PC très lent

############################## | UsbFix V6.066 |

User : F8HJV (Administrateurs) # PORTABLE
Update on 20/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 19:17:59 | 23/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : Kaspersky Internet Security 8.0.0.506 [ Enabled | Updated ]
FW : Kaspersky Internet Security[ Enabled ]8.0.0.506

C:\ -> Disque fixe local # 148,93 Go (82,28 Go free) # NTFS
D:\ -> Disque CD-ROM
F:\ -> Disque amovible # 7,52 Go (4,91 Go free) [CLÉBOOT] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 1376
C:\WINDOWS\system32\csrss.exe 1900
C:\WINDOWS\system32\winlogon.exe 1924
C:\WINDOWS\system32\services.exe 1972
C:\WINDOWS\system32\lsass.exe 1984
C:\WINDOWS\system32\svchost.exe 292
C:\WINDOWS\system32\svchost.exe 360
C:\WINDOWS\System32\svchost.exe 404
C:\WINDOWS\system32\svchost.exe 480
C:\WINDOWS\system32\svchost.exe 636
C:\WINDOWS\System32\WLTRYSVC.EXE 948
C:\WINDOWS\System32\bcmwltry.exe 976
C:\WINDOWS\system32\spoolsv.exe 1076
C:\WINDOWS\System32\SCardSvr.exe 1120
C:\WINDOWS\system32\svchost.exe 1180
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe 1232
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe 1264
C:\Program Files\Bonjour\mDNSResponder.exe 1348
C:\WINDOWS\System32\svchost.exe 764
C:\WINDOWS\system32\svchost.exe 1564
C:\WINDOWS\system32\svchost.exe 1584
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe 1612
C:\WINDOWS\System32\svchost.exe 1692
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe 1712
C:\WINDOWS\System32\svchost.exe 1760
C:\Program Files\SPAMfighter\sfus.exe 1832
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 1864
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 1904
C:\WINDOWS\system32\svchost.exe 2100
C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe 2172
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe 2204
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe 2256
C:\WINDOWS\system32\dllhost.exe 2316
C:\Program Files\TeamViewer3\TeamViewer.exe 2464
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe 2520
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe 2612
C:\WINDOWS\system32\SearchIndexer.exe 2684
C:\WINDOWS\system32\fxssvc.exe 2732
C:\WINDOWS\system32\wuauclt.exe 2844
C:\WINDOWS\system32\wbem\wmiprvse.exe 3540
C:\WINDOWS\system32\dllhost.exe 3700
C:\WINDOWS\system32\wbem\wmiprvse.exe 3948
C:\Program Files\Fighters\SLOW-PCfighter\SLOW-PCfighter.exe 2236
C:\WINDOWS\Explorer.EXE 3084
C:\WINDOWS\System32\alg.exe 824
C:\WINDOWS\system32\msdtc.exe 4044

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\Recycler\S-1-5-21-3698457791-2213064524-1487032258-1008
Non supprimé ! F:\autorun.inf
Non supprimé ! F:\AUTORUN_.INF

################## | Registre # Clés infectieuses |

################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{70a344bc-e337-11dd-8c70-001e37813781}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[20/12/2009 13:43|--a------|3356] C:\aaw7boot.log
[22/12/2009 13:05|--a------|4] C:\AUTOEXEC.BAT
[13/12/2009 18:16|-r-hs----|212] C:\boot.ini
[05/08/2004 13:00|-rahs----|4952] C:\Bootfont.bin
[19/08/2004 14:18|---------|0] C:\CONFIG.SYS
[30/01/2008 15:43|-rah-----|6618] C:\dell.sdr
[09/05/2009 06:37|--a------|120] C:\drmHeader.bin
[15/03/2008 19:15|--a------|0] C:\hpfr3420.xml
[04/02/2008 14:18|--a------|4128] C:\INFCACHE.1
[19/08/2004 14:18|--ah-----|0] C:\IO.SYS
[22/12/2009 13:06|--a------|1857] C:\Kill'em.txt
[22/12/2009 09:03|--a------|27154] C:\List'em.txt
[19/08/2004 14:18|--ah-----|0] C:\MSDOS.SYS
[05/08/2004 13:00|-r-hs----|47564] C:\NTDETECT.COM
[08/05/2008 15:37|-r-hs----|252240] C:\ntldr
[?|?|?] C:\pagefile.sys
[27/07/2008 21:34|--a------|13030] C:\PDOXUSRS.NET
[20/12/2009 19:54|--a------|7451168] C:\SUPERAntiSpywarePro.exe
[23/12/2009 19:28|--a------|4351] C:\UsbFix.txt
[13/06/2008 09:19|--a------|2028] F:\Certificat imp“ts.pfx
[11/09/2008 10:06|--a------|2116735] F:\ci.pdf
[12/05/2008 15:09|--a------|28] F:\cleavast.txt
[02/10/2008 09:10|--a------|304289] F:\Code Teamviewer.docx
[02/09/2006 07:37|--a------|913] F:\Contacts de au.christian (wanadoo).ctt
[13/09/2009 16:23|--a------|993711] F:\cours_python.zip
[31/03/2007 11:34|--a------|8596] F:\CRASH.com
[31/03/2007 11:23|--a------|166202] F:\DMICFGsm.exe
[15/09/2009 03:58|--a------|7360152] F:\Driver_Genius_9_Professional_FR.EXE
[17/10/2009 19:43|--a------|1762240] F:\FLV-CONVERTER-15032006.zip
[05/09/2009 08:21|--a------|321721] F:\framaboot.exe
[02/02/2008 12:54|--a------|21364592] F:\Lavasoft_Adaware2007_fr.exe
[08/07/2008 19:19|--a------|23708] F:\Licence-fr.txt
[01/02/2007 17:10|--a------|19968] F:\License XP.doc
[06/07/2005 07:18|--a------|10486] F:\log5.dll
[15/07/2005 20:20|--a------|19095480] F:\m12frweb.exe
[12/09/2008 06:58|--a------|222165] F:\NETGEAR.xps
[24/12/2007 10:03|--a------|421906] F:\Num‚riser0002.jpg
[09/09/2009 06:40|--a------|852192] F:\PCSpeedMaximizer_AQFR.exe
[17/05/2008 12:10|--a------|27100264] F:\PowerPointViewer.exe
[16/05/2008 11:55|--a------|1953480] F:\PPVIEWER.EXE
[16/09/2009 07:35|--a------|2010056] F:\python-pr‚cis-et-concis(2).pdf
[16/05/2006 19:39|--a------|23112758] F:\Quick Time Player Pro 7.0.2.zip
[21/09/2009 08:41|--a------|304243] F:\radio_internet_1_5885.exe
[08/09/2008 15:08|--a------|357936] F:\RealPlayer11GOLD_fr.exe
[05/07/2005 08:48|--a------|2946560] F:\rReplikatorProgramInstaller[francais].msi
[12/08/2009 06:07|--a------|1132768] F:\slow-pcfighter_Web.exe
[09/08/2009 15:48|--a------|17260940] F:\solfege-win32-3.14.7.exe
[23/07/2009 11:16|--a------|1377] F:\start.ini
[04/08/2009 06:52|--a------|17875856] F:\SystemMechanic_1803_01.exe
[02/10/2008 08:07|--a------|1681352] F:\TeamViewer_Setup_fr.exe
[09/10/2008 07:42|--a------|879] F:\TZ5_TZ15_TZ4_TZ11 Mode d'emploi.lnk
[31/10/2007 16:09|--a------|3467935] F:\Webcamfirst_setup.exe
[24/04/2009 10:25|--a------|296] F:\WMPInfo.xml
[23/10/2009 10:01|--a------|77086488] F:\Ad-AwareInstallation.exe
[09/05/2008 11:07|--a------|10357] F:\Avast 090508.docx
[07/12/2009 19:30|--a------|1566] F:\BOOTEX.LOG
[10/12/2009 09:58|--a------|41] F:\Code driver genius.txt
[10/12/2009 20:06|--a------|11229524] F:\PCTV_MCE2005_Setup.exe
[07/12/2009 15:10|--a------|781909] F:\RSIT.exe
[12/12/2009 08:17|--a------|1306824] F:\AD-R.exe
[08/12/2009 12:37|--a------|595968] F:\List_Kill'em.exe
[12/12/2009 08:23|--a------|4844296] F:\mbam-setup.exe
[?|?|?] F:\AUTORUN.INF
[21/12/2009 08:06|--a------|290] F:\Raccourci vers C sur 'Portable (Portable)' (U).lnk
[20/12/2009 19:55|--a------|7451168] F:\SUPERAntiSpywarePro.exe

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.

################## | Cracks / Keygens / Serials |

################## | Upload |

Veuillez envoyer le fichier : C:\DOCUME~1\F8HJV\Bureau\UsbFix_Upload_Me_PORTABLE.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

################## | ! Fin du rapport # UsbFix V6.066 ! |

Merci pour tout.

Bonjour, voici le rapport :

############################## | UsbFix V6.066 |

User : F8HJV (Administrateurs) # PORTABLE
Update on 20/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 18:59:39 | 22/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : Kaspersky Internet Security 8.0.0.506 [ Enabled | Updated ]
FW : Kaspersky Internet Security[ Enabled ]8.0.0.506

C:\ -> Disque fixe local # 148,93 Go (82,42 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM # 446,77 Mo (0 Mo free) [WD SmartWare] # UDF
F:\ -> Disque amovible # 7,52 Go (4,91 Go free) [CLÉBOOT] # FAT32
H:\ -> Disque fixe local # 465,11 Go (246,41 Go free) [My Passport] # NTFS

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 1748
C:\WINDOWS\system32\csrss.exe 1900
C:\WINDOWS\system32\winlogon.exe 1924
C:\WINDOWS\system32\services.exe 1972
C:\WINDOWS\system32\lsass.exe 1984
C:\WINDOWS\system32\svchost.exe 320
C:\WINDOWS\system32\svchost.exe 368
C:\WINDOWS\System32\svchost.exe 408
C:\WINDOWS\system32\svchost.exe 480
C:\WINDOWS\system32\svchost.exe 544
C:\WINDOWS\System32\WLTRYSVC.EXE 940
C:\WINDOWS\System32\bcmwltry.exe 960
C:\WINDOWS\system32\spoolsv.exe 1072
C:\WINDOWS\System32\SCardSvr.exe 1124
C:\WINDOWS\system32\svchost.exe 1172
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe 1228
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe 1260
C:\Program Files\Bonjour\mDNSResponder.exe 1352
C:\WINDOWS\System32\svchost.exe 1364
C:\WINDOWS\system32\svchost.exe 1508
C:\WINDOWS\system32\svchost.exe 1556
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe 1584
C:\WINDOWS\System32\svchost.exe 1684
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe 1716
C:\WINDOWS\System32\svchost.exe 1824
C:\Program Files\SPAMfighter\sfus.exe 1864
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 236
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 456
C:\WINDOWS\system32\svchost.exe 604
C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe 648
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe 676
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe 784
C:\WINDOWS\system32\dllhost.exe 836
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe 1712
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe 2080
C:\Program Files\TeamViewer3\TeamViewer.exe 2156
C:\WINDOWS\system32\SearchIndexer.exe 2264
C:\WINDOWS\system32\fxssvc.exe 2308
C:\WINDOWS\system32\wbem\wmiprvse.exe 3088
C:\WINDOWS\system32\dllhost.exe 3216
C:\WINDOWS\system32\wbem\wmiprvse.exe 3476
C:\WINDOWS\System32\alg.exe 3684
C:\WINDOWS\Explorer.EXE 1132
C:\WINDOWS\system32\WLTRAY.exe 3876
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe 1544
C:\WINDOWS\system32\ctfmon.exe 248
C:\Program Files\Windows Live\Messenger\msnmsgr.exe 2848
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe 2792
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 3428
C:\WINDOWS\system32\msdtc.exe 3856
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe 2928
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 4656
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe 5060
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE 4772
C:\Program Files\Mozilla Firefox\firefox.exe 3608
C:\WINDOWS\system32\SearchProtocolHost.exe 9276
C:\WINDOWS\system32\SearchFilterHost.exe 3028

################## | Fichiers # Dossiers infectieux |

E:\autorun.inf
F:\autorun.inf
F:\AUTORUN_.INF

################## | Registre # Clés infectieuses |

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{70a344bc-e337-11dd-8c70-001e37813781}
Shell\AutoRun\command =iw.bat
Shell\explore\Command =iw.bat
Shell\open\Command =iw.bat

################## | Cracks / Keygens / Serials |

################## | ! Fin du rapport # UsbFix V6.066 ! |

merci

Logfile of random's system information tool 1.06 (written by random/random)
Run by F8HJV at 2009-12-22 15:31:59
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 84 GB (55%) free of 152 GB
Total RAM: 2038 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:32:03, on 22/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SPAMfighter\sfus.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
C:\Program Files\TeamViewer3\TeamViewer.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\F8HJV\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\F8HJV.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=1080130
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://127.0.0.1:4664/first_usage&s=WAKM65XzpB9ukssSm6YNy_2pM70
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {6E4DF8BF-75EC-480D-A578-08FEEB8C6749} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
O9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) -
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://82.127.2.3:9010/RtspVaPgDec.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader5.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://rieux-marne.net:8085/activex/AMC.cab
O16 - DPF: {AA0FB75C-C50E-47B6-B7E0-3B9C3FAA8AC4} (CamImage Class) - http://192.168.0.4/Comm/IPCamControl.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-2.0.cab
O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} - http://bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Filter hijack: text/html - {53B95211-7D77-11D2-9F80-00104B107C96} - (no file)
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: gemsafe - C:\Program Files\Gemplus\GemSafe Libraries\BIN\WLEventNotify.dll
O20 - Winlogon Notify: vtUlJcDW - vtUlJcDW.dll (file missing)
O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
O23 - Service: NTRU TSS v1.2.1.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
O23 - Service: WaveEnrollmentService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Authentication Manager\WaveEnrollmentService.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

Voici, bonne journée.
Kill'em by g3n-h@ckm@n 1.1.5.2

User : F8HJV () # PORTABLE
Update on 14/12/2009 by g3n-h@ckm@n ::::: 00:00
Start at: 12:59:03 | 22/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : Kaspersky Internet Security 8.0.0.506 [ Enabled | Updated ]
FW : Kaspersky Internet Security[ Enabled ]8.0.0.506

C:\ -> Disque fixe local | 148,93 Go (82,58 Go free) | NTFS
D:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe 180
C:\WINDOWS\system32\csrss.exe 228
C:\WINDOWS\system32\winlogon.exe 252
C:\WINDOWS\system32\services.exe 300
C:\WINDOWS\system32\lsass.exe 312
C:\WINDOWS\system32\svchost.exe 488
C:\WINDOWS\system32\svchost.exe 560
C:\WINDOWS\system32\svchost.exe 616
C:\WINDOWS\Explorer.EXE 1036
C:\Program Files\WinRAR\WinRAR.exe 1348
C:\DOCUME~1\F8HJV\LOCALS~1\Temp\Rar$EX00.734\List_Kill'em.exe 1384
C:\WINDOWS\system32\cmd.exe 1400
C:\WINDOWS\system32\wbem\wmiprvse.exe 1472
C:\Documents and Settings\F8HJV\Local Settings\Temp\2.tmp\pv.exe 1592

Detections :
==========

¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Documents and Settings\F8HJV\LOCAL Settings\Temp\SSUPDATE.EXE
C:\Documents and Settings\F8HJV\LOCAL Settings\Temp\tmp49.tmp

¤¤¤¤¤¤¤¤¤¤ Files/folders deleted :

Quarantine :

SSUPDATE.EXE.Kill'em
tmp49.tmp.Kill'em

==============
host file OK !
==============

========
Registry
========
Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe

============
Disk Cleaned
============

================
Prefetch cleaned
================

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Bonne journée.
http://www.cijoint.fr/cjlink.php?file=cj200912/cijYJOO3Mz.txt
Merci

Je te remercie de l'intérêt porté à mes problème.
Merci et bonne journée.

SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 12/20/2009 at 01:10 PM

Application Version : 4.32.1000

Core Rules Database Version : 4396
Trace Rules Database Version: 2232

Scan type : Complete Scan
Total Scan Time : 02:43:47

Memory items scanned : 785
Memory threats detected : 0
Registry items scanned : 8843
Registry threats detected : 5
File items scanned : 222521
File threats detected : 3

Adware.Tracking Cookie
C:\Documents and Settings\F8HJV\Cookies\f8hjv@atdmt[3].txt
C:\Documents and Settings\F8HJV\Cookies\f8hjv@atdmt[2].txt
C:\Documents and Settings\F8HJV\Cookies\f8hjv@tradedoubler[2].txt

Rogue.Component/Trace
HKLM\Software\Microsoft\50574F8B
HKLM\Software\Microsoft\50574F8B#50574f8b
HKLM\Software\Microsoft\50574F8B#Version
HKLM\Software\Microsoft\50574F8B#5057e20b
HKLM\Software\Microsoft\50574F8B#50578bee

Donc, il n'y a plus de solution ?
Bonne journée.
C.A.

Désolé, j'avais bien compris, il y avais que ces deux là.
Bonne soirée

Peut-être il y a eu un problème, il y en avait deux, ceux que je t'ai envoyé.
Bonne soirée.
C.A

Je suis désolé, il y a que les deux rapport que je t'ai envoyé.
Bonne journée
C.A.

J'espère que c'est ça que tu veux.

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3351
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

13/12/2009 12:29:58
mbam-log-2009-12-13 (12-29-58).txt

Type de recherche: Examen complet (E:\|)
Eléments examinés: 4724
Temps écoulé: 59 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
Bonne journée.
C.A.

C'est fait :
Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3351
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

13/12/2009 12:11:24
mbam-log-2009-12-13 (12-11-11).txt

Type de recherche: Examen complet (C:\|H:\|)
Eléments examinés: 458755
Temps écoulé: 3 hour(s), 40 minute(s), 0 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 20

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\MessengerSkinner (Rogue.MessengerSkinner) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP92\A0017136.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP92\A0017332.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP98\A0018325.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP98\A0018326.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019558.exe (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019559.exe (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019580.dll (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019581.dll (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019582.exe (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019583.exe (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019602.exe (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019605.dll (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019606.dll (Adware.Gibmedia) -> No action taken.
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP116\A0019607.exe (Adware.Gibmedia) -> No action taken.
C:\Program Files\Ad-Remover\QUARANTINE\DOCUME~1\F8HJV\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdate.exe.vir (Rogue.Eorezo) -> No action taken.
C:\Program Files\Ad-Remover\QUARANTINE\DOCUME~1\F8HJV\APPLIC~1\EoRezo\SOFTWA~1\SoftwareUpdateHP.exe.vir (Rogue.Eorezo) -> No action taken.
H:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP92\A0017676.exe (Trojan.Downloader) -> No action taken.
H:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP92\A0017720.exe (Trojan.Downloader) -> No action taken.
H:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP92\A0017729.exe (Trojan.Downloader) -> No action taken.
H:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP92\A0017778.exe (Trojan.Downloader) -> No action taken.
Merci
C.A.

Encore avec mes excuses :
http://www.cijoint.fr/cjlink.php?file=cj200912/cijQTyXUcn.txt
Bon WE.
C.A.

Bonjour et bon WE.

Logfile of random's system information tool 1.06 (written by random/random)
Run by F8HJV at 2009-12-12 08:57:43
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 73 GB (48%) free of 152 GB
Total RAM: 2038 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:58:00, on 12/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SPAMfighter\sfus.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
C:\Program Files\TeamViewer3\TeamViewer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\msdtc.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBOID.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBPRO.EXE
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Documents and Settings\F8HJV\Mes documents\Téléchargements\RSIT(2).exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\trend micro\F8HJV.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=1080130
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://127.0.0.1:4664/first_usage&s=WAKM65XzpB9ukssSm6YNy_2pM70
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {6E4DF8BF-75EC-480D-A578-08FEEB8C6749} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O4 - Global Startup: WDSmartWare.lnk = C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Translate - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
O9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-4A83-11B4-885B-0000E8ECA40F} - C:\Program Files\LingoCom\Translator.lnk
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) -
O16 - DPF: {361E6B79-4A69-4376-B0F2-3D1EBEE9D7E2} (RtspVaPgCtrl Class) - http://82.127.2.3:9010/RtspVaPgDec.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader5.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://rieux-marne.net:8085/activex/AMC.cab
O16 - DPF: {AA0FB75C-C50E-47B6-B7E0-3B9C3FAA8AC4} (CamImage Class) - http://192.168.0.4/Comm/IPCamControl.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-2.0.cab
O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Filter hijack: text/html - {53B95211-7D77-11D2-9F80-00104B107C96} - (no file)
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O20 - Winlogon Notify: gemsafe - C:\Program Files\Gemplus\GemSafe Libraries\BIN\WLEventNotify.dll
O20 - Winlogon Notify: vtUlJcDW - vtUlJcDW.dll (file missing)
O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
O23 - Service: NTRU TSS v1.2.1.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
O23 - Service: WaveEnrollmentService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Authentication Manager\WaveEnrollmentService.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

Excuses_moi, c'est surement ça :

Kill'em by g3n-h@ckm@n 1.1.3.1

User : F8HJV () # PORTABLE
Update on 08/12/2009 by g3n-h@ckm@n ::::: 12:30
Start at: 06:40:47 | 10/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : Kaspersky Internet Security 8.0.0.506 [ Enabled | Updated ]
FW : Kaspersky Internet Security[ Enabled ]8.0.0.506

C:\ -> Disque fixe local | 148,93 Go (76,88 Go free) | NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque amovible | 7,52 Go (4,94 Go free) [CLÉBOOT] | FAT32
F:\ -> Disque CD-ROM | 446,77 Mo (0 Mo free) [WD SmartWare] | UDF
H:\ -> Disque fixe local | 465,11 Go (279,18 Go free) [My Passport] | NTFS

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe 184
C:\WINDOWS\system32\csrss.exe 244
C:\WINDOWS\system32\winlogon.exe 268
C:\WINDOWS\system32\services.exe 316
C:\WINDOWS\system32\lsass.exe 328
C:\WINDOWS\system32\svchost.exe 500
C:\WINDOWS\system32\svchost.exe 572
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe 640
C:\WINDOWS\system32\svchost.exe 700
C:\WINDOWS\system32\wbem\unsecapp.exe 828
C:\WINDOWS\system32\wbem\wmiprvse.exe 944
C:\WINDOWS\Explorer.EXE 1128
C:\Program Files\WinRAR\WinRAR.exe 1388
C:\DOCUME~1\F8HJV\LOCALS~1\Temp\Rar$EX02.907\List_Kill'em.exe 1432
C:\WINDOWS\system32\cmd.exe 1448
C:\WINDOWS\system32\wbem\wmiprvse.exe 1552
C:\Documents and Settings\F8HJV\Local Settings\Temp\1.tmp\pv.exe 1608

Detections :
==========

¤¤¤¤¤¤¤¤¤¤ Files/folders :

"C:\Documents and Settings\All Users\Application Data\.zreglib"
C:\Documents and Settings\All Users\Application Data\.tv
"C:\Program Files\AGI"
"C:\Program Files\Winsudate"
"C:\WINDOWS\iun6002.exe"
"C:\WINDOWS\System32\drivers\etc\hosts.msn"
"C:\WINDOWS\System32\drivers\lvuvc.hs"
"C:\WINDOWS\system32\x64"
C:\Documents and Settings\F8HJV\Local Settings\Application Data\WavXMapDrive.bat
C:\Documents and Settings\F8HJV\LOCAL Settings\Temp\jre-6u17-windows-i586-iftw-rv_fbd7f4d1.exe

¤¤¤¤¤¤¤¤¤¤ Files/folders deleted :

Quarantine :

.tv.Kill'em
.zreglib.Kill'em
AGI.Kill'em
hosts.msn.Kill'em
iun6002.exe.Kill'em
jre-6u17-windows-i586-iftw-rv_fbd7f4d1.exe.Kill'em
lvuvc.hs.Kill'em
WavXMapDrive.bat.Kill'em
Winsudate.Kill'em
x64.Kill'em

==============
host file OK !
==============

========
Registry
========
Deleted : HKLM\SOFTWARE\Microsoft\MS Track System
Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe
Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Deleted : HKLM\SOFTWARE\Microsoft\FCOVM
Deleted : HKLM\SOFTWARE\Microsoft\RemoveRP
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19

============
Disk Cleaned
============

================
Prefetch cleaned :
================

Layout.ini
NTOSBOOT-B00DFAAD.pf

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Voici le rapport de la destruction de Kill'em en mode sans échec.
je te remercie pour tout.
Bonne journée.
C.A.

List'em by g3n-h@ckm@n 1.1.3.1

Thx to Chiquitine29.....& [/ CCM] team

User : F8HJV (Administrateurs) # PORTABLE
Update on 08/12/2009 by g3n-h@ckm@n ::::: 12:30
Start at: 19:25:31 | 08/12/2009
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : Kaspersky Internet Security 8.0.0.506 [ (!) Disabled | Updated ]
FW : Kaspersky Internet Security[ (!) Disabled ]8.0.0.506

C:\ -> Disque fixe local | 148,93 Go (75,39 Go free) | NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque amovible | 7,52 Go (4,94 Go free) [CLÉBOOT] | FAT32

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe 1760
C:\WINDOWS\system32\csrss.exe 1920
C:\WINDOWS\system32\winlogon.exe 1944
C:\WINDOWS\system32\services.exe 1992
C:\WINDOWS\system32\lsass.exe 2004
C:\WINDOWS\system32\svchost.exe 396
C:\WINDOWS\system32\svchost.exe 468
C:\WINDOWS\System32\svchost.exe 512
C:\WINDOWS\system32\svchost.exe 564
C:\WINDOWS\system32\svchost.exe 916
C:\WINDOWS\System32\WLTRYSVC.EXE 1072
C:\WINDOWS\System32\bcmwltry.exe 1092
C:\WINDOWS\system32\spoolsv.exe 1240
C:\WINDOWS\System32\SCardSvr.exe 1400
C:\WINDOWS\system32\svchost.exe 1640
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe 1696
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe 1744
C:\Program Files\Bonjour\mDNSResponder.exe 1776
C:\WINDOWS\System32\svchost.exe 1804
C:\WINDOWS\system32\svchost.exe 1864
C:\WINDOWS\system32\svchost.exe 1900
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe 600
C:\WINDOWS\System32\svchost.exe 704
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe 820
C:\WINDOWS\System32\svchost.exe 848
C:\Program Files\SPAMfighter\sfus.exe 1004
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 1048
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 340
C:\WINDOWS\system32\svchost.exe 1484
C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe 1540
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe 1508
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe 2148
C:\WINDOWS\system32\dllhost.exe 2200
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe 2340
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe 2360
C:\Program Files\TeamViewer3\TeamViewer.exe 2376
C:\WINDOWS\Explorer.EXE 2584
C:\WINDOWS\system32\SearchIndexer.exe 2628
C:\WINDOWS\system32\fxssvc.exe 2716
C:\WINDOWS\system32\WLTRAY.exe 3728
C:\WINDOWS\system32\hkcmd.exe 3784
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe 3828
C:\WINDOWS\system32\dllhost.exe 2796
C:\WINDOWS\system32\wbem\wmiprvse.exe 1084
C:\WINDOWS\system32\wbem\wmiprvse.exe 3364
C:\WINDOWS\System32\alg.exe 4084
C:\Program Files\SPAMfighter\SFAgent.exe 1248
C:\WINDOWS\system32\ctfmon.exe 4056
C:\WINDOWS\system32\msdtc.exe 4068
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 1480
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe 4128
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe 4244
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 5764
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe 5908
C:\PROGRA~1\FICHIE~1\Nokia\MPLATF~1\NOKIAM~1.EXE 5740
c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 1580
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe 3928
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe 3820
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe 5464
C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe 4188
C:\WINDOWS\system32\wscntfy.exe 17784
C:\Program Files\WinRAR\WinRAR.exe 30892
C:\DOCUME~1\F8HJV\LOCALS~1\Temp\Rar$EX00.031\List_Kill'em.exe 30756
C:\WINDOWS\system32\cmd.exe 29968
C:\Documents and Settings\F8HJV\Local Settings\Temp\3D2E.tmp\pv.exe 31144

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Broadcom Wireless Manager UI REG_SZ C:\WINDOWS\system32\WLTRAY.exe
AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
IgfxTray REG_SZ C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds REG_SZ C:\WINDOWS\system32\hkcmd.exe
SigmatelSysTrayApp REG_EXPAND_SZ %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
<NO NAME> REG_SZ
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Adobe ARM REG_SZ "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
hpqSRMon REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
Kernel and Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
SPAMfighter Agent REG_SZ "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveTypeAutoRun REG_DWORD 145 (0x91)
NoDriveAutoRun REG_DWORD 145 (0x91)
HonorAutoRunSetting REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
HonorAutoRunSetting REG_DWORD 0 (0x0)
NoCDBurning REG_DWORD 0 (0x0)
NoDriveAutoRun REG_DWORD 145 (0x91)
NoDriveTypeAutoRun REG_DWORD 157 (0x9d)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\gemsafe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\igfxcui]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\klogon]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\vtUlJcDW]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\RealVNC\VNC4\vncviewer.exe REG_SZ C:\Program Files\RealVNC\VNC4\vncviewer.exe:*:Enabled:Run VNC Viewer
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe REG_SZ C:\Program Files\Veoh Networks\Veoh\VeohClient.exe:*:Enabled:Veoh Client
C:\Program Files\RealVNC\VNC4\winvnc4.exe REG_SZ C:\Program Files\RealVNC\VNC4\winvnc4.exe:*:Enabled:winvnc4.exe
C:\Program Files\Microsoft Games\FS2002\fs2002.exe REG_SZ C:\Program Files\Microsoft Games\FS2002\fs2002.exe:*:Enabled:Module de Microsoft Flight Simulator
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe REG_SZ C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe:*:Enabled:Kaspersky Anti-Virus
C:\Program Files\K1RFD\EchoLink\EchoLink.exe REG_SZ C:\Program Files\K1RFD\EchoLink\EchoLink.exe:*:Enabled:EchoLink
C:\Program Files\Internet Explorer\iexplore.exe REG_SZ C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer
C:\WINDOWS\system32\dpvsetup.exe REG_SZ C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test
C:\WINDOWS\system32\rundll32.exe REG_SZ C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe REG_SZ C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
C:\Program Files\Yahoo!\Messenger\YServer.exe REG_SZ C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server
C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe REG_SZ C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix
C:\Program Files\GNU\GNUnet\bin\gnunetd.exe REG_SZ C:\Program Files\GNU\GNUnet\bin\gnunetd.exe:*:Enabled:gnunetd
C:\Program Files\TeamViewer3\TeamViewer.exe REG_SZ C:\Program Files\TeamViewer3\TeamViewer.exe:*:Enabled:Application de pilotage à distance TeamViewer
C:\WINDOWS\system32\fxsclnt.exe REG_SZ C:\WINDOWS\system32\fxsclnt.exe:*:Enabled:Microsoft Fax Console
C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe REG_SZ C:\Program Files\Fichiers communs\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process
C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe REG_SZ C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater
C:\Program Files\Shareaza\Shareaza.exe REG_SZ C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza Ultimate File Sharing
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Python26\pythonw.exe REG_SZ C:\Python26\pythonw.exe:*:Enabled:pythonw
C:\Program Files\Bonjour\mDNSResponder.exe REG_SZ C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
D:\bin\IA\Core\MDM_Util.exe REG_SZ D:\bin\IA\Core\MDM_Util.exe:*:Enabled:MDM_Util
C:\Program Files\Mozilla Firefox\firefox.exe REG_SZ C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox
C:\Program Files\Vuze\Azureus.exe REG_SZ C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus
C:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe REG_SZ C:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe:*:Enabled:Dreamweaver MX
C:\Program Files\Skype\Phone\Skype.exe REG_SZ C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath
C:\Program Files\TwonkyMedia\twonkymediaserver.exe REG_SZ C:\Program Files\TwonkyMedia\twonkymediaserver.exe:*:Enabled:TwonkyMediaServer
C:\Program Files\TwonkyMedia\twonkymedia.exe REG_SZ C:\Program Files\TwonkyMedia\twonkymedia.exe:*:Enabled:TwonkyMedia
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Realtek\Transcode Server\TranscodeServer.exe REG_SZ C:\Program Files\Realtek\Transcode Server\TranscodeServer.exe:*:Enabled:TranscodeServer
D:\setup\hpznui01.exe REG_SZ D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe
C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe
C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe
C:\Program Files\Spamihilator\cdcc.exe REG_SZ C:\Program Files\Spamihilator\cdcc.exe:*:Enabled:Spamihilator DCC Filter Configuration
C:\Program Files\Spamihilator\dccproc.exe REG_SZ C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:Spamihilator DCC Filter
C:\Program Files\Spamihilator\spamihilator.exe REG_SZ C:\Program Files\Spamihilator\spamihilator.exe:*:Enabled:Spamihilator

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
D:\setup\hpznui01.exe REG_SZ D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe
C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe
C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe REG_SZ C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe

===============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0347C33E-8762-4905-BF09-768834316C61}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6E4DF8BF-75EC-480D-A578-08FEEB8C6749}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.google.fr/?gws_rd=ssl

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3
EapHost : 0x2
SharedAccess : 0x2
wuauserv : 0x2

=========

=======
Drive :
=======

D‚fragmenteur de disque Windows
Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

==========
Programs
==========

@Last Software
ABAEnglishCourse
Active WebCam
Ad-Remover
Adobe
AGI
AGW_Cluster
Alcohol Soft
Alwil Software
Apple Software Update
Attractive Clock
AVS4YOU
Axis Communications
Axon Data
Bonjour
Borland
Broadcom
CCleaner
Ciel
Citrix
ComPlus Applications
Conduit
CONEXANT
CyberLink
Dactylo
Dell
DellSupport
DellTPad
Dictionnaire le Littr‚ 2.0
DIFX
Digital Line Detect
DivX
Driver-Soft
DynDNS Updater
EarMaster Essential 5
Easy CD-DA Extractor 12
El Juky
Fake Webcam
Fichiers communs
Fighters
Fingerprint Sensor
fond-ecran-wallpaper
FSX_Screensaver
G4FON Software
Gemplus
GNU
GNU Solfege
Google
Hewlett-Packard
HP
InstallShield Installation Information
Intel
Internet Explorer
IPCam Setup
iTunes
Jalmus
Jasc Software Inc
Java
K1RFD
Kaspersky Lab
Lavasoft
LingoCom
LireLaMusique
Logitech
Macromedia
Messenger
Messenger Plus! Live
Microsoft
Microsoft CAPICOM 2.1.0.2
microsoft frontpage
Microsoft Games
Microsoft Office
Microsoft Silverlight
Microsoft Small Business
Microsoft SQL Server
Microsoft Visual Studio
Microsoft Works
Microsoft.NET
Modem Diagnostic Tool
Movie Maker
Mozilla Firefox
MP3 CD Converter
MSBuild
MSECache
Msg
MSN
MSN Gaming Zone
MSXML 4.0
MSXML 6.0
Navirad
Nero
NetMeeting
NetWaiting
Nokia
NTRU Cryptosystems
Online Services
Outlook Express
Panasonic
PC Connectivity Solution
PDFCreator
Power@Shop
ProFF-Morse-3
QuickTime
Radio Fr Solo
Real
Realtek
Reference Assemblies
Registry Mechanic
Roxio
Saitek
Services en ligne
Shareaza
SigmaTel
Skype
SlySoft
SPAMfighter
Spamihilator
TeamViewer
TeamViewer3
TerraTec
ToniArts
Toshiba
Trend Micro
TuneUp Utilities 2006
TuneUpMedia
Uninstall Information
Veoh Networks
VideoLAN
Visicom Media
Vuze
WalkGuard
Wave Systems Corp
Western Digital
Windows Desktop Search
Windows Live
Windows Live SkyDrive
Windows Media Connect 2
Windows Media Player
Windows NT
WindowsUpdate
WinRAR
Winsudate
xerox

¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Documents and Settings\All Users\Application Data\.zreglib
C:\Documents and Settings\All Users\Application Data\.tv
C:\Program Files\AGI
C:\Program Files\Winsudate
C:\WINDOWS\iun6002.exe
C:\WINDOWS\System32\drivers\etc\hosts.msn
C:\WINDOWS\System32\drivers\lvuvc.hs
C:\WINDOWS\system32\x64
C:\Documents and Settings\F8HJV\Local Settings\Application Data\WavXMapDrive.bat
C:\Documents and Settings\F8HJV\LOCAL Settings\Temp\jre-6u17-windows-i586-iftw-rv_fbd7f4d1.exe

¤¤¤¤¤¤¤¤¤¤ Keys :

"HKLM\SOFTWARE\Microsoft\MS Track System"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}"
HKLM\SOFTWARE\Microsoft\FCOVM
HKLM\SOFTWARE\Microsoft\RemoveRP
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19

=========
Rootkits
=========

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-08 19:27:51
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:13,7b,23,5b,25,ae,52,ca,d4,d5,ab,d7,88,19,3e,28,f1,48,22,77,3f,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:13,7b,23,5b,25,ae,52,ca,d4,d5,ab,d7,88,19,3e,28,f1,48,22,77,3f,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:13,7b,23,5b,25,ae,52,ca,d4,d5,ab,d7,88,19,3e,28,f1,48,22,77,3f,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\HP Photosmart C309a series]
"ChangeID"=dword:24439133

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤)

Merci et bonne journée.
http://www.cijoint.fr/cjlink.php?file=cj200912/cijxOgsggF.txt
C.A.

Voici les 2 fichiers rsit mis bout à bout.
http://www.cijoint.fr/cjlink.php?file=cj200912/cijDJqjthN.txt
Merci.
C.A.

C'est fait,
Bonne journée.
C.A.