Monnid32.exe ????

Re.

Voili voilou le rapport combofix en deuxième essai :)

ComboFix 10-02-23.04 - gran kief 24/02/2010 20:32:15.4.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1533 [GMT 1:00]
Lancé depuis: c:\documents and settings\gran kief\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\gran kief\Bureau\CFScript.txt
AV: AntiVirus Firewall 8.01 *On-access scanning disabled* (Updated) {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: AntiVirus Firewall 8.01 *disabled* {D4747503-0346-49EB-9262-997542F79BF4}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_RITCPT
-------\Legacy_SASDIFSV
-------\Legacy_SASENUM
-------\Legacy_SASKUTIL
-------\Legacy_SFCTLCOM
-------\Legacy_TMBMSERVER
-------\Legacy_TMCOMM
-------\Legacy_TMEVTMGR
-------\Legacy_TMPROXY
-------\Legacy_TMTDI
-------\Legacy_TMXPFLT
-------\Legacy_VSAPINT
-------\Service_tmcomm
-------\Service_tmevtmgr
-------\Service_tmxpflt
-------\Service_vsapint


((((((((((((((((((((((((((((( Fichiers créés du 2010-01-24 au 2010-02-24 ))))))))))))))))))))))))))))))))))))
.

2010-02-24 14:16 . 2010-02-24 14:16 -------- d-----w- c:\program files\Game Graphic Studio
2010-02-24 10:29 . 2010-02-24 16:07 -------- d-----w- C:\Ad-Remover
2010-02-20 15:30 . 2010-02-20 15:30 72192 ----a-w- c:\windows\system32\tasklist.exe
2010-02-19 23:10 . 2001-08-17 20:52 5760 -c--a-w- c:\windows\system32\dllcache\hpt4qic.sys
2010-02-19 23:09 . 2001-08-23 16:47 13312 -c--a-w- c:\windows\system32\dllcache\hpsjmcro.dll
2010-02-19 23:09 . 2001-08-23 16:47 324608 -c--a-w- c:\windows\system32\dllcache\hpojwia.dll
2010-02-19 23:09 . 2001-08-17 21:07 25952 -c--a-w- c:\windows\system32\dllcache\hpn.sys
2010-02-19 23:09 . 2001-08-23 16:47 32768 -c--a-w- c:\windows\system32\dllcache\hpgtmcro.dll
2010-02-19 23:09 . 2001-08-23 16:47 68608 -c--a-w- c:\windows\system32\dllcache\hpgt53tk.dll
2010-02-19 23:09 . 2001-08-23 16:47 165888 -c--a-w- c:\windows\system32\dllcache\hpgt53.dll
2010-02-19 23:09 . 2001-08-23 16:47 31232 -c--a-w- c:\windows\system32\dllcache\hpgt42tk.dll
2010-02-19 23:08 . 2001-08-23 16:47 93696 -c--a-w- c:\windows\system32\dllcache\hpgt42.dll
2010-02-19 23:08 . 2001-08-23 16:47 126976 -c--a-w- c:\windows\system32\dllcache\hpgt34tk.dll
2010-02-19 23:08 . 2001-08-23 16:47 101376 -c--a-w- c:\windows\system32\dllcache\hpgt34.dll
2010-02-19 23:08 . 2001-08-23 16:47 48128 -c--a-w- c:\windows\system32\dllcache\hpgt33tk.dll
2010-02-19 23:08 . 2001-08-23 16:47 89088 -c--a-w- c:\windows\system32\dllcache\hpgt33.dll
2010-02-19 23:08 . 2001-08-23 16:47 123392 -c--a-w- c:\windows\system32\dllcache\hpgt21tk.dll
2010-02-19 23:07 . 2001-08-23 16:47 83968 -c--a-w- c:\windows\system32\dllcache\hpgt21.dll
2010-02-19 23:07 . 2001-08-23 16:47 119296 -c--a-w- c:\windows\system32\dllcache\hpdigwia.dll
2010-02-19 23:07 . 2001-08-17 21:02 2688 -c--a-w- c:\windows\system32\dllcache\hidswvd.sys
2010-02-19 23:07 . 2008-04-14 03:33 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2010-02-19 23:07 . 2001-08-17 21:02 8576 -c--a-w- c:\windows\system32\dllcache\hidgame.sys
2010-02-19 23:07 . 2008-04-13 19:36 20352 -c--a-w- c:\windows\system32\dllcache\hidbatt.sys
2010-02-19 23:07 . 2001-08-23 16:19 908000 -c--a-w- c:\windows\system32\dllcache\hcf_msft.sys
2010-02-19 23:06 . 2008-04-14 02:59 28544 -c--a-w- c:\windows\system32\dllcache\grserial.sys
2010-02-19 23:06 . 2001-08-23 16:18 82560 -c--a-w- c:\windows\system32\dllcache\grclass.sys
2010-02-19 23:06 . 2001-08-23 16:18 17664 -c--a-w- c:\windows\system32\dllcache\gpr400.sys
2010-02-19 23:06 . 2004-08-05 12:00 634880 -c--a-w- c:\windows\system32\dllcache\getuname.dll
2010-02-19 23:06 . 2008-04-13 19:45 59136 -c--a-w- c:\windows\system32\dllcache\gckernel.sys
2010-02-19 23:06 . 2008-04-13 19:45 10624 -c--a-w- c:\windows\system32\dllcache\gameenum.sys
2010-02-19 23:06 . 2001-08-23 16:18 322560 -c--a-w- c:\windows\system32\dllcache\g400m.sys
2010-02-19 23:06 . 2001-08-23 16:46 1733120 -c--a-w- c:\windows\system32\dllcache\g400d.dll
2010-02-19 23:05 . 2001-08-23 16:18 320512 -c--a-w- c:\windows\system32\dllcache\g200m.sys
2010-02-19 23:05 . 2001-08-23 16:46 470144 -c--a-w- c:\windows\system32\dllcache\g200d.dll
2010-02-19 23:05 . 2001-08-17 19:15 454912 -c--a-w- c:\windows\system32\dllcache\fxusbase.sys
2010-02-19 23:05 . 2004-08-05 12:00 11776 -c--a-w- c:\windows\system32\dllcache\fxssend.exe
2010-02-19 23:05 . 2004-08-05 12:00 31744 -c--a-w- c:\windows\system32\dllcache\fxsroute.dll
2010-02-19 23:05 . 2004-08-05 12:00 141312 -c--a-w- c:\windows\system32\dllcache\fxsclntr.dll
2010-02-19 23:05 . 2004-08-05 12:00 113664 -c--a-w- c:\windows\system32\dllcache\fxscfgwz.dll
2010-02-19 23:05 . 2001-08-23 16:47 92672 -c--a-w- c:\windows\system32\dllcache\fuusd.dll
2010-02-19 23:04 . 2001-08-17 19:15 455296 -c--a-w- c:\windows\system32\dllcache\fusbbase.sys
2010-02-19 23:04 . 2001-08-17 19:15 455680 -c--a-w- c:\windows\system32\dllcache\fus2base.sys
2010-02-19 23:04 . 2004-08-05 12:00 6144 -c--a-w- c:\windows\system32\dllcache\ftlx041e.dll
2010-02-19 23:04 . 2004-08-05 12:00 55808 -c--a-w- c:\windows\system32\dllcache\freecell.exe
2010-02-19 23:04 . 2001-08-17 19:15 442240 -c--a-w- c:\windows\system32\dllcache\fpnpbase.sys
2010-02-19 23:04 . 2001-08-17 19:14 441728 -c--a-w- c:\windows\system32\dllcache\fpcmbase.sys
2010-02-19 23:04 . 2001-08-17 19:14 444416 -c--a-w- c:\windows\system32\dllcache\fpcibase.sys
2010-02-19 23:04 . 2004-08-03 21:31 34173 -c--a-w- c:\windows\system32\dllcache\forehe.sys
2010-02-19 23:03 . 2001-08-23 16:47 72192 -c--a-w- c:\windows\system32\dllcache\fnfilter.dll
2010-02-19 23:03 . 2004-08-05 12:00 15360 -c--a-w- c:\windows\system32\dllcache\flattemp.exe
2010-02-19 23:03 . 2001-08-17 19:13 27165 -c--a-w- c:\windows\system32\dllcache\fetnd5.sys
2010-02-19 23:03 . 2001-08-17 19:10 22090 -c--a-w- c:\windows\system32\dllcache\fem556n5.sys
2010-02-19 23:03 . 2001-08-23 16:47 43520 -c--a-w- c:\windows\system32\dllcache\EXCH_fcachdll.dll
2010-02-19 23:03 . 2001-08-17 19:12 24618 -c--a-w- c:\windows\system32\dllcache\fa410nd5.sys
2010-02-19 23:02 . 2001-08-17 19:12 16074 -c--a-w- c:\windows\system32\dllcache\fa312nd5.sys
2010-02-19 23:02 . 2001-08-17 19:11 11850 -c--a-w- c:\windows\system32\dllcache\f3ab18xj.sys
2010-02-19 23:02 . 2001-08-17 19:11 12362 -c--a-w- c:\windows\system32\dllcache\f3ab18xi.sys
2010-02-19 23:02 . 2001-08-17 20:52 7040 -c--a-w- c:\windows\system32\dllcache\exabyte2.sys
2010-02-19 23:02 . 2001-08-17 19:12 16998 -c--a-w- c:\windows\system32\dllcache\ex10.sys
2010-02-19 23:02 . 2004-08-05 12:00 25856 -c--a-w- c:\windows\system32\dllcache\et4000.sys
2010-02-19 23:02 . 2004-08-05 12:00 45568 -c--a-w- c:\windows\system32\dllcache\esunid.dll
2010-02-19 23:02 . 2001-08-23 16:47 46080 -c--a-w- c:\windows\system32\dllcache\esunib.dll
2010-02-19 23:01 . 2001-08-23 16:47 46080 -c--a-w- c:\windows\system32\dllcache\esuni.dll
2010-02-19 23:01 . 2004-08-05 12:00 57856 -c--a-w- c:\windows\system32\dllcache\esuimgd.dll
2010-02-19 23:01 . 2001-08-23 16:47 34816 -c--a-w- c:\windows\system32\dllcache\esuimg.dll
2010-02-19 23:01 . 2004-08-05 12:00 31744 -c--a-w- c:\windows\system32\dllcache\esucmd.dll
2010-02-19 23:01 . 2001-08-23 16:47 43008 -c--a-w- c:\windows\system32\dllcache\esucm.dll
2010-02-19 23:01 . 2004-08-03 21:32 137088 -c--a-w- c:\windows\system32\dllcache\essm2e.sys
2010-02-19 23:01 . 2001-08-17 19:19 63360 -c--a-w- c:\windows\system32\dllcache\ess.sys
2010-02-19 23:01 . 2001-08-23 16:16 348222 -c--a-w- c:\windows\system32\dllcache\es56tpi.sys
2010-02-19 23:01 . 2001-08-23 16:16 594910 -c--a-w- c:\windows\system32\dllcache\es56hpi.sys
2010-02-19 23:00 . 2001-08-23 16:16 596319 -c--a-w- c:\windows\system32\dllcache\es56cvmp.sys
2010-02-19 23:00 . 2001-08-17 19:19 174464 -c--a-w- c:\windows\system32\dllcache\es198x.sys
2010-02-19 23:00 . 2001-08-17 19:19 72192 -c--a-w- c:\windows\system32\dllcache\es1969.sys
2010-02-19 23:00 . 2001-08-17 19:19 40704 -c--a-w- c:\windows\system32\dllcache\es1371mp.sys
2010-02-19 23:00 . 2001-08-17 19:19 37120 -c--a-w- c:\windows\system32\dllcache\es1370mp.sys
2010-02-19 23:00 . 2001-08-23 16:47 62464 -c--a-w- c:\windows\system32\dllcache\eqnloop.exe
2010-02-19 23:00 . 2001-08-23 16:47 51712 -c--a-w- c:\windows\system32\dllcache\eqnlogr.exe
2010-02-19 23:00 . 2001-08-23 16:47 53760 -c--a-w- c:\windows\system32\dllcache\eqndiag.exe
2010-02-19 22:59 . 2001-08-23 16:16 630016 -c--a-w- c:\windows\system32\dllcache\eqn.sys
2010-02-19 22:59 . 2001-08-17 20:50 114944 -c--a-w- c:\windows\system32\dllcache\epstw2k.sys
2010-02-19 22:59 . 2001-08-17 19:12 18503 -c--a-w- c:\windows\system32\dllcache\epro4.sys
2010-02-19 22:59 . 2001-08-17 20:50 144896 -c--a-w- c:\windows\system32\dllcache\epcfw2k.sys
2010-02-19 22:59 . 2001-08-17 19:19 283904 -c--a-w- c:\windows\system32\dllcache\emu10k1m.sys
2010-02-19 22:59 . 2001-08-17 19:10 19996 -c--a-w- c:\windows\system32\dllcache\em556n4.sys
2010-02-19 22:59 . 2001-08-17 19:10 25159 -c--a-w- c:\windows\system32\dllcache\elnk3.sys
2010-02-19 22:58 . 2001-08-17 20:53 7296 -c--a-w- c:\windows\system32\dllcache\elmsmc.sys
2010-02-19 22:58 . 2001-08-23 16:13 175104 -c--a-w- c:\windows\system32\dllcache\el99xn51.sys
2010-02-19 22:58 . 2001-08-17 19:11 70174 -c--a-w- c:\windows\system32\dllcache\el98xn5.sys
2010-02-19 22:58 . 2001-08-23 16:13 455711 -c--a-w- c:\windows\system32\dllcache\el985n51.sys
2010-02-19 22:58 . 2001-08-23 16:13 153631 -c--a-w- c:\windows\system32\dllcache\el90xnd5.sys
2010-02-19 22:58 . 2001-08-17 19:11 66591 -c--a-w- c:\windows\system32\dllcache\el90xbc5.sys
2010-02-19 22:58 . 2001-08-23 16:13 241238 -c--a-w- c:\windows\system32\dllcache\el656se5.sys
2010-02-19 22:58 . 2001-08-17 19:11 77386 -c--a-w- c:\windows\system32\dllcache\el656nd5.sys
2010-02-19 22:58 . 2001-08-23 16:13 634166 -c--a-w- c:\windows\system32\dllcache\el656ct5.sys
2010-02-19 22:58 . 2001-08-17 19:11 69194 -c--a-w- c:\windows\system32\dllcache\el656cd5.sys
2010-02-19 22:58 . 2001-08-17 19:10 26141 -c--a-w- c:\windows\system32\dllcache\el589nd5.sys
2010-02-19 22:57 . 2001-08-17 19:10 69692 -c--a-w- c:\windows\system32\dllcache\el575nd5.sys
2010-02-19 22:57 . 2001-08-17 19:10 24653 -c--a-w- c:\windows\system32\dllcache\el574nd4.sys
2010-02-19 22:57 . 2001-08-17 19:10 55999 -c--a-w- c:\windows\system32\dllcache\el556nd5.sys
2010-02-19 22:57 . 2001-08-23 16:13 44615 -c--a-w- c:\windows\system32\dllcache\el515.sys
2010-02-19 22:57 . 2004-08-05 12:00 514587 -c--a-w- c:\windows\system32\dllcache\edb500.dll
2010-02-19 22:57 . 2001-08-17 19:12 19594 -c--a-w- c:\windows\system32\dllcache\e100isa4.sys
2010-02-19 22:57 . 2001-08-23 16:12 117760 -c--a-w- c:\windows\system32\dllcache\e100b325.sys
2010-02-19 22:57 . 2001-08-23 16:12 51743 -c--a-w- c:\windows\system32\dllcache\e1000nt5.sys
2010-02-19 22:56 . 2001-08-17 19:20 334208 -c--a-w- c:\windows\system32\dllcache\ds1wdm.sys
2010-02-19 22:56 . 2001-08-17 21:07 20192 -c--a-w- c:\windows\system32\dllcache\dpti2o.sys
2010-02-19 22:56 . 2001-08-17 19:12 28062 -c--a-w- c:\windows\system32\dllcache\dp83820.sys
2010-02-19 22:56 . 2001-08-23 16:11 24064 -c--a-w- c:\windows\system32\dllcache\dot4usb.sys
2010-02-19 22:56 . 2001-08-17 20:47 8704 -c--a-w- c:\windows\system32\dllcache\dot4scan.sys
2010-02-19 22:56 . 2001-08-17 20:47 12928 -c--a-w- c:\windows\system32\dllcache\dot4prt.sys
2010-02-19 22:56 . 2008-04-13 19:39 206976 -c--a-w- c:\windows\system32\dllcache\dot4.sys
2010-02-19 22:55 . 2001-08-17 19:11 29696 -c--a-w- c:\windows\system32\dllcache\dm9pci5.sys
2010-02-19 22:55 . 2008-04-13 19:40 8320 -c--a-w- c:\windows\system32\dllcache\dlttape.sys
2010-02-19 22:55 . 2001-08-17 19:11 26698 -c--a-w- c:\windows\system32\dllcache\dlh5xnd5.sys
2010-02-19 22:55 . 2001-08-17 19:14 952007 -c--a-w- c:\windows\system32\dllcache\diwan.sys
2010-02-19 22:55 . 2001-08-23 16:47 29768 -c--a-w- c:\windows\system32\dllcache\divasu.dll
2010-02-19 22:55 . 2001-08-23 16:47 37962 -c--a-w- c:\windows\system32\dllcache\divaprop.dll
2010-02-19 22:55 . 2001-08-23 16:47 6216 -c--a-w- c:\windows\system32\dllcache\divaci.dll
2010-02-19 22:55 . 2001-08-23 16:47 236060 -c--a-w- c:\windows\system32\dllcache\ditrace.exe
2010-02-19 22:55 . 2001-08-23 16:47 38985 -c--a-w- c:\windows\system32\dllcache\disrvsu.dll
2010-02-19 22:54 . 2001-08-23 16:47 31817 -c--a-w- c:\windows\system32\dllcache\disrvpp.dll
2010-02-19 22:54 . 2001-08-23 16:47 6729 -c--a-w- c:\windows\system32\dllcache\disrvci.dll
2010-02-19 22:54 . 2001-08-17 19:13 91305 -c--a-w- c:\windows\system32\dllcache\dimaint.sys
2010-02-19 22:54 . 2001-08-23 16:47 622621 -c--a-w- c:\windows\system32\dllcache\digiview.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-24 16:05 . 2008-10-05 13:41 -------- d-----w- c:\documents and settings\gran kief\Application Data\ATI
2010-02-24 16:04 . 2004-12-15 15:25 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-24 12:35 . 2006-09-23 09:49 -------- d-----w- c:\program files\AntivirusFirewall
2010-02-22 00:10 . 2008-10-08 15:29 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2010-02-22 00:09 . 2009-09-09 16:49 -------- d-----w- c:\program files\AGEIA Technologies
2010-02-22 00:08 . 2009-09-10 14:12 -------- d-----w- c:\program files\NVIDIA Corporation
2010-02-20 16:30 . 2008-06-17 16:39 -------- d-----w- c:\documents and settings\gran kief\Application Data\DataCast
2010-02-18 23:52 . 2004-12-15 13:56 95454 ----a-w- c:\windows\system32\perfc00C.dat
2010-02-18 23:52 . 2004-12-15 13:56 535282 ----a-w- c:\windows\system32\perfh00C.dat
2010-02-18 22:19 . 2008-12-18 22:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-10 14:08 . 2009-12-07 14:51 -------- d-----w- c:\documents and settings\gran kief\Application Data\www.pro-evo.xooit.fr
2010-02-09 10:23 . 2008-08-04 18:40 -------- d-----w- c:\program files\Paint.NET
2010-01-12 04:03 . 2009-12-21 11:05 61440 ----a-w- c:\windows\system32\OpenCL.dll
2010-01-12 04:03 . 2009-12-21 11:05 11632640 ----a-w- c:\windows\system32\nvcompiler.dll
2010-01-12 04:03 . 2009-08-16 22:57 4077672 ----a-w- c:\windows\system32\nvcuvenc.dll
2010-01-12 04:03 . 2009-08-16 22:57 2283526 ----a-w- c:\windows\system32\nvdata.bin
2010-01-12 04:03 . 2009-08-16 22:57 2259560 ----a-w- c:\windows\system32\nvcuvid.dll
2010-01-12 04:03 . 2008-05-16 18:31 4104192 ----a-w- c:\windows\system32\nvcuda.dll
2010-01-12 04:03 . 2008-05-16 18:31 182888 ----a-w- c:\windows\system32\nvcodins.dll
2010-01-12 04:03 . 2008-05-16 18:31 14458880 ----a-w- c:\windows\system32\nvoglnt.dll
2010-01-12 04:03 . 2008-05-16 18:31 1081344 ----a-w- c:\windows\system32\nvapi.dll
2010-01-12 04:03 . 2004-12-09 10:11 6359168 ----a-w- c:\windows\system32\nv4_disp.dll
2010-01-12 04:03 . 2004-12-09 10:11 10276768 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2010-01-11 16:52 . 2009-12-13 20:48 -------- d-----w- c:\program files\Fichiers communs\Adobe
2010-01-07 15:07 . 2008-12-18 22:26 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07 . 2008-12-18 22:26 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-02 22:22 . 2010-01-02 22:22 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2010-01-02 16:56 . 2010-01-02 16:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Canneverbe Limited
2010-01-02 16:56 . 2008-12-21 15:44 -------- d-----w- c:\program files\CDBurnerXP
2009-12-22 05:09 . 2004-12-15 13:55 671232 ------w- c:\windows\system32\wininet.dll
2009-12-22 05:08 . 2009-05-07 09:42 81920 ----a-w- c:\windows\system32\ieencode.dll
.

------- Sigcheck -------

[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 4AFB3B0919649F95C1964AA1FAD27D73 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
.
((((((((((((((((((((((((((((( SnapShot@2010-02-24_15.36.32 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-10-02 21:03 . 2004-08-03 21:29 63488 c:\windows\system32\drivers\atinxsxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 63488 c:\windows\system32\drivers\atinxsxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 31744 c:\windows\system32\drivers\atinxbxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 31744 c:\windows\system32\drivers\atinxbxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 73216 c:\windows\system32\drivers\atintuxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 73216 c:\windows\system32\drivers\atintuxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 13824 c:\windows\system32\drivers\atinttxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 13824 c:\windows\system32\drivers\atinttxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 28672 c:\windows\system32\drivers\atinsnxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 28672 c:\windows\system32\drivers\atinsnxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 52224 c:\windows\system32\drivers\atinraxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 52224 c:\windows\system32\drivers\atinraxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 14336 c:\windows\system32\drivers\atinpdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 14336 c:\windows\system32\drivers\atinpdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 13824 c:\windows\system32\drivers\atinmdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 13824 c:\windows\system32\drivers\atinmdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 57856 c:\windows\system32\drivers\atinbtxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 57856 c:\windows\system32\drivers\atinbtxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 26367 c:\windows\system32\drivers\ati1snxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 26367 c:\windows\system32\drivers\ati1snxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 30671 c:\windows\system32\drivers\ati1raxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 30671 c:\windows\system32\drivers\ati1raxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 56623 c:\windows\system32\drivers\ati1btxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 56623 c:\windows\system32\drivers\ati1btxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 63488 c:\windows\system32\dllcache\atinxsxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 63488 c:\windows\system32\dllcache\atinxsxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 31744 c:\windows\system32\dllcache\atinxbxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 31744 c:\windows\system32\dllcache\atinxbxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 73216 c:\windows\system32\dllcache\atintuxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 73216 c:\windows\system32\dllcache\atintuxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 13824 c:\windows\system32\dllcache\atinttxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 13824 c:\windows\system32\dllcache\atinttxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 28672 c:\windows\system32\dllcache\atinsnxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 28672 c:\windows\system32\dllcache\atinsnxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 52224 c:\windows\system32\dllcache\atinraxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 52224 c:\windows\system32\dllcache\atinraxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 14336 c:\windows\system32\dllcache\atinpdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 14336 c:\windows\system32\dllcache\atinpdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 13824 c:\windows\system32\dllcache\atinmdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 13824 c:\windows\system32\dllcache\atinmdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 57856 c:\windows\system32\dllcache\atinbtxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 57856 c:\windows\system32\dllcache\atinbtxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 34735 c:\windows\system32\dllcache\ati1xsxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 34735 c:\windows\system32\dllcache\ati1xsxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 29455 c:\windows\system32\dllcache\ati1xbxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 29455 c:\windows\system32\dllcache\ati1xbxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 36463 c:\windows\system32\dllcache\ati1tuxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 36463 c:\windows\system32\dllcache\ati1tuxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 21343 c:\windows\system32\dllcache\ati1ttxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 21343 c:\windows\system32\dllcache\ati1ttxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 26367 c:\windows\system32\dllcache\ati1snxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 26367 c:\windows\system32\dllcache\ati1snxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 63663 c:\windows\system32\dllcache\ati1rvxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 63663 c:\windows\system32\dllcache\ati1rvxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 30671 c:\windows\system32\dllcache\ati1raxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 30671 c:\windows\system32\dllcache\ati1raxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 12047 c:\windows\system32\dllcache\ati1pdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 12047 c:\windows\system32\dllcache\ati1pdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 11615 c:\windows\system32\dllcache\ati1mdxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 11615 c:\windows\system32\dllcache\ati1mdxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 56623 c:\windows\system32\dllcache\ati1btxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 56623 c:\windows\system32\dllcache\ati1btxx.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 104960 c:\windows\system32\drivers\atinrvxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 104960 c:\windows\system32\drivers\atinrvxx.sys
+ 2008-10-02 21:03 . 2004-08-03 23:38 327168 c:\windows\system32\drivers\ati2mtaa.sys
- 2008-10-02 21:03 . 2004-08-03 22:38 327168 c:\windows\system32\drivers\ati2mtaa.sys
+ 2008-10-02 21:03 . 2004-08-03 21:29 104960 c:\windows\system32\dllcache\atinrvxx.sys
- 2008-10-02 21:03 . 2004-08-03 20:29 104960 c:\windows\system32\dllcache\atinrvxx.sys
+ 2008-10-02 21:03 . 2004-08-03 23:38 327168 c:\windows\system32\dllcache\ati2mtaa.sys
- 2008-10-02 21:03 . 2004-08-03 22:38 327168 c:\windows\system32\dllcache\ati2mtaa.sys
.
-- Instantané actualisé --
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2010-01-26 1724728]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"F-Secure Manager"="c:\program files\AntivirusFirewall\Common\FSM32.EXE" [2008-12-04 182936]
"F-Secure TNB"="c:\program files\AntivirusFirewall\FSGUI\TNBUtil.exe" [2008-12-04 957024]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk
backup=c:\windows\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
2004-04-13 11:49 88363 ----a-w- c:\windows\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-05-12 13:05 133104 ----atw- c:\documents and settings\gran kief\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
2004-05-12 14:18 241664 ----a-w- c:\program files\HP\hpcoretech\hpcmpmgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX]
2005-12-09 13:32 225280 ----a-w- c:\windows\system32\LVCOMSX.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 15:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2010-01-11 21:17 13666408 ----a-w- c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-01-11 21:17 110696 ----a-w- c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-06-21 10:53 148888 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2006-11-03 07:59 204288 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ATI Smart"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"maconfservice"=3 (0x3)
"NMIndexingService"=3 (0x3)
"Nero BackItUp Scheduler 3"=2 (0x2)
"usnjsvc"=3 (0x3)
"WLSetupSvc"=3 (0x3)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"updateMgr"=c:\documents and settings\gran kief\Mes documents\Dossiers d'utilisation annexe\Programmes nécessaires\Reader\AdobeUpdateManager.exe AcRdB7_0_5

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"farstone"=
"fenaffiche"=c:\program files\FenAffiche\Fenpowernet.exe
"Raccourci vers la page des propriétés de High Definition Audio"=HDAudPropShortcut.exe
"WinSys2"=c:\windows\system32\winsys2.exe
"nwiz"=nwiz.exe /install

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3.exe"=
"c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"=
"c:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2010\\Kitserver2010_PESedit\\pes2010.exe"=

R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [26/06/2009 23:18 33920]
R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [23/09/2006 10:50 79872]
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [10/09/2009 15:21 22168]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\AntivirusFirewall\HIPS\drivers\fshs.sys [26/06/2009 23:17 67808]
R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys [01/10/2004 14:58 1475712]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\AntivirusFirewall\Anti-Virus\minifilter\fsgk.sys [23/09/2006 10:50 107104]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\AntivirusFirewall\ORSP Client\fsorsp.exe [26/06/2009 23:17 55904]
S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
S2 tmpreflt;tmpreflt;c:\windows\system32\DRIVERS\tmpreflt.sys --> c:\windows\system32\DRIVERS\tmpreflt.sys [?]
S3 FT8A91;FT8A91 Filter;c:\windows\system32\drivers\ft8a91.sys [01/10/2008 18:46 69701]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [18/12/2008 23:26 38224]
S3 PsShutdownSvc;PsShutdown;c:\windows\system32\PSSDNSVC.EXE [20/12/2004 11:18 65536]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS --> c:\windows\system32\ZDCndis5.SYS [?]
S4 F-Secure Filter;F-Secure File System Filter;c:\program files\AntivirusFirewall\Anti-Virus\win2k\fsfilter.sys [23/09/2006 10:50 39776]
S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\AntivirusFirewall\Anti-Virus\win2k\fsrec.sys [23/09/2006 10:50 25184]
.
Contenu du dossier 'Tâches planifiées'

2010-02-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2690646912-4200844247-1566674502-1009Core.job
- c:\documents and settings\gran kief\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-12 13:05]

2010-02-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2690646912-4200844247-1566674502-1009UA.job
- c:\documents and settings\gran kief\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-05-12 13:05]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
LSP: c:\program files\AntivirusFirewall\FSPS\program\FSLSP.DLL
TCP: {C3BD41D0-837A-4071-A827-75F73FCE1017} = 192.168.1.1
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game01.zylom.com/activex/zylomgamesplayer.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-24 20:40
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-2690646912-4200844247-1566674502-1009\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-2690646912-4200844247-1566674502-1009\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:70,c0,17,b2,fa,50,16,8c,4e,23,8a,2c,0b,5a,4a,09,66,00,2b,87,b2,7a,da,
a4,d2,45,19,65,95,6f,a1,37,ac,31,69,8a,f8,ee,5b,85,ed,3b,1f,16,ea,ba,78,3d,\
"??"=hex:af,4c,1b,ea,3b,bf,b9,68,f7,29,e3,ee,93,07,74,fe

[HKEY_USERS\S-1-5-21-2690646912-4200844247-1566674502-1009\Software\SecuROM\License information*]
"datasecu"=hex:f5,06,94,cf,05,4c,f1,72,a6,1f,af,1c,35,25,38,09,49,aa,04,43,eb,
9e,16,5f,da,58,57,d9,54,53,c7,ad,03,90,7a,f4,42,98,67,b5,6a,ff,5f,6a,3d,2a,\
"rkeysecu"=hex:c9,64,3c,69,b4,8b,4e,e0,87,a8,76,2c,a0,b1,a3,09
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(716)
c:\program files\AntivirusFirewall\FWES\Program\fsdc32.dll

- - - - - - - > 'lsass.exe'(776)
c:\program files\AntivirusFirewall\FSPS\program\FSLSP.DLL
c:\program files\AntivirusFirewall\FWES\Program\fsdc32.dll

- - - - - - - > 'explorer.exe'(3732)
c:\program files\AntivirusFirewall\Spam Control\fsscoepl.dll
c:\program files\AntivirusFirewall\FWES\Program\fsdc32.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\AntivirusFirewall\FSPS\program\FSLSP.DLL
c:\program files\antivirusfirewall\scanner-interface\fsgkiapi.dll

- - - - - - - > 'csrss.exe'(692)
c:\program files\AntivirusFirewall\FWES\Program\fsdc32.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
c:\program files\AntivirusFirewall\Common\FSMA32.EXE
c:\program files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
c:\program files\AntivirusFirewall\Common\FSMB32.EXE
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\AntivirusFirewall\Common\FCH32.EXE
c:\program files\Windows Media Player\WMPNetwk.exe
c:\program files\AntivirusFirewall\Anti-Virus\fsqh.exe
c:\program files\AntivirusFirewall\Common\FAMEH32.EXE
c:\program files\AntivirusFirewall\FSAUA\program\fsaua.exe
c:\program files\AntivirusFirewall\Anti-Virus\fssm32.exe
c:\program files\AntivirusFirewall\FWES\Program\fsdfwd.exe
c:\windows\system32\wscntfy.exe
c:\program files\AntivirusFirewall\FSAUA\program\fsus.exe
c:\program files\AntivirusFirewall\FSGUI\fsguidll.exe
c:\program files\AntivirusFirewall\Anti-Virus\fsav32.exe
.
**************************************************************************
.
Heure de fin: 2010-02-24 20:44:48 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-02-24 19:44
ComboFix2.txt 2010-02-24 15:39

Avant-CF: 37 280 317 440 octets libres
Après-CF: 37 245 640 704 octets libres

Current=2 Default=2 Failed=4 LastKnownGood=1 Sets=1,2,3,4
- - End Of File - - 5EA6AA04D2CC56D0E782A55A5C61962A

Voici le rapport sous ZHPFix:

ZHPFix v1.12.306 by Nicolas Coolman - Rapport de suppression du 24/02/2010 23:17:11
Fichier d'export Registre :
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html


Processus mémoire :
(Néant)

Module mémoire :
(Néant)

Clé du Registre :
(Néant)

Valeur du Registre :
(Néant)

Elément de données du Registre :
(Néant)

Dossier :
C:\Qoobox => Supprimé et mis en quarantaine

Fichier :
c:\combofix.txt => Supprimé et mis en quarantaine

Logiciel :
O63 - Logiciel: ComboFix - (sUBs) => Logiciel supprimé avec succès

Script Registre :
(Néant)

Autre :
(Néant)


Récapitulatif :
Processus mémoire : 0
Module mémoire : 0
Clé du Registre : 0
Valeur du Registre : 0
Elément de données du Registre : 0
Dossier : 1
Fichier : 1
Logiciel : 1
Autre : 0


End of the scan




Et voici le rapport sous Active scan:

;***********************************************************************************************************************************************************************************
ANALYSIS: 2010-02-25 13:21:37
PROTECTIONS: 1
MALWARE: 0
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
AntiVirus Firewall 8.01 8.01 Yes Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
217842 HIGH MS10-015
217839 HIGH MS10-012
217838 HIGH MS10-011
217834 HIGH MS10-008
217833 HIGH MS10-007
217832 HIGH MS10-006
217831 HIGH MS10-005
;===================================================================================================================================================================================

:) on finalise? yeah ça sent bon tout ça lol

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:03:16, on 25/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsus.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
C:\Program Files\Fraps\fraps.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [BrandClearStubs] RUNDLL32 IEDKCS32.DLL,BrandCleanInstallStubs >{CB58DED6-4AF3-4080-9DF1-DEE72075169F}
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C3BD41D0-837A-4071-A827-75F73FCE1017}: NameServer = 192.168.1.1
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\ORSP Client\fsorsp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE

Autant pour moi, j'aurai du redémarre parce que maintenant c'est oki:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:25:10, on 25/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsus.exe
C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
C:\Program Files\Fraps\fraps.exe
C:\Documents and Settings\gran kief\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gran kief\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gran kief\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.windows.fr/ie8/bienvenue
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/...
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C3BD41D0-837A-4071-A827-75F73FCE1017}: NameServer = 192.168.1.1
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\ORSP Client\fsorsp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE

Alors pour ce qui est de mes impressions, le PC tourne vraiment nickel, le démarrage se fait parfaitement, je ne remarque plus aucun ralentissement de quelque nature que ce soit aussi bien sous les applications windows que sur le net en général.

Par contre, je viens de tester un jeu que je fais souvent tourné sur mon PC (en l'occurrence PES 2010 un jeu de foot...). C'était l'un des rares trucs qui fonctionnait parfaitement même avant que mon PC se mette à ralentir de manière incongrue.
Et maintenant, le jeu se met à ralentir par instant puis s'accèlère tout d'un coup comme s'il tentait de récupérer le temps de retard qu'il venait de prendre quelques secondes auparavant... ce qui fait que c'est assez agaçant je dois dire... mes réglages graphiques sont restés les même pourtant... donc je ne sais pas trop d'où ça peut venir.

Peut-être que tu aurais une idée sur ce sujet?

Sinon voici le rapport Hijacthis comme tu me l'a demandé:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:36, on 25/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsus.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\licmgr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C3BD41D0-837A-4071-A827-75F73FCE1017}: NameServer = 192.168.1.1
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\ORSP Client\fsorsp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE

Evidemment ... je ne suis quand même pas une enclume...

Pour autant aucune lien fiable n'indiquait la nature de ce fameux monnid32.exe mais Ske69 m'a aidé à l'isoler définitivement, merci à lui.

Le reste des scans c'est pour finir de nettoyer correctement mon ordi étant donné qu'il était quand même bien bouffer par les trojans et autres saloperies du genre.

ébé écoutes tout se passe pour le mieux dorénavant. C'est fluide, ça tourne sans problème.

je te poste le rapport que tu m'as demandé:
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Ad-remover: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\gran kief\Bureau\HijackThis.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\gran kief\Bureau\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Ad-remover: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !





Je suppose qu'on en a fini :)

Je te remercie infiniment pour toute ton aide, ta patience et ta pédagogie. Je te dois une fière chandelle :)