Virus envahissant

Bonsoir Lyonnais désolé d'avoir mis tant de temps à répondre.
Voici le rapport:
############################## | UsbFix V6.073 |

User : Flo (Administrateurs) # PC-DE-FLO
Update on 09/01/2010 by El Desaparecido , C_XX & Chimay8
Start at: 17:41:44 | 25/01/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18882
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 149,04 Go (68,78 Go free) [VistaOS] # NTFS
D:\ -> Disque fixe local # 139,28 Go (80,92 Go free) [DATA] # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque fixe local # 931,51 Go (287,85 Go free) [Requiem] # NTFS
H:\ -> Disque fixe local # 465,65 Go (310,47 Go free) [IOMEGA_HDD] # FAT32

###################### | Listing des fichiers présents C:\ |

[06/10/2008 04:46|--a------|21] - C:\app3.LOG
[08/12/2009 21:31|--a------|4] - C:\autoexec.bat
[11/04/2009 07:36|-rahs----|333257] - C:\bootmgr
[16/04/2008 12:27|-ra-s----|8192] - C:\BOOTSECT.BAK
[04/04/2007 20:01|--a------|19] - C:\CA21.txt
[20/01/2010 17:01|--a------|523] - C:\colorbox.log
[18/09/2006 22:43|--a------|10] - C:\config.sys
[18/01/2009 03:23|--a------|21971] - C:\devlist.txt
[20/10/2008 03:28|-rah-----|1048576] - C:\F6A.BIN
[05/12/2008 09:50|--a------|14] - C:\F6A_F6V_VISTA.40
[20/10/2008 03:13|-rah-----|1048576] - C:\F6V.BIN
[18/01/2009 02:03|--a------|481] - C:\igoogle_log.txt
[07/12/2009 15:46|-rahs----|0] - C:\IO.SYS
[24/06/2009 19:04|--a------|78] - C:\lxdx.log
[07/12/2009 15:46|-rahs----|0] - C:\MSDOS.SYS
[08/08/2008 08:22|--a------|30] - C:\NERO.LOG
[04/07/2008 05:35|--a------|21] - C:\NIS2008.TXT
[07/12/2009 13:56|--a------|262144] - C:\ntuser.dat
[07/12/2009 13:56|--ah-----|5120] - C:\ntuser.dat.LOG1
[07/12/2009 13:55|--ah-----|0] - C:\ntuser.dat.LOG2
[07/12/2009 13:55|--ahs----|65536] - C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TM.blf
[07/12/2009 13:55|--ahs----|524288] - C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
[07/12/2009 13:55|--ahs----|524288] - C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
[07/12/2009 13:56|--ahs----|65536] - C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TM.blf
[07/12/2009 13:56|--ahs----|524288] - C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
[07/12/2009 13:55|--ahs----|524288] - C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
[16/03/2007 00:18|--a------|25] - C:\OFFICE2007_A.TXT
[?|?|?] - C:\pagefile.sys
[17/01/2009 12:24|--a------|105] - C:\Pass.txt
[19/11/2008 04:32|--a------|2914] - C:\Patch.LOG
[29/04/2008 15:30|--a------|20] - C:\READER_A.TXT
[05/12/2008 09:50|--a------|10] - C:\RECOVERY.DAT
[18/01/2009 02:34|--a------|426] - C:\RHDSetup.log
[18/01/2009 03:05|--a------|179] - C:\setup.log
[18/01/2009 01:19|--a------|166] - C:\SumHidd.txt
[18/01/2009 01:18|--a------|98] - C:\SumOS.txt
[25/01/2010 17:41|--a------|3094] - C:\UsbFix.txt
[21/10/2008 04:19|--a------|21] - C:\V553.txt

###################### | Listing des dossiers présents C:\ |

[15/01/2010 22:53|d--hs----|0] - C:\$RECYCLE.BIN
[18/01/2009 03:14|d--------|0] - C:\ASUS.SYS
[11/12/2009 14:26|d--------|0] - C:\ATI
[13/01/2010 20:25|drahs----|0] - C:\autorun.inf
[05/01/2010 13:33|d--------|4096] - C:\Boot
[02/11/2006 14:02|d--hs---l|0] - C:\Documents and Settings
[18/01/2009 02:11|d--------|0] - C:\Intel
[29/03/2009 18:17|d--------|0] - C:\logs
[18/01/2009 00:45|dr-------|0] - C:\MSOCache
[01/12/2009 13:59|d--------|0] - C:\output
[13/11/2009 15:18|d--------|0] - C:\PerfLogs
[08/01/2010 09:14|dr-------|24576] - C:\Program Files
[13/01/2010 20:03|d--------|8192] - C:\ProgramData
[25/01/2010 13:14|d--hs----|24576] - C:\System Volume Information
[07/12/2009 13:51|d--------|0] - C:\temp
[01/12/2009 10:36|d--------|0] - C:\tmp
[25/01/2010 17:41|d--------|4096] - C:\UsbFix
[04/12/2009 12:03|dr-------|4096] - C:\Users
[10/12/2009 11:15|d--------|4096] - C:\wamp
[18/01/2010 09:11|d--------|28672] - C:\Windows

###################### | Listing des fichiers présents D:\ |

[07/12/2009 19:46|--a------|3326576] - D:\ccsetup226.exe
[08/12/2009 15:36|--a------|4113804] - D:\FileZilla_3.3.0_win32-setup.exe
[23/12/2009 16:26|--a------|16871432] - D:\gimp-2.6.7-i686-setup.exe
[08/01/2010 14:33|--a------|7045770] - D:\Joomla_1.5.15-Stable-Full_Package_french.zip

###################### | Listing des dossiers présents D:\ |

[15/01/2010 22:53|d--------|4096] - D:\$RECYCLE.BIN
[26/05/2009 10:48|d--------|4096] - D:\147a53023204f709d8bc3b5ef6
[30/11/2009 15:18|d--------|4096] - D:\Adobe CS3 portable
[04/12/2009 12:28|d--------|4096] - D:\Adobe CS4 Master Collection
[01/12/2009 09:22|d--------|4096] - D:\Adobe Dreamweaver CS4
[13/01/2010 20:25|drahs----|0] - D:\autorun.inf
[17/12/2009 09:15|d--------|28672] - D:\Big Bang Theory Saison 1
[17/12/2009 09:13|d--------|32768] - D:\Big Bang Theory Saison 2
[20/11/2009 09:14|d--------|4096] - D:\dac3fde905903816f64fb0
[24/01/2010 19:05|d--------|8192] - D:\download a trier
[27/12/2009 16:10|d--------|0] - D:\JDownloader_Installer
[25/01/2010 12:54|d--hs----|40960] - D:\System Volume Information
[23/01/2010 12:59|d--------|4096] - D:\Victoria's secret fashion show

###################### | Listing des fichiers présents F:\ |

[21/11/2009 01:45|--a------|5635806] - F:\2009_Jungleman_Exp‚rience.mp3
[24/11/2009 12:51|--a------|118919526] - F:\2009_Jungleman_Need_my_O'ta.mp3
[16/11/2009 17:52|--a------|749277184] - F:\2012.Terre.Brulee.2009.FRENCHEDIT.DVDRIP.XVID-BN.DIV.avi
[19/11/2009 20:09|--a------|734400512] - F:\2012.THE.MOVIE.FRENCH.TS.MD.XviD.REPACK.1CD-BOWSER.avi
[19/12/2009 13:36|--a------|735313920] - F:\Arthur.et.La.Vengeance.De.Maltazard.2009.FRENCHEDIT.DVDRIP.XVID-BN.DIV.avi
[16/11/2009 17:11|--a------|25100052] - F:\Black Eyed Peas - My Humps (uncensored).mkv
[16/11/2009 17:14|--a------|58957794] - F:\Black Eyed Peas- Pump It .2006.HDTVRip.720p.X264. GemiSantana.mkv
[16/11/2009 17:14|--a------|72269038] - F:\Black Eyed Peas-Boom Boom Pow.mkv
[16/11/2009 17:09|--a------|116766336] - F:\Black Eyed Peas-I Gotta Feeling.mkv
[23/01/2009 17:45|--a------|35301971] - F:\Bollock's flight nø2009.mp3
[01/12/2009 14:29|--a------|127584447] - F:\Drum_&_Bass_Mix.mp3
[10/11/2009 12:32|--a------|31837625] - F:\Dubstep_Part1_vite-fait.mp3
[10/11/2009 12:41|--a------|55245952] - F:\Dubstep_Part2.mp3
[19/10/2009 20:03|--a------|699383310] - F:\Heroes S04E01E02 VOSTFR.avi
[08/11/2009 16:38|--a------|367781646] - F:\Heroes S04E08 VOSTFR Rebel TEAM Sub HDTV XViD-Weapon-X.avi
[23/10/2009 06:56|--a------|329770584] - F:\heroes.s04e03.VOSTFR HDTV.xvid-T2D-.avi
[23/10/2009 07:05|--a------|366302796] - F:\Heroes.S04E04.Acceptance.HDTV.XviD-FQM.VOSTFR.Bjork.avi
[23/10/2009 06:52|--a------|300530422] - F:\Heroes.S04E05.VOSTFR.Gillop.avi
[23/10/2009 06:59|--a------|367405792] - F:\Heroes.S04E06.HDTV.XviD-NoTV.sub.FR.VOstFR.Bjork.avi
[29/10/2009 14:27|--a------|366108932] - F:\Heroes.S04E07.HDTV.XviD-LOL.sub.FR.VOstFR.Bjork.avi
[12/11/2009 21:14|--a------|366430674] - F:\Heroes.S04E09.Shadowboxing.HDTV.XviD-LOL.sub.FR.VOstFR.Bjork.avi
[19/11/2009 17:17|--a------|366340076] - F:\Heroes.S04E10.Brothers.Keeper.HDTV.XviD-FQM.sub.FR.VOstFR.Bjork.avi
[31/05/2009 20:34|--a------|140980] - F:\Jungleman.jpg
[02/07/2009 11:59|--a------|114085828] - F:\jungleman_mix.mp3
[16/11/2009 23:58|--a------|2754114972] - F:\l'age de glace 3 Le Temps des dinosaures 1080p bluray french x264 EuReKA-doud.avi
[02/11/2009 13:11|--a------|734474240] - F:\L'Age De Glace 3.avi
[19/12/2009 16:29|--a------|706731506] - F:\L_Assistant du vampire-xvid.cam-vf.avi
[27/11/2009 14:09|--a------|14914873] - F:\mix_mc1.mp3
[27/11/2009 14:10|--a------|15693949] - F:\mix_mc2.mp3
[19/10/2009 21:40|--a------|733634560] - F:\Rec.FRENCH.DVDRip.XviD-ULTRASON.avi
[06/05/2009 03:08|--a------|734298112] - F:\S.Darko.A.Donnie.Darko.Tale.avi
[19/02/2009 02:54|--a------|708993024] - F:\The Days the Earth Still Stood.avi
[24/08/2009 21:26|--a------|721166144] - F:\The.Devil.s.Chair.2008.FRENCH.DVDRiP.XViD-ARTEFAC.avi
[20/06/2009 18:06|--a------|731600896] - F:\The_Unborn.avi
[05/10/2009 07:08|--a------|1467731968] - F:\Un.Anglais.A.New.York.French.DVDRIP.HQ.TEAMPHXCHILD.avi
[17/09/2009 14:13|--a------|727189504] - F:\Very.Bad.Trip.avi

###################### | Listing des dossiers présents F:\ |

[13/01/2010 20:25|d--hs----|0] - F:\$RECYCLE.BIN
[21/12/2009 03:35|d--------|0] - F:\Antichrist.LIMITED.FRENCH.DVDRip.XviD-NERD
[13/01/2010 20:25|drahs----|0] - F:\autorun.inf
[19/12/2009 16:39|d--------|20480] - F:\Cat Stevens
[17/07/2009 12:09|d--------|8192] - F:\Diablo
[17/07/2009 12:10|d--h-----|4096] - F:\DIVTOOLS
[17/07/2009 12:10|d--------|4096] - F:\Documents and Settings
[17/07/2009 12:52|d--h-----|8192] - F:\DRIVERS
[21/12/2009 03:45|d--------|4096] - F:\Kiss Kiss Bang Bang
[21/12/2009 03:45|d--------|0] - F:\Lascars.FRENCH.DVDRip.XviD-UNSKiLLED
[19/12/2009 16:47|d--------|4096] - F:\Lauryn Hill - The Miseducation of Lauryn Hill
[21/12/2009 03:49|d--------|0] - F:\Le.Premier.Cercle.FRENCH.BDRip.Xvid
[19/12/2009 16:42|d--------|4096] - F:\Matrix I.II.III
[19/12/2009 16:47|d--------|4096] - F:\MICHAEL JACKSON - Discography [Studio] 1979 To 2001 [Bubanee]
[25/09/2009 15:02|d--------|4096] - F:\music
[19/12/2009 16:48|d--------|4096] - F:\Paranormal.Activity.Screener.XVID-IMAGiNE
[17/07/2009 13:51|dr-------|12288] - F:\Program Files
[17/07/2009 13:51|d--------|0] - F:\Programme
[13/01/2010 20:23|d--hs----|0] - F:\RECYCLER
[05/01/2010 20:42|d--hs----|4096] - F:\System Volume Information
[19/12/2009 16:46|d--------|4096] - F:\The black eyed peas
[21/12/2009 02:53|d--------|4096] - F:\The.Last.House.On.The.Left.UNRATED.FRENCH.DVDRiP.XViD-SURViVAL
[21/12/2009 02:54|d--------|0] - F:\The.Ugly.Truth.FRENCH.BDRiP.XViD-SURViVAL
[19/12/2009 16:45|d--------|0] - F:\transcodes
[21/12/2009 02:58|d--------|0] - F:\Transformers.Revenge.of.the.Fallen.FRENCH.BDRip.XviD-Bay
[17/07/2009 13:55|d--------|32768] - F:\WINDOWS

###################### | Listing des fichiers présents H:\ |

[23/01/2007 10:23|--a------|3584160] - H:\36-Three Six Mafia - Hennessey & Hydro.mp3
[23/01/2007 16:22|--a------|4985400] - H:\36-Three Six Mafia- Unreleased- Bone Thugs N Harmony Diss (1).mp3
[24/01/2007 16:46|--a------|8996990] - H:\Lil' Jon ft. Three Six Mafia- Act A Fool.mp3
[23/01/2007 10:34|--a------|5695531] - H:\Three 6 Mafia - 08 - The Most Known Unknowns - Hard Hittaz (ft. Boogiemane).mp3
[23/01/2007 09:14|--a------|6056785] - H:\Three 6 Mafia - Bin Laden Weed (Screwed).mp3
[23/01/2007 10:34|--a------|4063302] - H:\Three 6 Mafia - Dope Boy Fresh (feat. Chamillionaire).mp3
[23/01/2007 15:20|--a------|1090003] - H:\three 6 mafia - flashes.wma
[24/01/2007 16:47|--a------|3805184] - H:\Three 6 Mafia - Hit A Mother Fucker.mp3
[23/01/2007 10:15|--a------|4881014] - H:\Three 6 Mafia - One Hitter Quitter.mp3
[23/01/2007 17:32|--a------|6997726] - H:\Three 6 Mafia - When The Smoke Clears, Sixty 6 Sixty 1 - 18 - M.E.M.P.H.I.S.mp3
[24/09/2007 10:15|--a------|5979409] - H:\Three 6 Mafia & Fiend Presents... Da Headbussaz - Dat's How It Happen To 'M - 02 - Where They Hang.mp3
[02/02/2007 15:48|--a------|6591261] - H:\Three 6 Mafia ft. Project Pat, DMX & Lil Flip - Popping My Collar (Remix).mp3
[23/01/2007 15:26|--a------|4134120] - H:\Three Six Mafia - Chapter 2 World Domination - Bodyparts 2.mp3
[26/01/2007 10:41|--a------|5304278] - H:\Three Six Mafia - Cheefa tha Reefa.mp3
[23/01/2007 16:23|--a------|5162599] - H:\Three Six Mafia - Choices - 03 - M.A.F.I.A . (Hypnotize Camp Posse)(2).mp3
[23/01/2007 15:19|--a------|3805184] - H:\Three six mafia - Hit A Mother Fucker.mp3
[02/02/2007 15:54|--a------|3826808] - H:\three six mafia - its a fight rocky balboa.mp3
[23/01/2007 15:28|--a------|5103198] - H:\Three Six Mafia - Kings of Memphis (Underground Volume 3) - 05 - Smokin On Da Dro.mp3
[24/01/2007 16:35|--a------|2863670] - H:\Three Six Mafia - Late Night Tip.mp3
[26/01/2007 10:43|--a------|6895868] - H:\Three Six Mafia - Lets Start A Riot.mp3
[23/01/2007 15:46|--a------|4879044] - H:\Three Six Mafia - Most Known Unknown - 14 - Don't Cha Get Mad (Ft. Lil' Flip).mp3
[24/01/2007 16:30|--a------|3388895] - H:\Three Six Mafia - Poppin My Collar.mp3
[23/01/2007 15:19|--a------|2912280] - H:\Three Six Mafia - Slob On My Nob.mp3
[23/01/2007 16:22|--a------|4620923] - H:\three six mafia - smoke that weed.mp3
[23/01/2007 15:21|--a------|2536321] - H:\Three Six Mafia - Southside Riders.mp3
[30/01/2007 16:04|--a------|9517152] - H:\Three Six Mafia - Stay Fly.MP3
[23/01/2007 15:21|--a------|4132113] - H:\Three Six Mafia - Triple 666 Killaz.mp3
[23/01/2007 10:20|--a------|5687882] - H:\Three Six Mafia - Try Something (Feat. Project Pat).mp3
[24/01/2007 17:08|--a------|4126720] - H:\Three Six Mafia - Watcha Know.mp3
[23/01/2007 15:29|--a------|5119231] - H:\Three Six Mafia - Where Da Killaz Hang (Project Pat).mp3
[23/01/2007 15:21|--a------|3788636] - H:\Three Six Mafia - Where Is The Bud At.mp3
[24/01/2007 16:56|--a------|6459875] - H:\Three Six Mafia & Lil Wyte - Who I Is.mp3
[23/01/2007 15:45|--a------|5627904] - H:\Three Six Mafia & Project Pat - Chicken Heads.mp3
[11/05/2008 02:25|--a------|4509330] - H:\Three Six Mafia & The Dayton Family - Are You Ready For Us.mp3
[23/01/2007 15:46|--a------|4568801] - H:\Three six Mafia & Twista - Ovadose.mp3
[23/01/2007 10:23|--a------|7405156] - H:\Three Six Mafia feat. Cam'ron - Sippin On Some Syrup (remix).mp3
[23/01/2007 09:12|--a------|9512928] - H:\Three Six Mafia feat. Young Buck & 8 Ball - I Gotta Stay Fly.MP3
[23/01/2007 15:27|--a------|4501923] - H:\three six mafia ft ludacris - bia bia - lil john - tightest beat i ever heard!!!!!! instrumental 1 1.mp3
[23/01/2007 16:46|--a------|4625231] - H:\Three Six Mafia ft. LaChat - Mean Mug.mp3
[23/01/2007 17:06|--a------|7229706] - H:\Three Six Mafia ft. Lil Whyte One Hitta Quita (dirty).mp3
[23/01/2007 15:28|--a------|6991933] - H:\Three Six Mafia ft. Project Pat, Bow Wow - Side to Side (remix).mp3
[23/01/2007 15:19|--a------|6459875] - H:\Three Six Mafia Ft. Triville & Lil Wyte-Who I is.mp3
[26/01/2007 16:02|--a------|4855890] - H:\Three Six Mafia- Get The Fuck Out My Face.mp3
[23/01/2007 16:04|--a------|4384929] - H:\Three Six Mafia Lick My Nuts.mp3
[23/01/2007 15:28|--a------|4771048] - H:\Three Six Mafia- Two way Freak.mp3
[23/01/2007 15:26|--a------|6316416] - H:\Three Six Mafia UGK - Get Krunk.mp3
[23/01/2007 15:29|--a------|5380507] - H:\Three Six Mafia- Wolf Wolf.mp3
[23/01/2007 10:14|--a------|8712573] - H:\Three Six Mafia_Side To Side Remix.mp3
[23/01/2007 10:33|--a------|6929195] - H:\Three six mafia-juicy j - smoke dat weed.mp3
[23/01/2007 15:19|--a------|3784704] - H:\3-6 Three Six Mafia - Where Is The Bud.mp3
[24/09/2007 10:14|--a------|5684174] - H:\3-6- Three Six Mafia- I'm So High.mp3
[23/01/2007 15:34|--a------|4222224] - H:\3-6 three six mafia Project Pat - Don't Save Her.mp3
[24/09/2007 10:13|--a------|4878088] - H:\3 6 Mafia - Get The Fuck Out My Face.mp3
[26/01/2007 15:58|--a------|3614720] - H:\3 6 Three Six Mafia - Tear Da Club U.mp3
[24/01/2007 16:37|--a------|3614770] - H:\3 6 Three Six Mafia - Tear Da Club Up.mp3
[24/09/2007 09:38|--a------|3814016] - H:\3 6 -Three Six Mafia and Twista - Smoked Out.mp3
[23/01/2007 10:18|--a------|6602766] - H:\3 6-Three Six Mafia - Ridin' Spinners (feat. Lil' Flip).mp3

###################### | Listing des dossiers présents H:\ |

[13/07/2008 12:55|d--hs----|0] - H:\System Volume Information
[08/08/2008 15:59|d--hs----|0] - H:\Recycled
[28/02/2009 14:17|d--------|0] - H:\FLO DISQUE DUR
[14/06/2009 20:56|d--hs----|0] - H:\$RECYCLE.BIN
[01/01/2010 04:47|d--------|0] - H:\Three 6 Mafia
[13/01/2010 20:25|drahs----|0] - H:\autorun.inf

################## | ! Fin du rapport # UsbFix V6.073 ! |

Bonsoir Lyonnais,

Désolé genproc c'était l'autre ordi (XP).

Voici le rapport usbfix avec les disques durs externes branchés sur Vista.
############################## | UsbFix V6.073 |

User : Flo (Administrateurs) # PC-DE-FLO
Update on 09/01/2010 by El Desaparecido , C_XX & Chimay8
Start at: 18:54:53 | 13/01/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Duo CPU P8400 @ 2.26GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18865
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 149,04 Go (29,36 Go free) [VistaOS] # NTFS
D:\ -> Disque fixe local # 139,28 Go (109,9 Go free) [DATA] # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque fixe local # 931,51 Go (287,85 Go free) [Requiem] # NTFS
H:\ -> Disque fixe local # 465,65 Go (310,47 Go free) [IOMEGA_HDD] # FAT32

############################## | Processus actifs |

C:\Windows\System32\smss.exe 536
C:\Windows\system32\csrss.exe 608
C:\Windows\system32\wininit.exe 672
C:\Windows\system32\csrss.exe 684
C:\Windows\system32\services.exe 720
C:\Windows\system32\lsass.exe 736
C:\Windows\system32\lsm.exe 744
C:\Windows\system32\svchost.exe 876
C:\Windows\system32\winlogon.exe 936
C:\Windows\system32\svchost.exe 1000
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe 1036
C:\Windows\system32\svchost.exe 1124
C:\Windows\System32\svchost.exe 1148
C:\Windows\system32\Ati2evxx.exe 1256
C:\Windows\System32\svchost.exe 1268
C:\Windows\System32\svchost.exe 1296
C:\Windows\system32\svchost.exe 1328
C:\Windows\system32\svchost.exe 1424
C:\Windows\system32\SLsvc.exe 1440
C:\Windows\system32\svchost.exe 1472
C:\Windows\system32\Ati2evxx.exe 1612
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe 1900
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe 1916
C:\Program Files\ATKGFNEX\GFNEXSrv.exe 1932
C:\Windows\system32\WLANExt.exe 1988
C:\Windows\system32\taskeng.exe 2028
C:\Windows\System32\spoolsv.exe 616
C:\Program Files\Avira\AntiVir Desktop\sched.exe 528
C:\Windows\system32\svchost.exe 832
C:\Program Files\Avira\AntiVir Desktop\avguard.exe 2092
C:\Windows\system32\svchost.exe 2124
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe 2136
C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2196
C:\Windows\system32\lxdxcoms.exe 2336
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe 2348
C:\Windows\system32\svchost.exe 2396
C:\Windows\system32\svchost.exe 2448
C:\Windows\System32\svchost.exe 2516
C:\Windows\system32\SearchIndexer.exe 2548
C:\Windows\system32\Dwm.exe 3448
C:\Windows\system32\taskeng.exe 3472
C:\Windows\Explorer.EXE 3608
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe 3632
C:\Program Files\ASUS\ATK Hotkey\HControl.exe 3648
C:\Program Files\Wireless Console 2\wcourier.exe 3668
C:\Program Files\P4G\BatteryLife.exe 3676
C:\Program Files\ASUS\Splendid\ACMON.exe 3684
C:\Program Files\ASUS\ASUS Live Update\ALU.exe 3716
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe 3736
C:\Windows\System32\ACEngSvr.exe 3820
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe 4048
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 4056
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe 4064
C:\Program Files\Java\jre6\bin\jusched.exe 4088
C:\Program Files\ASUS\ATK Hotkey\WDC.exe 2080
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe 2208
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 3064
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe 1336
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe 1592
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 2924
C:\Program Files\ATKOSD2\ATKOSD2.exe 3620
C:\Program Files\ASUS\ATK Media\DMedia.exe 236
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe 3640
C:\Program Files\Windows Media Player\wmpnscfg.exe 3848
C:\Program Files\Windows Sidebar\sidebar.exe 3964
C:\Windows\ehome\ehtray.exe 3024
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe 1212
C:\Windows\ehome\ehmsas.exe 3748
C:\Program Files\Windows Media Player\wmpnetwk.exe 3952
C:\Windows\system32\msiexec.exe 2684
C:\Program Files\Windows Sidebar\sidebar.exe 3764
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 4780
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 4868
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe 4888
C:\Program Files\Mozilla Firefox\firefox.exe 5040
C:\Windows\system32\wbem\wmiprvse.exe 3052
C:\Windows\system32\wuauclt.exe 5892
C:\Windows\system32\vssvc.exe 4320
C:\Windows\System32\svchost.exe 1764
C:\Windows\system32\conime.exe 6036
\\?\C:\Windows\system32\wbem\WMIADAP.EXE 5724
C:\Windows\System32\mobsync.exe 480
C:\Windows\system32\wbem\wmiprvse.exe 4556

################## | Elements infectieux |

################## | Registre |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{2fe0e21d-ff7c-11de-8a25-00248c112bda}
shell\AutoRun\command =setup.exe

################## | Cracks > Keygens > Serials |

################## | ! Fin du rapport # UsbFix V6.073 ! |

Bonsoir Lyonnais.
En fait je suis un peu perdue...
Je dois faire ce scan sur le vieil ordi ou le neuf?
On en est où dans la désinfection. Est-ce que c'est la suite de ce que l'on a commencé?

Bonsoir Lyonnais,

Le nettoyage est fait...

L'ordi va bien.
Je viens de tester il n'y a plus de redirection.
C nikel :)

Bonsoir Lyonnais,

Voici le rapport:

ComboFix 10-01-03.05 - Flo 06/01/2010 18:36:09.3.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.2013 [GMT 1:00]
Lancé depuis: c:\users\Flo\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-12-06 au 2010-01-06 ))))))))))))))))))))))))))))))))))))
.

2010-01-06 17:45 . 2010-01-06 17:45 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-01-06 17:45 . 2010-01-06 17:45 -------- d-----w- c:\users\Mcx1\AppData\Local\temp
2010-01-06 17:45 . 2010-01-06 17:45 -------- d-----w- c:\users\Labube\AppData\Local\temp
2010-01-06 17:45 . 2010-01-06 17:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-06 17:45 . 2010-01-06 17:45 -------- d-----w- c:\users\admin\AppData\Local\temp
2010-01-05 12:51 . 2010-01-05 13:12 -------- d-----w- c:\program files\SEAF
2010-01-05 12:33 . 2010-01-06 17:45 -------- d-----w- c:\users\Flo\AppData\Local\temp
2010-01-04 17:52 . 2010-01-04 17:52 5061520 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-01-04 11:21 . 2009-12-16 13:42 872960 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-01-04 11:21 . 2009-12-16 13:42 43008 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-01-04 11:21 . 2009-12-16 13:42 340480 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-01-04 11:21 . 2009-12-16 13:41 346624 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-01-04 08:17 . 2010-01-04 08:17 -------- d-----w- c:\program files\ESET
2009-12-29 11:04 . 2009-12-29 11:04 -------- d-----w- C:\rsit
2009-12-29 10:58 . 2010-01-05 13:21 -------- d-----w- C:\GenProc
2009-12-26 20:35 . 2010-01-03 21:40 -------- d-----w- c:\program files\JDownloader
2009-12-23 15:27 . 2009-12-23 15:27 -------- d-----w- c:\program files\GIMP-2.0
2009-12-13 19:24 . 2009-12-13 19:24 35 ----a-w- c:\users\Flo\AppData\Roaming\SetValue.bat
2009-12-11 13:26 . 2009-12-11 13:26 -------- d-----w- C:\ATI
2009-12-11 13:10 . 2009-12-11 13:10 -------- d-----w- c:\program files\PC Drivers HeadQuarters
2009-12-10 15:53 . 2009-10-20 12:33 545280 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\libs\PicLensHelper.exe
2009-12-10 15:53 . 2009-10-20 12:33 4716544 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\components\cooliris.dll
2009-12-10 15:53 . 2009-10-20 12:33 344064 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\libs\LaunchCooliris.exe
2009-12-10 15:53 . 2009-10-20 12:33 153600 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
2009-12-10 15:53 . 2009-10-20 12:33 103424 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\libs\pixomatic.dll
2009-12-10 15:51 . 2008-12-04 00:25 120832 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}\plugins\npietab.dll
2009-12-10 10:03 . 2009-12-10 10:03 171552 ----a-w- c:\windows\system32\guard32.dll
2009-12-09 09:48 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 09:48 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 09:48 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-09 08:09 . 2009-10-07 11:36 243712 ----a-w- c:\windows\system32\rastls.dll
2009-12-08 14:37 . 2009-12-15 12:39 -------- d-----w- c:\users\Flo\AppData\Roaming\FileZilla
2009-12-08 14:37 . 2009-12-08 14:37 -------- d-----w- c:\program files\FileZilla FTP Client
2009-12-07 18:47 . 2009-12-07 18:47 -------- d-----w- c:\program files\CCleaner

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-06 17:35 . 2008-04-16 11:16 716298 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-06 17:35 . 2008-04-16 11:16 144420 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-06 16:03 . 2009-01-17 23:39 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-05 15:14 . 2009-09-25 13:28 -------- d-----w- c:\users\Flo\AppData\Roaming\VSO
2010-01-05 12:35 . 2009-03-23 16:30 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-01-04 18:07 . 2009-06-26 11:09 -------- d-----w- c:\users\Flo\AppData\Roaming\Azureus
2010-01-04 17:52 . 2009-12-04 08:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-03 19:41 . 2009-06-21 21:48 -------- d-----w- c:\users\Flo\AppData\Roaming\dvdcss
2009-12-30 13:55 . 2009-12-04 08:27 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-30 13:54 . 2009-12-04 08:26 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-29 11:05 . 2009-07-19 17:53 -------- d-----w- c:\program files\Trend Micro
2009-12-28 16:01 . 2009-10-24 15:44 -------- d-----w- c:\programdata\FLEXnet
2009-12-23 15:57 . 2009-10-21 09:49 -------- d-----w- c:\users\Flo\AppData\Roaming\gtk-2.0
2009-12-22 18:37 . 2009-03-29 17:23 -------- d-----w- c:\programdata\Lx_cats
2009-12-14 09:08 . 2009-03-23 16:30 105600 ----a-w- c:\users\Flo\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-13 19:24 . 2009-12-13 19:24 691 ----a-w- c:\users\Flo\AppData\Roaming\GetValue.vbs
2009-12-10 13:19 . 2009-07-04 10:02 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-09 09:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-09 09:49 . 2009-01-17 23:46 -------- d-----w- c:\programdata\Microsoft Help
2009-12-08 08:52 . 2009-07-19 18:04 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2009-12-07 20:43 . 2009-01-18 02:16 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-07 12:56 . 2009-12-07 12:55 262144 ----a-w- C:\ntuser.dat
2009-12-04 19:21 . 2009-05-29 21:50 1356 ----a-w- c:\users\Flo\AppData\Local\d3d9caps.dat
2009-12-04 08:27 . 2009-12-04 08:27 -------- d-----w- c:\users\Flo\AppData\Roaming\Malwarebytes
2009-12-04 08:27 . 2009-12-04 08:27 -------- d-----w- c:\programdata\Malwarebytes
2009-12-01 09:36 . 2009-12-01 09:36 -------- d-----w- c:\users\Flo\AppData\Roaming\YCanPDF
2009-11-30 15:31 . 2009-06-24 16:47 1 ----a-w- c:\users\Flo\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-11-30 14:05 . 2009-06-04 07:31 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-30 11:27 . 2009-11-30 11:27 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2009-11-29 17:34 . 2009-11-29 17:33 -------- d-----w- c:\program files\IZArc
2009-11-27 19:39 . 2009-11-27 19:39 15884 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\azitunes\libProcessAccess.dll
2009-11-27 19:39 . 2009-11-27 19:39 102400 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\azitunes\jacob-1.14.3-x86.dll
2009-11-27 19:39 . 2009-11-27 19:39 4141117 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\vuzexcode\mediainfo.exe
2009-11-27 19:39 . 2009-11-27 19:39 6516755 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\vuzexcode\ffmpeg.exe
2009-11-27 02:00 . 2009-11-27 02:00 -------- d-----w- c:\program files\MSXML 4.0
2009-11-26 20:07 . 2009-06-26 11:09 -------- d-----w- c:\program files\Vuze
2009-11-26 19:10 . 2009-07-19 22:11 74328 ----a-w- c:\windows\system32\drivers\inspect.sys
2009-11-26 19:10 . 2009-07-19 22:11 29520 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2009-11-26 19:10 . 2009-07-19 22:11 128376 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2009-11-22 03:09 . 2009-03-26 22:32 104896 ----a-w- c:\users\Labube\AppData\Local\GDIPFONTCACHEV1.DAT
2009-11-21 06:40 . 2009-12-09 08:10 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 08:10 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 06:34 . 2009-12-09 08:10 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 04:59 . 2009-12-09 08:10 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-17 16:07 . 2009-11-17 16:07 848189 ----a-w- c:\users\Flo\BB.zip
2009-11-17 08:21 . 2009-04-14 08:38 -------- d-----w- c:\program files\Java
2009-11-05 11:04 . 2009-11-05 11:04 0 ----a-w- c:\windows\nsreg.dat
2009-11-05 08:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-02 19:42 . 2009-10-03 13:43 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-29 09:17 . 2009-11-27 02:01 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-19 10:59 . 2009-10-19 10:59 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-10-11 03:17 . 2009-04-14 08:38 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-08 21:08 . 2009-11-04 16:13 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2009-10-08 21:08 . 2009-11-04 16:13 234496 ----a-w- c:\windows\system32\oleacc.dll
2009-10-08 21:07 . 2009-11-04 16:13 4096 ----a-w- c:\windows\system32\oleaccrc.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 01:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2009-12-11 160592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-01-12 98304]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-12-01 30192]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2009-11-26 1800464]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2008-01-23 7766016]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2008-02-01 61440]
"ADSMTray"="c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2009-01-18 272952]
"ACMON"="c:\program files\ASUS\Splendid\ACMON.exe" [2008-10-01 851968]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"UacDisableNotify"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=c:\windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
2008-06-11 21:43 640376 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
2008-06-12 01:25 37232 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-15 00:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2008-08-14 05:58 611712 ----a-w- c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0EYTHM]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-01-18 02:15 47672 ----a-w- c:\windows\AsScrProlog.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2009-01-18 02:15 3054136 ----a-w- c:\windows\AsScrPro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdxamon]
2008-06-13 16:04 16040 ----a-w- c:\program files\Lexmark 3600-4600 Series\lxdxamon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdxmon.exe]
2008-06-13 16:04 668328 ----a-w- c:\program files\Lexmark 3600-4600 Series\lxdxmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P2Go_Menu]
2008-06-14 02:11 210216 ----a-w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-04-17 03:49 6111232 ----a-w- c:\windows\RtHDVCpl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):f2,47,db,69,8e,38,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2782166536-572763711-4240454735-1000]
"EnableNotificationsRef"=dword:00000001

R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\System32\drivers\cmdguard.sys [19/07/2009 23:11 128376]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\System32\drivers\cmdhlp.sys [19/07/2009 23:11 29520]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [18/09/2009 10:14 108289]
R2 lxdx_device;lxdx_device;c:\windows\system32\lxdxcoms.exe -service --> c:\windows\system32\lxdxcoms.exe -service [?]
S2 lxdxCATSCustConnectService;lxdxCATSCustConnectService;c:\windows\System32\spool\drivers\w32x86\3\lxdxserv.exe [24/06/2009 19:16 98984]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [15/08/2008 05:46 284016]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [18/01/2009 02:49 29736]
S3 CRFILTER;USB Mass Storage Filter;c:\windows\System32\drivers\CRFILTER.sys [07/04/2008 07:00 6656]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/01/2008 03:23 21504]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [18/01/2009 02:03 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 18:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'

2010-01-06 c:\windows\Tasks\User_Feed_Synchronization-{C61BEE27-974D-4FC7-804D-4518C521E23D}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
IE: Barre RoboForm - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
IE: Enregistrer le formulaire - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
IE: Personnaliser le menu - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
IE: Remplir le formulaire - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
IE: {{45DB34C3-955C-11D3-ABEF-444553540000} - c:\program files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
IE: {{45DB34C3-955C-11D3-ABEF-444553540001} - c:\program files\Siber Systems\AI RoboForm\RoboFormComEditPass.html
Handler: qvp - {4BA78E3D-CA25-4BFF-B8F0-8A3359E4B520} - c:\program files\QlikView\QvProtocol\Qvp.dll
FF - ProfilePath - c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Siber Systems\AI RoboForm\Firefox\components\rfproxy_31.dll
FF - component: c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\components\cooliris.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
FF - plugin: c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-06 18:45
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(4160)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
Heure de fin: 2010-01-06 18:49:54
ComboFix-quarantined-files.txt 2010-01-06 17:49
ComboFix2.txt 2010-01-05 12:47
ComboFix3.txt 2010-01-04 19:07

Avant-CF: 78 448 709 632 octets libres
Après-CF: 78 409 687 040 octets libres

- - End Of File - - 8F1BCD7D77E6BDE1D43C7A93C27AFE7A

Ah désolé je ne pensais pas que ça pouvais ce transmettre comme ça.
J'attends alors les instructions de Lyonnais.
Merci archet.

Antivir s'est affolé cette fois au démarrage du pc.
voici le rapport:
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File move operation "C:\copy.bak|C:\Windows\System32\drivers\iaStor.sys" completed successfully.

Completed script processing.

*******************

Finished! Terminate.

Oui, C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_3c­­4af4a0\iaStor.sys existe encore...

Le fichier existait bien.
voici le log:
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Error: file "C:\iastor.sys" not found!
File move operation "C:\iastor.sys|C:\Windows\System32\drivers\iaStor.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

Completed script processing.

*******************

Finished! Terminate.

Bonjour,

Oui j'ai bien mis en quarantaine le fichier trouvé par MBAM.
Il y a d'ailleurs plein de choses en quarantaine dois-je tout supprimer?

Voici le rapport Combofix:
ComboFix 10-01-03.05 - Flo 05/01/2010 13:06:19.2.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.2143 [GMT 1:00]
Lancé depuis: c:\users\Flo\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\Flo\Desktop\CFscript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\users\Flo\AppData\Local\Temp\GGSCILLZPKPK.exe"
"c:\users\Flo\AppData\Local\Temp\YIHEQKTBVIRGLFS.exe"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\DRIVERS\iaStor.sys . . . est infecté!!

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_GGSCILLZPKPK
-------\Service_YIHEQKTBVIRGLFS

((((((((((((((((((((((((((((( Fichiers créés du 2009-12-05 au 2010-01-05 ))))))))))))))))))))))))))))))))))))
.

2010-01-05 12:33 . 2010-01-05 12:36 -------- d-----w- c:\users\Flo\AppData\Local\temp
2010-01-05 12:33 . 2010-01-05 12:33 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-01-05 12:33 . 2010-01-05 12:33 -------- d-----w- c:\users\Mcx1\AppData\Local\temp
2010-01-05 12:33 . 2010-01-05 12:33 -------- d-----w- c:\users\Labube\AppData\Local\temp
2010-01-05 12:33 . 2010-01-05 12:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-05 12:33 . 2010-01-05 12:33 -------- d-----w- c:\users\admin\AppData\Local\temp
2010-01-04 08:17 . 2010-01-04 08:17 -------- d-----w- c:\program files\ESET
2009-12-29 11:04 . 2009-12-29 11:04 -------- d-----w- C:\rsit
2009-12-29 10:58 . 2009-12-31 10:59 -------- d-----w- C:\GenProc
2009-12-26 20:35 . 2010-01-03 21:40 -------- d-----w- c:\program files\JDownloader
2009-12-23 15:27 . 2009-12-23 15:27 -------- d-----w- c:\program files\GIMP-2.0
2009-12-11 13:26 . 2009-12-11 13:26 -------- d-----w- C:\ATI
2009-12-11 13:10 . 2009-12-11 13:10 -------- d-----w- c:\program files\PC Drivers HeadQuarters
2009-12-10 10:03 . 2009-12-10 10:03 171552 ----a-w- c:\windows\system32\guard32.dll
2009-12-09 09:48 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-09 09:48 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-09 09:48 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-09 08:09 . 2009-10-07 11:36 243712 ----a-w- c:\windows\system32\rastls.dll
2009-12-08 14:37 . 2009-12-15 12:39 -------- d-----w- c:\users\Flo\AppData\Roaming\FileZilla
2009-12-08 14:37 . 2009-12-08 14:37 -------- d-----w- c:\program files\FileZilla FTP Client
2009-12-07 18:47 . 2009-12-07 18:47 -------- d-----w- c:\program files\CCleaner
2009-12-07 12:55 . 2009-12-07 12:56 262144 ----a-w- C:\ntuser.dat

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-05 12:35 . 2009-03-23 16:30 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-01-05 12:33 . 2009-01-17 23:39 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-05 12:09 . 2008-04-16 11:16 716298 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-05 12:09 . 2008-04-16 11:16 144420 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-05 11:03 . 2009-09-25 13:28 -------- d-----w- c:\users\Flo\AppData\Roaming\VSO
2010-01-04 18:07 . 2009-06-26 11:09 -------- d-----w- c:\users\Flo\AppData\Roaming\Azureus
2010-01-04 17:52 . 2009-12-04 08:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-04 17:52 . 2010-01-04 17:52 5061520 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-01-03 19:41 . 2009-06-21 21:48 -------- d-----w- c:\users\Flo\AppData\Roaming\dvdcss
2009-12-30 13:55 . 2009-12-04 08:27 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-30 13:54 . 2009-12-04 08:26 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-29 11:05 . 2009-07-19 17:53 -------- d-----w- c:\program files\Trend Micro
2009-12-28 16:01 . 2009-10-24 15:44 -------- d-----w- c:\programdata\FLEXnet
2009-12-23 15:57 . 2009-10-21 09:49 -------- d-----w- c:\users\Flo\AppData\Roaming\gtk-2.0
2009-12-22 18:37 . 2009-03-29 17:23 -------- d-----w- c:\programdata\Lx_cats
2009-12-16 13:42 . 2010-01-04 11:21 872960 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2009-12-16 13:42 . 2010-01-04 11:21 43008 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2009-12-16 13:42 . 2010-01-04 11:21 340480 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2009-12-16 13:41 . 2010-01-04 11:21 346624 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2009-12-14 09:08 . 2009-03-23 16:30 105600 ----a-w- c:\users\Flo\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-13 19:24 . 2009-12-13 19:24 35 ----a-w- c:\users\Flo\AppData\Roaming\SetValue.bat
2009-12-13 19:24 . 2009-12-13 19:24 35 ----a-w- c:\users\Flo\AppData\Roaming\SetValue.bat
2009-12-13 19:24 . 2009-12-13 19:24 691 ----a-w- c:\users\Flo\AppData\Roaming\GetValue.vbs
2009-12-10 13:19 . 2009-07-04 10:02 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-09 09:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-09 09:49 . 2009-01-17 23:46 -------- d-----w- c:\programdata\Microsoft Help
2009-12-08 08:52 . 2009-07-19 18:04 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2009-12-07 20:43 . 2009-01-18 02:16 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-04 19:21 . 2009-05-29 21:50 1356 ----a-w- c:\users\Flo\AppData\Local\d3d9caps.dat
2009-12-04 08:27 . 2009-12-04 08:27 -------- d-----w- c:\users\Flo\AppData\Roaming\Malwarebytes
2009-12-04 08:27 . 2009-12-04 08:27 -------- d-----w- c:\programdata\Malwarebytes
2009-12-01 09:36 . 2009-12-01 09:36 -------- d-----w- c:\users\Flo\AppData\Roaming\YCanPDF
2009-11-30 15:31 . 2009-06-24 16:47 1 ----a-w- c:\users\Flo\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-11-30 14:05 . 2009-06-04 07:31 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-30 11:27 . 2009-11-30 11:27 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2009-11-29 17:34 . 2009-11-29 17:33 -------- d-----w- c:\program files\IZArc
2009-11-27 19:39 . 2009-11-27 19:39 15884 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\azitunes\libProcessAccess.dll
2009-11-27 19:39 . 2009-11-27 19:39 102400 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\azitunes\jacob-1.14.3-x86.dll
2009-11-27 19:39 . 2009-11-27 19:39 4141117 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\vuzexcode\mediainfo.exe
2009-11-27 19:39 . 2009-11-27 19:39 6516755 ----a-w- c:\users\Flo\AppData\Roaming\Azureus\plugins\vuzexcode\ffmpeg.exe
2009-11-27 02:00 . 2009-11-27 02:00 -------- d-----w- c:\program files\MSXML 4.0
2009-11-26 20:07 . 2009-06-26 11:09 -------- d-----w- c:\program files\Vuze
2009-11-26 19:10 . 2009-07-19 22:11 74328 ----a-w- c:\windows\system32\drivers\inspect.sys
2009-11-26 19:10 . 2009-07-19 22:11 29520 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2009-11-26 19:10 . 2009-07-19 22:11 128376 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2009-11-22 03:09 . 2009-03-26 22:32 104896 ----a-w- c:\users\Labube\AppData\Local\GDIPFONTCACHEV1.DAT
2009-11-21 06:40 . 2009-12-09 08:10 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 08:10 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 06:34 . 2009-12-09 08:10 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 04:59 . 2009-12-09 08:10 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-17 16:07 . 2009-11-17 16:07 848189 ----a-w- c:\users\Flo\BB.zip
2009-11-17 08:21 . 2009-04-14 08:38 -------- d-----w- c:\program files\Java
2009-11-05 11:04 . 2009-11-05 11:04 0 ----a-w- c:\windows\nsreg.dat
2009-11-05 08:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-02 19:42 . 2009-10-03 13:43 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-29 09:17 . 2009-11-27 02:01 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-20 12:33 . 2009-12-10 15:53 545280 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\libs\PicLensHelper.exe
2009-10-20 12:33 . 2009-12-10 15:53 4716544 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\components\cooliris.dll
2009-10-20 12:33 . 2009-12-10 15:53 344064 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\libs\LaunchCooliris.exe
2009-10-20 12:33 . 2009-12-10 15:53 153600 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
2009-10-20 12:33 . 2009-12-10 15:53 103424 ----a-w- c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\libs\pixomatic.dll
2009-10-19 10:59 . 2009-10-19 10:59 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-10-11 03:17 . 2009-04-14 08:38 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-08 21:08 . 2009-11-04 16:13 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2009-10-08 21:08 . 2009-11-04 16:13 234496 ----a-w- c:\windows\system32\oleacc.dll
2009-10-08 21:07 . 2009-11-04 16:13 4096 ----a-w- c:\windows\system32\oleaccrc.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 01:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2009-12-11 160592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-01-12 98304]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-12-01 30192]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2009-11-26 1800464]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2008-01-23 7766016]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2008-02-01 61440]
"ADSMTray"="c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2009-01-18 272952]
"ACMON"="c:\program files\ASUS\Splendid\ACMON.exe" [2008-10-01 851968]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"UacDisableNotify"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=c:\windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
2008-06-11 21:43 640376 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
2008-06-12 01:25 37232 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-15 00:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2008-08-14 05:58 611712 ----a-w- c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0EYTHM]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]
2009-01-18 02:15 47672 ----a-w- c:\windows\AsScrProlog.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2009-01-18 02:15 3054136 ----a-w- c:\windows\AsScrPro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdxamon]
2008-06-13 16:04 16040 ----a-w- c:\program files\Lexmark 3600-4600 Series\lxdxamon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdxmon.exe]
2008-06-13 16:04 668328 ----a-w- c:\program files\Lexmark 3600-4600 Series\lxdxmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P2Go_Menu]
2008-06-14 02:11 210216 ----a-w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-04-17 03:49 6111232 ----a-w- c:\windows\RtHDVCpl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):f2,47,db,69,8e,38,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2782166536-572763711-4240454735-1000]
"EnableNotificationsRef"=dword:00000001

R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\System32\drivers\cmdguard.sys [19/07/2009 23:11 128376]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\System32\drivers\cmdhlp.sys [19/07/2009 23:11 29520]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [18/09/2009 10:14 108289]
R2 lxdx_device;lxdx_device;c:\windows\system32\lxdxcoms.exe -service --> c:\windows\system32\lxdxcoms.exe -service [?]
S2 lxdxCATSCustConnectService;lxdxCATSCustConnectService;c:\windows\System32\spool\drivers\w32x86\3\lxdxserv.exe [24/06/2009 19:16 98984]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [15/08/2008 05:46 284016]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [18/01/2009 02:49 29736]
S3 CRFILTER;USB Mass Storage Filter;c:\windows\System32\drivers\CRFILTER.sys [07/04/2008 07:00 6656]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/01/2008 03:23 21504]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [18/01/2009 02:03 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 18:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'

2010-01-05 c:\windows\Tasks\User_Feed_Synchronization-{C61BEE27-974D-4FC7-804D-4518C521E23D}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
IE: Barre RoboForm - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
IE: Enregistrer le formulaire - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
IE: Personnaliser le menu - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
IE: Remplir le formulaire - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
IE: {{45DB34C3-955C-11D3-ABEF-444553540000} - c:\program files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html
IE: {{45DB34C3-955C-11D3-ABEF-444553540001} - c:\program files\Siber Systems\AI RoboForm\RoboFormComEditPass.html
Handler: qvp - {4BA78E3D-CA25-4BFF-B8F0-8A3359E4B520} - c:\program files\QlikView\QvProtocol\Qvp.dll
FF - ProfilePath - c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Siber Systems\AI RoboForm\Firefox\components\rfproxy_31.dll
FF - component: c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\components\cooliris.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll
FF - plugin: c:\users\Flo\AppData\Roaming\Mozilla\Firefox\Profiles\uazuw92t.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-05 13:35
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys halmacpi.dll >>UNKNOWN [0x8695350C]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0x8b7aad24
\Driver\ACPI -> acpi.sys @ 0x80694d68
\Driver\atapi -> ataport.SYS @ 0x836f2a2c
\Driver\iaStor -> iaStor.sys @ 0x83649e74
IoDeviceObjectType ->\Device\Harddisk0\DR0 ->user & kernel MBR OK

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(5220)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\windows\system32\WLANExt.exe
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\system32\lxdxcoms.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\windows\system32\conime.exe
c:\program files\ASUS\ATK Hotkey\MsgTranAgt.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\program files\P4G\BatteryLife.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\ehome\ehmsas.exe
.
**************************************************************************
.
Heure de fin: 2010-01-05 13:47:40 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-01-05 12:47
ComboFix2.txt 2010-01-04 19:07

Avant-CF: 78 520 373 248 octets libres
Après-CF: 78 483 468 288 octets libres

- - End Of File - - 6DB7D4B85099350C4A1B3BD8593DBB43

Voici le rapport SEAF:
1. ========================= SEAF 1.0.0.6 - C_XX | 13:51:58,63
2.
3. Valeur(s) recherchée(s):
4.
5. [moreoption]
6. iastor.sys
7.
8. (!) --- Recherche Registre occultée
9.
10. ========================= Fichier(s)/Dossier(s):
11.
12. "C:\Windows\System32\drivers\iaStor.sys"
13. MD5: 51a51f6fc3dbfeddb031c83f017bfbb6 | --------- | 12/09/2008 06:32
14.
15. =========================
16.
17. "C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_3c4af4a0\iaStor.sys"
18. MD5: 8ef427c54497c5f8a7a645990e4278c7 | --a------ | 12/09/2008 06:32
19.
20. =========================
21.
22.
23. ========================= E.O.F | 14:12:25,29

Et j'ai fait un scan avec gen proc au lieu de HJThis parce-qu'il n'est pas installé sur mon ordi. Est-ce pareil ou veux-tu un HJT?
Voici le rapport:
Rapport GenProc 2.660 [3] - 05/01/2010 à 14:21:12
@ Windows VISTA Service Pack 2 - ASUSTeK Computer Inc. - Mode normal
@ Mozilla Firefox 3.5.6 (fr) [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

Poste un rapport NanoScan https://www.micro-astuce.com/securite/NanoScan-Panda.php

~~~~ INFORMATION COMPLEMENTAIRE ~~~~

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-05 14:21:22
Windows 6.0.6002 Service Pack 2

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\002243be9599]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\002243be9599]

scanning hidden registry entries ...

scan completed successfully
hidden services: 0

Rapport de ZHPDiag v1.24.40 par Nicolas Coolman
Run by Flo at 05/01/2010 14:22:44
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium (6.0.6002) Service Pack 2
MSIE: Internet Explorer v8.0.6001.18865
MFIE: Mozilla Firefox (3.5.6)

Boot mode: Normal (Normal boot)
Total RAM: 3070 MB (55% free)
System drive C: has 73 GB (49%) free of 149 GB

---\\
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - C:\Program Files\Windows Defender\MSASCui.exe
[MD5.98888488D0E6DB0256E5E661BCD35EB6] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[MD5.3A0647BDED81DBE0BCBB51D70B22C9E0] - C:\Program Files\Java\jre6\bin\jusched.exe
[MD5.E1E71D80D078C576801B6FE2A29FCF85] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[MD5.A6001C8CF042D31AB1377CC7626A1046] - C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
[MD5.F0187E45268E86AAAA932CBD9087BEA8] - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
[MD5.0905299D8EE35DAA541589D3F172C43C] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
[MD5.74EF10CD035DE51171C98E60E53AE221] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
[MD5.2299E0CBEFB41A9DD72E293CE0B00C8B] - C:\Program Files\ATKOSD2\ATKOSD2.exe
[MD5.B28C68AF43D6AC0C8D1B3B205EE9264F] - C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
[MD5.038EE4314F535410CB8B179C2DCFFE59] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
[MD5.B4000CCB133C477040962212B14F730A] - C:\Program Files\ASUS\Splendid\ACMON.exe
[MD5.35937EAD711207544E219C2A19A78A7D] - C:\Program Files\Windows Media Player\WMPNSCFG.exe
[MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - C:\Program Files\Windows Sidebar\sidebar.exe
[MD5.BF08674925F151BD4537B89A493E3E0C] - C:\Windows\ehome\ehTray.exe
[MD5.B6A2D17220C22B2B1EF8A5E4A21F06D0] - C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
[MD5.76E19A410CED8235507B85EC4B2FAAC2] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
[MD5.3794B461C45882E06856F282EEF025AF] - C:\Windows\system32\svchost.exe
[MD5.9015BC03F62940527EC92D45EE89E46F] - C:\Program Files\Avira\AntiVir Desktop\sched.exe
[MD5.B8720A787C1223492E6F319465E996CE] - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
[MD5.5A055A4777CBBC8845DD598CB2EEBF69] - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
[MD5.B886D349AFAD502DE4F6EA0C64B1CC4D] - C:\Windows\system32\Ati2evxx.exe
[MD5.7C157574A181B19B9DCF5F339E25337E] - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
[MD5.B78D1ACA1BBD0077848D9F87C8207AB1] - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
[MD5.43F95B863DF18D1DC7A52946159D4B5B] - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
[MD5.ABF90FC5A127F481219B873C1B8DFC1C] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
[MD5.2261D7CC31D0309F6ED72923FF82DF50] - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
[MD5.21C843A23992BA690DD09F252BC91CE0] - C:\Windows\system32\lxdxcoms.exe
[MD5.7CF1B716372B89568AE4C0FE769F5869] - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
[MD5.3978F3540329E16C0AC3BCF677E5669F] - C:\Windows\system32\lsass.exe
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - C:\Windows\system32\SLsvc.exe
[MD5.524BFBEA40E6E404737CCBC754647A2E] - C:\Windows\System32\spoolsv.exe
[MD5.AED0DFF80C6B3914769407E78D7AB21A] - C:\Windows\system32\SearchIndexer.exe

---\\
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

---\\
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

---\\
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

---\\
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll

---\\
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

---\\
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll

---\\
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
O4 - HKLM\..\policies\Explorer: [BindDirectlyToPropertySetStorage] Data=0
O4 - HKLM\..\policies\Explorer: [NoDriveAutoRun] Data=145
O4 - HKLM\..\policies\Explorer: [NoDriveTypeAutoRun] Data=145
O4 - HKLM\..\policies\Explorer: [HonorAutoRunSetting] Data=0
O4 - HKLM\..\policies\Explorer: [NoDrives] Data=0
O4 - HKCU\..\policies\Explorer: [NoDriveAutoRun] Data=145
O4 - HKCU\..\policies\Explorer: [NoDriveTypeAutoRun] Data=145
O4 - HKCU\..\policies\Explorer: [HonorAutoRunSetting] Data=0
O4 - HKCU\..\policies\Explorer: [NoDrives] Data=0
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk -

---\\
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

---\\
O9 - Extra button: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,880
O9 - Extra button: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,873
O9 - Extra button: Identités - {45DB34C3-955C-11D3-ABEF-444553540000} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,870
O9 - Extra button: Cartes - {45DB34C3-955C-11D3-ABEF-444553540001} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,871
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll,900
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

---\\
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll

---\\
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

---\\
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: qvp - {4BA78E3D-CA25-4BFF-B8F0-8A3359E4B520} - C:\Program Files\QlikView\QvProtocol\Qvp.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

---\\
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll C:\Windows\System32\guard32.dll

---\\
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll

---\\
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

---\\
O23 - Service: ADSM Service (ADSMService) - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: (Ati External Event Utility) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bluetooth Service (btwdins) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: (hkacolha) - C:\WindowsC:\Program Files\Common Files\Microsoft Shared\hkacolha.dll
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdxCATSCustConnectService (lxdxCATSCustConnectService) - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdxserv.exe
O23 - Service: lxdx_device (lxdx_device) - C:\Windows\system32\lxdxcoms.exe -service
O23 - Service: Machine Debug Manager (MDM) - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{C61BEE27-974D-4FC7-804D-4518C521E23D}.job

---\\
O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: avgio (avgio) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: avipbb (avipbb) - C:\WINDOWS\system32\DRIVERS\avipbb.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: COMODO Internet Security Sandbox Driver (cmdGuard) - C:\WINDOWS\System32\DRIVERS\cmdguard.sys
O41 - Driver: COMODO Internet Security Helper Driver (cmdHlp) - C:\WINDOWS\System32\DRIVERS\cmdhlp.sys
O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: (no object) (hkacolha) - C:\Program Files\Common Files\Microsoft Shared\hkacolha.dll
O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver: COMODO Internet Security Firewall Driver (inspect) - C:\WINDOWS\system32\DRIVERS\inspect.sys
O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver: Pilote HID de clavier (kbdhid) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
O41 - Driver: ssmdrv (ssmdrv) - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

---\\
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1)
O42 - Logiciel: 2007 Microsoft Office system
O42 - Logiciel: 7-Zip 4.65
O42 - Logiciel: AHV content for Acrobat and Flash
O42 - Logiciel: AI RoboForm (All Users)
O42 - Logiciel: ASUS Data Security Manager
O42 - Logiciel: ASUS InstantFun
O42 - Logiciel: ASUS LifeFrame3
O42 - Logiciel: ASUS SmartLogon
O42 - Logiciel: ASUS Splendid Video Enhancement Technology
O42 - Logiciel: ATK Hotkey
O42 - Logiciel: ATK Media
O42 - Logiciel: ATKOSD2
O42 - Logiciel: Acrobat.com
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe AIR
O42 - Logiciel: Adobe After Effects CS4
O42 - Logiciel: Adobe After Effects CS4 Presets
O42 - Logiciel: Adobe After Effects CS4 Third Party Content
O42 - Logiciel: Adobe Anchor Service CS4
O42 - Logiciel: Adobe Asset Services CS3
O42 - Logiciel: Adobe Bridge CS4
O42 - Logiciel: Adobe Bridge Start Meeting
O42 - Logiciel: Adobe CS4 American English Speech Analysis Models
O42 - Logiciel: Adobe CSI CS4
O42 - Logiciel: Adobe Color - Photoshop Specific CS4
O42 - Logiciel: Adobe Color EU Extra Settings CS4
O42 - Logiciel: Adobe Color EU Recommended Settings
O42 - Logiciel: Adobe Color JA Extra Settings CS4
O42 - Logiciel: Adobe Color NA Recommended Settings CS4
O42 - Logiciel: Adobe Color Video Profiles CS CS4
O42 - Logiciel: Adobe Creative Suite 3 Design Standard
O42 - Logiciel: Adobe Creative Suite 4 Master Collection
O42 - Logiciel: Adobe Device Central CS3
O42 - Logiciel: Adobe Device Central CS4
O42 - Logiciel: Adobe Dreamweaver CS4
O42 - Logiciel: Adobe Drive CS4
O42 - Logiciel: Adobe Dynamiclink Support
O42 - Logiciel: Adobe Encore CS4
O42 - Logiciel: Adobe Extension Manager CS4
O42 - Logiciel: Adobe Fireworks CS4
O42 - Logiciel: Adobe Flash CS4 STI-fr
O42 - Logiciel: Adobe Flash Player 10 ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin
O42 - Logiciel: Adobe Help Viewer CS3
O42 - Logiciel: Adobe Illustrator CS3
O42 - Logiciel: Adobe Illustrator CS4
O42 - Logiciel: Adobe InDesign CS4
O42 - Logiciel: Adobe InDesign CS4 Application Feature Set Files (Roman)
O42 - Logiciel: Adobe InDesign CS4 Common Base Files
O42 - Logiciel: Adobe InDesign CS4 Icon Handler
O42 - Logiciel: Adobe Linguistics CS3
O42 - Logiciel: Adobe Media Encoder CS4 Exporter
O42 - Logiciel: Adobe Media Encoder CS4 Importer
O42 - Logiciel: Adobe Media Player
O42 - Logiciel: Adobe OnLocation CS4
O42 - Logiciel: Adobe Photoshop CS4 Support
O42 - Logiciel: Adobe SGM CS4
O42 - Logiciel: Adobe SING CS4
O42 - Logiciel: Adobe Service Manager Extension
O42 - Logiciel: Adobe Setup
O42 - Logiciel: Adobe Soundbooth CS4
O42 - Logiciel: Adobe Stock Photos CS3
O42 - Logiciel: Adobe Type Support CS4
O42 - Logiciel: Adobe Update Manager CS4
O42 - Logiciel: Adobe Version Cue CS3 Server
O42 - Logiciel: Adobe Version Cue CS4 Server
O42 - Logiciel: Adobe WinSoft Linguistics Plugin
O42 - Logiciel: Adobe XMP Panels CS3
O42 - Logiciel: Adobe XMP Panels CS4
O42 - Logiciel: AdobeColorCommonSetCMYK
O42 - Logiciel: AdobeColorCommonSetRGB
O42 - Logiciel: Ajouter ou supprimer Adobe Creative Suite 3 Design Standard
O42 - Logiciel: Asus_Camera_ScreenSaver
O42 - Logiciel: Atheros Client Installation Program
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
O42 - Logiciel: CCleaner
O42 - Logiciel: COMODO Internet Security
O42 - Logiciel: Cisco EAP-FAST Module
O42 - Logiciel: Cisco LEAP Module
O42 - Logiciel: Cisco PEAP Module
O42 - Logiciel: CyberLink Power2Go
O42 - Logiciel: ESET Online Scanner v3
O42 - Logiciel: Express Gate
O42 - Logiciel: FileZilla Client 3.3.0
O42 - Logiciel: GIMP 2.6.7
O42 - Logiciel: Google Desktop
O42 - Logiciel: JDownloader
O42 - Logiciel: Java(TM) 6 Update 17
O42 - Logiciel: La boite a couleurs version 1.6.14
O42 - Logiciel: Lexmark 3600-4600 Series
O42 - Logiciel: LightScribe System Software 1.14.17.1
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Microsoft .NET Framework 1.1
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297)
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Access MUI (Dutch) 2007
O42 - Logiciel: Microsoft Office Access MUI (English) 2007
O42 - Logiciel: Microsoft Office Access MUI (French) 2007
O42 - Logiciel: Microsoft Office Access MUI (German) 2007
O42 - Logiciel: Microsoft Office Access MUI (Italian) 2007
O42 - Logiciel: Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)
O42 - Logiciel: Microsoft Office Excel MUI (Dutch) 2007
O42 - Logiciel: Microsoft Office Excel MUI (English) 2007
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
O42 - Logiciel: Microsoft Office Excel MUI (German) 2007
O42 - Logiciel: Microsoft Office Excel MUI (Italian) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (Dutch) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (German) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (Italian) 2007
O42 - Logiciel: Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)
O42 - Logiciel: Microsoft Office Professional Plus 2007
O42 - Logiciel: Microsoft Office Publisher MUI (English) 2007
O42 - Logiciel: Microsoft Office Publisher MUI (German) 2007
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: Mozilla Firefox (3.5.6)
O42 - Logiciel: Multimedia Card Reader
O42 - Logiciel: Notepad++
O42 - Logiciel: OpenOffice.org 3.1
O42 - Logiciel: PDF Settings CS4
O42 - Logiciel: PSPad editor
O42 - Logiciel: PhotoFiltre
O42 - Logiciel: Pixel Bender Toolkit
O42 - Logiciel: QlikView
O42 - Logiciel: Quick Zip 4.60.019
O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver
O42 - Logiciel: SEAF By C_XX
O42 - Logiciel: SFR - Kit de connexion
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704)
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593)
O42 - Logiciel: Security Update for Microsoft Office Outlook 2007 (KB972363)
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789)
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB969693)
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234)
O42 - Logiciel: Suite Shared Configuration CS4
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: USB 2.0 1.3M UVC WebCam
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)
O42 - Logiciel: Update for Microsoft Office Access 2007 Help (KB963663)
O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB963678)
O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416)
O42 - Logiciel: Update for Microsoft Office Powerpoint 2007 Help (KB963669)
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974561)
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb976884)
O42 - Logiciel: Update für Microsoft Office Excel 2007 Help (KB963678)
O42 - Logiciel: Update für Microsoft Office Powerpoint 2007 Help (KB963669)
O42 - Logiciel: Update voor Microsoft Office Excel 2007 Help (KB963678)
O42 - Logiciel: Update voor Microsoft Office Powerpoint 2007 Help (KB963669)
O42 - Logiciel: VLC media player 0.9.7
O42 - Logiciel: VSO Image Resizer 2.2.2.1
O42 - Logiciel: VideoAudioPlayer version 1.1
O42 - Logiciel: Vuze
O42 - Logiciel: WIDCOMM Bluetooth Software
O42 - Logiciel: WampServer 2.0
O42 - Logiciel: Wireless Console 2
O42 - Logiciel: XnView 1.96.5
O42 - Logiciel: ccc-Branding
O42 - Logiciel: kuler

---\\
O44 - LFC:Last File Created 05/01/2010 - 13:47:42 ---A- C:\ComboFix.txt
O44 - LFC:Last File Created 05/01/2010 - 13:42:30 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 05/01/2010 - 13:42:30 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 05/01/2010 - 13:42:30 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 05/01/2010 - 13:42:30 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 05/01/2010 - 13:42:30 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 05/01/2010 - 13:40:40 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 05/01/2010 - 13:36:26 ---A- C:\Windows\system.ini
O44 - LFC:Last File Created 05/01/2010 - 13:35:11 ---A- C:\Windows\System32\acovcnt.exe
O44 - LFC:Last File Created 05/01/2010 - 13:34:23 -S-A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 05/01/2010 - 13:34:17 ---A- C:\Windows\PFRO.log
O44 - LFC:Last File Created 04/01/2010 - 10:56:11 ---A- C:\rapport.txt
O44 - LFC:Last File Created 04/01/2010 - 10:54:50 ---A- C:\Windows\System32\tmp.txt
O44 - LFC:Last File Created 30/12/2009 - 14:55:24 ---A- C:\Windows\System32\drivers\mbamswissarmy.sys
O44 - LFC:Last File Created 30/12/2009 - 14:54:58 ---A- C:\Windows\System32\drivers\mbam.sys
O44 - LFC:Last File Created 14/12/2009 - 10:07:18 ---A- C:\Windows\System32\FNTCACHE.DAT
O44 - LFC:Last File Created 11/12/2009 - 16:05:42 ---A- C:\colorbox.log
O44 - LFC:Last File Created 10/12/2009 - 14:19:17 ---A- C:\Windows\System32\drivers\avgntflt.sys
O44 - LFC:Last File Created 10/12/2009 - 11:03:06 ---A- C:\Windows\System32\guard32.dll
O44 - LFC:Last File Created 09/12/2009 - 22:54:07 ---A- C:\Windows\PEV.exe
O44 - LFC:Last File Created 08/12/2009 - 21:31:52 ---A- C:\autoexec.bat
O44 - LFC:Last File Created 07/12/2009 - 15:46:20 RSHA- C:\IO.SYS
O44 - LFC:Last File Created 07/12/2009 - 15:46:20 RSHA- C:\MSDOS.SYS
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 ---A- C:\ntuser.dat
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 --HA- C:\ntuser.dat.LOG1
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 -SHA- C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TM.blf
O44 - LFC:Last File Created 07/12/2009 - 13:56:11 -SHA- C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 --HA- C:\ntuser.dat.LOG2
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TM.blf
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000001.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93de-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms
O44 - LFC:Last File Created 07/12/2009 - 13:55:30 -SHA- C:\ntuser.dat{e64a93e2-e308-11de-8566-00248c112bda}.TMContainer00000000000000000002.regtrans-ms

---\\
O63 - Logiciel: HijackThis 2.0.2

End of the scan: 417 lines

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

~~ Fin à 14:22:50 ~~