Virus bagle rapport

je n'ai eu que ça dans C:/fy...txt
que faut-il faire pour en avoir un complet ?

j'ai fait aussi un hidjakthis si ça t'intéresse ?

peut être je me trompe : mais j'ai le message suivant quand j'ouvre un fichier exel via démarré / documents/ ....
C:/..nom du fichier ... n'est pas une application win32 valide

Rien, il ne se passe rien juste un écran vierge la fenetre réparation registre et rien ni sablier ni barre de progression pendant + d'une heure et rien.... j'ai essayé avec les 3 liens. Faut-il attendre + longtemps ?

OUI

Après il faut refaire pre scan ?

Ça ne fait toujours rien .. toujours aucun mouvement hormis le fond de page vierge...

combofix fait : voici le rapport

ComboFix 12-03-27.02 - CORALIE 27/03/2012 13:24:39.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2046.982 [GMT 2:00]
Lancé depuis: c:\users\CORALIE\Downloads\CoralieCombofix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Un nouveau point de restauration a été créé
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\OfferBox
c:\program files\OfferBox\OfferBox.exe
c:\program files\OfferBox\OfferBoxEngine.dll
c:\program files\OfferBox\res\tray-paused.ico
c:\program files\OfferBox\res\tray.ico
c:\programdata\SysWoW32
c:\programdata\SysWoW32\_u1123345788v0
c:\programdata\SysWoW32\_u1123345788v1
c:\programdata\SysWoW32\_u1123345788v2
c:\programdata\SysWoW32\_u1123345788v3
c:\programdata\SysWoW32\mu1123345788v4.kwd
c:\programdata\SysWoW32\mu1123345788v5.kwd
c:\programdata\SysWoW32\mu1123345788v6.kwd
c:\programdata\SysWoW32\mu1123345788v7.kwd
c:\programdata\SysWoW32\wu1123345788v0
c:\programdata\SysWoW32\wu1123345788v0.kwd
c:\programdata\SysWoW32\wu1123345788v1
c:\programdata\SysWoW32\wu1123345788v1.kwd
c:\programdata\SysWoW32\wu1123345788v2
c:\programdata\SysWoW32\wu1123345788v2.kwd
c:\programdata\SysWoW32\wu1123345788v3
c:\programdata\SysWoW32\wu1123345788v3.kwd
c:\users\CORALIE\AppData\Roaming\OfferBox
c:\users\CORALIE\AppData\Roaming\OfferBox\config.xml
c:\users\CORALIE\AppData\Roaming\OfferBox\offerboxffx@offerbox.com\chrome.manifest
c:\users\CORALIE\AppData\Roaming\OfferBox\offerboxffx@offerbox.com\components\DataXPCOM.dll
c:\users\CORALIE\AppData\Roaming\OfferBox\offerboxffx@offerbox.com\defaults\preferences\offerboxffxPrefs.js
c:\users\Nouveau dossier\1an.lnk
c:\users\Nouveau dossier\2007.lnk
c:\windows\Instaler Setup Log.txt
c:\windows\system32\cc32100mt.dll
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\muzapp.exe
c:\windows\system32\system32
c:\windows\system32\system32\3DAudio.ax
c:\windows\system32\system32\avrt.dll
c:\windows\system32\system32\cis-2.4.dll
c:\windows\system32\system32\issacapi_bs-2.3.dll
c:\windows\system32\system32\issacapi_pe-2.3.dll
c:\windows\system32\system32\issacapi_se-2.3.dll
c:\windows\system32\system32\MACXMLProto.dll
c:\windows\system32\system32\MaDRM.dll
c:\windows\system32\system32\MaJGUILib.dll
c:\windows\system32\system32\MAMACExtract.dll
c:\windows\system32\system32\MASetupCleaner.exe
c:\windows\system32\system32\MaXMLProto.dll
c:\windows\system32\system32\mfplat.dll
c:\windows\system32\system32\MK_Lyric.dll
c:\windows\system32\system32\MSCLib.dll
c:\windows\system32\system32\MSFLib.dll
c:\windows\system32\system32\MSLUR71.dll
c:\windows\system32\system32\msvcp60.dll
c:\windows\system32\system32\MTTELECHIP.dll
c:\windows\system32\system32\MTXSYNCICON.dll
c:\windows\system32\system32\muzaf1.dll
c:\windows\system32\system32\muzapp.dll
c:\windows\system32\system32\muzapp.exe
c:\windows\system32\system32\muzdecode.ax
c:\windows\system32\system32\muzeffect.ax
c:\windows\system32\system32\muzmp4sp.ax
c:\windows\system32\system32\muzmpgsp.ax
c:\windows\system32\system32\muzoggsp.ax
c:\windows\system32\system32\muzwmts.dll
c:\windows\system32\system32\psapi.dll
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-02-27 au 2012-03-27 ))))))))))))))))))))))))))))))))))))
.
.
2012-03-27 11:48 . 2012-03-27 11:51 -------- d-----w- c:\users\CORALIE\AppData\Local\temp
2012-03-27 11:48 . 2012-03-27 11:48 -------- d-----w- c:\users\LogMeInRemoteUser\AppData\Local\temp
2012-03-27 11:48 . 2012-03-27 11:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-03-26 19:48 . 2012-03-26 19:48 -------- d-----w- c:\programdata\Software
2012-03-26 19:48 . 2012-03-26 19:48 -------- d-----w- c:\program files\Software
2012-03-26 19:48 . 2012-03-26 19:48 -------- d-----w- c:\users\CORALIE\AppData\Local\Software
2012-03-26 19:48 . 2012-03-26 19:48 -------- d-----w- C:\Facemoi
2012-03-23 10:37 . 2012-03-23 10:37 -------- d-----w- c:\program files\hpmon
2012-03-23 10:36 . 2012-03-23 10:37 -------- d-----w- c:\program files\SweetIM
2012-03-23 10:36 . 2012-03-23 10:36 -------- d-----w- c:\programdata\SweetIM
2012-03-23 08:32 . 2012-03-24 10:07 -------- d-----w- C:\Pre_Scan
2012-03-22 11:31 . 2012-03-22 11:56 -------- d-----w- C:\FyK
2012-03-22 09:54 . 2012-03-22 10:06 -------- d-----w- c:\users\CORALIE\AppData\Roaming\GetRightToGo
2012-03-19 10:17 . 2012-03-19 10:26 -------- d-----w- c:\programdata\Studio-Scrap4
2012-03-19 10:12 . 2003-03-19 07:04 618496 ----a-w- c:\windows\system32\stlpmt45.dll
2012-03-19 10:12 . 2010-01-08 11:51 210944 ----a-w- c:\windows\system32\msvcrt10.dll
2012-03-19 10:12 . 2009-08-19 13:05 159744 ----a-w- c:\windows\system32\MFCANS32.DLL
2012-03-19 10:12 . 2004-05-04 10:53 1645320 ----a-w- c:\windows\system32\gdiplus.dll
2012-03-19 10:12 . 2009-08-19 13:02 29952 ----a-w- c:\windows\system32\borlndmm.dll
2012-03-19 10:11 . 2012-03-26 20:18 -------- d-----w- c:\users\CORALIE\AppData\Roaming\Studio-Scrap4
2012-03-19 10:11 . 2012-03-26 20:16 -------- d-----w- c:\program files\StudioScrap4-Decouverte
2012-03-14 12:52 . 2012-03-27 11:13 -------- d-----w- c:\users\CORALIE\AppData\Roaming\Skype
2012-03-14 12:51 . 2012-03-14 12:51 -------- d-----w- c:\program files\Common Files\Skype
2012-03-14 12:51 . 2012-03-14 12:52 -------- d-----r- c:\program files\Skype
2012-03-02 10:54 . 2012-03-02 10:54 5164704 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-02-27 13:05 . 2012-03-23 11:24 -------- d-----w- c:\program files\PDFCreator
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-27 10:40 . 2011-12-19 07:29 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-23 21:23 . 2012-02-23 21:23 4448256 ----a-w- c:\windows\system32\GPhotos.scr
2012-01-26 23:21 . 2010-01-26 20:09 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-01-17 03:39 . 2012-02-03 18:46 6557240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{486F3061-35C5-4A44-BF82-95EE97E64036}\mpengine.dll
2012-01-06 11:24 . 2012-01-06 11:24 161792 ----a-w- c:\windows\system32\msls31.dll
2012-01-06 11:24 . 2012-01-06 11:24 1127424 ----a-w- c:\windows\system32\wininet.dll
2012-01-06 11:24 . 2012-01-06 11:24 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-01-06 11:24 . 2012-01-06 11:24 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-01-06 11:24 . 2012-01-06 11:24 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-01-06 11:24 . 2012-01-06 11:24 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-01-06 11:24 . 2012-01-06 11:24 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-01-06 11:24 . 2012-01-06 11:24 367104 ----a-w- c:\windows\system32\html.iec
2012-01-06 11:24 . 2012-01-06 11:24 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-01-06 11:24 . 2012-01-06 11:24 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-01-06 11:24 . 2012-01-06 11:24 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2012-01-06 11:24 . 2012-01-06 11:24 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-01-06 11:24 . 2012-01-06 11:24 152064 ----a-w- c:\windows\system32\wextract.exe
2012-01-06 11:24 . 2012-01-06 11:24 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-01-06 11:24 . 2012-01-06 11:24 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-01-06 11:24 . 2012-01-06 11:24 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-01-06 11:24 . 2012-01-06 11:24 11776 ----a-w- c:\windows\system32\mshta.exe
2012-01-06 11:24 . 2012-01-06 11:24 101888 ----a-w- c:\windows\system32\admparse.dll
2012-01-06 11:24 . 2012-01-06 11:24 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-01-06 11:24 . 2012-01-06 11:24 1798144 ----a-w- c:\windows\system32\jscript9.dll
2012-01-06 11:24 . 2012-01-06 11:24 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-01-06 11:22 . 2012-01-06 11:22 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2012-01-06 11:22 . 2012-01-06 11:22 98816 ----a-w- c:\windows\system32\mfps.dll
2012-01-06 11:22 . 2012-01-06 11:22 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll
2012-01-06 11:22 . 2012-01-06 11:22 302592 ----a-w- c:\windows\system32\mfmp4src.dll
2012-01-06 11:22 . 2012-01-06 11:22 2873344 ----a-w- c:\windows\system32\mf.dll
2012-01-06 11:22 . 2012-01-06 11:22 261632 ----a-w- c:\windows\system32\mfreadwrite.dll
2012-01-06 11:22 . 2012-01-06 11:22 586240 ----a-w- c:\windows\system32\stobject.dll
2012-01-06 11:22 . 2012-01-06 11:22 209920 ----a-w- c:\windows\system32\mfplat.dll
2012-01-06 11:22 . 2012-01-06 11:22 683008 ----a-w- c:\windows\system32\d2d1.dll
2012-01-06 11:22 . 2012-01-06 11:22 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-01-06 11:22 . 2012-01-06 11:22 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2012-01-06 11:22 . 2012-01-06 11:22 1068544 ----a-w- c:\windows\system32\DWrite.dll
2012-01-06 11:22 . 2012-01-06 11:22 797184 ----a-w- c:\windows\system32\FntCache.dll
2012-01-06 11:22 . 2012-01-06 11:22 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2012-01-06 11:22 . 2012-01-06 11:22 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2012-01-06 11:22 . 2012-01-06 11:22 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-01-06 11:22 . 2012-01-06 11:22 189952 ----a-w- c:\windows\system32\d3d10core.dll
2012-01-06 11:22 . 2012-01-06 11:22 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2012-01-06 11:22 . 2012-01-06 11:22 1029120 ----a-w- c:\windows\system32\d3d10.dll
2012-01-06 11:22 . 2012-01-06 11:22 478720 ----a-w- c:\windows\system32\dxgi.dll
2012-01-06 11:22 . 2012-01-06 11:22 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2012-01-06 11:22 . 2012-01-06 11:22 638336 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2012-01-06 11:22 . 2012-01-06 11:22 37376 ----a-w- c:\windows\system32\cdd.dll
2012-01-06 11:22 . 2012-01-06 11:22 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
2012-01-06 11:22 . 2012-01-06 11:22 258048 ----a-w- c:\windows\system32\winspool.drv
2012-01-06 11:22 . 2012-01-06 11:22 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2012-01-06 11:22 . 2012-01-06 11:22 847360 ----a-w- c:\windows\system32\OpcServices.dll
2012-01-06 11:22 . 2012-01-06 11:22 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2012-01-06 11:17 . 2012-01-06 11:17 4096 ----a-w- c:\windows\system32\drivers\fr-FR\dxgkrnl.sys.mui
2012-01-06 11:17 . 2012-01-06 11:17 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2012-01-06 11:17 . 2012-01-06 11:17 252928 ----a-w- c:\windows\system32\dxdiag.exe
2012-01-06 11:17 . 2012-01-06 11:17 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2012-01-06 11:17 . 2012-01-06 11:17 519680 ----a-w- c:\windows\system32\d3d11.dll
2012-01-06 11:17 . 2012-01-06 11:17 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2012-01-06 11:16 . 2012-01-06 11:16 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2012-01-06 11:16 . 2012-01-06 11:16 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2011-12-30 15:53 . 2011-04-01 10:51 18740 ----a-w- c:\users\CORALIE\AppData\Roaming\Microsoft\Windows\Templates\usbalcor.sys
2011-12-30 15:53 . 2011-04-01 10:51 3169221 ----a-w- c:\users\CORALIE\AppData\Roaming\Microsoft\Windows\Templates\AlcorDemo\tp.exe
2011-12-30 15:53 . 2011-04-01 10:51 974848 ----a-w- c:\users\CORALIE\AppData\Roaming\Microsoft\Windows\Templates\AlcorDemo\smartap.exe
2011-12-30 15:53 . 2011-04-01 10:51 16552 ----a-w- c:\users\CORALIE\AppData\Roaming\Microsoft\Windows\Templates\alcrfilt.sys
2008-09-30 16:26 . 2008-09-30 16:26 9775104 ----a-w- c:\program files\openofficeorg30.msi
2002-03-11 09:06 . 2002-03-11 09:06 1822520 ----a-w- c:\program files\instmsiw.exe
2002-03-11 08:45 . 2002-03-11 08:45 1708856 ----a-w- c:\program files\instmsia.exe
2011-12-21 07:49 . 2012-01-06 17:29 121816 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2010-07-15 14:49 . 2010-07-15 14:49 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2012-01-15 11:27 1330480 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CB14350D-B064-4283-9145-B63F96772108}"= "c:\program files\PlanetSurf\Toolbar\PlanetSurf.dll" [2012-01-12 481280]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-01-15 1330480]
.
[HKEY_CLASSES_ROOT\clsid\{cb14350d-b064-4283-9145-b63f96772108}]
[HKEY_CLASSES_ROOT\PlanetSurfToolbar.IEHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{5FF54795-E6D4-4ca6-B7CD-1D0AE0745100}]
[HKEY_CLASSES_ROOT\PlanetSurfToolbar.IEHook]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2012-01-04 937872]
"uTorrent"="c:\users\CORALIE\Desktop\utorrent.exe" [2012-02-19 740216]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-04 39408]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-02-29 17148552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-22 815104]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2012-01-19 114992]
"Facemoi"="c:\facemoi\facemoi.exe" [2012-01-12 82944]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Rappels du Calendrier Microsoft Works.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Rappels du Calendrier Microsoft Works.lnk
backup=c:\windows\pss\Rappels du Calendrier Microsoft Works.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-02 09:07 843712 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
2005-06-23 18:33 57344 ----a-w- c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2012-01-03 21:51 37296 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-11-01 22:25 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DrvMon.exe]
2007-05-25 06:52 53248 ------w- c:\windows\System32\DrvMon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
2010-10-12 12:56 979328 ----a-w- c:\program files\Epson Software\Event Manager\EEventManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epson Stylus SX235(Réseau)]
2011-01-22 01:01 212480 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATIHLE.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2010-07-15 14:49 30192 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2008-01-14 12:12 1688872 ----a-w- c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-12-08 00:36 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
2012-01-04 06:07 937872 ----a-w- c:\program files\SAMSUNG\Kies\KiesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2012-01-04 06:07 3508624 ----a-w- c:\program files\SAMSUNG\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2012-01-13 13:53 460872 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2010-04-16 21:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-10-24 13:28 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2007-08-09 11:26 4702208 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
2007-08-03 05:22 1826816 ----a-w- c:\windows\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2006-11-10 10:35 90112 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-12-14 09:17 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-03-04 11:58 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2006-11-22 20:20 815104 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2012-02-19 12:44 740216 ----a-w- c:\users\CORALIE\Desktop\utorrent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiSpywareOverride"=dword:00000001
.
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenu du dossier 'Tâches planifiées'
.
2012-03-27 c:\windows\Tasks\Extension de garantie-CORALIE.job
- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2008-06-13 10:13]
.
2012-03-24 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-06-13 08:22]
.
2012-03-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-26 21:36]
.
2012-03-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-26 21:36]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://home.sweetim.com/?crg=4.0006002'
mStart Page = hxxp://home.sweetim.com/?crg=4.0006002'
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel
TCP: DhcpNameServer = 212.27.40.240 212.27.40.241
FF - ProfilePath - c:\users\CORALIE\AppData\Roaming\Mozilla\Firefox\Profiles\wog0rxkj.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=fr&q=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
MSConfigStartUp-BM9b9d8c15 - c:\users\CORALIE\AppData\Local\Temp\bjfjxsvc.dll
MSConfigStartUp-LogMeIn GUI - c:\program files\LogMeIn\x86\LogMeInSystray.exe
MSConfigStartUp-Microsoft Works Update Detection - h\WkDetect.exe
MSConfigStartUp-MSServer - c:\users\CORALIE\AppData\Local\Temp\jkkIBQhe.dll
MSConfigStartUp-OfferBox - c:\program files\OfferBox\OfferBox.exe
AddRemove-HijackThis - c:\users\CORALIE\AppData\Local\Temp\01net\HijackThis.exe
AddRemove-Picasa2 - c:\program files\Picasa2\Uninstall.exe
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-12_Symbian_USB_Download_Driver - c:\program files\SAMSUNG\USB Drivers\12_Symbian_USB_Download_Driver\Uninstall.exe
AddRemove-15_Symbian_Samsung_PC_DLC_Driver - c:\program files\SAMSUNG\USB Drivers\15_Symbian_Samsung_PC_DLC_Driver\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - c:\program files\SAMSUNG\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-27 13:50
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2012-03-27 13:59:42
ComboFix-quarantined-files.txt 2012-03-27 11:59
.
Avant-CF: 30 391 787 520 octets libres
Après-CF: 32 935 284 736 octets libres
.
- - End Of File - - 4DE16C81E32E9E2D15760D34AB732AE2

j'en ai aucune idée... suis allée sur faceb..k qui m'a demandé de mettre facemoi.exe que j'ai suppr aujourd'hui mais sinon je vois pas. je n'ai pas vu de barre d'outil diff de d'habitude. il y a une référence de cette barre dans le rapport. ?

je ne sait pas ce que sait, je vais essayer de désinstaller cette barre, et pour mon bagle ?
je viens aussi de trouver une barre foxlingo que j'ai désinstalé

ALors pour Bagle ?

A priori je n'ai toujours pas de rapport complet

############################## | FindyKill V5.056 |

# User : CORALIE (Administrateurs) # PC-DE-CORALIE
# Update on 20/11/2011 by El Desaparecido
# Start at: 14:50:53 | 05/04/2012
# Website : https://www.sosvirus.net/
# Contact : contact@eldesaparecido.com

# AMD Athlon(tm) 64 X2 Dual-Core Processor TK-57
# Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 9.0.8112.16421
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 99,79 Go (28,26 Go free) [HDD] # NTFS
# D:\ # Disque CD-ROM

################## | Eléments infectieux |

################## | Reference Bagle MD5 ... |

################## | MD5 ... |

non je lance findykill, ca travail quelques minute puis le PC s'éteint et redémarre et je vais chercher le rapport dans C:
et il n'y a que ça..?

re-bonsoir après une petite pause vacance :

Quand je lance suppression de usbfix , ca se lance et ensuite bloc à 14 % et ensuite ne répond plus même après pluiseurs heures.

il faut forcer l'extinction de l'ordinateur pour pouvoir sortir.

??

Après un long moment d'absence voici le rapport usbfix

############################## | UsbFix V 7.084 | [Suppression]

Utilisateur: CORALIE (Administrateur) # PC-DE-CORALIE
Mis à jour le 13/03/2012 par El Desaparecido
Lancé à 19:57:41 | 14/05/2012

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com

PC: Packard Bell BV (EASYNOTE_MX61-B-049FR) (X86-based PC) # Notebook
CPU: AMD Athlon(tm) 64 X2 Dual-Core Processor TK-57 (798)
RAM -> [ Total : 2046 | Free : 1615 ]
BIOS: Default System BIOS
BOOT: Fail-safe boot

OS: Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
AV: avast! Antivirus [ Enabled | Updated ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 100 Go (30 Go libre(s) - 30%) [HDD] # NTFS
D:\ -> CD-ROM

################## | Processus Actif |

C:\Windows\system32\csrss.exe (400)
C:\Windows\system32\csrss.exe (440)
C:\Windows\system32\wininit.exe (448)
C:\Windows\system32\services.exe (500)
C:\Windows\system32\winlogon.exe (508)
C:\Windows\system32\lsass.exe (536)
C:\Windows\system32\lsm.exe (544)
C:\Windows\system32\svchost.exe (684)
C:\Windows\system32\svchost.exe (740)
C:\Windows\System32\svchost.exe (820)
C:\Windows\system32\svchost.exe (856)
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (916)
C:\Windows\Explorer.EXE (1076)
C:\Windows\system32\svchost.exe (1116)
C:\Windows\system32\wbem\unsecapp.exe (1552)
C:\Windows\system32\wbem\wmiprvse.exe (1620)
C:\UsbFix\Go.exe (1996)
C:\Windows\system32\wbem\wmiprvse.exe (188)
C:\Program Files\AVAST Software\Avast\AvastUI.exe (1040)

################## | Processus Stoppés |

Stoppé! C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (916)
Stoppé! C:\Windows\Explorer.EXE (1076)
Stoppé! C:\Program Files\AVAST Software\Avast\AvastUI.exe (1040)

################## | Éléments infectieux |

Supprimé! C:\Users\CORALIE\AppData\Local\Temp\uninst.exe
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-648746877-2547433919-956782377-1000

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

################## | Listing |

[14/05/2012 - 20:09:52 | SHD ] C:\$RECYCLE.BIN
[14/12/2011 - 12:01:25 | N | 1024] C:\.rnd
[24/09/2008 - 18:35:52 | D ] C:\55ff2eb794c074e1ecb071913cc6
[08/12/2010 - 20:39:26 | N | 118814] C:\AdobeDebug.txt
[18/09/2006 - 23:43:36 | N | 24] C:\autoexec.bat
[13/06/2008 - 19:19:43 | D ] C:\boot
[21/01/2008 - 04:24:42 | RASH | 333203] C:\bootmgr
[13/06/2008 - 19:19:45 | N | 8192] C:\BOOTSECT.BAK
[27/03/2012 - 13:59:43 | N | 26396] C:\ComboFix.txt
[23/03/2012 - 12:37:15 | D ] C:\Config.Msi
[18/09/2006 - 23:43:37 | N | 10] C:\config.sys
[27/03/2012 - 13:59:56 | D ] C:\CoralieCombofix
[23/12/2008 - 22:28:23 | N | 0] C:\DBS.TXT
[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings
[03/02/2012 - 22:57:19 | D ] C:\drivers
[23/03/2012 - 12:37:36 | N | 346] C:\END
[23/04/2008 - 17:10:04 | N | 2916] C:\files.crc
[05/04/2012 - 22:48:07 | D ] C:\FyK
[05/04/2012 - 22:48:09 | N | 711] C:\FyK.txt
[10/10/2008 - 16:03:14 | D ] C:\HSF
[22/06/2010 - 22:42:47 | D ] C:\Install
[07/10/2008 - 17:30:47 | N | 0] C:\IO.SYS
[07/10/2008 - 17:30:47 | N | 0] C:\MSDOS.SYS
[13/06/2008 - 10:34:00 | RD ] C:\MSOCache
[08/01/2012 - 18:54:09 | D ] C:\OpenOfficePortable
[29/02/2004 - 17:44:34 | N | 52576] C:\orange.bmp
[14/05/2012 - 19:54:05 | ASH | 2460442624] C:\pagefile.sys
[21/01/2008 - 04:32:31 | D ] C:\PerfLogs
[25/02/2010 - 22:12:25 | D ] C:\pnp
[24/03/2012 - 12:07:04 | D ] C:\Pre_Scan
[28/04/2012 - 00:39:44 | D ] C:\Program Files
[28/04/2012 - 19:06:27 | D ] C:\ProgramData
[08/06/2009 - 19:12:48 | D ] C:\PVSW
[27/03/2012 - 13:59:54 | D ] C:\Qoobox
[13/06/2008 - 10:04:05 | N | 426] C:\RHDSetup.log
[13/06/2008 - 10:05:04 | N | 86] C:\setup.log
[23/04/2012 - 19:12:23 | SHD ] C:\System Volume Information
[20/09/2008 - 15:43:40 | D ] C:\Temp
[23/11/2008 - 14:29:44 | D ] C:\tmp
[14/05/2012 - 20:09:52 | D ] C:\UsbFix
[14/05/2012 - 19:57:55 | A | 2041] C:\UsbFix.txt
[08/01/2012 - 18:06:22 | D ] C:\Users
[22/02/2009 - 13:51:18 | D ] C:\Voir pour supprimer
[01/04/2012 - 20:08:38 | D ] C:\Windows

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-CORALIE.zip
http://eldesaparecido.com/upload.html
Merci de votre contribution.

################## | E.O.F |

ca veut dire quoi que mon ordi est contaminé ou bien ?

non c'est sur mais j'étais en déplacement professionnel, alors on peut s'y remettre plus avec plus d'assiduité. Merci d'avance.

ok merci