[virus] rapport kaspersky

comme je le mettais dans mon message, j'ai deja supprime le fichier D:\Incomplete\_\q7q7q7q7q7q7q7q7xx.zip

est ce que c'est termine? jai en ce moment un probleme de memoir virtuelle: G environ 2go de libre sur ma partition C: et 8go sur mon disque D:. Jai recuperé Tune up pour nettoyer un peu mon ordi.

merci bcp. Est ceque j'ai encore des log a faire??? merci

voila le rapport combo scan. g enelve adobe R de ma cle usb et dans le fichier windows. voila merci pour le suite!!!!


ComboScan v20070306.20 run by Benjamin on 2007-04-13 at 06:47:16
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-04-13 06:47:30
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.0.2900.2180)

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Club-Internet\Agent Wi-Fi V2.1\McciTrayApp.exe
C:\Documents and Settings\Benjamin\Bureau\comboscan.exe
C:\WINDOWS\explorer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://update.zonelabs.com/downloadrequest?updtConfId=42&updtReqId=0
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra 'Tools' menuitem: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: Diagnostiquer les problèmes de connexion... - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://www.dlrp.fr (HKCU)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by106fd.bay106.hotmail.msn.com/activex/HMAtchmt.ocx
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\system32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - "C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe"
O23 - Service: Avertissement (Alerter) - C:\WINDOWS\System32\svchost.exe -k LocalService
O23 - Service: Service de la passerelle de la couche Application (ALG) - C:\WINDOWS\system32\alg.exe
O23 - Service: Gestion d'applications (AppMgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
O23 - Service: Audio Windows (AudioSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Autodesk Licensing Service - "C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe"
O23 - Service: Autodesk Network Licensing Service - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskNetSrv.exe
O23 - Service: avast! Antivirus - "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
O23 - Service: avast! Mail Scanner - "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
O23 - Service: avast! Web Scanner - "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Explorateur d'ordinateur (Browser) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: C-DillaCdaC11BA - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Service d'indexation (CiSvc) - C:\WINDOWS\system32\cisvc.exe
O23 - Service: Gestionnaire de l'Album (ClipSrv) - C:\WINDOWS\system32\clipsrv.exe
O23 - Service: Application système COM+ (COMSysApp) - C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
O23 - Service: Services de cryptographie (CryptSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Lanceur de processus serveur DCOM (DcomLaunch) - C:\WINDOWS\system32\svchost -k DcomLaunch
O23 - Service: Client DHCP (Dhcp) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - C:\WINDOWS\System32\dmadmin.exe /com
O23 - Service: Gestionnaire de disque logique (dmserver) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Client DNS (Dnscache) - C:\WINDOWS\System32\svchost.exe -k NetworkService
O23 - Service: Service de rapport d'erreurs (ERSvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Journal des événements (Eventlog) - C:\WINDOWS\system32\services.exe
O23 - Service: Système d'événements de COM+ (EventSystem) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Aide et support (helpsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: HID Input Service (HidServ) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: HTTP SSL (HTTPFilter) - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
O23 - Service: InstallDriver Table Manager (IDriverT) - "C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - C:\WINDOWS\system32\imapi.exe
O23 - Service: Moniteur infrarouge (Irmon) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Serveur (lanmanserver) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Station de travail (lanmanworkstation) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Assistance TCP/IP NetBIOS (LmHosts) - C:\WINDOWS\System32\svchost.exe -k LocalService
O23 - Service: Affichage des messages (Messenger) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - C:\WINDOWS\system32\msdtc.exe
O23 - Service: Windows Installer (MSIServer) - C:\WINDOWS\system32\msiexec.exe /V
O23 - Service: DDE réseau (NetDDE) - C:\WINDOWS\system32\netdde.exe
O23 - Service: DSDM DDE réseau (NetDDEdsdm) - C:\WINDOWS\system32\netdde.exe
O23 - Service: Ouverture de session réseau (Netlogon) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Connexions réseau (Netman) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: NLA (Network Location Awareness) (Nla) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Stockage amovible (NtmsSvc) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Office Source Engine (ose) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
O23 - Service: Plug-and-Play (PlugPlay) - C:\WINDOWS\system32\services.exe
O23 - Service: Pml Driver HPZ12 - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Services IPSEC (PolicyAgent) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Emplacement protégé (ProtectedStorage) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Gestionnaire de connexion automatique d'accès distant (RasAuto) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Gestionnaire de connexions d'accès distant (RasMan) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Routage et accès distant (RemoteAccess) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Accès à distance au Registre (RemoteRegistry) - C:\WINDOWS\system32\svchost.exe -k LocalService
O23 - Service: Localisateur d'appels de procédure distante (RPC) (RpcLocator) - C:\WINDOWS\system32\locator.exe
O23 - Service: Appel de procédure distante (RPC) (RpcSs) - C:\WINDOWS\system32\svchost -k rpcss
O23 - Service: QoS RSVP (RSVP) - C:\WINDOWS\system32\rsvp.exe
O23 - Service: Gestionnaire de comptes de sécurité (SamSs) - C:\WINDOWS\system32\lsass.exe
O23 - Service: Carte à puce (SCardSvr) - C:\WINDOWS\system32\scardsvr.exe
O23 - Service: Planificateur de tâches (Schedule) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Connexion secondaire (seclogon) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Notification d'événement système (SENS) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Pare-feu Windows / Partage de connexion Internet (SharedAccess) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Détection matériel noyau (ShellHWDetection) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Spouleur d'impression (Spooler) - C:\WINDOWS\system32\spoolsv.exe
O23 - Service: Service de restauration système (srservice) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Service de découvertes SSDP (SSDPSRV) - C:\WINDOWS\System32\svchost.exe -k LocalService
O23 - Service: Acquisition d'image Windows (WIA) (stisvc) - C:\WINDOWS\System32\svchost.exe -k imgsvc
O23 - Service: MS Software Shadow Copy Provider (SwPrv) - C:\WINDOWS\System32\dllhost.exe /Processid:{79B9204A-10C9-40B7-9643-CF70202FCBDF}
O23 - Service: Journaux et alertes de performance (SysmonLog) - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Téléphonie (TapiSrv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Services Terminal Server (TermService) - C:\WINDOWS\System32\svchost -k DComLaunch
O23 - Service: Thèmes (Themes) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Telnet (TlntSvr) - C:\WINDOWS\system32\tlntsvr.exe
O23 - Service: Client de suivi de lien distribué (TrkWks) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Hôte de périphérique universel Plug-and-Play (upnphost) - C:\WINDOWS\System32\svchost.exe -k LocalService
O23 - Service: Onduleur (UPS) - C:\WINDOWS\system32\ups.exe
O23 - Service: Extension de conception TuneUp (UxTuneUp) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: TrueVector Internet Monitor (vsmon) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service
O23 - Service: Cliché instantané de volume (VSS) - C:\WINDOWS\system32\vssvc.exe
O23 - Service: Horloge Windows (W32Time) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: WebClient - C:\WINDOWS\System32\svchost.exe -k LocalService
O23 - Service: Infrastructure de gestion Windows (winmgmt) - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Service de numéro de série du lecteur multimédia portable (WmdmPmSN) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Extensions du pilote WMI (Wmi) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Carte de performance WMI (WmiApSrv) - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - "C:\Program Files\Windows Media Player\WMPNetwk.exe"
O23 - Service: Centre de sécurité (wscsvc) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Mises à jour automatiques (wuauserv) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Windows Driver Foundation - User-mode Driver Framework (WudfSvc) - C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
O23 - Service: Configuration automatique sans fil (WZCSVC) - C:\WINDOWS\System32\svchost.exe -k netsvcs
O23 - Service: Service d'approvisionnement réseau (xmlprov) - C:\WINDOWS\System32\svchost.exe -k netsvcs


-- Files created between 2007-03-13 and 2007-04-13 -----------------------------

2007-04-09 22:08:19 0 d-------- C:\Documents and Settings\Benjamin\Application Data\U3
2007-04-08 19:37:14 0 d-------- C:\Ma musique<MAMUSI~1>
2007-04-07 20:50:20 24072 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-04-07 20:49:43 0 d-------- C:\Documents and Settings\Benjamin\Application Data\TuneUp Software<TUNEUP~1>
2007-04-07 20:48:37 0 d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software<TUNEUP~1>
2007-04-07 20:48:03 0 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard<WISEIN~1>
2007-03-24 12:19:52 0 d-------- C:\WINDOWS\system32\Kaspersky Lab<KASPER~1>
2007-03-23 15:37:33 2300 --a------ C:\WINDOWS\system32\tmp.reg
2007-03-23 15:36:59 79360 --a------ C:\WINDOWS\system32\swxcacls.exe
2007-03-23 15:36:59 40960 --a------ C:\WINDOWS\system32\swsc.exe
2007-03-23 15:36:59 135168 --a------ C:\WINDOWS\system32\swreg.exe
2007-03-23 15:36:59 288417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-03-23 15:36:59 53248 --a------ C:\WINDOWS\system32\Process.exe
2007-03-23 15:36:59 51200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-03-23 13:38:03 23352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-03-23 13:38:02 43176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-03-23 13:37:58 31560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-03-23 13:37:56 94424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-03-23 13:37:56 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-03-23 13:37:50 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-03-23 13:37:50 689280 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-03-23 13:37:45 0 d-------- C:\Program Files\Alwil Software<ALWILS~1>
2007-03-22 00:01:16 0 d-------- C:\Documents and Settings\Benjamin\Application Data\Talkback
2007-03-21 23:39:33 0 d-------- C:\Program Files\Fichiers communs\NSV
2007-03-21 21:51:03 0 d-------- C:\Documents and Settings\All Users\Application Data\Avg7
2007-03-21 01:19:05 0 d-------- C:\WINDOWS\pss
2007-03-21 01:15:09 0 d-------- C:\WINDOWS\AU_Temp
2007-03-20 23:39:57 0 d-------- C:\WINDOWS\report
2007-03-20 23:39:18 0 d-------- C:\WINDOWS\AU_Backup<AU_BAC~1>
2007-03-20 23:39:17 229957 --a------ C:\WINDOWS\tsc.exe
2007-03-20 23:39:16 1101904 --a------ C:\WINDOWS\vsapi32.dll
2007-03-20 23:39:16 71749 --a------ C:\WINDOWS\hcextoutput.dll<HCEXTO~1.DLL>
2007-03-20 23:39:15 86094 --a------ C:\WINDOWS\BPMNT.dll
2007-03-20 23:37:57 0 d-------- C:\WINDOWS\AU_Log
2007-03-20 23:37:45 507904 --a------ C:\WINDOWS\TMUPDATE.DLL
2007-03-20 23:37:44 69689 --a------ C:\WINDOWS\UNZIP.DLL
2007-03-20 23:37:43 286720 --a------ C:\WINDOWS\PATCH.EXE
2007-03-15 13:10:23 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys


-- Find3M Report ---------------------------------------------------------------

2007-04-09 22:10:42 0 d-------- C:\Documents and Settings\Benjamin\Application Data\Adobe
2007-04-07 23:37:52 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-04-07 20:48:03 0 d-------- C:\Program Files\Fichiers communs<FICHIE~1>
2007-04-03 21:22:07 0 d-------- C:\Program Files\Java
2007-03-25 10:32:31 368314 --a----c- C:\WINDOWS\system32\perfh00C.dat
2007-03-25 10:32:31 49054 --a----c- C:\WINDOWS\system32\perfc00C.dat
2007-03-24 00:11:27 0 d-------- C:\Program Files\Virtools Web Player 3.5<VIRTOO~1.5>
2007-03-23 20:45:11 0 d-------- C:\Program Files\ProjectPoint-7<PROJEC~1>
2007-03-21 23:51:24 1763 --a------ C:\WINDOWS\mozver.dat
2007-03-21 21:56:09 0 d-------- C:\Program Files\Windows Media Connect 2<WINDOW~4>
2007-03-21 21:51:29 0 d-------- C:\Program Files\DivX
2007-03-21 21:51:01 0 d---s---- C:\Documents and Settings\Benjamin\Application Data\Microsoft<MICROS~1>
2007-03-19 18:20:53 0 d-------- C:\Documents and Settings\Benjamin\Application Data\Autodesk
2007-02-25 01:46:43 147456 --a------ C:\WINDOWS\system32\vbzip10.dll
2007-02-23 22:23:08 606848 --a------ C:\WINDOWS\flashax.exe
2007-02-15 20:01:15 0 d-------- C:\Documents and Settings\Benjamin\Application Data\AdobeUM
2007-02-15 19:36:31 0 d-------- C:\Documents and Settings\Benjamin\Application Data\DivX
2007-01-29 10:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe


-- Registry Dump ---------------------------------------------------------------


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"CARPService"="carpserv.exe"
"Zone Labs Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"Motive SmartBridge"="C:\\PROGRA~1\\CLUB-I~1\\LECOMP~1\\SMARTB~1\\MotiveSB.exe"
"TkBellExe"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"=dword:00000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0

HKLM\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs*
UxTuneUp


[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\##172.17.1.5#forum_pedago]
Shell\1\Command .\RECYCLER\RECYCLER\autorun.exe
Shell\2\Command .\RECYCLER\RECYCLER\autorun.exe
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\RECYCLER\RECYCLER\autorun.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F]
Shell\AutoRun\command F:\LaunchU3.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{06e4c2c1-e6d6-11db-bd00-00904b463ac0}]
Shell\Auto\command G:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{15261da0-b079-11db-bc26-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{236f7cd0-474b-11db-baa1-00904b463ac0}]
Shell\AutoRun\command explorer.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{28267b87-7ec0-11db-bb5a-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e87c540-c3f1-11db-bc7a-00904b463ac0}]
Shell\Auto\command AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{409723b0-9f02-11db-bbe1-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{54c5294c-d099-11da-b8d4-000d9d84330e}]
Shell\AutoRun\command explorer.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{56da1ec0-d6e9-11db-bcc8-c5f7719d5732}]
Shell\AutoRun\command explorer.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{57f30d31-8ea0-11db-bb98-00904b463ac0}]
Shell\Auto\command AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{57f30d38-8ea0-11db-bb98-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70b771f0-8f3b-11db-bb9c-00904b463ac0}]
Shell\AutoRun\command F:\ie.exe
Shell\explore\Command F:\ie.exe
Shell\open\Command F:\ie.exe

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8e57a0a1-793b-11db-bb44-00904b463ac0}]
Shell\Auto\command AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8e57a0a2-793b-11db-bb44-00904b463ac0}]
Shell\Auto\command AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{986b16b8-a083-11db-bbe5-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ca3d1910-b5fd-11db-bc3a-00904b463ac0}]
Shell\Auto\command G:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ca3d1913-b5fd-11db-bc3a-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e3292491-e639-11db-bcfc-00904b463ac0}]
Shell\Auto\command AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e5186a8a-b374-11db-bc33-00904b463ac0}]
Shell\Auto\command G:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{eafe3ab3-601f-11db-bae7-00904b463ac0}]
Shell\Auto\command F:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{edf522e8-d21e-11db-bcb3-000d9d84330e}]
Shell\Auto\command AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{eeb59052-6e41-11db-bb21-00904b463ac0}]
Shell\Auto\command G:\AdobeR.exe e
Shell\AutoRun\command C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e


-- End of ComboScan: finished at 2007-04-13 at 06:48:07 ------------------------

voila pour les rapports:

STATUS: FINISHED

Complete scanning result of "vbzip10.dll", received in VirusTotal at 04.22.2007, 23:34:14 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.21.0 04.20.2007 no virus found
AntiVir 7.3.1.53 04.22.2007 no virus found
Authentium 4.93.8 04.20.2007 no virus found
Avast 4.7.981.0 04.21.2007 no virus found
AVG 7.5.0.464 04.22.2007 no virus found
BitDefender 7.2 04.22.2007 no virus found
CAT-QuickHeal 9.00 04.21.2007 no virus found
ClamAV devel-20070416 04.22.2007 no virus found
DrWeb 4.33 04.22.2007 no virus found
eSafe 7.0.15.0 04.22.2007 no virus found
eTrust-Vet 30.7.3585 04.21.2007 no virus found
Ewido 4.0 04.22.2007 no virus found
FileAdvisor 1 04.22.2007 No threat detected
Fortinet 2.85.0.0 04.22.2007 no virus found
F-Prot 4.3.2.48 04.20.2007 no virus found
F-Secure 6.70.13030.0 04.22.2007 no virus found
Ikarus T3.1.1.5 04.22.2007 no virus found
Kaspersky 4.0.2.24 04.22.2007 no virus found
McAfee 5014 04.20.2007 no virus found
Microsoft 1.2405 04.22.2007 no virus found
NOD32v2 2210 04.22.2007 no virus found
Norman 5.80.02 04.21.2007 no virus found
Panda 9.0.0.4 04.22.2007 no virus found
Prevx1 V2 04.22.2007 no virus found
Sophos 4.16.0 04.20.2007 no virus found
Sunbelt 2.2.907.0 04.19.2007 no virus found
Symantec 10 04.22.2007 no virus found
TheHacker 6.1.6.088 04.09.2007 no virus found
VBA32 3.11.4 04.21.2007 no virus found
VirusBuster 4.3.7:9 04.22.2007 no virus found
Webwasher-Gateway 6.0.1 04.22.2007 no virus found


Aditional Information
File size: 147456 bytes
MD5: 5b25690cc2e55a6d4bc965068a7ba1ef
SHA1: 58a5f2613df475b69e60b691215d5c60462cedb3
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=5b25690cc2e55a6d4bc965068a7ba1ef

STATUS: FINISHED

Complete scanning result of "flashax.exe", received in VirusTotal at 04.22.2007, 23:43:16 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.4.21.0 04.20.2007 no virus found
AntiVir 7.3.1.53 04.22.2007 no virus found
Authentium 4.93.8 04.20.2007 no virus found
Avast 4.7.981.0 04.21.2007 no virus found
AVG 7.5.0.464 04.22.2007 no virus found
BitDefender 7.2 04.22.2007 no virus found
CAT-QuickHeal 9.00 04.21.2007 no virus found
ClamAV devel-20070416 04.22.2007 no virus found
DrWeb 4.33 04.22.2007 no virus found
eSafe 7.0.15.0 04.22.2007 no virus found
eTrust-Vet 30.7.3585 04.21.2007 no virus found
Ewido 4.0 04.22.2007 no virus found
FileAdvisor 1 04.23.2007 No threat detected
Fortinet 2.85.0.0 04.22.2007 suspicious
F-Prot 4.3.2.48 04.20.2007 no virus found
F-Secure 6.70.13030.0 04.22.2007 no virus found
Ikarus T3.1.1.5 04.22.2007 no virus found
Kaspersky 4.0.2.24 04.22.2007 no virus found
McAfee 5014 04.20.2007 no virus found
Microsoft 1.2405 04.22.2007 no virus found
NOD32v2 2210 04.22.2007 no virus found
Norman 5.80.02 04.21.2007 no virus found
Panda 9.0.0.4 04.22.2007 no virus found
Prevx1 V2 04.23.2007 no virus found
Sophos 4.16.0 04.20.2007 no virus found
Sunbelt 2.2.907.0 04.19.2007 no virus found
Symantec 10 04.22.2007 no virus found
TheHacker 6.1.6.095 04.15.2007 no virus found
VBA32 3.11.4 04.21.2007 no virus found
VirusBuster 4.3.7:9 04.22.2007 no virus found
Webwasher-Gateway 6.0.1 04.22.2007 no virus found


Aditional Information
File size: 606848 bytes
MD5: a16126510106990df3e4445191adead8
SHA1: 444b40b55c52b57472a6011ea7bdc5e2566e0242
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=a16126510106990df3e4445191adead8



vivement la suite merci! (g un peu trainé j'etais pas en france...)

bonjour...

Au niveau de mes problemes ca va pas mal... J'utilise Avast comme antivirus et Zone Alarm comme
Sinon j'ai aussi telechargé recemment 2 utilitaires de nettoyage et optimisation suite a un probleme de memoire vive... c ZN soft XP et Tune up2007... voila! merci

oki j'ai choisi... mais ça fait rien d'en avoir 2 ils ne se genent pas entres eux? je sais par exemple qu'il vau mieux eviter d'avoir 2 antivirus installé sur son ordi car on gagne pas en efficacité plutot le contraire meme... sinon c'est tout ce que j'ai a faire? merci

merci bcp pour toutes ces manip meme si g pas forcement tout compris a ce que j'ai enlevé et qui etai nuisible et pkoi... Mon ordi va pas mal, j'ai une antispy avec ZA et j'ai telechargé Spybot... autre chose??? merci encore une fois!