PC lent soudain, rapport HiJackthis

Voici le rapport Combo Fix, le PC n'a pas redémarré par contre...

Pour le programme RAV, il ne trouve rien, il fait vraiment un scan très rapide, même pas une seconde et il dit que l'ordinateur est sain, c'est un peu bizarre non? Il n'y a donc pas de rapport.

Pour ce qui est de Combofix, le fichier Semo semble être encore là...

Merci à tous de votre aide!

ComboFix 08-03-10.1 - Eric Trudel 2008-03-21 15:28:09.3 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.2498 [GMT -4:00]
Endroit: C:\Documents and Settings\Eric Trudel\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\Eric Trudel\Bureau\CFScript.txt
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color

FILE ::
C:\curr_ver.tmp
C:\WINDOWS\system32\SpOrder.dll
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\curr_ver.tmp
C:\WINDOWS\system32\SpOrder.dll

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-21 to 2008-03-21 ))))))))))))))))))))))))))))))))))))
.

2008-03-12 21:32 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-12 21:30 . 2008-03-12 21:32 <REP> d-------- C:\Program Files\Java
2008-03-12 21:30 . 2008-03-12 21:30 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-03-12 17:35 . 2008-03-21 15:33 2,113,568 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-12 17:35 . 2008-03-17 08:44 25,808 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-03-12 17:29 . 2008-03-12 17:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-12 17:29 . 2008-03-12 17:31 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-12 17:28 . 2007-12-13 19:27 75,248 --a------ C:\WINDOWS\zllsputility.exe
2008-03-12 17:28 . 2007-12-13 19:27 54,672 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 42,384 --a------ C:\WINDOWS\zllsputility_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 21,904 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 17,808 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-03-12 17:27 . 2008-03-12 17:27 <REP> d-------- C:\Program Files\Zone Labs
2008-03-12 17:26 . 2008-03-17 18:44 <REP> d-------- C:\WINDOWS\Internet Logs
2008-03-10 23:27 . 2008-03-10 23:27 <REP> d-------- C:\_OTMoveIt
2008-03-10 17:23 . 2008-03-10 17:23 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-03-10 17:21 . 2008-03-10 17:21 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-03-10 17:18 . 2008-03-10 17:18 <REP> d-------- C:\icom
2008-03-10 15:30 . 2008-03-10 15:30 <REP> d-------- C:\WINDOWS\system32\AGEIA
2008-03-10 15:30 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\AGEIA Technologies
2008-03-10 15:27 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2008-03-10 15:27 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2008-03-10 15:27 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2008-03-10 15:27 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll
2008-03-10 15:27 . 2007-07-20 00:57 267,112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2008-03-09 00:19 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Malwarebytes
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-03-07 21:19 . 2008-03-07 21:19 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-07 18:44 . 2008-03-10 17:22 <REP> d-------- C:\Backups
2008-03-07 18:43 . 2008-03-16 06:35 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-03-07 15:27 . 2006-01-17 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\toshiba
2008-03-07 15:27 . 2006-10-16 04:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2008-03-07 15:24 . 2008-03-16 07:13 <REP> d-------- C:\SDFix
2008-03-04 18:53 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\TalkPCR
2008-03-04 18:52 . 1998-02-06 22:37 299,520 --a------ C:\WINDOWS\uninst.exe
2008-03-04 16:19 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-04 16:19 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-03-04 16:19 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-04 13:20 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-03-04 13:16 . 2008-03-04 13:15 691,545 --a------ C:\WINDOWS\unins000.exe
2008-03-04 13:16 . 2008-03-04 13:16 2,550 --a------ C:\WINDOWS\unins000.dat
2008-03-04 13:11 . 2008-03-10 17:18 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-04 13:11 . 2008-03-10 17:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-03 22:26 . 2008-03-03 22:26 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Grisoft
2008-03-03 22:25 . 2007-05-30 08:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-03-03 20:53 . 2008-03-03 20:53 <REP> d-------- C:\Program Files\CCleaner
2008-03-03 19:36 . 2008-03-03 19:45 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-03 19:35 . 2008-03-03 19:45 <REP> d-------- C:\Program Files\Windows Live
2008-03-03 19:35 . 2008-03-03 19:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-03 04:02 . 2008-03-12 01:06 <REP> d-------- C:\Program Files\PKR
2008-02-29 23:26 . 2008-02-29 23:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Age of Empires 3
2008-02-23 06:46 . 2007-11-13 01:02 22,472 --a------ C:\Documents and Settings\Eric Trudel\Application Data\GDIPFONTCACHEV1.DAT

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 21:22 --------- d-----w C:\Program Files\Jeux
2008-03-10 18:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-09 04:17 --------- d-----w C:\Program Files\Morpheus Ultra
2008-03-05 04:43 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AVG7
2008-03-04 02:26 --------- d-----w C:\Program Files\Trend Micro
2008-03-04 02:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-03-04 00:01 --------- d-----w C:\Program Files\Skype
2008-03-03 23:32 --------- d-----w C:\Program Files\Hewlett-Packard
2008-03-01 03:03 --------- d-----w C:\Program Files\Microsoft Games
2008-02-23 22:28 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\U3
2008-02-14 11:24 --------- d-----w C:\Program Files\sixteen tons entertainment
2008-02-13 09:32 49,152 ----a-w C:\WINDOWS\system32\apache.dll
2008-02-03 02:34 --------- d-----w C:\Program Files\Google
2008-02-01 05:41 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\uTorrent
2008-01-31 07:19 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AdobeUM
2008-01-28 20:45 --------- d-----w C:\Program Files\DAEMON Tools
2008-01-28 20:44 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-01-28 05:37 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\DAEMON Tools
2008-01-28 05:28 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-01-27 22:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\SimCity Societies
2008-01-25 04:36 --------- d--h--r C:\Documents and Settings\Eric Trudel\Application Data\SecuROM
2008-01-25 03:05 --------- d-----w C:\Program Files\Alcohol Soft
2008-01-18 02:26 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-01-02 03:32 47,360 ----a-w C:\Documents and Settings\Eric Trudel\Application Data\pcouffin.sys
2006-12-12 18:51 92,064 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdm.sys
2006-12-12 18:51 9,232 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdfl.sys
2006-12-12 18:51 79,328 ----a-w C:\Documents and Settings\Eric Trudel\mqdmserd.sys
2006-12-12 18:51 66,656 ----a-w C:\Documents and Settings\Eric Trudel\mqdmbus.sys
2006-12-12 18:51 6,208 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcmnt.sys
2006-12-12 18:51 5,936 ----a-w C:\Documents and Settings\Eric Trudel\mqdmwhnt.sys
2006-12-12 18:51 4,048 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcr.sys
2006-12-12 18:51 25,600 ----a-w C:\Documents and Settings\Eric Trudel\usbsermptxp.sys
2006-12-12 18:51 22,768 ----a-w C:\Documents and Settings\Eric Trudel\usbsermpt.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 17:08 65536]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 20:04 68856]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 03:49 15691264 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2005-10-14 18:29 88203 C:\WINDOWS\agrsmmsg.exe]
"NDSTray.exe"="NDSTray.exe" []
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 06:20 122940]
"SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 10:24 118784]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-11-30 13:25 73728]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 15:02 352256]
"TFncKy"="TFncKy.exe" []
"TDispVol"="TDispVol.exe" [2005-09-15 15:19 73728 C:\WINDOWS\system32\TDispVol.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 04:32 761945]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 12:37 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 11:41 602182]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-05-01 01:04 7557120]
"nwiz"="nwiz.exe" [2006-05-01 01:04 1519616 C:\WINDOWS\system32\nwiz.exe]
"NVRotateSysTray"="C:\WINDOWS\system32\nvsysrot.dll" [2006-05-01 01:04 49152]
"TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe]
"CFSServ.exe"="CFSServ.exe" []
"Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2006-01-12 21:52 483328]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-21 12:15 579072]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 05:25 6731312]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 19:27 919016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 08:00 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-05 19:49 219136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Acrobat Speed Launcher.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2006-11-09 01:10:50 25214]
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2006-01-17 09:43:37 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-09-14 16:09 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ZOLL Data Retriever Service"=3 (0x3)
"ZOLL Data Relay Service"=3 (0x3)
"usnjsvc"=3 (0x3)
"gusvc"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\Program Files\\Morpheus Ultra\\Morpheus.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\Content\\System\\Swat4.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4X.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4XDedicatedServer.exe"=
"C:\\Program Files\\Sling Media\\SlingPlayer\\SlingPlayer.exe"=
"C:\\Program Files\\sixteen tons entertainment\\Emergency 4\\Em4.exe"=
"C:\\Program Files\\Roger Wilco\\roger.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Civilization4.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Warlords\\Civ4Warlords.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\Yeti_Final_Win32.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\gu.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\detection\\Launcher.exe"=

R1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys [2007-09-22 23:02]
R2 PcCGoCls;PcCGoCls.sys;C:\WINDOWS\system32\Drivers\PcCGoCls.sys [2001-11-07 13:26]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\NSNDIS5.SYS [2004-03-23 22:12]
S3 softctrl;Software Flow Control Driver;C:\WINDOWS\system32\DRIVERS\softctrl.sys [2005-12-11 21:36]
S3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 15:47]
S4 ZOLL Data Relay Service;ZOLL Data Relay Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Relay Service.exe" [2007-04-23 16:02]
S4 ZOLL Data Retriever Service;ZOLL Data Retriever Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Retriever Service.exe" [2007-04-23 16:02]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\dvdcheck.exe
\Shell\directx\command - DirectX9\dxsetup.exe
\Shell\setup\command - G:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - H:\dvdcheck.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3b995913-dccc-11db-9099-00a0d14c2ecb}]
\Shell\AutoRun\command - semo2x.exe
\Shell\explore\Command - semo2x.exe
\Shell\open\Command - semo2x.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53c9b535-025a-11dc-90a8-00a0d14c2ecb}]
\Shell\AutoRun\command - H:\LaunchU3.exe -a

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-21 15:33:11
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-21 15:34:20
ComboFix-quarantined-files.txt 2008-03-21 19:34:17
ComboFix2.txt 2008-03-17 23:15:01
ComboFix3.txt 2008-03-11 04:15:43
.
2008-03-12 21:55:13 --- E O F ---

Rapport HiJackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:43:35, on 2008-03-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TDispVol] TDispVol.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NVRotateSysTray] rundll32.exe C:\WINDOWS\system32\nvsysrot.dll,Enable
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://kedfer.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Certaines commandes dans cmd n'ont pas fonctionné, ça disait répertoire inconnu pour le 2e et le 3e.

Le virus semo2x.exe est encore là...

C'est vraiment une plaie!

Merci de ton aide g!rly.

Voici le rapport combofix:

ComboFix 08-03-23.2 - Eric Trudel 2008-03-23 17:19:40.6 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.2481 [GMT -4:00]
Endroit: C:\Documents and Settings\Eric Trudel\Bureau\Combo-Fix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

((((((((((((((((((((((((((((( Fichiers créés 2008-02-23 to 2008-03-23 ))))))))))))))))))))))))))))))))))))
.

2008-03-23 15:48 . 2008-03-23 15:48 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Simply Super Software
2008-03-23 15:48 . 2008-03-23 15:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-03-23 15:48 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2008-03-23 15:48 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\unrar3.dll
2008-03-23 15:48 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2008-03-23 15:48 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2008-03-23 15:48 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2008-03-21 23:54 . 2008-03-21 23:54 <REP> d-------- C:\Program Files\K1RFD
2008-03-21 23:16 . 2005-01-13 23:41 11,254 --a------ C:\WINDOWS\system32\locate.com
2008-03-21 23:15 . 2008-03-21 23:17 <REP> d-------- C:\MGtools
2008-03-21 23:15 . 2008-03-21 23:17 46,145 --a------ C:\MGlogs.zip
2008-03-21 15:51 . 2008-03-21 15:51 171 --a------ C:\curr_ver.tmp
2008-03-12 21:32 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-12 21:30 . 2008-03-12 21:32 <REP> d-------- C:\Program Files\Java
2008-03-12 21:30 . 2008-03-12 21:30 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-03-12 17:35 . 2008-03-23 17:21 2,328,608 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-12 17:35 . 2008-03-21 17:51 28,220 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-03-12 17:29 . 2008-03-12 17:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-12 17:29 . 2008-03-12 17:31 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-12 17:28 . 2007-12-13 19:27 75,248 --a------ C:\WINDOWS\zllsputility.exe
2008-03-12 17:28 . 2007-12-13 19:27 54,672 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 42,384 --a------ C:\WINDOWS\zllsputility_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 21,904 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 17,808 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-03-12 17:27 . 2008-03-12 17:27 <REP> d-------- C:\Program Files\Zone Labs
2008-03-12 17:26 . 2008-03-21 18:16 <REP> d-------- C:\WINDOWS\Internet Logs
2008-03-10 23:27 . 2008-03-10 23:27 <REP> d-------- C:\_OTMoveIt
2008-03-10 17:23 . 2008-03-10 17:23 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-03-10 17:21 . 2008-03-10 17:21 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-03-10 17:18 . 2008-03-10 17:18 <REP> d-------- C:\icom
2008-03-10 15:30 . 2008-03-10 15:30 <REP> d-------- C:\WINDOWS\system32\AGEIA
2008-03-10 15:30 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\AGEIA Technologies
2008-03-10 15:27 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2008-03-10 15:27 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2008-03-10 15:27 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2008-03-10 15:27 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll
2008-03-10 15:27 . 2007-07-20 00:57 267,112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2008-03-09 00:19 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Malwarebytes
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-03-07 21:19 . 2008-03-07 21:19 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-07 18:44 . 2008-03-10 17:22 <REP> d-------- C:\Backups
2008-03-07 18:43 . 2008-03-16 06:35 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-03-07 15:27 . 2006-01-17 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\toshiba
2008-03-07 15:27 . 2006-10-16 04:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2008-03-07 15:24 . 2008-03-16 07:13 <REP> d-------- C:\SDFix
2008-03-04 18:53 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\TalkPCR
2008-03-04 18:52 . 1998-02-06 22:37 299,520 --a------ C:\WINDOWS\uninst.exe
2008-03-04 16:19 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-04 16:19 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-03-04 16:19 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-04 13:20 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-03-04 13:16 . 2008-03-04 13:15 691,545 --a------ C:\WINDOWS\unins000.exe
2008-03-04 13:16 . 2008-03-04 13:16 2,550 --a------ C:\WINDOWS\unins000.dat
2008-03-04 13:11 . 2008-03-10 17:18 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-04 13:11 . 2008-03-10 17:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-03 22:26 . 2008-03-03 22:26 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Grisoft
2008-03-03 22:25 . 2007-05-30 08:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-03-03 20:53 . 2008-03-03 20:53 <REP> d-------- C:\Program Files\CCleaner
2008-03-03 19:36 . 2008-03-03 19:45 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-03 19:35 . 2008-03-03 19:45 <REP> d-------- C:\Program Files\Windows Live
2008-03-03 19:35 . 2008-03-03 19:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-03 04:02 . 2008-03-12 01:06 <REP> d-------- C:\Program Files\PKR
2008-02-29 23:26 . 2008-02-29 23:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Age of Empires 3
2008-02-23 06:46 . 2007-11-13 01:02 22,472 --a------ C:\Documents and Settings\Eric Trudel\Application Data\GDIPFONTCACHEV1.DAT

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 21:22 --------- d-----w C:\Program Files\Jeux
2008-03-10 18:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-09 04:17 --------- d-----w C:\Program Files\Morpheus Ultra
2008-03-05 04:43 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AVG7
2008-03-04 02:26 --------- d-----w C:\Program Files\Trend Micro
2008-03-04 02:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-03-04 00:01 --------- d-----w C:\Program Files\Skype
2008-03-03 23:32 --------- d-----w C:\Program Files\Hewlett-Packard
2008-03-01 03:03 --------- d-----w C:\Program Files\Microsoft Games
2008-02-23 22:28 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\U3
2008-02-14 11:24 --------- d-----w C:\Program Files\sixteen tons entertainment
2008-02-13 09:32 49,152 ----a-w C:\WINDOWS\system32\apache.dll
2008-02-03 02:34 --------- d-----w C:\Program Files\Google
2008-02-01 05:41 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\uTorrent
2008-01-31 07:19 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AdobeUM
2008-01-28 20:45 --------- d-----w C:\Program Files\DAEMON Tools
2008-01-28 20:44 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-01-28 05:37 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\DAEMON Tools
2008-01-28 05:28 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-01-27 22:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\SimCity Societies
2008-01-25 04:36 --------- d--h--r C:\Documents and Settings\Eric Trudel\Application Data\SecuROM
2008-01-25 03:05 --------- d-----w C:\Program Files\Alcohol Soft
2008-01-18 02:26 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-01-02 03:32 47,360 ----a-w C:\Documents and Settings\Eric Trudel\Application Data\pcouffin.sys
2006-12-12 18:51 92,064 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdm.sys
2006-12-12 18:51 9,232 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdfl.sys
2006-12-12 18:51 79,328 ----a-w C:\Documents and Settings\Eric Trudel\mqdmserd.sys
2006-12-12 18:51 66,656 ----a-w C:\Documents and Settings\Eric Trudel\mqdmbus.sys
2006-12-12 18:51 6,208 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcmnt.sys
2006-12-12 18:51 5,936 ----a-w C:\Documents and Settings\Eric Trudel\mqdmwhnt.sys
2006-12-12 18:51 4,048 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcr.sys
2006-12-12 18:51 25,600 ----a-w C:\Documents and Settings\Eric Trudel\usbsermptxp.sys
2006-12-12 18:51 22,768 ----a-w C:\Documents and Settings\Eric Trudel\usbsermpt.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 17:08 65536]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 20:04 68856]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 03:49 15691264 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2005-10-14 18:29 88203 C:\WINDOWS\agrsmmsg.exe]
"NDSTray.exe"="NDSTray.exe" []
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 06:20 122940]
"SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 10:24 118784]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-11-30 13:25 73728]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 15:02 352256]
"TFncKy"="TFncKy.exe" []
"TDispVol"="TDispVol.exe" [2005-09-15 15:19 73728 C:\WINDOWS\system32\TDispVol.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 04:32 761945]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 12:37 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 11:41 602182]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-05-01 01:04 7557120]
"nwiz"="nwiz.exe" [2006-05-01 01:04 1519616 C:\WINDOWS\system32\nwiz.exe]
"NVRotateSysTray"="C:\WINDOWS\system32\nvsysrot.dll" [2006-05-01 01:04 49152]
"TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe]
"CFSServ.exe"="CFSServ.exe" []
"Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2006-01-12 21:52 483328]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-21 12:15 579072]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 05:25 6731312]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 19:27 919016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 08:00 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-05 19:49 219136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Acrobat Speed Launcher.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2006-11-09 01:10:50 25214]
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2006-01-17 09:43:37 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-09-14 16:09 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ZOLL Data Retriever Service"=3 (0x3)
"ZOLL Data Relay Service"=3 (0x3)
"usnjsvc"=3 (0x3)
"gusvc"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\Program Files\\Morpheus Ultra\\Morpheus.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\Content\\System\\Swat4.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4X.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4XDedicatedServer.exe"=
"C:\\Program Files\\Sling Media\\SlingPlayer\\SlingPlayer.exe"=
"C:\\Program Files\\sixteen tons entertainment\\Emergency 4\\Em4.exe"=
"C:\\Program Files\\Roger Wilco\\roger.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Civilization4.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Warlords\\Civ4Warlords.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\Yeti_Final_Win32.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\gu.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\detection\\Launcher.exe"=
"C:\\Program Files\\K1RFD\\EchoLink\\EchoLink.exe"=

R1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys [2007-09-22 23:02]
R2 PcCGoCls;PcCGoCls.sys;C:\WINDOWS\system32\Drivers\PcCGoCls.sys [2001-11-07 13:26]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\NSNDIS5.SYS [2004-03-23 22:12]
S3 softctrl;Software Flow Control Driver;C:\WINDOWS\system32\DRIVERS\softctrl.sys [2005-12-11 21:36]
S3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 15:47]
S4 ZOLL Data Relay Service;ZOLL Data Relay Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Relay Service.exe" [2007-04-23 16:02]
S4 ZOLL Data Retriever Service;ZOLL Data Retriever Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Retriever Service.exe" [2007-04-23 16:02]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\dvdcheck.exe
\Shell\directx\command - DirectX9\dxsetup.exe
\Shell\setup\command - G:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - H:\dvdcheck.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3b995913-dccc-11db-9099-00a0d14c2ecb}]
\Shell\AutoRun\command - semo2x.exe
\Shell\explore\Command - semo2x.exe
\Shell\open\Command - semo2x.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-23 17:21:43
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs a chargé sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\system32\nview.dll
.
Temps d'accomplissement: 2008-03-23 17:22:36
ComboFix-quarantined-files.txt 2008-03-23 21:22:33
ComboFix2.txt 2008-03-23 19:36:36
ComboFix3.txt 2008-03-22 03:49:41
ComboFix4.txt 2008-03-21 19:34:21
ComboFix5.txt 2008-03-17 23:15:01
.
2008-03-12 21:55:13 --- E O F ---

Voici le rapport, le fichu virus est toujours présent, ma machine a pris près de 10 minutes seulement pour démarrer en mode normal... même en mode sans échec il est lent...

Voilà le nouveau rapport Combofix:

ComboFix 08-03-23.2 - Eric Trudel 2008-03-23 19:45:52.7 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.2476 [GMT -4:00]
Endroit: C:\Documents and Settings\Eric Trudel\Bureau\Combo-Fix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
-- Other TimeOuts --
VFind -td "C:\WINDOWS\system32\baiso*"
CF16754.exe /c " VFind.exe -ltf -s-1300000 -d+2007-12-23 C:\WINDOWS\* >Windir.dat"
VFind.exe -ltf -s-1300000 -d+2007-12-23 C:\WINDOWS\*
CF16754.exe /c " VFind.exe -ltf -s-1000000 -d+2007-12-23 "C:\Program Files\*" >progfile.dat"
VFind.exe -ltf -s-1000000 -d+2007-12-23 "C:\Program Files\*"
CF16754.exe /c " dir /a/s/b C:\_desktop.ini C:\desktop_.ini C:\cnsmin* C:\_install.exe >DirRoot"
Findstr -MIF:/ "\\TTC\.pdb InsertAdvertisement"
GREP -i "C:\\Program Files\\[^\\]*\\[^\\]*$"
VFind -tf -s282624 "C:\Program Files\????????*[0-9].dll"
CF16754.exe /c " VFind.exe -ltf -s-1000000 -d+2007-12-23 "C:\Program Files\*" >progfile.dat"
VFind.exe -ltf -s-1000000 -d+2007-12-23 "C:\Program Files\*"
CF16754.exe /c " dir /a/s/b C:\_desktop.ini C:\desktop_.ini C:\cnsmin* C:\_install.exe >DirRoot"

((((((((((((((((((((((((((((( Fichiers créés 2008-02-23 to 2008-03-23 ))))))))))))))))))))))))))))))))))))
.

2008-03-23 15:48 . 2008-03-23 15:48 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Simply Super Software
2008-03-23 15:48 . 2008-03-23 15:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-03-23 15:48 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2008-03-23 15:48 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\unrar3.dll
2008-03-23 15:48 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2008-03-23 15:48 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2008-03-23 15:48 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2008-03-21 23:54 . 2008-03-21 23:54 <REP> d-------- C:\Program Files\K1RFD
2008-03-21 23:16 . 2005-01-13 23:41 11,254 --a------ C:\WINDOWS\system32\locate.com
2008-03-21 23:15 . 2008-03-21 23:17 <REP> d-------- C:\MGtools
2008-03-21 23:15 . 2008-03-21 23:17 46,145 --a------ C:\MGlogs.zip
2008-03-21 15:51 . 2008-03-21 15:51 171 --a------ C:\curr_ver.tmp
2008-03-12 21:32 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-12 21:30 . 2008-03-12 21:32 <REP> d-------- C:\Program Files\Java
2008-03-12 21:30 . 2008-03-12 21:30 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-03-12 17:35 . 2008-03-23 19:50 2,365,472 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-12 17:35 . 2008-03-23 19:25 30,644 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-03-12 17:29 . 2008-03-12 17:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-12 17:29 . 2008-03-12 17:31 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-12 17:28 . 2007-12-13 19:27 75,248 --a------ C:\WINDOWS\zllsputility.exe
2008-03-12 17:28 . 2007-12-13 19:27 54,672 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 42,384 --a------ C:\WINDOWS\zllsputility_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 21,904 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 17,808 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-03-12 17:27 . 2008-03-12 17:27 <REP> d-------- C:\Program Files\Zone Labs
2008-03-12 17:26 . 2008-03-23 19:35 <REP> d-------- C:\WINDOWS\Internet Logs
2008-03-10 23:27 . 2008-03-10 23:27 <REP> d-------- C:\_OTMoveIt
2008-03-10 17:23 . 2008-03-10 17:23 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-03-10 17:21 . 2008-03-10 17:21 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-03-10 17:18 . 2008-03-10 17:18 <REP> d-------- C:\icom
2008-03-10 15:30 . 2008-03-10 15:30 <REP> d-------- C:\WINDOWS\system32\AGEIA
2008-03-10 15:30 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\AGEIA Technologies
2008-03-10 15:27 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2008-03-10 15:27 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2008-03-10 15:27 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2008-03-10 15:27 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll
2008-03-10 15:27 . 2007-07-20 00:57 267,112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2008-03-09 00:19 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Malwarebytes
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-03-07 21:19 . 2008-03-07 21:19 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-07 18:44 . 2008-03-10 17:22 <REP> d-------- C:\Backups
2008-03-07 18:43 . 2008-03-16 06:35 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-03-07 15:27 . 2006-01-17 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\toshiba
2008-03-07 15:27 . 2006-10-16 04:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2008-03-07 15:24 . 2008-03-16 07:13 <REP> d-------- C:\SDFix
2008-03-04 18:53 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\TalkPCR
2008-03-04 18:52 . 1998-02-06 22:37 299,520 --a------ C:\WINDOWS\uninst.exe
2008-03-04 16:19 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-04 16:19 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-03-04 16:19 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-04 13:20 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-03-04 13:16 . 2008-03-04 13:15 691,545 --a------ C:\WINDOWS\unins000.exe
2008-03-04 13:16 . 2008-03-04 13:16 2,550 --a------ C:\WINDOWS\unins000.dat
2008-03-04 13:11 . 2008-03-10 17:18 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-04 13:11 . 2008-03-10 17:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-03 22:26 . 2008-03-03 22:26 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Grisoft
2008-03-03 22:25 . 2007-05-30 08:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-03-03 20:53 . 2008-03-03 20:53 <REP> d-------- C:\Program Files\CCleaner
2008-03-03 19:36 . 2008-03-03 19:45 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-03 19:35 . 2008-03-03 19:45 <REP> d-------- C:\Program Files\Windows Live
2008-03-03 19:35 . 2008-03-03 19:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-03 04:02 . 2008-03-12 01:06 <REP> d-------- C:\Program Files\PKR
2008-02-29 23:26 . 2008-02-29 23:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Age of Empires 3
2008-02-23 06:46 . 2007-11-13 01:02 22,472 --a------ C:\Documents and Settings\Eric Trudel\Application Data\GDIPFONTCACHEV1.DAT

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 21:22 --------- d-----w C:\Program Files\Jeux
2008-03-10 18:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-09 04:17 --------- d-----w C:\Program Files\Morpheus Ultra
2008-03-05 04:43 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AVG7
2008-03-04 02:26 --------- d-----w C:\Program Files\Trend Micro
2008-03-04 02:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-03-04 00:01 --------- d-----w C:\Program Files\Skype
2008-03-03 23:32 --------- d-----w C:\Program Files\Hewlett-Packard
2008-03-01 03:03 --------- d-----w C:\Program Files\Microsoft Games
2008-02-23 22:28 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\U3
2008-02-14 11:24 --------- d-----w C:\Program Files\sixteen tons entertainment
2008-02-13 09:32 49,152 ----a-w C:\WINDOWS\system32\apache.dll
2008-02-03 02:34 --------- d-----w C:\Program Files\Google
2008-02-01 05:41 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\uTorrent
2008-01-31 07:19 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AdobeUM
2008-01-28 20:45 --------- d-----w C:\Program Files\DAEMON Tools
2008-01-28 20:44 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-01-28 05:37 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\DAEMON Tools
2008-01-28 05:28 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-01-27 22:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\SimCity Societies
2008-01-25 04:36 --------- d--h--r C:\Documents and Settings\Eric Trudel\Application Data\SecuROM
2008-01-25 03:05 --------- d-----w C:\Program Files\Alcohol Soft
2008-01-18 02:26 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-01-02 03:32 47,360 ----a-w C:\Documents and Settings\Eric Trudel\Application Data\pcouffin.sys
2006-12-12 18:51 92,064 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdm.sys
2006-12-12 18:51 9,232 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdfl.sys
2006-12-12 18:51 79,328 ----a-w C:\Documents and Settings\Eric Trudel\mqdmserd.sys
2006-12-12 18:51 66,656 ----a-w C:\Documents and Settings\Eric Trudel\mqdmbus.sys
2006-12-12 18:51 6,208 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcmnt.sys
2006-12-12 18:51 5,936 ----a-w C:\Documents and Settings\Eric Trudel\mqdmwhnt.sys
2006-12-12 18:51 4,048 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcr.sys
2006-12-12 18:51 25,600 ----a-w C:\Documents and Settings\Eric Trudel\usbsermptxp.sys
2006-12-12 18:51 22,768 ----a-w C:\Documents and Settings\Eric Trudel\usbsermpt.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 17:08 65536]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 20:04 68856]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 03:49 15691264 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2005-10-14 18:29 88203 C:\WINDOWS\agrsmmsg.exe]
"NDSTray.exe"="NDSTray.exe" []
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 06:20 122940]
"SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 10:24 118784]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-11-30 13:25 73728]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 15:02 352256]
"TFncKy"="TFncKy.exe" []
"TDispVol"="TDispVol.exe" [2005-09-15 15:19 73728 C:\WINDOWS\system32\TDispVol.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 04:32 761945]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 12:37 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 11:41 602182]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-05-01 01:04 7557120]
"nwiz"="nwiz.exe" [2006-05-01 01:04 1519616 C:\WINDOWS\system32\nwiz.exe]
"NVRotateSysTray"="C:\WINDOWS\system32\nvsysrot.dll" [2006-05-01 01:04 49152]
"TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe]
"CFSServ.exe"="CFSServ.exe" []
"Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2006-01-12 21:52 483328]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-21 12:15 579072]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 05:25 6731312]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 19:27 919016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 08:00 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-05 19:49 219136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Acrobat Speed Launcher.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2006-11-09 01:10:50 25214]
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26 29696]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2006-01-17 09:43:37 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-09-14 16:09 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ZOLL Data Retriever Service"=3 (0x3)
"ZOLL Data Relay Service"=3 (0x3)
"usnjsvc"=3 (0x3)
"gusvc"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\Program Files\\Morpheus Ultra\\Morpheus.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\Content\\System\\Swat4.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4X.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4XDedicatedServer.exe"=
"C:\\Program Files\\Sling Media\\SlingPlayer\\SlingPlayer.exe"=
"C:\\Program Files\\sixteen tons entertainment\\Emergency 4\\Em4.exe"=
"C:\\Program Files\\Roger Wilco\\roger.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Civilization4.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Warlords\\Civ4Warlords.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\Yeti_Final_Win32.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\gu.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\detection\\Launcher.exe"=
"C:\\Program Files\\K1RFD\\EchoLink\\EchoLink.exe"=

R1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys [2007-09-22 23:02]
R2 PcCGoCls;PcCGoCls.sys;C:\WINDOWS\system32\Drivers\PcCGoCls.sys [2001-11-07 13:26]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\NSNDIS5.SYS [2004-03-23 22:12]
S3 softctrl;Software Flow Control Driver;C:\WINDOWS\system32\DRIVERS\softctrl.sys [2005-12-11 21:36]
S3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 15:47]
S4 ZOLL Data Relay Service;ZOLL Data Relay Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Relay Service.exe" [2007-04-23 16:02]
S4 ZOLL Data Retriever Service;ZOLL Data Retriever Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Retriever Service.exe" [2007-04-23 16:02]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - H:\dvdcheck.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3b995913-dccc-11db-9099-00a0d14c2ecb}]
\Shell\AutoRun\command - semo2x.exe
\Shell\explore\Command - semo2x.exe
\Shell\open\Command - semo2x.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-23 19:51:17
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs a chargé sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\system32\nview.dll
.
Temps d'accomplissement: 2008-03-23 19:52:19
ComboFix-quarantined-files.txt 2008-03-23 23:52:07
ComboFix2.txt 2008-03-23 21:22:37
ComboFix3.txt 2008-03-23 19:36:36
ComboFix4.txt 2008-03-22 03:49:41
ComboFix5.txt 2008-03-21 19:34:21
.
2008-03-12 21:55:13 --- E O F ---

Allo G1rly,

K1RFD est un logiciel de radio amateur via internet, je viens tout juste de l'installer, le problème avait commencé avant.

Icom est un logiciel de programmation de radio amateur qui ne nécessite pas d'installation.

Talk PCR est aussi un logiciel de radio amateur...

MGtool et Mglogs est un utilitaire pour les malwares que j'ai essayer avant de vous contacter...

Merci de ton aide!

J'ai vraiment hâte de faire disparaître ce satané virus!

Toujours là:

ComboFix 08-03-23.2 - Eric Trudel 2008-03-24 16:13:26.8 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.2508 [GMT -4:00]
Endroit: C:\Documents and Settings\Eric Trudel\Bureau\Combo-Fix.exe
Command switches used :: C:\Documents and Settings\Eric Trudel\Bureau\cfscript.txt
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\semo2x.exe
D:\semo2x.exe
E:\semo2x.exe
F:\semo2x.exe
G:\semo2x.exe
H:\semo2x.exe
I:\semo2x.exe
J:\semo2x.exe
.
-- Other TimeOuts --
CF27712.exe /c " VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Program Files\*" >progfile.dat"
VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Program Files\*"
CF27712.exe /c " dir /a/s/b C:\_desktop.ini C:\desktop_.ini C:\cnsmin* C:\_install.exe >DirRoot"
Findstr -MIF:/ "\\TTC\.pdb InsertAdvertisement"
GREP -i "C:\\Program Files\\[^\\]*\\[^\\]*$"
VFind -tf -s282624 "C:\Program Files\????????*[0-9].dll"
CF27712.exe /c " VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Program Files\*" >progfile.dat"
VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Program Files\*"
CF27712.exe /c " dir /a/s/b C:\_desktop.ini C:\desktop_.ini C:\cnsmin* C:\_install.exe >DirRoot"

CF27712.exe /c " VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Program Files\*" >progfile.dat"
VFind.exe -ltf -s-1000000 -d+2007-12-24 "C:\Program Files\*"
CF27712.exe /c " dir /a/s/b C:\_desktop.ini C:\desktop_.ini C:\cnsmin* C:\_install.exe >DirRoot"

((((((((((((((((((((((((((((( Fichiers créés 2008-02-24 to 2008-03-24 ))))))))))))))))))))))))))))))))))))
.

2008-03-23 15:48 . 2008-03-23 15:48 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Simply Super Software
2008-03-23 15:48 . 2008-03-23 15:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2008-03-23 15:48 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2008-03-23 15:48 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\unrar3.dll
2008-03-23 15:48 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2008-03-23 15:48 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2008-03-23 15:48 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2008-03-21 23:54 . 2008-03-21 23:54 <REP> d-------- C:\Program Files\K1RFD
2008-03-21 23:16 . 2005-01-13 23:41 11,254 --a------ C:\WINDOWS\system32\locate.com
2008-03-21 23:15 . 2008-03-21 23:17 <REP> d-------- C:\MGtools
2008-03-21 23:15 . 2008-03-21 23:17 46,145 --a------ C:\MGlogs.zip
2008-03-21 15:51 . 2008-03-21 15:51 171 --a------ C:\curr_ver.tmp
2008-03-12 21:32 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-12 21:30 . 2008-03-12 21:32 <REP> d-------- C:\Program Files\Java
2008-03-12 21:30 . 2008-03-12 21:30 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-03-12 17:35 . 2008-03-24 16:20 2,416,672 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-12 17:35 . 2008-03-23 23:52 30,956 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-03-12 17:29 . 2008-03-12 17:29 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-12 17:29 . 2008-03-12 17:31 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-12 17:28 . 2007-12-13 19:27 75,248 --a------ C:\WINDOWS\zllsputility.exe
2008-03-12 17:28 . 2007-12-13 19:27 54,672 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 42,384 --a------ C:\WINDOWS\zllsputility_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 21,904 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-03-12 17:28 . 2007-12-13 19:27 17,808 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-03-12 17:27 . 2008-03-12 17:27 <REP> d-------- C:\Program Files\Zone Labs
2008-03-12 17:26 . 2008-03-23 23:59 <REP> d-------- C:\WINDOWS\Internet Logs
2008-03-10 23:27 . 2008-03-10 23:27 <REP> d-------- C:\_OTMoveIt
2008-03-10 17:23 . 2008-03-10 17:23 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-03-10 17:21 . 2008-03-10 17:21 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-03-10 17:21 . 2008-03-10 17:21 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-03-10 17:18 . 2008-03-10 17:18 <REP> d-------- C:\icom
2008-03-10 15:30 . 2008-03-10 15:30 <REP> d-------- C:\WINDOWS\system32\AGEIA
2008-03-10 15:30 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\AGEIA Technologies
2008-03-10 15:27 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2008-03-10 15:27 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2008-03-10 15:27 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll
2008-03-10 15:27 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2008-03-10 15:27 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll
2008-03-10 15:27 . 2007-07-20 00:57 267,112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
2008-03-09 00:19 . 2008-03-10 17:09 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Malwarebytes
2008-03-09 00:19 . 2008-03-09 00:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-03-07 21:19 . 2008-03-07 21:19 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-07 18:44 . 2008-03-10 17:22 <REP> d-------- C:\Backups
2008-03-07 18:43 . 2008-03-16 06:35 <REP> d-------- C:\WINDOWS\ERUNT
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-03-07 15:27 . 2008-03-10 17:11 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-03-07 15:27 . 2006-01-17 09:41 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\toshiba
2008-03-07 15:27 . 2006-10-16 04:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2008-03-07 15:24 . 2008-03-16 07:13 <REP> d-------- C:\SDFix
2008-03-04 18:52 . 1998-02-06 22:37 299,520 --a------ C:\WINDOWS\uninst.exe
2008-03-04 16:19 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-04 16:19 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-03-04 16:19 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-04 13:20 . 2008-03-10 17:17 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-03-04 13:16 . 2008-03-04 13:15 691,545 --a------ C:\WINDOWS\unins000.exe
2008-03-04 13:16 . 2008-03-04 13:16 2,550 --a------ C:\WINDOWS\unins000.dat
2008-03-04 13:11 . 2008-03-10 17:18 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-04 13:11 . 2008-03-10 17:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-03 22:26 . 2008-03-03 22:26 <REP> d-------- C:\Documents and Settings\Eric Trudel\Application Data\Grisoft
2008-03-03 22:25 . 2007-05-30 08:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-03-03 20:53 . 2008-03-03 20:53 <REP> d-------- C:\Program Files\CCleaner
2008-03-03 19:36 . 2008-03-03 19:45 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-03 19:35 . 2008-03-03 19:45 <REP> d-------- C:\Program Files\Windows Live
2008-03-03 19:35 . 2008-03-03 19:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-03 04:02 . 2008-03-12 01:06 <REP> d-------- C:\Program Files\PKR
2008-02-29 23:26 . 2008-02-29 23:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Age of Empires 3

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 21:22 --------- d-----w C:\Program Files\Jeux
2008-03-10 18:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-09 04:17 --------- d-----w C:\Program Files\Morpheus Ultra
2008-03-05 04:43 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AVG7
2008-03-04 02:26 --------- d-----w C:\Program Files\Trend Micro
2008-03-04 02:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-03-04 00:01 --------- d-----w C:\Program Files\Skype
2008-03-03 23:32 --------- d-----w C:\Program Files\Hewlett-Packard
2008-03-01 03:03 --------- d-----w C:\Program Files\Microsoft Games
2008-02-23 22:28 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\U3
2008-02-14 11:24 --------- d-----w C:\Program Files\sixteen tons entertainment
2008-02-13 09:32 49,152 ----a-w C:\WINDOWS\system32\apache.dll
2008-02-03 02:34 --------- d-----w C:\Program Files\Google
2008-02-01 05:41 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\uTorrent
2008-01-31 07:19 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\AdobeUM
2008-01-28 20:45 --------- d-----w C:\Program Files\DAEMON Tools
2008-01-28 20:44 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-01-28 05:37 --------- d-----w C:\Documents and Settings\Eric Trudel\Application Data\DAEMON Tools
2008-01-28 05:28 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-01-27 22:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\SimCity Societies
2008-01-25 04:36 --------- d--h--r C:\Documents and Settings\Eric Trudel\Application Data\SecuROM
2008-01-25 03:05 --------- d-----w C:\Program Files\Alcohol Soft
2008-01-18 02:26 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-11-13 05:02 22,472 ----a-w C:\Documents and Settings\Eric Trudel\Application Data\GDIPFONTCACHEV1.DAT
2007-01-02 03:32 47,360 ----a-w C:\Documents and Settings\Eric Trudel\Application Data\pcouffin.sys
2006-12-12 18:51 92,064 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdm.sys
2006-12-12 18:51 9,232 ----a-w C:\Documents and Settings\Eric Trudel\mqdmmdfl.sys
2006-12-12 18:51 79,328 ----a-w C:\Documents and Settings\Eric Trudel\mqdmserd.sys
2006-12-12 18:51 66,656 ----a-w C:\Documents and Settings\Eric Trudel\mqdmbus.sys
2006-12-12 18:51 6,208 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcmnt.sys
2006-12-12 18:51 5,936 ----a-w C:\Documents and Settings\Eric Trudel\mqdmwhnt.sys
2006-12-12 18:51 4,048 ----a-w C:\Documents and Settings\Eric Trudel\mqdmcr.sys
2006-12-12 18:51 25,600 ----a-w C:\Documents and Settings\Eric Trudel\usbsermptxp.sys
2006-12-12 18:51 22,768 ----a-w C:\Documents and Settings\Eric Trudel\usbsermpt.sys
.

((((((((((((((((((((((((((((( snapshot_2008-03-17_19.14.24.90 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-31 07:15:16 65,536 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\PM_Designer.exe
+ 2008-03-24 02:00:19 65,536 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\PM_Designer.exe
- 2008-01-31 07:15:15 25,214 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe
+ 2008-03-24 02:00:18 25,214 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe
- 2008-01-31 07:15:16 25,214 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat_Standard.exe
+ 2008-03-24 02:00:19 25,214 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat_Standard.exe
- 2008-01-31 07:15:16 25,214 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Distiller.exe
+ 2008-03-24 02:00:19 25,214 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Distiller.exe
- 2008-01-31 07:15:16 7,278 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_ELEMENTS_DT.exe
+ 2008-03-24 02:00:19 7,278 ----a-r C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_ELEMENTS_DT.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 17:08 65536]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 20:04 68856]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-09 03:49 15691264 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2005-10-14 18:29 88203 C:\WINDOWS\agrsmmsg.exe]
"NDSTray.exe"="NDSTray.exe" []
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 06:20 122940]
"SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 10:24 118784]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-11-30 13:25 73728]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 15:02 352256]
"TFncKy"="TFncKy.exe" []
"TDispVol"="TDispVol.exe" [2005-09-15 15:19 73728 C:\WINDOWS\system32\TDispVol.exe]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 04:32 761945]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 12:37 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 11:41 602182]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-05-01 01:04 7557120]
"nwiz"="nwiz.exe" [2006-05-01 01:04 1519616 C:\WINDOWS\system32\nwiz.exe]
"NVRotateSysTray"="C:\WINDOWS\system32\nvsysrot.dll" [2006-05-01 01:04 49152]
"TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe]
"CFSServ.exe"="CFSServ.exe" []
"Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2006-01-12 21:52 483328]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-21 12:15 579072]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 05:25 6731312]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 19:27 919016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 08:00 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-05 19:49 219136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Acrobat Speed Launcher.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe [2006-11-09 01:10:50 25214]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2006-01-17 09:43:37 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-09-14 16:09 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ZOLL Data Retriever Service"=3 (0x3)
"ZOLL Data Relay Service"=3 (0x3)
"usnjsvc"=3 (0x3)
"gusvc"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\Program Files\\Morpheus Ultra\\Morpheus.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\Content\\System\\Swat4.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4X.exe"=
"C:\\Program Files\\Jeux\\SWAT 4\\ContentExpansion\\System\\Swat4XDedicatedServer.exe"=
"C:\\Program Files\\Sling Media\\SlingPlayer\\SlingPlayer.exe"=
"C:\\Program Files\\sixteen tons entertainment\\Emergency 4\\Em4.exe"=
"C:\\Program Files\\Roger Wilco\\roger.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Civilization4.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"=
"C:\\Program Files\\Jeux\\Sid Meier's Civilization 4\\Warlords\\Civ4Warlords.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3x.exe"=
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3y.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\Yeti_Final_Win32.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\gu.exe"=
"C:\\Program Files\\Jeux\\Lost Via Domus\\detection\\Launcher.exe"=
"C:\\Program Files\\K1RFD\\EchoLink\\EchoLink.exe"=

R1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys [2007-09-22 23:02]
R2 PcCGoCls;PcCGoCls.sys;C:\WINDOWS\system32\Drivers\PcCGoCls.sys [2001-11-07 13:26]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\NSNDIS5.SYS [2004-03-23 22:12]
S3 softctrl;Software Flow Control Driver;C:\WINDOWS\system32\DRIVERS\softctrl.sys [2005-12-11 21:36]
S3 tosrfec;Bluetooth ACPI from TOSHIBA;C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 15:47]
S4 ZOLL Data Relay Service;ZOLL Data Relay Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Relay Service.exe" [2007-04-23 16:02]
S4 ZOLL Data Retriever Service;ZOLL Data Retriever Service;"C:\Program Files\Pinpoint Technologies, Inc\ZDR\ZOLL Data Retriever Service.exe" [2007-04-23 16:02]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - H:\dvdcheck.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3b995913-dccc-11db-9099-00a0d14c2ecb}]
\Shell\AutoRun\command - semo2x.exe
\Shell\explore\Command - semo2x.exe
\Shell\open\Command - semo2x.exe

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-24 16:20:42
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs a chargé sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\system32\nview.dll
.
Temps d'accomplissement: 2008-03-24 16:21:46
ComboFix-quarantined-files.txt 2008-03-24 20:21:41
ComboFix2.txt 2008-03-23 23:52:20
ComboFix3.txt 2008-03-23 21:22:37
ComboFix4.txt 2008-03-23 19:36:36
ComboFix5.txt 2008-03-22 03:49:41
.
2008-03-12 21:55:13 --- E O F ---

Salut Cedric,
Le rapport HJT est le même qu'ici : http://www.commentcamarche.net/forum/affich 5341517 pc lent soudain rapport hijackthis?page=2#30

Mais notre ami Kedfer a déjà du pain sur la planche...Kaspersky notamment.

Si tu vois quelque chose dans le Jack...

A+