AVG a trouvé un rootkits

Bonjour Loicdem
Voici le rapport demandé
D'avance merci pour ton aide
helene

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:53, on 11/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\ATI-CPanel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://news.google.com/topstories?hl=fr&gl=FR&ceid=FR:fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: stardock objectdock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O8 - Extra context menu item: &Download with TrueDownloader! - C:\Program Files\TrueDownloader\TrueDownloader.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

d'accord, je fais ce que tu me dis, ça me fait un peu peur, surtout que concernant mon problème, mes messages apparaissaient comme dangereux sur le forum et personne ne me répondait
Donc encore merci à toi
helene

Voilà Loicdem
Je crois que j'ai fait ce que tu m'as demandé correctement
Voici le rapport
Encore merci pour ton aide
J'attends de tes nouvelles
helene


ComboFix 08-11-07.01 - Hélène 2008-11-09 17:05:08.9 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.205 [GMT 1:00]
Lancé depuis: c:\documents and settings\Hélène\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé

[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\OneStepSearch
c:\windows\system32\kmd.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-09 au 2008-11-09 ))))))))))))))))))))))))))))))))))))
.

2008-10-24 11:23 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
2008-10-15 09:56 . 2008-08-14 14:23 2,191,232 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
2008-10-15 09:56 . 2008-08-14 14:23 2,147,328 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
2008-10-15 09:56 . 2008-08-14 14:23 2,068,096 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
2008-10-15 09:56 . 2008-08-14 14:23 2,025,984 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
2008-10-15 09:56 . 2008-09-08 11:41 333,824 -----c--- c:\windows\system32\dllcache\srv.sys
2008-10-15 09:55 . 2008-09-15 16:26 1,846,528 -----c--- c:\windows\system32\dllcache\win32k.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-09 15:08 --------- d-----w c:\documents and settings\Hélène\Application Data\skypePM
2008-11-09 11:43 --------- d-----w c:\documents and settings\Hélène\Application Data\OpenOffice.org2
2008-11-09 08:01 --------- d-----w c:\documents and settings\Serge\Application Data\OpenOffice.org2
2008-11-08 19:10 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2008-11-07 13:26 --------- d-----w c:\program files\Trend Micro
2008-11-05 14:20 90,632 ----a-w c:\windows\system32\drivers\avgtdix.sys
2008-11-04 18:23 98,440 ----a-w c:\windows\system32\drivers\avgldx86.sys
2008-10-27 16:35 --------- d-----w c:\documents and settings\Hélène\Application Data\Skype
2008-10-25 12:08 --------- d-----w c:\documents and settings\Serge\Application Data\AVGTOOLBAR
2008-10-09 08:31 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-10-02 17:41 --------- d-----w c:\program files\Skype
2008-10-02 17:41 --------- d-----w c:\program files\Fichiers communs\Skype
2008-10-02 17:41 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2008-09-28 12:19 --------- d-----w c:\program files\Picasa2
2008-09-27 20:43 --------- d-----w c:\program files\DivX
2008-09-27 11:23 --------- d-----w c:\program files\iTunes
2008-09-27 11:23 --------- d-----w c:\program files\iPod
2008-09-24 20:06 --------- d-----w c:\program files\Fichiers communs\xing shared
2008-09-24 20:06 --------- d-----w c:\program files\Fichiers communs\Real
2008-09-24 19:39 15,744 ----a-w c:\windows\system32\drivers\mpcsys.SYS
2008-09-16 10:33 --------- d-----w c:\documents and settings\Hélène\Application Data\AVGTOOLBAR
2008-09-16 10:33 --------- d-----w c:\documents and settings\Hélène\Application Data\aAvgApi
2008-09-14 22:10 --------- d-----w c:\program files\eMule
2008-09-14 10:16 --------- d-----w c:\documents and settings\Hélène\Application Data\Apple Computer
2008-09-14 09:53 --------- d-----w c:\program files\Bonjour
2008-09-14 09:52 --------- d-----w c:\program files\QuickTime
2008-09-13 17:09 --------- d-----w c:\documents and settings\Hélène\Application Data\Media Player Classic
2008-09-02 06:43 65,665 -c--a-w c:\windows\BricoPackUninst.cmd
2008-09-02 06:43 5,746 ----a-w c:\windows\BricoPackFoldersDelete.cmd
2008-06-17 21:11 7,496,920 ----a-w c:\program files\Firefox Setup 3.0.exe
2007-09-12 12:05 5,632 -csha-w c:\program files\Thumbs.db
2007-03-21 21:27 3,254,166 -c--a-w c:\program files\openofficeorg4.cab
2007-03-21 21:26 60,829,588 -c--a-w c:\program files\openofficeorg3.cab
2007-03-21 21:21 15,288,213 -c--a-w c:\program files\openofficeorg2.cab
2007-03-21 21:20 18,202,413 -c--a-w c:\program files\openofficeorg1.cab
2007-03-21 21:19 217 -c--a-w c:\program files\setup.ini
2007-03-21 21:18 4,856,320 -c--a-w c:\program files\openofficeorg22.msi
2007-02-05 21:37 14,993,976 -c--a-w c:\program files\GoogleEarthWin.exe
2007-02-02 22:27 5,736,656 -c--a-w c:\program files\Firefox Setup 2.0.0.1.exe
2007-01-31 13:44 849 -c--a-w c:\program files\AVG Anti-Spyware.lnk
2007-01-06 18:57 10,703,680 -c--a-w c:\program files\NDP1.1sp1-KB867460-X86.exe
2007-01-05 22:16 1,475,376 -c--a-w c:\program files\GenuineCheck.exe
2007-01-04 19:43 4,569,325 -c--a-w c:\program files\Calendrier_2007_Voyages-sncf.com.exe
2006-12-18 08:29 533 -c-ha-w c:\documents and settings\Geoffroy\hpothb07.dat
2006-12-17 10:35 0 -c--a-w c:\program files\cqwydcgt.exe
2006-11-30 15:17 5,298,688 -c--a-w c:\program files\openofficeorg21.msi
2006-11-22 14:41 935 -c-ha-w c:\documents and settings\Hélène\hpothb07.dat
2006-11-22 14:41 935 -c-ha-w c:\documents and settings\Hélène\hpothb07.dat
2006-11-22 14:41 343 -c-ha-w c:\documents and settings\Default User\hpothb07.dat
2006-11-22 14:41 343 -c-ha-w c:\documents and settings\Administrateur\hpothb07.dat
2006-11-22 14:41 340 -c-ha-w c:\documents and settings\NetworkService\hpothb07.dat
2006-11-22 14:41 336 -c-ha-w c:\documents and settings\LocalService\hpothb07.dat
2006-11-22 14:41 333 -c-ha-w c:\documents and settings\Camille\hpothb07.dat
2006-11-22 14:41 325 -c-ha-w c:\documents and settings\All Users\hpothb07.dat
2006-11-22 14:41 1,003 -c-ha-w c:\documents and settings\Serge\hpothb07.dat
2006-07-18 13:41 1,019,094 -csha-r c:\program files\serial.tde
2006-07-04 21:56 11,290,496 -c--a-w c:\program files\setupfre.exe
2006-06-29 23:00 14,356,904 -c--a-w c:\program files\zlsSetup_65_725_000_fr.exe
2006-03-31 22:06 43 -c--a-w c:\program files\blank.gif
2006-03-31 22:06 12,334 -c--a-w c:\program files\stubinstaller.ini
2006-03-18 08:41 1,455,106 -c--a-w c:\program files\fdminst.exe
2006-03-18 08:25 2,628,754 -c--a-w c:\program files\SetupTrueDownloader.exe
2006-02-23 19:35 2,016,856 -c--a-w c:\program files\rd2005trial.exe
2006-02-16 23:00 1,485,368 -c--a-w c:\program files\GoogleDesktopSetup.exe
2006-02-11 22:16 285,580 -c--a-w c:\program files\Autoruns.zip
2006-02-10 22:54 8,634 -c--a-w c:\program files\startuplist.txt
2006-02-10 22:52 58,368 -c--a-w c:\program files\StartupList.exe
2006-02-10 22:41 1,526,976 -c--a-w c:\program files\soref_regclean.exe
2006-02-08 19:35 2,855,080 -c--a-w c:\program files\aawsepersonal.exe
2006-02-08 19:26 5,037,072 -c--a-w c:\program files\spybotsd14.exe
2006-02-06 22:54 849,833 -c--a-w c:\program files\Startup_manager_2.0.zip
2006-02-02 19:09 27,977,025 -c--a-w c:\program files\vista-inspirat-pack_vista_inspirat_pack_1.1_francais_15013.exe
2005-09-16 21:40 985,739 -c--a-w c:\program files\ThumbClic.zip
2005-05-06 10:01 234,240 -c--a-w c:\program files\FrReform.exe
2005-04-18 12:31 2,609,152 -c--a-w c:\program files\Ink.msi
2002-03-11 09:06 1,822,520 -c--a-w c:\program files\instmsiw.exe
2002-03-11 08:45 1,708,856 -c--a-w c:\program files\instmsia.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-03-30 68856]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-09-23 21755688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
"ATIPTA"="c:\ati-cpanel\atiptaxx.exe" [2004-05-25 339968]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2008-10-24 1235736]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-05-27 413696]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-09-24 185872]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"AllowLegacyWebView"= 1 (0x1)
"AllowUnhashedWebView"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"MSACM.CEGSM"= mobilev.acm

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\Drivers\avgrkx86.sys [2008-09-02 12936]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-11-04 98440]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2008-11-05 90632]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-04-26 302000]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-04-26 72624]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-10-24 231704]
R2 CX88XBAR;MSI 8606 Crossbar;c:\windows\system32\drivers\CX88XBar.SYS [2003-03-19 9159]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\kpf4ss.exe [2007-04-26 1234480]
S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\DRIVERS\camdrv21.sys [ ]
S3 MPCSYS;MPCSYS;c:\windows\System32\DRIVERS\mpcsys.sys [2008-09-24 15744]
S3 PVUSB;CESG502 USB Driver;c:\windows\system32\DRIVERS\CESG502.sys [2007-12-12 40672]
S3 zebrbus;Sony Ericsson Composite Device driver;c:\windows\system32\DRIVERS\zebrbus.sys [2008-06-19 83200]
S3 zebrmdfl;Sony Ericsson Modem Filter;c:\windows\system32\DRIVERS\zebrmdfl.sys [2006-07-25 9264]
S3 zebrmdm;Sony Ericsson Port (WDM);c:\windows\system32\DRIVERS\zebrmdm.sys [2008-06-19 109568]
S3 zebrmdmc;Sony Ericsson mRouter Port (WDM);c:\windows\system32\DRIVERS\zebrmdmc.sys [2006-07-25 100672]
.
Contenu du dossier 'Tâches planifiées'

2008-11-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57]

2008-05-28 c:\windows\Tasks\At73.job
- c:\windows\user32.exe []

2008-09-03 c:\windows\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1159858088.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 23:52]
.
- - - - ORPHELINS SUPPRIMES - - - -

SafeBoot-Fko72.sys


.
------- Examen supplémentaire -------
.
FireFox -: Profile - c:\documents and settings\Hélène\Application Data\Mozilla\Firefox\Profiles\npj0mbfw.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://news.google.fr/
FF -: plugin - c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - c:\program files\Mozilla Firefox\plugins\npmusicn.dll
FF -: plugin - c:\program files\Picasa2\npPicasa2.dll
FF -: plugin - c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-09 17:15:24
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

PROCESSUS: c:\windows\explorer.exe
-> c:\windows\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\TGTSoft\StyleXP\StyleXPService.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\windows\system32\MsPMSPSv.exe
c:\program files\Sunbelt Software\Personal Firewall\kpf4gui.exe
c:\progra~1\AVG\AVG8\avgam.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\Sunbelt Software\Personal Firewall\kpf4gui.exe
c:\windows\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
c:\program files\Skype\Plugin Manager\skypePM.exe
.
**************************************************************************
.
Heure de fin: 2008-11-09 17:28:36 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-11-09 16:28:11
ComboFix2.txt 2008-02-26 12:22:41

Avant-CF: 75 173 371 904 octets libres
Après-CF: 75,116,421,120 octets libres

206 --- E O F --- 2008-10-24 10:26:30

Voici le dernier rapport
C'est vraiment super d'être ainsi aidée et guidée-
A tout de suite pour ton avis


---------\\ ToolBar S&D 1.2.4 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Hélène ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus 8.0 (Activated)
Firewall : Sunbelt Personal Firewall 4.5.916 T (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:69 Go)
D:\ (USB)
E:\ (USB)
F:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 27-10-2008|09:25 )
Option : [2] ( 11/09/2008|17:45 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ Extensions

(Geoffroy) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Hélène) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Hélène) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

(Serge) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Serge) - {5359A5B3-9AFD-49ee-8C39-0A8F97A2A2D6} => Map+


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://news.google.com/topstories?hl=fr&gl=FR&ceid=FR:fr"
"Search Page"="https://www.google.com/?gws_rd=ssl"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
"Url"="https://docs.microsoft.com/en-us/archive/blogs/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\windows\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"


--------------------\\ Recherche d'autres infections

C:\WINDOWS\Tasks\At73.job




1 - "C:\ToolBar SD\TB_1.txt" - 11/09/2008|17:48 - Option : [2]

-----------\\ Fin du rapport a 17:48:43,96

Bonjour Goldorack

Comment dois-je comprendre ta remarque;)?
Que dois-je faire?
J'ai pourtant bien un rootkits que AVG a trouvé et qui serait caché
Merci pour ton aide à toi aussi
helene

toujours pas de rapport
désolée;)

--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.80GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Hélène ( Administrator )
BOOT : Normal boot
Antivirus : AVG Anti-Virus 8.0 (Activated)
Firewall : Sunbelt Personal Firewall 4.5.916 T (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:69 Go)
D:\ (USB)
E:\ (USB)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 11/09/2008|18:37 )

--------------------\\ Listing des dossiers dans APPLIC~1

[09/05/2008|16:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[04/07/2005|13:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun

[04/10/2008|17:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[04/07/2005|14:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[07/04/2007|12:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[10/07/2006|18:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[09/05/2008|16:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[02/10/2008|16:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[01/31/2008|00:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BitDefender
[04/12/2006|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Download mess seek bold
[11/29/2007|23:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[11/08/2008|20:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[03/01/2008|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
[04/07/2005|15:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[02/10/2008|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[10/12/2006|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[04/07/2005|15:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[06/20/2008|10:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Musicnotes
[12/10/2005|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[04/12/2006|22:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\skip pure rdr itch
[01/07/2008|11:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
[10/02/2008|18:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[06/19/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
[09/03/2008|08:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[05/13/2007|18:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
[05/15/2008|07:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks
[09/01/2005|08:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[10/09/2008|09:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[03/14/2007|12:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\EoRezo
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Google
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Identities
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Lavasoft
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Macromedia
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Microsoft
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Real
[10/13/2006|18:13] C:\DOCUME~1\Camille\APPLIC~1\Sun

[03/05/2008|18:17] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[04/07/2005|13:33] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[04/07/2005|13:35] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun

[06/25/2007|18:30] C:\DOCUME~1\Geoffroy\APPLIC~1\Adobe
[03/31/2007|19:56] C:\DOCUME~1\Geoffroy\APPLIC~1\AdobeUM
[05/01/2007|15:09] C:\DOCUME~1\Geoffroy\APPLIC~1\Apple Computer
[09/27/2006|13:18] C:\DOCUME~1\Geoffroy\APPLIC~1\Atari
[04/11/2007|11:23] C:\DOCUME~1\Geoffroy\APPLIC~1\bang
[11/07/2006|18:25] C:\DOCUME~1\Geoffroy\APPLIC~1\EoRezo
[09/20/2006|08:58] C:\DOCUME~1\Geoffroy\APPLIC~1\Google
[02/05/2006|18:49] C:\DOCUME~1\Geoffroy\APPLIC~1\Help
[04/08/2005|07:37] C:\DOCUME~1\Geoffroy\APPLIC~1\Identities
[04/04/2006|07:27] C:\DOCUME~1\Geoffroy\APPLIC~1\Lavasoft
[09/03/2006|11:58] C:\DOCUME~1\Geoffroy\APPLIC~1\Macromedia
[09/05/2008|16:39] C:\DOCUME~1\Geoffroy\APPLIC~1\Microsoft
[03/07/2007|10:18] C:\DOCUME~1\Geoffroy\APPLIC~1\Mozilla
[10/19/2007|09:56] C:\DOCUME~1\Geoffroy\APPLIC~1\MSN6
[01/10/2008|12:46] C:\DOCUME~1\Geoffroy\APPLIC~1\OpenOffice.org2
[10/26/2006|13:03] C:\DOCUME~1\Geoffroy\APPLIC~1\Panasonic
[04/21/2005|14:07] C:\DOCUME~1\Geoffroy\APPLIC~1\Philips
[04/17/2005|11:59] C:\DOCUME~1\Geoffroy\APPLIC~1\Real
[01/23/2007|19:32] C:\DOCUME~1\Geoffroy\APPLIC~1\Skype
[04/30/2007|13:22] C:\DOCUME~1\Geoffroy\APPLIC~1\Sony Ericsson
[04/07/2005|13:35] C:\DOCUME~1\Geoffroy\APPLIC~1\Sun
[04/30/2007|13:29] C:\DOCUME~1\Geoffroy\APPLIC~1\Teleca
[04/18/2005|10:51] C:\DOCUME~1\Geoffroy\APPLIC~1\Template
[01/09/2008|14:15] C:\DOCUME~1\Geoffroy\APPLIC~1\WinRAR

[09/16/2008|11:33] C:\DOCUME~1\HLNE~1\APPLIC~1\aAvgApi
[02/04/2008|10:22] C:\DOCUME~1\HLNE~1\APPLIC~1\Adobe
[04/09/2007|10:08] C:\DOCUME~1\HLNE~1\APPLIC~1\AdobeUM
[09/14/2008|11:16] C:\DOCUME~1\HLNE~1\APPLIC~1\Apple Computer
[05/25/2005|19:34] C:\DOCUME~1\HLNE~1\APPLIC~1\Arcsoft
[09/29/2006|10:35] C:\DOCUME~1\HLNE~1\APPLIC~1\Atari
[09/16/2008|11:33] C:\DOCUME~1\HLNE~1\APPLIC~1\AVGTOOLBAR
[01/31/2008|00:19] C:\DOCUME~1\HLNE~1\APPLIC~1\BitDefender
[11/29/2007|18:55] C:\DOCUME~1\HLNE~1\APPLIC~1\BitZipper
[09/01/2008|13:55] C:\DOCUME~1\HLNE~1\APPLIC~1\DivX
[04/13/2006|10:01] C:\DOCUME~1\HLNE~1\APPLIC~1\dumb rule four
[11/14/2006|11:13] C:\DOCUME~1\HLNE~1\APPLIC~1\EoRezo
[09/15/2006|07:31] C:\DOCUME~1\HLNE~1\APPLIC~1\Google
[05/25/2005|19:29] C:\DOCUME~1\HLNE~1\APPLIC~1\Help
[04/07/2005|14:27] C:\DOCUME~1\HLNE~1\APPLIC~1\Hewlett-Packard
[04/07/2005|13:44] C:\DOCUME~1\HLNE~1\APPLIC~1\Identities
[05/04/2005|16:51] C:\DOCUME~1\HLNE~1\APPLIC~1\InterVideo
[06/14/2007|12:59] C:\DOCUME~1\HLNE~1\APPLIC~1\iShell
[02/10/2006|20:12] C:\DOCUME~1\HLNE~1\APPLIC~1\Lavasoft
[01/07/2008|14:02] C:\DOCUME~1\HLNE~1\APPLIC~1\Leadertech
[12/04/2005|13:13] C:\DOCUME~1\HLNE~1\APPLIC~1\Macromedia
[09/13/2008|18:09] C:\DOCUME~1\HLNE~1\APPLIC~1\Media Player Classic
[09/05/2008|16:39] C:\DOCUME~1\HLNE~1\APPLIC~1\Microsoft
[06/18/2008|07:42] C:\DOCUME~1\HLNE~1\APPLIC~1\Mozilla
[09/08/2007|11:59] C:\DOCUME~1\HLNE~1\APPLIC~1\MSN6
[11/09/2008|12:43] C:\DOCUME~1\HLNE~1\APPLIC~1\OpenOffice.org2
[01/02/2006|14:13] C:\DOCUME~1\HLNE~1\APPLIC~1\Panasonic
[04/17/2005|11:38] C:\DOCUME~1\HLNE~1\APPLIC~1\Philips
[09/13/2008|18:06] C:\DOCUME~1\HLNE~1\APPLIC~1\Real
[10/27/2008|17:35] C:\DOCUME~1\HLNE~1\APPLIC~1\Skype
[11/09/2008|16:08] C:\DOCUME~1\HLNE~1\APPLIC~1\skypePM
[04/30/2007|14:02] C:\DOCUME~1\HLNE~1\APPLIC~1\Sony Ericsson
[05/13/2007|14:48] C:\DOCUME~1\HLNE~1\APPLIC~1\SPAMfighter
[04/12/2006|22:31] C:\DOCUME~1\HLNE~1\APPLIC~1\Stupidbuildvga
[04/07/2005|13:35] C:\DOCUME~1\HLNE~1\APPLIC~1\Sun
[04/30/2007|14:02] C:\DOCUME~1\HLNE~1\APPLIC~1\Teleca
[04/08/2005|15:02] C:\DOCUME~1\HLNE~1\APPLIC~1\Template
[12/09/2007|11:22] C:\DOCUME~1\HLNE~1\APPLIC~1\uTorrent
[11/26/2007|19:40] C:\DOCUME~1\HLNE~1\APPLIC~1\WinRAR


[09/05/2008|16:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[09/05/2008|16:39] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[09/07/2008|22:41] C:\DOCUME~1\Serge\APPLIC~1\aAvgApi
[03/15/2008|20:36] C:\DOCUME~1\Serge\APPLIC~1\Adobe
[12/09/2006|11:29] C:\DOCUME~1\Serge\APPLIC~1\AdobeUM
[03/04/2006|18:26] C:\DOCUME~1\Serge\APPLIC~1\aignes
[01/20/2007|11:03] C:\DOCUME~1\Serge\APPLIC~1\Apple Computer
[12/02/2005|20:17] C:\DOCUME~1\Serge\APPLIC~1\Arcsoft
[01/06/2007|19:14] C:\DOCUME~1\Serge\APPLIC~1\Atari
[10/25/2008|13:08] C:\DOCUME~1\Serge\APPLIC~1\AVGTOOLBAR
[01/31/2008|11:38] C:\DOCUME~1\Serge\APPLIC~1\BitDefender
[12/01/2007|17:37] C:\DOCUME~1\Serge\APPLIC~1\BitZipper
[03/23/2007|23:24] C:\DOCUME~1\Serge\APPLIC~1\DeskSoft
[07/30/2008|20:54] C:\DOCUME~1\Serge\APPLIC~1\DivX
[11/14/2006|00:50] C:\DOCUME~1\Serge\APPLIC~1\EoRezo
[01/18/2007|23:24] C:\DOCUME~1\Serge\APPLIC~1\Google
[04/07/2005|23:18] C:\DOCUME~1\Serge\APPLIC~1\Help
[10/11/2007|20:45] C:\DOCUME~1\Serge\APPLIC~1\Hewlett-Packard
[04/07/2005|22:10] C:\DOCUME~1\Serge\APPLIC~1\Identities
[02/17/2007|00:25] C:\DOCUME~1\Serge\APPLIC~1\Lavasoft
[01/14/2006|00:04] C:\DOCUME~1\Serge\APPLIC~1\Leadertech
[02/10/2006|23:50] C:\DOCUME~1\Serge\APPLIC~1\Macromedia
[09/05/2008|16:39] C:\DOCUME~1\Serge\APPLIC~1\Microsoft
[06/17/2008|22:12] C:\DOCUME~1\Serge\APPLIC~1\Mozilla
[11/09/2008|09:01] C:\DOCUME~1\Serge\APPLIC~1\OpenOffice.org2
[12/10/2005|23:58] C:\DOCUME~1\Serge\APPLIC~1\Panasonic
[04/17/2005|10:20] C:\DOCUME~1\Serge\APPLIC~1\Real
[02/23/2006|20:42] C:\DOCUME~1\Serge\APPLIC~1\Registry Defender
[11/11/2007|20:01] C:\DOCUME~1\Serge\APPLIC~1\Skype
[04/30/2007|18:43] C:\DOCUME~1\Serge\APPLIC~1\Sony Ericsson
[02/05/2008|20:02] C:\DOCUME~1\Serge\APPLIC~1\SPAMfighter
[04/07/2005|13:35] C:\DOCUME~1\Serge\APPLIC~1\Sun
[04/30/2007|18:43] C:\DOCUME~1\Serge\APPLIC~1\Teleca
[11/06/2005|20:34] C:\DOCUME~1\Serge\APPLIC~1\Template
[12/17/2007|22:58] C:\DOCUME~1\Serge\APPLIC~1\WinRAR


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[11/06/2008 12:45][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[09/03/2008 10:20][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1159858088.job
[11/09/2008 17:13][--ah-c---] C:\WINDOWS\tasks\SA.DAT
[04/24/2003 13:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[04/08/2005|23:15] C:\Program Files\7-Zip
[07/17/2008|10:02] C:\Program Files\Adobe
[04/07/2005|14:31] C:\Program Files\Ahead
[10/05/2005|22:19] C:\Program Files\Alwil Software
[03/04/2006|18:26] C:\Program Files\AM-DeadLink
[07/30/2008|22:08] C:\Program Files\Apple Software Update
[01/03/2006|00:44] C:\Program Files\ArcSoft
[09/02/2008|19:16] C:\Program Files\a-squared Free
[02/12/2006|00:51] C:\Program Files\Autoruns
[09/02/2008|20:38] C:\Program Files\AVG
[01/31/2008|00:17] C:\Program Files\BitDefender
[01/08/2008|16:01] C:\Program Files\BitZipper
[09/14/2008|10:53] C:\Program Files\Bonjour
[02/09/2007|19:25] C:\Program Files\CCleaner
[02/25/2008|19:32] C:\Program Files\CleanUp!
[06/04/2005|13:57] C:\Program Files\Common Files
[04/07/2005|13:32] C:\Program Files\ComPlus Applications
[04/09/2006|09:32] C:\Program Files\directx
[09/27/2008|21:43] C:\Program Files\DivX
[01/01/2008|15:07] C:\Program Files\eChanblard
[09/14/2008|23:10] C:\Program Files\eMule
[03/04/2007|11:33] C:\Program Files\eoRezo
[11/09/2008|17:09] C:\Program Files\Fichiers communs
[10/19/2006|23:31] C:\Program Files\Football Generation
[05/06/2005|11:01] C:\Program Files\FrRefFra
[01/29/2007|23:43] C:\Program Files\GalleryPlayer Images
[11/29/2007|23:15] C:\Program Files\Google
[03/01/2008|11:26] C:\Program Files\Grisoft
[04/07/2005|14:26] C:\Program Files\Hewlett-Packard
[10/20/2007|17:56] C:\Program Files\Hip Interactive
[01/06/2007|18:32] C:\Program Files\IE6
[11/09/2007|08:20] C:\Program Files\IncrediMail
[06/14/2008|20:33] C:\Program Files\InstallShield Installation Information
[09/02/2008|07:44] C:\Program Files\Internet Explorer
[04/07/2005|14:12] C:\Program Files\InterVideo
[11/06/2005|17:50] C:\Program Files\Intuwave Ltd
[09/27/2008|12:23] C:\Program Files\iPod
[09/27/2008|12:23] C:\Program Files\iTunes
[11/25/2007|17:58] C:\Program Files\IZArc
[07/11/2008|10:28] C:\Program Files\Java
[03/13/2007|17:43] C:\Program Files\jv16 PowerTools
[12/17/2006|20:30] C:\Program Files\licenses
[09/01/2008|11:58] C:\Program Files\Messenger
[04/07/2005|13:37] C:\Program Files\microsoft frontpage
[01/03/2008|17:56] C:\Program Files\Microsoft SQL Server Compact Edition
[01/07/2008|11:06] C:\Program Files\Microsoft Works
[09/02/2008|07:44] C:\Program Files\Movie Maker
[11/09/2008|18:09] C:\Program Files\Mozilla Firefox
[04/07/2005|13:31] C:\Program Files\MSN
[04/07/2005|13:31] C:\Program Files\MSN Gaming Zone
[01/10/2008|20:17] C:\Program Files\mst software
[05/01/2007|11:30] C:\Program Files\MSXML 4.0
[09/01/2008|11:50] C:\Program Files\NetMeeting
[04/20/2008|16:22] C:\Program Files\OpenOffice.org 2.3
[04/20/2008|16:23] C:\Program Files\OpenOffice.org 2.4
[01/07/2008|11:07] C:\Program Files\OSCILLO
[09/02/2008|07:44] C:\Program Files\Outlook Express
[12/10/2005|20:14] C:\Program Files\Panasonic
[04/07/2005|14:36] C:\Program Files\Philips
[10/19/2006|23:31] C:\Program Files\Philips ToUcam Camera
[04/20/2005|19:22] C:\Program Files\PianoTrainer
[09/28/2008|13:19] C:\Program Files\Picasa2
[09/14/2008|10:52] C:\Program Files\QuickTime
[12/17/2006|20:30] C:\Program Files\readmes
[04/17/2005|10:15] C:\Program Files\Real
[02/22/2007|11:40] C:\Program Files\RegCleaner
[12/17/2006|11:34] C:\Program Files\serial2
[04/07/2005|13:33] C:\Program Files\Services en ligne
[03/03/2006|23:34] C:\Program Files\SiSoftware
[10/02/2008|18:41] C:\Program Files\Skype
[06/19/2008|12:42] C:\Program Files\Sony Ericsson
[05/15/2008|07:44] C:\Program Files\SopCast
[09/05/2008|17:30] C:\Program Files\Spybot - Search & Destroy
[02/06/2006|23:55] C:\Program Files\Startup_manager_2.0
[02/13/2007|10:43] C:\Program Files\Sunbelt Software
[04/30/2007|13:23] C:\Program Files\Symbian
[10/12/2007|20:01] C:\Program Files\TGTSoft
[10/05/2005|22:41] C:\Program Files\ThumbClic
[09/15/2007|13:51] C:\Program Files\TI Education
[11/07/2008|14:26] C:\Program Files\Trend Micro
[05/15/2008|07:32] C:\Program Files\TVAnts
[05/15/2008|07:33] C:\Program Files\TVUPlayer
[05/23/2005|11:13] C:\Program Files\Uninstall Information
[06/14/2008|20:31] C:\Program Files\Veoh Networks
[10/19/2006|23:31] C:\Program Files\VideoLink Pro
[02/08/2006|16:08] C:\Program Files\Virtools Web Player 3.5
[01/09/2008|16:33] C:\Program Files\vLite
[05/13/2006|08:12] C:\Program Files\WebLog Expert
[02/29/2008|12:09] C:\Program Files\Windows Live
[01/07/2008|10:45] C:\Program Files\Windows Media Connect 2
[09/01/2008|11:49] C:\Program Files\Windows Media Player
[09/01/2008|11:49] C:\Program Files\Windows NT
[04/09/2005|00:13] C:\Program Files\WindowsUpdate
[01/10/2008|20:15] C:\Program Files\winMd5Sum
[11/26/2007|19:40] C:\Program Files\WinRAR
[04/07/2005|13:37] C:\Program Files\xerox
[03/16/2008|12:12] C:\Program Files\ZiPhone

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[04/10/2008|17:28] C:\Program Files\Fichiers communs\Adobe
[04/07/2005|14:30] C:\Program Files\Fichiers communs\Ahead
[07/04/2007|12:45] C:\Program Files\Fichiers communs\Apple
[01/31/2008|12:43] C:\Program Files\Fichiers communs\BitDefender
[04/07/2005|14:21] C:\Program Files\Fichiers communs\Hewlett-Packard
[11/13/2005|13:18] C:\Program Files\Fichiers communs\InstallShield
[04/07/2005|13:35] C:\Program Files\Fichiers communs\Java
[09/02/2008|20:38] C:\Program Files\Fichiers communs\Microsoft Shared
[04/07/2005|13:32] C:\Program Files\Fichiers communs\MSSoap
[04/07/2005|14:27] C:\Program Files\Fichiers communs\ODBC
[09/24/2008|21:06] C:\Program Files\Fichiers communs\Real
[04/07/2005|13:32] C:\Program Files\Fichiers communs\Services
[10/02/2008|18:41] C:\Program Files\Fichiers communs\Skype
[04/17/2005|11:20] C:\Program Files\Fichiers communs\Smith Micro Shared
[04/30/2007|13:22] C:\Program Files\Fichiers communs\Sony Ericsson Shared
[04/07/2005|14:27] C:\Program Files\Fichiers communs\SpeechEngines
[09/01/2008|11:49] C:\Program Files\Fichiers communs\System
[04/30/2007|13:22] C:\Program Files\Fichiers communs\Teleca Shared
[09/15/2007|13:50] C:\Program Files\Fichiers communs\TI Shared
[02/06/2006|23:43] C:\Program Files\Fichiers communs\Vbox
[01/03/2008|17:53] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[09/02/2008|19:21] C:\Program Files\Fichiers communs\Wise Installation Wizard
[09/24/2008|21:06] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 39 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-09 18:41:37
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\DOCUME~1\HLNE~1\LOCALS~1\APPLIC~1\Mozilla\Firefox\Profiles\npj0mbfw.default\urlclassifier3.sqlite-journal 923912 bytes
scan completed successfully
hidden processes: 0
hidden files: 1

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:3][D:1]-> C:\DOCUME~1\HLNE~1\LOCALS~1\Temp
[F:11][D:0]-> C:\DOCUME~1\HLNE~1\Cookies
[F:2][D:0]-> C:\DOCUME~1\HLNE~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 11/09/2008|18:09 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 11/09/2008|18:45 - Option : [1]

--------------------\\ Fin du rapport a 18:45:21

oh, pardon!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:48:04, on 11/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\ATI-CPanel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
C:\PROGRA~1\INTUWA~1\Shared\MROUTE~1\MROUTE~1.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://news.google.com/topstories?hl=fr&gl=FR&ceid=FR:fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\Outlook Express\msimn.exe"
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: stardock objectdock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O8 - Extra context menu item: &Download with TrueDownloader! - C:\Program Files\TrueDownloader\TrueDownloader.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe