Virus "ads served"

Résolu
zamp -  
Bonjour,
Voilà j'ai des pb avec un virus "ads served" qui s'ouvre actuellement et j'ai besoin d'aide d'expert dans cette matière....Avast me dit qu'il se trouve dans le dossier windows/systeme 32/cabine.dll
Est-ce quelqu'un peux m'aider??
Pc: windows XP
merci d'avance
Configuration: Windows XP
Internet Explorer 7.0

16 réponses

  1. jlpjlp Contributeur sécurité
    slt,

    colle un rapport hijackthis

    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

    manuel :
    http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

    ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

    Ensuite avec Explorer créer un dossier c:\hijackthis
    Décompresser Hijackthis dans ce dossier.
    C'est important pour les sauvegardes."
    0
    1. zamp Auteur
      Slt.
      Merci de ton aide et voici le rapport

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:50:49, on 07/04/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16608)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\wanmpsvc.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Apps\Powercinema\PCMService.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\WINDOWS\system32\ElkCtrl.exe
      C:\Program Files\Logitech\Video\CameraAssistant.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
      C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\MessengerPlus! 3\MsgPlus.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\CreativesFiles\Shareaza.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\WinZip\WZQKPICK.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\internet explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\CreativesFiles\Plugins\RazaWebHook.dll
      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
      O2 - BHO: (no name) - {AF8D0E6A-9C51-4401-8CAA-E19248D763D4} - C:\WINDOWS\system32\cabine.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
      O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
      O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
      O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB002" /M "Stylus DX4800"
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Nero DriveSpeed] C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
      O4 - HKCU\..\Run: [Shareaza] "C:\CreativesFiles\Shareaza.exe" -tray
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
      O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
      O8 - Extra context menu item: Download with &Shareaza - res://C:\CreativesFiles\Plugins\RazaWebHook.dll/3000
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
      O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
      O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
      O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/poti_x.cab
      O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
      O16 - DPF: {1F831FA7-42FC-11D4-95A6-0080AD30DCE1} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i Fra\InstFred.ocx
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.aubertphotos.com/Components/Upload/ImageUploader3.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.fr/clients/uploader_v2.1.0.53.cab
      O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp03.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
      O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD LT 2000i Fra\AcPreview.ocx
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
      O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
      O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
      O24 - Desktop Component 0: (no name) - http://loga.hit-parade.com/logohp1.gif?site=a107919
      0
  2. jlpjlp Contributeur sécurité
    _

    télécharge OTMoveIt
    http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
    double-clique sur OTMoveIt.exe pour le lancer.
    copie la liste qui se trouve en citation ci-dessous,
    et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    Citation :
    C:\WINDOWS\system32\cabine.dll

    clique sur MoveIt! pour lancer la suppression.
    le résultat apparaitra dans le cadre "Results".
    clique sur Exit pour fermer.
    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

    ________________

    Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Sauvegarde le sur ton bureau et pas ailleurs !

    Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

    Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
    _______________
    recolle hijackthis et dis tes soucis acutels
    0
    1. zamp Auteur
      Apparement le virus se trouve toujours dans le fichier cabine que je suis allé chercher dans system 32 pour l'analyser avec avast??? faut-il redémarrer le PC après combo-fix??

      Voici le rapport OTmoveit

      LoadLibrary failed for C:\WINDOWS\system32\cabine.dll
      C:\WINDOWS\system32\cabine.dll NOT unregistered.
      File move failed. C:\WINDOWS\system32\cabine.dll scheduled to be moved on reboot.

      OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04092008_202148

      Files moved on Reboot...
      LoadLibrary failed for C:\WINDOWS\system32\cabine.dll
      C:\WINDOWS\system32\cabine.dll NOT unregistered.
      File move failed. C:\WINDOWS\system32\cabine.dll scheduled to be moved on reboot.

      Voici le rapport combo fix

      ComboFix 08-04-09.1 - zampaglione 2008-04-09 20:51:04.2 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.436 [GMT 2:00]
      Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
      * Création d'un nouveau point de restauration
      .

      ((((((((((((((((((((((((((((( Fichiers créés 2008-03-09 to 2008-04-09 ))))))))))))))))))))))))))))))))))))
      .

      2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
      2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
      2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
      2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
      2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
      2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
      2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
      2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
      2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3
      2008-03-09 13:14 . 2008-04-07 17:58 <REP> d-------- C:\Program Files\monAlbumPhoto
      2008-03-09 13:14 . 2008-03-09 21:47 <REP> d-------- C:\Documents and Settings\All Users\Application Data\albumphoto

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
      2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
      2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
      2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
      2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
      2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
      2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
      2008-03-24 15:05 --------- d-----w C:\Program Files\Java
      2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
      2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
      2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
      2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
      2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
      2008-03-10 20:11 --------- d-----w C:\Program Files\Google
      2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
      2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
      2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
      2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
      2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
      2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
      2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
      2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
      2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
      2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
      2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
      2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
      2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
      2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
      2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
      2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
      2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
      2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
      2008-01-25 17:47 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
      2008-01-11 05:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
      2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
      2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
      1998-07-31 09:06 7,488 ----a-w C:\WINDOWS\inf\unregpn.exe
      2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
      2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
      .

      ((((((((((((((((((((((((((((( snapshot@2008-03-07_21.13.46,39 )))))))))))))))))))))))))))))))))))))))))
      .
      - 2008-02-26 17:50:22 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
      + 2008-03-09 11:18:32 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
      - 2008-02-26 17:50:32 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
      + 2008-03-09 11:18:44 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
      - 2008-02-26 17:50:32 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
      + 2008-03-09 11:18:45 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
      - 2008-02-26 17:50:34 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
      + 2008-03-09 11:18:46 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
      - 2008-02-26 17:50:29 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
      + 2008-03-09 11:18:40 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
      - 2008-02-26 17:50:15 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
      + 2008-03-09 11:18:25 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
      - 2008-02-26 17:50:15 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
      + 2008-03-09 11:18:25 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
      - 2008-02-26 17:50:39 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
      + 2008-03-09 11:18:53 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
      - 2008-02-26 17:50:25 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
      + 2008-03-09 11:18:36 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
      - 2008-02-26 17:50:21 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
      + 2008-03-09 11:18:30 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
      - 2008-02-26 17:50:15 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
      + 2008-03-09 11:18:24 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
      - 2008-02-26 17:50:17 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
      + 2008-03-09 11:18:26 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
      - 2008-02-26 17:50:31 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
      + 2008-03-09 11:18:42 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
      - 2008-02-26 17:50:31 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
      + 2008-03-09 11:18:43 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
      - 2008-02-26 17:50:32 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
      + 2008-03-09 11:18:43 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
      - 2008-02-26 17:50:18 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
      + 2008-03-09 11:18:27 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
      - 2008-02-26 17:50:18 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
      + 2008-03-09 11:18:28 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
      - 2008-02-26 17:50:19 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
      + 2008-03-09 11:18:29 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
      - 2008-02-26 17:50:20 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
      + 2008-03-09 11:18:30 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
      - 2008-02-26 17:50:17 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
      + 2008-03-09 11:18:27 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
      - 2008-02-26 17:50:40 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
      + 2008-03-09 11:18:56 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
      - 2008-02-26 17:50:40 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
      + 2008-03-09 11:18:55 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
      - 2008-02-26 17:50:12 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
      + 2008-03-09 11:18:22 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
      - 2008-02-26 17:50:40 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
      + 2008-03-09 11:18:55 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
      - 2008-02-26 17:50:41 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
      + 2008-03-09 11:18:57 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
      - 2008-02-26 17:50:15 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
      + 2008-03-09 11:18:24 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
      - 2008-02-26 17:50:14 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
      + 2008-03-09 11:18:23 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
      - 2008-02-26 17:50:14 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
      + 2008-03-09 11:18:23 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
      - 2008-02-26 17:50:36 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
      + 2008-03-09 11:18:50 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
      - 2008-02-26 17:50:23 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
      + 2008-03-09 11:18:33 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
      - 2008-02-26 17:50:37 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
      + 2008-03-09 11:18:50 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
      - 2008-02-26 17:50:34 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
      + 2008-03-09 11:18:47 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
      - 2008-02-26 17:50:16 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
      + 2008-03-09 11:18:26 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
      - 2008-02-26 17:50:30 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
      + 2008-03-09 11:18:41 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
      - 2008-02-26 17:50:24 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
      + 2008-03-09 11:18:34 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
      - 2008-02-26 17:50:23 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
      + 2008-03-09 11:18:33 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
      - 2008-02-26 17:50:24 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
      + 2008-03-09 11:18:35 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
      - 2008-02-26 17:50:38 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
      + 2008-03-09 11:18:52 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
      - 2008-02-26 17:50:35 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
      + 2008-03-09 11:18:47 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
      - 2008-02-26 17:50:38 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
      + 2008-03-09 11:18:52 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
      - 2008-02-26 17:50:36 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
      + 2008-03-09 11:18:48 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
      - 2008-02-26 17:50:36 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
      + 2008-03-09 11:18:49 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
      - 2008-02-26 17:50:21 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
      + 2008-03-09 11:18:31 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
      - 2008-02-26 17:50:25 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
      + 2008-03-09 11:18:35 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
      - 2008-02-26 17:50:39 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
      + 2008-03-09 11:18:53 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
      - 2008-02-26 17:50:26 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
      + 2008-03-09 11:18:37 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
      - 2008-02-26 17:50:27 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
      + 2008-03-09 11:18:38 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
      - 2008-02-26 17:50:27 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
      + 2008-03-09 11:18:39 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
      - 2008-02-26 17:50:29 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
      + 2008-03-09 11:18:40 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
      - 2008-02-26 17:50:37 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
      + 2008-03-09 11:18:51 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
      + 2007-02-22 22:41:12 304,544 ----a-w C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
      - 2000-08-31 07:00:00 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
      + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
      + 2000-08-31 06:00:00 73,728 ----a-w C:\WINDOWS\fdsv.exe
      + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
      - 2008-02-13 17:26:07 34,304 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\misc.exe
      + 2008-03-13 10:02:27 34,304 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\misc.exe
      - 2008-02-13 17:26:07 8,192 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe
      + 2008-03-13 10:02:27 8,192 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe
      - 2008-02-13 17:26:07 3,584 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe
      + 2008-03-13 10:02:27 3,584 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe
      - 2008-02-13 17:26:07 114,688 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
      + 2008-03-13 10:02:27 114,688 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
      - 2008-02-13 17:26:07 16,384 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe
      + 2008-03-13 10:02:27 16,384 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe
      - 2008-02-13 17:26:07 30,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
      + 2008-03-13 10:02:27 30,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
      - 2008-02-13 17:26:07 22,528 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe
      + 2008-03-13 10:02:27 22,528 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe
      - 2008-02-13 17:26:07 45,056 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
      + 2008-03-13 10:02:27 45,056 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
      - 2008-02-13 17:26:07 90,112 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
      + 2008-03-13 10:02:27 90,112 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
      + 2008-03-09 10:51:33 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe
      + 2008-03-11 18:07:54 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
      - 2002-05-14 08:42:38 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
      + 2005-09-23 06:29:04 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
      - 2002-07-19 10:52:48 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
      - 2002-06-27 11:45:32 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
      - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
      + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
      - 2000-08-31 07:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
      + 2000-08-31 06:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
      + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
      + 2000-08-31 06:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
      + 2000-08-31 06:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
      + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
      - 2007-12-04 14:56:02 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
      + 2008-01-17 15:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
      + 2007-05-30 12:10:42 10,872 ----a-w C:\WINDOWS\system32\drivers\AvgAsCln.sys
      - 2007-10-19 08:14:32 449,288 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
      + 2008-03-09 14:33:17 447,696 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
      - 2007-09-24 20:30:28 135,168 ----a-w C:\WINDOWS\system32\java.exe
      + 2008-02-22 00:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
      - 2007-09-24 20:30:30 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
      + 2008-02-22 00:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
      - 2007-09-24 21:31:42 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
      + 2008-02-22 01:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
      - 2008-02-04 23:09:46 18,214,008 ----a-w C:\WINDOWS\system32\MRT.exe
      + 2008-03-05 16:30:54 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe
      - 2003-02-20 18:16:34 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll
      + 2005-09-23 06:28:56 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll
      - 2008-02-26 17:52:41 63,016 ----a-w C:\WINDOWS\system32\perfc009.dat
      + 2008-03-30 09:10:26 63,016 ----a-w C:\WINDOWS\system32\perfc009.dat
      - 2008-02-26 17:52:41 76,136 ----a-w C:\WINDOWS\system32\perfc00C.dat
      + 2008-03-30 09:10:26 76,136 ----a-w C:\WINDOWS\system32\perfc00C.dat
      - 2008-02-26 17:52:41 402,406 ----a-w C:\WINDOWS\system32\perfh009.dat
      + 2008-03-30 09:10:26 402,406 ----a-w C:\WINDOWS\system32\perfh009.dat
      - 2008-02-26 17:52:41 469,622 ----a-w C:\WINDOWS\system32\perfh00C.dat
      + 2008-03-30 09:10:26 469,622 ----a-w C:\WINDOWS\system32\perfh00C.dat
      - 2007-01-19 10:53:04 51,056 ----a-w C:\WINDOWS\system32\sirenacm.dll
      + 2007-10-18 10:31:46 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
      + 2008-04-05 16:33:50 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5e4.dat
      + 2000-08-31 06:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
      - 2008-02-26 17:50:15 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
      + 2008-03-09 11:18:25 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
      - 2008-02-26 17:50:15 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
      + 2008-03-09 11:18:25 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
      + 2000-08-31 06:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
      .
      -- Snapshot reset to current date --
      .
      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]
      2004-08-20 01:09 93696 --a------ C:\WINDOWS\system32\cabine.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
      "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
      "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
      "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
      "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
      "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
      "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
      "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
      "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
      "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
      "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
      "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
      "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
      "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
      "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
      "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
      "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
      "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
      "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
      "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
      "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
      "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
      "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

      C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
      Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 19:33:09 67128]
      Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
      NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe [2006-05-17 16:05:52 2297856]
      WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2004-11-16 18:41:54 118784]

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
      "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
      "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
      "C:\\Program Files\\Messenger\\msmsgs.exe"=
      "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
      "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
      "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
      "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
      "C:\\CreativesFiles\\Shareaza.exe"=
      "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
      "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
      "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
      "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
      "6346:UDP"= 6346:UDP:shareaza
      "6346:TCP"= 6346:TCP:shareaza

      R0 igxqswjv;igxqswjv;C:\WINDOWS\system32\drivers\wuzuscxs.dat []
      R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
      R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
      R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
      R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
      R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
      R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
      R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
      R3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]
      R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
      R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
      S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
      S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
      S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
      S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
      S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]

      .
      Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
      "2008-04-09 18:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
      - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
      .
      **************************************************************************

      catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-04-09 20:55:31
      Windows 5.1.2600 Service Pack 2 NTFS

      Balayage processus cachés ...

      Balayage caché autostart entries ...

      Balayage des fichiers cachés ...

      Scan terminé avec succès
      Les fichiers cachés: 0

      **************************************************************************

      [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\igxqswjv]
      "ImagePath"="system32\drivers\wuzuscxs.dat"
      .
      --------------------- DLLs a chargé sous des processus courants ---------------------

      PROCESS: C:\WINDOWS\system32\winlogon.exe
      -> C:\WINDOWS\system32\RtlGina2.dll
      .
      Temps d'accomplissement: 2008-04-09 20:56:47
      ComboFix-quarantined-files.txt 2008-04-09 18:56:27
      Pre-Run: 60,974,608,384 octets libres
      Post-Run: 60,960,972,800 octets libres
      .
      2008-03-13 10:02:29 --- E O F ---
      0
      1. zamp Auteur
        Apparement le virus se trouve toujours dans le fichier cabine que je suis allé chercher dans system 32 pour l'analyser avec avast??? faut-il redémarrer le PC après combo-fix??

        Voici le rapport OTmoveit

        LoadLibrary failed for C:\WINDOWS\system32\cabine.dll
        C:\WINDOWS\system32\cabine.dll NOT unregistered.
        File move failed. C:\WINDOWS\system32\cabine.dll scheduled to be moved on reboot.

        OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04092008_202148

        Files moved on Reboot...
        LoadLibrary failed for C:\WINDOWS\system32\cabine.dll
        C:\WINDOWS\system32\cabine.dll NOT unregistered.
        File move failed. C:\WINDOWS\system32\cabine.dll scheduled to be moved on reboot.

        Voici le rapport combo fix

        ComboFix 08-04-09.1 - zampaglione 2008-04-09 20:51:04.2 - NTFSx86
        Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.436 [GMT 2:00]
        Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
        * Création d'un nouveau point de restauration
        .

        ((((((((((((((((((((((((((((( Fichiers créés 2008-03-09 to 2008-04-09 ))))))))))))))))))))))))))))))))))))
        .

        2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
        2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
        2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
        2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
        2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
        2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
        2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
        2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
        2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3
        2008-03-09 13:14 . 2008-04-07 17:58 <REP> d-------- C:\Program Files\monAlbumPhoto
        2008-03-09 13:14 . 2008-03-09 21:47 <REP> d-------- C:\Documents and Settings\All Users\Application Data\albumphoto

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
        2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
        2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
        2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
        2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
        2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
        2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
        2008-03-24 15:05 --------- d-----w C:\Program Files\Java
        2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
        2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
        2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
        2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
        2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
        2008-03-10 20:11 --------- d-----w C:\Program Files\Google
        2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
        2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
        2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
        2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
        2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
        2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
        2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
        2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
        2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
        2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
        2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
        2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
        2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
        2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
        2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
        2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
        2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
        2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
        2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
        2008-01-25 17:47 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
        2008-01-11 05:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
        2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
        2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
        1998-07-31 09:06 7,488 ----a-w C:\WINDOWS\inf\unregpn.exe
        2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
        2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
        .

        ((((((((((((((((((((((((((((( snapshot@2008-03-07_21.13.46,39 )))))))))))))))))))))))))))))))))))))))))
        .
        - 2008-02-26 17:50:22 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
        + 2008-03-09 11:18:32 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
        - 2008-02-26 17:50:32 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
        + 2008-03-09 11:18:44 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
        - 2008-02-26 17:50:32 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
        + 2008-03-09 11:18:45 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
        - 2008-02-26 17:50:34 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
        + 2008-03-09 11:18:46 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
        - 2008-02-26 17:50:29 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
        + 2008-03-09 11:18:40 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
        - 2008-02-26 17:50:15 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
        + 2008-03-09 11:18:25 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
        - 2008-02-26 17:50:15 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
        + 2008-03-09 11:18:25 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
        - 2008-02-26 17:50:39 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
        + 2008-03-09 11:18:53 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
        - 2008-02-26 17:50:25 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
        + 2008-03-09 11:18:36 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
        - 2008-02-26 17:50:21 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
        + 2008-03-09 11:18:30 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
        - 2008-02-26 17:50:15 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
        + 2008-03-09 11:18:24 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
        - 2008-02-26 17:50:17 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
        + 2008-03-09 11:18:26 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
        - 2008-02-26 17:50:31 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
        + 2008-03-09 11:18:42 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
        - 2008-02-26 17:50:31 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
        + 2008-03-09 11:18:43 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
        - 2008-02-26 17:50:32 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
        + 2008-03-09 11:18:43 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
        - 2008-02-26 17:50:18 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
        + 2008-03-09 11:18:27 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
        - 2008-02-26 17:50:18 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
        + 2008-03-09 11:18:28 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
        - 2008-02-26 17:50:19 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
        + 2008-03-09 11:18:29 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
        - 2008-02-26 17:50:20 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
        + 2008-03-09 11:18:30 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
        - 2008-02-26 17:50:17 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
        + 2008-03-09 11:18:27 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
        - 2008-02-26 17:50:40 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
        + 2008-03-09 11:18:56 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
        - 2008-02-26 17:50:40 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
        + 2008-03-09 11:18:55 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
        - 2008-02-26 17:50:12 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
        + 2008-03-09 11:18:22 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
        - 2008-02-26 17:50:40 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
        + 2008-03-09 11:18:55 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
        - 2008-02-26 17:50:41 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
        + 2008-03-09 11:18:57 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
        - 2008-02-26 17:50:15 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
        + 2008-03-09 11:18:24 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
        - 2008-02-26 17:50:14 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
        + 2008-03-09 11:18:23 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
        - 2008-02-26 17:50:14 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
        + 2008-03-09 11:18:23 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
        - 2008-02-26 17:50:36 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
        + 2008-03-09 11:18:50 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
        - 2008-02-26 17:50:23 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
        + 2008-03-09 11:18:33 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
        - 2008-02-26 17:50:37 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
        + 2008-03-09 11:18:50 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
        - 2008-02-26 17:50:34 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
        + 2008-03-09 11:18:47 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
        - 2008-02-26 17:50:16 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
        + 2008-03-09 11:18:26 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
        - 2008-02-26 17:50:30 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
        + 2008-03-09 11:18:41 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
        - 2008-02-26 17:50:24 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
        + 2008-03-09 11:18:34 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
        - 2008-02-26 17:50:23 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
        + 2008-03-09 11:18:33 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
        - 2008-02-26 17:50:24 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
        + 2008-03-09 11:18:35 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
        - 2008-02-26 17:50:38 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
        + 2008-03-09 11:18:52 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
        - 2008-02-26 17:50:35 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
        + 2008-03-09 11:18:47 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
        - 2008-02-26 17:50:38 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
        + 2008-03-09 11:18:52 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
        - 2008-02-26 17:50:36 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
        + 2008-03-09 11:18:48 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
        - 2008-02-26 17:50:36 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
        + 2008-03-09 11:18:49 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
        - 2008-02-26 17:50:21 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
        + 2008-03-09 11:18:31 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
        - 2008-02-26 17:50:25 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
        + 2008-03-09 11:18:35 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
        - 2008-02-26 17:50:39 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
        + 2008-03-09 11:18:53 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
        - 2008-02-26 17:50:26 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
        + 2008-03-09 11:18:37 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
        - 2008-02-26 17:50:27 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
        + 2008-03-09 11:18:38 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
        - 2008-02-26 17:50:27 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
        + 2008-03-09 11:18:39 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
        - 2008-02-26 17:50:29 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
        + 2008-03-09 11:18:40 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
        - 2008-02-26 17:50:37 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
        + 2008-03-09 11:18:51 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
        + 2007-02-22 22:41:12 304,544 ----a-w C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
        - 2000-08-31 07:00:00 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
        + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
        + 2000-08-31 06:00:00 73,728 ----a-w C:\WINDOWS\fdsv.exe
        + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
        - 2008-02-13 17:26:07 34,304 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\misc.exe
        + 2008-03-13 10:02:27 34,304 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\misc.exe
        - 2008-02-13 17:26:07 8,192 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe
        + 2008-03-13 10:02:27 8,192 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe
        - 2008-02-13 17:26:07 3,584 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe
        + 2008-03-13 10:02:27 3,584 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe
        - 2008-02-13 17:26:07 114,688 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
        + 2008-03-13 10:02:27 114,688 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
        - 2008-02-13 17:26:07 16,384 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe
        + 2008-03-13 10:02:27 16,384 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe
        - 2008-02-13 17:26:07 30,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
        + 2008-03-13 10:02:27 30,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
        - 2008-02-13 17:26:07 22,528 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe
        + 2008-03-13 10:02:27 22,528 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe
        - 2008-02-13 17:26:07 45,056 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
        + 2008-03-13 10:02:27 45,056 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
        - 2008-02-13 17:26:07 90,112 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
        + 2008-03-13 10:02:27 90,112 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
        + 2008-03-09 10:51:33 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe
        + 2008-03-11 18:07:54 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
        - 2002-05-14 08:42:38 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
        + 2005-09-23 06:29:04 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
        - 2002-07-19 10:52:48 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
        - 2002-06-27 11:45:32 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
        - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
        + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
        - 2000-08-31 07:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
        + 2000-08-31 06:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
        + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
        + 2000-08-31 06:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
        + 2000-08-31 06:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
        + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
        - 2007-12-04 14:56:02 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
        + 2008-01-17 15:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
        + 2007-05-30 12:10:42 10,872 ----a-w C:\WINDOWS\system32\drivers\AvgAsCln.sys
        - 2007-10-19 08:14:32 449,288 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
        + 2008-03-09 14:33:17 447,696 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
        - 2007-09-24 20:30:28 135,168 ----a-w C:\WINDOWS\system32\java.exe
        + 2008-02-22 00:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
        - 2007-09-24 20:30:30 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
        + 2008-02-22 00:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
        - 2007-09-24 21:31:42 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
        + 2008-02-22 01:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
        - 2008-02-04 23:09:46 18,214,008 ----a-w C:\WINDOWS\system32\MRT.exe
        + 2008-03-05 16:30:54 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe
        - 2003-02-20 18:16:34 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll
        + 2005-09-23 06:28:56 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll
        - 2008-02-26 17:52:41 63,016 ----a-w C:\WINDOWS\system32\perfc009.dat
        + 2008-03-30 09:10:26 63,016 ----a-w C:\WINDOWS\system32\perfc009.dat
        - 2008-02-26 17:52:41 76,136 ----a-w C:\WINDOWS\system32\perfc00C.dat
        + 2008-03-30 09:10:26 76,136 ----a-w C:\WINDOWS\system32\perfc00C.dat
        - 2008-02-26 17:52:41 402,406 ----a-w C:\WINDOWS\system32\perfh009.dat
        + 2008-03-30 09:10:26 402,406 ----a-w C:\WINDOWS\system32\perfh009.dat
        - 2008-02-26 17:52:41 469,622 ----a-w C:\WINDOWS\system32\perfh00C.dat
        + 2008-03-30 09:10:26 469,622 ----a-w C:\WINDOWS\system32\perfh00C.dat
        - 2007-01-19 10:53:04 51,056 ----a-w C:\WINDOWS\system32\sirenacm.dll
        + 2007-10-18 10:31:46 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
        + 2008-04-05 16:33:50 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5e4.dat
        + 2000-08-31 06:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
        - 2008-02-26 17:50:15 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
        + 2008-03-09 11:18:25 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
        - 2008-02-26 17:50:15 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
        + 2008-03-09 11:18:25 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
        + 2000-08-31 06:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
        .
        -- Snapshot reset to current date --
        .
        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        REGEDIT4
        *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]
        2004-08-20 01:09 93696 --a------ C:\WINDOWS\system32\cabine.dll

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
        "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
        "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
        "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
        "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
        "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
        "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
        "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
        "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
        "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
        "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
        "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
        "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
        "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
        "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
        "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
        "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
        "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
        "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
        "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
        "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
        "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

        [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
        "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

        C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
        Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 19:33:09 67128]
        Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
        NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe [2006-05-17 16:05:52 2297856]
        WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2004-11-16 18:41:54 118784]

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
        "%windir%\\system32\\sessmgr.exe"=
        "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
        "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
        "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
        "C:\\Program Files\\Messenger\\msmsgs.exe"=
        "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
        "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
        "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
        "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
        "C:\\CreativesFiles\\Shareaza.exe"=
        "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
        "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
        "6346:UDP"= 6346:UDP:shareaza
        "6346:TCP"= 6346:TCP:shareaza

        R0 igxqswjv;igxqswjv;C:\WINDOWS\system32\drivers\wuzuscxs.dat []
        R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
        R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
        R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
        R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
        R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
        R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
        R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
        R3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]
        R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
        R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
        S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
        S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
        S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
        S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
        S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]

        .
        Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
        "2008-04-09 18:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
        - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
        .
        **************************************************************************

        catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-04-09 20:55:31
        Windows 5.1.2600 Service Pack 2 NTFS

        Balayage processus cachés ...

        Balayage caché autostart entries ...

        Balayage des fichiers cachés ...

        Scan terminé avec succès
        Les fichiers cachés: 0

        **************************************************************************

        [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\igxqswjv]
        "ImagePath"="system32\drivers\wuzuscxs.dat"
        .
        --------------------- DLLs a chargé sous des processus courants ---------------------

        PROCESS: C:\WINDOWS\system32\winlogon.exe
        -> C:\WINDOWS\system32\RtlGina2.dll
        .
        Temps d'accomplissement: 2008-04-09 20:56:47
        ComboFix-quarantined-files.txt 2008-04-09 18:56:27
        Pre-Run: 60,974,608,384 octets libres
        Post-Run: 60,960,972,800 octets libres
        .
        2008-03-13 10:02:29 --- E O F ---
        0
        2. zamp Auteur
          Apparement le virus se trouve toujours dans le fichier cabine que je suis allé chercher dans system 32 pour l'analyser avec avast??? faut-il redémarrer le PC après combo-fix??

          Voici le rapport OTmoveit

          LoadLibrary failed for C:\WINDOWS\system32\cabine.dll
          C:\WINDOWS\system32\cabine.dll NOT unregistered.
          File move failed. C:\WINDOWS\system32\cabine.dll scheduled to be moved on reboot.

          OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04092008_202148

          Files moved on Reboot...
          LoadLibrary failed for C:\WINDOWS\system32\cabine.dll
          C:\WINDOWS\system32\cabine.dll NOT unregistered.
          File move failed. C:\WINDOWS\system32\cabine.dll scheduled to be moved on reboot.

          Voici le rapport combo fix

          ComboFix 08-04-09.1 - zampaglione 2008-04-09 20:51:04.2 - NTFSx86
          Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.436 [GMT 2:00]
          Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
          * Création d'un nouveau point de restauration
          .

          ((((((((((((((((((((((((((((( Fichiers créés 2008-03-09 to 2008-04-09 ))))))))))))))))))))))))))))))))))))
          .

          2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
          2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
          2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
          2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
          2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
          2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
          2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
          2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
          2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3
          2008-03-09 13:14 . 2008-04-07 17:58 <REP> d-------- C:\Program Files\monAlbumPhoto
          2008-03-09 13:14 . 2008-03-09 21:47 <REP> d-------- C:\Documents and Settings\All Users\Application Data\albumphoto

          .
          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
          2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
          2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
          2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
          2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
          2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
          2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
          2008-03-24 15:05 --------- d-----w C:\Program Files\Java
          2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
          2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
          2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
          2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
          2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
          2008-03-10 20:11 --------- d-----w C:\Program Files\Google
          2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
          2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
          2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
          2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
          2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
          2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
          2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
          2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
          2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
          2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
          2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
          2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
          2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
          2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
          2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
          2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
          2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
          2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
          2008-01-25 17:47 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
          2008-01-11 05:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
          2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
          2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
          1998-07-31 09:06 7,488 ----a-w C:\WINDOWS\inf\unregpn.exe
          2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
          2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
          .

          ((((((((((((((((((((((((((((( snapshot@2008-03-07_21.13.46,39 )))))))))))))))))))))))))))))))))))))))))
          .
          - 2008-02-26 17:50:22 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
          + 2008-03-09 11:18:32 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
          - 2008-02-26 17:50:32 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
          + 2008-03-09 11:18:44 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
          - 2008-02-26 17:50:32 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
          + 2008-03-09 11:18:45 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
          - 2008-02-26 17:50:34 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
          + 2008-03-09 11:18:46 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
          - 2008-02-26 17:50:29 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
          + 2008-03-09 11:18:40 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
          - 2008-02-26 17:50:15 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
          + 2008-03-09 11:18:25 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
          - 2008-02-26 17:50:15 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
          + 2008-03-09 11:18:25 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
          - 2008-02-26 17:50:39 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
          + 2008-03-09 11:18:53 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
          - 2008-02-26 17:50:25 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
          + 2008-03-09 11:18:36 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
          - 2008-02-26 17:50:21 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
          + 2008-03-09 11:18:30 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
          - 2008-02-26 17:50:15 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
          + 2008-03-09 11:18:24 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
          - 2008-02-26 17:50:17 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
          + 2008-03-09 11:18:26 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
          - 2008-02-26 17:50:31 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
          + 2008-03-09 11:18:42 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
          - 2008-02-26 17:50:31 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
          + 2008-03-09 11:18:43 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
          - 2008-02-26 17:50:32 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
          + 2008-03-09 11:18:43 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
          - 2008-02-26 17:50:18 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
          + 2008-03-09 11:18:27 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
          - 2008-02-26 17:50:18 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
          + 2008-03-09 11:18:28 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
          - 2008-02-26 17:50:19 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
          + 2008-03-09 11:18:29 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
          - 2008-02-26 17:50:20 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
          + 2008-03-09 11:18:30 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
          - 2008-02-26 17:50:17 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
          + 2008-03-09 11:18:27 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
          - 2008-02-26 17:50:40 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
          + 2008-03-09 11:18:56 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
          - 2008-02-26 17:50:40 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
          + 2008-03-09 11:18:55 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
          - 2008-02-26 17:50:12 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
          + 2008-03-09 11:18:22 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
          - 2008-02-26 17:50:40 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
          + 2008-03-09 11:18:55 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
          - 2008-02-26 17:50:41 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
          + 2008-03-09 11:18:57 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
          - 2008-02-26 17:50:15 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
          + 2008-03-09 11:18:24 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
          - 2008-02-26 17:50:14 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
          + 2008-03-09 11:18:23 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
          - 2008-02-26 17:50:14 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
          + 2008-03-09 11:18:23 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
          - 2008-02-26 17:50:36 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
          + 2008-03-09 11:18:50 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
          - 2008-02-26 17:50:23 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
          + 2008-03-09 11:18:33 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
          - 2008-02-26 17:50:37 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
          + 2008-03-09 11:18:50 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
          - 2008-02-26 17:50:34 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
          + 2008-03-09 11:18:47 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
          - 2008-02-26 17:50:16 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
          + 2008-03-09 11:18:26 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
          - 2008-02-26 17:50:30 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
          + 2008-03-09 11:18:41 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
          - 2008-02-26 17:50:24 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
          + 2008-03-09 11:18:34 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
          - 2008-02-26 17:50:23 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
          + 2008-03-09 11:18:33 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
          - 2008-02-26 17:50:24 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
          + 2008-03-09 11:18:35 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
          - 2008-02-26 17:50:38 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
          + 2008-03-09 11:18:52 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
          - 2008-02-26 17:50:35 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
          + 2008-03-09 11:18:47 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
          - 2008-02-26 17:50:38 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
          + 2008-03-09 11:18:52 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
          - 2008-02-26 17:50:36 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
          + 2008-03-09 11:18:48 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
          - 2008-02-26 17:50:36 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
          + 2008-03-09 11:18:49 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
          - 2008-02-26 17:50:21 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
          + 2008-03-09 11:18:31 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
          - 2008-02-26 17:50:25 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
          + 2008-03-09 11:18:35 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
          - 2008-02-26 17:50:39 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
          + 2008-03-09 11:18:53 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
          - 2008-02-26 17:50:26 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
          + 2008-03-09 11:18:37 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
          - 2008-02-26 17:50:27 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
          + 2008-03-09 11:18:38 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
          - 2008-02-26 17:50:27 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
          + 2008-03-09 11:18:39 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
          - 2008-02-26 17:50:29 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
          + 2008-03-09 11:18:40 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
          - 2008-02-26 17:50:37 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
          + 2008-03-09 11:18:51 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
          + 2007-02-22 22:41:12 304,544 ----a-w C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
          - 2000-08-31 07:00:00 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
          + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
          + 2000-08-31 06:00:00 73,728 ----a-w C:\WINDOWS\fdsv.exe
          + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
          - 2008-02-13 17:26:07 34,304 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\misc.exe
          + 2008-03-13 10:02:27 34,304 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\misc.exe
          - 2008-02-13 17:26:07 8,192 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe
          + 2008-03-13 10:02:27 8,192 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe
          - 2008-02-13 17:26:07 3,584 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe
          + 2008-03-13 10:02:27 3,584 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe
          - 2008-02-13 17:26:07 114,688 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
          + 2008-03-13 10:02:27 114,688 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\outicon.exe
          - 2008-02-13 17:26:07 16,384 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe
          + 2008-03-13 10:02:27 16,384 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe
          - 2008-02-13 17:26:07 30,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
          + 2008-03-13 10:02:27 30,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\pptico.exe
          - 2008-02-13 17:26:07 22,528 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe
          + 2008-03-13 10:02:27 22,528 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe
          - 2008-02-13 17:26:07 45,056 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
          + 2008-03-13 10:02:27 45,056 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
          - 2008-02-13 17:26:07 90,112 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
          + 2008-03-13 10:02:27 90,112 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0050048383C9}\xlicons.exe
          + 2008-03-09 10:51:33 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe
          + 2008-03-11 18:07:54 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
          - 2002-05-14 08:42:38 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
          + 2005-09-23 06:29:04 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
          - 2002-07-19 10:52:48 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
          - 2002-06-27 11:45:32 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
          - 2002-05-14 08:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
          + 2005-09-23 06:29:04 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
          - 2000-08-31 07:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
          + 2000-08-31 06:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
          + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
          + 2000-08-31 06:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
          + 2000-08-31 06:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
          + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
          - 2007-12-04 14:56:02 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
          + 2008-01-17 15:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
          + 2007-05-30 12:10:42 10,872 ----a-w C:\WINDOWS\system32\drivers\AvgAsCln.sys
          - 2007-10-19 08:14:32 449,288 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
          + 2008-03-09 14:33:17 447,696 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
          - 2007-09-24 20:30:28 135,168 ----a-w C:\WINDOWS\system32\java.exe
          + 2008-02-22 00:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
          - 2007-09-24 20:30:30 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
          + 2008-02-22 00:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
          - 2007-09-24 21:31:42 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
          + 2008-02-22 01:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
          - 2008-02-04 23:09:46 18,214,008 ----a-w C:\WINDOWS\system32\MRT.exe
          + 2008-03-05 16:30:54 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe
          - 2003-02-20 18:16:34 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll
          + 2005-09-23 06:28:56 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll
          - 2008-02-26 17:52:41 63,016 ----a-w C:\WINDOWS\system32\perfc009.dat
          + 2008-03-30 09:10:26 63,016 ----a-w C:\WINDOWS\system32\perfc009.dat
          - 2008-02-26 17:52:41 76,136 ----a-w C:\WINDOWS\system32\perfc00C.dat
          + 2008-03-30 09:10:26 76,136 ----a-w C:\WINDOWS\system32\perfc00C.dat
          - 2008-02-26 17:52:41 402,406 ----a-w C:\WINDOWS\system32\perfh009.dat
          + 2008-03-30 09:10:26 402,406 ----a-w C:\WINDOWS\system32\perfh009.dat
          - 2008-02-26 17:52:41 469,622 ----a-w C:\WINDOWS\system32\perfh00C.dat
          + 2008-03-30 09:10:26 469,622 ----a-w C:\WINDOWS\system32\perfh00C.dat
          - 2007-01-19 10:53:04 51,056 ----a-w C:\WINDOWS\system32\sirenacm.dll
          + 2007-10-18 10:31:46 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
          + 2008-04-05 16:33:50 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5e4.dat
          + 2000-08-31 06:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
          - 2008-02-26 17:50:15 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
          + 2008-03-09 11:18:25 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
          - 2008-02-26 17:50:15 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
          + 2008-03-09 11:18:25 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
          + 2000-08-31 06:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
          .
          -- Snapshot reset to current date --
          .
          ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          REGEDIT4
          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

          [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]
          2004-08-20 01:09 93696 --a------ C:\WINDOWS\system32\cabine.dll

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
          "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
          "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
          "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
          "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
          "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
          "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
          "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
          "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
          "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
          "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
          "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
          "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
          "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
          "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
          "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
          "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
          "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
          "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
          "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
          "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
          "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
          "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

          C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
          Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 19:33:09 67128]
          Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
          NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe [2006-05-17 16:05:52 2297856]
          WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2004-11-16 18:41:54 118784]

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
          "%windir%\\system32\\sessmgr.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
          "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
          "C:\\Program Files\\Messenger\\msmsgs.exe"=
          "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
          "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
          "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
          "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
          "C:\\CreativesFiles\\Shareaza.exe"=
          "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
          "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
          "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
          "6346:UDP"= 6346:UDP:shareaza
          "6346:TCP"= 6346:TCP:shareaza

          R0 igxqswjv;igxqswjv;C:\WINDOWS\system32\drivers\wuzuscxs.dat []
          R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
          R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
          R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
          R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
          R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
          R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
          R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
          R3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]
          R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
          R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
          S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
          S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
          S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
          S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
          S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]

          .
          Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
          "2008-04-09 18:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
          - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
          .
          **************************************************************************

          catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2008-04-09 20:55:31
          Windows 5.1.2600 Service Pack 2 NTFS

          Balayage processus cachés ...

          Balayage caché autostart entries ...

          Balayage des fichiers cachés ...

          Scan terminé avec succès
          Les fichiers cachés: 0

          **************************************************************************

          [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\igxqswjv]
          "ImagePath"="system32\drivers\wuzuscxs.dat"
          .
          --------------------- DLLs a chargé sous des processus courants ---------------------

          PROCESS: C:\WINDOWS\system32\winlogon.exe
          -> C:\WINDOWS\system32\RtlGina2.dll
          .
          Temps d'accomplissement: 2008-04-09 20:56:47
          ComboFix-quarantined-files.txt 2008-04-09 18:56:27
          Pre-Run: 60,974,608,384 octets libres
          Post-Run: 60,960,972,800 octets libres
          .
          2008-03-13 10:02:29 --- E O F ---
          0
          1. jlpjlp Contributeur sécurité
            Ferme tout tes navigateurs (donc copie ou imprime les instructions avant)

            Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

            Driver ::
            igxqswjv

            File::
            C:\WINDOWS\system32\cabine.dll

            Registry::
            [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]

            Enregistre ce fichier sous le nom CFscript

            Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

            Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

            Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

            Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

            Ne touche à rien tant que le scan n'est pas terminé.

            Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

            Remets aussi un rapport Hijackthis

            Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

            ______________________

            recolle hijackthis et dis tes soucis actuels
            0
            1. zamp Auteur
              Voici le rapport combo-fix

              ComboFix 08-04-09.1 - zampaglione 2008-04-10 18:56:11.3 - NTFSx86
              Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.399 [GMT 2:00]
              Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
              Command switches used :: C:\Documents and Settings\zampaglione\Bureau\CFscript.txt
              * Création d'un nouveau point de restauration

              FILE ::
              C:\WINDOWS\system32\cabine.dll
              .

              (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
              .

              C:\WINDOWS\system32\cabine.dll . . . . Echec de suppression

              .
              ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-10 to 2008-04-10 ))))))))))))))))))))))))))))))))))))
              .

              2008-04-10 10:35 . 2008-04-10 10:37 1,374 --a------ C:\WINDOWS\imsins.BAK
              2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
              2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
              2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
              2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
              2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
              2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
              2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
              2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
              2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3

              .
              (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
              .
              2008-04-07 15:58 --------- d-----w C:\Program Files\monAlbumPhoto
              2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
              2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
              2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
              2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
              2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
              2008-03-24 15:05 --------- d-----w C:\Program Files\Java
              2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
              2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
              2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
              2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
              2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
              2008-03-10 20:11 --------- d-----w C:\Program Files\Google
              2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
              2008-03-09 19:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\albumphoto
              2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
              2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
              2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
              2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
              2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
              2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
              2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
              2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
              2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
              2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
              2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
              2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
              2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
              2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
              2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
              2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
              2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
              2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
              2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
              2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
              2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
              2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
              .

              ((((((((((((((((((((((((((((( snapshot_2008-04-09_20.56.08,18 )))))))))))))))))))))))))))))))))))))))))
              .
              + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
              + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
              + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
              + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
              + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
              + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
              + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
              + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
              + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
              + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
              + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
              + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
              + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
              + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
              + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
              + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
              + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
              + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
              + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
              + 2007-12-07 02:08:32 124,928 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
              + 2007-12-19 22:53:23 347,136 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
              + 2007-12-07 02:08:32 214,528 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
              + 2007-12-07 02:08:32 133,120 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
              + 2007-12-07 02:08:32 63,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\icardie.dll
              + 2007-12-06 11:02:31 70,656 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
              + 2007-12-07 02:08:32 153,088 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
              + 2007-12-07 02:08:32 230,400 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
              + 2007-12-06 04:59:51 161,792 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
              + 2007-12-07 02:08:32 383,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieapfltr.dll
              + 2007-12-07 02:08:32 384,512 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
              + 2007-12-07 02:08:33 6,066,176 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieframe.dll
              + 2007-12-07 02:08:33 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
              + 2007-12-07 02:08:33 267,776 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iertutil.dll
              + 2007-12-06 11:00:58 13,824 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
              + 2007-12-06 11:03:16 625,664 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
              + 2007-12-07 02:08:33 27,648 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
              + 2007-12-07 02:08:33 459,264 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeeds.dll
              + 2007-12-07 02:08:33 52,224 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeedsbs.dll
              + 2007-12-08 05:08:36 3,592,192 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
              + 2007-12-07 02:08:34 478,208 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
              + 2007-12-07 02:08:34 193,024 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
              + 2007-12-07 02:08:34 671,232 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
              + 2007-12-07 02:08:34 102,912 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
              + 2008-01-11 05:36:55 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
              + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe
              + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\updspapi.dll
              + 2007-12-07 02:08:34 105,984 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
              + 2007-12-07 02:08:34 1,159,680 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
              + 2007-12-07 02:08:34 233,472 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
              + 2007-12-07 02:08:34 824,832 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
              - 2007-12-07 02:08:32 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
              + 2008-03-01 12:58:06 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
              - 2007-12-07 02:08:32 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
              + 2008-03-01 12:58:06 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
              - 2006-06-26 17:41:32 148,480 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
              + 2008-02-20 05:35:05 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
              + 2008-02-20 05:35:05 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
              - 2007-12-19 22:53:23 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
              + 2008-03-01 12:58:06 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
              - 2007-12-07 02:08:32 214,528 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
              + 2008-03-01 12:58:06 214,528 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
              - 2007-12-07 02:08:32 133,120 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll
              + 2008-03-01 12:58:06 133,120 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll
              - 2007-06-19 13:32:25 282,112 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll
              + 2008-02-20 06:51:00 282,624 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll
              - 2007-12-07 02:08:32 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
              + 2008-03-01 12:58:06 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
              - 2007-12-06 11:02:31 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
              + 2008-02-29 08:56:41 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
              - 2007-12-07 02:08:32 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
              + 2008-03-01 12:58:06 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
              - 2007-12-07 02:08:32 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
              + 2008-03-01 12:58:06 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
              - 2007-12-06 04:59:51 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
              + 2008-02-15 05:44:25 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
              - 2007-12-07 02:08:32 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
              + 2008-03-01 12:58:07 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
              - 2007-12-07 02:08:32 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
              + 2008-03-01 12:58:07 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
              - 2007-12-07 02:08:33 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
              + 2008-03-01 12:58:08 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
              - 2007-12-07 02:08:33 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
              + 2008-03-01 12:58:08 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
              - 2007-12-07 02:08:33 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
              + 2008-03-01 12:58:08 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
              - 2007-12-06 11:00:58 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
              + 2008-02-22 10:00:51 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
              - 2007-12-06 11:03:16 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
              + 2008-02-29 08:57:05 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
              - 2007-12-07 02:08:33 27,648 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
              + 2008-03-01 12:58:08 27,648 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
              - 2007-12-07 02:08:33 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
              + 2008-03-01 12:58:08 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
              - 2007-12-07 02:08:33 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
              + 2008-03-01 12:58:08 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
              - 2007-12-08 05:08:36 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
              + 2008-03-01 16:28:10 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
              - 2007-12-07 02:08:34 478,208 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
              + 2008-03-01 12:58:09 478,208 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
              - 2007-12-07 02:08:34 193,024 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
              + 2008-03-01 12:58:10 193,024 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
              - 2007-12-07 02:08:34 671,232 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
              + 2008-03-01 12:58:10 671,232 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
              - 2007-12-07 02:08:34 102,912 ------w C:\WINDOWS\system32\dllcache\occache.dll
              + 2008-03-01 12:58:10 102,912 ------w C:\WINDOWS\system32\dllcache\occache.dll
              - 2008-01-11 05:36:55 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
              + 2008-03-01 12:58:10 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
              - 2007-12-07 02:08:34 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
              + 2008-03-01 12:58:10 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
              - 2007-12-07 02:08:34 1,159,680 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
              + 2008-03-01 12:58:10 1,159,680 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
              - 2007-12-07 02:08:34 233,472 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
              + 2008-03-01 12:58:11 233,472 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
              - 2007-03-08 15:33:58 1,843,712 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys
              + 2008-03-20 08:09:22 1,845,376 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys
              - 2007-12-07 02:08:34 824,832 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
              + 2008-03-01 12:58:11 826,368 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
              - 2006-06-26 17:41:32 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
              + 2008-02-20 05:35:05 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
              - 2004-08-19 23:09:22 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
              + 2008-02-20 05:35:05 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
              - 2007-12-19 22:53:23 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
              + 2008-03-01 12:58:06 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
              - 2007-12-07 02:08:32 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
              + 2008-03-01 12:58:06 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
              - 2007-12-07 02:08:32 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll
              + 2008-03-01 12:58:06 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll
              - 2008-03-09 14:33:17 447,696 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
              + 2008-04-10 08:39:37 447,696 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
              - 2007-06-19 13:32:25 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
              + 2008-02-20 06:51:00 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
              - 2007-12-07 02:08:32 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
              + 2008-03-01 12:58:06 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
              - 2007-12-06 11:02:31 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
              + 2008-02-29 08:56:41 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
              - 2007-12-07 02:08:32 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
              + 2008-03-01 12:58:06 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
              - 2007-12-07 02:08:32 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
              + 2008-03-01 12:58:06 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
              - 2007-12-06 04:59:51 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
              + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
              - 2007-12-07 02:08:32 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
              + 2008-03-01 12:58:07 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
              - 2007-12-07 02:08:32 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
              + 2008-03-01 12:58:07 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
              - 2007-12-07 02:08:33 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
              + 2008-03-01 12:58:08 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
              - 2007-12-07 02:08:33 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
              + 2008-03-01 12:58:08 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
              - 2007-12-07 02:08:33 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
              + 2008-03-01 12:58:08 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
              - 2007-12-06 11:00:58 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
              + 2008-02-22 10:00:51 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
              - 2007-12-07 02:08:33 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
              + 2008-03-01 12:58:08 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
              - 2008-03-05 16:30:54 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe
              + 2008-04-06 05:56:20 19,836,024 ----a-w C:\WINDOWS\system32\MRT.exe
              - 2007-12-07 02:08:33 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
              + 2008-03-01 12:58:08 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
              - 2007-12-07 02:08:33 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
              + 2008-03-01 12:58:08 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
              - 2007-12-08 05:08:36 3,592,192 ----a-w C:\WINDOWS\system32\mshtml.dll
              + 2008-03-01 16:28:10 3,591,680 ----a-w C:\WINDOWS\system32\mshtml.dll
              - 2007-12-07 02:08:34 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll
              + 2008-03-01 12:58:09 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll
              - 2007-12-07 02:08:34 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
              + 2008-03-01 12:58:10 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
              - 2007-12-07 02:08:34 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
              + 2008-03-01 12:58:10 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
              - 2007-12-07 02:08:34 102,912 ----a-w C:\WINDOWS\system32\occache.dll
              + 2008-03-01 12:58:10 102,912 ----a-w C:\WINDOWS\system32\occache.dll
              - 2008-01-11 05:36:55 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
              + 2008-03-01 12:58:10 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
              - 2007-12-07 02:08:34 105,984 ----a-w C:\WINDOWS\system32\url.dll
              + 2008-03-01 12:58:10 105,984 ----a-w C:\WINDOWS\system32\url.dll
              - 2007-12-07 02:08:34 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
              + 2008-03-01 12:58:10 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
              - 2007-12-07 02:08:34 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
              + 2008-03-01 12:58:11 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
              - 2007-03-08 15:33:58 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
              + 2008-03-20 08:09:22 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
              - 2007-12-07 02:08:34 824,832 ----a-w C:\WINDOWS\system32\wininet.dll
              + 2008-03-01 12:58:11 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
              + 2008-04-10 17:00:49 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_49c.dat
              .
              -- Snapshot reset to current date --
              .
              ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              REGEDIT4
              *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

              [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]
              2004-08-20 01:09 93696 --a------ C:\WINDOWS\system32\cabine.dll

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
              "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
              "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
              "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
              "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
              "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
              "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
              "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
              "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
              "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
              "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
              "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
              "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
              "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
              "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
              "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
              "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
              "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
              "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
              "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
              "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
              "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

              [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
              "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
              "%windir%\\system32\\sessmgr.exe"=
              "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
              "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
              "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
              "C:\\Program Files\\Messenger\\msmsgs.exe"=
              "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
              "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
              "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
              "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
              "C:\\CreativesFiles\\Shareaza.exe"=
              "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
              "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
              "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
              "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
              "6346:UDP"= 6346:UDP:shareaza
              "6346:TCP"= 6346:TCP:shareaza

              R0 igxqswjv;igxqswjv;C:\WINDOWS\system32\drivers\wuzuscxs.dat []
              R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
              R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
              R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
              R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
              R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
              R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
              R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
              R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
              R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
              S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
              S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
              S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
              S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
              S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]
              S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]

              .
              Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
              "2008-04-10 16:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
              - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
              .
              **************************************************************************

              catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2008-04-10 19:02:07
              Windows 5.1.2600 Service Pack 2 NTFS

              Balayage processus cach‚s ...

              Balayage cach‚ autostart entries ...

              Balayage des fichiers cach‚s ...

              Scan termin‚ avec succŠs
              Les fichiers cach‚s: 0

              **************************************************************************

              [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\igxqswjv]
              "ImagePath"="system32\drivers\wuzuscxs.dat"
              .
              --------------------- DLLs a charg‚ sous des processus courants ---------------------

              PROCESS: C:\WINDOWS\system32\winlogon.exe
              -> C:\WINDOWS\system32\RtlGina2.dll
              .
              ------------------------ Other Running Processes ------------------------
              .
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\WINDOWS\system32\wdfmgr.exe
              C:\WINDOWS\wanmpsvc.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
              C:\Program Files\WinZip\WZQKPICK.EXE
              C:\PROGRA~1\INCRED~1\bin\IMApp.exe
              .
              **************************************************************************
              .
              Temps d'accomplissement: 2008-04-10 19:06:31 - machine was rebooted [zampaglione]
              ComboFix-quarantined-files.txt 2008-04-10 17:06:17
              ComboFix2.txt 2008-04-09 18:56:48
              Pre-Run: 61,006,655,488 octets libres
              Post-Run: 60,998,438,912 octets libres
              .
              2008-04-10 08:38:06 --- E O F ---

              Voic le rapport hijackthis

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 19:07:05, on 10/04/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16640)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\WINDOWS\system32\spoolsv.exe
              c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\wanmpsvc.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
              C:\WINDOWS\SOUNDMAN.EXE
              C:\Apps\Powercinema\PCMService.exe
              C:\WINDOWS\system32\LVCOMSX.EXE
              C:\WINDOWS\system32\ElkCtrl.exe
              C:\Program Files\Logitech\Video\CameraAssistant.exe
              C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
              C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
              C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
              C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
              C:\Program Files\MessengerPlus! 3\MsgPlus.exe
              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              C:\CreativesFiles\Shareaza.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
              C:\Program Files\WinZip\WZQKPICK.EXE
              C:\PROGRA~1\INCRED~1\bin\IMApp.exe
              C:\WINDOWS\explorer.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
              O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\CreativesFiles\Plugins\RazaWebHook.dll
              O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
              O2 - BHO: (no name) - {AF8D0E6A-9C51-4401-8CAA-E19248D763D4} - C:\WINDOWS\system32\cabine.dll
              O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
              O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
              O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
              O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
              O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
              O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
              O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB002" /M "Stylus DX4800"
              O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
              O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
              O4 - HKLM\..\Run: [Nero DriveSpeed] C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
              O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
              O4 - HKCU\..\Run: [Shareaza] "C:\CreativesFiles\Shareaza.exe" -tray
              O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
              O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
              O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
              O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
              O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
              O8 - Extra context menu item: Download with &Shareaza - res://C:\CreativesFiles\Plugins\RazaWebHook.dll/3000
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
              O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
              O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
              O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
              O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/poti_x.cab
              O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
              O16 - DPF: {1F831FA7-42FC-11D4-95A6-0080AD30DCE1} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i Fra\InstFred.ocx
              O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
              O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.aubertphotos.com/Components/Upload/ImageUploader3.cab
              O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
              O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
              O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
              O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.fr/clients/uploader_v2.1.0.53.cab
              O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp03.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
              O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
              O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD LT 2000i Fra\AcPreview.ocx
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
              O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
              O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
              O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
              O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
              O24 - Desktop Component 0: (no name) - http://loga.hit-parade.com/logohp1.gif?site=a107919
              0
              1. jlpjlp Contributeur sécurité
                fix cette ligne
                O2 - BHO: (no name) - {AF8D0E6A-9C51-4401-8CAA-E19248D763D4} - C:\WINDOWS\system32\cabine.dll

                puis refais le message 7 car il y a eu une erreur
                0
                1. zamp Auteur
                  Voici le rapport combo

                  ComboFix 08-04-09.1 - zampaglione 2008-04-11 12:19:05.4 - NTFSx86
                  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.408 [GMT 2:00]
                  Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
                  Command switches used :: C:\Documents and Settings\zampaglione\Bureau\CFscript.txt
                  * Création d'un nouveau point de restauration
                  .

                  ((((((((((((((((((((((((((((( Fichiers créés 2008-03-11 to 2008-04-11 ))))))))))))))))))))))))))))))))))))
                  .

                  2008-04-10 10:35 . 2008-04-10 10:37 1,374 --a------ C:\WINDOWS\imsins.BAK
                  2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
                  2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
                  2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
                  2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
                  2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
                  2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
                  2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                  2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
                  2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3

                  .
                  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  2008-04-07 15:58 --------- d-----w C:\Program Files\monAlbumPhoto
                  2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
                  2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
                  2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                  2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                  2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                  2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                  2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
                  2008-03-24 15:05 --------- d-----w C:\Program Files\Java
                  2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
                  2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys
                  2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
                  2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
                  2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
                  2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
                  2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                  2008-03-10 20:11 --------- d-----w C:\Program Files\Google
                  2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
                  2008-03-09 19:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\albumphoto
                  2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
                  2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
                  2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
                  2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
                  2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
                  2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
                  2008-03-01 16:28 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
                  2008-02-29 08:57 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
                  2008-02-29 08:56 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
                  2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
                  2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
                  2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
                  2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
                  2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
                  2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
                  2008-02-22 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
                  2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
                  2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll
                  2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
                  2008-02-20 05:35 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
                  2008-02-20 05:35 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
                  2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
                  2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
                  2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
                  2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
                  2008-02-15 05:44 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
                  2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
                  2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
                  2008-01-25 17:47 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
                  2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
                  2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
                  1998-07-31 09:06 7,488 ----a-w C:\WINDOWS\inf\unregpn.exe
                  2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
                  2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
                  .

                  ((((((((((((((((((((((((((((( snapshot_2008-04-10_19.05.56.00 )))))))))))))))))))))))))))))))))))))))))
                  .
                  + 2008-04-11 09:54:51 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5f0.dat
                  .
                  ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  .
                  REGEDIT4
                  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                  [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]
                  2004-08-20 01:09 93696 --a------ C:\WINDOWS\system32\cabine.dll

                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
                  "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
                  "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
                  "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
                  "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
                  "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
                  "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
                  "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
                  "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
                  "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
                  "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
                  "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
                  "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
                  "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
                  "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
                  "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
                  "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
                  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
                  "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
                  "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
                  "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
                  "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

                  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                  "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

                  C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                  Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 19:33:09 67128]
                  Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
                  NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe [2006-05-17 16:05:52 2297856]
                  WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2004-11-16 18:41:54 118784]

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                  "%windir%\\system32\\sessmgr.exe"=
                  "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
                  "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
                  "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
                  "C:\\Program Files\\Messenger\\msmsgs.exe"=
                  "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
                  "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
                  "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                  "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
                  "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
                  "C:\\CreativesFiles\\Shareaza.exe"=
                  "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
                  "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                  "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                  "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
                  "6346:UDP"= 6346:UDP:shareaza
                  "6346:TCP"= 6346:TCP:shareaza

                  R0 igxqswjv;igxqswjv;C:\WINDOWS\system32\drivers\wuzuscxs.dat []
                  R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
                  R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
                  R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
                  R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
                  R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
                  R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
                  R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
                  R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
                  R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
                  S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
                  S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
                  S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
                  S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
                  S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]
                  S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]

                  .
                  Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                  "2008-04-11 10:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
                  - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
                  .
                  **************************************************************************

                  catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2008-04-11 12:23:35
                  Windows 5.1.2600 Service Pack 2 NTFS

                  Balayage processus cachés ...

                  Balayage caché autostart entries ...

                  Balayage des fichiers cachés ...

                  Scan terminé avec succès
                  Les fichiers cachés: 0

                  **************************************************************************

                  [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\igxqswjv]
                  "ImagePath"="system32\drivers\wuzuscxs.dat"
                  .
                  --------------------- DLLs a chargé sous des processus courants ---------------------

                  PROCESS: C:\WINDOWS\system32\winlogon.exe
                  -> C:\WINDOWS\system32\RtlGina2.dll
                  .
                  Temps d'accomplissement: 2008-04-11 12:24:51
                  ComboFix-quarantined-files.txt 2008-04-11 10:24:32
                  ComboFix2.txt 2008-04-09 18:56:48
                  Pre-Run: 60,958,568,448 octets libres
                  Post-Run: 60,945,145,856 octets libres
                  .
                  2008-04-10 08:38:06 --- E O F ---

                  Voici hijackthis

                  ComboFix 08-04-09.1 - zampaglione 2008-04-11 12:19:05.4 - NTFSx86
                  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.408 [GMT 2:00]
                  Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
                  Command switches used :: C:\Documents and Settings\zampaglione\Bureau\CFscript.txt
                  * Création d'un nouveau point de restauration
                  .

                  ((((((((((((((((((((((((((((( Fichiers créés 2008-03-11 to 2008-04-11 ))))))))))))))))))))))))))))))))))))
                  .

                  2008-04-10 10:35 . 2008-04-10 10:37 1,374 --a------ C:\WINDOWS\imsins.BAK
                  2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
                  2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
                  2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
                  2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
                  2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
                  2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
                  2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                  2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
                  2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3

                  .
                  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  2008-04-07 15:58 --------- d-----w C:\Program Files\monAlbumPhoto
                  2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
                  2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
                  2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                  2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                  2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                  2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                  2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
                  2008-03-24 15:05 --------- d-----w C:\Program Files\Java
                  2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
                  2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys
                  2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
                  2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
                  2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
                  2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
                  2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                  2008-03-10 20:11 --------- d-----w C:\Program Files\Google
                  2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
                  2008-03-09 19:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\albumphoto
                  2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
                  2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
                  2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
                  2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
                  2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
                  2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
                  2008-03-01 16:28 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
                  2008-02-29 08:57 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
                  2008-02-29 08:56 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
                  2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
                  2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
                  2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
                  2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
                  2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
                  2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
                  2008-02-22 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
                  2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
                  2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll
                  2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
                  2008-02-20 05:35 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
                  2008-02-20 05:35 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
                  2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
                  2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
                  2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
                  2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
                  2008-02-15 05:44 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
                  2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
                  2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
                  2008-01-25 17:47 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
                  2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
                  2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
                  1998-07-31 09:06 7,488 ----a-w C:\WINDOWS\inf\unregpn.exe
                  2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
                  2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
                  .

                  ((((((((((((((((((((((((((((( snapshot_2008-04-10_19.05.56.00 )))))))))))))))))))))))))))))))))))))))))
                  .
                  + 2008-04-11 09:54:51 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5f0.dat
                  .
                  ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  .
                  REGEDIT4
                  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                  [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]
                  2004-08-20 01:09 93696 --a------ C:\WINDOWS\system32\cabine.dll

                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
                  "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
                  "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
                  "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
                  "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
                  "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
                  "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
                  "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
                  "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
                  "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
                  "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
                  "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
                  "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
                  "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
                  "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
                  "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
                  "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
                  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
                  "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
                  "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
                  "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
                  "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

                  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                  "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

                  C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                  Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 19:33:09 67128]
                  Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
                  NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe [2006-05-17 16:05:52 2297856]
                  WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2004-11-16 18:41:54 118784]

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                  "%windir%\\system32\\sessmgr.exe"=
                  "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
                  "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
                  "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
                  "C:\\Program Files\\Messenger\\msmsgs.exe"=
                  "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
                  "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
                  "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                  "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
                  "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
                  "C:\\CreativesFiles\\Shareaza.exe"=
                  "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
                  "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                  "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                  "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
                  "6346:UDP"= 6346:UDP:shareaza
                  "6346:TCP"= 6346:TCP:shareaza

                  R0 igxqswjv;igxqswjv;C:\WINDOWS\system32\drivers\wuzuscxs.dat []
                  R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
                  R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
                  R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
                  R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
                  R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
                  R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
                  R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
                  R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
                  R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
                  S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
                  S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
                  S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
                  S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
                  S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]
                  S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]

                  .
                  Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                  "2008-04-11 10:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
                  - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
                  .
                  **************************************************************************

                  catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2008-04-11 12:23:35
                  Windows 5.1.2600 Service Pack 2 NTFS

                  Balayage processus cachés ...

                  Balayage caché autostart entries ...

                  Balayage des fichiers cachés ...

                  Scan terminé avec succès
                  Les fichiers cachés: 0

                  **************************************************************************

                  [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\igxqswjv]
                  "ImagePath"="system32\drivers\wuzuscxs.dat"
                  .
                  --------------------- DLLs a chargé sous des processus courants ---------------------

                  PROCESS: C:\WINDOWS\system32\winlogon.exe
                  -> C:\WINDOWS\system32\RtlGina2.dll
                  .
                  Temps d'accomplissement: 2008-04-11 12:24:51
                  ComboFix-quarantined-files.txt 2008-04-11 10:24:32
                  ComboFix2.txt 2008-04-09 18:56:48
                  Pre-Run: 60,958,568,448 octets libres
                  Post-Run: 60,945,145,856 octets libres
                  .
                  2008-04-10 08:38:06 --- E O F ---
                  0
                  1. jlpjlp Contributeur sécurité
                    Ferme tout tes navigateurs (donc copie ou imprime les instructions avant)

                    Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

                    Driver ::
                    igxqswjv

                    File::
                    C:\WINDOWS\system32\cabine.dll
                    C:\WINDOWS\system32\drivers\wuzuscxs.dat

                    Registry::
                    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF8D0E6A-9C51-4401-8CAA-E19248D763D4}]

                    Enregistre ce fichier sous le nom CFscript

                    Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

                    Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

                    Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

                    Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

                    Ne touche à rien tant que le scan n'est pas terminé.

                    Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

                    Remets aussi un rapport Hijackthis

                    Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

                    ______________________

                    recolle hijackthis et dis tes soucis actuels
                    0
                    1. zamp Auteur
                      Voic les 2 derniers rapports combo et hijach

                      ComboFix 08-04-09.1 - zampaglione 2008-04-11 18:42:08.5 - NTFSx86
                      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.443 [GMT 2:00]
                      Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
                      Command switches used :: C:\Documents and Settings\zampaglione\Bureau\CFscript.txt
                      * Création d'un nouveau point de restauration

                      FILE ::
                      C:\WINDOWS\system32\cabine.dll
                      C:\WINDOWS\system32\drivers\wuzuscxs.dat
                      .

                      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                      .

                      C:\WINDOWS\system32\cabine.dll
                      C:\WINDOWS\system32\drivers\wuzuscxs.dat

                      .
                      ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                      .

                      -------\Legacy_igxqswjv
                      -------\igxqswjv

                      ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-11 to 2008-04-11 ))))))))))))))))))))))))))))))))))))
                      .

                      2008-04-10 10:35 . 2008-04-10 10:37 1,374 --a------ C:\WINDOWS\imsins.BAK
                      2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
                      2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
                      2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
                      2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
                      2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
                      2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
                      2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                      2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
                      2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3

                      .
                      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      2008-04-07 15:58 --------- d-----w C:\Program Files\monAlbumPhoto
                      2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
                      2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                      2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                      2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                      2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                      2008-03-24 15:05 --------- d-----w C:\Program Files\Java
                      2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
                      2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
                      2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
                      2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
                      2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                      2008-03-10 20:11 --------- d-----w C:\Program Files\Google
                      2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
                      2008-03-09 19:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\albumphoto
                      2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
                      2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
                      2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
                      2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
                      2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
                      2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
                      2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
                      2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
                      2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
                      2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
                      2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
                      2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
                      2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
                      2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
                      2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
                      2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
                      2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
                      2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
                      2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
                      2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
                      2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
                      2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
                      .

                      ((((((((((((((((((((((((((((( snapshot_2008-04-10_19.05.56.00 )))))))))))))))))))))))))))))))))))))))))
                      .
                      + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
                      - 2008-04-10 17:00:49 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_49c.dat
                      + 2008-04-11 16:48:57 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_49c.dat
                      .
                      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      .
                      REGEDIT4
                      *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
                      "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
                      "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
                      "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
                      "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
                      "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
                      "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
                      "SoundMan"="SOUNDMAN.EXE" [2004-02-26 16:53 65024 C:\WINDOWS\SOUNDMAN.EXE]
                      "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
                      "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
                      "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
                      "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
                      "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
                      "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
                      "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
                      "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
                      "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
                      "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
                      "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
                      "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
                      "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
                      "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

                      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                      "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                      "%windir%\\system32\\sessmgr.exe"=
                      "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
                      "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
                      "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
                      "C:\\Program Files\\Messenger\\msmsgs.exe"=
                      "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
                      "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
                      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                      "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
                      "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
                      "C:\\CreativesFiles\\Shareaza.exe"=
                      "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
                      "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                      "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

                      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                      "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
                      "6346:UDP"= 6346:UDP:shareaza
                      "6346:TCP"= 6346:TCP:shareaza

                      R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
                      R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
                      R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
                      R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
                      R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
                      R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
                      R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
                      R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
                      R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
                      S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
                      S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
                      S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
                      S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
                      S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]
                      S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]

                      .
                      Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
                      "2008-04-11 16:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
                      - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
                      .
                      **************************************************************************

                      catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2008-04-11 18:49:57
                      Windows 5.1.2600 Service Pack 2 NTFS

                      Balayage processus cach‚s ...

                      Balayage cach‚ autostart entries ...

                      Balayage des fichiers cach‚s ...

                      Scan termin‚ avec succŠs
                      Les fichiers cach‚s: 0

                      **************************************************************************
                      .
                      --------------------- DLLs a charg‚ sous des processus courants ---------------------

                      PROCESS: C:\WINDOWS\system32\winlogon.exe
                      -> C:\WINDOWS\system32\RtlGina2.dll
                      .
                      ------------------------ Other Running Processes ------------------------
                      .
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                      C:\WINDOWS\system32\wdfmgr.exe
                      C:\WINDOWS\wanmpsvc.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
                      C:\Program Files\WinZip\WZQKPICK.EXE
                      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                      .
                      **************************************************************************
                      .
                      Temps d'accomplissement: 2008-04-11 18:54:24 - machine was rebooted
                      ComboFix-quarantined-files.txt 2008-04-11 16:54:16
                      ComboFix2.txt 2008-04-11 10:24:52
                      ComboFix3.txt 2008-04-09 18:56:48
                      Pre-Run: 60,949,221,376 octets libres
                      Post-Run: 60,854,816,768 octets libres
                      .
                      2008-04-10 08:38:06 --- E O F ---

                      Voici le 2eme

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 18:55:40, on 11/04/2008
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\wanmpsvc.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                      C:\WINDOWS\SOUNDMAN.EXE
                      C:\Apps\Powercinema\PCMService.exe
                      C:\WINDOWS\system32\LVCOMSX.EXE
                      C:\WINDOWS\system32\ElkCtrl.exe
                      C:\Program Files\Logitech\Video\CameraAssistant.exe
                      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
                      C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                      C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                      C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      C:\CreativesFiles\Shareaza.exe
                      C:\Program Files\Messenger\msmsgs.exe
                      C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
                      C:\Program Files\WinZip\WZQKPICK.EXE
                      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                      C:\WINDOWS\explorer.exe
                      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\CreativesFiles\Plugins\RazaWebHook.dll
                      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
                      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                      O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
                      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                      O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
                      O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
                      O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
                      O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB002" /M "Stylus DX4800"
                      O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                      O4 - HKLM\..\Run: [Nero DriveSpeed] C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                      O4 - HKCU\..\Run: [Shareaza] "C:\CreativesFiles\Shareaza.exe" -tray
                      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
                      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                      O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
                      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                      O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
                      O8 - Extra context menu item: Download with &Shareaza - res://C:\CreativesFiles\Plugins\RazaWebHook.dll/3000
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                      O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
                      O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
                      O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/poti_x.cab
                      O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
                      O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
                      O16 - DPF: {1F831FA7-42FC-11D4-95A6-0080AD30DCE1} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i Fra\InstFred.ocx
                      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                      O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.aubertphotos.com/Components/Upload/ImageUploader3.cab
                      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
                      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.fr/clients/uploader_v2.1.0.53.cab
                      O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp03.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
                      O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
                      O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD LT 2000i Fra\AcPreview.ocx
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
                      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
                      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                      O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                      O24 - Desktop Component 0: (no name) - http://loga.hit-parade.com/logohp1.gif?site=a107919
                      0
                      1. jlpjlp Contributeur sécurité
                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        C:\Program Files\Alwil Software\Avast4\ashServ.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                        C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\wanmpsvc.exe
                        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                        C:\WINDOWS\SOUNDMAN.EXE
                        C:\Apps\Powercinema\PCMService.exe
                        C:\WINDOWS\system32\LVCOMSX.EXE
                        C:\WINDOWS\system32\ElkCtrl.exe
                        C:\Program Files\Logitech\Video\CameraAssistant.exe
                        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
                        C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                        C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                        C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
                        C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                        C:\CreativesFiles\Shareaza.exe
                        C:\Program Files\Messenger\msmsgs.exe
                        C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
                        C:\Program Files\WinZip\WZQKPICK.EXE
                        C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                        C:\WINDOWS\explorer.exe
                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                        ok parfait une partie est virée

                        relance hijackhtis, fais do a system scan only et fix ces lignes (fix cheked)

                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

                        R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

                        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

                        O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
                        O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
                        O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/poti_x.cab
                        O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - https://support.norton.com/sp/en/us/home/current/info
                        O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
                        O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://support.norton.com/sp/en/us/home/current/info
                        O16 - DPF: {1F831FA7-42FC-11D4-95A6-0080AD30DCE1} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i Fra\InstFred.ocx
                        O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.aubertphotos.com/Components/Upload/ImageUploader3.cab

                        O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                        O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)

                        O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

                        __________

                        Ferme tout tes navigateurs (donc copie ou imprime les instructions avant)

                        Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

                        Driver ::
                        jatmlano

                        File::
                        C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys

                        Enregistre ce fichier sous le nom CFscript

                        Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

                        Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

                        Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

                        Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

                        Ne touche à rien tant que le scan n'est pas terminé.

                        Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

                        Remets aussi un rapport Hijackthis

                        Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

                        ______________________

                        colle le rapport d'un scan en ligne
                        avec un des suivants: (désactiver avast)

                        bitdefender en ligne :
                        http://www.bitdefender.fr/scan_fr/scan8/ie.html

                        Panda en ligne :
                        http://pandasoftware.fr
                        0
                        1. zamp Auteur
                          Voic les 2 rapports

                          ComboFix 08-04-11.5 - zampaglione 2008-04-11 23:40:40.7 - NTFSx86
                          Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.435 [GMT 2:00]
                          Endroit: C:\Documents and Settings\zampaglione\Bureau\Combo-Fix.exe
                          Command switches used :: C:\Documents and Settings\zampaglione\Bureau\CFscript.txt
                          * Création d'un nouveau point de restauration

                          FILE ::
                          C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys
                          .

                          ((((((((((((((((((((((((((((( Fichiers créés 2008-03-11 to 2008-04-11 ))))))))))))))))))))))))))))))))))))
                          .

                          2008-04-10 10:35 . 2008-04-10 10:37 1,374 --a------ C:\WINDOWS\imsins.BAK
                          2008-04-09 20:21 . 2008-04-09 20:21 <REP> d-------- C:\_OTMoveIt
                          2008-04-04 12:04 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
                          2008-04-04 12:04 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
                          2008-03-18 12:30 . 2008-03-18 12:30 <REP> d-------- C:\Program Files\Lesaccros2-Service Photo
                          2008-03-11 20:39 . 2008-03-28 22:02 <REP> d-------- C:\unzipped
                          2008-03-11 20:07 . 2008-03-11 20:08 <REP> d-------- C:\Program Files\Windows Live
                          2008-03-11 20:07 . 2008-03-11 20:07 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                          2008-03-11 20:06 . 2008-03-11 20:06 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
                          2008-03-11 19:46 . 2008-03-11 19:49 <REP> d-------- C:\Program Files\MessengerPlus! 3

                          .
                          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          2008-04-07 15:58 --------- d-----w C:\Program Files\monAlbumPhoto
                          2008-04-01 18:02 --------- d-----w C:\Program Files\Microsoft Picture It! PhotoPub
                          2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
                          2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                          2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                          2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                          2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                          2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
                          2008-03-24 15:05 --------- d-----w C:\Program Files\Java
                          2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
                          2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys
                          2008-03-16 15:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skyline
                          2008-03-12 17:10 --------- d-----w C:\Program Files\Elaborate Bytes
                          2008-03-12 17:09 --------- d-----w C:\Program Files\Sony
                          2008-03-11 17:21 --------- d-----w C:\Program Files\AOL 8.0
                          2008-03-10 20:13 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                          2008-03-10 20:11 --------- d-----w C:\Program Files\Google
                          2008-03-10 20:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
                          2008-03-09 19:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\albumphoto
                          2008-03-07 21:14 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Grisoft
                          2008-03-07 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
                          2008-03-07 18:37 --------- d-----w C:\Program Files\Trend Micro
                          2008-03-05 18:34 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
                          2008-03-05 18:34 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Malwarebytes
                          2008-03-05 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
                          2008-03-01 16:28 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
                          2008-02-29 08:57 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
                          2008-02-29 08:56 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
                          2008-02-26 17:54 --------- d-----w C:\Program Files\Vstplugins
                          2008-02-26 17:47 --------- d-----w C:\Program Files\Sony Setup
                          2008-02-26 17:47 --------- d-----w C:\Program Files\BestPractice
                          2008-02-26 17:47 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Sony Setup
                          2008-02-25 16:17 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
                          2008-02-24 23:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
                          2008-02-22 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
                          2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
                          2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll
                          2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
                          2008-02-20 05:35 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
                          2008-02-20 05:35 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
                          2008-02-16 17:08 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\Symantec
                          2008-02-16 16:56 --------- d-----w C:\Documents and Settings\brignon\Application Data\Symantec
                          2008-02-15 17:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
                          2008-02-15 15:45 --------- d-----w C:\Documents and Settings\zampaglione\Application Data\WinButler
                          2008-02-15 05:44 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
                          2008-02-14 21:46 --------- d-----w C:\Program Files\Alwil Software
                          2008-02-07 23:01 146,328 ----a-w C:\Documents and Settings\zampaglione\Application Data\GDIPFONTCACHEV1.DAT
                          2008-01-25 17:47 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
                          2008-01-09 16:29 2,593,461 ----a-w C:\Program Files\[PC - GAME Crack] Call Of Duty 4 + Keygen.rar
                          2006-11-19 12:54 118,416 ----a-w C:\Documents and Settings\brignon\Application Data\GDIPFONTCACHEV1.DAT
                          1998-07-31 09:06 7,488 ----a-w C:\WINDOWS\inf\unregpn.exe
                          2005-02-04 14:14 56 --sh--r C:\WINDOWS\system32\E6E0A871D1.sys
                          2005-10-07 20:34 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
                          .

                          ((((((((((((((((((((((((((((( snapshot_2008-04-10_19.05.56.00 )))))))))))))))))))))))))))))))))))))))))
                          .
                          + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
                          + 2008-04-11 21:29:25 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_498.dat
                          .
                          ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          .
                          REGEDIT4
                          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                          "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-10 21:46 68856]
                          "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 19:33 67128]
                          "IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2004-12-26 17:24 188459]
                          "Shareaza"="C:\CreativesFiles\Shareaza.exe" [2008-01-01 18:49 4739072]
                          "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]
                          "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
                          "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                          "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 11:45 81920]
                          "NeroCheck"="C:\WINDOWS\System32\\NeroCheck.exe" [2001-07-09 12:50 155648]
                          "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-12-09 15:32 225280]
                          "LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 10:33 73728]
                          "LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 17:22 262144]
                          "LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 10:26 489472]
                          "EPSON Stylus DX4800 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.exe" [2005-02-02 06:00 98304]
                          "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-10-28 21:10 335872]
                          "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 15:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
                          "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-09-13 18:39 185632]
                          "Nero DriveSpeed"="C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE" [2002-10-23 04:03 282624]
                          "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
                          "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-03-11 19:49 190024]

                          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                          "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

                          C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                          Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 19:33:09 67128]
                          NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe [2006-05-17 16:05:52 2297856]
                          WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2004-11-16 18:41:54 118784]

                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                          "%windir%\\system32\\sessmgr.exe"=
                          "C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
                          "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
                          "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
                          "C:\\Program Files\\Messenger\\msmsgs.exe"=
                          "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
                          "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
                          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                          "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
                          "C:\\Program Files\\Shareaza Applications\\Shareaza\\Shareaza.exe"=
                          "C:\\CreativesFiles\\Shareaza.exe"=
                          "C:\\Program Files\\Internet Explorer\\iexplore.exe"=
                          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                          "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                          "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
                          "6346:UDP"= 6346:UDP:shareaza
                          "6346:TCP"= 6346:TCP:shareaza

                          R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-08-06 09:48]
                          R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
                          R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
                          R3 Cap7134;ASUS TV7134 WDM Video Capture;C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-07-18 10:17]
                          R3 emic;EMIC control device;C:\WINDOWS\system32\Drivers\EMic.sys [2004-10-20 12:18]
                          R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
                          R3 PhTVTune;ASUS WDM TV Tuner;C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-07-18 03:23]
                          R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 07:58]
                          R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 08:08]
                          S3 ASIOMI;ASIOMI;C:\WINDOWS\system32\drivers\ASIOMI.sys [2004-01-30 11:39]
                          S3 jatmlano;jatmlano;C:\DOCUME~1\ZAMPAG~1\LOCALS~1\Temp\jatmlano.sys []
                          S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-03-04 21:59]
                          S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 03:13]
                          S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2006-03-27 17:53]
                          S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []

                          .
                          Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                          "2008-04-11 21:00:00 C:\WINDOWS\Tasks\AE99FFB2918A710E.job"
                          - c:\docume~1\zampag~1\applic~1\webant~1\CAMP AUDIO FIVE.exe
                          .
                          **************************************************************************

                          catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                          Rootkit scan 2008-04-11 23:42:21
                          Windows 5.1.2600 Service Pack 2 NTFS

                          Balayage processus cachés ...

                          Balayage caché autostart entries ...

                          Balayage des fichiers cachés ...

                          Scan terminé avec succès
                          Les fichiers cachés: 0

                          **************************************************************************
                          .
                          --------------------- DLLs a chargé sous des processus courants ---------------------

                          PROCESS: C:\WINDOWS\system32\winlogon.exe
                          -> C:\WINDOWS\system32\RtlGina2.dll
                          .
                          Temps d'accomplissement: 2008-04-11 23:43:17
                          ComboFix-quarantined-files.txt 2008-04-11 21:42:56
                          ComboFix2.txt 2008-04-11 16:54:25
                          ComboFix3.txt 2008-04-11 10:24:52
                          ComboFix4.txt 2008-04-09 18:56:48
                          Pre-Run: 60,874,067,968 octets libres
                          Post-Run: 60,859,846,656 octets libres
                          .
                          2008-04-10 08:38:06 --- E O F ---

                          voici le 2eme

                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 23:45:50, on 11/04/2008
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\wanmpsvc.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\Apps\Powercinema\PCMService.exe
                          C:\WINDOWS\system32\LVCOMSX.EXE
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\WINDOWS\system32\ElkCtrl.exe
                          C:\Program Files\Logitech\Video\CameraAssistant.exe
                          C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
                          C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                          C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
                          C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                          C:\Program Files\Messenger\msmsgs.exe
                          C:\Program Files\WinZip\WZQKPICK.EXE
                          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\WINDOWS\explorer.exe
                          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                          O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\CreativesFiles\Plugins\RazaWebHook.dll
                          O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
                          O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                          O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                          O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
                          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                          O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
                          O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
                          O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
                          O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB002" /M "Stylus DX4800"
                          O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                          O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                          O4 - HKLM\..\Run: [Nero DriveSpeed] C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE
                          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                          O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                          O4 - HKCU\..\Run: [Shareaza] "C:\CreativesFiles\Shareaza.exe" -tray
                          O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
                          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                          O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
                          O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                          O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
                          O8 - Extra context menu item: Download with &Shareaza - res://C:\CreativesFiles\Plugins\RazaWebHook.dll/3000
                          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                          O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
                          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                          O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
                          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                          O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.fr/clients/uploader_v2.1.0.53.cab
                          O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp03.photoprintit.de/microsite/3462/defaults/activex/IPSUploader.cab
                          O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
                          O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD LT 2000i Fra\AcPreview.ocx
                          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                          O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                          O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                          O24 - Desktop Component 0: (no name) - http://loga.hit-parade.com/logohp1.gif?site=a107919
                          0
                          1. jlpjlp Contributeur sécurité
                            ok hiajckthis est bon

                            encore des soucis???

                            colle le rapport d'un scan en ligne
                            avec un des suivants: (désactiver avast)

                            bitdefender en ligne :
                            http://www.bitdefender.fr/scan_fr/scan8/ie.html

                            Panda en ligne :
                            http://pandasoftware.fr
                            0
                            1. zamp Auteur
                              Je crois que c'est bon ......... !! plus de pb ............. je te remercie beaucoup du sacré coup de main !! A+
                              0
                              1. jlpjlp Contributeur sécurité
                                de rien bonne suite
                                0

                                Discussions similaires

                                Softonic,est-ce un virus ?
                                techmel1

                                6 réponses
                                Chrome://newtab
                                Nova

                                14 réponses
                                Désinstaller Softonic
                                Diguimette

                                5 réponses
                                Supprimer ads by conversion+
                                Utilisateur anonyme

                                5 réponses
                                comment supprimer sponsored ads dans google?
                                sissinessa

                                1 réponse