Visiting this site may harm your computer

ComboFix 10-01-23.05 - Thierry 24/01/2010 12:30:46.1.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.3070.1976 [GMT 1:00]
Lancé depuis: c:\users\Thierry\Desktop\asdehi.exe
AV: avast! antivirus 4.8.1335 [VPS 100102-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Norton Internet Security *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: avast! antivirus 4.8.1335 [VPS 100102-0] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Norton Internet Security *disabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1453161514-814146443-3056926383-500
c:\$recycle.bin\S-1-5-21-192345369-2729201545-2745846667-1000
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-3273736340-2175458747-3403832269-500
c:\program files\Common Files\Uninstall
c:\program files\Common Files\Uninstall\AV\Uninstall.lnk
c:\windows\Fonts\MyriadPro-Regular.otf
c:\windows\system32\twain_32.dll
c:\windows\system32\UpdateCheck.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-24 au 2010-01-24 ))))))))))))))))))))))))))))))))))))
.

2010-01-24 11:38 . 2010-01-24 11:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-13 09:43 . 2009-10-19 14:27 156672 ----a-w- c:\windows\system32\t2embed.dll
2010-01-13 09:43 . 2009-10-19 14:24 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-01-04 09:29 . 2008-04-05 03:34 15360 ----a-w- c:\windows\system32\pacerprf.dll
2010-01-04 09:29 . 2008-04-05 01:21 72192 ----a-w- c:\windows\system32\drivers\pacer.sys
2010-01-02 12:39 . 2010-01-02 12:39 -------- d-----w- C:\PerfLogs

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-24 11:33 . 2007-09-25 01:33 672084 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-24 11:33 . 2007-09-25 01:33 124228 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-22 09:23 . 2009-10-15 07:15 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-14 10:50 . 2008-02-13 18:39 -------- d-----w- c:\programdata\Microsoft Help
2010-01-14 10:50 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-01-14 10:12 . 2009-10-03 08:09 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-02 12:39 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2010-01-02 12:39 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2010-01-02 12:39 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2010-01-02 12:39 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2010-01-02 12:39 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2010-01-02 12:39 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2010-01-02 12:39 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2010-01-02 11:35 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2010-01-02 11:35 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2009-12-24 09:31 . 2009-12-24 09:31 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-12-23 11:58 . 2009-12-23 11:58 -------- d-----w- c:\program files\GPLGS
2009-12-23 11:55 . 2009-12-23 11:55 -------- d-----w- c:\program files\Acro Software
2009-12-23 11:55 . 2009-12-23 11:55 -------- d-----w- c:\program files\Ask.com
2009-12-18 13:05 . 2010-01-22 11:50 833024 ----a-w- c:\windows\system32\wininet.dll
2009-12-18 13:01 . 2010-01-22 11:50 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-12-18 10:14 . 2010-01-22 11:50 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-07 12:52 . 2009-11-30 14:17 -------- d-----w- c:\users\Thierry\AppData\Roaming\HP
2009-12-04 09:40 . 2009-12-04 09:40 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb4461.tmp.exe
2009-11-30 14:18 . 2007-09-24 16:20 -------- d-----w- c:\programdata\HP
2009-11-30 14:17 . 2009-11-30 14:17 -------- d-----w- c:\programdata\WEBREG
2009-11-30 14:17 . 2009-11-27 18:14 219711 ----a-w- c:\windows\hpoins46.dat
2009-11-30 08:49 . 2007-09-24 16:38 -------- d-----w- c:\programdata\Symantec
2009-11-30 08:49 . 2007-09-24 16:38 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-11-30 08:48 . 2007-09-24 16:38 -------- d-----w- c:\program files\Symantec
2009-11-27 18:36 . 2009-11-27 18:27 -------- d-----w- c:\programdata\Yahoo! Companion
2009-11-27 18:36 . 2007-12-02 13:11 126056 ----a-w- c:\users\Thierry\AppData\Local\GDIPFONTCACHEV1.DAT
2009-11-27 18:27 . 2009-11-27 18:27 -------- d-----w- c:\program files\Yahoo!
2009-11-27 18:27 . 2009-11-27 18:27 -------- d-----w- c:\users\Thierry\AppData\Roaming\Yahoo!
2009-11-27 18:26 . 2007-09-24 16:20 -------- d-----w- c:\program files\HP
2009-11-27 18:24 . 2009-11-27 18:24 -------- d-----w- c:\programdata\HP Product Assistant
2009-11-27 18:22 . 2009-11-27 18:22 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2009-11-24 23:54 . 2008-02-29 17:59 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:50 . 2008-04-02 17:39 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-24 23:50 . 2008-04-02 17:39 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-24 23:49 . 2008-02-29 17:59 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2009-11-24 23:49 . 2008-02-29 18:00 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2008-02-29 18:00 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2008-02-29 18:00 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-09 13:22 . 2009-12-10 10:16 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-11-09 13:20 . 2009-12-10 10:16 31232 ----a-w- c:\windows\system32\httpapi.dll
2009-11-09 11:04 . 2009-12-10 10:16 411136 ----a-w- c:\windows\system32\drivers\http.sys
2009-11-05 07:39 . 2009-12-23 11:55 87552 ----a-w- c:\windows\system32\cpwmon2k.dll
2009-10-29 09:41 . 2009-10-16 07:06 2048 ----a-w- c:\windows\system32\tzres.dll
2007-09-25 01:50 . 2007-09-25 01:35 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-10-27 1196936]

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-10-27 12:48 1196936 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-10-27 1196936]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-10-27 1196936]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2007-06-01 1783400]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-20 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 4874240]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-05-24 71176]
"SunJavaUpdateReg"="c:\windows\system32\jureg.exe" [2007-09-25 54672]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 2027792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"TgbVpn"="c:\program files\Netasq\VPN Client\VpnConf.exe" [2007-11-08 459248]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2007-04-03 44168]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-5-8 67128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
2007-01-09 14:59 115816 ----a-w- c:\program files\Common Files\Symantec Shared\ccApp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

R0 ps7ajbeb;L Ile Noyee Synchronization Driver (ps7ajbeb);c:\windows\System32\drivers\ps7ajbeb.sys [22/08/2007 17:30 68736]
R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [02/04/2008 18:39 114768]
R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\idsdefs\20070108.003\IDSvix86.sys [24/09/2007 17:41 212280]
R1 NdisTgb;TheGreenBow NDIS filter driver;c:\windows\System32\drivers\ndistgb.sys [23/09/2009 17:45 17920]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [02/04/2008 18:39 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [29/02/2008 18:59 53328]
R2 TeamViewer4;TeamViewer 4;c:\program files\TeamViewer\Version4\TeamViewer_Service.exe [07/10/2009 13:50 185640]
R2 TgbIKE Starter;TgbIke Starter;c:\windows\System32\TgbStarter.exe [23/09/2009 17:46 125424]
S2 pr2ajbeb;L Ile Noyee Drivers Auto Removal (pr2ajbeb);c:\windows\system32\pr2ajbeb.exe svc --> c:\windows\system32\pr2ajbeb.exe svc [?]
S3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\System32\drivers\fbxusb32.sys [12/02/2008 19:25 21344]
S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [15/10/2009 08:15 54632]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
S3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [30/10/2007 19:55 37936]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - COMHOST
*Deregistered* - TgbHook
*Deregistered* - TgbIpSec

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenu du dossier 'Tâches planifiées'

2010-01-24 c:\windows\Tasks\User_Feed_Synchronization-{7E317A64-7C30-498D-BCF1-7C74C2F38727}.job
- c:\windows\system32\msfeedssync.exe [2008-06-18 07:33]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/ig?source=ig&hl=fr&rlz=1G1GGLQ_FRFR300&btnG=Recherche+Google&lr=
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=74&bd=Pavilion&pf=desktop
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} - hxxp://assets.photobox.com/assets/aurigma/ImageUploader4.cab?20080821050326
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{D34D56E9-B37B-4C37-A854-1AC144592D5C} - c:\windows\System32\UpdateCheck.dll



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-24 12:39
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2010-01-24 12:43:53
ComboFix-quarantined-files.txt 2010-01-24 11:43

Avant-CF: 268 700 397 568 octets libres
Après-CF: 269 005 299 712 octets libres

- - End Of File - - FFB85B0E97FAE2A2F861D8A38CF4C8A9

Bonjour karine80

Crée ton propre post;merci.

Merci de créer ton propre message sur le forum Virus / Sécurité :
http://www.commentcamarche.net/forum/forum 7 virus securite#ecrire

@+