Probleme config du a un virus

bonjour content de te retrouvé, voila le rapport,Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:47:30, on 11/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\MioNet\MioNetManager.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\WINDOWS\VM_STI.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\sudrie\Menu Démarrer\Programmes\Démarrage\Msecal.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\DOCUME~1\sudrie\LOCALS~1\Temp\SLF11B5.tmp\Alexandra_Ledermann_5_Telecharger{29202}.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Msecal.exe
O4 - Startup: StarOffice 8.lnk = C:\Program Files\Sun\StarOffice 8\program\quickstart.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-1330b6ced0ff2fa5.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

j ai pas touché a la carte graphique t envois ca ok tu veut pas un nvx lops pour voir si j ai bien supp tous les fichier? il me semble que non,Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:09:05, on 11/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\MioNet\MioNetManager.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\WINDOWS\VM_STI.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\sudrie\Menu Démarrer\Programmes\Démarrage\Msecal.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Msecal.exe
O4 - Startup: StarOffice 8.lnk = C:\Program Files\Sun\StarOffice 8\program\quickstart.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-1330b6ced0ff2fa5.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxmultijoueurs.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

regarde quand meme au cas ou sur lops le voila,
--------------------\\ Lop S&D 4.2.4-2 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : sudrie ( Administrator )
BOOT : Normal boot
Antivirus : McAfee VirusScan (Activated)
Firewall : McAfee Personal Firewall (Activated)

"C:\Lop SD" ( MAJ : 08-09-2008|21:40 )
Option : [2] ( 11/09/2008|17:02 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[28/08/2008|01:05] C:\DOCUME~1\19audrey\APPLIC~1\Adobe
[26/08/2008|14:09] C:\DOCUME~1\19audrey\APPLIC~1\Google
[28/08/2008|01:05] C:\DOCUME~1\19audrey\APPLIC~1\Identities
[23/08/2008|19:27] C:\DOCUME~1\19audrey\APPLIC~1\Macromedia
[30/08/2008|13:05] C:\DOCUME~1\19audrey\APPLIC~1\Malwarebytes
[06/09/2008|11:15] C:\DOCUME~1\19audrey\APPLIC~1\Microsoft
[28/08/2008|01:04] C:\DOCUME~1\19audrey\APPLIC~1\Mozilla
[23/08/2008|19:39] C:\DOCUME~1\19audrey\APPLIC~1\PC Suite
[28/08/2008|01:07] C:\DOCUME~1\19audrey\APPLIC~1\Real
[28/08/2008|01:05] C:\DOCUME~1\19audrey\APPLIC~1\SampleView
[25/08/2008|12:46] C:\DOCUME~1\19audrey\APPLIC~1\SiteAdvisor
[09/09/2008|21:00] C:\DOCUME~1\19audrey\APPLIC~1\StarOffice8
[28/08/2008|01:05] C:\DOCUME~1\19audrey\APPLIC~1\Windows Desktop Search
[02/09/2008|20:08] C:\DOCUME~1\19audrey\APPLIC~1\Wyzo

[27/01/2006|06:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[25/08/2006|08:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[25/08/2006|08:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView

[31/08/2008|23:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[30/11/2007|22:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[30/11/2007|22:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[13/08/2008|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
[16/08/2008|02:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Babylon
[30/07/2008|21:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[28/08/2008|01:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[10/09/2008|16:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[08/09/2008|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Installations
[31/07/2008|23:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[05/08/2008|20:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[30/07/2008|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[30/07/2008|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee.com
[08/09/2008|19:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[10/09/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[31/07/2008|19:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
[08/09/2008|19:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nokia
[28/08/2008|23:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
[12/11/2006|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[08/09/2008|18:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
[25/08/2006|07:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Prism Deploy
[02/09/2008|15:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\services
[30/07/2008|13:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SiteAdvisor
[03/09/2008|19:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[10/09/2008|21:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[09/09/2008|18:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SweetIM
[28/08/2008|01:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[07/08/2008|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[02/09/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[04/08/2008|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[19/08/2008|19:19] C:\DOCUME~1\audrey\APPLIC~1\Adobe
[20/08/2008|12:09] C:\DOCUME~1\audrey\APPLIC~1\Google
[27/01/2006|06:25] C:\DOCUME~1\audrey\APPLIC~1\Identities
[19/08/2008|19:19] C:\DOCUME~1\audrey\APPLIC~1\Macromedia
[19/08/2008|19:24] C:\DOCUME~1\audrey\APPLIC~1\Microsoft
[25/08/2006|08:02] C:\DOCUME~1\audrey\APPLIC~1\SampleView
[20/08/2008|11:06] C:\DOCUME~1\audrey\APPLIC~1\SiteAdvisor
[18/08/2008|22:16] C:\DOCUME~1\audrey\APPLIC~1\Windows Desktop Search

[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\Adobe
[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\Google
[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\Identities
[23/08/2008|16:22] C:\DOCUME~1\audrey19\APPLIC~1\Macromedia
[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\Microsoft
[23/08/2008|19:34] C:\DOCUME~1\audrey19\APPLIC~1\PC Suite
[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\SampleView
[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\SiteAdvisor
[28/08/2008|01:05] C:\DOCUME~1\audrey19\APPLIC~1\Windows Desktop Search

[27/01/2006|06:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[25/08/2008|14:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[25/08/2006|08:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[25/08/2006|08:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView

[27/01/2006|06:25] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[20/08/2008|13:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
[25/08/2006|08:02] C:\DOCUME~1\INVIT~1\APPLIC~1\SampleView
[20/08/2008|13:47] C:\DOCUME~1\INVIT~1\APPLIC~1\Windows Desktop Search

[02/09/2008|18:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
[02/09/2008|18:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[10/08/2008|19:37] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[30/08/2008|19:00] C:\DOCUME~1\LOCALS~1\APPLIC~1\Mozilla
[30/07/2008|13:59] C:\DOCUME~1\LOCALS~1\APPLIC~1\SiteAdvisor
[02/09/2008|18:17] C:\DOCUME~1\LOCALS~1\APPLIC~1\Wyzo

[18/08/2008|12:13] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[18/08/2008|12:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\SiteAdvisor

[06/09/2008|02:31] C:\DOCUME~1\sudrie\APPLIC~1\Adobe
[10/10/2006|22:43] C:\DOCUME~1\sudrie\APPLIC~1\AdobeUM
[07/10/2006|14:53] C:\DOCUME~1\sudrie\APPLIC~1\Ahead
[19/08/2008|11:23] C:\DOCUME~1\sudrie\APPLIC~1\Apple Computer
[13/08/2008|15:25] C:\DOCUME~1\sudrie\APPLIC~1\AVS4YOU
[07/08/2008|19:05] C:\DOCUME~1\sudrie\APPLIC~1\Babylon
[14/04/2008|04:34] C:\DOCUME~1\sudrie\APPLIC~1\CONFIG
[11/08/2007|01:04] C:\DOCUME~1\sudrie\APPLIC~1\Creative
[10/10/2006|22:25] C:\DOCUME~1\sudrie\APPLIC~1\CyberLink
[28/08/2008|14:34] C:\DOCUME~1\sudrie\APPLIC~1\Desktopicon
[27/08/2008|18:47] C:\DOCUME~1\sudrie\APPLIC~1\EoRezo
[12/08/2008|17:21] C:\DOCUME~1\sudrie\APPLIC~1\Google
[12/08/2008|17:57] C:\DOCUME~1\sudrie\APPLIC~1\Grammatica
[10/08/2007|20:46] C:\DOCUME~1\sudrie\APPLIC~1\Help
[27/01/2006|06:25] C:\DOCUME~1\sudrie\APPLIC~1\Identities
[28/08/2008|02:28] C:\DOCUME~1\sudrie\APPLIC~1\InstallShield
[24/01/2007|17:54] C:\DOCUME~1\sudrie\APPLIC~1\InterTrust
[30/07/2008|16:22] C:\DOCUME~1\sudrie\APPLIC~1\ItsLabel
[21/04/2007|17:31] C:\DOCUME~1\sudrie\APPLIC~1\La Bataille pour la Terre du Milieu
[02/09/2008|02:40] C:\DOCUME~1\sudrie\APPLIC~1\LimeWire
[06/09/2008|02:31] C:\DOCUME~1\sudrie\APPLIC~1\Macromedia
[05/08/2008|20:38] C:\DOCUME~1\sudrie\APPLIC~1\Malwarebytes
[18/08/2008|02:30] C:\DOCUME~1\sudrie\APPLIC~1\Microsoft
[28/08/2008|01:04] C:\DOCUME~1\sudrie\APPLIC~1\Mozilla
[30/07/2008|13:24] C:\DOCUME~1\sudrie\APPLIC~1\MSNInstaller
[07/04/2008|19:04] C:\DOCUME~1\sudrie\APPLIC~1\Nokia
[08/09/2008|20:24] C:\DOCUME~1\sudrie\APPLIC~1\Nokia Multimedia Player
[08/09/2008|18:46] C:\DOCUME~1\sudrie\APPLIC~1\PC Suite
[15/06/2008|10:58] C:\DOCUME~1\sudrie\APPLIC~1\PCSuiteMMSTemp
[01/09/2008|02:43] C:\DOCUME~1\sudrie\APPLIC~1\Real
[25/08/2006|08:02] C:\DOCUME~1\sudrie\APPLIC~1\SampleView
[08/08/2008|00:16] C:\DOCUME~1\sudrie\APPLIC~1\SecuROM
[27/08/2008|18:14] C:\DOCUME~1\sudrie\APPLIC~1\SiteAdvisor
[03/09/2008|19:46] C:\DOCUME~1\sudrie\APPLIC~1\skypePM
[11/09/2008|12:17] C:\DOCUME~1\sudrie\APPLIC~1\StarOffice8
[08/04/2007|14:00] C:\DOCUME~1\sudrie\APPLIC~1\Sun
[26/06/2007|18:34] C:\DOCUME~1\sudrie\APPLIC~1\Template
[07/10/2006|13:59] C:\DOCUME~1\sudrie\APPLIC~1\vlc
[31/07/2008|14:08] C:\DOCUME~1\sudrie\APPLIC~1\Windows Desktop Search
[20/08/2008|14:26] C:\DOCUME~1\sudrie\APPLIC~1\Windows Live Writer
[31/07/2008|14:08] C:\DOCUME~1\sudrie\APPLIC~1\Windows Search

[04/09/2008|01:50] C:\DOCUME~1\toto19\APPLIC~1\Adobe
[04/09/2008|03:05] C:\DOCUME~1\toto19\APPLIC~1\Google
[27/01/2006|06:25] C:\DOCUME~1\toto19\APPLIC~1\Identities
[25/08/2008|14:28] C:\DOCUME~1\toto19\APPLIC~1\Macromedia
[08/09/2008|14:22] C:\DOCUME~1\toto19\APPLIC~1\Malwarebytes
[10/09/2008|02:21] C:\DOCUME~1\toto19\APPLIC~1\Microsoft
[05/09/2008|13:14] C:\DOCUME~1\toto19\APPLIC~1\Mozilla
[08/09/2008|23:08] C:\DOCUME~1\toto19\APPLIC~1\PC Suite
[02/09/2008|16:33] C:\DOCUME~1\toto19\APPLIC~1\Real
[25/08/2006|08:02] C:\DOCUME~1\toto19\APPLIC~1\SampleView
[04/09/2008|03:05] C:\DOCUME~1\toto19\APPLIC~1\SiteAdvisor
[09/09/2008|01:40] C:\DOCUME~1\toto19\APPLIC~1\Sun
[02/09/2008|16:33] C:\DOCUME~1\toto19\APPLIC~1\Windows Desktop Search

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[11/09/2008 16:29][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[05/09/2008 13:58][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/09/2008 18:00][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[15/08/2008 01:25][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/09/2008 01:06][--a------] C:\WINDOWS\tasks\McQcTask.job
[11/09/2008 12:14][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 21:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[15/08/2008|11:08] C:\Program Files\_uninstallation_info
[01/09/2008|02:54] C:\Program Files\Adobe
[25/08/2006|08:01] C:\Program Files\AMD Live!
[15/08/2008|10:43] C:\Program Files\Apple Software Update
[01/09/2008|23:12] C:\Program Files\Artefacts Studio
[30/08/2008|14:58] C:\Program Files\Atari
[27/06/2007|20:00] C:\Program Files\Audible
[25/08/2006|08:01] C:\Program Files\BigFix
[14/08/2008|15:19] C:\Program Files\Bonjour
[01/09/2008|15:11] C:\Program Files\Boonty
[11/09/2008|16:59] C:\Program Files\BoontyGames
[04/08/2008|18:44] C:\Program Files\CCleaner
[22/09/2007|17:43] C:\Program Files\Codemasters
[28/08/2008|01:07] C:\Program Files\Controle Parental
[08/12/2007|11:43] C:\Program Files\Creative
[27/06/2007|19:57] C:\Program Files\Creative Installation Information
[28/08/2008|01:01] C:\Program Files\Cyanide
[28/08/2008|01:04] C:\Program Files\CyberLink
[28/08/2008|02:21] C:\Program Files\Diablo II
[25/08/2006|07:50] C:\Program Files\DIFX
[25/08/2006|07:53] C:\Program Files\Digital Media Reader
[07/10/2006|14:51] C:\Program Files\directx
[16/08/2008|11:45] C:\Program Files\DNA
[28/08/2008|01:01] C:\Program Files\EA GAMES
[28/08/2008|01:04] C:\Program Files\EA SPORTS
[28/08/2008|01:07] C:\Program Files\Eidos
[24/08/2008|21:36] C:\Program Files\eMule
[03/09/2008|19:52] C:\Program Files\Fichiers communs
[21/10/2006|16:20] C:\Program Files\GameShadow
[30/08/2008|15:02] C:\Program Files\GameSpy Arcade
[28/08/2008|01:06] C:\Program Files\Google
[25/08/2006|08:01] C:\Program Files\gtw_logo
[30/08/2008|18:44] C:\Program Files\InstallShield Installation Information
[28/08/2008|01:06] C:\Program Files\Internet Explorer
[14/08/2008|15:20] C:\Program Files\iPod
[14/08/2008|15:20] C:\Program Files\iTunes
[29/08/2008|02:26] C:\Program Files\Java
[09/09/2008|12:20] C:\Program Files\JkDefrag
[28/08/2008|01:04] C:\Program Files\L'EntraŒneur 2006
[30/07/2008|14:11] C:\Program Files\LimeWire
[03/09/2008|20:02] C:\Program Files\Malwarebytes' Anti-Malware
[18/01/2008|19:21] C:\Program Files\MC2
[10/09/2008|23:38] C:\Program Files\McAfee
[30/07/2008|14:01] C:\Program Files\McAfee.com
[25/08/2006|07:59] C:\Program Files\Microsoft Digital Image 2006
[27/01/2006|06:21] C:\Program Files\microsoft frontpage
[24/11/2007|13:48] C:\Program Files\Microsoft Games
[09/07/2007|18:24] C:\Program Files\Microsoft Office
[09/07/2007|18:24] C:\Program Files\Microsoft Visual Studio
[09/07/2007|18:20] C:\Program Files\Microsoft Visual Studio 8
[10/09/2008|11:29] C:\Program Files\Microsoft Works
[09/07/2007|18:23] C:\Program Files\Microsoft.NET
[11/09/2008|17:02] C:\Program Files\MioNet
[07/08/2008|03:44] C:\Program Files\Movie Maker
[11/09/2008|16:41] C:\Program Files\Mozilla Firefox
[09/07/2007|18:24] C:\Program Files\MSBuild
[27/01/2006|06:15] C:\Program Files\MSN Gaming Zone
[31/07/2008|19:02] C:\Program Files\MSXML 4.0
[08/09/2008|19:37] C:\Program Files\MSXML 6.0
[21/01/2007|01:46] C:\Program Files\neodivx2006
[07/10/2006|14:03] C:\Program Files\Nero
[07/08/2008|03:41] C:\Program Files\NetMeeting
[08/09/2008|19:38] C:\Program Files\Nokia
[10/09/2008|18:00] C:\Program Files\Norton Security Scan
[07/10/2006|14:34] C:\Program Files\Norton SystemWorks
[28/08/2008|23:21] C:\Program Files\NOS
[27/01/2006|06:16] C:\Program Files\Online Services
[28/08/2008|01:05] C:\Program Files\Orange
[07/08/2008|12:01] C:\Program Files\Outlook Express
[16/03/2008|18:50] C:\Program Files\PC Connectivity Solution
[30/08/2008|18:44] C:\Program Files\Philips
[29/08/2008|17:43] C:\Program Files\Picasa2
[14/08/2008|15:18] C:\Program Files\QuickTime
[25/08/2008|16:15] C:\Program Files\Real
[25/08/2006|07:58] C:\Program Files\Realtek
[14/08/2008|15:05] C:\Program Files\Safari
[28/08/2008|02:28] C:\Program Files\SAGEM
[28/08/2008|01:05] C:\Program Files\SAGEM(2)
[03/09/2008|15:30] C:\Program Files\scrabbleproB1.0.8
[27/01/2006|06:19] C:\Program Files\Services en ligne
[31/07/2008|19:21] C:\Program Files\SiteAdvisor
[02/09/2008|17:58] C:\Program Files\Spybot - Search & Destroy
[07/08/2008|18:45] C:\Program Files\StofWare
[25/08/2008|17:02] C:\Program Files\Sun
[09/09/2008|18:56] C:\Program Files\SweetIM
[27/08/2008|12:13] C:\Program Files\Trend Micro
[28/08/2008|01:04] C:\Program Files\Ubisoft
[27/01/2006|06:25] C:\Program Files\Uninstall Information
[31/08/2008|00:34] C:\Program Files\Unlocker
[07/10/2006|13:59] C:\Program Files\VideoLAN
[31/07/2008|14:01] C:\Program Files\Windows Desktop Search
[28/08/2008|01:06] C:\Program Files\Windows Live
[28/08/2008|01:06] C:\Program Files\Windows Live Favorites
[28/08/2008|01:06] C:\Program Files\Windows Live Toolbar
[09/08/2008|09:57] C:\Program Files\Windows Media Connect 2
[07/08/2008|15:37] C:\Program Files\Windows Media Player
[07/08/2008|03:41] C:\Program Files\Windows NT
[27/01/2006|06:16] C:\Program Files\Windows Plus
[27/01/2006|06:19] C:\Program Files\WindowsUpdate
[27/01/2006|06:21] C:\Program Files\xerox
[04/08/2008|18:44] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[31/08/2008|23:26] C:\Program Files\Fichiers communs\Adobe
[07/10/2006|14:03] C:\Program Files\Fichiers communs\Ahead
[30/11/2007|22:38] C:\Program Files\Fichiers communs\Apple
[28/08/2008|01:06] C:\Program Files\Fichiers communs\AVSMedia
[01/09/2008|21:27] C:\Program Files\Fichiers communs\BOONTY Shared
[27/06/2007|19:57] C:\Program Files\Fichiers communs\Creative
[09/07/2007|18:24] C:\Program Files\Fichiers communs\DESIGNER
[30/07/2008|12:16] C:\Program Files\Fichiers communs\France Telecom
[25/08/2006|07:55] C:\Program Files\Fichiers communs\InstallShield
[25/08/2008|13:31] C:\Program Files\Fichiers communs\Java
[31/07/2008|23:34] C:\Program Files\Fichiers communs\Macrovision Shared
[30/07/2008|13:56] C:\Program Files\Fichiers communs\McAfee
[28/08/2008|00:58] C:\Program Files\Fichiers communs\Microsoft Shared
[27/01/2006|06:18] C:\Program Files\Fichiers communs\MSSoap
[25/08/2006|07:50] C:\Program Files\Fichiers communs\New Boundary
[08/09/2008|19:36] C:\Program Files\Fichiers communs\Nokia
[26/01/2006|22:10] C:\Program Files\Fichiers communs\ODBC
[16/03/2008|18:50] C:\Program Files\Fichiers communs\PCSuite
[28/08/2008|01:04] C:\Program Files\Fichiers communs\Real
[25/08/2008|12:07] C:\Program Files\Fichiers communs\Services
[26/01/2006|22:10] C:\Program Files\Fichiers communs\SpeechEngines
[03/09/2008|18:00] C:\Program Files\Fichiers communs\Symantec Shared
[07/08/2008|12:01] C:\Program Files\Fichiers communs\System
[14/08/2008|14:22] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[28/08/2008|01:06] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 73 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-11 17:04:52
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 347

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:39][D:12]-> C:\DOCUME~1\sudrie\LOCALS~1\Temp
[F:51][D:0]-> C:\DOCUME~1\sudrie\Cookies
[F:2030][D:5]-> C:\DOCUME~1\sudrie\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 10/09/2008|19:17 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 10/09/2008|19:49 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - 11/09/2008| 0:33 - Option : [2]
4 - "C:\Lop SD\LopR_4.txt" - 11/09/2008|17:05 - Option : [2]

--------------------\\ Fin du rapport a 17:05:51

je savais pas tout sa hic merde j y vais plus sweet im je sais pas comment il é arrivéla é je c pas comment l enlever bon je vais faire c que tu ma dit a toute a l heure

bon voila j ai tous ce que tu ma dit je te colle le rapport log, sweetim par contre é tjr sur firefox pourtant j ai fait comme ta dit,Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1141
Windows 5.1.2600 Service Pack 3

11/09/2008 18:39:46
mbam-log-2008-09-11 (18-39-46).txt

Type de recherche: Examen complet (C:\|H:\|)
Eléments examinés: 157310
Temps écoulé: 47 minute(s), 0 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9b71d88c-c598-4935-c5d1-43aa4db90836} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Bifrost (Backdoor.Bifrose) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Bifrost (Backdoor.Bifrose) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders (Broken.SecurityProviders) -> Bad: (msapsspc.dll schannel.dll digest.dll msnsspc.dll) Good: (msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\scrfile\shell\open\command\ (Broken.OpenCommand) -> Bad: ("%1" %*) Good: ("%1" /S) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

voila le rapport combofix,ComboFix 08-09-10.04 - sudrie 2008-09-11 19:14:40.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.500 [GMT 2:00]
Endroit: C:\Documents and Settings\sudrie\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
* Resident AV is active


[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\update.exe
H:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-08-11 to 2008-09-11 ))))))))))))))))))))))))))))))))))))
.

2008-09-11 18:53 . <REP> C:\WINDOWS\LastGood.Tmp
2008-09-10 23:10 . 2008-09-10 23:10 <REP> d-------- C:\!KillBox
2008-09-10 19:15 . 2008-09-11 17:05 <REP> d-------- C:\Lop SD
2008-09-10 18:46 . 2008-09-10 18:46 <REP> d-------- C:\_OTMoveIt
2008-09-10 17:41 . 2008-09-10 17:41 3,190 --a------ C:\Documents and Settings\Orph.egd
2008-09-10 17:40 . 2008-09-10 17:41 <REP> d-------- C:\ToolBar SD
2008-09-10 16:13 . 2008-09-10 16:13 579,584 --a--c--- C:\WINDOWS\system32\dllcache\user32.dll
2008-09-10 16:12 . 2008-09-10 16:12 <REP> d-------- C:\WINDOWS\ERUNT
2008-09-10 16:00 . 2008-09-10 16:20 <REP> d-------- C:\SDFix
2008-09-10 15:26 . 2008-09-10 15:26 <REP> d-------- C:\VundoFix Backups
2008-09-09 18:56 . 2008-09-11 18:47 <REP> d-------- C:\Program Files\SweetIM
2008-09-09 18:56 . 2008-09-09 18:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SweetIM
2008-09-08 23:08 . 2008-09-08 23:08 <REP> d-------- C:\Documents and Settings\toto19\Application Data\PC Suite
2008-09-08 20:26 . 2008-09-08 20:26 244 --ah----- C:\sqmnoopt01.sqm
2008-09-08 20:26 . 2008-09-08 20:26 232 --ah----- C:\sqmdata01.sqm
2008-09-08 19:48 . 2008-04-13 20:45 26,112 --a------ C:\WINDOWS\system32\drivers\usbser.sys
2008-09-08 19:48 . 2008-04-13 20:45 26,112 --a--c--- C:\WINDOWS\system32\dllcache\usbser.sys
2008-09-08 19:48 . 2008-09-08 19:48 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-09-08 19:48 . 2008-09-08 19:48 0 --ah----- C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-09-08 19:42 . 2008-09-08 19:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Nokia
2008-09-08 19:38 . 2008-05-07 07:39 1,419,232 --a------ C:\WINDOWS\system32\wdfcoinstaller01005.dll
2008-09-08 19:38 . 2008-05-07 07:38 659,968 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
2008-09-08 19:38 . 2008-05-07 07:38 20,864 --a------ C:\WINDOWS\system32\drivers\ccdcmbo.sys
2008-09-08 19:38 . 2008-05-07 07:38 17,536 --a------ C:\WINDOWS\system32\drivers\ccdcmb.sys
2008-09-08 19:38 . 2008-05-07 07:38 8,064 --a------ C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2008-09-08 19:38 . 2008-06-06 09:24 8,064 --a------ C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2008-09-08 19:37 . 2008-09-08 19:37 <REP> d-------- C:\Program Files\MSXML 6.0
2008-09-08 19:03 . 2008-09-08 20:34 1,025,654 --a------ C:\WINDOWS\setupapi.log.2.old
2008-09-08 19:03 . 2008-09-09 04:15 1,025,031 --a------ C:\WINDOWS\setupapi.log.9.old
2008-09-08 19:03 . 2008-09-09 03:08 1,025,031 --a------ C:\WINDOWS\setupapi.log.8.old
2008-09-08 19:03 . 2008-09-09 02:02 1,025,031 --a------ C:\WINDOWS\setupapi.log.7.old
2008-09-08 19:03 . 2008-09-08 23:52 1,025,022 --a------ C:\WINDOWS\setupapi.log.5.old
2008-09-08 19:03 . 2008-09-09 00:58 1,024,995 --a------ C:\WINDOWS\setupapi.log.6.old
2008-09-08 19:03 . 2008-09-08 22:46 1,024,430 --a------ C:\WINDOWS\setupapi.log.4.old
2008-09-08 19:03 . 2008-09-08 21:43 1,024,278 --a------ C:\WINDOWS\setupapi.log.3.old
2008-09-08 14:22 . 2008-09-08 14:22 <REP> d-------- C:\Documents and Settings\toto19\Application Data\Malwarebytes
2008-09-04 03:05 . 2008-09-04 03:05 <REP> d-------- C:\Documents and Settings\toto19\Application Data\SiteAdvisor
2008-09-03 18:44 . 2008-09-03 18:44 230 --a------ C:\config.xml
2008-09-03 18:29 . 2008-09-03 18:29 <REP> d-------- C:\temp
2008-09-03 15:30 . 2008-09-03 15:30 <REP> d-------- C:\Program Files\scrabbleproB1.0.8
2008-09-03 15:30 . 2004-03-08 23:00 124,688 --a------ C:\WINDOWS\system32\MSWINSCK.OCX
2008-09-03 15:30 . 2000-10-01 23:00 119,568 --a------ C:\WINDOWS\system32\VB6FR.DLL
2008-09-03 15:30 . 2002-03-13 16:46 53,248 --a------ C:\WINDOWS\system32\zlib.dll
2008-09-03 12:56 . 2008-09-03 12:56 104,815 --a------ C:\WINDOWS\ms32.exe
2008-09-02 18:16 . 2008-09-02 18:16 <REP> d-------- C:\Documents and Settings\LocalService\Mes documents
2008-09-02 18:16 . 2008-09-02 18:16 <REP> dr------- C:\Documents and Settings\LocalService\Favoris
2008-09-02 18:16 . 2008-09-02 18:17 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\Wyzo
2008-09-02 17:54 . 2008-09-02 17:58 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-09-02 17:54 . 2008-09-10 21:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-09-02 16:35 . 2008-09-02 16:40 <REP> d-------- C:\Documents and Settings\toto19\Contacts
2008-09-02 16:33 . 2008-09-02 16:33 <REP> d-------- C:\Documents and Settings\toto19\Application Data\Windows Desktop Search
2008-09-02 16:31 . 2006-01-27 08:00 <REP> d-------- C:\Documents and Settings\toto19\WINDOWS
2008-09-02 16:31 . 2006-01-26 22:10 <REP> d--h----- C:\Documents and Settings\toto19\Voisinage r‚seau
2008-09-02 16:31 . 2006-01-26 22:10 <REP> d--h----- C:\Documents and Settings\toto19\Voisinage d'impression
2008-09-02 16:31 . 2006-01-27 06:15 <REP> d--h----- C:\Documents and Settings\toto19\ModŠles
2008-09-02 16:31 . 2008-09-02 16:40 <REP> dr------- C:\Documents and Settings\toto19\Mes documents
2008-09-02 16:31 . 2006-08-25 15:45 <REP> dr------- C:\Documents and Settings\toto19\Menu D‚marrer
2008-09-02 16:31 . 2008-09-02 16:32 <REP> dr------- C:\Documents and Settings\toto19\Favoris
2008-09-02 16:31 . 2008-09-02 16:32 <REP> d-------- C:\Documents and Settings\toto19\Bureau
2008-09-02 16:31 . 2006-08-25 08:02 <REP> d-------- C:\Documents and Settings\toto19\Application Data\SampleView
2008-09-02 16:31 . 2008-09-11 16:03 <REP> d-------- C:\Documents and Settings\toto19
2008-09-02 15:25 . 2008-09-02 15:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\services
2008-09-01 23:12 . 2008-09-01 23:12 <REP> d-------- C:\Program Files\Artefacts Studio
2008-09-01 21:27 . 2008-09-01 21:27 <REP> d-------- C:\Program Files\Fichiers communs\BOONTY Shared
2008-09-01 16:04 . 2008-09-01 19:47 <REP> d-------- C:\Games
2008-09-01 15:11 . 2008-09-11 16:59 <REP> d-------- C:\Program Files\BoontyGames
2008-09-01 15:11 . 2008-09-01 15:11 <REP> d-------- C:\Program Files\Boonty
2008-08-31 00:29 . 2008-08-31 00:28 163,840 --a------ C:\WINDOWS\UninstVDSFDemo.exe
2008-08-30 18:44 . 2008-08-30 18:44 <REP> d-------- C:\Program Files\Philips
2008-08-30 18:44 . 2008-09-11 17:02 <REP> d-------- C:\Program Files\MioNet
2008-08-30 18:44 . 2004-12-18 09:58 245,820 --a------ C:\WINDOWS\system32\VM31bPrp.Ax
2008-08-30 18:44 . 2002-08-22 16:34 147,456 --a------ C:\WINDOWS\VMCap.exe
2008-08-30 18:44 . 2005-02-26 16:25 91,527 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
2008-08-30 18:44 . 2003-05-15 17:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
2008-08-30 18:44 . 2004-04-26 15:48 53,248 --a------ C:\WINDOWS\amcap.exe
2008-08-30 18:44 . 2004-06-09 15:37 40,960 --a------ C:\WINDOWS\VM_STI.EXE
2008-08-30 14:58 . 2008-08-30 15:02 <REP> d-------- C:\Program Files\GameSpy Arcade
2008-08-30 14:58 . 2008-08-30 14:58 <REP> d-------- C:\Program Files\Atari
2008-08-30 13:42 . 2008-08-31 14:26 <REP> d--h----- C:\Documents and Settings\19audrey\Voisinage r‚seau
2008-08-28 23:08 . 2008-08-28 23:21 <REP> d-------- C:\Program Files\NOS
2008-08-28 23:08 . 2008-08-28 23:21 <REP> d-------- C:\Documents and Settings\All Users\Application Data\NOS
2008-08-28 02:28 . 2008-08-28 02:28 <REP> d-------- C:\Program Files\SAGEM
2008-08-28 02:28 . 2008-08-28 02:28 <REP> d-------- C:\Documents and Settings\sudrie\Application Data\InstallShield
2008-08-28 01:07 . 2008-08-28 14:34 <REP> d-------- C:\Documents and Settings\sudrie\Application Data\Desktopicon
2008-08-28 01:07 . 2008-08-28 01:07 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-08-28 01:06 . 2008-08-28 01:06 <REP> d-------- C:\WINDOWS\system32\IOSUBSYS
2008-08-28 01:06 . 2008-08-28 01:06 <REP> d-------- C:\Program Files\Windows Live Favorites
2008-08-28 01:06 . 2008-08-28 01:06 <REP> d-------- C:\Program Files\Fichiers communs\xing shared
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d-------- C:\Documents and Settings\audrey19\WINDOWS
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d--h----- C:\Documents and Settings\audrey19\Voisinage d'impression
2008-08-28 01:05 . 2008-08-28 01:05 <REP> dr------- C:\Documents and Settings\audrey19\Menu D‚marrer
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d-------- C:\Documents and Settings\audrey19\Bureau
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d-------- C:\Documents and Settings\audrey19\Application Data\Windows Desktop Search
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d-------- C:\Documents and Settings\audrey19\Application Data\SiteAdvisor
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d-------- C:\Documents and Settings\audrey19\Application Data\SampleView
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d-------- C:\Documents and Settings\19audrey\WINDOWS
2008-08-28 01:05 . 2008-08-28 01:05 <REP> d--h----- C:\Documents and Settings\19audrey\Voisinage d'impression
2008-08-28 01:05 . 2008-08-28 01:05 <REP> dr------- C:\Documents and Settings\19audrey\Menu D‚marrer
2008-08-28 01:05 . 2008-08-30 13:11 <REP> d-------- C:\Documents and Settings\19audrey\Bureau
2008-08-27 23:56 . 2008-08-28 01:07 <REP> d-------- C:\Program Files\Controle Parental
2008-08-27 18:38 . 2008-08-28 01:05 <REP> d-------- C:\Program Files\SAGEM(2)
2008-08-27 16:08 . 2008-09-11 17:49 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-27 16:08 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-27 16:08 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-27 15:28 . 2008-08-27 15:28 <REP> d-------- C:\Documents and Settings\sudrie\DoctorWeb
2008-08-27 14:03 . 2008-08-31 00:34 <REP> d-------- C:\Program Files\Unlocker
2008-08-27 12:13 . 2008-08-27 12:13 <REP> d-------- C:\Program Files\Trend Micro
2008-08-26 17:12 . 2008-09-11 12:17 <REP> d-------- C:\Documents and Settings\sudrie\Application Data\StarOffice8
2008-08-25 17:39 . 2008-09-03 19:46 <REP> d-------- C:\Documents and Settings\sudrie\Application Data\skypePM
2008-08-25 17:39 . 2008-08-25 17:39 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-08-25 17:02 . 2008-08-25 17:02 <REP> d-------- C:\Program Files\Sun
2008-08-25 16:18 . 2008-09-03 19:52 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype
2008-08-25 16:15 . 2008-08-25 16:15 <REP> d-------- C:\Program Files\Real
2008-08-25 16:15 . 2008-08-28 01:04 <REP> d-------- C:\Program Files\Fichiers communs\Real
2008-08-25 16:10 . 2008-08-29 17:43 <REP> d-------- C:\Program Files\Picasa2
2008-08-25 16:10 . 2006-10-05 04:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-08-25 16:10 . 2006-10-05 04:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-08-25 13:33 . 2008-08-29 02:26 <REP> d-------- C:\Program Files\Java
2008-08-25 13:33 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-08-25 13:31 . 2008-08-25 13:31 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-08-25 13:26 . 2008-09-11 17:45 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Google Updater
2008-08-25 13:13 . 2008-08-28 01:06 <REP> d-------- C:\Program Files\Windows Live Toolbar
2008-08-25 01:18 . 2008-08-25 01:18 0 --a------ C:\WINDOWS\system32\REN45.tmp
2008-08-25 01:18 . 2008-08-25 01:18 0 --a------ C:\WINDOWS\system32\REN44.tmp
2008-08-25 01:18 . 2008-08-25 01:18 0 --a------ C:\WINDOWS\system32\REN43.tmp

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-11 17:17 55,629 ----a-w C:\WINDOWS\update.exe
2008-09-10 21:38 --------- d-----w C:\Program Files\McAfee
2008-09-10 16:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-09-10 09:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-09-10 09:29 --------- d-----w C:\Program Files\Microsoft Works
2008-09-09 10:20 --------- d-----w C:\Program Files\JkDefrag
2008-09-08 18:24 --------- d-----w C:\Documents and Settings\sudrie\Application Data\Nokia Multimedia Player
2008-09-08 17:38 --------- d-----w C:\Program Files\Nokia
2008-09-08 17:36 --------- d-----w C:\Program Files\Fichiers communs\Nokia
2008-09-08 17:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Installations
2008-09-08 16:46 --------- d-----w C:\Documents and Settings\sudrie\Application Data\PC Suite
2008-09-08 16:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\PC Suite
2008-09-03 16:00 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-09-02 00:40 --------- d-----w C:\Documents and Settings\sudrie\Application Data\LimeWire
2008-08-31 21:26 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-08-30 16:44 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-28 00:21 --------- d-----w C:\Program Files\Diablo II
2008-08-27 23:07 --------- d-----w C:\Program Files\Eidos
2008-08-27 23:06 --------- d-----w C:\Program Files\Google
2008-08-27 23:05 --------- d-----w C:\Program Files\Orange
2008-08-27 23:04 --------- d-----w C:\Program Files\Ubisoft
2008-08-27 23:04 --------- d-----w C:\Program Files\L'Entraîneur 2006
2008-08-27 23:04 --------- d-----w C:\Program Files\EA SPORTS
2008-08-27 23:04 --------- d-----w C:\Program Files\CyberLink
2008-08-27 23:01 --------- d-----w C:\Program Files\EA GAMES
2008-08-27 23:01 --------- d-----w C:\Program Files\Cyanide
2008-08-27 16:47 --------- d-----w C:\Documents and Settings\sudrie\Application Data\EoRezo
2008-08-27 16:14 --------- d-----w C:\Documents and Settings\sudrie\Application Data\SiteAdvisor
2008-08-24 19:36 --------- d-----w C:\Program Files\eMule
2008-08-19 09:23 --------- d-----w C:\Documents and Settings\sudrie\Application Data\Apple Computer
2008-08-16 09:45 --------- d-----w C:\Program Files\DNA
2008-08-16 00:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Babylon
2008-08-15 08:43 --------- d-----w C:\Program Files\Apple Software Update
2008-08-14 13:20 --------- d-----w C:\Program Files\iTunes
2008-08-14 13:20 --------- d-----w C:\Program Files\iPod
2008-08-14 13:18 --------- d-----w C:\Program Files\QuickTime
2008-08-09 07:57 --------- d-----w C:\Program Files\Windows Media Connect 2
2008-08-07 22:16 --------- d--h--r C:\Documents and Settings\sudrie\Application Data\SecuROM
2008-08-07 17:05 --------- d-----w C:\Documents and Settings\sudrie\Application Data\Babylon
2008-08-07 16:45 --------- d-----w C:\Program Files\StofWare
2008-08-05 18:38 --------- d-----w C:\Documents and Settings\sudrie\Application Data\Malwarebytes
2008-08-05 18:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-04 16:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-08-04 16:44 --------- d-----w C:\Program Files\Yahoo!
2008-08-04 16:44 --------- d-----w C:\Program Files\CCleaner
2008-07-31 21:34 54,784 ----a-w C:\WINDOWS\system32\drivers\CDAC11BA.EXE
2008-07-31 21:34 12,464 ----a-w C:\WINDOWS\system32\drivers\CdaC15BA.SYS
2008-07-31 21:34 --------- d-----w C:\Program Files\Fichiers communs\Macrovision Shared
2008-07-31 21:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision
2008-07-31 17:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo
2008-07-31 17:21 --------- d-----w C:\Program Files\SiteAdvisor
2008-07-31 17:02 --------- d-----w C:\Program Files\MSXML 4.0
2008-07-31 12:08 --------- d-----w C:\Documents and Settings\sudrie\Application Data\Windows Search
2008-07-31 12:08 --------- d-----w C:\Documents and Settings\sudrie\Application Data\Windows Desktop Search
2008-07-31 12:01 --------- d-----w C:\Program Files\Windows Desktop Search
2008-07-30 19:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\BOONTY
2008-07-30 14:22 --------- d-----w C:\Documents and Settings\sudrie\Application Data\ItsLabel
2008-07-30 12:11 --------- d-----w C:\Program Files\LimeWire
2008-07-30 12:01 --------- d-----w C:\Program Files\McAfee.com
2008-07-30 12:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee.com
2008-07-30 11:59 --------- d-----w C:\Documents and Settings\LocalService\Application Data\SiteAdvisor
2008-07-30 11:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\SiteAdvisor
2008-07-30 11:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee
2008-07-30 11:56 --------- d-----w C:\Program Files\Fichiers communs\McAfee
2008-07-30 11:24 --------- d-----w C:\Documents and Settings\sudrie\Application Data\MSNInstaller
2008-07-30 10:16 --------- d-----w C:\Program Files\Fichiers communs\France Telecom
2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-03-24 05:12 41,280 ----a-w C:\Program Files\MC
2007-06-26 17:15 130 ----a-w C:\Documents and Settings\sudrie\Application Data\wklnhst.dat
.
[code]<pre>
----a-w 16,384 2004-12-01 14:56:02 C:\Program Files\EA GAMES\Medal of Honor Batailles du Pacifique(tm)\Medal of Honor Pacific Assault (DVD Version) - NoCDCrack e KeyGen-\Medal Of Honor Pacific Assault_KeyGen .exe
</pre>[/code]


((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2008-07-06 1164600]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-10-28 94208]
"CTSyncU.exe"="C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" [2006-08-07 700416]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-08-25 39408]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 1832272]
"NoSpam"="" [N/A]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-07-11 7626752]
"AppleSyncNotifier"="C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-22 116040]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
"SystrayORAHSS"="C:\Program Files\Orange\Systray\SystrayApp.exe" [2007-09-25 94208]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"BigDogPath"="C:\WINDOWS\VM_STI.EXE" [2004-06-09 40960]
"EoEngine"="" [N/A]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-03-27 1744896]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.clmp3enc"= C:\PROGRA~1\CYBERL~1\Power2Go\CLMP3Enc.ACM
"msacm.DivXa32"= DivXa32.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
C:\Program Files\DNA\btdna.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"=
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"C:\\Program Files\\Atari\\Deer Hunter 2005 Demo\\DH2005Demo.exe"=
"C:\\Program Files\\Artefacts Studio\\PetanqueDemo\\bin\\releaseDemo\\Petanque.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"C:\\Program Files\\Fichiers communs\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1700:TCP"= 1700:TCP:MioNet Remote Drive Access
"1641:TCP"= 1641:TCP:MioNet Remote Drive Verification

R1 HCW88AUD;Hauppauge WinTV 88x Audio Capture;C:\WINDOWS\system32\drivers\hcw88aud.sys [2005-07-27 11970]
R3 HCW88BDA;Hauppauge WinTV 88x DVB Tuner/Demod;C:\WINDOWS\system32\drivers\hcw88bda.sys [2005-07-27 133696]
R3 HCW88TSE;Hauppauge WinTV 88x MPEG/TS Capture;C:\WINDOWS\system32\drivers\hcw88tse.sys [2005-07-27 296515]
R3 HCW88TUNE;Hauppauge WinTV 88x Tuner;C:\WINDOWS\system32\drivers\hcw88tun.sys [2005-07-27 140865]
R3 hcw88vid;Hauppauge WinTV 88x Video;C:\WINDOWS\system32\drivers\hcw88vid.sys [2005-07-27 613204]
R3 HCW88XBAR;Hauppauge WinTV 88x Crossbar;C:\WINDOWS\system32\drivers\HCW88BAR.sys [2005-07-27 30528]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S2 MioNet;MioNet Service;C:\Program Files\MioNet\MioNetManager.exe [2005-07-15 139264]
S2 OPTENET_FILTER;Orange Contrôle Parental;C:\Program Files\Controle Parental\bin\optproxy.exe [2006-12-21 624376]
S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2008-09-01 69120]
S3 ewdmaudn;ewdmaudn;C:\DOCUME~1\sudrie\LOCALS~1\Temp\ewdmaudn.sys [ ]
S3 SE2Ebus;Sony Ericsson Device 046 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\SE2Ebus.sys [2006-05-01 61600]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2bdc925a-7dc8-11dd-be2f-0040ca9957b8}]
\Shell\AutoRun\command - J:\update.exe
\Shell\open\Command - J:\update.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{30031555-33fd-11db-9c64-806d6172696f}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe folder.htt 480 480

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9B71D88C-C598-4935-C5D1-43AA4DB90836}]
C:\WINDOWS\CONFIG\Update.exe s
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\sudrie\Application Data\Mozilla\Firefox\Profiles\3uw2k7k0.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://search.sweetim.com/search.asp?src=2&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://home.sweetim.com
FF -: plugin - C:\Program Files\Google\Google Updater\2.3.1314.1135\npCIDetect12.dll
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - C:\Program Files\Picasa2\npPicasa2.dll
FF -: plugin - C:\Program Files\Yahoo!\Common\npyaxmpb.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-11 19:18:55
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
--------------------- DLLs a charg‚ sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\Program Files\Unlocker\UnlockerHook.dll
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTSVCCDA.EXE
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\[u]0[/u]\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\PROGRA~1\FICHIE~1\McAfee\MNA\McNASvc.exe
C:\PROGRA~1\FICHIE~1\McAfee\McProxy\McProxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\Mcshield.exe
C:\Program Files\McAfee\MPF\MpfSrv.exe
C:\Program Files\McAfee\MSK\msksrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\searchindexer.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\[u]0[/u]\AlertModule.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\sudrie\Menu Démarrer\Programmes\Démarrage\Msecal.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\CONFIG\Update.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-09-11 19:23:49 - machine was rebooted
ComboFix-quarantined-files.txt 2008-09-11 17:23:45

Pre-Run: 263,330,021,376 octets libres
Post-Run: 263,330,648,064 octets libres

364 --- E O F --- 2008-09-11 16:54:31

voila le rapport,Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:11:59, on 11/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\sudrie\Menu Démarrer\Programmes\Démarrage\Msecal.exe
C:\WINDOWS\ehome\mcrdsvc.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/french/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Startup: Msecal.exe
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

voila, 11/09/2008 ---- 21:49:14,81

----------------------------------
§§§§§§ [Msecal] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************


[HKEY_USERS\S-1-5-21-1315868591-2393904715-1153188053-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Documents and Settings\\sudrie\\Menu Démarrer\\Programmes\\Démarrage\\Msecal.exe"="Msecal"

*******************
[Fichier]
*******************

c:\Documents and Settings\sudrie\Menu D‚marrer\Programmes\D‚marrage\Msecal.exe
c:\WINDOWS\Prefetch\MSECAL.EXE-341C8847.pf


*********************
[Même date]
*********************

[03/09/2008 ] --- REP ---> C:\Program Files\scrabbleproB1.0.8
[03/09/2008 ] ---> C:\config.xml
[03/09/2008 ] ---> C:\WINDOWS\ms32.exe
[03/09/2008 ] ---> C:\WINDOWS\system32\MSWINSCK.OCX
[03/09/2008 ] ---> C:\WINDOWS\system32\VB6FR.DLL
[03/09/2008 ] ---> C:\WINDOWS\system32\zlib.dll
[11/09/2008 ] ---> C:\ComboFix.txt
[11/09/2008 ] ---> C:\WINDOWS\0.log
[11/09/2008 ] ---> C:\WINDOWS\fdsv.exe
[11/09/2008 ] ---> C:\WINDOWS\grep.exe
[11/09/2008 ] ---> C:\WINDOWS\KB953838-IE7.log
[11/09/2008 ] ---> C:\WINDOWS\Nircmd.exe
[11/09/2008 ] ---> C:\WINDOWS\sed.exe
[11/09/2008 ] ---> C:\WINDOWS\setupapi.log
[11/09/2008 ] ---> C:\WINDOWS\swreg.exe
[11/09/2008 ] ---> C:\WINDOWS\swsc.exe
[11/09/2008 ] ---> C:\WINDOWS\swxcacls.exe
[11/09/2008 ] ---> C:\WINDOWS\update.exe
[11/09/2008 ] ---> C:\WINDOWS\VFind.exe
[11/09/2008 ] ---> C:\WINDOWS\zip.exe



Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------

non c rien j arrive pas faire ton scane comprend pas comment ca marche celui la

Scanner results
Scan taken on 11 Sep 2008 20:21:24 (GMT)
A-Squared
Found nothing
AntiVir
Found TR/Autorun.YG
ArcaVir
Found Trojan.Autorun.Yg
Avast
Found Win32:AutoRun-KB
AVG Antivirus
Found nothing
BitDefender
Found Win32.Worm.Autorun.IB
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found Win32.HLLW.Autoruner.2327
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Ikarus
Found Backdoor.Bifrose.ZXE
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Sophos Antivirus
Found Troj/Bifrose-WC
VirusBuster
Found nothing
VBA32
Found Virus.Win32.AutoRun.yg

oui c bon j y arrive voila le premier je te fait l autre

le premier document and the setting

Scan taken on 11 Sep 2008 20:28:10 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing

voila le deuxieme :c programe files etc etc

voila,Pocket Killbox version 2.0.0.648
Running on Windows XP as sudrie(Administrator)
was started @ mercredi, septembre 10, 2008, 11:10 PM

# 1 [Files to Delete]
Path = C:\Pro Cycling Manager 2006.CRACK-NOCD..FR
*This file does not seem to exist

Killbox Closed(Exit) @ 11:31:42 PM
__________________________________________________

Pocket Killbox version 2.0.0.648
Running on Windows XP as sudrie(Administrator)
was started @ mercredi, septembre 10, 2008, 11:31 PM

Killbox Closed(Exit) @ 11:36:07 PM
__________________________________________________

Pocket Killbox version 2.0.0.648
Running on Windows XP as sudrie(Administrator)
was started @ jeudi, septembre 11, 2008, 10:47 PM

# 1 [Delete on Reboot]
Path = C:\Documents and Settings\sudrie\Menu Démarrer\Programmes\Démarrage\desktop.ini


I Rebooted @ 10:59:45 PM
Killbox Closed(Exit) @ 10:59:56 PM
__________________________________________________

Pocket Killbox version 2.0.0.648
Running on Windows XP as sudrie(Administrator)
was started @ jeudi, septembre 11, 2008, 11:03 PM

voila l autre,hijack,Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:07:47, on 11/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\sudrie\Bureau\KillBox(2).exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/french/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: TrayMin210.exe.lnk = C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O15 - Trusted Zone: https://www.orange.fr/portail
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Fichiers communs\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe

je veut bien mais quand je tape la ligne apres l operation il me dit quel n existe pas et dans le menu deroulant il n y que celle qui finis par le fichier desktop (Msecal ne si trouve pas)

desolé mais c est ce que j essaie de te dire depuis tout a l heure le dossier demarrage é vide il n y rien dedans Msecal n y é pas

ca c est quoi par contre,[.ShellClassInfo]
LocalizedResourceName=@shell32.dll,-21786
c est dans programe ca

tu a un lien pour ca?