Virus msn

RE,
j'ai fait le rapport hijackthis, téléchargé et dezipper SDFix,
mais quand je veut démarrè le mode sans échec, j'arrive dans le menu mais je peut pas mettre mode sans echec en surbrillance car les flèche ne fonctionne pas ....
Es-que sa vient de windows ? ou de mon clavier ?
merci
a+++

Voila le rapport
dsl j'ai ete un peu long mon PC plante ..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:44:25, on 02/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\documents and settings\administrateur\local settings\application data\twashdxqg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dm_0233.exe
C:\hijackthis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.microsoft.net:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: e404 helper - {C03FD59D-9104-44B7-929A-9EAA0BA05211} - C:\Program Files\Helper\1204229186.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [Flash Media] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [twashdxqg] c:\documents and settings\administrateur\local settings\application data\twashdxqg.exe twashdxqg
O4 - HKLM\..\Policies\Explorer\Run: [update32] C:\WINDOWS\lwsys32.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{87B070B2-8A6D-47E0-90FB-58F7DA9D09F1}: NameServer = 85.255.113.92,85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: NameServer = 85.255.113.92,85.255.112.83
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.92 85.255.112.83
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.113.92 85.255.112.83
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.92 85.255.112.83
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

report.txt :

Username "Administrateur" - 02/03/2008 15:11:49 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kdpsy.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
"nameserver"="85.255.113.92 85.255.112.83" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{87B070B2-8A6D-47E0-90FB-58F7DA9D09F1}
"nameserver"="85.255.113.92,85.255.112.83" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{950A1579-1A73-4690-AEF6-2AA4C547A72C}
"nameserver"="85.255.113.92,85.255.112.83" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{58DD4A1E-34D0-482B-831F-9139C951F400}
"DhcpNameServer"="85.255.113.92,85.255.112.83" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{87B070B2-8A6D-47E0-90FB-58F7DA9D09F1}
"DhcpNameServer"="85.255.113.92,85.255.112.83" <Value cleared.

Cache de résolution DNS vidé.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"=""
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....
~~~~~ Other
C:\WINDOWS\Temp\kdpsy.ren 75264 22/08/2004

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"P2P Networking"="C:\\WINDOWS\\system32\\P2P Networking\\P2P Networking.exe /AUTOSTART"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_03\\bin\\jusched.exe\""
"HostManager"="C:\\Program Files\\Fichiers communs\\AOL\\1171821188\\ee\\AOLSoftware.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"UVS11 Preload"="C:\\Program Files\\Ulead Systems\\Ulead VideoStudio 11\\uvPL.exe"
"Flash Media"="C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\services.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"twashdxqg"="c:\\documents and settings\\administrateur\\local settings\\application data\\twashdxqg.exe twashdxqg"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~

pour le HijackThis je n'ai pas reussi :
dans la liste il me manque :
.O4 - HKCU\..\Run: [twashdxqg] c:\documents and settings\administrateur\local settings\application data\twashdxqg.exe twashdxqg
.tout les O17
ensuite j'ai fait "analyse" il m'a dirigé sur cette page web : http://hjt-data.trend-braintree.com/hjt/analyzethis/index.php?report=5684191
j'ai fait Fix et il m'a affiché un message mais pas de rapport.
a+++

SmitFraudFix v2.299

Rapport fait à 15:32:39,82, 02/03/2008
Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\documents and settings\administrateur\local settings\application data\twashdxqg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\Helper\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"system"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

voila le rapport du nettoyage :

SmitFraudFix v2.299

Rapport fait à 17:18:47,85, 02/03/2008
Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\Program Files\Helper\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{950A1579-1A73-4690-AEF6-2AA4C547A72C}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"system"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin



PS : merci mon PC ne plante plus pour le moment ...

voila le rapport de moveit :

File/Folder C:\Program Files\Helper\1204229186.dll not found.
C:\WINDOWS\system32\P2P Networking\P2P Networking.exe moved successfully.
File move failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe scheduled to be moved on reboot.
File move failed. c:\documents and settings\administrateur\local settings\application data\twashdxqg.exe scheduled to be moved on reboot.
C:\WINDOWS\lwsys32.exe moved successfully.
c:\windows\cdmxtras moved successfully.
File/Folder c:\documents and settings\administrateur\local settings\temp\asmfiles.cab not found.
c:\windows\smdat32a.sys moved successfully.
c:\documents and settings\administrateur\local settings\temp\admcache moved successfully.
c:\windows\temp\adware moved successfully.
c:\windows\temp\altnet moved successfully.
c:\program files\altnet\My Altnet Shares moved successfully.
c:\program files\altnet\Download Manager moved successfully.
c:\program files\altnet\DBBackup moved successfully.
c:\program files\altnet moved successfully.
c:\program files\instafink\Cache\NewCfg moved successfully.
c:\program files\instafink\Cache moved successfully.
c:\program files\instafink moved successfully.
c:\program files\need2find\bar\Settings moved successfully.
c:\program files\need2find\bar\History moved successfully.
c:\program files\need2find\bar\Cache moved successfully.
c:\program files\need2find\bar\1.bin moved successfully.
c:\program files\need2find\bar moved successfully.
c:\program files\need2find moved successfully.
File/Folder C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\19FBBWXL\8154ff2675af1b6e0677560871425153[1].zip not found.
C:\WINDOWS\B138.EXE moved successfully.
File/Folder C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\OYC3UBIU\f4d28682d186cc6beb75f106d133f489[1].zip not found.
C:\WINDOWS\b128.exe moved successfully.
File/Folder C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\19FBBWXL\wtrec.prod.v10006.11dec2007.exe not found.
File/Folder C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\MICROSOFT\WINDOWS\PIBBLW.EXE not found.
File/Folder C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\FJNJGL1V\17PHolmes[1].cmt not found.
C:\WINDOWS\MROFINU1423.EXE moved successfully.
C:\WINDOWS\mrofinu1423.MSNFix moved successfully.

OTMoveIt2 v1.0.20 log created on 03022008_172907

Le rapport de comboFix :

ComboFix 08-03-01.3 - Administrateur 2008-03-02 17:40:49.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.470 [GMT 1:00]
Endroit: C:\Documents and Settings\Administrateur\Bureau\Combo-Fix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Administrateur\Application Data\WinTouch
C:\Documents and Settings\Administrateur\Application Data\WinTouch\wintouch.cfg
C:\Documents and Settings\Administrateur\Application Data\WinTouch\WTUninstaller.exe
C:\Documents and Settings\Administrateur\Application Data\YMANTE~1
C:\Documents and Settings\Administrateur\Application Data\YMANTE~1\?ymantec\
c:\Documents and Settings\Administrateur\Local Settings\Application Data\twashdxqg.dat
C:\Documents and Settings\Administrateur\Local Settings\Application Data\twashdxqg.exe
C:\Documents and Settings\Administrateur\Local Settings\Application Data\twashdxqg_nav.dat
c:\Documents and Settings\Administrateur\Local Settings\Application Data\twashdxqg_navps.dat
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Outerinfo
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Outerinfo\Terms.lnk
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Outerinfo\Uninstall.lnk
C:\Program Files\autorun.inf
C:\Program Files\Fichiers communs\Yazzle1560OinAdmin.exe
C:\Program Files\Fichiers communs\Yazzle1560OinUninstaller.exe
C:\Program Files\inetget2
C:\Program Files\outerinfo
C:\Program Files\outerinfo\FF\chrome.manifest
C:\Program Files\outerinfo\FF\components\FF.dll
C:\Program Files\outerinfo\FF\components\OuterinfoAds.xpt
C:\Program Files\outerinfo\FF\install.rdf
C:\Program Files\outerinfo\Terms.rtf
C:\Program Files\Temporary
C:\Program Files\Temporary\InsiDERInst.exe
C:\WINDOWS\b152.exe
C:\WINDOWS\b153.exe
C:\WINDOWS\b154.exe
C:\WINDOWS\Fonts\acrsecB.fon
C:\WINDOWS\Fonts\acrsecI.fon
C:\WINDOWS\sks~1
C:\WINDOWS\sks~1\n?pdb.exe
C:\WINDOWS\smdat32m.sys
C:\WINDOWS\system32\_000008_.tmp.dll
C:\WINDOWS\system32\_000012_.tmp.dll
C:\WINDOWS\system32\drivers\symavc32.sys
C:\WINDOWS\system32\msvcrtd.exe
C:\WINDOWS\system32\ntos.exe
C:\WINDOWS\system32\nvs2.inf
C:\WINDOWS\system32\wsnpoem
C:\WINDOWS\system32\wsnpoem\audio.dll
C:\WINDOWS\system32\wsnpoem\video.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_WTCG37


((((((((((((((((((((((((((((( Fichiers créés 2008-02-02 to 2008-03-02 ))))))))))))))))))))))))))))))))))))
.

2008-03-02 17:43 . 2008-03-02 17:43 9,296 --a------ C:\Documents and Settings\Administrateur\dntzgy.exe
2008-03-02 16:18 . 2004-08-04 01:54 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-03-02 16:14 . 2008-03-02 16:14 15,086 --a------ C:\WINDOWS\system32\FreePokerBonus.ico
2008-03-02 16:14 . 2008-03-02 16:14 9,662 --a------ C:\WINDOWS\system32\ZoneAlarmIconFR.ico
2008-03-02 15:53 . 2008-03-02 15:53 <REP> d-------- C:\Program Files\NoDNS
2008-03-02 15:50 . 2008-03-02 15:51 <REP> d-------- C:\Program Files\Panda Security
2008-03-02 15:47 . 2008-03-02 15:47 <REP> d-------- C:\Program Files\nvcoi
2008-03-02 15:42 . 2008-03-02 15:42 <REP> d-------- C:\Program Files\JavaCore
2008-03-02 15:42 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2008-03-02 15:42 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2008-03-02 15:42 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2008-03-02 15:42 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2008-03-02 15:36 . 2008-03-02 15:36 9,296 --a------ C:\Documents and Settings\Administrateur\osxtnu.exe
2008-03-02 15:32 . 2008-03-02 17:19 2,224 --a------ C:\WINDOWS\system32\tmp.reg
2008-03-02 15:31 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-03-02 15:31 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-03-02 15:31 . 2008-03-01 23:12 86,016 --a------ C:\WINDOWS\system32\VACFix.exe
2008-03-02 15:31 . 2008-02-29 23:48 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-03-02 15:31 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-03-02 15:31 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-03-02 15:31 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-03-02 15:07 . 2008-03-02 15:07 9,296 --a------ C:\Documents and Settings\Administrateur\chzhei.exe
2008-03-02 15:05 . 2008-03-02 15:13 <REP> d-------- C:\fixwareout
2008-03-02 14:04 . 2008-03-02 14:04 9,296 --a------ C:\Documents and Settings\Administrateur\pydkxv.exe
2008-03-02 13:53 . 2008-03-02 13:53 17,408 --a------ C:\Documents and Settings\Administrateur\phlvez.exe
2008-03-02 13:53 . 2008-03-02 13:53 9,296 --a------ C:\Documents and Settings\Administrateur\fmsloe.exe
2008-03-02 13:48 . 2008-03-02 13:48 9,296 --a------ C:\Documents and Settings\Administrateur\efkkcg.exe
2008-03-02 13:43 . 2008-03-02 15:26 <REP> d-------- C:\hijackthis
2008-03-02 13:41 . 2008-03-02 13:40 17,408 --a------ C:\WINDOWS\wsysst32.exe
2008-03-02 13:40 . 2008-03-02 13:40 17,408 --a------ C:\Documents and Settings\Administrateur\fqqvmq.exe
2008-03-02 13:40 . 2008-03-02 13:40 9,296 --a------ C:\Documents and Settings\Administrateur\qqwclm.exe
2008-03-02 13:40 . 2008-03-02 15:11 5,120 --a------ C:\WINDOWS\winsyn.dll
2008-03-02 12:58 . 2008-03-02 12:58 8,192 --a------ C:\Documents and Settings\Administrateur\bnsuyc.exe
2008-03-01 10:08 . 2008-03-02 17:29 8,192 --ahs---- C:\WINDOWS\Thumbs.db
2008-02-29 16:45 . 2008-02-29 16:45 <REP> d-------- C:\Program Files\Alwil Software
2008-02-29 16:45 . 2003-03-18 21:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2008-02-29 16:45 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-02-29 16:45 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-02-29 16:45 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-02-29 16:45 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-02-29 16:45 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-02-29 16:45 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-02-29 16:45 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-02-29 16:45 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-02-28 22:31 . 2008-02-28 22:31 7,168 --a------ C:\Documents and Settings\Administrateur\dqvcgp.exe
2008-02-28 22:28 . 2008-02-28 22:28 151,552 --a------ C:\alfxfa.exe
2008-02-28 22:28 . 2008-02-28 22:28 7,168 --a------ C:\Documents and Settings\Administrateur\wxafbi.exe
2008-02-28 22:24 . 2008-02-28 22:24 7,168 --a------ C:\Documents and Settings\Administrateur\reewbh.exe
2008-02-28 22:21 . 2008-02-28 22:21 167,936 --a------ C:\WINDOWS\system32\drivers\Wtcg37.sys
2008-02-28 22:21 . 2008-02-28 22:21 7,168 --a------ C:\Documents and Settings\Administrateur\rpfmqr.exe
2008-02-28 22:17 . 2008-02-28 22:17 7,168 --a------ C:\Documents and Settings\Administrateur\cpetur.exe
2008-02-28 21:44 . 2008-02-28 22:32 43,520 --a------ C:\grax.exe
2008-02-28 21:08 . 2008-02-28 21:08 51 --a------ C:\tmp.bat
2008-02-28 21:07 . 2008-02-28 21:07 29 --a------ C:\WINDOWS\system32\eeiuoofd.tmp
2008-02-28 21:06 . 2008-02-28 22:32 58,368 --a------ C:\famwssg.exe
2008-02-28 21:06 . 2008-02-28 21:06 54,764 --a------ C:\WINDOWS\system\userinfo32.ggt
2008-02-28 21:06 . 2008-02-28 22:32 2 --a------ C:\-736500248
2008-02-07 12:30 . 2008-02-07 12:30 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-02-07 12:30 . 2008-02-07 12:30 1,409 --a------ C:\WINDOWS\QTFont.for

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-02 15:00 10 ----a-w C:\Program Files\.autoreg
2008-03-01 10:12 --------- d-----w C:\Program Files\Kazaa
2008-02-16 14:52 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\LimeWire
2008-02-15 10:35 --------- d-----w C:\Program Files\Java
2008-02-03 15:28 --------- d-----w C:\Program Files\Windows Live Safety Center
2008-01-24 16:37 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\AdobeUM
2008-01-23 20:42 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Ulead Systems
2008-01-23 20:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ulead Systems
2008-01-23 20:18 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-23 20:18 --------- d-----w C:\Program Files\Windows Media Components
2008-01-23 20:18 --------- d-----w C:\Program Files\Fichiers communs\Ulead Systems
2008-01-23 20:18 --------- d-----w C:\Program Files\Fichiers communs\InterVideo
2008-01-23 20:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\InterVideo
2008-01-23 20:17 --------- d-----w C:\Program Files\Ulead Systems
2008-01-21 21:30 2,462 ----a-w C:\Program Files\Marc.txt
2008-01-19 21:43 --------- d-----w C:\Program Files\eMule
2008-01-07 20:11 23,296 ----a-w C:\Documents and Settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT
2008-01-02 09:29 --------- d-----w C:\Program Files\Everest Poker
2007-11-05 14:32 5 ----a-w C:\Program Files\nomutil.txt
2007-10-30 15:55 6,844,737 ----a-w C:\Program Files\Group151.cab
2007-10-30 15:55 36,466,538 ----a-w C:\Program Files\Group3.cab
2007-10-30 15:55 36 ----a-w C:\Program Files\Group138.cab
2007-10-30 15:55 3,678,484 ----a-w C:\Program Files\Group152.cab
2007-10-30 15:55 140,458,424 ----a-w C:\Program Files\Group18.cab
2007-10-30 15:54 5,093 ----a-w C:\Program Files\Group8.cab
2007-10-30 15:54 201,398,784 ----a-w C:\Program Files\Group20.cab
2007-10-30 15:54 10,776,597 ----a-w C:\Program Files\Group136.cab
2007-10-30 15:52 944,116 ----a-w C:\Program Files\Group114.cab
2007-10-30 15:52 4,353,168 ----a-w C:\Program Files\Group111.cab
2007-10-30 15:52 36 ----a-w C:\Program Files\Group21.cab
2007-10-30 15:52 2,767 ----a-w C:\Program Files\Group4.cab
2007-10-30 15:52 111,469,457 ----a-w C:\Program Files\Group110.cab
2007-10-30 15:52 1,602 ----a-w C:\Program Files\Group139.cab
2007-10-30 15:51 75,464,468 ----a-w C:\Program Files\Group10.cab
2007-10-30 15:51 36 ----a-w C:\Program Files\Group1.cab
2007-10-30 15:51 30,187,042 ----a-w C:\Program Files\Group6.cab
2007-10-30 15:51 24,202 ----a-w C:\Program Files\Group9.cab
2007-10-30 15:51 2,351,637 ----a-w C:\Program Files\Group15.cab
2007-10-30 15:51 19,665 ----a-w C:\Program Files\Group16.cab
2007-10-30 15:51 14,750 ----a-w C:\Program Files\Group134.cab
2007-10-30 15:50 93,422,941 ----a-w C:\Program Files\Group2.cab
2007-10-30 15:50 695,735 ----a-w C:\Program Files\Group0.cab
2007-10-30 15:50 676 ----a-w C:\Program Files\Group12.cab
2007-10-30 15:50 6,458,669 ----a-w C:\Program Files\Group11.cab
2007-10-30 15:50 566,461 ----a-w C:\Program Files\Group17.cab
2007-10-30 15:50 536,982 ----a-w C:\Program Files\Group112.cab
2007-10-30 15:50 36 ----a-w C:\Program Files\Group19.cab
2007-10-30 15:50 351,200 ----a-w C:\Program Files\Group137.cab
2007-10-30 15:50 35,899,970 ----a-w C:\Program Files\Group153.cab
2007-10-30 15:50 3,526,886 ----a-w C:\Program Files\Group5.cab
2007-10-30 15:50 1,295 ----a-w C:\Program Files\Group113.cab
2007-10-30 15:49 6,940,334 ----a-w C:\Program Files\Group135.cab
2007-10-30 15:49 33,546,010 ----a-w C:\Program Files\Group14.cab
2007-10-30 15:49 2,757,228 ----a-w C:\Program Files\Group13.cab
2007-10-30 15:49 2,741,922 ----a-w C:\Program Files\Group7.cab
2007-10-24 19:50 3,262 ----a-w C:\Program Files\nfs_icon.ico
2007-10-24 19:50 258 ----a-w C:\Program Files\dat.bin
2007-10-24 19:50 1,462 ----a-w C:\Program Files\server.cfg
2007-10-24 19:49 1,869 ----a-w C:\Program Files\microsoft.vc80.crt.manifest
2007-02-26 19:11 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
.

------- Sigcheck -------

27a5959c94ee173a063ca06bd14f021a C:\WINDOWS\system32\drivers\tcpip.sys
----a-w 360,064 2007-10-30 17:20:55 C:\WINDOWS\SoftwareDistribution\Download\2505e060ecbf87977746a5abaaa7bc96\sp2gdr\tcpip.sys
----a-w 360,832 2007-10-30 16:53:32 C:\WINDOWS\SoftwareDistribution\Download\2505e060ecbf87977746a5abaaa7bc96\sp2qfe\tcpip.sys
----a-w 359,040 2004-08-18 09:22:25 C:\WINDOWS\system32\drivers\tcpip.sys

998f3f568f6074a35ab08cd3395a9dc2 C:\WINDOWS\explorer.exe
----a-w 1,036,288 2004-08-22 22:35:29 C:\WINDOWS\explorer.exe
----a-w 1,037,312 2007-06-13 13:22:28 C:\WINDOWS\SoftwareDistribution\Download\aa7b28efbf5e224a2f6b995008501967\sp2gdr\explorer.exe
----a-w 1,037,312 2007-06-13 13:10:53 C:\WINDOWS\SoftwareDistribution\Download\aa7b28efbf5e224a2f6b995008501967\sp2qfe\explorer.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:54 15360]
"JavaCore"="C:\Program Files\JavaCore\JavaCore.exe" [2008-03-02 15:42 144896]
"nvcoi"="C:\Program Files\nvcoi\nvcoi.exe" [2008-03-02 15:47 57344]
"NoDNS"="C:\Program Files\\NoDNS\\NoDNS.exe" [2008-03-02 15:53 102400]
"Ocsu"="C:\DOCUME~1\ADMINI~1\APPLIC~1\YMANTE~1\spoolsv.exe" [ ]
"Thcame"="C:\WINDOWS\??sks\n?pdb.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 21:49 7286784]
"HostManager"="C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe" [2006-11-14 14:55 50736]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 05:24 286720]
"UVS11 Preload"="C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe" [2007-04-12 13:23 341488]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 01:54 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EA Link\Core.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]
--a------ 2006-11-14 14:55 50736 C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\MsnMsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 11:50 155648 C:\WINDOWS\system32\\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2005-10-10 21:49 7286784 C:\WINDOWS\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2005-10-10 21:49 86016 C:\WINDOWS\system32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2005-10-10 21:49 1519616 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
-ra------ 2005-09-22 16:42 90112 C:\WINDOWS\soundman.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\acs\\AOLDial.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\acs\\AOLacsd.exe"=
"C:\\Program Files\\AOL 9.0 VR\\waol.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\TopSpeed\\3.0\\aoltpsd3.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\Loader\\aolload.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\System Information\\sinf.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\WINDOWS\\system32\\rundll32.exe"=
"C:\\Program Files\\Teamspeak2_RC2\\server_windows.exe"=
"C:\\Program Files\\Kazaa\\kazaa.exe"=
"C:\\Program Files\\A4Proxy\\A4Proxy.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\1171821188\\ee\\aolsoftware.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\DOCUME~1\\ADMINI~1\\LOCALS~1\\Temp\\services.exe"=

S1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys []
S3 alcan5ln;Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS);C:\WINDOWS\system32\DRIVERS\alcan5ln.sys [2002-06-06 11:14]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-21 11:09:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-02 17:44:19
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

? [1388]

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-03-02 17:47:31 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-02 16:47:27
.
2008-03-02 15:32:51 --- E O F ---

re,
Es-Que je doit tout sélectionné avec regcleaner ?
je risque rien ?
a+++

Pas de virus ni de spyware trouvé par Panda ..

voila le rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:47, on 02/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\JavaCore\JavaCore.exe
C:\Program Files\nvcoi\nvcoi.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.microsoft.net:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [JavaCore] C:\Program Files\JavaCore\JavaCore.exe
O4 - HKCU\..\Run: [nvcoi] C:\Program Files\nvcoi\nvcoi.exe
O4 - HKCU\..\Run: [NoDNS] C:\Program Files\\NoDNS\\NoDNS.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Search - http://ko.bar.need2find.com/KO/menusearch.html?p=KO
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

Msn cleaner et MSNFix sont inutile pour le moment car j'ai désinstallé windows live messenger après mes bug ..
faut-il que je le réinstalle ?
a+++

Hijack :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:57, on 03/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\JavaCore\JavaCore.exe
C:\Program Files\nvcoi\nvcoi.exe
C:\Program Files\NoDNS\NoDNS.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.microsoft.net:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Flash Media] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [JavaCore] C:\Program Files\JavaCore\JavaCore.exe
O4 - HKCU\..\Run: [nvcoi] C:\Program Files\nvcoi\nvcoi.exe
O4 - HKCU\..\Run: [NoDNS] C:\Program Files\\NoDNS\\NoDNS.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

MSNFix 1.673

C:\Documents and Settings\Administrateur\Bureau\securité-dezinfection-scan\MSNFix
Fix exécuté le 03/03/2008 - 22:01:37,50 By Administrateur
mode normal

************************ Recherche les fichiers présents

... C:\WINDOWS\system32\real.txt
... C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
... C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe

************************ Recherche les dossiers présents

... C:\Install\




************************ Suppression des fichiers

.. OK ... C:\WINDOWS\system32\real.txt
/!\ ... C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
/!\ ... C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe


************************ Suppression des dossiers

/!\ ... C:\Install\


************************ Nettoyage du registre



Les fichiers encore présents seront supprimés au prochain redémarrage


************************ Suppression des fichiers

/!\ ... C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
/!\ ... C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
.. OK ... C:\Documents and Settings\Administrateur\??????.exe
.. OK ... C:\Documents and Settings\Administrateur\????????.exe



************************ Fichiers suspects

Aucun Fichier trouvé


Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 03032008_22054056.zip



------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

ComboFix 08-03-01.3 - Administrateur 2008-03-04 19:32:56.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.610 [GMT 1:00]
Endroit: C:\Documents and Settings\Administrateur\Bureau\Combo-Fix.exe
Command switches used :: C:\Documents and Settings\Administrateur\Bureau\CFscript.txt
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
C:\Program Files\\NoDNS\\NoDNS.exe
C:\Program Files\JavaCore\JavaCore.exe
C:\Program Files\nvcoi\nvcoi.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\services.exe
.
---- Previous Run -------
.
C:\Program Files\\NoDNS\\NoDNS.exe
C:\Program Files\JavaCore\JavaCore.exe
C:\Program Files\nvcoi\nvcoi.exe

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-04 to 2008-03-04 ))))))))))))))))))))))))))))))))))))
.

2008-03-04 13:23 . 2008-03-04 13:23 9,296 --a------ C:\WINDOWS\system32\sjfvrt.exe
2008-03-03 22:51 . 2008-03-03 22:51 <REP> d-------- C:\Documents and Settings\All Users\Application Data\PC Suite
2008-03-03 22:50 . 2008-03-03 22:50 <REP> d-------- C:\Program Files\Fichiers communs\PCSuite
2008-03-03 22:50 . 2008-03-03 22:50 <REP> d-------- C:\Program Files\Fichiers communs\Nokia
2008-03-03 22:50 . 2008-03-03 22:50 <REP> d-------- C:\Program Files\DIFX
2008-03-03 22:50 . 2008-03-03 22:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\PC Suite
2008-03-03 22:50 . 2008-03-03 22:51 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Nokia
2008-03-03 22:49 . 2008-03-03 23:03 <REP> d-------- C:\WINDOWS\LastGood.Tmp
2008-03-03 22:49 . 2008-03-03 22:49 <REP> d-------- C:\Program Files\PC Connectivity Solution
2008-03-03 22:49 . 2008-03-03 22:50 <REP> d-------- C:\Program Files\Nokia
2008-03-03 22:49 . 2007-02-22 10:15 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
2008-03-03 22:49 . 2007-02-22 10:15 90,624 --a------ C:\WINDOWS\system32\nmwcdcls.dll
2008-03-03 22:49 . 2007-02-22 10:15 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
2008-03-03 22:49 . 2007-02-22 10:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
2008-03-03 22:49 . 2007-02-22 10:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys
2008-03-03 22:49 . 2007-02-22 10:15 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
2008-03-03 22:48 . 2008-03-03 22:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Installations
2008-03-03 22:09 . 2008-03-03 22:09 9,296 --a------ C:\Documents and Settings\Administrateur\rvdjle.exe
2008-03-03 21:47 . 2008-03-03 21:47 9,296 --a------ C:\WINDOWS\system32\lljoci.exe
2008-03-03 19:16 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-03 19:16 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-03-03 19:16 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-02 22:30 . 2008-03-03 23:03 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-03-02 20:21 . 2008-03-02 20:30 <REP> d-------- C:\Program Files\Windows Live
2008-03-02 20:21 . 2008-03-02 20:29 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-02 20:21 . 2008-03-02 20:21 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-02 17:56 . 2008-03-02 18:07 <REP> d-------- C:\Program Files\RegCleaner
2008-03-02 17:50 . 2008-03-02 17:50 <REP> d-------- C:\Program Files\CCleaner
2008-03-02 16:18 . 2004-08-04 01:54 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-03-02 16:14 . 2008-03-02 16:14 15,086 --a------ C:\WINDOWS\system32\FreePokerBonus.ico
2008-03-02 16:14 . 2008-03-02 16:14 9,662 --a------ C:\WINDOWS\system32\ZoneAlarmIconFR.ico
2008-03-02 15:53 . 2008-03-04 18:53 <REP> d-------- C:\Program Files\NoDNS
2008-03-02 15:50 . 2008-03-02 15:51 <REP> d-------- C:\Program Files\Panda Security
2008-03-02 15:47 . 2008-03-04 18:53 <REP> d-------- C:\Program Files\nvcoi
2008-03-02 15:42 . 2008-03-04 18:53 <REP> d-------- C:\Program Files\JavaCore
2008-03-02 15:42 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2008-03-02 15:42 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2008-03-02 15:42 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2008-03-02 15:42 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2008-03-02 15:32 . 2008-03-04 18:38 1,532 --a------ C:\WINDOWS\system32\tmp.reg
2008-03-02 15:31 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-03-02 15:31 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-03-02 15:31 . 2008-03-01 23:12 86,016 --a------ C:\WINDOWS\system32\VACFix.exe
2008-03-02 15:31 . 2008-02-29 23:48 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-03-02 15:31 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-03-02 15:31 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-03-02 15:31 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-03-02 15:05 . 2008-03-02 15:13 <REP> d-------- C:\fixwareout
2008-03-02 13:43 . 2008-03-04 18:50 <REP> d-------- C:\hijackthis
2008-03-02 13:41 . 2008-03-02 13:40 17,408 --a------ C:\WINDOWS\wsysst32.exe
2008-03-02 13:40 . 2008-03-02 15:11 5,120 --a------ C:\WINDOWS\winsyn.dll
2008-03-01 10:08 . 2008-03-03 21:57 8,192 --ahs---- C:\WINDOWS\Thumbs.db
2008-02-29 16:45 . 2008-02-29 16:45 <REP> d-------- C:\Program Files\Alwil Software
2008-02-29 16:45 . 2003-03-18 21:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2008-02-29 16:45 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-02-29 16:45 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-02-29 16:45 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-02-29 16:45 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-02-29 16:45 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-02-29 16:45 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-02-29 16:45 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-02-29 16:45 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-02-28 21:08 . 2008-02-28 21:08 51 --a------ C:\tmp.bat
2008-02-28 21:07 . 2008-02-28 21:07 29 --a------ C:\WINDOWS\system32\eeiuoofd.tmp
2008-02-28 21:06 . 2008-02-28 21:06 54,764 --a------ C:\WINDOWS\system\userinfo32.ggt
2008-02-28 21:06 . 2008-02-28 22:32 2 --a------ C:\-736500248

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-02 15:00 10 ----a-w C:\Program Files\.autoreg
2008-02-16 14:52 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\LimeWire
2008-02-15 10:35 --------- d-----w C:\Program Files\Java
2008-02-03 15:28 --------- d-----w C:\Program Files\Windows Live Safety Center
2008-01-24 16:37 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\AdobeUM
2008-01-23 20:42 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Ulead Systems
2008-01-23 20:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ulead Systems
2008-01-23 20:18 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-23 20:18 --------- d-----w C:\Program Files\Windows Media Components
2008-01-23 20:18 --------- d-----w C:\Program Files\Fichiers communs\Ulead Systems
2008-01-23 20:18 --------- d-----w C:\Program Files\Fichiers communs\InterVideo
2008-01-23 20:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\InterVideo
2008-01-23 20:17 --------- d-----w C:\Program Files\Ulead Systems
2008-01-21 21:30 2,462 ----a-w C:\Program Files\Marc.txt
2008-01-19 21:43 --------- d-----w C:\Program Files\eMule
2008-01-07 20:11 23,296 ----a-w C:\Documents and Settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT
2007-11-05 14:32 5 ----a-w C:\Program Files\nomutil.txt
2007-10-30 15:55 6,844,737 ----a-w C:\Program Files\Group151.cab
2007-10-30 15:55 36,466,538 ----a-w C:\Program Files\Group3.cab
2007-10-30 15:55 36 ----a-w C:\Program Files\Group138.cab
2007-10-30 15:55 3,678,484 ----a-w C:\Program Files\Group152.cab
2007-10-30 15:55 140,458,424 ----a-w C:\Program Files\Group18.cab
2007-10-30 15:54 5,093 ----a-w C:\Program Files\Group8.cab
2007-10-30 15:54 201,398,784 ----a-w C:\Program Files\Group20.cab
2007-10-30 15:54 10,776,597 ----a-w C:\Program Files\Group136.cab
2007-10-30 15:52 944,116 ----a-w C:\Program Files\Group114.cab
2007-10-30 15:52 4,353,168 ----a-w C:\Program Files\Group111.cab
2007-10-30 15:52 36 ----a-w C:\Program Files\Group21.cab
2007-10-30 15:52 2,767 ----a-w C:\Program Files\Group4.cab
2007-10-30 15:52 111,469,457 ----a-w C:\Program Files\Group110.cab
2007-10-30 15:52 1,602 ----a-w C:\Program Files\Group139.cab
2007-10-30 15:51 75,464,468 ----a-w C:\Program Files\Group10.cab
2007-10-30 15:51 36 ----a-w C:\Program Files\Group1.cab
2007-10-30 15:51 30,187,042 ----a-w C:\Program Files\Group6.cab
2007-10-30 15:51 24,202 ----a-w C:\Program Files\Group9.cab
2007-10-30 15:51 2,351,637 ----a-w C:\Program Files\Group15.cab
2007-10-30 15:51 19,665 ----a-w C:\Program Files\Group16.cab
2007-10-30 15:51 14,750 ----a-w C:\Program Files\Group134.cab
2007-10-30 15:50 93,422,941 ----a-w C:\Program Files\Group2.cab
2007-10-30 15:50 695,735 ----a-w C:\Program Files\Group0.cab
2007-10-30 15:50 676 ----a-w C:\Program Files\Group12.cab
2007-10-30 15:50 6,458,669 ----a-w C:\Program Files\Group11.cab
2007-10-30 15:50 566,461 ----a-w C:\Program Files\Group17.cab
2007-10-30 15:50 536,982 ----a-w C:\Program Files\Group112.cab
2007-10-30 15:50 36 ----a-w C:\Program Files\Group19.cab
2007-10-30 15:50 351,200 ----a-w C:\Program Files\Group137.cab
2007-10-30 15:50 35,899,970 ----a-w C:\Program Files\Group153.cab
2007-10-30 15:50 3,526,886 ----a-w C:\Program Files\Group5.cab
2007-10-30 15:50 1,295 ----a-w C:\Program Files\Group113.cab
2007-10-30 15:49 6,940,334 ----a-w C:\Program Files\Group135.cab
2007-10-30 15:49 33,546,010 ----a-w C:\Program Files\Group14.cab
2007-10-30 15:49 2,757,228 ----a-w C:\Program Files\Group13.cab
2007-10-30 15:49 2,741,922 ----a-w C:\Program Files\Group7.cab
2007-10-24 19:50 3,262 ----a-w C:\Program Files\nfs_icon.ico
2007-10-24 19:50 258 ----a-w C:\Program Files\dat.bin
2007-10-24 19:50 1,462 ----a-w C:\Program Files\server.cfg
2007-10-24 19:49 1,869 ----a-w C:\Program Files\microsoft.vc80.crt.manifest
2007-02-26 19:11 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:54 15360]
"nvcoi"="C:\Program Files\nvcoi\nvcoi.exe" [ ]
"NoDNS"="C:\Program Files\\NoDNS\\NoDNS.exe" [ ]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" [2007-12-10 10:12 695808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-10-10 21:49 7286784]
"HostManager"="C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe" [2006-11-14 14:55 50736]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 01:54 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EA Link\Core.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]
--a------ 2006-11-14 14:55 50736 C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\MsnMsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 11:50 155648 C:\WINDOWS\system32\\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2005-10-10 21:49 7286784 C:\WINDOWS\system32\NvCpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2005-10-10 21:49 86016 C:\WINDOWS\system32\NvMcTray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2005-10-10 21:49 1519616 C:\WINDOWS\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
-ra------ 2005-09-22 16:42 90112 C:\WINDOWS\soundman.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\acs\\AOLDial.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\acs\\AOLacsd.exe"=
"C:\\Program Files\\AOL 9.0 VR\\waol.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\TopSpeed\\3.0\\aoltpsd3.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\Loader\\aolload.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\System Information\\sinf.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\WINDOWS\\system32\\rundll32.exe"=
"C:\\Program Files\\Teamspeak2_RC2\\server_windows.exe"=
"C:\\Program Files\\A4Proxy\\A4Proxy.exe"=
"C:\\Program Files\\Fichiers communs\\aol\\1171821188\\ee\\aolsoftware.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

S1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys []
S3 alcan5ln;Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS);C:\WINDOWS\system32\DRIVERS\alcan5ln.sys [2002-06-06 11:14]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-21 11:09:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-04 19:36:57
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-03-04 19:40:24 - machine was rebooted [Administrateur]
ComboFix-quarantined-files.txt 2008-03-04 18:40:20
ComboFix2.txt 2008-03-04 17:36:23
ComboFix3.txt 2008-03-02 16:47:32
.
2008-03-03 22:03:44 --- E O F ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:56, on 04/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.microsoft.net:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1171821188\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [nvcoi] C:\Program Files\nvcoi\nvcoi.exe
O4 - HKCU\..\Run: [NoDNS] C:\Program Files\\NoDNS\\NoDNS.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe

voila le rapport O moveit

OTMoveIt2 v1.0.20 log created on 03052008_113628

pour les logiciel :
Antivirus : j'ai avast (il détecte beaucoup de chevaux de troie alors que quand je fait un scan avec panda il n'y a rien)
Anti-Espion : j'ai spybot es-que je doit prendre AD-aware et SPYWAREBLASTER ?
Pare-feu : j'ai windows es-que je doit prendre un autre ?

Ps : je cois que mon Msn envoie toujours le virus a mes contact ...

a++
merci

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:07 05/03/2008

+ Résultat de l'analyse:



C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0077230.dll -> Adware.404Search : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085138.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085139.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085140.exe -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085141.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085142.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085143.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085144.exe -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085145.exe -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0085147.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0087139.dll -> Adware.Altnet : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP336\A0107327.dll -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Altnet -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Altnet\ADM -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Altnet\DownloadManager -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Altnet\LocalFiles -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM.ADM -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM.ADM.1 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM.ADM\CLSID -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM.ADM\CurVer -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM25.ADM25 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM25.ADM25.1 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM25.ADM25\CurVer -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM4.ADM4 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM4.ADM4.1 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\ADM4.ADM4\CurVer -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule.1 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CLSID -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\SigningModule.SigningModule\CurVer -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Aucune action entreprise.
HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Aucune action entreprise.
C:\WINDOWS\system32\AdCache -> Adware.Cydoor : Aucune action entreprise.
HKLM\SOFTWARE\Classes\instafink.INSTAFINK -> Adware.InstaFinder : Aucune action entreprise.
HKLM\SOFTWARE\Classes\instafink.INSTAFINK\Clsid -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39199 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39200 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39201 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39203 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39204 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39205 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39207 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39208 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39209 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39210 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39211 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39213 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39214 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39215 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39216 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39217 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39218 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39219 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39220 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39222 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39223 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39224 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39225 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39226 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39227 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39228 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39230 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39231 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39232 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39234 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39236 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39237 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39239 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39240 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39241 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39244 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39245 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39247 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39248 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39249 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39250 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39251 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39252 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39252\Objects -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39252\Objects\5 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39253 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39254 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39255 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39256 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39257 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39258 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39259 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39260 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39261 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39261\Objects -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39261\Objects\5 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39262 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39263 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39265 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39266 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39267 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39268 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39269 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39270 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39274 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39275 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39276 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39279 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39280 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39281 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39282 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39283 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39284 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39286 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39287 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39288 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39289 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39290 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39291 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39293 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39294 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39297 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39298 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39299 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39303 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39304 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39306 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39307 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39308 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39309 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39310 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39311 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39312 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39313 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39314 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39315 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39316 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39317 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39318 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39319 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39321 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39322 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39323 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39324 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39325 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39327 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39328 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39329 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39330 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39332 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39333 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39334 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39335 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39337 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39338 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39339 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39341 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39342 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39343 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39344 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39346 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39347 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39348 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39350 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39351 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39352 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39353 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39354 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39356 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39357 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39358 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39360 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39362 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39363 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39365 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39366 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39367 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39368 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39369 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39370 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39371 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39372 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39373 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39374 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39375 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39376 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39378 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39379 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39380 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39381 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39382 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39391 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39392 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39393 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39394 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39395 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39396 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39397 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39400 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39401 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39402 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39403 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39404 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39405 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39406 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39407 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39409 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39410 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39411 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39413 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39414 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39415 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39416 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39417 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39418 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39420 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39421 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39423 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39424 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39425 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39427 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39428 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39430 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39431 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39433 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39435 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39436 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39437 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39438 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39439 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39440 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39441 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39442 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39444 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39445 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39446 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39448 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39449 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39450 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39451 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39452 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39453 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39455 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39456 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39458 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39459 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39459\Objects -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39459\Objects\5 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39460 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39462 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39463 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39464 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39466 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39467 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39470 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39471 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39472 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39473 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39474 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39475 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39476 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39477 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39478 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39479 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39480 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39481 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39483 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39484 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39485 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39486 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39487 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39489 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39492 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39493 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39494 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39495 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39496 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39498 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39499 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39500 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39502 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39505 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Reports\39506 -> Adware.InstaFinder : Aucune action entreprise.
HKU\S-1-5-21-436374069-1788223648-725345543-500\Software\INSTAFINK\Stat -> Adware.InstaFinder : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP336\A0107314.exe -> Adware.P2PNet : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking v126.cpl -> Adware.P2PNet : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking -> Adware.P2PNetworking : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking\Cache -> Adware.P2PNetworking : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking\Cache\Database -> Adware.P2PNetworking : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking\Cache\Database\index256.dbb -> Adware.P2PNetworking : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking\MARSHAL.DLL -> Adware.P2PNetworking : Aucune action entreprise.
C:\WINDOWS\system32\P2P Networking\P2P Networking.eng -> Adware.P2PNetworking : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0064107.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0064127.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0065128.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0066127.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0070131.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0071130.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0072130.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP331\A0083143.exe -> Backdoor.Agent.alm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP336\A0107315.exe -> Downloader.Agent.cbx : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP336\A0107316.exe -> Downloader.Agent.ezc : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP335\A0106275.exe -> Downloader.Agent.hcm : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP335\A0106274.exe -> Downloader.Agent.hcn : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP335\A0106276.exe -> Downloader.PurityScan.fj : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP311\A0055741.exe -> Dropper.Agent.cwp : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Mes documents\Mes fichiers reçus\lime\turf battle.zip/Setup.exe -> Not-A-Virus.Adware.Agent : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP336\A0107313.dll -> Not-A-Virus.Adware.E404 : Aucune action entreprise.
C:\hijackthis\backups\backup-20080302-152610-512.dll -> Not-A-Virus.Adware.E404 : Aucune action entreprise.
C:\QooBox\Quarantine\C\Program Files\Fichiers communs\Yazzle1560OinUninstaller.exe.vir -> Not-A-Virus.Adware.PurityScan : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP337\A0107347.exe -> Not-A-Virus.Adware.PurityScan : Aucune action entreprise.
C:\QooBox\Quarantine\C\Program Files\Outerinfo\FF\components\FF.dll.vir -> Not-A-Virus.Adware.ZenoSearch : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP337\A0107334.dll -> Not-A-Virus.Adware.ZenoSearch : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.39:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.40:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.41:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.42:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.33:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.52:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.60:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.61:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.62:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.63:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.72:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.74:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Hitbox : Aucune action entreprise.
:mozilla.96:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.70:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Netflame : Aucune action entreprise.
:mozilla.65:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Planetactive : Aucune action entreprise.
:mozilla.38:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Safer-networking : Aucune action entreprise.
:mozilla.45:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.46:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.47:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.51:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.15:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.16:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.17:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.18:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.66:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.67:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.13:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.14:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@m.webtrends[2].txt -> TrackingCookie.Webtrends : Aucune action entreprise.
:mozilla.54:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.55:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.56:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\70rnmec8.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\QooBox\Quarantine\catchme2008-03-02_174358.67.zip/symavc32.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0064158.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0065120.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0067129.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0070120.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0070130.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0071120.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0071131.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP330\A0072120.sys -> Trojan.Srizbi.j : Aucune action entreprise.
C:\System Volume Information\_restore{92C2A394-9339-4E43-BF62-7C1AB381B86D}\RP339\A0108740.sys -> Trojan.Srizbi.j : Aucune action entreprise.


Fin du rapport