Avast application win32 non valide

Salut,

--> Désactive l'UAC le temps de la désinfection.

--> Télécharge FindyKill (par Chiquitine29) sur ton Bureau.

--> Lance l'installation avec les paramètres par défaut.

--> Clique droit sur le raccourci FindyKill sur ton Bureau et choisis Exécuter en tant qu'administrateur.

--> Au menu principal, choisis l'option 1 (Recherche).

--> Poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

merci pour votre aide

je n'arrive pas a lancer findykill en tant qu'administrateur

Pourtant j'ai bien désactiver l'UAC et redémarrer mon ordi

Comment ça ?

/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\

--> Télécharge ComboFix (de sUBs) en le renommant en KillBagle avant de l'enregistrer sur ton Bureau.
--> Clique droit sur ComboFix.exe (le .exe n'est pas forcément visible) et choisis Exécuter en tant qu'administrateur afin de le lancer.
--> Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix

ca me fait comme pour avast

KillBagle.exe n'est pas une application WIN32 valide

Car tu as renommé ComboFix après l'avoir mis sur le Bureau.

il me demande de désactiver Norton Internet Security

je ne le trouve pas, meme dans les processus

Ce n'est pas grave.

c'est bon, c'est parti

l'analyse est en cours

je poste le rapport le plus tot possible

j'ai

Combofix a detecté la présence d'une activité de rootkit et a besoin de faire redémarrer la machine
Veuiller noter sur un papier le nom de chacun des fichiers. nous en aurons peut etre besoin plus tard

C:/Users/AppData\roaming\drivers\wfsintwq.sys

que dois-je faire?

Continuer.

Voici le rapport:

ComboFix 09-03-19.02 - Maxime 2009-03-22 1:02:26.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.2045.1089 [GMT 1:00]
Lancé depuis: H:\KillBagle.exe
AV: Norton Internet Security *On-access scanning enabled* (Updated)
FW: Norton Internet Security *enabled*
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\drv\Tuner\Yuan\Resources\_desktop.ini
c:\program files\Windows Live\Messenger\msnmsgr.exe
c:\users\Maxime\AppData\Local\oqkeeke.dat
c:\users\Maxime\AppData\Local\oqkeeke.exe
c:\users\Maxime\AppData\Local\oqkeeke_nav.dat
c:\users\Maxime\AppData\Local\oqkeeke_navps.dat
c:\users\Maxime\AppData\Roaming\drivers\downld
c:\users\Maxime\AppData\Roaming\drivers\downld\184814.exe
c:\users\Maxime\AppData\Roaming\drivers\downld\189572.exe
c:\users\Maxime\AppData\Roaming\drivers\downld\189603.exe
c:\users\Maxime\AppData\Roaming\drivers\srosa2.sys
c:\users\Maxime\AppData\Roaming\drivers\wfsintwq.sys
c:\users\Maxime\AppData\Roaming\drivers\winupgro.exe
c:\windows\system32\x64
c:\windows\system32\x64\csnp2uvc.dll
c:\windows\system32\x64\rsnpvc64.dll
c:\windows\system32\x64\sncduvc.sys
c:\windows\system32\x64\snp2uvc.sys
c:\windows\system32\x64\vsnpvc64.dll

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_SROSA
-------\Legacy_SROSA
-------\Legacy_SK9OU0S
-------\Service_sK9Ou0s

((((((((((((((((((((((((((((( Fichiers créés du 2009-02-22 au 2009-03-22 ))))))))))))))))))))))))))))))))))))
.

2009-03-22 00:09 . 2009-03-22 00:44 <REP> d-------- c:\program files\FindyKill
2009-03-21 23:41 . 2009-02-05 22:06 51,792 --a------ c:\windows\System32\drivers\aswMonFlt.sys
2009-03-21 22:14 . 2009-03-22 01:05 <REP> d--h----- c:\users\Maxime\AppData\Roaming\drivers
2009-03-21 22:00 . 2005-10-03 12:25 83,288 --a------ c:\windows\System32\Itechlogo.bmp
2009-03-21 21:17 . 2009-03-21 21:17 <REP> d-------- c:\users\Maxime\AppData\Roaming\Investintech
2009-03-21 20:48 . 2009-03-21 20:48 <REP> d-------- c:\program files\Canal
2009-03-21 20:47 . 2009-03-21 20:47 <REP> d-------- c:\program files\Common Files\Adobe AIR
2009-03-20 23:11 . 2007-11-05 10:51 69,632 --a------ c:\windows\System32\itechPrn.exe
2009-03-20 23:10 . 2009-03-21 22:00 <REP> d-------- c:\program files\Investintech.com Inc
2009-03-20 23:10 . 2005-12-19 11:05 2,551,808 --a------ c:\windows\System32\ProfUIS230m.dll
2009-03-20 23:10 . 2005-04-01 03:26 1,478,144 --a------ c:\windows\System32\iSED.dll
2009-03-20 23:10 . 2007-02-06 10:21 1,265,664 --a------ c:\windows\System32\Itemng.dll
2009-03-20 23:10 . 2007-09-24 13:02 1,175,552 --a------ c:\windows\System32\iTechUtil.dll
2009-03-20 23:10 . 2007-09-21 10:44 196,608 --a------ c:\windows\System32\iTechCra.dll
2009-03-20 23:10 . 2007-02-06 10:22 106,496 --a------ c:\windows\System32\iTechOA.dll
2009-03-20 23:10 . 2007-09-21 10:47 9,216 --a------ c:\windows\System32\itechPrnA.exe
2009-03-20 23:04 . 2009-03-20 23:04 <REP> d-------- c:\users\Maxime\AppData\Roaming\Softplicity
2009-03-20 23:04 . 2009-03-20 23:04 <REP> d-------- c:\program files\PDF Splitter
2009-03-11 01:22 . 2008-12-16 04:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL
2009-03-11 01:22 . 2009-02-09 04:10 2,033,152 --a------ c:\windows\System32\win32k.sys
2009-03-11 01:22 . 2008-11-27 05:43 268,288 --a------ c:\windows\System32\schannel.dll
2009-03-11 01:22 . 2008-12-16 06:31 7,680 --a------ c:\windows\System32\spwmp.dll
2009-03-11 01:22 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\msdxm.ocx
2009-03-11 01:22 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\dxmasf.dll
2009-03-07 17:39 . 2009-03-07 17:40 <REP> d-------- c:\program files\PokerStars.NET
2009-03-07 12:53 . 2009-03-07 12:53 <REP> d-------- c:\users\Maxime\AppData\Roaming\live-player
2009-03-07 12:53 . 2009-03-07 12:53 <REP> d-------- c:\program files\Live-Player
2009-03-06 17:17 . 2009-03-06 17:17 <REP> d-------- c:\program files\pdfforge Toolbar
2009-03-06 17:16 . 2009-03-06 17:17 <REP> d-------- c:\program files\PDFCreator
2009-03-06 17:16 . 2004-03-09 00:00 662,288 --a------ c:\windows\System32\MSCOMCT2.OCX
2009-03-06 17:16 . 1998-07-13 01:08 141,312 --a------ c:\windows\System32\MSCMCFR.DLL
2009-03-06 17:16 . 1998-06-24 00:00 137,000 --a------ c:\windows\System32\MSMAPI32.OCX
2009-03-06 17:16 . 1998-07-13 01:08 119,568 --a------ c:\windows\System32\VB6FR.DLL
2009-03-06 17:16 . 2001-10-28 16:42 116,224 --a------ c:\windows\System32\pdfcmnnt.dll
2009-03-06 17:16 . 1998-07-13 01:08 59,904 --a------ c:\windows\System32\MSCC2FR.DLL
2009-03-06 17:16 . 1998-07-06 00:00 23,552 --a------ c:\windows\System32\MSMPIDE.DLL
2009-02-22 14:55 . 2009-02-24 15:24 <REP> d-------- C:\SphinxV5

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-21 19:39 --------- d-----w c:\users\Maxime\AppData\Roaming\uTorrent
2009-03-21 14:08 --------- d-----w c:\users\Maxime\AppData\Roaming\OpenOffice.org2
2009-03-20 20:10 --------- d-----w c:\programdata\Lx_cats
2009-03-17 20:51 196,158 ----a-w c:\users\Maxime\AppData\Roaming\nvModes.dat
2009-03-17 10:54 --------- d-----w c:\program files\Everest Poker
2009-03-11 08:26 --------- d-----w c:\program files\Windows Mail
2009-03-11 08:24 --------- d-----w c:\programdata\Microsoft Help
2009-02-24 18:12 --------- d-----w c:\programdata\eMule
2009-02-24 18:12 --------- d-----w c:\program files\eMule
2009-02-18 09:21 --------- d-----w c:\program files\Windows Live
2009-02-07 17:51 --------- d-----w c:\program files\Messenger Plus! Live
2009-02-06 18:39 308,600 ----a-w c:\windows\WLXPGSS.SCR
2009-02-06 17:52 49,504 ----a-w c:\windows\System32\sirenacm.dll
2009-01-30 21:12 --------- d-----w c:\program files\Bullfrog
2009-01-30 21:09 --------- d-----w c:\program files\DAEMON Tools Lite
2009-01-30 20:57 --------- d-----w c:\users\Maxime\AppData\Roaming\DAEMON Tools Pro
2009-01-30 20:57 --------- d-----w c:\users\Maxime\AppData\Roaming\DAEMON Tools Lite
2009-01-30 20:57 --------- d-----w c:\users\Maxime\AppData\Roaming\DAEMON Tools
2009-01-30 20:57 --------- d-----w c:\programdata\DAEMON Tools Lite
2009-01-30 20:53 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-01-22 12:33 --------- d-----w c:\program files\Google
2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
2009-01-02 22:29 410,984 ----a-w c:\windows\System32\deploytk.dll
2008-12-15 20:03 174 --sha-w c:\program files\desktop.ini
2008-03-08 20:42 22,328 ----a-w c:\users\Maxime\AppData\Roaming\PnkBstrK.sys
2007-11-18 13:05 0 ----a-w c:\users\Maxime\AppData\Roaming\wklnhst.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{E312764E-7706-43F1-8DAB-FCDD2B1E416D}"= "c:\program files\pdfforge Toolbar\SearchSettings.dll" [2009-01-30 1114112]

[HKEY_CLASSES_ROOT\clsid\{e312764e-7706-43f1-8dab-fcdd2b1e416d}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
2009-01-30 15:12 650752 --a------ c:\program files\pdfforge Toolbar\WidgiToolbarIE.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
2009-01-30 16:32 1114112 --a------ c:\program files\pdfforge Toolbar\SearchSettings.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{B922D405-6D13-4A2B-AE89-08A030DA4402}"= "c:\program files\pdfforge Toolbar\WidgiToolbarIE.dll" [2009-01-30 650752]

[HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-11-23 171448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216]
"PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-06-27 752136]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-06-06 159744]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-02 136600]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-07-25 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-07-25 8470528]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-07-25 81920]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"SearchSettings"="c:\program files\pdfforge Toolbar\SearchSettings.exe" [2009-01-30 992256]
"Sonic PDF Print Dispatcher"="c:\windows\system32\iTechPrn.exe" [2007-11-05 69632]
"Canal Widget"="c:\program files\Canal\Canal Widget\Launcher.exe" [2009-02-05 106040]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-03-22 81000]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 c:\windows\RtHDVCpl.exe]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Linksys Wireless Network Monitor.lnk - c:\program files\Linksys\WUSBF54G\wlMonitor.exe [2008-11-29 3348480]
Wireless Configuration Utility.lnk - c:\program files\TRENDnet\TEW-424UB\WlanCU.exe [2007-04-29 434176]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=eNetHook.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALaunch]
--a------ 2007-01-26 13:24 598016 c:\acer\ALaunch\AlaunchClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eAudio]
--a------ 2007-06-11 13:54 1286144 c:\acer\Empowering Technology\eAudio\eAudio.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FaxCenterServer]
--a------ 2007-07-16 17:54 311984 c:\program files\Lexmark Fax Solutions\fm3032.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdiamon]
--a------ 2007-07-16 17:54 25264 c:\program files\Lexmark 3500-4500 Series\lxdiamon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdimon.exe]
--a------ 2007-07-16 17:54 434864 c:\program files\Lexmark 3500-4500 Series\lxdimon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2007-11-23 21:09 171448 c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-229827639-4292449348-1956966116-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{1ACDC690-E812-4BF4-8277-CADB310BB196}"= c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
"{975C10A6-89E7-450F-8386-9F6BEC5992B5}"= c:\program files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
"{4B2A96AC-90BB-469D-96F2-1E462E2F2103}"= c:\program files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
"{CB0A5015-2744-4511-8C92-B47FF3948EAF}"= c:\program files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
"{DEC215C2-ACE1-4D25-B145-1363C183C8D3}"= c:\program files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
"{999F5203-6C49-4307-AB94-EC2FF5212F6C}"= c:\program files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie
"{5633106D-CD81-4ACD-9FDA-46A2C5714658}"= c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program
"{A224234E-0500-4FDE-A28A-9B44A73FB84F}"= UDP:c:\program files\Shareaza\Shareaza.exe:Shareaza
"{1673F49A-5F54-43A6-8DFF-0BF947F3D751}"= TCP:c:\program files\Shareaza\Shareaza.exe:Shareaza
"{3C3CADF1-53B0-4C21-9216-B5A18CF1EFC6}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{F9CC6A2F-BFB0-41BA-9078-946F5059E36A}"= UDP:c:\program files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{5B43E0C6-C261-4C9F-BC7A-015B98B6E17A}"= TCP:c:\program files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{D0EE2750-048C-4AD1-9281-DB3AB590E74F}"= UDP:c:\windows\System32\PnkBstrA.exe:PnkBstrA
"{91D7A6C7-E659-4584-9EF5-A812F8C57AE5}"= TCP:c:\windows\System32\PnkBstrA.exe:PnkBstrA
"{1729195A-5310-4E00-A38C-51695496128A}"= UDP:c:\windows\System32\PnkBstrB.exe:PnkBstrB
"{898AAE70-0DBC-4609-BA10-98E65B637F35}"= TCP:c:\windows\System32\PnkBstrB.exe:PnkBstrB
"{D66408D1-26A1-4F9D-96F4-A7560334F96A}"= UDP:c:\program files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{CF6C0534-6059-44FB-A901-602AB7983590}"= TCP:c:\program files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{E0F8C813-7C62-4A75-A0BB-62AD5F65C115}"= UDP:57018:Pando P2P TCP Listening Port
"{D8A3A3DE-67C0-4E69-B04C-E663E6E96336}"= TCP:57018:Pando P2P UDP Listening Port
"{F1993D5E-79EF-4280-BCDE-D08C02FC8D3E}"= UDP:c:\program files\Lexmark 3500-4500 Series\lxdiamon.exe:Lexmark Device Monitor
"{1EE0B83A-2B88-4E5A-9274-26A1D5899108}"= TCP:c:\program files\Lexmark 3500-4500 Series\lxdiamon.exe:Lexmark Device Monitor
"{3727F523-C370-4356-B067-FB50E9BCACAD}"= UDP:c:\program files\Lexmark 3500-4500 Series\App4R.exe:Lexmark Imaging Studio
"{A8C86712-228C-4326-A5F3-EA0B72A2A7C3}"= TCP:c:\program files\Lexmark 3500-4500 Series\App4R.exe:Lexmark Imaging Studio
"{F1492290-18D1-4FBA-986A-0781A94FBA07}"= UDP:c:\program files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe:ABBYY FineReader
"{66ED9CDF-1716-443E-AA73-C956EAD42D03}"= TCP:c:\program files\Abbyy FineReader 6.0 Sprint\Scan\ScanMan6.exe:ABBYY FineReader
"{F53DB7AA-813F-4CD1-A0B8-6AD4D60F2EA8}"= UDP:c:\program files\Lexmark Fax Solutions\FaxCtr.exe:Fax software
"{6D9CEA89-351B-4DFE-AFE6-BDBC66AD786A}"= TCP:c:\program files\Lexmark Fax Solutions\FaxCtr.exe:Fax software
"{816780E8-DC7A-439F-877D-7FFB7CEE3DF3}"= UDP:c:\program files\Lexmark 3500-4500 Series\lxdimon.exe:Device Monitor
"{587672D3-88AE-4C20-9D66-1BB154BE963C}"= TCP:c:\program files\Lexmark 3500-4500 Series\lxdimon.exe:Device Monitor
"{A87B7CB3-C555-48C7-B9BF-3B025FBBF201}"= UDP:c:\windows\System32\lxdicfg.exe:Printer Communication System
"{0FAA617E-CB27-4543-B993-E18A508839A8}"= TCP:c:\windows\System32\lxdicfg.exe:Printer Communication System
"{6C946AA1-B446-4D82-94CC-5F741F172A83}"= UDP:c:\windows\System32\lxdicoms.exe:Lexmark Communications System
"{EAE16A7F-19B4-483E-8034-F08CE6A31C7E}"= TCP:c:\windows\System32\lxdicoms.exe:Lexmark Communications System
"{9D817CB3-08A8-4AB6-A3CE-03033330A441}"= UDP:c:\windows\System32\spool\drivers\w32x86\3\lxdipswx.exe:Printer Status Window Interface
"{74B67B8C-F88A-4FC6-9B89-1AAD0DE538B1}"= TCP:c:\windows\System32\spool\drivers\w32x86\3\lxdipswx.exe:Printer Status Window Interface
"{FDDA8613-9C1B-4224-8019-892B70013F82}"= UDP:c:\windows\System32\spool\drivers\w32x86\3\lxditime.exe:Lexmark Connect Time Executable
"{E7F773EE-DDAB-4344-8ADF-4090149EF704}"= TCP:c:\windows\System32\spool\drivers\w32x86\3\lxditime.exe:Lexmark Connect Time Executable
"{CF6D4F8A-C56F-4A07-98BE-B191D67F201C}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{C9B3EFE1-BCBE-4DFE-B8AA-7D9278D3CC54}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{90E34A1D-0189-4412-9B92-603CD785A7C9}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{0CCBA960-5A71-4DB1-A6BF-A9435BCD67CA}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
"{8BC355FC-3250-4F94-B7FB-C015FFE654AB}"= UDP:c:\program files\Lexmark 3500-4500 Series\Wireless\lxdiwpss.exe:
"{6063D065-E058-48C8-A10D-A0978B59E7CA}"= TCP:c:\program files\Lexmark 3500-4500 Series\Wireless\lxdiwpss.exe:
"{62610C72-15B4-4AD3-A9B1-6B4186D1AD51}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{9C2A5E44-243C-4FAA-9F11-2E51B4B717E1}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{D9768847-1E2A-4B69-A761-C8C789C57651}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{EDAEB4EF-FABA-401A-AE8C-8C216283BA40}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{6CA300FB-7945-41AB-9B99-9773B322933D}"= UDP:c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:Veoh Web Player
"{3632C778-8289-4340-8C7D-3C19488A7229}"= TCP:c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:Veoh Web Player
"{B546AB38-B181-448E-9E77-A87C1CCC2F4F}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\[u]0/u00.fcl [2007-09-09 01:18:10 13560]
R2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [2007-08-10 50688]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-03-21 51792]
R2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe [2009-02-05 61440]
R2 lxdi_device;lxdi_device;c:\windows\system32\lxdicoms.exe -service --> c:\windows\system32\lxdicoms.exe -service [?]
R2 NICSer_WUSBF54G;NICSer_WUSBF54G;c:\program files\Linksys\WUSBF54G\NICServ.exe [2008-11-29 530432]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [2007-08-10 179712]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [2007-08-10 32256]
S2 lxdiCATSCustConnectService;lxdiCATSCustConnectService;c:\windows\System32\spool\drivers\w32x86\3\lxdiserv.exe [2007-06-11 99248]
S3 RTL8187B;TRENDnet TEW-424UB 54M USB Dongle;c:\windows\System32\drivers\RTL8187B.sys [2008-11-29 281088]
S3 s125bus;Sony Ericsson Device 125 driver (WDM);c:\windows\System32\drivers\s125bus.sys [2008-04-07 83336]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;c:\windows\System32\drivers\s125mdfl.sys [2008-04-07 15112]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;c:\windows\System32\drivers\s125mdm.sys [2008-04-07 108680]
S3 s816bus;Sony Ericsson Device 816 driver (WDM);c:\windows\System32\drivers\s816bus.sys [2008-04-07 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\System32\drivers\s816mdfl.sys [2008-04-07 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\System32\drivers\s816mdm.sys [2008-04-07 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s816mgmt.sys [2008-04-07 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS);c:\windows\System32\drivers\s816nd5.sys [2008-04-07 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface;c:\windows\System32\drivers\s816obex.sys [2008-04-07 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM);c:\windows\System32\drivers\s816unic.sys [2008-04-07 97704]
S3 ZD1211BU(Linksys A Division of Cisco Systems Inc.);Linksys Wireless-G USB Network Adapter Driver(Linksys A Division of Cisco Systems Inc.);c:\windows\System32\drivers\ZD1211BU.sys [2008-10-04 402432]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - sptd

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{18fd1369-bbc5-11dd-9e2f-b99428aa7edb}]
\shell\AutoRun\command - H:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{201433c1-eac3-11dc-b987-8508c72edcab}]
\shell\Auto\command - wscript "Sex City.jpg.wsf"
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript "Sex City.jpg.wsf"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{227d7e13-aa66-11dd-ab2a-fb2b5ae881d7}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{227d7e16-aa66-11dd-ab2a-fb2b5ae881d7}]
\shell\AutoRun\command - RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{23c09f89-ffc6-11dc-8d36-a9bdff3716da}]
\shell\AutoRun\command - h:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - h:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36911a38-a10b-11dd-af78-abd8d685cad9}]
\shell\Auto\command - msnmsgr_plus.exe
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL msnmsgr_plus.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3792e7e0-f121-11dc-a35c-ef64c11819d9}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3bd53c70-ef10-11dd-8a3d-001b384f4fb2}]
\shell\AutoRun\command - F:\autoset.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6483c1d2-abe1-11dd-b1d0-a01875b4b2d6}]
\shell\AutoRun\command - xn1i9x.com
\shell\explore\Command - xn1i9x.com
\shell\open\Command - xn1i9x.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{64bf4fca-ed4b-11dc-9133-dd4dd8eb76e1}]
\shell\AutoRun\command - f:\setup\rsrc\Autorun.exe
\shell\dinstall\command - f:\directx\dxsetup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6dd857da-9b5c-11dd-abc6-f57e9a52e4d6}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9936bca5-0269-11de-9e14-001b384f4fb2}]
\shell\AutoRun\command - g:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - g:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{99b8115b-bbbd-11dd-8866-a2e1216f7fdb}]
\shell\AutoRun\command - abk.bat
\shell\explore\Command - abk.bat
\shell\open\Command - abk.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a316fe5e-7a54-11dd-8d79-84376e46f076}]
\shell\AutoRun\command - i:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - i:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a316fe6d-7a54-11dd-8d79-84376e46f076}]
\shell\AutoRun\command - g:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - g:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a6f73a79-83e3-11dd-a45f-e468fcdca2d6}]
\shell\AutoRun\command - h:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - h:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ca5df46c-c141-11dd-853c-bbfddf8e42d6}]
\shell\Auto\command - msnmsgr_plus.exe
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL msnmsgr_plus.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cd29e9ef-7a6f-11dd-a488-a37d4066fbd6}]
\shell\AutoRun\command - h:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
\shell\open\command - h:\restore\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe
.
Contenu du dossier 'Tâches planifiées'

2009-03-20 c:\windows\Tasks\Norton Internet Security - Analyse système complète - Maxime.job
- c:\progra~1\NORTON~1\NORTON~1\Navw32.exe []

2009-03-21 c:\windows\Tasks\User_Feed_Synchronization-{F110B5DE-1D02-462E-BF76-760CBD01D49C}.job
- c:\windows\system32\msfeedssync.exe [2008-01-19 08:33]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-msnmsgr - c:\program files\Windows Live\Messenger\msnmsgr.exe
HKCU-Run-aocqmym - c:\users\maxime\appdata\local\aocqmym.exe
HKCU-Run-oqkeeke - c:\users\maxime\appdata\local\oqkeeke.exe
HKLM-Run-IgfxTray - c:\windows\system32\igfxtray.exe
HKLM-Run-HotKeysCmds - c:\windows\system32\hkcmd.exe
HKLM-Run-eRecoveryService - (no file)
MSConfigStartUp-Acer Tour - c:\acer\AcerTour\AcerTour.exe
MSConfigStartUp-Persistence - c:\windows\system32\igfxpers.exe

.
------- Examen supplémentaire -------
.
uStart Page = hxxp://google.mini20.com
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files\PokerStars.NET\PokerStarsUpdate.exe
FF - ProfilePath - c:\users\Maxime\AppData\Roaming\Mozilla\Firefox\Profiles\666t8hq3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA5&q=
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\Mozilla Firefox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}\components\pdfforgeToolbarFF.dll
FF - component: c:\program files\Mozilla Firefox\extensions\search@searchsettings.com\components\SearchSettingsFF.dll
FF - plugin: c:\program files\Canal\Canal Widget\VOD\npCpVod.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-22 01:12:06
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(2388)
c:\windows\system32\MsnChatHook.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\sysenv.dll
c:\windows\system32\BatchCrypto.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\keyManager.dll
c:\windows\system32\eDStoolbar.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
c:\windows\system32\ActiveToolBand.dll
c:\program files\Sony Ericsson\Mobile2\File Manager\FM.dll
c:\windows\system32\MSVCR71.dll
c:\program files\Common Files\Teleca Shared\tlib_log.dll
c:\program files\Common Files\Teleca Shared\boost_log-vc71-mt-1_33.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\audiodg.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\acer\Empowering Technology\eDataSecurity\eDSService.exe
c:\acer\Empowering Technology\eLock\Service\eLockServ.exe
c:\acer\Empowering Technology\eNet\eNet Service.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\System32\lxdicoms.exe
c:\acer\Mobility Center\MobilityService.exe
c:\windows\System32\PnkBstrA.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\System32\conime.exe
c:\windows\System32\drivers\XAudio.exe
c:\acer\Empowering Technology\eRecovery\eRecoveryService.exe
c:\acer\Empowering Technology\eSettings\Service\capuserv.exe
c:\acer\Empowering Technology\ePower\ePowerSvc.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\Launch Manager\LManager.exe
c:\windows\System32\rundll32.exe
c:\windows\System32\rundll32.exe
c:\program files\Apoint2K\ApMsgFwd.exe
c:\program files\Canal\Canal Widget\Canal Widget.exe
c:\program files\Apoint2K\ApntEx.exe
c:\users\Maxime\AppData\Local\Temp\RtkBtMnt.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Heure de fin: 2009-03-22 1:17:55 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-03-22 00:17:26

Avant-CF: 21,340,487,680 octets libres
Après-CF: 24,836,583,424 octets libres

409 --- E O F --- 2009-03-14 09:44:55

Utilise FindyKill.

Option 2 maintenant.

l'analyse a l'air d'etre tres longue

je pense que je vais laisser l'ordinateur la faire toute la nuit

Est-il possible de prévoir ce que je vais devoir faire apres l'analyse?

merci d'avance

Je dois te laisser.

Bonne nuit ;)

Quelqu'un peut il m'aider à continuer?

Help SVP

Toujours personne pour me filer un coup de main?

slt il te faut patienter il va revenir!!!

pour avancer

colle le rapport d'un scan en ligne
avec un des suivants:

Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr