Rapport HijackThis / Pages web non voulues

Voici le rapport GenProc. Le fichier "C:\Windows\system32\rtrtsaoh32.dll" n'est apparemment plus présent sur mon système. Dans le rapport ci-dessous j'ai supprimé la section O42 car je ne pense pas qu'elle soit vraiment nécessaire.

Rapport GenProc 2.657 [1] - 06/12/2009 à 22:34:02
@ Windows VISTA Service Pack 2 - Acer - Mode normal
@ Internet Explorer 8.0.6001.18828 [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Fais scanner le(s) fichier(s) suivant(s) sur ce site https://www.virustotal.com/gui/ :


C:\Windows\system32\rtrtsaoh32.dll


et poste le(s) rapport(s) obtenu(s) dans ta prochaine réponse.



~~~~ INFORMATION COMPLEMENTAIRE ~~~~


Rapport de ZHPDiag v1.24.36 par Nicolas Coolman
Run by Ludo at 06/12/2009 22:36:22
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium (6.0.6002) Service Pack 2
MSIE: Internet Explorer v8.0.6001.18828
MFIE: Mozilla Firefox (3.5.5)

Boot mode: Normal (Normal boot)
Total RAM: 3326 MB (63% free)
System drive C: has 19 GB (17%) free of 112 GB

---\\
[MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - C:\Program Files\Windows Defender\MSASCui.exe
[MD5.F2E2AAD0EE3E886161A907F473A10B20] - C:\Program Files\Microsoft IntelliType Pro\itype.exe
[MD5.F4E7979D8ADEBEEDEAD33019A5BD52BF] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe
[MD5.43221D88ADC872BED846B0B094EB293E] - C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
[MD5.8B591FD5B789244E796BCEE6084BC6DA] - C:\Program Files\Spamihilator\spamihilator.exe
[MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - C:\Program Files\Windows Sidebar\sidebar.exe
[MD5.35937EAD711207544E219C2A19A78A7D] - C:\Program Files\Windows Media Player\WMPNSCFG.exe
[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[MD5.3794B461C45882E06856F282EEF025AF] - C:\Windows\system32\svchost.exe
[MD5.5DEBC3519D489411073FA7E56FFB4A93] - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
[MD5.74279ED618C00EB4C534BA2B21583CBB] - C:\Windows\system32\Ati2evxx.exe
[MD5.0AAF6B848185899CF76AE04E62EAB3D2] - C:\Program Files\Alwil Software\Avast4\ashServ.exe
[MD5.56D0E6119DB156C964A6F1BDE7821866] - C:\Program Files\Cobian Backup 9\cbService.exe
[MD5.C88862F45AC3B447DF50E814BE2F6A13] - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
[MD5.5467F1FF0AF264566740F67E8B810735] - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
[MD5.559C9B7800FAC92FC515CD0003D7C631] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
[MD5.11F714F85530A2BD134074DC30E99FCA] - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
[MD5.00E36BEEA22C92D1030C6D8F80BC0F6A] - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - C:\Windows\system32\IoctlSvc.exe
[MD5.3978F3540329E16C0AC3BCF677E5669F] - C:\Windows\system32\lsass.exe
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - C:\Windows\system32\SLsvc.exe
[MD5.524BFBEA40E6E404737CCBC754647A2E] - C:\Windows\System32\spoolsv.exe
[MD5.B2EC3E1DEAC5F0A764BD3486D213A0AF] - c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
[MD5.D2F4F32B59440011174B4F8137AF4E0C] - c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
[MD5.3978704576A121A9204F8CC49A301A9B] - C:\Program Files\Windows Media Player\wmpnetwk.exe
[MD5.AED0DFF80C6B3914769407E78D7AB21A] - C:\Windows\system32\SearchIndexer.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/toolbar/ie8/sidebar.html

---\\
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Search Class - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

---\\
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - C:\Program Files\Core Services\DebugBar\DebugInfoBar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office 2007\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll

---\\
O3 - Toolbar: DebugBar - {3E1201F4-1707-409F-BB45-A5F192381DA0} - C:\Program Files\Core Services\DebugBar\DebugToolBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

---\\
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe
O4 - HKLM\..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [Spamihilator] C:\Program Files\Spamihilator\spamihilator.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKLM\..\policies\Explorer: [BindDirectlyToPropertySetStorage] Data=0
O4 - HKUS\S-1-5-18\..\Run: [rtrtsaoh32] rundll32 "C:\Windows\system32\rtrtsaoh32.dll" rtrtsaoh
O4 - HKUS\S-1-5-18\..\Run: [rtrtsaoh32] rundll32 "C:\Windows\system32\rtrtsaoh32.dll" rtrtsaoh
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

---\\
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.05\MediaManager\grab.html

---\\
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Windows\system32\msjava.dll
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI69DF~1\Office12\ONBttnIE.dll,103
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll,211
O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Program Files\Europa Casino\casino.ico
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI69DF~1\Office12\REFBARH.ICO

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - Broken Internet access because of LSP provider 'C:\Program Files\Bonjour\mdnsNSP.dll' missing
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\winrnr.dll

---\\
O15 - Trusted Zone: [HKCU\...\Domains] mappy.com
O15 - Trusted Zone: [HKCU\...\Domains] orange.fr

---\\
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://ushousecall02.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.neufsecurite.com/Ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office 2007\Office12\GrooveSystemServices.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: Cobian Backup 9 service (CobianBackupAmanita) - C:\Program Files\Cobian Backup 9\cbService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Software Updater (gusvc) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Machine Debug Manager (MDM) - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) - C:\Windows\system32\IoctlSvc.exe
O23 - Service: (rtrtsaoh) - C:\WindowsC:\Program Files\Common Files\Microsoft Shared\rtrtsaoh.dll
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: SQL Server Browser (SQLBrowser) - c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
O23 - Service: Enregistreur VSS SQL Server (SQLWriter) - c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - C:\Program Files\Windows Media Player\wmpnetwk.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Ad-Aware Update (Weekly).job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3195434689-1136824600-211385465-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3195434689-1136824600-211385465-1000UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{880DAAD8-D08F-426D-A831-53FB020A588E}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: PCLEPCI (PCLEPCI) - C:\Windows\system32\drivers\pclepci.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: (no object) (rtrtsaoh) - C:\Program Files\Common Files\Microsoft Shared\rtrtsaoh.dll
O41 - Driver: Pilote de port série (Serial) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Virtual Machine Monitor (vmm) - C:\Windows\system32\Drivers\vmm.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\

---\\
O44 - LFC:Last File Created 03/12/2009 - 13:07:44 ---A- C:\Windows\System32\config.nt
O44 - LFC:Last File Created 04/12/2009 - 21:12:56 ---A- C:\Windows\System32\lsdelete.exe
O44 - LFC:Last File Created 05/12/2009 - 20:42:23 ---A- C:\Windows\PFRO.log
O44 - LFC:Last File Created 06/12/2009 - 18:22:08 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 06/12/2009 - 18:22:08 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 06/12/2009 - 18:22:08 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 06/12/2009 - 18:22:08 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 06/12/2009 - 18:22:08 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 06/12/2009 - 22:07:41 ---A- C:\aaw7boot.log
O44 - LFC:Last File Created 06/12/2009 - 22:07:50 -S-A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 06/12/2009 - 22:11:18 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 11/11/2009 - 12:07:10 ---A- C:\Windows\wininit.ini
O44 - LFC:Last File Created 11/11/2009 - 18:50:24 ---A- C:\Windows\System32\FNTCACHE.DAT
O44 - LFC:Last File Created 17/11/2009 - 19:05:28 --HA- C:\Windows\System32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
O44 - LFC:Last File Created 20/11/2009 - 20:11:03 ---A- C:\Windows\System32\MsiExec.exe.log
O44 - LFC:Last File Created 21/11/2009 - 16:30:37 ---A- C:\Windows\VBAddin.INI
O44 - LFC:Last File Created 22/11/2009 - 21:51:02 ---A- C:\Windows\NeroDigital.ini
O44 - LFC:Last File Created 25/11/2009 - 00:47:28 ---A- C:\Windows\System32\AvastSS.scr
O44 - LFC:Last File Created 25/11/2009 - 00:48:57 ---A- C:\Windows\System32\drivers\aswRdr.sys
O44 - LFC:Last File Created 25/11/2009 - 00:49:07 ---A- C:\Windows\System32\drivers\aswTdi.sys
O44 - LFC:Last File Created 25/11/2009 - 00:49:48 ---A- C:\Windows\System32\drivers\aswMonFlt.sys
O44 - LFC:Last File Created 25/11/2009 - 00:50:00 ---A- C:\Windows\System32\drivers\aswFsBlk.sys
O44 - LFC:Last File Created 25/11/2009 - 00:50:12 ---A- C:\Windows\System32\drivers\aswSP.sys
O44 - LFC:Last File Created 25/11/2009 - 00:54:29 ---A- C:\Windows\System32\aswBoot.exe

---\\
O51 - MPSK:{507d04ed-61de-11dc-8f3a-806e6f6e6963}\Shell\AutoRun\command - E:\autorun\autorun.exe

---\\
O63 - Logiciel: HijackThis 2.0.2


End of the scan: 407 lines


----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 22:37:05 ~~

Le fichier C:\Windows\system32\rtrtsaoh32.dll ne se trouve pas sur mon système. Mais bon pour le moment le problème n'est pas réapparu, peut-être que c'est grâce à Malwarebytes' Anti-Malware.