Trojan :Java/ Selace.K

bonjour jlp,
voilà le rapport:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Propriétaire at 2009-12-16 14:43:48
Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2
System drive C: has 31 GB (45%) free of 69 GB
Total RAM: 503 MB (12% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:44:55, on 16/12/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\System32\osk.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Propriétaire\Desktop\RSIT.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\trend micro\Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=\\.\globalroot\systemroot\system32\userinit.exe,
O1 - Hosts: ::1 localhost
O3 - Toolbar: Mob Wars Toolbar - {6857857C-15D3-435D-AF19-E0217298B416} - C:\Program Files\Mob Wars Toolbar\Toolbar.dll
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [vegas] rundll32.exe C:\Windows\system32\sshnas.dll,DllWork (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [] OSK.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [vegas] rundll32.exe C:\Windows\system32\sshnas.dll,DllWork (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [] OSK.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O13 - Gopher Prefix:
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

le voici!

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3374
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865

16/12/2009 15:42:10
mbam-log-2009-12-16 (15-42-10).txt

Type de recherche: Examen rapide
Eléments examinés: 93282
Temps écoulé: 19 minute(s), 21 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 6

Processus mémoire infecté(s):
C:\WINDOWS\Temp\c.exe (Trojan.Dropper) -> Failed to unload process.
C:\WINDOWS\Temp\d.exe (Trojan.Dropper) -> Failed to unload process.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zagrebland (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vegas (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\b.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\c.exe (Trojan.Dropper) -> Delete on reboot.
C:\WINDOWS\Temp\d.exe (Trojan.Dropper) -> Delete on reboot.
C:\WINDOWS\System32\sshnas.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

moi j'ai le meme probleme est sa me mais sa
Logfile of random's system information tool 1.08 (written by random/random)
Run by Thomas at 2011-02-28 19:02:27
Microsoft Windows 7 Édition Familiale Premium
System drive C: has 207 GB (44%) free of 470 GB
Total RAM: 4095 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:02:37, on 28/02/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Thomas\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Thomas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [Hotkey Utility] C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
O4 - HKLM\..\Run: [EgisTecLiveUpdate] "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O4 - Global Startup: Secunia PSI Tray.lnk = C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Unknown owner - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Secunia PSI Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\PSIA.exe
O23 - Service: Secunia Update Agent - Secunia - C:\Program Files (x86)\Secunia\PSI\sua.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3374
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865

16/12/2009 16:17:59
mbam-log-2009-12-16 (16-17-58).txt

Type de recherche: Examen rapide
Eléments examinés: 92811
Temps écoulé: 20 minute(s), 49 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

C'est fait-voir ci-dessus!

############################## | UsbFix V6.064 |

User : Propriétaire (Administrateurs) # PC-DE-PROPRIÉTA
Update on 16/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 16:37:12 | 16/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Genuine Intel(R) CPU T2050 @ 1.60GHz
Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 67,36 Go (30,09 Go free) # NTFS
D:\ -> Disque fixe local # 5,61 Go (578,84 Mo free) [HP_RECOVERY] # NTFS
E:\ -> Disque fixe local # 1,55 Go (1,12 Go free) [OS_TOOLS] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque fixe local # 37,25 Go (30,11 Go free) [Externe T] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe 384
C:\Windows\system32\csrss.exe 456
C:\Windows\system32\csrss.exe 500
C:\Windows\system32\wininit.exe 508
C:\Windows\system32\winlogon.exe 540
C:\Windows\system32\services.exe 588
C:\Windows\system32\lsass.exe 600
C:\Windows\system32\lsm.exe 608
C:\Windows\system32\svchost.exe 764
C:\Windows\system32\svchost.exe 832
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe 924
C:\Windows\System32\svchost.exe 1048
C:\Windows\System32\svchost.exe 1120
C:\Windows\system32\svchost.exe 1172
C:\Windows\system32\svchost.exe 1280
C:\Windows\system32\SLsvc.exe 1380
C:\Windows\system32\svchost.exe 1440
C:\Windows\system32\svchost.exe 1580
C:\Windows\system32\Dwm.exe 1852
C:\Windows\Explorer.EXE 1868
C:\Windows\System32\osk.exe 1880
C:\Windows\system32\taskeng.exe 2008
C:\Windows\System32\spoolsv.exe 2016
C:\Windows\system32\svchost.exe 404
C:\Program Files\InterVideo\DVD Check\DVDCheck.exe 1432
C:\Windows\System32\alg.exe 1296
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 444
C:\Program Files\Bonjour\mDNSResponder.exe 1844
C:\Windows\system32\svchost.exe 1180
C:\Windows\system32\dllhost.exe 660
C:\Windows\system32\svchost.exe 652
C:\Program Files\iPod\bin\iPodService.exe 2356
C:\Windows\system32\svchost.exe 2580
C:\Windows\system32\svchost.exe 2664
C:\Windows\System32\snmptrap.exe 2708
C:\Windows\system32\svchost.exe 2740
C:\Windows\System32\vds.exe 2848
C:\Windows\system32\vssvc.exe 2900
C:\Windows\system32\svchost.exe 2932
C:\Windows\System32\svchost.exe 3040
C:\Program Files\Windows Media Player\wmpnetwk.exe 3064
C:\Windows\system32\SearchIndexer.exe 3112
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 3212
C:\Windows\system32\taskeng.exe 3360
C:\Program Files\Microsoft Security Essentials\msseces.exe 4080
C:\Program Files\Mozilla Firefox\firefox.exe 3764
C:\Windows\system32\wbem\unsecapp.exe 124
C:\Windows\system32\wbem\wmiprvse.exe 3716
C:\Windows\system32\ctfmon.exe 3828
C:\Windows\system32\conime.exe 240
C:\Windows\system32\wbem\wmiprvse.exe 3756

################## | Fichiers # Dossiers infectieux |

C:\Windows\Temp\a.dat

################## | Registre # Clés infectieuses |


################## | Registre # Mountpoints2 |


################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.064 ! |

############################## | UsbFix V6.064 |

User : Propriétaire (Administrateurs) # PC-DE-PROPRIÉTA
Update on 16/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 17:40:03 | 16/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Genuine Intel(R) CPU T2050 @ 1.60GHz
Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 67,36 Go (30,03 Go free) # NTFS
D:\ -> Disque fixe local # 5,61 Go (578,84 Mo free) [HP_RECOVERY] # NTFS
E:\ -> Disque fixe local # 1,55 Go (1,12 Go free) [OS_TOOLS] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque fixe local # 37,25 Go (30,11 Go free) [Externe T] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe 380
C:\Windows\system32\csrss.exe 452
C:\Windows\system32\csrss.exe 496
C:\Windows\system32\wininit.exe 504
C:\Windows\system32\winlogon.exe 536
C:\Windows\system32\services.exe 584
C:\Windows\system32\lsass.exe 596
C:\Windows\system32\lsm.exe 604
C:\Windows\system32\svchost.exe 752
C:\Windows\system32\svchost.exe 820
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe 908
C:\Windows\System32\svchost.exe 1032
C:\Windows\System32\svchost.exe 1104
C:\Windows\system32\svchost.exe 1160
C:\Windows\system32\svchost.exe 1268
C:\Windows\system32\SLsvc.exe 1304
C:\Windows\system32\svchost.exe 1516
C:\Windows\system32\svchost.exe 1652
C:\Windows\System32\osk.exe 1820
C:\Windows\Explorer.EXE 1836
C:\Windows\system32\Dwm.exe 1844
C:\Windows\system32\taskeng.exe 1980
C:\Windows\system32\runonce.exe 2024
C:\Windows\System32\spoolsv.exe 2032
C:\Windows\system32\svchost.exe 272
C:\Windows\system32\conime.exe 372
C:\Windows\System32\alg.exe 1900
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 932
C:\Program Files\Bonjour\mDNSResponder.exe 828
C:\Windows\system32\svchost.exe 1004
C:\Windows\system32\dllhost.exe 1088
C:\Windows\system32\svchost.exe 1892
C:\Program Files\iPod\bin\iPodService.exe 2256
C:\Windows\system32\msiexec.exe 2276
C:\Windows\system32\svchost.exe 2380
C:\Windows\system32\svchost.exe 2448
C:\Windows\System32\snmptrap.exe 2528
C:\Windows\system32\svchost.exe 2556
C:\Windows\System32\vds.exe 2652
C:\Windows\system32\vssvc.exe 2700
C:\Windows\system32\svchost.exe 2728
C:\Windows\System32\svchost.exe 2804
C:\Program Files\Windows Media Player\wmpnetwk.exe 2856
C:\Windows\system32\SearchIndexer.exe 2876
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 2952
C:\Windows\system32\taskeng.exe 3544
C:\Windows\system32\wbem\wmiprvse.exe 900

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\Windows\Temp\a.dat
Supprimé ! C:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! D:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! E:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! G:\$Recycle.Bin\S-1-5-21-2300672525-3946543421-3176861145-1003
Supprimé ! G:\$Recycle.Bin\S-1-5-21-300321534-1008158853-866380177-1003
Supprimé ! G:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! G:\Recycler\S-1-5-21-1417001333-1897051121-2146802571-500
Supprimé ! G:\Recycler\S-1-5-21-1614895754-1364589140-1177238915-1003
Supprimé ! G:\Recycler\S-1-5-21-3348413131-2386783933-2291297110-1003
Non supprimé ! G:\Recycler\S-1-5-21-3675768298-2992918094-1971153811-1007
Supprimé ! G:\Recycler\S-1-5-21-492347479-3671548419-635268728-1005
Supprimé ! G:\Recycler\S-1-5-21-823518204-1958367476-725345543-1003

################## | Registre # Clés infectieuses |


################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[17/04/2007 02:57|--a------|0] C:\C_USERPART
[?|?|?] C:\hiberfil.sys
[14/12/2009 21:43|-rahs----|0] C:\IO.SYS
[14/12/2009 21:43|-rahs----|0] C:\MSDOS.SYS
[?|?|?] C:\pagefile.sys
[16/12/2009 17:49|--a------|4132] C:\UsbFix.txt
[30/08/2006 09:38|---hs----|435752] D:\BOOTMGR
[29/05/2006 10:30|---hs----|778] D:\CSP.DAT
[01/07/2005 13:16|---hs----|102] D:\Desktop.ini
[18/08/2009 01:16|---hs----|0] D:\DRECOVERY
[22/11/2004 17:28|---hs----|8130] D:\Folder.htt
[01/02/2007 17:42|---hs----|76936] D:\Info.exe
[28/09/2007 08:52|---hs----|1228] D:\MASTER.LOG
[09/01/2007 10:23|---hs----|710200] D:\MASTER.LOG.COPY
[12/05/2006 14:07|---hs----|0] D:\NTFS
[10/09/2002 11:58|---hs----|181616] D:\protect.ed
[21/10/2005 11:12|---hs----|42] D:\st_log.ini
[08/02/2002 18:44|---hs----|88038] D:\Warning.bmp
[28/09/2007 06:25|--a------|50] E:\HP_WINRE
[09/01/2007 10:23|--a------|710200] E:\MASTER.LOG.COPY
[18/11/2009 08:47|-ra------|528] E:\MediaID.bin
[24/09/2009 06:56|--a------|19456] G:\4eme de couv..doc
[19/12/2005 08:37|-rahs----|9150222] G:\AVG7DB_F.DAT
[23/07/2005 13:09|-rahs----|216] G:\boot.ini
[05/08/2004 09:00|-rahs----|4952] G:\Bootfont.bin
[04/09/2007 09:12|--ahs----|401133568] G:\hiberfil.sys
[23/07/2005 17:02|-rahs----|0] G:\IO.SYS
[16/10/2009 14:42|--a------|719872] G:\Manuscrit Papa.doc
[23/07/2005 17:02|-rahs----|0] G:\MSDOS.SYS
[05/08/2004 09:00|-rahs----|47564] G:\ntdetect.com
[05/08/2004 09:00|-rahs----|251712] G:\ntldr
[04/09/2007 09:12|--ahs----|603979776] G:\pagefile.sys
[25/09/2009 11:30|--a------|19968] G:\Pages de garde.doc
[06/10/2009 08:30|--a------|72160] G:\R‚siliation.pdf
[29/06/2009 11:11|--ah-----|162] G:\~$ T Meyer.doc
[01/12/2005 01:10|--ah-----|22528] G:\~WRL0003.tmp

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# E:\autorun.inf -> Dossier créé par UsbFix.
# G:\autorun.inf -> Dossier créé par UsbFix.

################## | Cracks / Keygens / Serials |


################## | Upload |

Veuillez envoyer le fichier : C:\Users\PROPRI~1\Desktop\UsbFix_Upload_Me_PC-de-Propri‚ta.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

Le voilà (par contre j'ai une fenêtre intempestive qui s'affiche avec le message: Internet Explorer a cessé de fonctionner....)


############################## | UsbFix V6.064 |

User : Propriétaire (Administrateurs) # PC-DE-PROPRIÉTA
Update on 16/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 22:27:39 | 16/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Genuine Intel(R) CPU T2050 @ 1.60GHz
Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 67,36 Go (30,06 Go free) # NTFS
D:\ -> Disque fixe local # 5,61 Go (478,84 Mo free) [HP_RECOVERY] # NTFS
E:\ -> Disque fixe local # 1,55 Go (1,12 Go free) [OS_TOOLS] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque fixe local # 37,25 Go (30,22 Go free) [Externe T] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe 380
C:\Windows\system32\csrss.exe 452
C:\Windows\system32\csrss.exe 496
C:\Windows\system32\wininit.exe 504
C:\Windows\system32\winlogon.exe 536
C:\Windows\system32\services.exe 584
C:\Windows\system32\lsass.exe 596
C:\Windows\system32\lsm.exe 604
C:\Windows\system32\svchost.exe 748
C:\Windows\system32\svchost.exe 816
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe 912
C:\Windows\System32\svchost.exe 948
C:\Windows\System32\svchost.exe 1072
C:\Windows\System32\svchost.exe 1120
C:\Windows\system32\svchost.exe 1160
C:\Windows\system32\SLsvc.exe 1468
C:\Windows\system32\svchost.exe 1608
C:\Windows\system32\svchost.exe 1748
C:\Windows\System32\osk.exe 1908
C:\Windows\Explorer.EXE 1916
C:\Windows\system32\Dwm.exe 1928
C:\Windows\system32\taskeng.exe 296
C:\Windows\System32\spoolsv.exe 440
C:\Windows\system32\runonce.exe 372
C:\Windows\system32\svchost.exe 812
C:\Windows\system32\conime.exe 1404
C:\Windows\System32\alg.exe 1408
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1684
C:\Program Files\Bonjour\mDNSResponder.exe 1960
C:\Windows\system32\svchost.exe 280
C:\Windows\system32\dllhost.exe 1460
C:\Windows\system32\svchost.exe 656
C:\Program Files\iPod\bin\iPodService.exe 2192
C:\Windows\system32\msiexec.exe 2244
C:\Windows\system32\svchost.exe 2404
C:\Windows\system32\svchost.exe 2504
C:\Windows\System32\snmptrap.exe 2544
C:\Windows\system32\svchost.exe 2580
C:\Windows\System32\vds.exe 2684
C:\Windows\system32\vssvc.exe 2740
C:\Windows\system32\svchost.exe 2824
C:\Windows\System32\svchost.exe 2872
C:\Windows\System32\svchost.exe 2944
C:\Program Files\Windows Media Player\wmpnetwk.exe 3000
C:\Windows\system32\SearchIndexer.exe 3044
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 3188
C:\Windows\system32\wbem\wmiprvse.exe 3416

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! D:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! E:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! G:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Non supprimé ! G:\Recycler\S-1-5-21-3675768298-2992918094-1971153811-1007

################## | Registre # Clés infectieuses |


################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[17/04/2007 02:57|--a------|0] C:\C_USERPART
[?|?|?] C:\hiberfil.sys
[14/12/2009 21:43|-rahs----|0] C:\IO.SYS
[14/12/2009 21:43|-rahs----|0] C:\MSDOS.SYS
[?|?|?] C:\pagefile.sys
[16/12/2009 22:37|--a------|3590] C:\UsbFix.txt
[30/08/2006 09:38|---hs----|435752] D:\BOOTMGR
[29/05/2006 10:30|---hs----|778] D:\CSP.DAT
[01/07/2005 13:16|---hs----|102] D:\Desktop.ini
[18/08/2009 01:16|---hs----|0] D:\DRECOVERY
[22/11/2004 17:28|---hs----|8130] D:\Folder.htt
[01/02/2007 17:42|---hs----|76936] D:\Info.exe
[28/09/2007 08:52|---hs----|1228] D:\MASTER.LOG
[09/01/2007 10:23|---hs----|710200] D:\MASTER.LOG.COPY
[12/05/2006 14:07|---hs----|0] D:\NTFS
[10/09/2002 11:58|---hs----|181616] D:\protect.ed
[21/10/2005 11:12|---hs----|42] D:\st_log.ini
[08/02/2002 18:44|---hs----|88038] D:\Warning.bmp
[28/09/2007 06:25|--a------|50] E:\HP_WINRE
[09/01/2007 10:23|--a------|710200] E:\MASTER.LOG.COPY
[18/11/2009 08:47|-ra------|528] E:\MediaID.bin
[24/09/2009 06:56|--a------|19456] G:\4eme de couv..doc
[19/12/2005 08:37|-rahs----|9150222] G:\AVG7DB_F.DAT
[23/07/2005 13:09|-rahs----|216] G:\boot.ini
[05/08/2004 09:00|-rahs----|4952] G:\Bootfont.bin
[04/09/2007 09:12|--ahs----|401133568] G:\hiberfil.sys
[23/07/2005 17:02|-rahs----|0] G:\IO.SYS
[16/10/2009 14:42|--a------|719872] G:\Manuscrit Papa.doc
[23/07/2005 17:02|-rahs----|0] G:\MSDOS.SYS
[05/08/2004 09:00|-rahs----|47564] G:\ntdetect.com
[05/08/2004 09:00|-rahs----|251712] G:\ntldr
[04/09/2007 09:12|--ahs----|603979776] G:\pagefile.sys
[25/09/2009 11:30|--a------|19968] G:\Pages de garde.doc
[06/10/2009 08:30|--a------|72160] G:\R‚siliation.pdf
[29/06/2009 11:11|--ah-----|162] G:\~$ T Meyer.doc
[01/12/2005 01:10|--ah-----|22528] G:\~WRL0003.tmp

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# E:\autorun.inf -> Dossier créé par UsbFix.
# G:\autorun.inf -> Dossier créé par UsbFix.

################## | Cracks / Keygens / Serials |


################## | Upload |

Veuillez envoyer le fichier : C:\Users\PROPRI~1\Desktop\UsbFix_Upload_Me_PC-de-Propri‚ta.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

Bonjour,
Combofix n'est pas dispo sur le lien donné; y-en t-il un autre safe où je peux le télécharger?

Il n'est malheureusement disponible nulle part! Je vais essayer un peu plus tard dans la soirée.

BINGO :)


ComboFix 09-11-07.02 - Propriétaire 17/12/2009 22:23.2.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6002.2.1252.33.1036.18.503.80 [GMT 1:00]
Lancé depuis: c:\users\Propriétaire\Desktop\antibagle1.exe
SP: BitDefender AntiSpam *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
- Mode FONCTIONNALITES REDUITES -
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-11-17 au 2009-12-17 ))))))))))))))))))))))))))))))))))))
.

2009-12-17 21:27 . 2009-12-17 21:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-12-16 13:44 . 2007-02-13 10:39 184320 ----a-w- c:\windows\system32\igfxres.dll
2009-12-16 13:14 . 2009-12-16 13:16 -------- d-----w- C:\rsit
2009-12-09 05:06 . 2009-11-03 19:41 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-09 05:06 . 2009-11-03 21:42 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 05:06 . 2009-11-03 21:43 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 05:06 . 2009-10-07 11:36 243712 ----a-w- c:\windows\system32\rastls.dll
2009-12-08 21:25 . 2009-12-09 18:36 -------- d-----w- c:\program files\GamesCampus
2009-12-08 21:07 . 2009-12-09 18:37 -------- d-----w- c:\program files\Pando Networks
2009-12-07 08:31 . 2009-12-07 08:31 4844296 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-12-07 08:30 . 2009-12-03 15:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-07 08:30 . 2009-12-03 15:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-07 08:30 . 2009-12-07 08:32 4096 d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-07 08:03 . 2009-12-07 08:03 -------- d-----w- c:\program files\SystemRequirementsLab
2009-12-02 23:03 . 2009-12-02 23:10 -------- d-----w- C:\Intel
2009-12-01 09:52 . 2009-12-01 09:52 -------- d-----w- c:\programdata\Malwarebytes
2009-12-01 05:50 . 2009-12-01 05:52 4096 d-----w- c:\program files\QuickTime
2009-11-29 17:12 . 2009-12-16 21:47 -------- d-----w- C:\UsbFix
2009-11-28 17:54 . 2009-11-28 17:54 -------- d-----w- C:\ToolBar SD
2009-11-28 14:33 . 2009-12-16 15:18 -------- d-----w- c:\program files\trend micro
2009-11-27 22:33 . 2009-11-29 16:32 81984 ----a-w- c:\windows\system32\bdod.bin
2009-11-27 17:32 . 2009-11-29 16:33 -------- d-----w- c:\program files\Common Files\BitDefender
2009-11-27 17:19 . 2009-11-27 17:20 -------- d-----w- c:\program files\BitTorrent
2009-11-26 23:29 . 2009-11-27 17:27 -------- d-----w- c:\program files\Trojan Remover
2009-11-26 23:29 . 2009-11-26 23:29 -------- d-----w- c:\programdata\Simply Super Software
2009-11-26 01:37 . 2009-10-29 09:17 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-25 13:15 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll
2009-11-25 13:15 . 2009-08-11 16:44 1248768 ----a-w- c:\windows\system32\msxml3.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-17 20:33 . 2006-12-06 18:31 12 ----a-w- c:\windows\bthservsdp.dat
2009-12-16 15:38 . 2006-11-02 15:45 678956 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-16 15:38 . 2006-11-02 15:45 128004 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-10 04:37 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-02 23:02 . 2007-04-17 01:25 -------- d-----w- c:\program files\CONEXANT
2009-12-02 22:36 . 2009-08-17 14:52 -------- d-----w- c:\program files\InterVideo
2009-12-02 22:36 . 2007-04-17 01:52 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-11-21 06:40 . 2009-12-09 05:07 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 05:07 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 06:34 . 2009-12-09 05:07 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 04:59 . 2009-12-09 05:07 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-17 11:53 . 2009-11-17 11:53 -------- d-----w- c:\program files\Windows Portable Devices
2009-11-17 11:53 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-17 11:52 . 2009-11-17 11:52 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-17 02:26 . 2007-04-17 02:06 4096 d-----w- c:\program files\Java
2009-11-12 09:59 . 2009-09-17 08:58 -------- d-----w- c:\program files\Safari
2009-11-12 09:56 . 2009-11-12 09:56 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
2009-11-09 06:00 . 2009-11-09 06:00 -------- d-----w- c:\program files\VideoLAN
2009-11-05 12:36 . 2009-11-05 12:34 -------- d-----w- c:\program files\iTunes
2009-11-05 12:35 . 2009-09-13 21:07 -------- d-----w- c:\program files\iPod
2009-11-05 12:35 . 2009-09-14 09:29 -------- d-----w- c:\program files\Common Files\Apple
2009-11-05 12:27 . 2009-11-05 12:27 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-11-02 19:42 . 2009-10-03 09:13 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-22 06:32 . 2009-10-22 06:32 24576 d-----w- c:\program files\Mob Wars Toolbar
2009-10-20 04:00 . 2009-08-17 14:56 -------- d-----w- c:\program files\Google
2009-10-11 03:17 . 2009-09-12 11:13 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-08 21:08 . 2009-11-17 06:37 234496 ----a-w- c:\windows\system32\oleacc.dll
2009-10-08 21:08 . 2009-11-17 06:37 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2009-10-08 21:07 . 2009-11-17 06:37 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2009-10-01 01:02 . 2009-11-17 06:38 2537472 ----a-w- c:\windows\system32\wpdshext.dll
2009-10-01 01:02 . 2009-11-17 06:39 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe
2009-10-01 01:02 . 2009-11-17 06:38 334848 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2009-10-01 01:02 . 2009-11-17 06:38 87552 ----a-w- c:\windows\system32\WPDShServiceObj.dll
2009-10-01 01:02 . 2009-11-17 06:39 31232 ----a-w- c:\windows\system32\BthMtpContextHandler.dll
2009-10-01 01:01 . 2009-11-17 06:38 546816 ----a-w- c:\windows\system32\wpd_ci.dll
2009-10-01 01:01 . 2009-11-17 06:38 160256 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-10-01 01:01 . 2009-11-17 06:39 60928 ----a-w- c:\windows\system32\PortableDeviceConnectApi.dll
2009-10-01 01:01 . 2009-11-17 06:38 350208 ----a-w- c:\windows\system32\WPDSp.dll
2009-10-01 01:01 . 2009-11-17 06:38 196608 ----a-w- c:\windows\system32\PortableDeviceWMDRM.dll
2009-10-01 01:01 . 2009-11-17 06:38 100864 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-10-01 01:01 . 2009-11-17 06:39 81920 ----a-w- c:\windows\system32\wpdbusenum.dll
2009-09-25 02:10 . 2009-11-17 06:40 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2009-09-25 02:07 . 2009-11-17 06:40 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-09-25 02:04 . 2009-11-17 06:40 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-09-25 01:49 . 2009-11-17 06:39 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2009-09-25 01:48 . 2009-11-17 06:39 351232 ----a-w- c:\windows\system32\XpsPrint.dll
2009-09-25 01:38 . 2009-11-17 06:39 847360 ----a-w- c:\windows\system32\OpcServices.dll
2009-09-25 01:36 . 2009-11-17 06:40 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2009-09-25 01:35 . 2009-11-17 06:40 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2009-09-25 01:33 . 2009-11-17 06:40 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2009-09-25 01:33 . 2009-11-17 06:40 829440 ----a-w- c:\windows\system32\d3d10warp.dll
2009-09-25 01:33 . 2009-11-17 06:40 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2009-09-25 01:32 . 2009-11-17 06:40 252928 ----a-w- c:\windows\system32\dxdiag.exe
2009-09-25 01:31 . 2009-11-17 06:39 519680 ----a-w- c:\windows\system32\d3d11.dll
2009-09-25 01:31 . 2009-11-17 06:39 486912 ----a-w- c:\windows\system32\d3d10level9.dll
2009-09-25 01:31 . 2009-11-17 06:39 161280 ----a-w- c:\windows\system32\d3d10_1.dll
2009-09-25 01:31 . 2009-11-17 06:39 218112 ----a-w- c:\windows\system32\d3d10_1core.dll
2009-09-25 01:31 . 2009-11-17 06:39 1030144 ----a-w- c:\windows\system32\d3d10.dll
2009-09-25 01:31 . 2009-11-17 06:40 828928 ----a-w- c:\windows\system32\d2d1.dll
2009-09-25 01:30 . 2009-11-17 06:39 190464 ----a-w- c:\windows\system32\d3d10core.dll
2009-09-25 01:30 . 2009-11-17 06:39 481792 ----a-w- c:\windows\system32\dxgi.dll
2009-09-25 01:27 . 2009-11-17 06:40 634880 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2009-09-25 01:27 . 2009-11-17 06:40 37888 ----a-w- c:\windows\system32\cdd.dll
2009-09-25 01:27 . 2009-11-17 06:39 793088 ----a-w- c:\windows\system32\FntCache.dll
2009-09-25 01:27 . 2009-11-17 06:39 1064448 ----a-w- c:\windows\system32\DWrite.dll
2009-09-24 22:54 . 2009-11-17 06:40 258048 ----a-w- c:\windows\system32\winspool.drv
2009-09-24 22:54 . 2009-11-17 06:40 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2009-09-24 22:54 . 2009-11-17 06:40 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{6857857C-15D3-435D-AF19-E0217298B416}"= "c:\program files\Mob Wars Toolbar\Toolbar.dll" [2009-10-22 1432576]

[HKEY_CLASSES_ROOT\clsid\{6857857c-15d3-435d-af19-e0217298b416}]
[HKEY_CLASSES_ROOT\FCTB000058757.IEToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{AD0FF573-4DD1-4CF7-AA25-41280783CA54}]
[HKEY_CLASSES_ROOT\FCTB000058757.IEToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{6857857C-15D3-435D-AF19-E0217298B416}"= "c:\program files\Mob Wars Toolbar\Toolbar.dll" [2009-10-22 1432576]

[HKEY_CLASSES_ROOT\clsid\{6857857c-15d3-435d-af19-e0217298b416}]
[HKEY_CLASSES_ROOT\FCTB000058757.IEToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{AD0FF573-4DD1-4CF7-AA25-41280783CA54}]
[HKEY_CLASSES_ROOT\FCTB000058757.IEToolbar]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WatchDog"="c:\program files\InterVideo\DVD Check\DVDCheck.exe" [2006-09-05 184320]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 734872]
DVD Check.lnk - c:\program files\InterVideo\DVD Check\DVDCheck.exe [2009-8-17 184320]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):dd,b0,28,28,6f,3a,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-4256323067-1558944976-3713174125-1003]
"EnableNotifications"=dword:00000001
"EnableNotificationsRef"=dword:00000001

R2 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [16/09/2009 11:57 21504]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\System32\drivers\MpNWMon.sys [18/06/2009 17:48 42480]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [02/06/2009 22:20 4233728]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [02/11/2006 11:25 167936]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - MBR
*Deregistered* - mbr

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenu du dossier 'Tâches planifiées'

2009-12-17 c:\windows\Tasks\User_Feed_Synchronization-{64410EAB-C78F-47E0-B503-05273344A0F4}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\Propriétaire\AppData\Roaming\Mozilla\Firefox\Profiles\blohm7v3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://search.freecause.com/search?fr=freecause&ourmark=3&type=58757&p=
FF - component: c:\users\Propriétaire\AppData\Roaming\Mozilla\Firefox\Profiles\blohm7v3.default\extensions\{18b8f08d-62fe-4dfc-ad6c-9ce46515d5ec}\components\Engine.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - ORPHELINS SUPPRIMES - - - -

Toolbar-Locked - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-17 22:28
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x83B87369]<<
kernel: MBR read successfully
user & kernel MBR OK

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2b,f7,a8,d5,e0,f3,2b,43,90,24,1a,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2b,f7,a8,d5,e0,f3,2b,43,90,24,1a,\

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2009-12-17 22:47
ComboFix-quarantined-files.txt 2009-12-17 21:47

Avant-CF: 32 342 138 880 octets libres
Après-CF: 32 285 421 568 octets libres

- - End Of File - - 8AF01E637264231C8D08F169BA2E64DB

bonsoir jlp
désolée j'étais off quelques jours;
il y a du mieux concernant mon ordi mais parfois un écran bleu s'affiche et celui s'éteint brutalement!

voici le rapport Usbfix:


############################## | UsbFix V6.064 |

User : Propriétaire (Administrateurs) # PC-DE-PROPRIÉTA
Update on 16/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 21:34:26 | 22/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Genuine Intel(R) CPU T2050 @ 1.60GHz
Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 67,36 Go (29,74 Go free) # NTFS
D:\ -> Disque fixe local # 5,61 Go (578,84 Mo free) [HP_RECOVERY] # NTFS
E:\ -> Disque fixe local # 1,55 Go (1,12 Go free) [OS_TOOLS] # NTFS
F:\ -> Disque CD-ROM

############################## | Processus actifs |

C:\Windows\System32\smss.exe 380
C:\Windows\system32\csrss.exe 448
C:\Windows\system32\csrss.exe 492
C:\Windows\system32\wininit.exe 500
C:\Windows\system32\winlogon.exe 532
C:\Windows\system32\services.exe 580
C:\Windows\system32\lsass.exe 592
C:\Windows\system32\lsm.exe 600
C:\Windows\system32\svchost.exe 752
C:\Windows\system32\svchost.exe 820
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe 900
C:\Windows\System32\svchost.exe 1020
C:\Windows\System32\svchost.exe 1092
C:\Windows\system32\svchost.exe 1136
C:\Windows\system32\svchost.exe 1256
C:\Windows\system32\SLsvc.exe 1324
C:\Windows\system32\svchost.exe 1656
C:\Windows\system32\Dwm.exe 1772
C:\Windows\system32\svchost.exe 1872
C:\Windows\Explorer.EXE 1892
C:\Windows\System32\osk.exe 1904
C:\Windows\system32\runonce.exe 236
C:\Windows\system32\taskeng.exe 12
C:\Windows\System32\spoolsv.exe 744
C:\Windows\system32\conime.exe 1192
C:\Windows\system32\svchost.exe 1076
C:\Windows\System32\alg.exe 1224
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 400
C:\Program Files\Application Updater\ApplicationUpdater.exe 924
C:\Program Files\Bonjour\mDNSResponder.exe 736
C:\Windows\system32\svchost.exe 1216
C:\Windows\system32\dllhost.exe 576
C:\Windows\system32\svchost.exe 1988
C:\Program Files\iPod\bin\iPodService.exe 2072
C:\Windows\system32\msiexec.exe 2100
C:\Windows\system32\svchost.exe 2284
C:\Windows\system32\svchost.exe 2372
C:\Windows\System32\snmptrap.exe 2428
C:\Windows\system32\svchost.exe 2456
C:\Windows\System32\vds.exe 2540
C:\Windows\system32\vssvc.exe 2616
C:\Windows\system32\svchost.exe 2644
C:\Windows\System32\svchost.exe 2736
C:\Program Files\Windows Media Player\wmpnetwk.exe 2796
C:\Windows\system32\SearchIndexer.exe 2828
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 2948
C:\Windows\system32\taskeng.exe 3732
C:\Windows\system32\wbem\wmiprvse.exe 4024

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! D:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003
Supprimé ! E:\$Recycle.Bin\S-1-5-21-4256323067-1558944976-3713174125-1003

################## | Registre # Clés infectieuses |

Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[17/12/2009 22:47|--a------|16125] C:\ComboFix.txt
[17/04/2007 02:57|--a------|0] C:\C_USERPART
[?|?|?] C:\hiberfil.sys
[14/12/2009 21:43|-rahs----|0] C:\IO.SYS
[14/12/2009 21:43|-rahs----|0] C:\MSDOS.SYS
[?|?|?] C:\pagefile.sys
[22/12/2009 21:43|--a------|3765] C:\UsbFix.txt
[30/08/2006 09:38|---hs----|435752] D:\BOOTMGR
[29/05/2006 10:30|---hs----|778] D:\CSP.DAT
[01/07/2005 13:16|---hs----|102] D:\Desktop.ini
[18/08/2009 01:16|---hs----|0] D:\DRECOVERY
[22/11/2004 17:28|---hs----|8130] D:\Folder.htt
[01/02/2007 17:42|---hs----|76936] D:\Info.exe
[28/09/2007 08:52|---hs----|1228] D:\MASTER.LOG
[09/01/2007 10:23|---hs----|710200] D:\MASTER.LOG.COPY
[12/05/2006 14:07|---hs----|0] D:\NTFS
[10/09/2002 11:58|---hs----|181616] D:\protect.ed
[21/10/2005 11:12|---hs----|42] D:\st_log.ini
[08/02/2002 18:44|---hs----|88038] D:\Warning.bmp
[28/09/2007 06:25|--a------|50] E:\HP_WINRE
[09/01/2007 10:23|--a------|710200] E:\MASTER.LOG.COPY
[18/11/2009 08:47|-ra------|528] E:\MediaID.bin

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# E:\autorun.inf -> Dossier créé par UsbFix.

################## | Cracks / Keygens / Serials |


################## | Upload |

Veuillez envoyer le fichier : C:\Users\PROPRI~1\Desktop\UsbFix_Upload_Me_PC-de-Propri‚ta.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

rien à signaler pour l'instant !

Bonsoir jlp
mon ordi marche bcp mieux, un grand merci pour l'aide précieuse!
Bonne année 2010
T.

voilà les rapports , je t'avoue que je ne comprends pas vraiment à quoi ça sert..ce qu'il y a écrit la dedans ne me parle pas du tout..

Logfile of random's system information tool 1.06 (written by random/random)
Run by malaya at 2010-02-22 14:36:14
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 21 GB (35%) free of 58 GB
Total RAM: 2038 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:36:31, on 22/02/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Hercules\Hercules Dualpix Chat and Show\CamService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Hercules\Audio\DJ Console Series\Mk2\HDJ2CPL.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\VM_STI.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe
C:\Users\malaya\Documents\Mes fichiers reçus\RSIT.exe
C:\Program Files\trend micro\malaya.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [Wbutton] C:\Program Files\Launch Manager\WButton.exe
O4 - HKLM\..\Run: [NPCTray] C:\Program Files\Norman\npc\bin\npc_tray.exe /LOAD
O4 - HKLM\..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe IE PA
O4 - HKLM\..\Run: [CamserviceHD] C:\Program Files\Hercules\Hercules Dualpix Chat and Show\Camservice.exe /startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DJ Console Mk2] C:\Program Files\Hercules\Audio\DJ Console Series\MK2\HDJ2CPL.exe -hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [BigDogPath] C:\Windows\VM_STI.EXE V-Gear TalkCam 1.1
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [recinfo] c:\recinfo\recinfo.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [malaya] C:\Users\malaya\malaya.exe
O4 - HKCU\..\Run: [jaaciuy] C:\Users\malaya\jaaciuy.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldfr-fr.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telechargement/ImageUploader4.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Google Update (gupdate1c9ca2c65cdbab8) (gupdate1c9ca2c65cdbab8) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe