Un infection et une question

Bonjour,
je voudrais savoir comment apprendre quand une menace integre mon système j'ai fait un petit rapport de virus par la meme occasion =)

voila merci de me repondre

Deckard's System Scanner v20071014.68
Run by Toni on 2008-08-12 18:01:01
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
30: 2008-08-12 16:01:07 UTC - RP30 - Deckard's System Scanner Restore Point
29: 2008-08-12 09:51:47 UTC - RP29 - Installé 1300Trb
28: 2008-08-12 09:51:42 UTC - RP28 - Installé 1300_Help
27: 2008-08-12 09:51:31 UTC - RP27 - Installé 1300Tour
26: 2008-08-12 09:51:22 UTC - RP26 - Installé 1300

-- First Restore Point --
1: 2008-08-07 14:47:47 UTC - RP1 - Point de vérification système

Backed up registry hives.
Performed disk cleanup.

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-08-12 18:02:39
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
C:\Program Files\HP\HP Software Update\hpwuSchd.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\hpzipm12.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BitComet\BitComet.exe
C:\Documents and Settings\Toni\Bureau\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\system32\PAStiSvc.exe

--
End of file - 4870 bytes

-- File Associations -----------------------------------------------------------

All associations okay.

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 sp_rsdrv2 (Spyware Terminator Driver 2) - c:\windows\system32\drivers\sp_rsdrv2.sys

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 sp_rssrv (Spyware Terminator Realtime Shield Service) - "c:\program files\spyware terminator\sp_rsser.exe" <Not Verified; Crawler.com; Crawler Spyware Terminator>

-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: PCI Device
Device ID: PCI\VEN_1002&DEV_AA10&SUBSYS_AA10174B&REV_00\4&35C10ADC&0&0110
Manufacturer:
Name: PCI Device
PNP Device ID: PCI\VEN_1002&DEV_AA10&SUBSYS_AA10174B&REV_00\4&35C10ADC&0&0110
Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Contrôleur de bus SM
Device ID: PCI\VEN_1002&DEV_4372&SUBSYS_D0081631&REV_10\3&267A616A&0&A0
Manufacturer:
Name: Contrôleur de bus SM
PNP Device ID: PCI\VEN_1002&DEV_4372&SUBSYS_D0081631&REV_10\3&267A616A&0&A0
Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Contrôleur multimédia
Device ID: PCI\VEN_1131&DEV_7133&SUBSYS_48571043&REV_D0\4&4680D9B&0&00A4
Manufacturer:
Name: Contrôleur multimédia
PNP Device ID: PCI\VEN_1131&DEV_7133&SUBSYS_48571043&REV_D0\4&4680D9B&0&00A4
Service:

-- Files created between 2008-07-12 and 2008-08-12 -----------------------------

2008-08-12 12:33:44 0 d-------- C:\Documents and Settings\hj h\Application Data\Opera
2008-08-12 11:41:46 44544 -ra------ C:\WINDOWS\system32\MSXML4a.dll <Not Verified; Microsoft Corporation; Microsoft(R) MSXML 4.0 SP1>
2008-08-12 11:41:46 626960 -ra------ C:\WINDOWS\system32\hpvaut32.dll <Not Verified; Microsoft Corporation; >
2008-08-12 11:33:25 2560 --a------ C:\WINDOWS\system32\bitcometres.dll <Not Verified; BitComet; BitComet BCTP Helper>
2008-08-12 11:31:14 0 d-------- C:\Program Files\BitComet
2008-08-12 11:26:23 34480 -----n--- C:\WINDOWS\hpomdl03.dat
2008-08-12 11:26:23 28934 --a------ C:\WINDOWS\hpoins03.dat
2008-08-12 11:17:58 0 d-------- C:\WINDOWS\system32\NtmsData
2008-08-12 10:42:09 0 d---s---- C:\Documents and Settings\hj h\UserData
2008-08-12 10:38:33 0 d-------- C:\Documents and Settings\hj h\Application Data\Macromedia
2008-08-12 10:36:57 0 d-------- C:\Documents and Settings\hj h\Application Data\Adobe
2008-08-12 10:36:18 0 d-------- C:\Documents and Settings\hj h\Contacts
2008-08-12 10:33:06 0 d-------- C:\Documents and Settings\hj h\Application Data\Spyware Terminator
2008-08-12 10:32:34 0 d-------- C:\Documents and Settings\hj h\Application Data\Identities
2008-08-12 10:32:19 0 d--h----- C:\Documents and Settings\hj h\Voisinage réseau
2008-08-12 10:32:19 0 d--h----- C:\Documents and Settings\hj h\Voisinage d'impression
2008-08-12 10:32:19 0 dr-h----- C:\Documents and Settings\hj h\SendTo
2008-08-12 10:32:19 0 dr-h----- C:\Documents and Settings\hj h\Recent
2008-08-12 10:32:19 786432 --ah----- C:\Documents and Settings\hj h\NTUSER.DAT
2008-08-12 10:32:19 0 d--h----- C:\Documents and Settings\hj h\Modèles
2008-08-12 10:32:19 0 dr------- C:\Documents and Settings\hj h\Mes documents
2008-08-12 10:32:19 0 dr------- C:\Documents and Settings\hj h\Menu Démarrer
2008-08-12 10:32:19 0 d--h----- C:\Documents and Settings\hj h\Local Settings
2008-08-12 10:32:19 0 dr------- C:\Documents and Settings\hj h\Favoris
2008-08-12 10:32:19 0 d---s---- C:\Documents and Settings\hj h\Cookies
2008-08-12 10:32:19 0 d-------- C:\Documents and Settings\hj h\Bureau
2008-08-12 10:32:19 0 dr-h----- C:\Documents and Settings\hj h\Application Data
2008-08-12 10:32:19 0 d---s---- C:\Documents and Settings\hj h\Application Data\Microsoft
2008-08-12 09:54:17 0 d-------- C:\WINDOWS\PixArt
2008-08-12 09:54:17 0 d-------- C:\Program Files\Trust
2008-08-12 09:54:17 0 d-------- C:\Program Files\Fichiers communs\PCCamera
2008-08-12 09:53:39 0 d-------- C:\download
2008-08-11 21:16:37 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2008-08-11 12:43:15 0 d-------- C:\Documents and Settings\Toni\Application Data\vlc
2008-08-09 19:25:22 0 d-------- C:\Documents and Settings\Toni\Application Data\SoundSpectrum
2008-08-09 19:22:26 139536 --a------ C:\WINDOWS\system32\javaee.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-08 18:00:37 528384 --a------ C:\WINDOWS\system32\Niagara.scr <Not Verified; ScreensaverShot Inc; >
2008-08-08 11:52:39 0 d-------- C:\Program Files\Copie de Mozilla Firefox
2008-08-08 11:41:57 0 d-------- C:\Program Files\Crawler
2008-08-08 11:40:54 141312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-08-08 11:40:50 0 d-------- C:\Documents and Settings\Toni\Application Data\Spyware Terminator
2008-08-08 11:40:50 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spyware Terminator
2008-08-08 11:40:47 0 d-------- C:\Program Files\Spyware Terminator
2008-08-08 11:14:37 0 d-------- C:\Program Files\a-squared Anti-Malware
2008-08-07 20:04:07 0 d-------- C:\Documents and Settings\Toni\Application Data\Opera
2008-08-07 20:03:50 0 d-------- C:\Program Files\Opera
2008-08-07 18:26:25 0 d--h----- C:\Documents and Settings\Default User.WINDOWS\Voisinage réseau
2008-08-07 18:26:25 0 d--h----- C:\Documents and Settings\Default User.WINDOWS\Voisinage d'impression
2008-08-07 18:26:25 0 dr-h----- C:\Documents and Settings\Default User.WINDOWS\SendTo
2008-08-07 18:26:25 0 d--h----- C:\Documents and Settings\Default User.WINDOWS\Recent
2008-08-07 18:26:25 0 d--h----- C:\Documents and Settings\Default User.WINDOWS\Modèles
2008-08-07 18:26:25 0 d-------- C:\Documents and Settings\Default User.WINDOWS\Mes documents
2008-08-07 18:26:25 0 dr------- C:\Documents and Settings\Default User.WINDOWS\Menu Démarrer
2008-08-07 18:26:25 0 dr-h----- C:\Documents and Settings\Default User.WINDOWS\Local Settings
2008-08-07 18:26:25 0 d-------- C:\Documents and Settings\Default User.WINDOWS\Favoris
2008-08-07 18:26:25 0 d---s---- C:\Documents and Settings\Default User.WINDOWS\Cookies
2008-08-07 18:26:25 0 d-------- C:\Documents and Settings\Default User.WINDOWS\Bureau
2008-08-07 18:26:25 0 d--h----- C:\Documents and Settings\All Users.WINDOWS\Modèles
2008-08-07 18:26:25 0 dr------- C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer
2008-08-07 18:26:25 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Favoris
2008-08-07 18:26:25 0 dr------- C:\Documents and Settings\All Users.WINDOWS\Documents
2008-08-07 18:26:25 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Bureau
2008-08-07 18:24:32 0 dr-h----- C:\Documents and Settings\Default User.WINDOWS\Application Data
2008-08-07 18:24:32 0 d---s---- C:\Documents and Settings\Default User.WINDOWS\Application Data\Microsoft
2008-08-07 18:24:32 0 dr-h----- C:\Documents and Settings\All Users.WINDOWS\Application Data
2008-08-07 18:24:32 0 d---s---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft
2008-08-07 18:24:06 46352 --a------ C:\WINDOWS\setdebug.exe <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:24:05 171280 --a------ C:\WINDOWS\system32\jit.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:24:05 313856 --a------ C:\WINDOWS\system32\dx3j.dll <Not Verified; Microsoft Corporation; Microsoft® DirectX for Java>
2008-08-07 18:24:05 6550 --a------ C:\WINDOWS\jautoexp.dat
2008-08-07 18:23:57 113 --a------ C:\WINDOWS\system32\zonedon.reg
2008-08-07 18:23:57 113 --a------ C:\WINDOWS\system32\zonedoff.reg
2008-08-07 18:23:57 171792 --a------ C:\WINDOWS\system32\wjview.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>
2008-08-07 18:23:57 286992 --a------ C:\WINDOWS\system32\vmhelper.dll <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>
2008-08-07 18:23:56 21264 --a------ C:\WINDOWS\system32\msjdbc10.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:56 947472 --a------ C:\WINDOWS\system32\msjava.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:56 154384 --a------ C:\WINDOWS\system32\msawt.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:56 172304 --a------ C:\WINDOWS\system32\jview.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>
2008-08-07 18:23:56 15120 --a------ C:\WINDOWS\system32\jdbgmgr.exe <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:55 404752 --a------ C:\WINDOWS\system32\javart.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:55 63248 --a------ C:\WINDOWS\system32\javaprxy.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:55 187152 --a------ C:\WINDOWS\system32\javacypt.dll <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>
2008-08-07 18:23:54 49424 --a------ C:\WINDOWS\system32\clspack.exe <Not Verified; Microsoft Corporation; Microsoft(R) Windows (R) Operating System>
2008-08-07 18:23:45 352256 --a------ C:\WINDOWS\msvcr71.dll <Not Verified; Microsoft Corporation; Microsoft® Visual Studio.NET>
2008-08-07 18:23:45 503808 --a------ C:\WINDOWS\msvcp71.dll <Not Verified; Microsoft Corporation; Microsoft® Visual Studio.NET>
2008-08-07 18:22:43 0 d-------- C:\WINDOWS\system32\OFFICE One PDF Manager v6
2008-08-07 18:22:36 103424 --a------ C:\WINDOWS\system32\xc_p2txt.dll <Not Verified; Tracker Software Products; Tracker Software Products PDF2Text Library>
2008-08-07 18:22:36 606720 --a------ C:\WINDOWS\system32\OoPdfManagerPopup.dll
2008-08-07 18:22:35 274432 --a------ C:\WINDOWS\system32\pcl2pdf32.dll <Not Verified; Visual Software; Pcl2pdf>
2008-08-07 18:22:34 145920 --a------ C:\WINDOWS\system32\xc_parse.dll <Not Verified; Tracker Software Products; Tracker Software Products PDF Parser Library>
2008-08-07 18:22:34 109568 --a------ C:\WINDOWS\system32\pdfxcpro.dll <Not Verified; Tracker Software Products; Tracker Software Products PDFxcPro Library>
2008-08-07 18:22:34 185344 --a------ C:\WINDOWS\system32\Img_cdx.dll <Not Verified; Tracker Software Products; Tracker Software Products Codecs Library>
2008-08-07 18:22:33 274432 --a------ C:\WINDOWS\system32\acpdfcrext.dll <Not Verified; Amyuni Technologies Inc. - http://www.amyuni.com; acPDFCrExt Module>
2008-08-07 18:22:33 237568 --a------ C:\WINDOWS\system32\acpdfcrdb.dll <Not Verified; Amyuni Technologies Inc. - http://www.amyuni.com; acPdfCrDb Module>
2008-08-07 18:22:32 1306624 --a------ C:\WINDOWS\system32\pdfcreactivex.dll <Not Verified; Amyuni Technologies Inc. - http://www.amyuni.com; PDFCreactiveX Module>
2008-08-07 18:22:32 360448 --a------ C:\WINDOWS\system32\cdintf.dll <Not Verified; Amyuni Technologies
http://www.amyuni.com; Amyuni Common Driver Interface>
2008-08-07 18:22:32 102624 --a------ C:\WINDOWS\system32\acfpdfui.dll <Not Verified; Amyuni Technologies
http://www.amyuni.com; Amyuni PDF Converter">
2008-08-07 18:22:32 126729 --a------ C:\WINDOWS\system32\acfpdfu.dll <Not Verified; AMYUNI Consultants - AMYUNI Technologies
http://www.amyuni.com; Amyuni PDF Converter>
2008-08-07 18:22:32 194700 --a------ C:\WINDOWS\system32\acfpdf.dll <Not Verified; AMYUNI Consultants - AMYUNI Technologies
http://www.amyuni.com; Amyuni PDF Converter>
2008-08-07 18:18:43 77824 --a------ C:\WINDOWS\uinst001.exe
2008-08-07 17:56:54 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Messenger Plus!
2008-08-07 17:53:30 0 d-------- C:\Program Files\Circle Developement
2008-08-07 17:51:49 0 d-------- C:\Documents and Settings\Toni\Contacts
2008-08-07 17:41:40 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
2008-08-07 17:20:11 96976 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-08-07 17:20:11 87855 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-08-07 17:19:27 227616 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-08-07 17:19:27 4066080 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-08-07 17:19:27 0 d-------- C:\Program Files\Kaspersky Lab
2008-08-07 17:19:27 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2008-08-07 17:18:37 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Lab Setup Files
2008-08-07 17:18:31 0 d-------- C:\Documents and Settings\Toni\Application Data\Macromedia
2008-08-07 17:18:31 0 d-------- C:\Documents and Settings\Toni\Application Data\Adobe
2008-08-07 17:13:30 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Windows Genuine Advantage
2008-08-07 17:09:37 0 d---s---- C:\Documents and Settings\Toni\UserData
2008-08-07 16:55:55 0 --a------ C:\WINDOWS\ativpsrm.bin
2008-08-07 16:53:27 593920 -----n--- C:\WINDOWS\system32\ati2sgag.exe <Not Verified; ; ATI Smart>
2008-08-07 16:47:34 0 d-------- C:\Documents and Settings\Toni\Application Data\Identities
2008-08-07 16:47:13 0 d--h----- C:\Documents and Settings\Toni\Voisinage réseau
2008-08-07 16:47:13 0 d--h----- C:\Documents and Settings\Toni\Voisinage d'impression
2008-08-07 16:47:13 0 dr-h----- C:\Documents and Settings\Toni\SendTo
2008-08-07 16:47:13 0 dr-h----- C:\Documents and Settings\Toni\Recent
2008-08-07 16:47:13 5505024 --ah----- C:\Documents and Settings\Toni\NTUSER.DAT
2008-08-07 16:47:13 0 d--h----- C:\Documents and Settings\Toni\Modèles
2008-08-07 16:47:13 0 dr------- C:\Documents and Settings\Toni\Mes documents
2008-08-07 16:47:13 0 dr------- C:\Documents and Settings\Toni\Menu Démarrer
2008-08-07 16:47:13 0 d--h----- C:\Documents and Settings\Toni\Local Settings
2008-08-07 16:47:13 0 dr------- C:\Documents and Settings\Toni\Favoris
2008-08-07 16:47:13 0 d---s---- C:\Documents and Settings\Toni\Cookies
2008-08-07 16:47:13 0 d-------- C:\Documents and Settings\Toni\Bureau
2008-08-07 16:47:13 0 dr-h----- C:\Documents and Settings\Toni\Application Data
2008-08-07 16:43:58 262144 --ah----- C:\Documents and Settings\LocalService.AUTORITE NT.000\NTUSER.DAT
2008-08-07 16:43:58 0 d--h----- C:\Documents and Settings\LocalService.AUTORITE NT.000\Local Settings
2008-08-07 16:43:58 0 d---s---- C:\Documents and Settings\LocalService.AUTORITE NT.000\Cookies
2008-08-07 16:43:58 0 d-------- C:\Documents and Settings\LocalService.AUTORITE NT.000\Application Data
2008-08-07 16:43:58 0 d---s---- C:\Documents and Settings\LocalService.AUTORITE NT.000\Application Data\Microsoft
2008-08-07 16:43:37 0 d---s---- C:\Documents and Settings\NetworkService.AUTORITE NT.000\Cookies
2008-08-07 16:43:37 0 d-------- C:\Documents and Settings\NetworkService.AUTORITE NT.000\Application Data
2008-08-07 16:43:37 0 d---s---- C:\Documents and Settings\NetworkService.AUTORITE NT.000\Application Data\Microsoft
2008-08-07 16:43:36 229376 --ah----- C:\Documents and Settings\NetworkService.AUTORITE NT.000\NTUSER.DAT
2008-08-07 16:43:36 0 d--h----- C:\Documents and Settings\NetworkService.AUTORITE NT.000\Local Settings
2008-08-07 16:39:26 229376 ---h----- C:\Documents and Settings\Default User.WINDOWS\NTUSER.DAT
2008-08-07 16:38:04 0 d--hs---- C:\Documents and Settings\All Users.WINDOWS\DRM
2008-08-07 16:36:01 21892 --a------ C:\WINDOWS\system32\emptyregdb.dat
2008-08-07 16:35:07 0 d-------- C:\Program Files\Online Services
2008-08-06 14:21:17 0 d-------- C:\Program Files\Navilog1
2008-08-06 12:42:54 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-05 23:46:31 0 d-------- C:\Program Files\MessengerDiscovery
2008-08-05 23:32:51 0 d-------- C:\Program Files\FileZilla FTP Client
2008-08-05 22:13:34 0 d-------- C:\Program Files\Messenger Plus! Live1
2008-08-05 17:10:18 0 d-------- C:\Program Files\KRyLack Password Recovery
2008-08-05 15:47:12 0 d-------- C:\Program Files\Windows Live Password Recovery
2008-08-05 12:41:25 0 d-------- C:\Program Files\Emtec.No
2008-08-05 10:51:08 0 d-------- C:\Program Files\Yahoo!
2008-08-04 18:16:36 0 d-------- C:\Program Files\MSN Spy 2004
2008-08-03 14:41:53 0 d-------- C:\WINDOWS\system32\Lang
2008-08-03 14:24:50 0 d-------- C:\Program Files\PhotoFiltre
2008-07-31 16:22:52 0 d-------- C:\Program Files\Microsoft Bootvis
2008-07-31 11:19:02 0 d--h----- C:\$AVG8.VAULT$
2008-07-31 11:16:42 0 d-------- C:\WINDOWS\system32\drivers\Avg
2008-07-30 13:40:38 0 d-------- C:\WINDOWS\pss
2008-07-27 18:03:32 0 d-------- C:\Program Files\Search Settings
2008-07-27 18:03:24 0 d-------- C:\Program Files\Dealio
2008-07-26 14:53:09 0 d-------- C:\WINDOWS\BricoPacks
2008-07-26 10:09:29 0 d-------- C:\Program Files\SoundSpectrum
2008-07-25 19:13:36 0 d-------- C:\Program Files\Fichiers communs\Hewlett-Packard
2008-07-25 19:11:17 0 d-------- C:\Program Files\Fichiers communs\HP
2008-07-25 19:09:15 0 d-------- C:\WINDOWS\system32\URTTemp
2008-07-25 19:03:41 0 d-------- C:\Program Files\HP
2008-07-25 13:48:04 0 d-------- C:\Program Files\Windows Live Safety Center
2008-07-25 10:54:41 0 d-------- C:\Program Files\Fichiers communs\Adobe AIR
2008-07-25 10:54:05 0 d-------- C:\Program Files\Fichiers communs\Adobe
2008-07-24 22:50:03 0 d-------- C:\Program Files\CODEoDIS
2008-07-24 22:44:53 0 d-------- C:\Program Files\MessengerPlus! 3
2008-07-24 16:25:03 0 d-------- C:\Program Files\VirtualDJ
2008-07-24 12:29:29 0 d-------- C:\WINDOWS\system32\Hancock Screensaver dir
2008-07-23 18:14:11 0 d-------- C:\Program Files\Google
2008-07-23 12:00:21 0 d-------- C:\Program Files\MSXML 4.0
2008-07-23 10:27:25 0 d-------- C:\Program Files\Windows Media Connect 2
2008-07-23 10:26:27 0 d-------- C:\WINDOWS\system32\LogFiles
2008-07-23 10:26:27 0 d-------- C:\WINDOWS\system32\drivers\UMDF
2008-07-23 00:03:04 0 d-------- C:\Program Files\Nero
2008-07-23 00:03:04 0 d-------- C:\Program Files\Fichiers communs\Nero
2008-07-23 00:01:42 0 d-------- C:\WINDOWS\RegisteredPackages
2008-07-22 23:11:31 0 d-------- C:\Program Files\SuperCopier2
2008-07-22 23:03:54 0 d-------- C:\Program Files\NewTech Infosystems
2008-07-22 20:10:46 9710592 --a------ C:\WINDOWS\system32\RTLCPL.EXE <Not Verified; Realtek Semiconductor Corp.; Realtek Audio Sound Effect Manager>
2008-07-22 20:10:45 135168 --a------ C:\WINDOWS\system32\RTLCPAPI.dll <Not Verified; ; RtlCPAPI Module>
2008-07-22 20:10:42 0 d-------- C:\pnp
2008-07-22 14:28:34 0 d-------- C:\Program Files\Lavalys
2008-07-22 13:26:17 0 d-------- C:\Program Files\Eidos
2008-07-22 13:25:11 0 d-------- C:\WINDOWS\system32\xlive
2008-07-22 12:58:43 0 d-------- C:\WINDOWS\system32\PreInstall
2008-07-22 12:58:41 0 d--h----- C:\WINDOWS\$hf_mig$
2008-07-22 11:41:04 262144 --ah----- C:\Documents and Settings\LocalService.AUTORITE NT\NTUSER.DAT
2008-07-22 11:41:04 0 d--h----- C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings
2008-07-22 11:41:04 0 d---s---- C:\Documents and Settings\LocalService.AUTORITE NT\Cookies
2008-07-22 11:41:04 0 d-------- C:\Documents and Settings\LocalService.AUTORITE NT\Application Data
2008-07-22 11:41:04 0 d---s---- C:\Documents and Settings\LocalService.AUTORITE NT\Application Data\Microsoft
2008-07-22 11:40:31 262144 --ah----- C:\Documents and Settings\NetworkService.AUTORITE NT\NTUSER.DAT
2008-07-22 11:40:31 0 d--h----- C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings
2008-07-22 11:40:31 0 d---s---- C:\Documents and Settings\NetworkService.AUTORITE NT\Cookies
2008-07-22 11:40:31 0 d-------- C:\Documents and Settings\NetworkService.AUTORITE NT\Application Data
2008-07-22 11:40:31 0 d---s---- C:\Documents and Settings\NetworkService.AUTORITE NT\Application Data\Microsoft
2008-07-22 09:06:36 0 d-------- C:\WINDOWS\setup.pss
2008-07-21 23:24:50 0 d-------- C:\Downloads
2008-07-21 23:21:06 0 d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-07-21 23:10:35 0 d-------- C:\WINDOWS\Downloaded Installations
2008-07-21 22:19:08 0 d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-07-21 22:17:44 0 d-------- C:\Program Files\DIFX
2008-07-21 20:17:11 0 d-------- C:\WINDOWS\system32\ReinstallBackups
2008-07-21 20:12:35 0 d-------- C:\Program Files\Messenger Plus! Live
2008-07-21 20:00:29 0 d-------- C:\Program Files\Windows Live Favorites
2008-07-21 20:00:26 0 d-------- C:\Program Files\Windows Live Toolbar
2008-07-21 20:00:14 0 d------c- C:\WINDOWS\system32\DRVSTORE

-- Find3M Report ---------------------------------------------------------------

2008-08-12 11:18:39 501546 --a------ C:\WINDOWS\system32\perfh00C.dat
2008-08-12 11:18:39 69140 --a------ C:\WINDOWS\system32\perfc00C.dat
2008-08-12 09:54:17 0 d-------- C:\Program Files\Fichiers communs
2008-08-07 18:26:25 62 --ahs---- C:\Documents and Settings\Toni\Application Data\desktop.ini
2008-08-07 16:57:35 0 d-------- C:\Program Files\ATI
2008-08-07 16:36:27 0 d-------- C:\Program Files\Movie Maker
2008-08-07 16:35:02 0 d-------- C:\Program Files\Messenger
2008-07-21 23:10:35 0 d-------- C:\Program Files\Fichiers communs\InstallShield
2008-07-21 20:00:04 0 d-------- C:\Program Files\Windows Live
2008-07-21 19:59:51 0 d--hs--c- C:\Program Files\Fichiers communs\WindowsLiveInstaller

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [08/02/2008 18:36]
"SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [08/08/2008 11:40]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd.exe" [25/06/2003 11:24]
"DXDllRegExe"="dxdllreg.exe" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [18/10/2007 11:34]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [07/07/2008 09:42]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [04/08/2004 01:07]

C:\Documents and Settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [07/07/2003 01:20:40]

-- Hosts -----------------------------------------------------------------------

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

8972 more entries in hosts file.

-- End of Deckard's System Scanner: finished at 2008-08-12 18:05:00 ------------

Configuration: Windows XP
Internet Explorer 6.0