Dns changer Memoire utilisé a 40%

voici le rapport d'otmoveit

C:\ProgramData\Soapacidacid.486rcdf moved successfully.

Created on 03-31-2008 15:09:34

et voici le rapport combox fix,


ComboFix 08-03-30.3 - Momo 2008-03-31 15:17:16.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1126 [GMT 2:00]
Endroit: C:\Users\Momo\Desktop\Combo-Fix.exe
* Création d'un nouveau point de restauration
.

((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-31 ))))))))))))))))))))))))))))))))))))
.

2008-03-31 15:09 . 2008-03-31 15:09 <REP> d-------- C:\_OTMoveIt
2008-03-30 22:24 . 2008-03-30 22:24 <REP> d-------- C:\Users\Momo\AppData\Roaming\vlc
2008-03-30 22:24 . 2008-03-30 22:24 49 --a------ C:\Windows\NeroDigital.ini
2008-03-30 22:23 . 2008-03-30 22:23 <REP> d-------- C:\Program Files\VideoLAN
2008-03-29 00:59 . 2008-03-29 00:59 <REP> d-------- C:\Users\All Users\Yahoo! Companion
2008-03-29 00:59 . 2008-03-29 00:59 <REP> d-------- C:\ProgramData\Yahoo! Companion
2008-03-28 23:31 . 2008-03-28 23:32 <REP> d-------- C:\ComboFix
2008-03-28 23:01 . 2008-03-28 23:45 691 --a------ C:\Users\Momo\AppData\Roaming\GetValue.vbs
2008-03-28 23:01 . 2008-03-28 23:45 35 --a------ C:\Users\Momo\AppData\Roaming\SetValue.bat
2008-03-28 22:55 . 2008-03-28 22:55 <REP> d-------- C:\Program Files\Trend Micro
2008-03-27 16:26 . 2008-03-27 16:26 <REP> d-------- C:\Program Files\Yahoo!
2008-03-27 16:26 . 2008-03-27 16:26 <REP> d-------- C:\Program Files\CCleaner
2008-03-27 14:35 . 2008-03-27 14:35 <REP> d--h----- C:\Windows\msdownld.tmp
2008-03-25 20:29 . 2007-12-04 16:51 42,912 --a------ C:\Windows\System32\drivers\aswTdi.sys
2008-03-25 20:29 . 2007-12-04 16:53 23,152 --a------ C:\Windows\System32\drivers\aswRdr.sys
2008-03-25 20:28 . 2008-03-25 20:28 <REP> d-------- C:\Program Files\Alwil Software
2008-03-25 20:28 . 2007-12-04 15:04 837,496 --a------ C:\Windows\System32\aswBoot.exe
2008-03-25 20:28 . 2004-01-09 11:13 380,928 --a------ C:\Windows\System32\actskin4.ocx
2008-03-25 20:28 . 2007-12-04 14:54 95,608 --a------ C:\Windows\System32\AvastSS.scr
2008-03-25 20:28 . 2007-12-04 16:52 45,648 --a------ C:\Windows\System32\drivers\aswMonFlt.sys
2008-03-25 20:11 . 2008-03-25 20:11 <REP> d-------- C:\Program Files\Microsoft Silverlight
2008-03-25 19:57 . 2008-03-25 19:57 <REP> d-------- C:\PerfLogs
2008-03-25 18:22 . 2008-01-19 09:33 2,623,488 --a------ C:\Windows\System32\SLsvc.exe
2008-03-25 18:22 . 2008-01-19 09:36 1,541,120 --a------ C:\Windows\System32\onex.dll
2008-03-25 18:22 . 2008-01-19 09:44 986,680 --a------ C:\Windows\System32\winload.exe
2008-03-25 18:20 . 2008-01-19 09:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-03-25 18:19 . 2008-01-19 09:32 5,714,432 --a------ C:\Windows\System32\logon.scr
2008-03-25 18:18 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-03-25 18:17 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-03-25 18:17 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-03-25 18:17 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-03-25 18:17 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-03-25 18:17 . 2006-11-02 11:39 6,656 --a------ C:\Windows\System32\kbd106.dll
2008-03-25 13:13 . 2008-03-25 13:13 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-03-25 13:12 . 2008-03-25 13:12 <REP> d-------- C:\Users\Momo\AppData\Roaming\Grisoft
2008-03-25 13:11 . 2008-03-25 13:11 <REP> d-------- C:\Users\All Users\Grisoft
2008-03-25 13:11 . 2008-03-25 13:11 <REP> d-------- C:\ProgramData\Grisoft
2008-03-25 13:11 . 2007-05-30 14:10 10,872 --a------ C:\Windows\System32\drivers\AvgAsCln.sys
2008-03-25 12:51 . 2008-03-25 12:51 0 --a------ C:\Windows\nsreg.dat
2008-03-25 05:29 . 2008-03-30 23:16 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-03-25 05:29 . 2008-03-30 23:16 <REP> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-03-25 05:29 . 2008-03-30 22:47 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-25 02:04 . 2008-03-25 02:05 <REP> d-------- C:\Users\All Users\Messenger Plus!
2008-03-25 02:04 . 2008-03-25 02:05 <REP> d-------- C:\ProgramData\Messenger Plus!
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\Users\All Users\Move Bore Curb Tool
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\Users\All Users\drv phone amok
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\ProgramData\Move Bore Curb Tool
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\ProgramData\drv phone amok
2008-03-25 01:43 . 2008-03-25 01:43 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-03-25 01:43 . 2008-03-25 01:43 <REP> d-------- C:\Program Files\Circle Developement
2008-03-22 01:48 . 2008-03-26 22:13 <REP> d-------- C:\Users\Momo\AppData\Roaming\teamspeak2
2008-03-22 01:47 . 2008-03-22 01:48 <REP> d-------- C:\Program Files\Teamspeak2_RC2
2008-03-22 01:47 . 2008-03-22 01:47 34,064 --a------ C:\Windows\System32\lhacm.acm
2008-03-22 01:23 . 2008-03-28 22:17 27,240 --a------ C:\Users\Momo\AppData\Roaming\nvModes.dat
2008-03-22 01:22 . 2008-03-22 02:09 <REP> d-------- C:\Users\Momo\AppData\Roaming\DAoC Portal
2008-03-22 01:22 . 2008-03-22 01:22 <REP> d-------- C:\Program Files\DAoC Portal
2008-03-22 01:14 . 2008-03-22 01:14 <REP> d-------- C:\Users\Momo\AppData\Roaming\Electronic Arts
2008-03-21 22:15 . 2008-03-21 22:15 <REP> d-------- C:\Users\Momo\AppData\Roaming\InstallShield
2008-03-21 21:11 . 2008-03-21 21:11 6,656 --a------ C:\Windows\System32\kbd106n.dll
2008-03-21 20:44 . 2008-03-23 22:06 <REP> d-------- C:\Dark Age of Camelot - Labyrinth of the Minotaur
2008-03-21 20:36 . 2008-03-21 20:36 <REP> d-------- C:\Users\Momo\AppData\Roaming\CyberLink
2008-03-21 20:36 . 2008-03-21 20:43 <REP> d-------- C:\Program Files\Windows Live
2008-03-21 20:36 . 2008-03-21 20:43 <REP> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-03-21 20:34 . 2008-03-21 20:35 <REP> d-------- C:\Users\All Users\WLInstaller
2008-03-21 20:34 . 2008-03-21 20:35 <REP> d-------- C:\ProgramData\WLInstaller
2008-03-21 20:31 . 2008-03-21 20:31 <REP> d-------- C:\Windows\System32\Macromed
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\Users\All Users\fsc-reg
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\ProgramData\fsc-reg
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
2008-03-21 20:27 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Searches
2008-03-21 20:27 . 2008-03-26 23:07 <REP> dr------- C:\Users\Momo\Contacts
2008-03-21 20:26 . 2008-03-21 21:56 <REP> dr------- C:\Users\Momo\Videos
2008-03-21 20:26 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Saved Games
2008-03-21 20:26 . 2008-03-21 21:56 <REP> dr------- C:\Users\Momo\Pictures
2008-03-21 20:26 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Music
2008-03-21 20:26 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Links
2008-03-21 20:26 . 2008-03-25 12:50 <REP> dr------- C:\Users\Momo\Downloads
2008-03-21 20:26 . 2008-03-31 00:19 <REP> dr------- C:\Users\Momo\Documents
2008-03-21 20:26 . 2006-11-02 14:37 <REP> d-------- C:\Users\Momo\AppData\Roaming\Media Center Programs
2008-03-21 20:26 . 2008-03-21 20:27 <REP> d--h----- C:\Users\Momo\AppData
2008-03-21 20:21 . 2008-03-21 20:21 <REP> dr------- C:\Windows\System32\config\systemprofile\Contacts

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-31 13:14 --------- d-----w C:\ProgramData\Symantec
2008-03-31 13:14 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-03-31 13:13 --------- d-----w C:\Program Files\Symantec
2008-03-28 21:45 3,814 ----a-w C:\Windows\System32\tmp.reg
2008-03-28 19:00 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-26 07:50 82,432 ----a-w C:\Windows\System32\IEDFix.exe
2008-03-25 18:06 174 --sha-w C:\Program Files\desktop.ini
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Sidebar
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Mail
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Journal
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Defender
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Collaboration
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Calendar
2008-03-25 17:07 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-03-25 17:06 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-03-22 14:49 86,528 ----a-w C:\Windows\System32\VACFix.exe
2008-03-21 20:52 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-03-21 19:19 --------- d-----w C:\ProgramData\Microsoft Help
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Modèles
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Menu Démarrer
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Favoris
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Bureau
2008-03-21 18:21 --------- d-sh--w C:\Program Files\Fichiers communs
2008-01-19 07:44 926,776 ----a-w C:\Windows\System32\winresume.exe
2008-01-19 07:43 614,968 ----a-w C:\Windows\System32\ci.dll
2008-01-19 07:43 376,376 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll
2008-01-19 07:43 3,600,440 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-01-19 07:43 3,548,728 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-01-19 07:42 94,776 ----a-w C:\Windows\System32\MigAutoPlay.exe
2008-01-19 07:42 51,768 ----a-w C:\Windows\System32\PSHED.DLL
2008-01-19 07:42 247,352 ----a-w C:\Windows\System32\clfs.sys
2008-01-19 07:42 177,208 ----a-w C:\Windows\System32\halmacpi.dll
2008-01-19 07:42 141,880 ----a-w C:\Windows\System32\halacpi.dll
2008-01-19 07:41 24,120 ----a-w C:\Windows\System32\BOOTVID.DLL
2008-01-19 07:41 21,560 ----a-w C:\Windows\System32\kdusb.dll
2008-01-19 07:41 19,512 ----a-w C:\Windows\System32\kdcom.dll
2008-01-19 07:38 46,080 ----a-w C:\Windows\System32\NAPCRYPT.DLL
2008-01-19 07:38 4,595,712 ----a-w C:\Windows\System32\AuthFWSnapin.dll
2008-01-19 07:38 242,744 ----a-w C:\Windows\System32\rsaenh.dll
2008-01-19 07:38 155,704 ----a-w C:\Windows\System32\dssenh.dll
2008-01-19 07:38 131,640 ----a-w C:\Windows\System32\basecsp.dll
2008-01-19 07:38 103,936 ----a-w C:\Windows\System32\NAPHLPR.DLL
2008-01-19 07:38 1,203,792 ----a-w C:\Windows\System32\ntdll.dll
2008-01-19 07:36 996,352 ----a-w C:\Windows\System32\WMNetMgr.dll
2008-01-19 07:35 98,304 ----a-w C:\Windows\System32\mssitlb.dll
2008-01-19 07:34 98,816 ----a-w C:\Windows\System32\mfps.dll
2008-01-19 07:33 98,304 ----a-w C:\Windows\System32\makecab.exe
2008-01-19 07:32 879,616 ----a-w C:\Windows\System32\Bubbles.scr
2008-01-19 07:32 704,512 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-01-19 07:32 258,048 ----a-w C:\Windows\System32\winspool.drv
2008-01-19 07:32 221,184 ----a-w C:\Windows\System32\Mystify.scr
2008-01-19 07:32 220,672 ----a-w C:\Windows\System32\Ribbons.scr
2008-01-19 07:32 21,504 ----a-w C:\Windows\System32\msacm32.drv
2008-01-19 07:32 166,912 ----a-w C:\Windows\System32\wdmaud.drv
2008-01-19 07:32 1,370,624 ----a-w C:\Windows\System32\Aurora.scr
2008-01-19 07:31 7,680 ----a-w C:\Windows\System32\spwizres.dll
2008-01-19 07:31 57,856 ----a-w C:\Windows\System32\nlsbres.dll
2008-01-19 07:31 118,272 ----a-w C:\Windows\System32\RDPENCDD.dll
2008-01-19 07:30 17,920 ----a-w C:\Windows\System32\netevent.dll
2008-01-19 07:29 705,536 ----a-w C:\Windows\System32\imagesp1.dll
2008-01-19 07:29 58,880 ----a-w C:\Windows\System32\msobjs.dll
2008-01-19 07:28 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
2008-01-19 07:26 36,864 ----a-w C:\Windows\System32\cdd.dll
2008-01-19 06:01 14,336 ----a-w C:\Windows\System32\tsddd.dll
2008-01-19 06:01 134,656 ----a-w C:\Windows\System32\rdpdd.dll
2008-01-19 05:52 56,320 ----a-w C:\Windows\System32\vga256.dll
2008-01-19 05:52 21,504 ----a-w C:\Windows\System32\vga64k.dll
2008-01-19 05:52 11,776 ----a-w C:\Windows\System32\framebuf.dll
2008-01-19 05:52 10,752 ----a-w C:\Windows\System32\vga.dll
2008-01-19 05:50 14,848 ----a-w C:\Windows\System32\iscsilog.dll
2008-01-19 05:48 20,992 ----a-w C:\Windows\System32\msdtcVSp1res.dll
2008-01-19 05:48 1,291,264 ----a-w C:\Windows\System32\comres.dll
2008-01-19 05:46 4,240,384 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-19 05:39 13,312 ----a-w C:\Windows\System32\WsmRes.dll
2008-01-19 05:37 2,031,616 ----a-w C:\Windows\System32\win32k.sys
2008-01-19 05:36 289,792 ----a-w C:\Windows\System32\atmfd.dll
2008-01-19 05:33 56,320 ----a-w C:\Windows\System32\graftabl.com
2008-01-19 05:31 8,322,048 ----a-w C:\Windows\System32\spwizimg.dll
2008-01-19 05:27 8,704 ----a-w C:\Windows\System32\kd1394.dll
2008-01-19 05:26 605,696 ----a-w C:\Windows\System32\adtschema.dll
2008-01-19 03:17 100,043 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
2008-01-05 11:36 195,122 ----a-w C:\Windows\System32\winrm.vbs
2008-01-05 11:35 80,047 ----a-w C:\Windows\System32\slmgr.vbs
2008-01-05 11:34 15,181 ----a-w C:\Windows\System32\gatherWirelessInfo.vbs
2008-01-05 11:27 96,760 ----a-w C:\Windows\System32\dfshim.dll
2008-01-05 11:27 84,480 ----a-w C:\Windows\System32\mscories.dll
2008-01-05 11:27 282,112 ----a-w C:\Windows\System32\mscoree.dll
2008-01-05 11:27 158,720 ----a-w C:\Windows\System32\mscorier.dll
2008-01-05 11:21 779,800 ----a-w C:\Windows\System32\PresentationNative_v0300.dll
2008-01-05 11:21 579,584 ----a-w C:\Windows\System32\icardagt.exe
2008-01-05 11:21 350,744 ----a-w C:\Windows\System32\PresentationHost.exe
2008-01-05 11:21 33,304 ----a-w C:\Windows\System32\PresentationHostProxy.dll
2008-01-05 11:21 28,672 ----a-w C:\Windows\System32\TsWpfWrp.exe
2008-01-05 11:21 12,198 ----a-w C:\Windows\System32\gatherWiredInfo.vbs
2008-01-05 11:21 11,776 ----a-w C:\Windows\System32\icardres.dll
2008-01-05 11:21 106,520 ----a-w C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 09:33 1233920]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 09:33 202240]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-19 09:38 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-10 17:10 4468736 C:\Windows\RtHDVCpl.exe]
"SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 18:31 630784]
"OSD"="C:\Program Files\C&E\OSD\osd.exe" [2007-07-10 19:29 557056]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-02-26 21:46 153136]
"recinfo122"="c:\RecInfo\RecInfo.exe" [2007-10-23 14:52 2764800]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 18:38 583048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"Skytel"="Skytel.exe" [2007-05-07 18:51 1826816 C:\Windows\SkyTel.exe]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-19 01:31 8466432]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-19 01:31 81920]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{E5DB8825-1222-46C4-9EEA-06429C915BD3}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B44FF5A7-68F2-4A9F-B32E-F5189B7B34E0}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{883D24C2-655B-465E-A362-4012B4D5F5F3}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

R0 Si3531;SiI-3531 SATA Controller;C:\Windows\system32\DRIVERS\Si3531.sys [2007-06-01 19:29]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler;C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [2006-12-08 11:52]
R3 itecir;ITECIR Infrared Receiver;C:\Windows\system32\DRIVERS\itecir.sys [2007-04-04 05:57]
S4 nvrd32;NVIDIA nForce RAID Driver;C:\Windows\system32\drivers\nvrd32.sys [2007-07-02 17:37]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-31 15:20:28
Windows 6.0.6001 Service Pack 1 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-31 15:21:15
ComboFix-quarantined-files.txt 2008-03-31 13:21:11
Pre-Run: 110,578,987,008 octets libres
Post-Run: 110,548,967,424 octets libres
.
2008-03-28 12:22:40 --- E O F ---

je n'arrive pas a effectué le scan online ( oui j'ai lancer sur IE )

Pour fixwareout sa me met window version unsuported => j'ai window vista


et le rapport de smirtfraud




SmitFraudFix v2.309

Scan done at 15:48:37,68, 31/03/2008
Run from C:\Windows\System32\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\C&E\OSD\osd.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Momo


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Momo\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Momo\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8168B/8111B Family PCI-E Gigabit Ethernet NIC (NDIS 6.0)
DNS Server Search Order: 82.216.111.122
DNS Server Search Order: 82.216.111.123
DNS Server Search Order: 82.216.111.124
DNS Server Search Order: 82.216.111.125
DNS Server Search Order: 82.216.111.121

HKLM\SYSTEM\CCS\Services\Tcpip\..\{2EA73192-7C13-4989-BC2C-110864F090AF}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{5FB66653-7851-493A-BF3E-F117F60E3647}: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CCS\Services\Tcpip\..\{F327FCCC-8A14-47EB-94FD-4F146C1F5324}: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CS1\Services\Tcpip\..\{2EA73192-7C13-4989-BC2C-110864F090AF}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5FB66653-7851-493A-BF3E-F117F60E3647}: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CS1\Services\Tcpip\..\{F327FCCC-8A14-47EB-94FD-4F146C1F5324}: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CS3\Services\Tcpip\..\{2EA73192-7C13-4989-BC2C-110864F090AF}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{5FB66653-7851-493A-BF3E-F117F60E3647}: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CS3\Services\Tcpip\..\{F327FCCC-8A14-47EB-94FD-4F146C1F5324}: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=82.216.111.122 82.216.111.123 82.216.111.124 82.216.111.125 82.216.111.121


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

le nouvo rapport HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:54:35, on 31/03/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\C&E\OSD\osd.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [OSD] C:\Program Files\C&E\OSD\osd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [recinfo122] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

un rapport hijackthis ya t'il toujours des problèmes?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:27:26, on 31/03/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\C&E\OSD\osd.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Program Files\DAoC Portal\DAoCPortal.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [OSD] C:\Program Files\C&E\OSD\osd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [recinfo122] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

Je sais pas si tu voit un autre problème, mais Pour le moment sa va ma memoire é descendu sous la barre des 40%
je te remercie :)

ok c en cours jte post le rapport apres

voici le rapport


Malwarebytes' Anti-Malware 1.09
Version de la base de données: 573

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 142978
Temps écoulé: 19 minute(s), 28 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Typelib\{50ccd00a-66b6-4d95-aaef-8ee959498f92} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\stfngdvw.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Avast Ben jai 40% de la memoire utilisé

rapport HijackThis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:27:26, on 31/03/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\C&E\OSD\osd.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Program Files\DAoC Portal\DAoCPortal.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [OSD] C:\Program Files\C&E\OSD\osd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [recinfo122] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

Ben j'ai un pc qui a 1semaines, au debut seulent entre 10 et 20 % de la mémoire etais utilisai quand je faisais rien sur le pc maintenant c'est a 4O % minimum

rapport combofix


ComboFix 08-03-30.3 - Momo 2008-03-31 18:47:31.3 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1301 [GMT 2:00]
Endroit: C:\Users\Momo\Desktop\kill baggle.exe
.

((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-31 ))))))))))))))))))))))))))))))))))))
.

2008-03-31 16:01 . 2008-03-31 16:01 <REP> d-------- C:\Users\Momo\AppData\Roaming\Malwarebytes
2008-03-31 16:01 . 2008-03-31 16:01 <REP> d-------- C:\Users\All Users\Malwarebytes
2008-03-31 16:01 . 2008-03-31 16:01 <REP> d-------- C:\ProgramData\Malwarebytes
2008-03-31 16:01 . 2008-03-31 16:24 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-03-31 15:43 . 2008-03-31 15:43 <REP> d-------- C:\fixwareout
2008-03-31 15:41 . 2008-03-31 15:41 <REP> d-------- C:\Users\Momo\AppData\Roaming\Talkback
2008-03-31 15:15 . 2008-03-31 15:21 <REP> d-------- C:\Combo-Fix
2008-03-31 15:09 . 2008-03-31 15:09 <REP> d-------- C:\_OTMoveIt
2008-03-30 22:24 . 2008-03-30 22:24 <REP> d-------- C:\Users\Momo\AppData\Roaming\vlc
2008-03-30 22:24 . 2008-03-30 22:24 49 --a------ C:\Windows\NeroDigital.ini
2008-03-30 22:23 . 2008-03-30 22:23 <REP> d-------- C:\Program Files\VideoLAN
2008-03-29 00:59 . 2008-03-29 00:59 <REP> d-------- C:\Users\All Users\Yahoo! Companion
2008-03-29 00:59 . 2008-03-29 00:59 <REP> d-------- C:\ProgramData\Yahoo! Companion
2008-03-28 23:31 . 2008-03-28 23:32 <REP> d-------- C:\ComboFix
2008-03-28 23:01 . 2008-03-31 15:52 691 --a------ C:\Users\Momo\AppData\Roaming\GetValue.vbs
2008-03-28 23:01 . 2008-03-31 15:52 35 --a------ C:\Users\Momo\AppData\Roaming\SetValue.bat
2008-03-28 22:55 . 2008-03-28 22:55 <REP> d-------- C:\Program Files\Trend Micro
2008-03-27 16:26 . 2008-03-27 16:26 <REP> d-------- C:\Program Files\Yahoo!
2008-03-27 16:26 . 2008-03-27 16:26 <REP> d-------- C:\Program Files\CCleaner
2008-03-27 14:35 . 2008-03-27 14:35 <REP> d--h----- C:\Windows\msdownld.tmp
2008-03-25 20:29 . 2007-12-04 16:51 42,912 --a------ C:\Windows\System32\drivers\aswTdi.sys
2008-03-25 20:29 . 2007-12-04 16:53 23,152 --a------ C:\Windows\System32\drivers\aswRdr.sys
2008-03-25 20:28 . 2008-03-25 20:28 <REP> d-------- C:\Program Files\Alwil Software
2008-03-25 20:28 . 2007-12-04 15:04 837,496 --a------ C:\Windows\System32\aswBoot.exe
2008-03-25 20:28 . 2004-01-09 11:13 380,928 --a------ C:\Windows\System32\actskin4.ocx
2008-03-25 20:28 . 2007-12-04 14:54 95,608 --a------ C:\Windows\System32\AvastSS.scr
2008-03-25 20:28 . 2007-12-04 16:52 45,648 --a------ C:\Windows\System32\drivers\aswMonFlt.sys
2008-03-25 20:11 . 2008-03-25 20:11 <REP> d-------- C:\Program Files\Microsoft Silverlight
2008-03-25 19:57 . 2008-03-25 19:57 <REP> d-------- C:\PerfLogs
2008-03-25 18:22 . 2008-01-19 09:33 2,623,488 --a------ C:\Windows\System32\SLsvc.exe
2008-03-25 18:22 . 2008-01-19 09:36 1,541,120 --a------ C:\Windows\System32\onex.dll
2008-03-25 18:22 . 2008-01-19 09:44 986,680 --a------ C:\Windows\System32\winload.exe
2008-03-25 18:20 . 2008-01-19 09:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-03-25 18:19 . 2008-01-19 09:32 5,714,432 --a------ C:\Windows\System32\logon.scr
2008-03-25 18:18 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-03-25 18:17 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-03-25 18:17 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-03-25 18:17 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-03-25 18:17 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-03-25 18:17 . 2006-11-02 11:39 6,656 --a------ C:\Windows\System32\kbd106.dll
2008-03-25 13:13 . 2008-03-25 13:13 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-03-25 13:12 . 2008-03-25 13:12 <REP> d-------- C:\Users\Momo\AppData\Roaming\Grisoft
2008-03-25 13:11 . 2008-03-25 13:11 <REP> d-------- C:\Users\All Users\Grisoft
2008-03-25 13:11 . 2008-03-25 13:11 <REP> d-------- C:\ProgramData\Grisoft
2008-03-25 13:11 . 2007-05-30 14:10 10,872 --a------ C:\Windows\System32\drivers\AvgAsCln.sys
2008-03-25 12:51 . 2008-03-25 12:51 0 --a------ C:\Windows\nsreg.dat
2008-03-25 05:29 . 2008-03-31 18:28 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-03-25 05:29 . 2008-03-31 18:28 <REP> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-03-25 05:29 . 2008-03-31 18:32 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-03-25 02:04 . 2008-03-25 02:05 <REP> d-------- C:\Users\All Users\Messenger Plus!
2008-03-25 02:04 . 2008-03-25 02:05 <REP> d-------- C:\ProgramData\Messenger Plus!
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\Users\All Users\Move Bore Curb Tool
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\Users\All Users\drv phone amok
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\ProgramData\Move Bore Curb Tool
2008-03-25 01:44 . 2008-03-25 01:44 <REP> d-------- C:\ProgramData\drv phone amok
2008-03-25 01:43 . 2008-03-25 01:43 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-03-25 01:43 . 2008-03-25 01:43 <REP> d-------- C:\Program Files\Circle Developement
2008-03-22 01:48 . 2008-03-26 22:13 <REP> d-------- C:\Users\Momo\AppData\Roaming\teamspeak2
2008-03-22 01:47 . 2008-03-22 01:48 <REP> d-------- C:\Program Files\Teamspeak2_RC2
2008-03-22 01:47 . 2008-03-22 01:47 34,064 --a------ C:\Windows\System32\lhacm.acm
2008-03-22 01:23 . 2008-03-28 22:17 27,240 --a------ C:\Users\Momo\AppData\Roaming\nvModes.dat
2008-03-22 01:22 . 2008-03-22 02:09 <REP> d-------- C:\Users\Momo\AppData\Roaming\DAoC Portal
2008-03-22 01:22 . 2008-03-22 01:22 <REP> d-------- C:\Program Files\DAoC Portal
2008-03-22 01:14 . 2008-03-22 01:14 <REP> d-------- C:\Users\Momo\AppData\Roaming\Electronic Arts
2008-03-21 22:15 . 2008-03-21 22:15 <REP> d-------- C:\Users\Momo\AppData\Roaming\InstallShield
2008-03-21 21:11 . 2008-03-21 21:11 6,656 --a------ C:\Windows\System32\kbd106n.dll
2008-03-21 20:44 . 2008-03-23 22:06 <REP> d-------- C:\Dark Age of Camelot - Labyrinth of the Minotaur
2008-03-21 20:36 . 2008-03-21 20:36 <REP> d-------- C:\Users\Momo\AppData\Roaming\CyberLink
2008-03-21 20:36 . 2008-03-21 20:43 <REP> d-------- C:\Program Files\Windows Live
2008-03-21 20:36 . 2008-03-21 20:43 <REP> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-03-21 20:34 . 2008-03-21 20:35 <REP> d-------- C:\Users\All Users\WLInstaller
2008-03-21 20:34 . 2008-03-21 20:35 <REP> d-------- C:\ProgramData\WLInstaller
2008-03-21 20:31 . 2008-03-21 20:31 <REP> d-------- C:\Windows\System32\Macromed
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\Users\All Users\fsc-reg
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\Users\All Users\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\ProgramData\fsc-reg
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2008-03-21 20:29 . 2008-03-21 20:29 <REP> d-------- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
2008-03-21 20:27 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Searches
2008-03-21 20:27 . 2008-03-26 23:07 <REP> dr------- C:\Users\Momo\Contacts
2008-03-21 20:26 . 2008-03-21 21:56 <REP> dr------- C:\Users\Momo\Videos
2008-03-21 20:26 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Saved Games
2008-03-21 20:26 . 2008-03-21 21:56 <REP> dr------- C:\Users\Momo\Pictures
2008-03-21 20:26 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Music
2008-03-21 20:26 . 2008-03-21 20:27 <REP> dr------- C:\Users\Momo\Links
2008-03-21 20:26 . 2008-03-25 12:50 <REP> dr------- C:\Users\Momo\Downloads
2008-03-21 20:26 . 2008-03-31 00:19 <REP> dr------- C:\Users\Momo\Documents
2008-03-21 20:26 . 2006-11-02 14:37 <REP> d-------- C:\Users\Momo\AppData\Roaming\Media Center Programs
2008-03-21 20:26 . 2008-03-21 20:27 <REP> d--h----- C:\Users\Momo\AppData
2008-03-21 20:21 . 2008-03-21 20:21 <REP> dr------- C:\Windows\System32\config\systemprofile\Contacts

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-31 16:30 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-03-31 13:52 3,528 ----a-w C:\Windows\System32\tmp.reg
2008-03-28 19:00 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-26 07:50 82,432 ----a-w C:\Windows\System32\IEDFix.exe
2008-03-25 18:06 174 --sha-w C:\Program Files\desktop.ini
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Sidebar
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Mail
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Journal
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Defender
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Collaboration
2008-03-25 17:59 --------- d-----w C:\Program Files\Windows Calendar
2008-03-25 17:07 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-03-25 17:06 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-03-22 14:49 86,528 ----a-w C:\Windows\System32\VACFix.exe
2008-03-21 20:52 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-03-21 19:19 --------- d-----w C:\ProgramData\Microsoft Help
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Modèles
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Menu Démarrer
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Favoris
2008-03-21 18:21 --------- d-sh--w C:\ProgramData\Bureau
2008-03-21 18:21 --------- d-sh--w C:\Program Files\Fichiers communs
2008-01-19 07:44 926,776 ----a-w C:\Windows\System32\winresume.exe
2008-01-19 07:43 614,968 ----a-w C:\Windows\System32\ci.dll
2008-01-19 07:43 376,376 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll
2008-01-19 07:43 3,600,440 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-01-19 07:43 3,548,728 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-01-19 07:42 94,776 ----a-w C:\Windows\System32\MigAutoPlay.exe
2008-01-19 07:42 51,768 ----a-w C:\Windows\System32\PSHED.DLL
2008-01-19 07:42 247,352 ----a-w C:\Windows\System32\clfs.sys
2008-01-19 07:42 177,208 ----a-w C:\Windows\System32\halmacpi.dll
2008-01-19 07:42 141,880 ----a-w C:\Windows\System32\halacpi.dll
2008-01-19 07:41 24,120 ----a-w C:\Windows\System32\BOOTVID.DLL
2008-01-19 07:41 21,560 ----a-w C:\Windows\System32\kdusb.dll
2008-01-19 07:41 19,512 ----a-w C:\Windows\System32\kdcom.dll
2008-01-19 07:38 46,080 ----a-w C:\Windows\System32\NAPCRYPT.DLL
2008-01-19 07:38 4,595,712 ----a-w C:\Windows\System32\AuthFWSnapin.dll
2008-01-19 07:38 242,744 ----a-w C:\Windows\System32\rsaenh.dll
2008-01-19 07:38 155,704 ----a-w C:\Windows\System32\dssenh.dll
2008-01-19 07:38 131,640 ----a-w C:\Windows\System32\basecsp.dll
2008-01-19 07:38 103,936 ----a-w C:\Windows\System32\NAPHLPR.DLL
2008-01-19 07:38 1,203,792 ----a-w C:\Windows\System32\ntdll.dll
2008-01-19 07:36 996,352 ----a-w C:\Windows\System32\WMNetMgr.dll
2008-01-19 07:35 98,304 ----a-w C:\Windows\System32\mssitlb.dll
2008-01-19 07:34 98,816 ----a-w C:\Windows\System32\mfps.dll
2008-01-19 07:33 98,304 ----a-w C:\Windows\System32\makecab.exe
2008-01-19 07:32 879,616 ----a-w C:\Windows\System32\Bubbles.scr
2008-01-19 07:32 704,512 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-01-19 07:32 258,048 ----a-w C:\Windows\System32\winspool.drv
2008-01-19 07:32 221,184 ----a-w C:\Windows\System32\Mystify.scr
2008-01-19 07:32 220,672 ----a-w C:\Windows\System32\Ribbons.scr
2008-01-19 07:32 21,504 ----a-w C:\Windows\System32\msacm32.drv
2008-01-19 07:32 166,912 ----a-w C:\Windows\System32\wdmaud.drv
2008-01-19 07:32 1,370,624 ----a-w C:\Windows\System32\Aurora.scr
2008-01-19 07:31 7,680 ----a-w C:\Windows\System32\spwizres.dll
2008-01-19 07:31 57,856 ----a-w C:\Windows\System32\nlsbres.dll
2008-01-19 07:31 118,272 ----a-w C:\Windows\System32\RDPENCDD.dll
2008-01-19 07:30 17,920 ----a-w C:\Windows\System32\netevent.dll
2008-01-19 07:29 705,536 ----a-w C:\Windows\System32\imagesp1.dll
2008-01-19 07:29 58,880 ----a-w C:\Windows\System32\msobjs.dll
2008-01-19 07:28 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
2008-01-19 07:26 36,864 ----a-w C:\Windows\System32\cdd.dll
2008-01-19 06:01 14,336 ----a-w C:\Windows\System32\tsddd.dll
2008-01-19 06:01 134,656 ----a-w C:\Windows\System32\rdpdd.dll
2008-01-19 05:52 56,320 ----a-w C:\Windows\System32\vga256.dll
2008-01-19 05:52 21,504 ----a-w C:\Windows\System32\vga64k.dll
2008-01-19 05:52 11,776 ----a-w C:\Windows\System32\framebuf.dll
2008-01-19 05:52 10,752 ----a-w C:\Windows\System32\vga.dll
2008-01-19 05:50 14,848 ----a-w C:\Windows\System32\iscsilog.dll
2008-01-19 05:48 20,992 ----a-w C:\Windows\System32\msdtcVSp1res.dll
2008-01-19 05:48 1,291,264 ----a-w C:\Windows\System32\comres.dll
2008-01-19 05:46 4,240,384 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-19 05:39 13,312 ----a-w C:\Windows\System32\WsmRes.dll
2008-01-19 05:37 2,031,616 ----a-w C:\Windows\System32\win32k.sys
2008-01-19 05:36 289,792 ----a-w C:\Windows\System32\atmfd.dll
2008-01-19 05:33 56,320 ----a-w C:\Windows\System32\graftabl.com
2008-01-19 05:31 8,322,048 ----a-w C:\Windows\System32\spwizimg.dll
2008-01-19 05:27 8,704 ----a-w C:\Windows\System32\kd1394.dll
2008-01-19 05:26 605,696 ----a-w C:\Windows\System32\adtschema.dll
2008-01-19 03:17 100,043 ----a-w C:\Windows\System32\StructuredQuerySchema.bin
2008-01-05 11:36 195,122 ----a-w C:\Windows\System32\winrm.vbs
2008-01-05 11:35 80,047 ----a-w C:\Windows\System32\slmgr.vbs
2008-01-05 11:34 15,181 ----a-w C:\Windows\System32\gatherWirelessInfo.vbs
2008-01-05 11:27 96,760 ----a-w C:\Windows\System32\dfshim.dll
2008-01-05 11:27 84,480 ----a-w C:\Windows\System32\mscories.dll
2008-01-05 11:27 282,112 ----a-w C:\Windows\System32\mscoree.dll
2008-01-05 11:27 158,720 ----a-w C:\Windows\System32\mscorier.dll
2008-01-05 11:21 779,800 ----a-w C:\Windows\System32\PresentationNative_v0300.dll
2008-01-05 11:21 579,584 ----a-w C:\Windows\System32\icardagt.exe
2008-01-05 11:21 350,744 ----a-w C:\Windows\System32\PresentationHost.exe
2008-01-05 11:21 33,304 ----a-w C:\Windows\System32\PresentationHostProxy.dll
2008-01-05 11:21 28,672 ----a-w C:\Windows\System32\TsWpfWrp.exe
2008-01-05 11:21 12,198 ----a-w C:\Windows\System32\gatherWiredInfo.vbs
2008-01-05 11:21 11,776 ----a-w C:\Windows\System32\icardres.dll
2008-01-05 11:21 106,520 ----a-w C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
.

((((((((((((((((((((((((((((( snapshot@2008-03-31_15.20.57.23 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-03-31 12:59:13 67,584 --s-a-w C:\Windows\bootstat.dat
+ 2008-03-31 16:32:12 67,584 --s-a-w C:\Windows\bootstat.dat
- 2008-03-31 13:19:47 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-03-31 16:52:13 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-03-31 13:00:03 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-03-31 16:33:41 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-03-31 16:33:41 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
- 2008-03-31 13:16:20 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
+ 2008-03-31 16:34:03 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2008-03-31 13:20:24 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-03-31 16:52:45 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-03-31 16:52:45 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
- 2008-03-31 13:04:23 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-03-31 16:33:17 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-03-31 13:04:23 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-31 16:33:17 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-03-31 13:04:23 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-03-31 16:33:17 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-03-31 13:03:58 101,250 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-03-31 16:37:18 101,250 ----a-w C:\Windows\System32\perfc009.dat
- 2008-03-31 13:03:58 123,556 ----a-w C:\Windows\System32\perfc00C.dat
+ 2008-03-31 16:37:18 123,556 ----a-w C:\Windows\System32\perfc00C.dat
- 2008-03-31 13:03:58 587,178 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-03-31 16:37:18 587,178 ----a-w C:\Windows\System32\perfh009.dat
- 2008-03-31 13:03:58 669,578 ----a-w C:\Windows\System32\perfh00C.dat
+ 2008-03-31 16:37:18 669,578 ----a-w C:\Windows\System32\perfh00C.dat
- 2008-03-31 13:01:18 6,882 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3129001413-80200912-536673858-1000_UserData.bin
+ 2008-03-31 16:34:03 7,090 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3129001413-80200912-536673858-1000_UserData.bin
- 2008-03-31 13:01:17 71,212 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-03-31 16:34:03 71,364 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-03-31 13:01:15 30,536 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-03-31 16:34:02 31,464 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 09:33 1233920]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 09:33 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-19 09:38 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-10 17:10 4468736 C:\Windows\RtHDVCpl.exe]
"SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 18:31 630784]
"OSD"="C:\Program Files\C&E\OSD\osd.exe" [2007-07-10 19:29 557056]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-02-26 21:46 153136]
"recinfo122"="c:\RecInfo\RecInfo.exe" [2007-10-23 14:52 2764800]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"Skytel"="Skytel.exe" [2007-05-07 18:51 1826816 C:\Windows\SkyTel.exe]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-19 01:31 8466432]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-19 01:31 81920]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{E5DB8825-1222-46C4-9EEA-06429C915BD3}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B44FF5A7-68F2-4A9F-B32E-F5189B7B34E0}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{883D24C2-655B-465E-A362-4012B4D5F5F3}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{18FFAAEF-164B-43F7-829A-797B8A3F642A}C:\\users\\momo\\appdata\\local\\temp\\wzse0.tmp\\symnrt.exe"= UDP:C:\users\momo\appdata\local\temp\wzse0.tmp\symnrt.exe:symnrt.exe
"UDP Query User{B484FD27-403D-4A25-BDDA-3322650E5E53}C:\\users\\momo\\appdata\\local\\temp\\wzse0.tmp\\symnrt.exe"= TCP:C:\users\momo\appdata\local\temp\wzse0.tmp\symnrt.exe:symnrt.exe

R0 Si3531;SiI-3531 SATA Controller;C:\Windows\system32\DRIVERS\Si3531.sys [2007-06-01 19:29]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler;C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [2006-12-08 11:52]
R3 itecir;ITECIR Infrared Receiver;C:\Windows\system32\DRIVERS\itecir.sys [2007-04-04 05:57]
S4 nvrd32;NVIDIA nForce RAID Driver;C:\Windows\system32\drivers\nvrd32.sys [2007-07-02 17:37]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-31 18:52:52
Windows 6.0.6001 Service Pack 1 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-31 18:53:48
ComboFix-quarantined-files.txt 2008-03-31 16:53:43
ComboFix2.txt 2008-03-31 13:21:16
Pre-Run: 109,818,249,216 octets libres
Post-Run: 109,793,767,424 octets libres
.
2008-03-28 12:22:40 --- E O F ---

rapport virus total :

MD5: 8e382b0c5f16daf17b3c1cf5205846d1
Date 2008.03.21 17:34:02 (CET) [>10D]
Résultats 0/32
Permalink: analisis/1abb2c43946dcabd97232c6a48fee350



et je n'arrive pas a scanner mon pc avec t'es liens la, cela ne fonctionne pas, et pour le registre je l'es nettoyé 3 fois

que doit-je fait maintenant?

a oui aussi, j'ai une dizaine de svchost lancer esque c normal ?

le scan de bitdefender
//-----------------------------------------------------------------
//
// Produit BitDefender Free Edition v10
// Produit 10.2
//
// Créé le: 31/03/2008 20:11:13
//
//-----------------------------------------------------------------


Statistiques

Chemin cible: C:\
D:\
Dossiers : 16080
Fichiers : 24669
Processus Mémoire analysés : 54
Archives : 5
Fichiers enpaquetés : 1656
Virus trouvés : 0
Fichiers infectés : 0
Processus Mémoire infectés : 0
Fichiers suspects : 0
Alertes : 0
Fichiers désinfectés : 0
Fichiers effacés : 0
Fichiers déplacés : 0
Erreurs I/O : 11
Temps d'analyse :=00:20:01
Fichiers/seconde :20

Statistiques Spywares

Registres analysés : 385
Registres infectés : 0
Cookies analysés : 3
Cookies infectés : 0
Fichiers spyware infectés : 0
Menaces Spyware détectées : 0


Définitions virus : 1079198
Plugins d'analyse : 16
Plugins archives : 41
Plug-ins décompression : 7
Plug-ins messagerie : 6
Plug-ins système : 5

Options d'analyse

Détection
[X] Analyser le secteur de boot
[X] Processus mémoire
[ ] Analyser les archives
[X] Analyser les fichiers enpaquetés
[X] Analyser la messagerie

Masque fichiers
[X] Programmes
[ ] Tous les fichiers
[ ] Extensions définies par l'utilisateur:
[ ] Exclure les extensions: ;

Action

Objets infectés
[ ] Ignorer
[X] Désinfecter
[ ] Effacer
[ ] Mettre en quarantaine
[ ] Demander l'action

Seconde action
[ ] Ignorer
[ ] Effacer
[X] Mettre en quarantaine
[ ] Demander l'action

Options d'analyse
[X] Activer les alertes
[ ] Activer l'heuristique
[ ] Afficher tous les fichiers dans le journal
[X] Fichier journal: C:\ProgramData\Bitdefender\Desktop\Profiles\Logs\full_scan\1206987073.log

Options d'analyse Spyware

[X] Analyse contre les risques non-viraux
[ ] Ecarter de l'analyse les dialers et les applications
[X] Clés de registres
[X] Cookies

tu sais pas pk mon pc sur utilise la mémoire? et pk j'ai plein de programme svchost lancer ?

Nan la modification n'a rien changer

as tu d'autre solution?, merci encore