Rapport Hijackthis

Salut,

Merci de prendre du temps pour m'aider

Voici le rapport que j'ai obtenu

Malwarebytes' Anti-Malware 1.20
Version de la base de données: 938
Windows 5.1.2600 Service Pack 2

16:15:00 11/07/2008
mbam-log-7-11-2008 (16-14-52).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 154800
Temps écoulé: 37 minute(s), 31 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 25
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 72

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\acm.acmfactory (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\acm.acmfactory.1 (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad} (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{df901432-1b9f-4f5b-9e56-301c553f9095} (Adware.WhenUSave) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin.1 (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin.1 (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton.1 (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\AppID\ACM.DLL (Adware.WhenUSave) -> No action taken.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a09aa870 (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\winvi (Adware.SoftMate) -> No action taken.
C:\Program Files\winvi\dsktp (Adware.SoftMate) -> No action taken.
C:\WINDOWS\system32\dFrnx05 (Trojan.Agent) -> No action taken.

Fichier(s) infecté(s):
C:\WINDOWS\system32\abwiljuq.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\qujliwba.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\csucgugb.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\bgugcusc.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\dmkfgprb.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\brpgfkmd.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ewsjsaba.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\abasjswe.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\gfbbcjbt.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\tbjcbbfg.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\hbeyyckw.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\wkcyyebh.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\heybycxa.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\axcybyeh.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\iievjhuq.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\quhjveii.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\jcwjxkyq.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\qykxjwcj.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\lrfclale.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\elalcfrl.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\lstdvabh.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\hbavdtsl.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\mhwtgxfh.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\hfxgtwhm.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\nfnfunvs.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\svnufnfn.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\nislrich.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\hcirlsin.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ofwbbraf.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\farbbwfo.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\pumgnqsn.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\nsqngmup.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\qtegocjo.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ojcogetq.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\tkcvevnt.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\tnvevckt.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\tmvintrb.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\brtnivmt.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\tscgmgql.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\lqgmgcst.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ukjtaise.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\esiatjku.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\uwgmbhkh.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\hkhbmgwu.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\womvupql.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\lqpuvmow.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\fuvaekjy.ini (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\OL6FSH2N\kb713501[1] (Trojan.LowZones) -> No action taken.
C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\XMWIPKIM\CAWF2RUL (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100097.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100100.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113238.exe (Trojan.LowZones) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113239.exe (Trojan.LowZones) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113240.exe (Trojan.LowZones) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113241.exe (Trojan.LowZones) -> No action taken.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113243.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\dFrnx05\dFrnx051080.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\emL1\roEbdll2.exe (Trojan.StartPage) -> No action taken.
C:\Program Files\winvi\version.ini (Adware.SoftMate) -> No action taken.
C:\Program Files\winvi\dsktp\AC_RunActiveContent.js (Adware.SoftMate) -> No action taken.
C:\Program Files\winvi\dsktp\desktop.html (Adware.SoftMate) -> No action taken.
C:\Program Files\winvi\dsktp\internetDetection.swf (Adware.SoftMate) -> No action taken.
C:\Program Files\winvi\dsktp\settings.sol (Adware.SoftMate) -> No action taken.
C:\WINDOWS\cookies.ini (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\bshhxdrp.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\pac.txt (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\cbXQhFXO.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\BMa3a99bec.xml (Trojan.Vundo) -> No action taken.
C:\WINDOWS\BMa3a99bec.txt (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> No action taken.

Oups oui ^^

Malwarebytes' Anti-Malware 1.20
Version de la base de données: 938
Windows 5.1.2600 Service Pack 2

16:23:06 11/07/2008
mbam-log-7-11-2008 (16-23-06).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 154800
Temps écoulé: 37 minute(s), 31 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 25
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 72

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> Unloaded module successfully.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\acm.acmfactory (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\acm.acmfactory.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{df901432-1b9f-4f5b-9e56-301c553f9095} (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchwbbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchwbbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchwbtoolbar.temperaturebarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\ACM.DLL (Adware.WhenUSave) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a09aa870 (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{8a290466-39bd-419b-93db-0e9599506654} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma3a99bec (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\winvi (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\Program Files\winvi\dsktp (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dFrnx05 (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\abwiljuq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qujliwba.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\csucgugb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bgugcusc.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dmkfgprb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\brpgfkmd.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ewsjsaba.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\abasjswe.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\gfbbcjbt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tbjcbbfg.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hbeyyckw.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wkcyyebh.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\heybycxa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\axcybyeh.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\iievjhuq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\quhjveii.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\jcwjxkyq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qykxjwcj.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lrfclale.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\elalcfrl.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lstdvabh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hbavdtsl.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mhwtgxfh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hfxgtwhm.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nfnfunvs.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\svnufnfn.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nislrich.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hcirlsin.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ofwbbraf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\farbbwfo.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pumgnqsn.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nsqngmup.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qtegocjo.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ojcogetq.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tkcvevnt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tnvevckt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tmvintrb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\brtnivmt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tscgmgql.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lqgmgcst.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ukjtaise.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\esiatjku.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\uwgmbhkh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hkhbmgwu.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\womvupql.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lqpuvmow.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yjkeavuf.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\fuvaekjy.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\OL6FSH2N\kb713501[1] (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\Documents and Settings\jimmy et morgane\Local Settings\Temporary Internet Files\Content.IE5\XMWIPKIM\CAWF2RUL (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100097.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP322\A0100100.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113238.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113239.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113240.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113241.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP337\A0113243.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dFrnx05\dFrnx051080.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\emL1\roEbdll2.exe (Trojan.StartPage) -> Quarantined and deleted successfully.
C:\Program Files\winvi\version.ini (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\Program Files\winvi\dsktp\AC_RunActiveContent.js (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\Program Files\winvi\dsktp\desktop.html (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\Program Files\winvi\dsktp\internetDetection.swf (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\Program Files\winvi\dsktp\settings.sol (Adware.SoftMate) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bshhxdrp.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\pac.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cbXQhFXO.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BMa3a99bec.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BMa3a99bec.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.

Désolé j'avais posté le mauvais rapport ^^

Voilà le rapport

Merci de votre patience ^^

ComboFix 08-07-10.1 - Johan 2008-07-11 16:55:49.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.155 [GMT 2:00]
Endroit: C:\Documents and Settings\Johan\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\Temp\tmpvc14
C:\Temp\tmpvc14\dllvc.log
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\aaqqebkv.ini
C:\WINDOWS\system32\ajmwlfsg.ini
C:\WINDOWS\system32\aknakpkg.dll
C:\WINDOWS\system32\aojngpao.dll
C:\WINDOWS\system32\blhobyiv.ini
C:\WINDOWS\system32\bvudpqyv.ini
C:\WINDOWS\system32\bwamptwk.dll
C:\WINDOWS\system32\cjqgov.dll
C:\WINDOWS\system32\crhqnrua.dll
C:\WINDOWS\system32\djwryhbn.dll
C:\WINDOWS\system32\egekwgwn.dll
C:\WINDOWS\system32\eKnpYcdd.ini
C:\WINDOWS\system32\eKnpYcdd.ini2
C:\WINDOWS\system32\essabwtx.dll
C:\WINDOWS\system32\fPAKlUtv.ini
C:\WINDOWS\system32\fPAKlUtv.ini2
C:\WINDOWS\system32\fuaripsl.dll
C:\WINDOWS\system32\fwygtqvr.dll
C:\WINDOWS\system32\gwpeedec.dll
C:\WINDOWS\system32\HPqtCcfe.ini
C:\WINDOWS\system32\HPqtCcfe.ini2
C:\WINDOWS\system32\imixshai.dll
C:\WINDOWS\system32\ixmadbgj.dll
C:\WINDOWS\system32\kiirrawa.dll
C:\WINDOWS\system32\kiqvlvvx.dll
C:\WINDOWS\system32\kjfmnjgc.dll
C:\WINDOWS\system32\kulapnwq.dll
C:\WINDOWS\system32\lebicfkv.dll
C:\WINDOWS\system32\lguidben.dll
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\nfocgmmw.ini
C:\WINDOWS\system32\nihgdtce.ini
C:\WINDOWS\system32\nqjbpnhk.dll
C:\WINDOWS\system32\obbzou.dll
C:\WINDOWS\system32\oeminfo.ini
C:\WINDOWS\system32\ouqlrgyy.dll
C:\WINDOWS\system32\ovnattyw.dll
C:\WINDOWS\system32\padlaglb.dll
C:\WINDOWS\system32\pntmclhi.dll
C:\WINDOWS\system32\psvyncae.dll
C:\WINDOWS\system32\pwjavlay.dll
C:\WINDOWS\system32\qtijcjbc.ini
C:\WINDOWS\system32\rAGjSvut.ini
C:\WINDOWS\system32\rAGjSvut.ini2
C:\WINDOWS\system32\rarijuyg.dll
C:\WINDOWS\system32\rerpvmle.dll
C:\WINDOWS\system32\ruyshuuk.dll
C:\WINDOWS\system32\savvhhma.dll
C:\WINDOWS\system32\TEhknnmp.ini
C:\WINDOWS\system32\TEhknnmp.ini2
C:\WINDOWS\system32\tjubkjoy.dll
C:\WINDOWS\system32\trayamtn.dll
C:\WINDOWS\system32\upuwlkkn.dll
C:\WINDOWS\system32\ussekvoq.dll
C:\WINDOWS\system32\utyeokyf.dll
C:\WINDOWS\system32\whslfbsk.dll
C:\WINDOWS\system32\xjjaosie.dll
C:\WINDOWS\system32\xprnmofp.dll
C:\WINDOWS\system32\xtwbasse.tmp
C:\WINDOWS\system32\xxxqpqia.dll
C:\WINDOWS\system32\yckfstge.dll
C:\WINDOWS\system32\ydennlpn.ini
C:\WINDOWS\system32\ykimiavn.ini
C:\WINDOWS\system32\ykipstyc.dll
C:\WINDOWS\system32\ymrhhktw.dll
C:\WINDOWS\system32\ypuumjxi.ini
D:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-11 to 2008-07-11 ))))))))))))))))))))))))))))))))))))
.

2008-07-11 15:31 . 2008-07-11 15:31 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-11 15:31 . 2008-07-11 15:31 <REP> d-------- C:\Documents and Settings\Johan\Application Data\Malwarebytes
2008-07-11 15:31 . 2008-07-11 15:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-11 15:31 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-07-11 15:31 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-07-07 11:26 . 2008-07-07 11:26 268 --ah----- C:\sqmdata14.sqm
2008-07-07 11:26 . 2008-07-07 11:26 244 --ah----- C:\sqmnoopt14.sqm
2008-07-04 10:19 . 2008-07-04 10:19 268 --ah----- C:\sqmdata13.sqm
2008-07-04 10:19 . 2008-07-04 10:19 244 --ah----- C:\sqmnoopt13.sqm
2008-06-15 17:39 . 2008-06-15 17:39 <REP> d-------- C:\Documents and Settings\jimmy et morgane\Application Data\Grisoft

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-07 09:19 --------- d-----w C:\Program Files\Win-X-Defender
2008-06-30 18:20 --------- d-----w C:\Program Files\Google
2008-06-10 10:42 --------- d-----w C:\Documents and Settings\Thibault\Application Data\Grisoft
2008-06-09 16:41 --------- d-----w C:\Program Files\CCleaner
2008-06-09 14:34 --------- d-----w C:\Documents and Settings\CYNTHIA 2\Application Data\Grisoft
2008-06-09 14:04 --------- d-----w C:\Program Files\InternetX
2008-06-09 13:46 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-09 13:43 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-06-09 13:34 --------- d-----w C:\Program Files\Windows Live
2008-06-09 12:47 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-06-09 12:39 --------- d-----w C:\Program Files\AWS
2008-06-09 12:35 --------- d-----w C:\Documents and Settings\Johan\Application Data\muvee Technologies
2008-06-09 12:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\muvee Technologies
2008-06-09 12:27 --------- d-----w C:\Documents and Settings\Johan\Application Data\Grisoft
2008-06-09 12:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-06-09 12:19 --------- d-----w C:\Program Files\Lavalys
2008-06-05 10:57 --------- d-----w C:\Documents and Settings\Thibault\Application Data\Spyware Terminator
2008-05-28 18:36 --------- d-----w C:\Documents and Settings\CYNTHIA 2\Application Data\Spyware Terminator
2008-05-28 11:33 --------- d-----w C:\Documents and Settings\Thibault\Application Data\Win-X-Defender
2008-05-26 21:16 --------- d-----w C:\Documents and Settings\alzira\Application Data\Spyware Terminator
2008-05-26 21:09 --------- d-----w C:\Documents and Settings\Thibault\Application Data\MSNInstaller
2008-05-22 11:04 --------- d-----w C:\Documents and Settings\jimmy et morgane\Application Data\Spyware Terminator
2008-05-21 15:43 --------- d-----w C:\Documents and Settings\NetworkService\Application Data\Spyware Terminator
2008-05-21 11:20 --------- d-----w C:\Documents and Settings\CYNTHIA 2\Application Data\LimeWire
2008-05-18 19:14 --------- d-----w C:\Documents and Settings\jimmy et morgane\Application Data\LimeWire
2008-05-17 20:32 --------- d-----w C:\Program Files\Sun
2008-05-17 20:32 --------- d-----w C:\Program Files\Java
2007-02-08 07:22 7,580 -c--a-w C:\Program Files\Mon thème favori.theme
2006-08-07 22:43 560 -c--a-w C:\Program Files\Global.sw
2005-07-14 11:31 27,648 -csha-r C:\WINDOWS\system32\AVSredirect.dll
2005-06-26 14:32 616,448 -csha-r C:\WINDOWS\system32\cygwin1.dll
2005-06-21 21:37 45,568 -csha-r C:\WINDOWS\system32\cygz.dll
2005-09-10 21:28 573,430 -csha-r C:\WINDOWS\system32\smab.dll
2005-02-28 12:16 240,128 -csha-r C:\WINDOWS\system32\x.264.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 16:18 94208]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-27 15:16 68856]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 20:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 18:04 52736]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-14 05:05 344064]
"HPHUPD08"="c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 08:35 49152]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 01:44 61440]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 23:14 237568]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50 155648]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-01-02 23:51 180269]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 22:47 57344 C:\WINDOWS\ALCXMNTR.EXE]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R3 CAM1210;USB Video Camera Driver v1.53;C:\WINDOWS\system32\Drivers\cam1210.sys [2007-08-30 11:49]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 07:08]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 23:58]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4aba4cb6-e88b-11dc-8d4b-0013d3dee44c}]
\Shell\AutoRun\command - J:\InstallTomTomHOME.exe

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-07-09 17:37:08 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
- - - - ORPHANS REMOVED - - - -

BHO-{5A194C7A-D358-4B17-B6F6-E905187C3E94} - C:\WINDOWS\system32\tuvSjGAr.dll
BHO-{5FF30032-DFE9-4172-906D-8FD1EF406174} - C:\WINDOWS\system32\vtUlKAPf.dll
BHO-{6F191640-5EFB-4026-8DC1-2CE91E74D5AC} - C:\WINDOWS\system32\ddcYpnKe.dll
BHO-{8FCDBA3A-D5C8-4721-95C8-31FE3217B800} - C:\WINDOWS\system32\pmnnkhET.dll
BHO-{9B45EFFF-4913-40EA-AFFD-4CC37975B3E6} - C:\WINDOWS\system32\efcCtqPH.dll
BHO-{9FFE7CAB-EFBE-481F-8220-F770C1B50C95} - C:\WINDOWS\system32\opnlLExw.dll
HKLM-Run-PCDrProfiler - (no file)
HKLM-Run-NWEReboot - (no file)
ShellExecuteHooks-{9FFE7CAB-EFBE-481F-8220-F770C1B50C95} - C:\WINDOWS\system32\opnlLExw.dll
Notify-efcbaxwW - efcbaxwW.dll
Notify-opnlLExw - opnlLExw.dll
Notify-tuvvwttU - tuvvwttU.dll


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-11 17:17:01
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...


**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-07-11 17:20:52 - machine was rebooted [Johan]
ComboFix-quarantined-files.txt 2008-07-11 15:19:47

Pre-Run: 175,198,011,392 octets libres
Post-Run: 176,283,602,944 octets libres

223 --- E O F --- 2008-07-11 15:07:19

Voilà le rapport de Hijackthis après le ménage de ComboFix ^^


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\DOCUME~1\Johan\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe