Infection qui a supprimé mon graveur DVD

Salut Tu fais un scan en mode sans échec avec AntiVir. Tu lances le scan et si il détecte un virus (normalement oui) tu cliques sur "delete" et "apply sélection to all following détections. (pour qu'il le supprimes automatiquement). A la fin du scan tu cliques sur "report" tu redémarre en mode normal puis tu me postes le rapport.

Mode sans Echec:

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm

PS: JE TE CONSEILLE D'ENREGISTRER CE MESSAGE DANS TON BUREAU OU CAS OU.

En mode sans echec, je fait le scan il me compte en gros 2 Warnings sans me demandé a le supprimé
De plus j'ai fais le scan 3 fois sans rester coller a mon pc, et je suis revenu jeté un coup d'oeil pour les 3 fois et mon pc s'était étaint tout seul, je suis pourtant sur secteur
J'ai vu quand j'etait a 80% environ et puis plus tard en revenant le pc etait eteint

En mode sans echec il detecte 2Warnings avant que le pc s'eteinde
mais Antivir me demande pas de les suprimer

Je suis en train de faire un scan en mode normal

Avira AntiVir Personal
Report file date: dimanche 1 juin 2008 14:41

Scanning for 1302528 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (Service Pack 1) [6.0.6001]
Boot mode: Normally booted
Username: SYSTEM
Computer name: PC-NEANT

Version information:
BUILD.DAT : 8.1.0.308 16478 Bytes 28/05/2008 17:03:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.4.53 1848832 Bytes 17/05/2008 07:40:18
ANTIVIR3.VDF : 7.0.4.118 376832 Bytes 30/05/2008 16:13:06
Engineversion : 8.1.0.51
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.37 270715 Bytes 30/05/2008 16:13:12
AESCN.DLL : 8.1.0.20 119157 Bytes 29/05/2008 16:11:13
AERDL.DLL : 8.1.0.20 418165 Bytes 20/05/2008 07:41:39
AEPACK.DLL : 8.1.1.5 364918 Bytes 20/05/2008 07:41:38
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 20/05/2008 07:41:36
AEHEUR.DLL : 8.1.0.29 1253750 Bytes 20/05/2008 07:41:35
AEHELP.DLL : 8.1.0.15 115063 Bytes 29/05/2008 16:11:13
AEGEN.DLL : 8.1.0.25 307573 Bytes 31/05/2008 16:14:58
AEEMU.DLL : 8.1.0.6 430451 Bytes 20/05/2008 07:40:32
AECORE.DLL : 8.1.0.30 168311 Bytes 29/05/2008 16:11:12
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: dimanche 1 juin 2008 14:41

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'update.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'MOM.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'RtHDVCpl.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'eRecoveryService.exe' - '1' Module(s) have been scanned
Scan process 'XAudio.exe' - '1' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
Scan process 'ULCDRSvr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'IoctlSvc.exe' - '1' Module(s) have been scanned
Scan process 'NBService.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'dwm.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
43 processes with 43 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '7' files ).

Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Windows\System32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <DATA>

End of the scan: dimanche 1 juin 2008 15:52
Used time: 1:12:02 min

The scan has been done completely.

15948 Scanning directories
126346 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
126346 Files not concerned
2141 Archives were scanned
2 Warnings
0 Notes

Je n'arrive pas a resté sur le mode sans echec, je lance le scan et puis au cours du scan le pc s'étaind tout seul
Que je sois en mode sans echec est ce indispensable?

Malwarebytes' Anti-Malware 1.14
Version de la base de données: 812

18:19:25 01/06/2008
mbam-log-6-1-2008 (18-18-52).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 117820
Temps écoulé: 40 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenUSave) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\CAC (Malware.Trace) -> No action taken.
HKEY_CLASSES_ROOT\AppID\ACM.DLL (Adware.WhenUSave) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Windows\System32\nvs2.inf (Adware.EGDAccess) -> No action taken.

J'ai fait un autre rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:22:49, on 01/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Users\alain\AppData\Local\anncoiixnc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Users\alain\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = Download Directory
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [anncoiixnc] c:\users\alain\appdata\local\anncoiixnc.exe anncoiixnc
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O13 - Gopher Prefix:
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Depuis aujourdhui j'ai aussi une fenetre "Microsoft Windows" qui apparait a chaque demarrage m'indiquand Catalyst Control Centre: Host application a cessé de fonctionner

Quelqu'un peut m'aider??

//-----------------------------------------------------------------
//
// Produit BitDefender Free Edition v10
// Produit 10.2
//
// Créé le: 02/06/2008 18:52:26
//
//-----------------------------------------------------------------

Statistiques

Chemin cible: C:\
D:\
Dossiers : 15776
Fichiers : 91352
Processus Mémoire analysés : 52
Archives : 22
Fichiers enpaquetés : 6023
Virus trouvés : 0
Fichiers infectés : 0
Processus Mémoire infectés : 0
Fichiers suspects : 0
Alertes : 0
Fichiers désinfectés : 0
Fichiers effacés : 0
Fichiers déplacés : 0
Erreurs I/O : 61
Temps d'analyse :=01:12:43
Fichiers/seconde :20

Statistiques Spywares

Registres analysés : 398
Registres infectés : 0
Cookies analysés : 10
Cookies infectés : 0
Fichiers spyware infectés : 0
Menaces Spyware détectées : 0

Définitions virus : 1255627
Plugins d'analyse : 16
Plugins archives : 42
Plug-ins décompression : 7
Plug-ins messagerie : 6
Plug-ins système : 5

Options d'analyse

Détection
[X] Analyser le secteur de boot
[X] Processus mémoire
[ ] Analyser les archives
[X] Analyser les fichiers enpaquetés
[X] Analyser la messagerie

Masque fichiers
[ ] Programmes
[X] Tous les fichiers
[ ] Extensions définies par l'utilisateur:
[ ] Exclure les extensions: ;

Action

Objets infectés
[ ] Ignorer
[X] Désinfecter
[ ] Effacer
[ ] Mettre en quarantaine
[ ] Demander l'action

Seconde action
[ ] Ignorer
[ ] Effacer
[X] Mettre en quarantaine
[ ] Demander l'action

Options d'analyse
[X] Activer les alertes
[ ] Activer l'heuristique
[ ] Afficher tous les fichiers dans le journal
[X] Fichier journal: C:\ProgramData\Bitdefender\Desktop\Profiles\Logs\full_scan\1212425546.log

Options d'analyse Spyware

[X] Analyse contre les risques non-viraux
[ ] Ecarter de l'analyse les dialers et les applications
[X] Clés de registres
[X] Cookies

Avec votre site et l'aide impossible de faire le scan. J'installe L'activeX mais apres il y a ECHEC pour la mise a jour
et le scan est "fired"
donc j'ai telecharger et installé BitDefender v10

ok c'est fait

Je fais quoi maintenant?

Script executed in Safe Mode
Rapport clean par Malekal_morte - http://www.malekal.com
Script executed in Safe Mode 03/06/2008 a 14:42:12,39

Microsoft Windows [version 6.0.6001]

*** Suppression C:

*** Suppression C:\Windows\

*** Suppression C:\Windows\system32
tentative de suppression de C:\Windows\system32\bdod.bin
tentative de suppression de C:\Windows\system32\wininit.exe
Impossible de supprimer C:\Windows\system32\wininit.exe
tentative de suppression de C:\Windows\system32\wininit.exe
Impossible de supprimer C:\Windows\system32\wininit.exe
tentative de suppression de "C:\Windows\Downloaded Program Files\CONFLICT.1"
tentative de suppression de "C:\Windows\Downloaded Program Files\CONFLICT.2"

*** Suppression C:\Program Files

*** Deletion of the registry keys successful..
*** End of the report !

SmitFraudFix v2.323

Rapport fait à 14:38:55,79, 03/06/2008
Executé à partir de C:\Users\alain\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost
::1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{0A8A69BA-199C-474B-B07A-0E774BBC2660}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{0A8A69BA-199C-474B-B07A-0E774BBC2660}: NameServer=

»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

ComboFix 08-06-01.6 - alain 2008-06-03 16:40:58.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6001.1.1252.1.1036.18.796 [GMT 2:00]
Endroit: C:\Users\alain\Desktop\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\alain\AppData\Local\ctjyieuktj_navfx.dat
C:\Users\alain\AppData\Local\vbghsx.dat
C:\Users\alain\AppData\Local\vbghsx.exe
c:\Users\alain\AppData\Local\vbghsx_nav.dat
c:\Users\alain\AppData\Local\vbghsx_navps.dat
C:\Users\alain\AppData\Local\vbghsx_navup.dat
C:\Windows\System32\Desktop_.ini
C:\Windows\system32\MSINET.oca
C:\Windows\system32\systeminfo.dll

.
((((((((((((((((((((((((((((( Fichiers créés 2008-05-03 to 2008-06-03 ))))))))))))))))))))))))))))))))))))
.

2008-06-03 16:25 . 2008-06-03 16:25 <REP> d-------- C:\Program Files\Panda Security
2008-06-03 15:13 . 2008-06-03 16:04 <REP> d-------- C:\Program Files\SafeSoft
2008-06-03 14:51 . 2008-06-03 14:58 81,984 --a------ C:\Windows\System32\bdod.bin
2008-06-03 14:39 . 2008-06-03 14:39 691 --a------ C:\Users\alain\AppData\Roaming\GetValue.vbs
2008-06-03 14:39 . 2008-06-03 14:39 35 --a------ C:\Users\alain\AppData\Roaming\SetValue.bat
2008-06-03 14:27 . 2008-06-03 14:29 <REP> d-------- C:\Users\alain\SmitfraudFix
2008-06-03 14:27 . 2007-09-06 00:22 289,144 --a------ C:\Windows\System32\VCCLSID.exe
2008-06-03 14:27 . 2006-04-27 17:49 288,417 --a------ C:\Windows\System32\SrchSTS.exe
2008-06-03 14:27 . 2008-05-29 09:35 86,528 --a------ C:\Windows\System32\VACFix.exe
2008-06-03 14:27 . 2008-05-18 21:40 82,944 --a------ C:\Windows\System32\IEDFix.exe
2008-06-03 14:27 . 2008-05-18 21:40 82,944 --a------ C:\Windows\System32\404Fix.exe
2008-06-03 14:27 . 2003-06-05 21:13 53,248 --a------ C:\Windows\System32\Process.exe
2008-06-03 14:27 . 2004-07-31 18:50 51,200 --a------ C:\Windows\System32\dumphive.exe
2008-06-03 14:27 . 2007-10-04 00:36 25,600 --a------ C:\Windows\System32\WS2Fix.exe
2008-06-03 14:27 . 2008-06-03 14:39 2,946 --a------ C:\Windows\System32\tmp.reg
2008-06-02 18:34 . 2008-06-02 18:34 <REP> d-------- C:\Program Files\CyberLink
2008-06-02 18:33 . 2008-06-03 12:37 <REP> d-------- C:\Program Files\Aspire Arcade
2008-06-02 17:38 . 2008-06-03 14:59 <REP> d-------- C:\Program Files\Common Files\Softwin
2008-06-02 17:20 . 2008-06-03 16:26 <REP> d-------- C:\Windows\BDOSCAN8
2008-06-01 20:16 . 2008-06-01 20:16 <REP> d-------- C:\Program Files\Alwil Software
2008-06-01 16:08 . 2008-06-01 16:08 <REP> d-------- C:\Users\All Users\Malwarebytes
2008-06-01 16:08 . 2008-06-01 16:08 <REP> d-------- C:\Users\alain\AppData\Roaming\Malwarebytes
2008-06-01 16:08 . 2008-06-01 16:08 <REP> d-------- C:\ProgramData\Malwarebytes
2008-06-01 15:13 . 2008-06-01 15:14 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-06-01 15:02 . 2008-06-01 15:02 <REP> d-------- C:\Users\alain\AppData\Roaming\LiteOn
2008-06-01 14:56 . 2008-06-02 03:17 <REP> d-------- C:\Users\alain\{84f08ae9-f717-4eba-a3dc-a19d237da74d}
2008-06-01 09:28 . 2008-06-01 09:28 <REP> d-------- C:\Program Files\NeroInstall.bak
2008-06-01 09:16 . 2008-06-01 09:16 <REP> d-------- C:\Program Files\Nero
2008-06-01 08:23 . 2008-06-01 08:23 0 --a------ C:\Windows\Irremote.ini
2008-05-31 20:53 . 2008-05-31 20:53 <REP> d-------- C:\Users\alain\AppData\Roaming\Nero
2008-05-31 20:46 . 2008-06-01 09:16 <REP> d-------- C:\Users\All Users\Nero
2008-05-31 20:46 . 2008-06-01 09:16 <REP> d-------- C:\ProgramData\Nero
2008-05-31 20:46 . 2008-06-01 09:19 <REP> d-------- C:\Program Files\Common Files\Nero
2008-05-31 17:49 . 2000-03-29 16:18 139,264 --a------ C:\Windows\System32\Mpeg2Decoder.ax
2008-05-31 17:49 . 2000-03-29 16:18 94,208 --a------ C:\Windows\System32\Mpeg2Parser.ax
2008-05-31 16:15 . 2008-05-31 16:15 524,288 --ahs---- C:\Windows\System32\NET06NMH{566ef981-2f1b-11dd-b4f1-0016d469951a}.TMContainer00000000000000000002.regtrans-ms
2008-05-31 16:15 . 2008-06-03 15:24 524,288 --ahs---- C:\Windows\System32\NET06NMH{566ef981-2f1b-11dd-b4f1-0016d469951a}.TMContainer00000000000000000001.regtrans-ms
2008-05-31 16:15 . 2008-06-03 15:24 65,536 --ahs---- C:\Windows\System32\NET06NMH{566ef981-2f1b-11dd-b4f1-0016d469951a}.TM.blf
2008-05-31 16:09 . 2008-05-31 16:09 524,288 --ahs---- C:\Windows\System32\NET06NMH{b395a83c-2f08-11dd-b243-0016d469951a}.TMContainer00000000000000000002.regtrans-ms
2008-05-31 16:09 . 2008-05-31 16:09 524,288 --ahs---- C:\Windows\System32\NET06NMH{b395a83c-2f08-11dd-b243-0016d469951a}.TMContainer00000000000000000001.regtrans-ms
2008-05-31 16:09 . 2008-06-03 15:24 262,144 --a------ C:\Windows\System32\NET06NMH
2008-05-31 16:09 . 2008-05-31 16:09 65,536 --ahs---- C:\Windows\System32\NET06NMH{b395a83c-2f08-11dd-b243-0016d469951a}.TM.blf
2008-05-31 16:09 . 2008-06-03 15:23 57,344 --a------ C:\Windows\WNMHINDR.EXE
2008-05-31 16:09 . 2008-06-03 15:23 24,576 --a------ C:\Windows\System32\NMH040A.DLL
2008-05-31 16:09 . 2008-06-03 15:24 5,120 --ah----- C:\Windows\System32\NET06NMH.LOG1
2008-05-31 16:09 . 2008-05-31 16:09 0 --ah----- C:\Windows\System32\NET06NMH.LOG2
2008-05-31 15:52 . 2001-05-01 17:05 258,048 --a------ C:\Windows\System32\drmclien.dll
2008-05-31 15:51 . 2008-05-31 15:52 <REP> d-------- C:\Windows\ulead.dat
2008-05-31 15:51 . 2008-05-31 15:52 196 --a------ C:\Windows\ulead32.ini
2008-05-30 21:33 . 2008-05-30 21:33 <REP> d-------- C:\Users\All Users\TuneUp Software
2008-05-30 21:33 . 2008-05-30 21:33 <REP> d-------- C:\ProgramData\TuneUp Software
2008-05-30 21:33 . 2008-05-30 21:35 306,432 --a------ C:\Windows\System32\TuneUpDefragService.exe
2008-05-30 21:33 . 2007-12-20 10:41 29,440 --a------ C:\Windows\System32\uxtuneup.dll
2008-05-30 21:33 . 2007-12-20 10:44 16,640 --a------ C:\Windows\System32\authuitu.dll
2008-05-30 21:32 . 2008-05-30 21:35 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
2008-05-30 21:32 . 2008-05-30 21:32 <REP> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-05-29 21:09 . 2008-06-01 15:45 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-05-29 21:09 . 2008-06-01 15:45 <REP> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-05-29 19:28 . 2008-05-29 19:28 <REP> d-------- C:\perflogs
2008-05-29 06:29 . 2008-03-08 04:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-05-29 06:29 . 2008-03-08 06:21 1,695,744 --a------ C:\Windows\System32\gameux.dll
2008-05-28 14:40 . 2008-05-28 14:40 <REP> d-------- C:\Users\alain\AppData\Roaming\TuneUp Software
2008-05-27 16:13 . 2008-05-27 16:13 0 --------- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-05-26 22:45 . 2008-05-26 22:45 <REP> d-------- C:\Users\All Users\Team MediaPortal
2008-05-26 22:45 . 2008-05-26 22:45 <REP> d-------- C:\ProgramData\Team MediaPortal
2008-05-25 19:19 . 2008-05-25 19:19 <REP> dr------- C:\Users\Public\Downloads
2008-05-25 18:56 . 2008-05-25 18:56 <REP> d-------- C:\Program Files\Microsoft Games
2008-05-25 17:29 . 2008-01-19 09:33 2,623,488 --a------ C:\Windows\System32\SLsvc.exe
2008-05-25 17:29 . 2008-01-19 09:36 1,541,120 --a------ C:\Windows\System32\onex.dll
2008-05-25 17:28 . 2008-01-19 09:43 3,600,440 --a------ C:\Windows\System32\ntkrnlpa.exe
2008-05-25 17:28 . 2008-01-19 09:43 3,548,728 --a------ C:\Windows\System32\ntoskrnl.exe
2008-05-25 17:28 . 2008-01-19 09:33 2,091,520 --a------ C:\Windows\System32\dfsr.exe
2008-05-25 17:28 . 2008-01-19 09:37 1,695,232 --a------ C:\Windows\System32\wuaueng.dll
2008-05-25 17:28 . 2008-01-19 09:36 1,107,968 --a------ C:\Windows\System32\pidgenx.dll
2008-05-25 17:28 . 2008-01-19 09:29 705,536 --a------ C:\Windows\System32\imagesp1.dll
2008-05-25 17:28 . 2008-01-19 06:10 681,984 --a------ C:\Windows\System32\drivers\spsys.sys
2008-05-25 17:28 . 2008-01-19 09:42 51,768 --a------ C:\Windows\System32\PSHED.DLL
2008-05-25 17:26 . 2008-01-19 09:35 4,875,776 --a------ C:\Windows\System32\NlsData0009.dll
2008-05-25 17:25 . 2008-01-19 09:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-05-25 17:24 . 2008-01-19 09:35 3,072,000 --a------ C:\Windows\System32\networkmap.dll
2008-05-25 17:23 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-05-25 17:22 . 2008-01-19 09:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-05-25 17:22 . 2008-01-19 09:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
2008-05-25 17:22 . 2008-01-19 09:36 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-05-25 17:22 . 2008-01-19 09:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
2008-05-25 17:22 . 2008-01-19 09:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-05-25 17:21 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-05-25 17:21 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-05-25 17:21 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-05-25 17:21 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-05-25 16:55 . 2008-05-25 16:55 1,024 -r-h----- C:\Users\alain\AppData\Roaming\NTIMPEG2.dll
2008-05-25 16:55 . 2008-05-25 16:55 1,024 -r-h----- C:\Users\alain\AppData\Roaming\NTIMP3.dll
2008-05-25 16:55 . 2008-05-25 16:55 1,024 -r-h----- C:\Users\alain\AppData\Roaming\NTICDMK7.dll
2008-05-25 16:54 . 2008-05-25 16:54 6,144 --------- C:\Windows\System32\drivers\NTIDrvr.sys
2008-05-25 12:28 . 2008-05-25 12:28 <REP> d-------- C:\Users\All Users\ATI
2008-05-25 12:28 . 2008-05-25 12:28 <REP> d-------- C:\ProgramData\ATI
2008-05-25 11:28 . 2008-05-25 12:30 <REP> d-------- C:\Program Files\ATI
2008-05-23 21:03 . 2008-05-23 21:03 <REP> d-------- C:\Program Files\Common Files\Ulead Systems
2008-05-20 20:16 . 2008-05-20 20:21 <REP> d-------- C:\Users\alain\AppData\Roaming\Pouchin TV Mod
2008-05-20 19:20 . 2008-05-20 19:20 <REP> d-------- C:\Users\alain\AppData\Roaming\InstallShield
2008-05-20 19:18 . 2008-05-20 19:18 306,816 --------- C:\Windows\System32\drivers\AF15BDA.sys
2008-05-20 18:30 . 2008-05-20 18:30 <REP> d-------- C:\Program Files\Dusco
2008-05-20 16:38 . 2008-06-03 15:20 <REP> d-------- C:\Program Files\Shareaza
2008-05-20 08:27 . 2008-05-20 08:27 <REP> d-------- C:\Users\All Users\Avira
2008-05-20 08:27 . 2008-05-20 08:27 <REP> d-------- C:\ProgramData\Avira
2008-05-20 08:27 . 2008-05-20 08:27 <REP> d-------- C:\Program Files\Avira
2008-05-18 12:07 . 2008-05-19 18:51 <REP> d-------- C:\Program Files\Microsoft Works
2008-05-18 11:26 . 2008-05-18 11:26 382 --a------ C:\Windows\ODBC.INI
2008-05-18 11:22 . 2008-05-18 11:22 <REP> d-------- C:\Windows\ShellNew
2008-05-15 11:16 . 2008-05-28 19:34 <REP> d-------- C:\Users\All Users\ma-config.com
2008-05-15 11:16 . 2008-05-28 19:34 <REP> d-------- C:\ProgramData\ma-config.com
2008-05-14 16:12 . 2008-05-14 16:12 <REP> d-------- C:\Users\All Users\Messenger Plus!
2008-05-14 16:12 . 2008-05-14 16:12 <REP> d-------- C:\ProgramData\Messenger Plus!
2008-05-13 20:58 . 2008-05-13 20:58 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-05-13 20:49 . 2008-05-13 20:49 <REP> d-------- C:\Users\alain\AppData\Roaming\Daoisoft
2008-05-13 19:47 . 2008-05-13 19:47 <REP> d-------- C:\Program Files\Common Files\Steam
2008-05-13 19:12 . 2008-05-25 12:38 28,672 --------- C:\Windows\System32\AF15BDAEX.dll
2008-05-13 19:12 . 2006-08-28 11:17 196 --------- C:\Windows\System32\AF15IRTBL.bin
2008-05-13 19:06 . 2008-05-13 19:58 <REP> d-------- C:\Program Files\Steam
2008-05-13 19:01 . 2008-05-25 11:34 <REP> d-------- C:\Program Files\ATI Technologies
2008-05-13 18:50 . 2008-05-13 18:50 0 --a------ C:\Windows\ativpsrm.bin
2008-05-12 17:56 . 2008-05-12 17:56 397,312 --------- C:\Windows\System32\ATIDEMGX.dll
2008-05-12 17:26 . 2008-05-12 17:26 9,994,240 --------- C:\Windows\System32\atioglxx.dll
2008-05-12 17:11 . 2008-05-12 17:11 48,640 --------- C:\Windows\System32\amdpcom32.dll
2008-05-12 17:11 . 2008-05-12 17:11 19,968 --------- C:\Windows\System32\atiadlxx.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-03 13:21 724,992 ----a-w C:\Windows\iun6002.exe
2008-06-02 16:33 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-01 10:28 --------- d-----w C:\Program Files\Acer Inc
2008-05-30 14:21 --------- d-----w C:\ProgramData\CyberLink
2008-05-28 17:58 --------- d-----w C:\Program Files\NewTech Infosystems
2008-05-28 17:56 --------- d-----w C:\Program Files\Common Files\NewTech Infosystems
2008-05-25 17:19 174 --sha-w C:\Program Files\desktop.ini
2008-05-25 16:59 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-25 16:59 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-05-25 16:59 --------- d-----w C:\Program Files\Windows Mail
2008-05-25 16:59 --------- d-----w C:\Program Files\Windows Defender
2008-05-25 16:59 --------- d-----w C:\Program Files\Windows Collaboration
2008-05-25 16:59 --------- d-----w C:\Program Files\Windows Calendar
2008-05-25 16:01 82,432 ------w C:\Windows\System32\axaltocm.dll
2008-05-25 16:01 101,888 ------w C:\Windows\System32\ifxcardm.dll
2008-05-19 16:57 --------- d-----w C:\Program Files\Windows Live
2008-05-13 15:59 --------- d-----w C:\Users\alain\AppData\Roaming\Teleca
2008-05-13 15:59 --------- d-----w C:\Program Files\Common Files\Teleca Shared
2008-05-13 15:36 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-04-20 12:06 --------- d-----w C:\Users\alain\AppData\Roaming\Zylom
2008-04-15 15:51 --------- d-----w C:\Users\alain\AppData\Roaming\Azureus
2008-04-15 11:19 --------- d-----w C:\Users\alain\AppData\Roaming\Leadertech
2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2008-03-06 00:38 90,112 ------w C:\Windows\System32\atibrtmon.exe
2008-02-13 14:37 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2008-02-13 14:37 32,768 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2008-02-13 14:37 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
.

------- Sigcheck -------

.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"????r"="" []
"?????????"="??????????????e" []
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 09:33 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]
"RtHDVCpl"="RtHDVCpl.exe" [2006-11-20 08:13 4018176 C:\Windows\RtHDVCpl.exe]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 16:29 2221352]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-12-14 15:34 393216]
"PCMService"="C:\Program Files\Aspire Arcade\PCMService.exe" [2004-04-02 11:07 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.MJPG"= pvmjpg20.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{E604D524-8A8D-4491-9189-8305BFD2D8C9}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{98CAD64D-F1AC-40A3-BABD-E99D9C3600D5}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule Plus
"UDP Query User{58A16CB7-CDCC-4B98-9BC8-D23B56493684}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule Plus
"TCP Query User{E6884F20-DA0F-4292-82E3-ACAB0AF55F6D}C:\\program files\\azureus\\azureus.exe"= UDP:C:\program files\azureus\azureus.exe:Azureus
"UDP Query User{4F08C91A-4BF8-4397-A395-CC6B7C33A61F}C:\\program files\\azureus\\azureus.exe"= TCP:C:\program files\azureus\azureus.exe:Azureus
"{8748DB06-5925-48B6-90C5-0AA4920F6999}"= UDP:C:\Program Files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{E119FEFE-7949-403A-8669-AE0DF49F189D}"= TCP:C:\Program Files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"TCP Query User{A1B7B2CA-4C6F-445B-8446-52B9345920C0}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{16BEDCFF-7CB8-448B-96DD-03720D9F1622}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"{79FE6C7C-CDED-4C22-AA57-67FAF4732194}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp
"{4C2097A1-AD89-4F80-9388-7F9E48EA3CA7}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp
"TCP Query User{CF61FC2E-1B69-42D2-9AEC-DB8DB0E09732}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{00F987B5-41A0-47A1-911F-1195888731CF}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{BBEE313F-761A-47FF-929F-44BD0B04787A}C:\\program files\\shareaza\\shareaza.exe"= UDP:C:\program files\shareaza\shareaza.exe:Shareaza Ultimate File Sharing
"UDP Query User{D75CE9D8-7EC3-493B-9B6D-1BC11FF38787}C:\\program files\\shareaza\\shareaza.exe"= TCP:C:\program files\shareaza\shareaza.exe:Shareaza Ultimate File Sharing
"{721A0B6F-7914-455C-887B-6974461EC471}"= C:\Program Files\Acer\Acer Arcade\PowerCinema.exe:CyberLink PowerCinema
"{CBB040DD-42D1-4910-8A56-6D1EE7F359B2}"= C:\Program Files\Acer\Acer Arcade\PCMService.exe:CyberLink PowerCinema Resident Program
"{6499331E-76AB-449C-8D67-8B98FB34087D}"= C:\Program Files\Acer\Acer Arcade\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine
"{FBF53B30-14D1-4E79-A9C9-8A6B57DA99AC}"= C:\Program Files\Acer\Acer Arcade\Kernel\DMS\CLMSService.exe:CyberLink Media Server
"{8E7A6062-92C7-4E15-A044-996C859FACC5}"= UDP:C:\Program Files\ma-config.com\maconfservice.exe:maconfservice
"{AF94DB7C-BA90-4326-BDAE-32A05B6886BD}"= TCP:C:\Program Files\ma-config.com\maconfservice.exe:maconfservice
"{35A09DE1-9C4E-49BB-8B0C-3042CD3E5C22}"= Disabled:UDP:C:\Program Files\CCleaner\ccleaner.exe:CCleaner
"{6C667DF2-5D2D-4F53-969F-76A4D84E5867}"= Disabled:TCP:C:\Program Files\CCleaner\ccleaner.exe:CCleaner

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-30 17:22]
R0 SI3112r;ATI-4379 Serial ATA Controller;C:\Windows\system32\DRIVERS\SI3112r.sys [2007-08-29 03:04]
R2 UxTuneUp;TuneUp Extension de thème;C:\Windows\System32\svchost.exe [2008-01-19 09:33]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 11:39]
R3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-25 04:46]
S3 AF15BDA;AF9015 BDA Filter;C:\Windows\system32\DRIVERS\AF15BDA.sys [2008-05-20 19:18]
S3 athr;Atheros Extensible Wireless LAN device driver;C:\Windows\system32\DRIVERS\athr.sys [2006-11-10 08:38]
S3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-25 04:46]
S3 Boonty Games;Boonty Games;"C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe" [2007-10-06 11:44]
S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\Windows\system32\DRIVERS\s125bus.sys [2007-04-24 12:33]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\Windows\system32\DRIVERS\s125mdfl.sys [2007-04-24 12:33]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\Windows\system32\DRIVERS\s125mdm.sys [2007-04-24 12:33]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);C:\Windows\system32\DRIVERS\s125mgmt.sys [2007-04-24 12:33]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;C:\Windows\system32\DRIVERS\s125obex.sys [2007-04-24 12:33]
S3 SMSCIRDA;SMSC Infrared Device Driver;C:\Windows\system32\DRIVERS\SMSCirda.sys [2006-10-18 09:44]
S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe [2008-05-13 19:10]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\Windows\System32\TuneUpDefragService.exe [2008-05-30 21:35]
S3 VX1000;VX-1000;C:\Windows\system32\DRIVERS\VX1000.sys [2006-12-05 16:39]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9d6fa881-7f3e-11dc-9829-0016d469951a}]
\shell\AutoRun\command - F:\autorun.exe

*Newly Created Service* - CATCHME
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-05-31 05:22:20 C:\Windows\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2008\OneClick.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-03 16:45:14
Windows 6.0.6001 Service Pack 1 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-06-03 16:47:24
ComboFix-quarantined-files.txt 2008-06-03 14:47:20

Pre-Run: 14,101,692,416 octets libres
Post-Run: 15,717,277,696 octets libres

282 --- E O F --- 2008-05-31 13:45:24

En regardant d'autres sujet j'ai fait d'autre rapport en t'otre avec ComboFix SmitFraudFix et Clean
En esperant que ça puisse servir

Quelqu'un a une idée pour supprimer O4 - HKCU\..\Run: [?????????] ??????????????e

A l'aide de acer erecovery, j'ai reinstaller vista mais mon leceur n'apparait toujours pas
Lors du premier demarrage apres le reinstallement par erecorever, il m'on dit d'installer les drivers de mon lecteur c'est ce que j'ai fait mais il y a eu echec
Puis sur tous les drivers.com ils me disent qu'il y a un driver installé pour mon lecteur
Quelque'un aurait une idée pour qu'il reaparaisse

Le lecteur est reaparut et pour l'instant il est toujours present