 -------- d-----w- c:\program files\CAPCOM
2009-10-03 15:25 . 2009-07-08 18:23 -------- d-----w- c:\program files\Mumble
2009-10-03 14:25 . 2008-08-17 12:15 -------- d-----w- c:\documents and settings\windows\Application Data\dvdcss
2009-10-02 14:22 . 2008-06-27 10:00 -------- d-----w- c:\program files\KONAMI
2009-09-30 05:11 . 2009-03-24 17:22 -------- d-----w- c:\documents and settings\windows\Application Data\mIRC
2009-09-30 04:50 . 2009-06-18 09:31 -------- d-----w- c:\program files\mIRC
2009-09-29 18:51 . 2009-02-14 18:26 -------- d-----w- c:\program files\Windows Live Safety Center
2009-09-29 18:11 . 2008-10-27 14:28 -------- d-----w- c:\documents and settings\windows\Application Data\GrabIt
2009-09-26 19:09 . 2009-01-30 06:22 -------- d-----w- c:\program files\Gabest
2009-09-23 19:47 . 2009-05-15 22:20 2332440 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-09-23 13:19 . 2009-04-30 12:59 -------- d-----w- c:\documents and settings\windows\Application Data\IDM
2009-09-19 18:11 . 2008-12-17 15:19 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-19 18:10 . 2008-01-16 14:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-09-18 14:49 . 2007-12-22 15:37 -------- d-----w- c:\program files\Windows Live
2009-09-18 14:46 . 2008-12-17 15:16 -------- d-----w- c:\program files\Microsoft
2009-09-12 21:16 . 2009-07-11 21:16 -------- d-----w- c:\documents and settings\windows\Application Data\Pro Cycling Manager 2009
2009-09-12 10:07 . 2008-08-22 14:58 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-11 19:57 . 2007-12-22 15:54 72056 ----a-w- c:\documents and settings\windows\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-09-11 19:55 . 2009-07-09 13:47 -------- d-----w- c:\program files\Ubisoft
2009-09-11 08:45 . 2009-07-06 08:29 -------- d-----w- c:\program files\Left 4 Dead
2009-09-11 08:39 . 2009-03-25 12:38 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-09-11 08:38 . 2009-03-25 12:38 -------- d-----w- c:\program files\AGEIA Technologies
2009-09-11 08:25 . 2006-03-02 12:00 85834 ----a-w- c:\windows\system32\perfc00C.dat
2009-09-11 08:25 . 2006-03-02 12:00 512628 ----a-w- c:\windows\system32\perfh00C.dat
2009-09-10 12:54 . 2008-08-22 14:58 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2008-08-22 14:58 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-10 10:26 . 2009-07-28 12:56 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-04 15:15 . 2007-12-01 15:49 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-03 19:55 . 2009-08-05 11:12 -------- d-----w- c:\documents and settings\windows\Application Data\uTorrent
2009-09-03 17:38 . 2009-05-09 07:35 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-09-03 17:34 . 2009-09-03 17:34 -------- d-----w- c:\program files\Avira
2009-09-03 17:34 . 2008-08-31 15:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-08-29 11:26 . 2009-02-10 08:42 -------- d-----w- c:\program files\Xfire
2009-08-29 11:12 . 2007-12-01 15:49 -------- d-----w- c:\program files\Realtek
2009-08-29 09:43 . 2009-08-29 09:43 -------- d-----w- c:\program files\Driver-Soft
2009-08-28 09:51 . 2009-02-10 08:42 -------- d-----w- c:\documents and settings\windows\Application Data\Xfire
2009-08-26 15:42 . 2009-08-26 15:42 -------- d-----w- c:\program files\NVIDIA Corporation
2009-08-26 15:32 . 2008-06-10 15:52 -------- d-----w- c:\program files\SystemRequirementsLab
2009-08-26 15:28 . 2008-06-10 15:52 -------- d-----w- c:\documents and settings\windows\Application Data\SystemRequirementsLab
2009-08-26 09:10 . 2007-12-23 09:05 -------- d-----w- c:\program files\Java
2009-08-24 15:29 . 2009-06-16 15:16 -------- d-----w- c:\documents and settings\windows\Application Data\Hamachi
2009-08-24 09:48 . 2008-06-14 11:58 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-23 09:32 . 2009-08-23 09:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Skyline
2009-08-23 09:32 . 2009-08-23 09:32 -------- d-----w- c:\program files\Skyline
2009-08-23 09:12 . 2009-08-23 09:12 -------- d-----w- c:\documents and settings\All Users\Application Data\3DVIA
2009-08-23 09:12 . 2009-08-23 09:12 -------- d-----w- c:\program files\Virtools
2009-08-22 07:22 . 2007-12-27 14:40 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-08-21 13:11 . 2008-10-10 17:51 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-08-21 13:11 . 2008-10-10 17:51 139152 ----a-w- c:\documents and settings\windows\Application Data\PnkBstrK.sys
2009-08-21 13:10 . 2008-10-10 17:51 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-08-21 13:10 . 2008-10-29 09:50 794408 ----a-w- c:\windows\system32\pbsvc.exe
2009-08-21 13:10 . 2008-10-10 17:51 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-08-21 12:43 . 2009-03-25 13:05 -------- d-----w- c:\program files\DAEMON Tools Pro
2009-08-21 08:31 . 2008-12-12 15:51 -------- d-----w- c:\program files\UseNeXT
2009-08-21 08:28 . 2009-04-30 12:59 -------- d-----w- c:\program files\Internet Download Manager
2009-08-19 11:47 . 2008-10-08 20:00 -------- d-----w- c:\program files\Activision
2009-08-18 20:50 . 2008-12-12 15:51 -------- d-----w- c:\documents and settings\windows\Application Data\UseNeXT
2009-08-17 01:03 . 2009-08-17 01:03 3674112 ----a-w- c:\windows\system32\nvwssr.dll
2009-08-17 01:02 . 2009-08-17 01:02 229376 ----a-w- c:\windows\system32\nvmccs.dll
2009-08-15 15:43 . 2009-08-15 15:43 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2009-08-14 11:36 . 2009-08-14 11:36 70936 ----a-w- c:\windows\system32\PhysXLoader.dll
2009-08-13 19:53 . 2009-08-13 19:53 41872 ----a-w- c:\windows\system32\xfcodec.dll
2009-08-11 10:35 . 2009-08-26 15:41 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-08-09 18:47 . 2009-02-12 09:34 -------- d-----w- c:\documents and settings\windows\Application Data\teamspeak2
2009-08-07 22:15 . 2009-08-07 22:15 -------- d-----w- c:\program files\AMD
2009-08-06 17:24 . 2007-12-01 15:34 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 17:24 . 2007-12-01 15:34 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 17:24 . 2007-12-01 15:34 35552 ----a-w- c:\windows\system32\wups.dll
2009-08-06 17:24 . 2007-07-30 18:19 44768 ----a-w- c:\windows\system32\wups2.dll
2009-08-06 17:24 . 2007-12-01 15:34 53472 ------w- c:\windows\system32\wuauclt.exe
2009-08-06 17:24 . 2006-03-02 12:00 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 17:23 . 2007-12-01 15:34 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 17:23 . 2007-12-22 15:46 215920 ----a-w- c:\windows\system32\muweb.dll
2009-08-06 17:23 . 2007-12-22 15:46 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-08-06 17:23 . 2007-12-01 15:34 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-06 10:24 . 2009-08-06 10:21 -------- d-----w- c:\program files\Hannes Converter
2009-08-05 09:00 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-02 22:21 . 2009-08-02 22:21 23320 ----a-w- c:\windows\system32\PhysXDevice.dll
2009-08-01 16:15 . 2009-08-01 16:15 604488 ----a-w- c:\windows\system32\TUProgSt.exe
2009-08-01 16:15 . 2009-08-01 16:15 361288 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-07-29 04:35 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-29 04:35 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 03:23 . 2009-06-13 14:15 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-17 18:56 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-15 09:48 . 2009-08-01 16:15 29000 ----a-w- c:\windows\system32\uxtuneup.dll
2009-07-13 08:08 . 2006-03-02 12:00 286720 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-10 11:01 . 2009-07-10 11:01 307560 ----a-w- c:\windows\WLXPGSS.SCR
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-10-03_16.55.34 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-04 14:50 . 2009-10-04 14:50 16384 c:\windows\temp\Perflib_Perfdata_4b4.dat
+ 2007-12-01 15:34 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-08-25 185896]
"LXSUPMON"="c:\windows\system32\LXSUPMON.EXE" [2002-01-28 885760]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2009-02-27 640376]
"amd_dc_opt"="c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2009-08-12 1657376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-08-17 13877248]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-08-17 86016]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-09-10 420176]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-05-10 16342528]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2006-03-02 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\acaptuser32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lrx40.sys]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^e-Carte Bleue Caisse d'Epargne.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\e-Carte Bleue Caisse d'Epargne.lnk
backup=c:\windows\pss\e-Carte Bleue Caisse d'Epargne.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Sipru.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Sipru.lnk
backup=c:\windows\pss\Sipru.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Cyanide\\Pro Cycling Manager - Season 2009\\PCM.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GoalWebServer2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\GoalServer2009.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\stunnel\\stunnel.exe"=
"c:\\Program Files\\Qtracker\\qtracker.exe"=
"c:\\Program Files\\Left 4 Dead\\left4dead.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Documents and Settings\\windows\\Mes documents\\Downloads\\Compressed\\RatioMaster-1.8.8\\RatioMaster.exe"=
"c:\\Documents and Settings\\windows\\Bureau\\fichiers\\RFG_i_upload_to_my_love_6\\Pro Evolution Soccer 6 RipForGames\\RFG_PES6\\pes6.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\TvAnts\\Tvants.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Hercules\\Deluxe Optical Glass\\Station2.exe"=
"c:\\Program Files\\Eidos\\Batman Arkham Asylum\\Binaries\\ShippingPC-BmGame.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\GTAIV.exe"=
"c:\\Program Files\\StreamTorrent 1.0\\StreamTorrent.exe"=
"c:\\Program Files\\CAPCOM\\RESIDENT EVIL 5\\RE5DX9.EXE"=
"c:\\Program Files\\CAPCOM\\RESIDENT EVIL 5\\RE5DX10.EXE"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Electronic Arts\\Dead Space\\Dead Space.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"57803:TCP"= 57803:TCP:Pando P2P TCP Listening Port
"57803:UDP"= 57803:UDP:Pando P2P UDP Listening Port
"3478:UDP"= 3478:UDP:stun
"3479:UDP"= 3479:UDP:stun 2
"6112:UDP"= 6112:UDP:stun 3
"5730:UDP"= 5730:UDP:game
"5739:UDP"= 5739:UDP:game 1
"9001:TCP"= 9001:TCP:game 2
"11881:TCP"= 11881:TCP:game 3

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [05/07/2006 14:46 63352]
R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [28/06/2009 19:13 3033712]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [03/09/2009 19:34 194817]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [03/09/2009 19:34 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [03/09/2009 19:34 434945]
R2 EasyVpnAdpt;COMODO EasyVPN Service;c:\program files\COMODO\EasyVPN\Vpnservice.exe [20/02/2009 18:10 44776]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [22/08/2008 16:58 269648]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [01/08/2009 18:15 604488]
R3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [22/12/2007 16:04 94720]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22/08/2008 16:58 19160]
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc --> c:\windows\System32\appdrvrem01.exe svc [?]
S3 ATP;Comodo EasyVPN Miniport Driver;c:\windows\system32\drivers\cmdatp.sys [01/07/2009 11:16 17424]
S3 CrystalSysInfo;CrystalSysInfo;\??\c:\documents and settings\All Users\Documents\e-Carte Bleue\Caisse Epargne\Ma e-Carte Bleue\SysInfo.sys --> c:\documents and settings\All Users\Documents\e-Carte Bleue\Caisse Epargne\Ma e-Carte Bleue\SysInfo.sys [?]
S3 HexTunnelDevice;Hexago Multi-Virtual Tunnel Adapter;c:\windows\system32\drivers\hextun.sys [06/06/2008 15:17 22176]
S3 jfdcd;jfdcd;\??\c:\docume~1\windows\LOCALS~1\Temp\jfdcd.sys --> c:\docume~1\windows\LOCALS~1\Temp\jfdcd.sys [?]
S3 wip0203;Wippien Network Adapter 2.3;c:\windows\system32\drivers\wip0203.sys [02/09/2008 09:57 23224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
vvdsvc REG_MULTI_SZ vvdsvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-10-04 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-07-16 09:00]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.wanadoo.fr
mWindow Title =
uInternet Settings,ProxyOverride = local
IE: Ajouter la cible du lien à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Télécharger avec IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger le contenu de video FLV avec IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Télécharger tous les liens avec IDM - c:\program files\Internet Download Manager\IEGetAll.htm
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
Trusted Zone: secuser.com\www
DPF: {62BA437C-7712-48C6-9F0B-D251FA43192B}
DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A}
DPF: {D4ACE027-B115-4181-82CF-831C68235CAB} - hxxp://hot1.vdown.21cn.com/rmdownload/drm/data3/eyejoy/PpsSetup.cab
FF - ProfilePath - c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://portail.dartybox.com/
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - component: c:\documents and settings\windows\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
FF - plugin: c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\documents and settings\windows\Application Data\Mozilla\Firefox\Profiles\cuvvjb12.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp07073001.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Virtools\3D Life Player\npvirtools.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-04 16:50
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-682003330-842925246-725345543-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:12,71,89,de,06,ca,e5,1c,06,09,72,56,b4,25,a2,d6,84,86,b7,66,86,4b,cb,
c6,63,31,1b,22,b3,ca,e1,67,75,1f,d3,b1,c1,55,c2,c6,69,3b,de,c8,ac,9a,2f,b2,\
"??"=hex:53,b0,ee,a4,e5,e3,d4,b1,b9,b4,bf,1b,3d,24,b8,93

[HKEY_USERS\S-1-5-21-682003330-842925246-725345543-1004\Software\SecuROM\License information*]
"datasecu"=hex:ef,b7,07,0a,85,69,e3,80,e7,87,17,84,a4,d6,9f,66,4f,ac,a2,6a,dd,
c6,c4,85,4c,ac,75,2b,f7,d9,e0,e9,0d,97,07,e9,dc,c1,51,4a,8e,a4,6f,fa,ac,48,\
"rkeysecu"=hex:b7,94,b0,33,55,58,c6,09,c6,6e,8a,e9,e6,0f,e4,68

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{518d3900-11f4-4dcb-9f0d-6f40726f4fb4}]
@Denied: (Full) (Everyone)
"Model"=dword:00000113
"Therad"=dword:0000001b
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,98,07,ff,fc,5d,
df,1c,2f,3b,8a,0a,32,11,89,01,b5,c6,84,ce,58,55,ee,66,da,ee,2b,56,62,14,94,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):90,2a,06,5e,2c,7e,bf,a1,25,b4,f3,38,56,64,e1,8c,26,71,ba,e5,5c,
8b,e7,2c,2b,36,9b,1c,1c,8e,3e,de,df,2d,21,51,bf,e5,0b,9e,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):11,62,20,2d,f6,44,fd,2a,51,3a,27,1f,ca,a7,51,4d,80,99,28,80,81,
7b,47,93,16,c3,02,8a,63,81,b4,0f,5e,06,0d,e1,bc,7c,0e,88,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{eb0bc8da-4eca-4130-b289-db837301a55e}]
@Denied: (Full) (Everyone)
"Model"=dword:000000d2
"Therad"=dword:00000015
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3056)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\rundll32.exe
.
**************************************************************************
.
Heure de fin: 2009-10-04 16:59 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-10-04 14:59
ComboFix2.txt 2009-10-03 16:58

Avant-CF: 77 018 415 104 octets libres
Après-CF: 76 978 126 848 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect /usepmtimer

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
374 --- E O F --- 2009-09-19 18:10

Mon pc va bien ^^ merci beaucoup :)
et sinon, j'ai bien fait d'installer "la console de récupération Microsoft"?

voici le rapport Tcleaner.txt :

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\Qoobox: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\windows\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\windows\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\windows\Mes documents\Downloads\Programs\ComboFix.exe: trouvé !
C:\Documents and Settings\windows\Mes documents\Downloads\Programs\Rsit.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\Qoobox\Quarantine\catchme.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\windows\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\windows\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\windows\Mes documents\Downloads\Programs\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\Documents and Settings\windows\Mes documents\Downloads\Programs\Rsit.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Qoobox\Quarantine\catchme.log: supprimé !
C:\Qoobox: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

ok merci mais je n'ai plus que 2,7 méga alors que je suis normalement à 3,6, est-ce du à tous ce que je fais?

Voici le rapport javara

JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Oct 04 17:45:36 2009

Found and removed: C:\Documents and Settings\windows\Application Data\Sun\Java\jre1.6.0_07

Found and removed: C:\Documents and Settings\windows\Application Data\Sun\Java\jre1.6.0_13

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

Re

Ok merci mais je n'ai plus que 2,7 méga alors que je suis normalement à 3,6

Tu parle de quoi ;de ton débit internet?

Passe à la suite.
@+

oui mon débit, là je fais les mises à jour des logiciels

ok j'ai purger la restauration système, merci beaucoup pour ton aide, c'est sympa.

a+

ok, je la ferais demain. je la posterai le soir ou mardi.

salut, voici le rapport antivir :

Avira AntiVir Premium
Date de création du fichier de rapport : mardi 6 octobre 2009 18:58

La recherche porte sur 1780400 souches de virus.

Détenteur de la licence : hgvjh, lkjkk
Numéro de série : 1104701215-PEPWE-0001
Plateforme : Windows XP
Version de Windows : (Service Pack 3) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur : WINDOWS-6CC770A

Informations de version :
BUILD.DAT : 9.0.0.49 21377 Bytes 08/09/2009 14:26:00
AVSCAN.EXE : 9.0.3.7 466689 Bytes 03/09/2009 17:38:41
AVSCAN.DLL : 9.0.3.0 49409 Bytes 03/03/2009 09:21:02
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:11
LUKERES.DLL : 9.0.2.0 13569 Bytes 03/03/2009 09:21:31
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 24/06/2009 17:38:40
ANTIVIR2.VDF : 7.1.6.50 4333568 Bytes 29/09/2009 15:39:06
ANTIVIR3.VDF : 7.1.6.80 320512 Bytes 06/10/2009 16:53:57
Version du moteur : 8.2.1.33
AEVDF.DLL : 8.1.1.2 106867 Bytes 15/09/2009 17:37:14
AESCRIPT.DLL : 8.1.2.35 483707 Bytes 03/10/2009 08:40:20
AESCN.DLL : 8.1.2.5 127346 Bytes 03/09/2009 17:38:41
AERDL.DLL : 8.1.3.2 479604 Bytes 03/10/2009 08:40:19
AEPACK.DLL : 8.2.0.0 422261 Bytes 15/09/2009 17:37:14
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 03/09/2009 17:38:41
AEHEUR.DLL : 8.1.0.166 2003319 Bytes 03/10/2009 08:40:18
AEHELP.DLL : 8.1.7.0 237940 Bytes 03/09/2009 17:38:40
AEGEN.DLL : 8.1.1.67 364916 Bytes 03/10/2009 08:40:15
AEEMU.DLL : 8.1.1.0 393587 Bytes 03/10/2009 08:40:15
AECORE.DLL : 8.1.8.1 184693 Bytes 15/09/2009 17:37:13
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:30
AVPREF.DLL : 9.0.3.0 44289 Bytes 28/09/2009 15:38:30
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 07/11/2008 14:24:42
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:22
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:36:37
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:20:57
NETNT.DLL : 9.0.0.0 11521 Bytes 07/11/2008 14:40:59
RCIMAGE.DLL : 9.0.0.28 2623745 Bytes 03/09/2009 17:38:40
RCTEXT.DLL : 9.0.37.0 92417 Bytes 15/04/2009 09:12:50

Configuration pour la recherche actuelle :
Nom de la tâche...............................: Contrôle intégral du système
Fichier de configuration......................: c:\program files\avira\antivir desktop\sysscan.avp
Documentation.................................: bas
Action principale.............................: interactif
Action secondaire.............................: ignorer
Recherche sur les secteurs d'amorçage maître..: marche
Recherche sur les secteurs d'amorçage.........: marche
Secteurs d'amorçage...........................: C:,
Recherche dans les programmes actifs..........: marche
Recherche en cours sur l'enregistrement.......: marche
Recherche de Rootkits.........................: marche
Contrôle d'intégrité de fichiers système......: arrêt
Fichier mode de recherche.....................: Tous les fichiers
Recherche sur les archives....................: marche
Limiter la profondeur de récursivité..........: 20
Archive Smart Extensions......................: marche
Heuristique de macrovirus.....................: marche
Heuristique fichier...........................: moyen

Début de la recherche : mardi 6 octobre 2009 18:58

La recherche d'objets cachés commence.
'99007' objets ont été contrôlés, '0' objets cachés ont été trouvés.

La recherche sur les processus démarrés commence :
Processus de recherche 'wmiprvse.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avconfig.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'NMIndexingService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'DivXsm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Neuview Pro.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TeaTimer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'msmsgs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'realsched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'rundll32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'RTHDCPL.exe' - '1' module(s) sont contrôlés
Processus de recherche 'acrotray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LXSUPMON.EXE' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avwebgrd.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avmailc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TUProgSt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PnkBstrA.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mbamservice.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LSSrvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jqs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AppleMobileDeviceService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Vpnservice.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LEXPPS.EXE' - '1' module(s) sont contrôlés
Processus de recherche 'LEXBCES.EXE' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'nvsvc32.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'47' processus ont été contrôlés avec '47' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD1
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD2
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD3
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD4
[INFO] Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence :
Le registre a été contrôlé ( '59' fichiers).

La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\'
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
[REMARQUE] Ce fichier est un fichier système Windows.
[REMARQUE] Il est correct que ce fichier ne puisse pas être ouvert pour la recherche.
C:\Program Files\sina\SAP\update\setup.exe
[0] Type d'archive: NSIS
--> ProgramFilesDir/SAPlatform.exe
[RESULTAT] Contient le cheval de Troie TR/Spy.854016
C:\WINDOWS\SoftwareDistribution\Download\3d1833da22c812c44bf1735559ecc898\BIT22.tmp
[0] Type d'archive: CAB (Microsoft)
--> nvcplita.chm
[AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
[AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
C:\WINDOWS\system32\drivers\sptd.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !

Début de la désinfection :
C:\Program Files\sina\SAP\update\setup.exe
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '4b3f91da.qua' !

Fin de la recherche : mardi 6 octobre 2009 20:50
Temps nécessaire: 1:51:32 Heure(s)

La recherche a été effectuée intégralement

18293 Les répertoires ont été contrôlés
859003 Des fichiers ont été contrôlés
1 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
0 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
1 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
2 Impossible de contrôler des fichiers
859000 Fichiers non infectés
6453 Les archives ont été contrôlées
4 Avertissements
2 Consignes
99007 Des objets ont été contrôlés lors du Rootkitscan
0 Des objets cachés ont été trouvés

Non plus aucun souci, merci pour ton aide.

Salut, sais-tu si le teatimer de spybot est vraiment important? car il utilise quand même 95 200ko de la mémoire.

merci