Awtss HELP

Bonjour,
alerte awtss, je m'arracherai bien les cheveux vu le temps que j'ai déjà passé pour essayer de me débarasser de lui. Il est toujours là !! Quelle est la recette miracle ? HELP
Configuration: Windows 2000
Firefox 2.0.0.7

6 réponses

  1. Contributeur sécurité
    bonsoir,

    merci pour le rapport, mais rien de concluant.

    * Fait un scan antivirus en ligne ICI
    https://www.bitdefender.fr/
    et copie colle le résultat ici
    * En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
    * Dans la nouvelle fenêtre, clique sur I agree
    * La fenêtre change encore, clique sur Click here to scan
    * Les signatures se chargent, etc.

    tuto en image

    http://pageperso.aol.fr/rginformatique/mapage/defender.htm

    1. Ok, voici le apport de scan avec la bonne version :

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:32:29, on 10/10/2007
      Platform: Windows 2000 SP4 (WinNT 5.00.2195)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
      Boot mode: Normal

      Running processes:
      C:\WINNT\System32\smss.exe
      C:\WINNT\system32\csrss.exe
      C:\WINNT\system32\winlogon.exe
      C:\WINNT\system32\services.exe
      C:\WINNT\system32\lsass.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\system32\LEXBCES.EXE
      C:\WINNT\system32\spoolsv.exe
      C:\WINNT\system32\LEXPPS.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\system32\nvsvc32.exe
      C:\WINNT\system32\regsvc.exe
      C:\WINNT\system32\MSTask.exe
      C:\WINNT\Explorer.EXE
      C:\Program Files\Spyware Doctor\swdsvc.exe
      C:\WINNT\system32\stisvc.exe
      C:\WINNT\System32\WBEM\WinMgmt.exe
      C:\WINNT\system32\mspmspsv.exe
      C:\WINNT\system32\svchost.exe
      C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
      C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
      C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\Program Files\Spyware Doctor\SDTrayApp.exe
      C:\WINNT\system32\internat.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\WINNT\system32\ZoneLabs\vsmon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Hercules\WiFi Station\WifiStation.exe
      C:\WINNT\system32\wuauclt.exe
      C:\WINNT\system32\notepad.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\SEB\Bureau\scanner.exe.exe
      C:\WINNT\system32\NOTEPAD.EXE
      C:\Program Files\Quintessential Player\QCDPlayer.exe
      C:\Program Files\Soulseek\slsk.exe
      C:\Documents and Settings\SEB\Bureau\HJTInstall(2).exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      O2 - BHO: (no name) - {D93C2FE6-0A96-AFB2-5862-7686F9671339} - (no file)
      O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
      O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
      O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
      O4 - HKCU\..\Run: [internat.exe] internat.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
      O4 - HKUS\.DEFAULT\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
      O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: WiFi Station.lnk = C:\Program Files\Hercules\WiFi Station\WifiStation.exe
      O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
      O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?5e4e1d5b19124afea8621e6412fb87b4
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?5e4e1d5b19124afea8621e6412fb87b4
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
      O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://mmt.bouyguestelecom.fr/mmawap/jsp/composer/player/mmsPlayer.cab
      O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
      O23 - Service: MSCSPTISRV - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe (file missing)
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
      O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe (file missing)
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe (file missing)
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
      1. Contributeur sécurité
        re

        ce n'est pas la version d'hijackthis demandée
        télécharge la v2 non bêta stp
        je t'ai donné un lien plus haut

        reposte un rapport ensuite
        1. salut

          voici le rapport hjt :

          Logfile of Trend Micro HijackThis v2.0.0 (BETA)
          Scan saved at 17:01:35, on 10/10/2007
          Platform: Windows 2000 SP4 (WinNT 5.00.2195)
          Boot mode: Normal

          Running processes:
          C:\WINNT\System32\smss.exe
          C:\WINNT\system32\csrss.exe
          C:\WINNT\system32\winlogon.exe
          C:\WINNT\system32\services.exe
          C:\WINNT\system32\lsass.exe
          C:\WINNT\system32\svchost.exe
          C:\WINNT\system32\LEXBCES.EXE
          C:\WINNT\system32\spoolsv.exe
          C:\WINNT\system32\LEXPPS.EXE
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\WINNT\system32\svchost.exe
          C:\WINNT\system32\nvsvc32.exe
          C:\WINNT\system32\regsvc.exe
          C:\WINNT\system32\MSTask.exe
          C:\WINNT\Explorer.EXE
          C:\Program Files\Spyware Doctor\swdsvc.exe
          C:\WINNT\system32\stisvc.exe
          C:\WINNT\System32\WBEM\WinMgmt.exe
          C:\WINNT\system32\mspmspsv.exe
          C:\WINNT\system32\svchost.exe
          C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
          C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
          C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\Program Files\Spyware Doctor\SDTrayApp.exe
          C:\WINNT\system32\internat.exe
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\WINNT\system32\ZoneLabs\vsmon.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Hercules\WiFi Station\WifiStation.exe
          C:\WINNT\system32\wuauclt.exe
          C:\WINNT\system32\notepad.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Documents and Settings\SEB\Bureau\scanner.exe.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
          O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          O2 - BHO: (no name) - {D93C2FE6-0A96-AFB2-5862-7686F9671339} - (no file)
          O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
          O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
          O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
          O4 - HKCU\..\Run: [internat.exe] internat.exe
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
          O4 - HKUS\.DEFAULT\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit (User 'Default user')
          O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
          O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O4 - Global Startup: WiFi Station.lnk = C:\Program Files\Hercules\WiFi Station\WifiStation.exe
          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
          O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?5e4e1d5b19124afea8621e6412fb87b4
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?5e4e1d5b19124afea8621e6412fb87b4
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
          O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://mmt.bouyguestelecom.fr/mmawap/jsp/composer/player/mmsPlayer.cab
          O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
          O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
          O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINNT\system32\browseui.dll
          O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINNT\system32\browseui.dll
          O23 - Service: Avertissement (Alerter) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Gestion d'applications (AppMgmt) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Explorateur d'ordinateur (Browser) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Client DHCP (Dhcp) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINNT\System32\dmadmin.exe
          O23 - Service: Gestionnaire de disque logique (dmserver) - Unknown owner - C:\WINNT\System32\services.exe
          O23 - Service: Client DNS (Dnscache) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Service de télécopie (Fax) - Unknown owner - C:\WINNT\system32\faxsvc.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Serveur (lanmanserver) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Station de travail (lanmanworkstation) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
          O23 - Service: Service d'application d'assistance TCP/IP NetBIOS (LmHosts) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINNT\system32\mnmsrvc.exe
          O23 - Service: MSCSPTISRV - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe (file missing)
          O23 - Service: DDE réseau (NetDDE) - Unknown owner - C:\WINNT\system32\netdde.exe
          O23 - Service: DSDM DDE réseau (NetDDEdsdm) - Unknown owner - C:\WINNT\system32\netdde.exe
          O23 - Service: Ouverture de session réseau (Netlogon) - Unknown owner - C:\WINNT\system32\lsass.exe
          O23 - Service: Fournisseur de la prise en charge de sécurité LM NT (NtLmSsp) - Unknown owner - C:\WINNT\system32\lsass.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
          O23 - Service: Service client pour NetWare (NWCWorkstation) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe (file missing)
          O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Agent de stratégie IPSEC (PolicyAgent) - Unknown owner - C:\WINNT\system32\lsass.exe
          O23 - Service: Emplacement protégé (ProtectedStorage) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Gestionnaire de comptes de sécurité (SamSs) - Unknown owner - C:\WINNT\system32\lsass.exe
          O23 - Service: Prise en charge des cartes à puces (SCardDrv) - Unknown owner - C:\WINNT\System32\SCardSvr.exe
          O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINNT\System32\SCardSvr.exe
          O23 - Service: Planificateur de tâches (Schedule) - Unknown owner - C:\WINNT\system32\MSTask.exe
          O23 - Service: PC Tools Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe
          O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
          O23 - Service: Service d'exécution par délégation (seclogon) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Sony SPTI Service (SPTISRV) - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe (file missing)
          O23 - Service: Still Image Service (StiSvc) - Unknown owner - C:\WINNT\system32\stisvc.exe
          O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINNT\system32\smlogsvc.exe
          O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINNT\system32\tlntsvr.exe
          O23 - Service: Client de suivi de lien distribué (TrkWks) - Unknown owner - C:\WINNT\system32\services.exe
          O23 - Service: Gestionnaire d'utilitaires (UtilMan) - Unknown owner - C:\WINNT\System32\UtilMan.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
          O23 - Service: Horloge Windows (W32Time) - Unknown owner - C:\WINNT\System32\services.exe
          O23 - Service: Infrastructure de gestion Windows (WinMgmt) - Unknown owner - C:\WINNT\System32\WBEM\WinMgmt.exe
          O23 - Service: Extensions du pilote WMI (Wmi) - Unknown owner - C:\WINNT\system32\Services.exe
          1. Contributeur sécurité
            bonjour,

            * Télécharge HijackThis et poste le rapport stp

            hijackthis
            clique sur "do a system scan & save logfile"
            puis poste le rapport généré ici stp
            1. Bonjour,
              bon, j'ai fait tourner combofix, quelqu'un peut-il me dire ce que raconte ce rapport ?

              ComboFix 07-10-03.7 - SEB 2007-10-10 16:32:32.2 - NTFSx86
              Microsoft Windows 2000 Professionnel 5.0.2195.4.1252.1.1036.18.67 [GMT 2:00]
              Running from: C:\Documents and Settings\SEB\Bureau\ComboFix.exe
              .

              (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
              .

              C:\check_LSA7.txt
              C:\WINNT\cookies.ini
              C:\WINNT\Fonts\acrsecI.fon
              C:\WINNT\system32\awtss.dll
              C:\WINNT\system32\config\SAM.SAV
              C:\WINNT\system32\jtrynadk.dll
              C:\WINNT\system32\pgcxanto.exe
              C:\WINNT\system32\qeqmpdlh.dll
              C:\WINNT\system32\sstwa.bak1
              C:\WINNT\system32\sstwa.bak2
              C:\WINNT\system32\sstwa.ini
              C:\WINNT\system32\yiwtttpg.exe

              .
              ((((((((((((((((((((((((((((( Fichiers créés 2007-09-10 to 2007-10-10 ))))))))))))))))))))))))))))))))))))
              .

              2007-10-03 21:41 51,200 --a------ C:\WINNT\NirCmd.exe
              2007-10-03 18:46 <DIR> d-------- C:\Program Files\EsetOnlineScanner
              2007-10-03 16:24 3,968 --a------ C:\WINNT\system32\drivers\AvgArCln.sys
              2007-10-03 14:53 3,108 --a------ C:\WINNT\system32\tmp.reg
              2007-10-03 14:51 53,248 --a------ C:\WINNT\system32\Process.exe
              2007-10-03 14:51 51,200 --a------ C:\WINNT\system32\dumphive.exe
              2007-10-03 14:51 289,144 --a------ C:\WINNT\system32\VCCLSID.exe
              2007-10-03 14:51 288,417 --a------ C:\WINNT\system32\SrchSTS.exe
              2007-10-03 14:51 25,088 --a------ C:\WINNT\system32\WS2Fix.exe
              2007-10-03 13:02 79,688 --a------ C:\WINNT\system32\drivers\iksyssec.sys
              2007-10-03 13:02 62,280 --a------ C:\WINNT\system32\drivers\iksysflt.sys
              2007-10-03 13:02 41,288 --a------ C:\WINNT\system32\drivers\ikfilesec.sys
              2007-10-03 13:02 29,000 --a------ C:\WINNT\system32\drivers\kcom.sys
              2007-10-03 13:02 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
              2007-10-03 13:01 462,848 --a------ C:\WINNT\system32\msaatext.dll
              2007-10-03 13:01 360,448 --a------ C:\WINNT\system32\oleacc.dll
              2007-10-03 13:01 356,352 --a--c--- C:\WINNT\system32\dllcache\oleaccrc.dll
              2007-10-03 13:01 356,352 --a------ C:\WINNT\system32\oleaccrc.dll
              2007-10-03 13:01 <DIR> d-------- C:\Program Files\Spyware Doctor
              2007-10-03 13:01 <DIR> d-------- C:\Documents and Settings\SEB\Application Data\PC Tools
              2007-10-03 12:05 626,688 --a------ C:\WINNT\system32\msvcr80.dll
              2007-10-03 11:55 <DIR> d-------- C:\VundoFix Backups
              2007-10-03 10:46 10,872 --a------ C:\WINNT\system32\drivers\AvgAsCln.sys
              2007-10-03 10:43 <DIR> d-------- C:\Program Files\CCleaner
              2007-09-26 20:52 <DIR> d-------- C:\Program Files\Trend Micro
              2007-09-26 19:17 <DIR> d-------- C:\WINNT\BDOSCAN8
              2007-09-22 13:12 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_268.dat

              .
              (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
              .
              99-12-15 05:59 32528 --a------ C:\WINNT\inf\wbfirdma.sys
              07-10-03 17:57 --------- d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
              07-09-29 16:53 --------- d-------- C:\Program Files\Soulseek
              07-09-27 16:39 --------- d-------- C:\Documents and Settings\SEB\Application Data\Google
              07-09-06 12:09 801144 --a------ C:\WINNT\system32\aswBoot.exe
              07-09-06 12:05 94416 --a------ C:\WINNT\system32\drivers\aswmon2.sys
              07-09-06 12:05 92848 --a------ C:\WINNT\system32\drivers\aswmon.sys
              07-09-06 12:03 23152 --a------ C:\WINNT\system32\drivers\aswRdr.sys
              07-09-06 12:02 42912 --a------ C:\WINNT\system32\drivers\aswTdi.sys
              07-09-06 12:00 95608 --a------ C:\WINNT\system32\AVASTSS.scr
              07-09-06 12:00 26624 --a------ C:\WINNT\system32\drivers\aavmker4.sys
              07-08-08 16:30 19456 --a------ C:\WINNT\system32\OnlineScannerLang.dll
              07-08-02 18:11 253952 --a------ C:\WINNT\system32\OnlineScannerDLLA.dll
              07-08-02 18:11 241664 --a------ C:\WINNT\system32\OnlineScannerDLLW.dll
              07-07-30 19:19 92504 --a------ C:\WINNT\system32\cdm.dll
              07-07-30 19:19 549720 --a------ C:\WINNT\system32\wuapi.dll
              07-07-30 19:19 53080 --a------ C:\WINNT\system32\wuauclt.exe
              07-07-30 19:19 43352 --a------ C:\WINNT\system32\wups2.dll
              07-07-30 19:19 325976 --a------ C:\WINNT\system32\wucltui.dll
              07-07-30 19:19 203096 --a------ C:\WINNT\system32\wuweb.dll
              07-07-30 19:19 1712984 --a------ C:\WINNT\system32\wuaueng.dll
              07-07-30 19:18 33624 --a------ C:\WINNT\system32\wups.dll
              07-07-27 15:49 225355 --a------ C:\WINNT\system32\lnod32apiW.dll
              07-07-27 15:49 196683 --a------ C:\WINNT\system32\lnod32apiA.dll
              06-02-20 12:34 53794 --a------ C:\Program Files\lang_FrenchFrance.exe
              06-02-20 12:33 2320501 --a------ C:\Program Files\qcd451.exe
              06-02-20 12:16 4677596 --a------ C:\Program Files\eMule0.47a-Installer.exe
              06-02-17 13:58 11817800 --a------ C:\Program Files\GoogleEarth.exe
              06-02-14 11:50 12716752 --a------ C:\Program Files\acdsee.exe
              06-02-13 18:40 2855080 --a------ C:\Program Files\aawsepersonal.exe
              06-02-11 14:01 5361888 --a------ C:\Program Files\kerio.exe
              06-02-03 10:25 5239328 --a------ C:\Program Files\Firefox Setup 1.5.0.1.exe
              06-01-28 13:16 36488456 --a------ C:\Program Files\iTunesSetup.exe
              06-01-28 12:14 496376 --a------ C:\Program Files\ie6setup.exe
              05-11-30 12:37 937001 --a------ C:\Program Files\slsk156c.exe
              05-08-27 16:32 782 --a------ C:\Program Files\slsk157test8.exe
              05-05-10 17:11 271 ---h----- C:\Program Files\desktop.ini
              05-05-10 17:11 22115 ---h----- C:\Program Files\folder.htt
              04-12-14 14:55 1302070 --a------ C:\Program Files\GrabIt151b.exe
              04-12-08 12:16 1256895 --a------ C:\Program Files\wrar341fr.exe
              04-12-08 12:16 1164112 --a------ C:\Program Files\wrar341.exe
              04-11-25 10:06 5212960 --a------ C:\Program Files\Firefox Setup 1.0.exe
              04-11-09 10:28 6101138 --a------ C:\Program Files\ThunderbirdSetup-0.9-fr-FR.exe
              04-11-09 09:38 4961713 --a------ C:\Program Files\Firefox Setup (1.0rc1, fr-FR).exe
              04-10-01 20:12 3838264 --a------ C:\Program Files\DivXPlayerInstaller.exe
              04-09-10 15:33 7609856 --a------ C:\Program Files\avg6754fu_free.exe
              04-08-31 15:42 1117550 --a------ C:\Program Files\GrabIt147b.exe
              04-08-30 00:02 1257447 --a------ C:\Program Files\wrar34b5fr.exe
              03-05-18 16:00 547 --a------ C:\Program Files\Lisezmoi.txt
              .

              ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

              [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D93C2FE6-0A96-AFB2-5862-7686F9671339}]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "Synchronization Manager"="mobsync.exe" [03-06-19 18:05 C:\WINNT\system32\mobsync.exe]
              "NvCplDaemon"="C:\WINNT\system32\NvCpl.dll" [03-11-17 20:33 ]
              "nwiz"="nwiz.exe" [03-11-17 20:33 C:\WINNT\system32\nwiz.exe]
              "MessengerPlus3"="C:\Program Files\Messenger Plus! 3\MsgPlus.exe" [04-10-24 20:07 ]
              "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [05-02-09 12:44 ]
              "Lexmark X74-X75"="C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe" [02-07-31 11:54 ]
              "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe" [05-08-26 19:14 ]
              "NeroCheck"="C:\WINNT\system32\\NeroCheck.exe" [01-07-09 12:50 ]
              "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [07-09-06 12:06 ]
              "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [07-03-09 01:02 ]
              "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [07-04-27 09:41 ]
              "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [07-06-01 16:51 ]
              "Device Detector"="DevDetect.exe" []
              "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [07-06-11 11:25 ]
              "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [07-09-27 13:43 ]

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "internat.exe"="internat.exe" [99-12-15 04:30 C:\WINNT\system32\internat.exe]
              "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [05-06-14 18:05 ]
              "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [07-10-03 10:01 ]

              [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
              "^SetupICWDesktop"=C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop

              [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
              "internat.exe"=internat.exe
              "NvMediaCenter"=RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit

              [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\nwprovau]
              nwprovau.dll 03-06-19 18:05 143120 C:\WINNT\system32\nwprovau.dll

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
              "Authentication Packages"= msv1_0 nwprovau

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
              SecurityProviders msapsspc.dll, schannel.dll, msnsspc.dll, digest.dll

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice"

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice"

              R0 SonySDK2;Sony USB Mass Storage Driver;C:\WINNT\system32\DRIVERS\SonySDK2.sys
              R1 VIAPFD;VIAPFD;C:\WINNT\system32\Drivers\VIAPFD.SYS
              R2 AppleTalk;Protocole AppleTalk;C:\WINNT\system32\DRIVERS\sfmatalk.sys
              R2 aswMon;avast! Standard Shield Support;C:\WINNT\system32\drivers\aswMon.sys
              R2 CDRPDACC;Quinnware CDDA Driver (by InfinaDyne);\??\C:\Program Files\Quintessential Player\cdrpdacc.sys
              R3 usbhub20;Prise en charge du concentrateur racine USB 2.0;C:\WINNT\system32\DRIVERS\usbhub20.sys
              S1 sglfb;sglfb;C:\WINNT\system32\drivers\sglfb.sys
              S3 fbxusb;FreeBox USB Network Adapter;C:\WINNT\system32\DRIVERS\fbxusb.sys
              S3 kvpndev;Kerio VPN adapter;C:\WINNT\system32\DRIVERS\kvpndrv.sys
              S3 memcard;Pilote de cartes de mémoire PCMCIA;C:\WINNT\system32\DRIVERS\memcard.sys
              S3 SetupNTGLM7X;SetupNTGLM7X;\??\F:\NTGLM7X.sys
              S3 viafilter;VIA USB Filter;C:\WINNT\system32\Drivers\viausb.sys

              .
              Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
              "2006-02-13 13:00:00 C:\WINNT\Tasks\A024596C9183D508.job"
              "2007-10-04 21:00:00 C:\WINNT\Tasks\AF81B40295F62B16.job"
              - c:\progra~1\drvwma\itchbiketray.exe
              "2007-06-12 05:51:02 C:\WINNT\Tasks\AppleSoftwareUpdate.job"
              - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
              .
              **************************************************************************

              catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2007-10-10 16:47:13
              Windows 5.0.2195 Service Pack 4 NTFS

              scanning hidden processes ...

              scanning hidden autostart entries ...

              scanning hidden files ...

              scan completed successfully
              hidden files: 0

              **************************************************************************
              .
              Completion time: 2007-10-10 16:56:35 - machine was rebooted
              C:\ComboFix-quarantined-files.txt ... 07-10-10 16:52
              .
              --- E O F ---

              merci d'avance !