Mon pc bloque

salut :

######## | XP _ Instal & recherche | #######

Telecharge et install UsbFix (de C_XX & Chiquitine29)

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d avoir été infectés sans les ouvrir

# Double clic sur le raccourci UsbFix présent sur ton bureau .

# Choisi l option 1 ( Recherche )

# Laisse travailler l outil.

# Ensuite post le rapport UsbFix.txt qui apparaitra.

# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

# Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

voilà la rapport usbfix

############################## [ UsbFix V3.027 | Scan ]

# User : HP_Administrateur (Administrateurs) # NOM-FB9B15D2723
# Update on 30/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 15:28:25 | 2009-05-31

# Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1296 [VPS 090518-0] 4.8.1296 [ Enabled | Updated ]

# C:\ # Disque fixe local # 226.13 Go (143.05 Go free) [HP_PAVILION] # NTFS
# D:\ # Disque fixe local # 6.74 Go (1.5 Go free) [HP_RECOVERY] # FAT32
# E:\ # Disque CD-ROM
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
# J:\ # Disque CD-ROM
# K:\ # Disque CD-ROM # 6.03 Go (0 Mo free) [Crysis] # CDFS
# L:\ # Disque fixe local # 186.3 Go (118.46 Go free) [FLS-U2-200] # NTFS
# M:\ # Disque fixe local # 931.51 Go (693.15 Go free) [FILMS] # NTFS
# N:\ # Disque amovible

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Prolific\One Button\OneBtn.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\TrojanHunter 5.1\THGuard.exe
C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\OSK.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\system32\MSSWCHX.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Pando Networks\Pando\Pando.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Registre Startup ]

HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
HKCU_Main: "Start Page"="http://mystart.incredimail.com/"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="HP_Administrateur"
HKLM_logon: "AltDefaultUserName"="HP_Administrateur"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: ehTray=C:\WINDOWS\ehome\ehtray.exe
HKLM_Run: ftutil2=rundll32.exe ftutil2.dll,SetWriteCacheMode
HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM_Run: nwiz=nwiz.exe /install
HKLM_Run: DMAScheduler="c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
HKLM_Run: Recguard=C:\WINDOWS\SMINST\RECGUARD.EXE
HKLM_Run: PCDrProfiler=
HKLM_Run: HPBootOp="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
HKLM_Run: Reminder="C:\Windows\Creator\Remind_XP.exe"
HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKLM_Run: RTHDCPL=RTHDCPL.EXE
HKLM_Run: Alcmtr=ALCMTR.EXE
HKLM_Run: LClock=C:\Program Files\LClock\LClock.exe
HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
HKLM_Run: Wambo=C:\Program Files\Swapper\Swapper.exe -auto
HKLM_Run: ISUSPM Startup=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
HKLM_Run: TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
HKLM_Run: NBKeyScan="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKLM_Run: NeroFilterCheck=C:\WINDOWS\system32\NeroCheck.exe
HKLM_Run: KernelFaultCheck=%systemroot%\system32\dumprep 0 -k
HKLM_Run: Autoconfigurateur WiFi Neuf="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
HKLM_Run: ZangoOE=C:\Program Files\Zango\bin\10.3.75.0\OEAddOn.exe
HKLM_Run: ZangoSA="C:\Program Files\Zango\bin\10.3.75.0\ZangoSA.exe"
HKLM_Run: avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
HKLM_Run: TomTomHOME.exe="C:\Program Files\TomTom HOME\TomTomHOME.exe" -s
HKLM_Run: LogitechCommunicationsManager="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
HKLM_Run: LogitechQuickCamRibbon="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
HKLM_Run: TagMonitor="C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe"
HKLM_Run: fssui="C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
HKLM_Run: Prolific_OneButton=C:\Program Files\Prolific\One Button\OneBtn.exe
HKLM_Run: WinampAgent="C:\Program Files\Winamp\winampa.exe"
HKLM_Run: NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM_Run: ALDI_FotoSuite_Download="C:\Program Files\ALDI Service Photo\ALDI_Service_Photo\FotoSuite.exe" /autorun
HKLM_Run: THGuard="C:\Program Files\TrojanHunter 5.1\THGuard.exe"
HKLM_Run: AlbaNet.a=C:\Documents and Settings\HP_Administrateur\Local Settings\AlbaNet.a
HKLM_Run: a-squared="C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
HKLM_Run: Malwarebytes' Anti-Malware="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
HKCU_Run: MsnMsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: BitTorrent="C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
HKCU_Run: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
HKCU_Run: AlcoholAutomount="C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
HKCU_Run: BitComet="C:\Program Files\BitComet\BitComet.exe" /tray
HKCU_Run: Zilla Popup Killer=C:\Program Files\Zilla Popup Killer\ZillaPop.exe
HKCU_Run: Pando="C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
HKCU_Run: Free Download Manager=C:\Program Files\Free Download Manager\fdm.exe -autorun
HKCU_Run: IncrediMail=C:\Program Files\IncrediMail\bin\IncMail.exe /c
HKCU_Run: SYS32DLL=SYS32DLL
HKCU_Run: SYSDLL=SYSDLL
HKCU_Run: fsm=
HKCU_Run: IDMan=C:\Program Files\Internet Download Manager\IDMan.exe /onboot

################## [ Fichiers # Dossiers infectieux ]

Found ! C:\WINDOWS\msmark2.dat
Found ! C:\WINDOWS\system32\tmp.reg
Found ! "C:\WINDOWS\system32\796525"
Found ! C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ImInstaller\incredimail_install.exe
Found ! K:\Setup.exe
Found ! K:\autorun.inf

################## [ Registre # Clés Run infectieuses ]

Found ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SYS32dll"
Found ! HKU\S-1-5-21-3999763384-2490404069-1611723408-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SYS32dll"
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\outpost.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapro.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\A2SERVICE.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CASECURITYCENTER.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FAMEH32.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FPAVSERVER.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FPWIN.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSAV32.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSGK32ST.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSMA32.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ArcaCheck.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\arcavir.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashEnhcd.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashServ.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashUpd.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswUpdSv.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcls.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz4.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz_se.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdinit.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\caav.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\caavguiscan.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccupdate.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfp.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfpupdat.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmdagent.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DRWEB32.EXE
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fpscan.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardxservice.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardxup.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navigator.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAVSTUB.EXE
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcc.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\preupd.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pskdr.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SfFnUp.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Vba32arkit.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vba32ldr.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zanda.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zlh.exe
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zoneband.dll

################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{2357d42d-2834-11de-8338-001b1117cf45}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{8190aebb-07ce-11de-830f-001b1117cf45}\Shell\verb1\Command

################## [ Informations # Fichier Suspect ]

Suspect ! C:\WINDOWS\system32\TDSSmupe.dat
Suspect ! C:\WINDOWS\system32\TDSSqqck.dll
Suspect ! C:\WINDOWS\system32\TDSSwghd.log

################## [ Cracks # Keygens # Serials ]

L:\Qui.veut.gagner.des.millions(Seconde.Edition)-Fr-Image.Clone.CD+crack-Jackrip-Spartateur.teste.rar
L:\Download\StationRipper 2.72 + crack\StationRipper 2.72 + crack.rar

################## [ ! Fin du rapport # UsbFix V3.027 ! ]

######## | Suppression | ########

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d avoir été infectés sans les ouvrir

# Double clic sur le raccourci UsbFix présent sur ton bureau

# choisi l option 2 ( Suppression )

# Ton bureau disparaitra et le pc redémarrera .

# Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.

# Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

######### | Désinstallation | #######

# Double clic sur le raccourci UsbFix présent sur ton bureau

# Choisi l option Désinstaller ....

tu as refait une recherche et je tai demandé une suppression :)

suppression et demarage c fai

############################## [ UsbFix V3.027 | Cleaning ]

# User : HP_Administrateur (Administrateurs) # NOM-FB9B15D2723
# Update on 30/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 16:00:57 | 2009-05-31

# Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1296 [VPS 090518-0] 4.8.1296 [ Enabled | Updated ]

# C:\ # Disque fixe local # 226.13 Go (143.03 Go free) [HP_PAVILION] # NTFS
# D:\ # Disque fixe local # 6.74 Go (1.5 Go free) [HP_RECOVERY] # FAT32
# E:\ # Disque CD-ROM
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
# J:\ # Disque CD-ROM
# K:\ # Disque CD-ROM
# L:\ # Disque fixe local # 186.3 Go (118.46 Go free) [FLS-U2-200] # NTFS
# M:\ # Disque fixe local # 931.51 Go (693.15 Go free) [FILMS] # NTFS
# N:\ # Disque amovible

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vistaui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\eHome\ehRec.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe

################## [ Fichiers # Dossiers infectieux ]

Deleted ! C:\WINDOWS\msmark2.dat
Deleted ! C:\WINDOWS\system32\tmp.reg
Deleted ! "C:\WINDOWS\system32\796525"
Deleted ! C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ImInstaller\incredimail_install.exe

################## [ Registre # Clés Run infectieuses ]

Deleted ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SYS32dll"
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\outpost.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapro.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\A2SERVICE.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CASECURITYCENTER.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FAMEH32.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FPAVSERVER.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FPWIN.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSAV32.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSGK32ST.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FSMA32.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ArcaCheck.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\arcavir.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashEnhcd.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashServ.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashUpd.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswUpdSv.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcls.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz4.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avz_se.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdinit.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\caav.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\caavguiscan.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccupdate.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfp.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfpupdat.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmdagent.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DRWEB32.EXE
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fpscan.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardxservice.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\guardxup.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navigator.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAVSTUB.EXE
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcc.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\preupd.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pskdr.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SfFnUp.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Vba32arkit.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vba32ldr.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zanda.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zlh.exe
Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zoneband.dll

################## [ Registre # Mountpoints2 ]

################## [ Listing des fichiers présent ]

[2009-01-11 16:49|--a------|0] - C:\AdobeDebug.txt
[2007-12-14 16:04|--a------|7383] - C:\APIHook.log
[2007-04-24 16:58|--ah-----|400] - C:\AUTOEXEC.BAT
[2007-02-22 15:08|-rahs----|211] - C:\BOOT.BAK
[2007-02-22 15:14|-rahs----|291] - C:\boot.ini
[2004-08-09 23:00|-rahs----|4952] - C:\Bootfont.bin
[2009-05-22 21:22|--a------|12648] - C:\caisslog.txt
[2004-08-09 23:00|-r-hs----|263488] - C:\cmldr
[2007-10-24 10:54|--a------|74] - C:\CMLoader.log
[2005-10-10 13:34|--ah-----|0] - C:\CONFIG.SYS
[2007-10-24 20:48|--a------|0] - C:\conmgr.log
[2007-12-14 15:15|--a------|4876] - C:\Detections.txt
[?|?|?] - C:\hiberfil.sys
[2005-10-10 13:34|-rahs----|0] - C:\IO.SYS
[2009-01-04 00:51|--a------|1110] - C:\logfile.dat
[2005-10-10 13:34|-rahs----|0] - C:\MSDOS.SYS
[2007-10-24 20:49|--a------|5508] - C:\NServer.log
[2004-08-09 23:00|-rahs----|47564] - C:\NTDETECT.COM
[2008-07-03 17:40|-rahs----|252240] - C:\ntldr
[2004-02-29 17:44|--a------|52576] - C:\orange.bmp
[?|?|?] - C:\pagefile.sys
[2008-11-12 14:02|--a------|3766] - C:\rapport.txt
[2008-11-12 13:57|--a------|647] - C:\rapport_clean.txt
[2006-08-12 20:58|--a------|12] - C:\RecoveryCD.txt
[2007-03-06 00:21|--a------|90] - C:\Setup.log
[2008-04-05 17:53|--ah-----|232] - C:\sqmdata00.sqm
[2008-04-22 17:49|--ah-----|232] - C:\sqmdata01.sqm
[2008-05-23 22:54|--ah-----|268] - C:\sqmdata02.sqm
[2008-07-09 20:51|--ah-----|268] - C:\sqmdata03.sqm
[2008-08-22 19:58|--ah-----|268] - C:\sqmdata04.sqm
[2008-08-22 21:17|--ah-----|268] - C:\sqmdata05.sqm
[2008-08-23 23:23|--ah-----|268] - C:\sqmdata06.sqm
[2008-08-24 15:53|--ah-----|268] - C:\sqmdata07.sqm
[2008-08-24 17:38|--ah-----|268] - C:\sqmdata08.sqm
[2008-08-26 14:22|--ah-----|268] - C:\sqmdata09.sqm
[2008-09-11 00:35|--ah-----|268] - C:\sqmdata10.sqm
[2008-09-25 15:36|--ah-----|268] - C:\sqmdata11.sqm
[2008-09-26 02:05|--ah-----|268] - C:\sqmdata12.sqm
[2008-10-10 12:25|--ah-----|268] - C:\sqmdata13.sqm
[2008-12-07 00:09|--ah-----|268] - C:\sqmdata14.sqm
[2008-03-19 22:03|--ah-----|268] - C:\sqmdata15.sqm
[2008-03-21 20:06|--ah-----|268] - C:\sqmdata16.sqm
[2008-03-22 13:52|--ah-----|268] - C:\sqmdata17.sqm
[2008-03-22 15:10|--ah-----|268] - C:\sqmdata18.sqm
[2008-04-05 15:28|--ah-----|232] - C:\sqmdata19.sqm
[2008-04-05 17:53|--ah-----|244] - C:\sqmnoopt00.sqm
[2008-04-22 17:49|--ah-----|244] - C:\sqmnoopt01.sqm
[2008-05-23 22:54|--ah-----|244] - C:\sqmnoopt02.sqm
[2008-07-09 20:51|--ah-----|244] - C:\sqmnoopt03.sqm
[2008-08-22 19:58|--ah-----|244] - C:\sqmnoopt04.sqm
[2008-08-22 21:17|--ah-----|244] - C:\sqmnoopt05.sqm
[2008-08-23 23:23|--ah-----|244] - C:\sqmnoopt06.sqm
[2008-08-24 15:53|--ah-----|244] - C:\sqmnoopt07.sqm
[2008-08-24 17:38|--ah-----|244] - C:\sqmnoopt08.sqm
[2008-08-26 14:22|--ah-----|244] - C:\sqmnoopt09.sqm
[2008-09-11 00:35|--ah-----|244] - C:\sqmnoopt10.sqm
[2008-09-25 15:36|--ah-----|244] - C:\sqmnoopt11.sqm
[2008-09-26 02:05|--ah-----|244] - C:\sqmnoopt12.sqm
[2008-10-10 12:25|--ah-----|244] - C:\sqmnoopt13.sqm
[2008-12-07 00:09|--ah-----|172] - C:\sqmnoopt14.sqm
[2008-03-19 22:03|--ah-----|244] - C:\sqmnoopt15.sqm
[2008-03-21 20:06|--ah-----|244] - C:\sqmnoopt16.sqm
[2008-03-22 13:52|--ah-----|244] - C:\sqmnoopt17.sqm
[2008-03-22 15:10|--ah-----|244] - C:\sqmnoopt18.sqm
[2008-04-05 15:28|--ah-----|244] - C:\sqmnoopt19.sqm
[2009-03-21 21:31|--a------|0] - C:\Tech_Vista.log
[2009-05-31 16:03|--a------|11550] - C:\UsbFix.txt
[2001-07-27 14:07|---hs----|0] - D:\AUTOEXEC.BAT
[2002-01-09 02:52|---hs----|244] - D:\BOOT.INI
[2001-08-16 17:26|---hs----|237728] - D:\CMLDR
[2001-07-27 14:07|---hs----|0] - D:\CONFIG.SYS
[2005-05-25 02:48|---hs----|102] - D:\Desktop.ini
[2004-11-30 03:01|---hs----|73728] - D:\Info.exe
[2001-07-27 14:07|---hs----|0] - D:\IO.SYS
[2001-07-27 14:07|---hs----|0] - D:\MSDOS.SYS
[2001-07-25 06:00|---hs----|45124] - D:\NTDETECT.COM
[2001-07-25 06:00|---hs----|222880] - D:\NTLDR
[2002-02-08 07:44|---hs----|88038] - D:\Warning.bmp
[2006-08-29 21:22|---hs----|16] - D:\BLOCK.RIN
[2002-01-25 01:21|---hs----|0] - D:\GRAPH16
[2001-04-30 04:16|---hs----|14] - D:\Graph
[2001-08-16 23:32|---hs----|0] - D:\NTFS
[2006-08-29 20:51|---hs----|36] - D:\SAVEFILE.DIR
[2001-04-30 04:16|---hs----|14] - D:\SVGA
[2001-08-17 23:00|---hs----|10] - D:\WIN51
[2001-01-21 22:00|---hs----|11] - D:\WIN51.B2
[2001-07-24 23:00|---hs----|11] - D:\WIN51.RC1
[2001-07-25 04:47|---hs----|11] - D:\WIN51.RC2
[2001-08-17 23:00|---hs----|10] - D:\WIN51IC
[2001-03-19 22:00|---hs----|11] - D:\WIN51IC.B2
[2001-07-24 23:00|---hs----|11] - D:\WIN51IC.RC1
[2001-07-24 23:00|---hs----|11] - D:\WIN51IC.RC2
[2001-08-16 23:00|---hs----|10] - D:\WIN51IP
[2001-01-21 22:00|---hs----|11] - D:\WIN51IP.B2
[2001-07-25 04:47|---hs----|11] - D:\WIN51IP.RC2
[2001-08-16 21:17|---hs----|184] - D:\WINBOM.INI
[2002-09-10 01:21|---hs----|7850] - D:\Folder.htt
[2002-09-09 22:58|---hs----|181616] - D:\protect.ed
[2006-08-29 21:33|---hs----|976] - D:\MASTER.LOG
[2007-02-22 13:09|---hs----|18] - D:\USER
[2008-08-15 13:18|--a------|285] - D:\Raccourci vers FLS-U2-200 (N).lnk
[2008-05-02 16:09|--a------|64707160] - L:\Activites%20pour%20enfants.pdf
[2008-10-17 10:34|--a------|1063216096] - L:\ADBEILSTCS4_LS1.7z
[2009-03-04 13:29|--a------|3983792] - L:\aoa-audio-extractor_aoa_audio_extractor_1.2.5_anglais_128648.exe
[2008-11-11 18:36|--a------|109318] - L:\Bookmarks 2008-11-11.json
[2008-06-28 15:42|--a------|9450300] - L:\by.bb23.incredimail.rar
[2009-02-03 23:07|--a------|730558464] - L:\Chambre 1408.avi
[2007-11-27 16:35|--a------|248] - L:\cl‚jeu.txt
[2008-04-22 10:26|--a------|222720] - L:\Compositionbb.pub
[2008-03-27 03:43|--a------|726468848] - L:\Dany Boon - A S' Baraque Et En Ch'Ti.avi
[2008-07-09 16:42|--a------|79133246] - L:\Diaporama_Creator_Photo_HD.rar
[2009-01-13 19:45|--a------|35074836] - L:\Inkscape-0.46.win32.exe
[2009-01-09 18:56|--a------|729100288] - L:\Invasion.avi
[2008-06-08 12:35|--a------|191434719] - L:\N‚ro V8.0_3_Antar_Net.rar
[2008-07-08 14:33|--a------|10320696] - L:\PackMSN.2oo8.By_Krazz.rar
[2008-06-03 17:49|--a------|376594677] - L:\Qui.veut.gagner.des.millions(Seconde.Edition)-Fr-Image.Clone.CD+crack-Jackrip-Spartateur.teste.rar
[2008-08-10 15:44|--ahs----|3613696] - L:\Thumbs.db
[2008-11-24 14:30|--a------|733509632] - M:\-The.Dark.Knight.FRENCH.DVDRiP.REPACK.1CD.XViD-STS.avi
[2009-04-05 17:53|--a------|724490240] - M:\-VALKYRIE.TRUEFRENCH.R5.avi
[2008-09-10 14:51|--a------|724178944] - M:\-WANTED.R5.FR.avi
[2008-06-07 19:00|--a------|728367104] - M:\10000.B.C.TRUEFRENCH.R5.XviD-CiNEFOX.avi
[2008-07-12 22:24|--a------|734529536] - M:\30 jours de nuits by yiyi37.avi
[2009-02-23 11:35|--a------|726265856] - M:\Alone in the dark.avi
[2008-05-20 21:39|--a------|736571392] - M:\ANGLE D ATTAQUE ALEXANDRA.avi
[2009-01-16 18:43|--a------|726672452] - M:\Anne.Roumanoff-On.ne.nous.dit.pas.tout.BY pompi.avi
[2008-12-08 18:10|--a------|734154752] - M:\apellez-moi dave by trygard for wawa-mania.avi
[2008-03-30 03:49|--a------|734451712] - M:\Asterix Aux Jeux Olympiques FRENCH DVDRip XviD.avi
[2008-05-01 16:18|--a------|732254208] - M:\avp2_xvid.avi
[2009-03-12 11:29|--a------|730243072] - M:\awake by manhunt.avi
[2008-11-25 14:36|--a------|734156800] - M:\Bangkok.Dangerous.FRENCH.R5_TTS.avi
[2009-04-08 17:49|--a------|734853120] - M:\Bedtime.Stories.FRENCH.DVDRiP.XviD-ULTRASON.avi
[2008-05-14 17:57|--a------|731627520] - M:\Beowulf.Directors.Cut.UpByBouboune.avi
[2008-12-03 12:28|--a------|738719574] - M:\Beverly Hills Chihuahua.by sissou02].avi
[2008-03-29 17:43|--a------|735604736] - M:\BIENVENUE CHEZ LES CHTIS FRENCH Qualit‚e DVDRIP -2008-.avi
[2007-03-07 17:54|--a------|733168932] - M:\Blood.Diamond.FRENCH.DVDRip.XviD-LAST.avi
[2008-12-03 11:30|--a------|733720576] - M:\Boris en Sommeil by paolo.avi
[2008-08-10 21:15|--a------|735651840] - M:\Boxers.avi
[2008-09-05 14:22|--a------|736770048] - M:\Ca Se Soigne DVDrip Fr Made In-NTK Up by Joe.avi
[2007-03-08 23:25|--a------|734148608] - M:\cd1-flyboys.avi
[2007-03-08 23:25|--a------|734064640] - M:\cd2-flyboys.avi
[2008-12-03 14:04|--a------|734810112] - M:\CENDRILLON.ET.LE.PRINCE.PAS.TROP.CHARMANTby impega.avi
[2008-04-24 14:03|--a------|732561408] - M:\Cloverfield.FRENCH.DVDRiP.XviD-iD.avi
[2008-12-07 14:37|--a------|735881216] - M:\Condemned.avi
[2008-12-03 11:33|--a------|735444992] - M:\contre enquete.avi
[2008-06-28 23:41|--a------|737626112] - M:\Coucou c'est nous! 10ans d‚j….tarzan96.avi
[2008-06-06 23:24|--a------|735404032] - M:\Cowboy.FRENCH.DVDRiP.XViD-NTK.avi
[2006-09-30 13:32|--a------|727664640] - M:\Cursed.avi
[2008-10-11 16:58|--a------|729217024] - M:\Death.Race.DVDSCR.caline012.LiCoKInE.TeaM.[emule-island.com].avi
[2009-02-23 11:32|--a------|735783386] - M:\Defiance.avi
[2008-09-02 19:09|--a------|728893440] - M:\DerriŠre les lignes ennemies.by.paolo.avi
[2008-12-09 23:58|--a------|735647744] - M:\DISNEY - LE CALENDRIER DE NOEL DE MICKEY.avi
[2008-09-02 19:06|--a------|722718720] - M:\DJ Tiesto Live Disneyland Paris 16-04-05.avi
[2006-09-30 13:59|--a------|733591552] - M:\Domino.avi
[2008-06-10 20:34|--a------|723113984] - M:\Doomsday.avi
[2008-05-28 14:01|--a------|728504320] - M:\Dragon Wars DVD-RIP my Team-Mbx.avi
[2009-04-13 18:00|--a------|734154752] - M:\DragonBall.Evolution.TS.French.MD.DiVX.KiNG-SQUALL.avi
[2008-12-31 00:09|--a------|735209472] - M:\DVD-Christophe ma‚-by stanley.avi
[2008-12-23 16:45|--a------|728442880] - M:\Eagle.Eye. FRENCH.DVDrip.Xvid-LcKtM.avi
[2009-04-02 20:42|--a------|726728704] - M:\Fast and Furious 2.dvdrip.Cleopatre.avi
[2008-09-02 20:32|--a------|731197440] - M:\Fast Track sans limite.avi
[2008-09-05 13:20|--a------|466984560] - M:\Fernandel inoubliable.mpg
[2009-03-16 11:22|--a------|733933568] - M:\FINALFANTASYAdventChildren.avi
[2006-11-28 16:52|--a------|731049984] - M:\Firewall.avi
[2008-07-17 20:29|--a------|743206912] - M:\Ghost.FRENCH.DVDRip.avi
[2008-06-20 16:05|--a------|732547072] - M:\Goal 2 - La Cons‚cration.avi
[2008-06-08 10:27|--a------|733460480] - M:\Goal.avi
[2008-08-13 17:17|--a------|904480156] - M:\Hancock.FRENCH.DVDRip.MZISYS.avi
[2008-09-04 03:08|--a------|724408320] - M:\Hellboy 2.avi
[2008-06-03 17:14|--a------|733573120] - M:\Hero.Wanted.LiMiTED.FRENCH.DVDRiP.XviD-iD-Share.By.OrAnGeS.avi
[2008-04-22 22:27|--a------|736943378] - M:\hitman_xvid_tkt.avi
[2006-09-30 14:26|--a------|730370048] - M:\Hollow Man 2.avi
[2008-06-03 13:26|--a------|730947584] - M:\I.Am.Legend.FRENCH.DVDRiP.REPACK.1CD.XViD-STS-Share.By.OrAnGeS.avi
[2009-03-12 11:24|--a------|733718528] - M:\Igor.avi
[2008-11-24 21:18|--a------|735203328] - M:\Indiana.Jones.IV.FRENCH.DVDRIP.XVID-SYR.Up by Joe.avi
[2006-11-29 17:28|--a------|731703296] - M:\Inside Man.avi
[2008-12-03 13:20|--a------|733249536] - M:\Into the Wild (fr).avi
[2008-04-03 21:25|--a------|734023680] - M:\INVISIBLE.TARGET.(2008).Vraie.VF.Divx6.French.DVDRip-www.redirectionne-moi.fr.avi
[2008-11-21 15:00|--a------|732739584] - M:\Iron.Man.FRENCH.DVDRiP.REPACK.1CD.XviD-by_eforik.avi
[2008-11-16 23:01|--a------|732844084] - M:\Journey.to.the.Center.of.the.Earth.FRENCH.DVDrip.LD.XViD-GKS.Up by Joe.avi
[2008-04-02 06:22|--a------|734065544] - M:\Jumper.xvid speed-torrents.xooit.fr.avi
[2009-03-12 12:41|--a------|734758912] - M:\King.avi
[2009-01-18 15:38|--a------|731295744] - M:\Kung.Fu.Panda.FRENCH.DVDRiP.ALEXANDRA.avi
[2008-12-30 19:46|--a------|731181056] - M:\L Incroyable Hulk_DVDRIP_By_GhostSurfer.avi
[2007-07-27 06:00|--a------|734683136] - M:\L'Effet Papillon 2.avi
[2009-02-17 17:32|--a------|731981824] - M:\La Cit‚ de l'ombre.flocon1.avi
[2006-12-19 18:22|--a------|733724672] - M:\La colline a des yeux.avi
[2006-09-29 12:59|--a------|731273216] - M:\La Crypte.avi
[2006-10-13 16:42|--a------|733956096] - M:\La doublure.avi
[2008-12-31 03:03|--a------|734996480] - M:\LA FAILLE DVDRip French.avi
[2006-10-09 13:08|--a------|734257152] - M:\La mal‚diction.avi
[2008-10-11 15:52|--a------|734074398] - M:\La momie ( la tombe de L'empereur Dragon)-polo477.avi
[2008-09-10 17:19|--a------|711087616] - M:\La soupe aux choux.alexandra.avi
[2005-09-13 06:38|--a------|733003776] - M:\La Voix Des Morts(Francais).avi
[2008-03-30 01:23|--a------|732579840] - M:\La.Mome.FRENCH.DVDRiP.REPACK.1CD.XViD-STS.avi
[2006-11-27 21:03|--a------|731334656] - M:\Laurent Gerra Flingue la t‚l‚.avi
[2008-12-03 11:26|--a------|729493504] - M:\le chat chapeaut‚.avi
[2006-12-06 16:05|--a------|736976896] - M:\Le dernier Samourai.avi
[2008-07-07 16:26|--a------|732482686] - M:\Le Grand Tournoi (The Quest)(J-C Vandamme 1995).avi
[2008-06-02 21:39|--a------|730578944] - M:\Le labyrinthe de Pan.avi
[2008-12-03 15:52|--a------|695617774] - M:\Le Monde de Narnia chapitre 2 - Prince Caspian.flocon1.avi
[2006-10-13 16:41|--a------|733585408] - M:\Le Nouveau Monde.avi
[2009-04-06 16:55|--a------|700620288] - M:\Le Pacificateur by geronimo.Fr.avi
[2008-09-02 19:15|--a------|735465472] - M:\Le Pensionnat DVDRip.avi
[2008-09-02 18:57|--a------|732680192] - M:\Le roi scorpion by yiyi37.avi
[2008-06-28 18:28|--a------|735195136] - M:\LE.PRIX.DE.LA.TRAHISON.(2008).Vraie.VF.Divx6.French.DVDRip.ARLBOUFFIARD.avi
[2008-10-01 17:20|--a------|734859264] - M:\Le.Royaume.DVDRip.FR.DivX.6.By.Pleomax.(2008).VERSION.FR.NON.CANADIENNE.[emule-island.com].avi
[2008-07-09 13:11|--a------|734492672] - M:\Les Chroniques de Spiderwick.floconi.avi
[2006-11-01 16:41|--a------|733943808] - M:\Les riviŠres pourpres 2.avi
[2008-11-25 20:58|--a------|734107648] - M:\Linewatch.flocon1.avi
[2008-12-02 17:01|--a------|730431488] - M:\Madagascar 2.flocon1.avi
[2006-12-19 14:33|--a------|732569600] - M:\MASTER.&.COMMANDER.FRENCH.DVDRip-Stones.Rolling.avi
[2008-11-19 15:51|--a------|725095408] - M:\Max.Payne.R5.REPACK.FRENCH.MD.XviD-GKS.Up by Joe.avi
[2008-11-16 16:23|--a------|726761472] - M:\meet.dave.french.r5.ld.xvid-abi.licokine.team..avi
[2008-06-10 21:37|--a------|733640704] - M:\Meet.The.SpartaALEXANDRA.avi
[2008-12-08 12:18|--a------|707084288] - M:\Mickey et la magie de Noel [Up by IxxE].AVI
[2006-11-29 18:18|--a------|727912448] - M:\Middleman.avi
[2009-03-26 12:31|--a------|731287552] - M:\Mirrors bymanhunt.avi
[2004-06-12 21:48|--a------|731918336] - M:\Mission Alcatraz (Dernier Steven Seagal Sortie 2003) - Dvd Rip Fr.avi
[2008-06-10 20:47|--a------|733554688] - M:\Mongol.2007.TRUEFRENCH.R5.XviD-CiNEFOX.avi-up-ange
[2009-05-12 17:21|--a------|734351360] - M:\My.Bloody.Valentine.FRENCH.DVDRiP.XViD-SURViVAL.avi
[2008-09-02 18:35|--a------|733616128] - M:\Naked.Weapon.2007..avi
[2008-05-01 15:51|--a------|731938816] - M:\National.Treasure.Book.of.Secrets.FRENCH.DVDRiP.REPACK.1CD.XViD-STS[1].avi
[2008-07-24 21:16|--a------|733179904] - M:\Never Back Down.Flocon1.avi
[2008-06-06 20:18|--a------|734679040] - M:\Next.FRENCH.DVDRiP.XviD-iD-Share.By.OrAnGeS.avi
[2008-12-30 18:46|--a------|728414208] - M:\Nicolas.Canteloup.2Šme.Couche.FRENCH.DVDRIP.XVID-Prof.avi
[2008-05-01 23:20|--a------|733430404] - M:\omar.fred.spectacle.DVDRQiP.XVID-keKE.avi
[2006-11-27 22:00|--a------|730652672] - M:\OSS 117.avi
[2005-03-23 01:51|--a------|733753344] - M:\Out Of Time.avi
[2009-04-09 00:47|--a------|692202970] - M:\OUTLANDER.dvdrip.fr.Cleopatre.avi
[2008-10-11 21:22|--a------|732332994] - M:\Pathfinder - Le Sang Du Guerrier.avi
[2008-06-28 21:48|--a------|736083968] - M:\phil3585-L'Ile de Nim.avi
[2008-06-26 17:08|--a------|733544448] - M:\phil3585-Les.Deux.Mondes..avi
[2008-10-18 00:20|--a------|732125854] - M:\phil3585-Max la Menace R5.avi
[2008-12-30 16:50|--a------|734261248] - M:\phil3585-Seuls.Two.avi
[2007-03-10 13:21|--a------|708235264] - M:\Phone Game.avi
[2006-11-03 19:45|--a------|732577792] - M:\Poseidon.avi
[2005-01-05 12:05|--a------|719310848] - M:\Prisonniers.du.Temps.avi
[2006-12-22 12:52|--a------|725355846] - M:\Pulse.FRENCH.UNRATED.DVDrip.XviD-LAST.AVI
[2009-03-12 16:15|--a------|727875584] - M:\Punisher.War.Zone.FRENCH.DVDRiP.avi
[2008-06-06 20:03|--a------|734064640] - M:\pwd-jumprop.avi
[2007-11-16 13:25|--a------|722315264] - M:\qf-next.r5.avi
[2008-12-08 18:21|--a------|734359552] - M:\Quantum Of Solace.flocon1.avi
[2008-05-21 03:31|--a------|733044736] - M:\Rambo.IV ALEXANDRA R5.avi
[2008-07-27 23:42|--a------|733353984] - M:\R‚sident evil extinction .avi
[2007-06-17 13:01|--a------|733907528] - M:\Sahara.FRENCH.DVDRip.REPACK.avi
[2009-04-14 13:20|--a------|714151630] - M:\SCREAMERS.The.Hunting.FRENCH.DVDRiP.XViD-ShaDoW.avi
[2006-09-22 11:46|--a------|751230976] - M:\Seven Swords.avi
[2007-11-16 02:37|--a------|734013440] - M:\signes dvdrip.fr.avi
[2006-09-29 19:14|--a------|728262656] - M:\Silent Hill.avi
[2008-11-16 22:45|--a------|731301574] - M:\Skate.or.Die.FRENCH.R5.MD.XViD-GKS.Up by Joe.avi
[2008-11-16 20:56|--a------|596453376] - M:\Slevin ALEXANDRA.AVI
[2008-05-28 03:49|--a------|1571592243] - M:\Soprano.www.antar-net.com.SSK60.avi
[2008-07-15 12:41|--a------|731234304] - M:\SPARTATOUILLE.FRENCH.DVDRiP.MONK.avi
[2008-12-01 14:00|--a------|731877376] - M:\Special.2008.STV.FRENCH.DVDRIP.XViD-VNR.avi
[2009-05-16 16:35|--a------|732250112] - M:\Star.Trek.2009.FRENCH.TS.MD.XViD-KiNG.avi
[2008-05-11 00:24|--a------|706476032] - M:\starko ALEXANDRA.avi
[2006-08-06 16:16|--a------|733145088] - M:\Stay.avi
[2008-11-24 19:29|--a------|733120512] - M:\Step.Brothers.FRENCH.DVDRip.XviD-PAROXYSM-Up by Joe.avi
[2006-12-19 11:40|--a------|733259776] - M:\Superman Returns.avi
[2006-11-27 21:06|--a------|734144512] - M:\Terreur sur la ligne.avi
[2008-05-20 08:18|--a------|1465362432] - M:\The Chronicles of Narnia - Prince Caspian.FRENCH.TS.DivX-PirateyesTEAM.avi
[2006-11-29 14:32|--a------|734361600] - M:\The Fast And The Furious Tokyo Drift.avi
[2006-10-01 11:38|--a------|730994688] - M:\The Grudge.avi
[2008-07-13 22:53|--a------|732633088] - M:\The Happening..avi
[2006-10-14 15:06|--a------|734074880] - M:\The Sentinel.aVi
[2008-05-21 00:12|--a------|733460480] - M:\The.Chronicles.of.Narnia.Prince.Caspian.FRENCH.TS-www.redirectionne-moi.fr.avi
[2008-11-22 15:04|--a------|733509632] - M:\The.Dark.Knight.FRENCH.DVDRiP.REPACK.1CD.XViD.STS.Upload.(Steph53).Mininova.org..avi
[2008-05-21 17:09|--a------|732346368] - M:\The.Forbidden.Kingdom.FR.R5.by rinto.avi
[2008-06-02 20:41|--a------|733999104] - M:\The.Golden.Compass.FRENCH.DVDRiP.XviD-iD-Share.By.OrAnGeS.avi
[2008-06-02 20:37|--a------|733974528] - M:\The.Seeker.The.Dark.Is.Rising.FRENCH.DVDRip.XviD-Share.By.OrAnGeS.avi
[2008-06-28 19:04|--a------|734349312] - M:\The.Take.LiMiTED.FRENCH.DVDRiP.XviD-LOST.avi
[2009-04-18 15:43|--a------|729907200] - M:\The.Wrestler.SUBFORCED.FRENCH.DVDRiP.XViD-GKS.avi
[2007-01-26 15:34|--a------|732592128] - M:\thegrudge2_xvid.avi
[2008-06-10 22:00|--a------|735517822] - M:\They Wait.avi
[2008-05-14 13:47|--a------|732774400] - M:\THE_MIST-FR-VDVRIP-squall-ito-oleoo.avi
[2008-06-03 16:37|--a------|735330304] - M:\tolerance zero.avi
[2008-06-06 20:01|--a------|732000256] - M:\Transformers.FRENCH.DVDRiP.XViD-STS-Share.By.OrAnGeS.avi
[2009-03-12 18:18|--a------|733517824] - M:\Transporter.3.FRENCH.DVDRiP.XviD-ULTRASON.avi
[2005-11-27 19:22|--a------|728352432] - M:\Triple X I.avi
[2008-11-25 16:04|--a------|734922752] - M:\tt_xvid.avi
[2009-03-07 00:35|--a------|732170240] - M:\Twilight.REPACK.1CD.FRENCH.DVDRiP.XviD-ByLittleJuju.avi
[2009-03-12 15:12|--a------|859840667] - M:\U2 - Vertigo Tour - DVD-rip 480x272 PSP - NLizer.mp4
[2006-11-01 15:11|--a------|733928408] - M:\Un long dimanche de fiancailles.avi
[2008-06-02 20:27|--a------|729094144] - M:\Un.Jour.Sur.Terre.FRENCH.DVDRiP.XViD-PROD-Share.By.OrAnGeS.avi
[2009-04-13 18:36|--a------|725981184] - M:\Underworld 3 Le soul&
[2008-06-28 19:19|--a------|732997632] - M:\Undisputed.2.FR.DVDRiP.Smilodon.avi
[2008-12-06 16:47|--a------|2097152] - M:\upgrade.rom
[2008-11-26 16:50|--a------|732547072] - M:\Wanted -polo477.avi
[2008-12-05 13:20|--a------|732547072] - M:\Wanted..avi
[2006-12-18 18:54|--a------|733499392] - M:\WINDTAKERS-LES.MESSAGERS.DU.VENT-TVRIPbyGDH.avi
[2008-06-03 16:47|--a------|733208576] - M:\World Trade Center French Dvdrip Xvid.avi
[2008-05-07 19:26|--a------|733834935] - M:\WuJi.avi
[2009-04-16 15:14|--a------|732940288] - M:\www.streetv2.tkFast.and.Furious.4.R5.avi
[2006-12-05 21:48|--a------|734230528] - M:\X-Men 3.avi
[2009-04-29 04:08|--a------|733413376] - M:\X-Men.Origins.Wolverine.2009.FRENCH.WORKPRiNT.MD.XViD-XMEN.avi
[2006-12-07 12:38|--a------|726781952] - M:\Yamakasi II.avi
[2009-04-06 19:13|--a------|732350464] - M:\[ALEXANDRA]Versailles.2008.avi

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# L:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# M:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

################## [ Informations # Fichier Suspect ]

Suspect ! C:\WINDOWS\system32\TDSSmupe.dat
Suspect ! C:\WINDOWS\system32\TDSSqqck.dll
Suspect ! C:\WINDOWS\system32\TDSSwghd.log

################## [ Cracks # Keygens # Serials ]

L:\Qui.veut.gagner.des.millions(Seconde.Edition)-Fr-Image.Clone.CD+crack-Jackrip-Spartateur.teste.rar
L:\Download\StationRipper 2.72 + crack\StationRipper 2.72 + crack.rar

################## [ ! Fin du rapport # UsbFix V3.027 ! ]

/!\ ATTENTION SUIVRE SCRUPULEUSEMENT A LA LETTRE CES INDICATIONS/!\

_________________________________________________________________
>Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
>>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
=====================================================

On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Avant d'utiliser ComboFix :
______________________________________________________________________
>> referme les fenêtres de tous les programmes en cours.
>> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
>>la protection en temps réel de ton Antivirus et de tes Antispywares,
>>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

!!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

>> Reviens sur le forum, et

copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

salut bon je vien de faire combofix voiçi le repport

ComboFix 09-05-31.05 - HP_Administrateur 2009-06-01 13:12.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2046.1319 [GMT 2:00]
Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe
AV: a-squared Anti-Malware *On-access scanning disabled* (Updated) {0F8591BB-342B-4493-91C3-4E948ED21255}
AV: avast! antivirus 4.8.1296 [VPS 090531-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\HP_Administrateur\Application Data\inst.exe
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\ahuq._sy
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\dotew.ban
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\wepi.inf
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\xudykulew.bat
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\yvocy.sys
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\yvutidit.dl
c:\documents and settings\HP_Administrateur\Local Settings\Temporary Internet Files\yzyde.scr
c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\SudoPlanet
c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\SudoPlanet\Conditions générales.lnk
c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\SudoPlanet\Confidentialité.lnk
c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\SudoPlanet\SudoPlanet.lnk
c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\SudoPlanet\Website.lnk
c:\windows\101.exe
c:\windows\9g2234wesdf3dfgjf23
c:\windows\f23567.dat
c:\windows\IE4 Error Log.txt
c:\windows\system32\404Fix.exe
c:\windows\system32\accwizm.exe
c:\windows\system32\drivers\77944d91.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\sysloc
c:\windows\system32\TDSSmupe.dat
c:\windows\system32\TDSSqqck.dll
c:\windows\system32\TDSSwghd.log
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
D:\Desktop.ini
.
---- Exécution préalable -------
.
c:\program files\sudoplanet
c:\program files\sudoplanet\Conditions générales.url
c:\program files\sudoplanet\Confidentialité.url
c:\program files\sudoplanet\SudoPlanet.dll
c:\program files\sudoplanet\uninst.exe
c:\program files\sudoplanet\Website.url
c:\windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb
c:\windows\system32\a.exe
c:\windows\system32\actskn43.ocx
c:\windows\system32\nvs2.inf
c:\windows\system32\sysrest32.exe
c:\windows\system32\tdssadw.dll
c:\windows\system32\tdssinit.dll
c:\windows\system32\tdssservers.dat
D:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MESSENGERFSSSVC
-------\Service_77944d91
-------\Service_Messengerfsssvc

((((((((((((((((((((((((((((( Fichiers créés du 2009-05-01 au 2009-06-01 ))))))))))))))))))))))))))))))))))))
.

2009-05-28 09:31 . 2009-05-28 12:29 -------- d-----w- c:\program files\Internet Download Manager
2009-05-27 16:20 . 2009-05-27 16:20 -------- d-----w- c:\program files\Software Informer
2009-05-27 16:20 . 2009-05-27 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-27 15:18 . 2009-05-27 15:18 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\VitySoft
2009-05-26 16:11 . 2009-05-27 15:12 -------- d-----w- c:\program files\Trojan Remover
2009-05-26 13:58 . 2009-05-27 06:58 -------- d-----w- c:\program files\a-squared Anti-Malware
2009-05-26 13:47 . 2009-05-26 13:47 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\AVG8
2009-05-25 09:23 . 2009-05-26 15:26 -------- d-----w- c:\windows\system32\571599
2009-05-23 01:37 . 2009-05-26 13:14 78350 ----a-w- c:\windows\kmsjsx32.sys
2009-05-23 01:37 . 2009-05-23 01:37 1532 ----a-w- c:\windows\kmssx32.dll
2009-05-22 16:56 . 2009-05-26 15:31 -------- d-----w- c:\program files\websrvx
2009-05-22 16:55 . 2009-05-22 16:55 2 ---h--w- c:\windows\sto453148.dat
2009-05-22 16:55 . 2009-05-22 16:55 2 ---h--w- c:\windows\sto452688.dat
2009-05-22 16:37 . 2009-05-22 18:22 -------- d-----w- c:\program files\Invisible IP Map
2009-05-22 16:28 . 2009-05-22 16:28 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\TrojanHunter
2009-05-22 16:22 . 2009-05-22 20:41 -------- d-----w- c:\program files\TrojanHunter 5.1
2009-05-22 14:55 . 2009-05-26 15:26 -------- d-----w- c:\windows\system32\121973
2009-05-21 09:30 . 2009-05-26 15:26 -------- d-----w- c:\windows\system32\870159
2009-05-20 16:52 . 2009-05-22 19:14 -------- d-----w- c:\windows\ie8updates
2009-05-20 16:52 . 2009-04-25 05:30 102400 ------w- c:\windows\system32\dllcache\iecompat.dll
2009-05-20 16:50 . 2009-02-20 17:10 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-05-20 16:50 . 2009-02-20 17:10 78336 ----a-w- c:\windows\system32\dllcache\ieencode.dll
2009-05-20 15:53 . 2009-05-20 15:53 2 ---h--w- c:\windows\sto452730.dat
2009-05-20 13:16 . 2009-05-20 13:16 2 ---h--w- c:\windows\sto452739.dat
2009-05-20 13:16 . 2009-05-20 13:16 2 ---h--w- c:\windows\sto452712.dat
2009-05-20 11:16 . 2009-05-20 11:16 2 ---h--w- c:\windows\sto452738.dat
2009-05-20 11:16 . 2009-05-26 15:26 -------- d-----w- c:\windows\system32\547372
2009-05-19 17:48 . 2009-05-19 17:48 2 ---h--w- c:\windows\sto453251.dat
2009-05-19 17:48 . 2009-05-19 17:48 2 ---h--w- c:\windows\sto453224.dat
2009-05-19 15:48 . 2009-05-19 15:48 2 ---h--w- c:\windows\sto453250.dat
2009-05-19 15:47 . 2009-05-24 21:41 148 --s-a-w- c:\windows\system32\404469053.dat
2009-05-19 15:41 . 2009-05-19 15:41 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-05-19 15:41 . 2009-05-19 15:41 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2009-05-19 11:44 . 2001-05-16 15:54 309616 ----a-w- c:\windows\system32\wmv8dmod.dll
2009-05-19 11:42 . 2009-05-21 09:44 -------- d-----w- c:\program files\ALDI Service Photo
2009-05-13 13:04 . 2009-05-13 13:05 -------- d-----w- c:\windows\system32\Adobe
2009-05-13 09:54 . 2009-05-13 09:58 -------- d-----w- c:\documents and settings\All Users\Application Data\IM
2009-05-12 11:56 . 2009-05-12 11:56 -------- d-----w- c:\documents and settings\All Users\Application Data\IncrediMail
2009-05-08 17:20 . 2009-05-20 15:56 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\RayV
2009-05-08 09:55 . 2009-05-08 09:55 -------- d-----w- c:\program files\Panasonic
2009-05-08 09:55 . 2006-02-27 09:45 36864 ----a-w- c:\windows\system32\SDDEVMGR.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-01 11:24 . 2009-05-28 09:31 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\DMCache
2009-06-01 11:15 . 2009-04-16 12:09 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Free Download Manager
2009-06-01 10:50 . 2007-03-06 13:04 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs
2009-06-01 10:50 . 2008-12-10 14:49 0 ----a-w- c:\windows\system32\drivers\logiflt.iad
2009-05-31 10:50 . 2009-05-29 11:01 -------- d-----w- c:\program files\Loaris Trojan Remover
2009-05-28 15:11 . 2009-05-28 15:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-05-28 13:17 . 2009-05-28 12:59 -------- d-----w- c:\program files\Super Internet TV
2009-05-28 13:17 . 2007-10-22 23:20 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-05-28 11:11 . 2009-05-28 09:31 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\IDM
2009-05-28 09:31 . 2009-05-28 09:31 198064 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
2009-05-27 16:29 . 2009-04-16 12:09 -------- d-----w- c:\program files\Free Download Manager
2009-05-26 16:37 . 2007-11-12 19:24 -------- d-----w- c:\program files\Pando Networks
2009-05-26 15:26 . 2008-12-06 16:11 -------- d-----w- c:\program files\Freeze.com
2009-05-26 15:26 . 2007-03-05 22:22 -------- d-----w- c:\program files\Assistant Dartybox
2009-05-26 11:20 . 2009-05-28 15:11 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-26 11:19 . 2009-05-28 15:11 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-05-26 09:23 . 2008-08-24 14:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-05-26 08:28 . 2008-08-24 14:28 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-05-21 16:38 . 2007-02-22 12:23 -------- d-----w- c:\program files\Google
2009-05-21 09:47 . 2007-02-22 11:54 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-21 09:46 . 2008-07-23 11:06 -------- d-----w- c:\program files\Matroska Pack
2009-05-21 09:46 . 2007-03-23 13:55 -------- d-----w- c:\program files\GRETECH
2009-05-20 17:21 . 2007-03-05 22:28 200208 ----a-w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-20 16:46 . 2008-03-29 12:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-20 16:43 . 2008-03-29 12:25 -------- d-----w- c:\program files\Microsoft Works
2009-05-20 16:37 . 2008-04-15 11:11 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-05-20 16:34 . 2009-01-29 09:49 -------- d-----w- c:\program files\FrostWire
2009-05-20 16:33 . 2007-03-16 10:43 -------- d-----w- c:\program files\Fichiers communs\AVSMedia
2009-05-20 16:33 . 2008-10-29 17:28 -------- d-----w- c:\program files\AVS4YOU
2009-05-20 16:33 . 2009-04-02 15:41 -------- d-----w- c:\program files\Imaginewheel
2009-05-20 16:31 . 2008-10-29 17:41 -------- d-----w- c:\program files\Free Video Converter
2009-05-20 15:57 . 2009-04-24 16:19 -------- d-----w- c:\program files\PCCloneEX
2009-05-20 15:55 . 2009-04-24 18:51 -------- d-----w- c:\documents and settings\All Users\Application Data\ExtraFilm
2009-05-20 15:55 . 2009-04-24 18:51 -------- d-----w- c:\program files\Extrafilm Designer FR
2009-05-20 15:50 . 2007-02-22 12:27 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-05-19 11:44 . 2007-11-20 21:14 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX
2009-05-19 11:44 . 2008-10-01 12:08 -------- d-----w- c:\program files\ALDI
2009-05-13 09:57 . 2008-07-03 14:42 -------- d-----w- c:\program files\IncrediMail
2009-05-13 09:50 . 2007-04-24 09:35 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Thunderbird
2009-05-08 13:11 . 2008-07-09 15:48 -------- d-----w- c:\program files\Micro Application
2009-05-07 18:01 . 2008-08-28 11:23 -------- d-----w- c:\program files\Metin2_France
2009-05-05 16:02 . 2007-03-06 16:21 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\FrostWire
2009-05-05 10:08 . 2009-04-13 18:02 -------- d-----w- c:\program files\Architecte_3D_Platinium
2009-05-05 09:53 . 2008-10-20 08:45 -------- d-----w- c:\documents and settings\All Users\Application Data\BVRP Software
2009-05-04 16:05 . 2007-03-19 22:35 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-04-30 16:25 . 2009-04-30 16:16 -------- d-----w- c:\program files\PulsPlayer
2009-04-28 15:21 . 2009-04-10 11:23 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\dvdcss
2009-04-24 20:45 . 2009-04-24 20:45 -------- d-----w- c:\program files\GPL MPEG Decoder
2009-04-24 20:12 . 2009-04-24 16:19 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\PcCloneEx
2009-04-24 19:07 . 2009-04-24 19:00 -------- d-----w- c:\program files\adslTV
2009-04-24 18:52 . 2009-04-24 18:52 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\ExtraFilm
2009-04-24 16:20 . 2009-04-24 16:20 -------- d-----w- c:\program files\Prolific
2009-04-24 16:16 . 2007-03-06 10:35 -------- d-----w- c:\program files\Realtek
2009-04-24 10:59 . 2008-04-30 14:50 -------- d-----w- c:\program files\Clavicom
2009-04-24 10:58 . 2007-03-06 10:16 -------- d-----w- c:\program files\Star Downloader
2009-04-24 10:55 . 2007-12-14 16:09 -------- d-----w- c:\program files\Minilyrics
2009-04-23 17:32 . 2009-04-23 17:32 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Carnival Software
2009-04-21 12:18 . 2009-04-21 12:18 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-04-21 12:18 . 2009-04-21 12:18 22328 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\PnkBstrK.sys
2009-04-21 12:18 . 2009-04-21 12:18 22328 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\PnkBstrK.sys
2009-04-21 12:18 . 2009-04-21 12:18 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-04-21 12:18 . 2009-04-21 12:18 669184 ----a-w- c:\windows\system32\pbsvc.exe
2009-04-21 12:18 . 2009-04-21 12:18 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-04-21 12:06 . 2009-04-21 12:06 -------- d-----w- c:\program files\Electronic Arts
2009-04-20 21:04 . 2009-04-20 21:04 19 ----a-w- c:\windows\popcinfo.dat
2009-04-20 20:12 . 2009-04-20 20:07 -------- d-----w- c:\program files\HP Games
2009-04-20 20:08 . 2009-04-20 20:08 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\WildTangent
2009-04-20 20:08 . 2009-04-20 20:07 -------- d-----w- c:\documents and settings\All Users\Application Data\WildTangent
2009-04-20 09:43 . 2005-10-10 11:39 94866 ----a-w- c:\windows\system32\perfc00C.dat
2009-04-20 09:43 . 2005-10-10 11:39 535140 ----a-w- c:\windows\system32\perfh00C.dat
2009-04-18 08:13 . 2007-02-22 12:11 -------- d-----w- c:\program files\DivX
2009-04-17 19:35 . 2007-10-19 16:06 -------- d-----w- c:\program files\Samsung
2009-04-17 19:12 . 2007-07-02 18:58 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Samsung
2009-04-17 10:47 . 2007-02-22 12:12 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-04-17 10:38 . 2008-11-27 20:18 -------- d-----w- c:\program files\Zylom Games
2009-04-17 10:38 . 2008-03-19 12:22 -------- d-----w- c:\program files\Sony
2009-04-17 10:34 . 2009-04-06 16:24 -------- d-----w- c:\program files\Image-Line
2009-04-17 10:28 . 2007-02-22 11:59 -------- d-----w- c:\program files\HP
2009-04-17 10:14 . 2009-04-14 09:35 -------- d-----w- c:\program files\DAP
2009-04-16 16:11 . 2007-07-02 15:45 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2009-04-16 15:58 . 2009-01-03 20:15 -------- d-----w- c:\program files\DIFX
2009-04-16 12:07 . 2009-04-14 09:35 -------- d-----w- c:\documents and settings\All Users\Application Data\SpeedBit
2009-04-14 09:35 . 2009-04-14 09:35 50688 ----a-w- c:\windows\system32\wbhelp2.dll
2009-04-10 20:23 . 2009-04-10 20:21 -------- d-----w- c:\program files\WebSite X5 Smart
2009-04-10 18:54 . 2007-03-07 22:01 -------- d-----w- c:\program files\Alcohol Soft
2009-04-10 18:45 . 2007-03-07 21:58 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-04-10 16:42 . 2009-03-25 15:16 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-04-10 11:37 . 2009-04-10 11:20 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\vlc
2009-04-06 17:07 . 2009-04-06 16:26 -------- d-----w- c:\program files\VstPlugins
2009-04-06 16:26 . 2009-04-06 16:26 -------- d-----w- c:\program files\Outsim
2009-04-03 10:23 . 2009-04-03 10:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Photo Service Edition
2009-04-03 10:23 . 2007-11-15 22:43 -------- d-----w- c:\program files\Photo Service Edition
2009-04-01 15:28 . 2009-04-01 15:28 88774 ----a-r- c:\documents and settings\HP_Administrateur\Application Data\Microsoft\Installer\{F2996FC2-47B9-409E-9442-C89390D49D8E}\_6FEFF9B68218417F98F549.exe
2009-03-27 06:14 . 2008-08-23 11:34 453152 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-03-26 15:35 . 2009-04-29 12:20 210352 ----a-w- c:\windows\system32\idmmbc.dll
2009-03-06 14:20 . 2004-08-10 11:00 286720 ----a-w- c:\windows\system32\pdh.dll
2008-11-12 11:38 . 2008-11-12 11:38 11222 ----a-w- c:\program files\Fichiers communs\qodyw._dl
2008-11-12 09:00 . 2008-11-12 09:00 17321 ----a-w- c:\program files\Fichiers communs\fijihodu.exe
2008-11-12 09:00 . 2008-11-12 09:00 14842 ----a-w- c:\program files\Fichiers communs\akil._dl
2008-11-12 09:00 . 2008-11-12 09:00 13212 ----a-w- c:\program files\Fichiers communs\ylyzelyco.lib
2009-05-22 18:58 . 2009-05-22 15:34 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2009-05-22 18:58 . 2009-05-22 15:34 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2009-05-22 18:58 . 2009-05-22 15:34 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2009-05-22 18:58 . 2009-05-22 15:34 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2009-05-22 18:58 . 2009-05-22 15:34 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2007-05-08 18:25 . 2007-05-08 18:25 10856 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-02-24 203928]
"Pando"="c:\program files\Pando Networks\Pando\Pando.exe" [2009-01-13 3699016]
"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2009-01-31 3399727]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2009-04-16 251264]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-04-29 2799024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlbaNet.a"="c:\documents and settings\HP_Administrateur\Local Settings\AlbaNet.a" [X]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-27 13684736]
"DMAScheduler"="c:\program files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-04-13 90112]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"Reminder"="c:\windows\Creator\Remind_XP.exe" [2004-12-13 663552]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 132496]
"ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-08-09 221184]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Autoconfigurateur WiFi Neuf"="c:\program files\Neuf\Kit\WiFi\9wifi.exe" [2008-06-09 287984]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
"TagMonitor"="c:\program files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe" [2008-07-14 886088]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"Prolific_OneButton"="c:\program files\Prolific\One Button\OneBtn.exe" [2006-04-03 32768]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-27 86016]
"ALDI_FotoSuite_Download"="c:\program files\ALDI Service Photo\ALDI_Service_Photo\FotoSuite.exe" [2007-07-04 1171456]
"THGuard"="c:\program files\TrojanHunter 5.1\THGuard.exe" [2009-05-22 1061536]
"a-squared"="c:\program files\A-SQUARED ANTI-MALWARE\a2guard.exe" [2009-05-26 2940560]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-05-26 414480]
"ftutil2"="ftutil2.dll" - c:\windows\system32\ftutil2.dll [2004-06-07 106496]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-03-27 1657376]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-01-30 16116224]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-6-21 385024]
PulsRadio.lnk - c:\program files\PulsRadio\PulsRadio.exe [2008-4-6 385024]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-6-21 385024]
PulsRadio.lnk - c:\program files\PulsRadio\PulsRadio.exe [2008-4-6 385024]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-6-21 385024]
PulsRadio.lnk - c:\program files\PulsRadio\PulsRadio.exe [2008-4-6 385024]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
ClavicomNG.lnk - c:\program files\Handicap International\ClavicomNG\ClavicomNG.exe [2009-5-31 1619168]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
Windows Desktop Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"=hex(2):76,69,73,74,61,75,69,2e,65,78,65,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2005-12-06 20:16 176128 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Metin2_France\\metin2.bin"=
"c:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\TAGMonitor.exe"=
"c:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\LeapFrogConnectTag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Pando Networks\\Pando\\pando.exe"=
"c:\\Program Files\\Java\\jre1.6.0_03\\launch4j-tmp\\frd.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"50000:TCP"= 50000:TCP:Mezzmo Media Sharing Service
"56980:TCP"= 56980:TCP:Pando P2P TCP Listening Port
"56980:UDP"= 56980:UDP:Pando P2P UDP Listening Port

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-11-12 111184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-11-12 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-01-17 55136]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
R2 mbamservice;mbamservice;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2009-05-28 194832]
R2 SBKUPNT;SBKUPNT;c:\windows\system32\drivers\SBKUPNT.SYS [2009-04-24 14976]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2007-02-22 2829696]
R3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\drivers\A5AGU.sys [2008-03-12 347648]
R3 mbamprotector;mbamprotector;c:\windows\system32\drivers\mbam.sys [2009-05-28 19096]
S0 yeiengz;yeiengz;c:\windows\system32\drivers\ttiktte.sys --> c:\windows\system32\drivers\ttiktte.sys [?]
S2 OpenCASE Media Agent;OpenCASE Media Agent;c:\program files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe [2008-01-16 814728]
S2 websrvx;websrvx;c:\program files\websrvx\websrvx.exe --> c:\program files\websrvx\websrvx.exe [?]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2007-11-20 1527900]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2009-01-03 18560]
S3 s916bus;Sony Ericsson Device 916 driver (WDM);c:\windows\system32\drivers\s916bus.sys [2007-11-02 83496]
S3 s916mdfl;Sony Ericsson Device 916 USB WMC Modem Filter;c:\windows\system32\drivers\s916mdfl.sys [2007-11-02 15016]
S3 s916mdm;Sony Ericsson Device 916 USB WMC Modem Driver;c:\windows\system32\drivers\s916mdm.sys [2007-11-02 109992]
S3 UPnPService;UPnPService;c:\program files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe [2007-11-20 544768]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8E96F42-3C05-61A5-C065-BB6599465C0E}]
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\MSN.exe
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{70c74a46-f2da-4723-95e2-b597e0198669} - c:\windows\system32\571599\571599.dll
HKCU-Run-BitTorrent - c:\program files\BitTorrent\bittorrent.exe
HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
HKCU-Run-BitComet - c:\program files\BitComet\BitComet.exe
HKCU-Run-Zilla Popup Killer - c:\program files\Zilla Popup Killer\ZillaPop.exe
HKCU-Run-fsm - (no file)
HKLM-Run-LClock - c:\program files\LClock\LClock.exe
HKLM-Run-Wambo - c:\program files\Swapper\Swapper.exe
HKLM-Run-TkBellExe - c:\program files\Fichiers communs\Real\Update_OB\realsched.exe
HKLM-Run-NBKeyScan - c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
HKLM-Run-TomTomHOME.exe - c:\program files\TomTom HOME\TomTomHOME.exe
HKLM-Run-WinampAgent - c:\program files\Winamp\winampa.exe
HKLM-Run-PCDrProfiler - (no file)
SafeBoot-procexp90.sys

.
------- Examen supplémentaire -------
.
uInternet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
uInternet Settings,ProxyServer = http=localhost:7171
uInternet Settings,ProxyOverride = *.local;<local>
IE: tout télécharger avec free download manager - file://c:\program files\Free Download Manager\dlall.htm
IE: télécharger avec free download manager - file://c:\program files\Free Download Manager\dllink.htm
IE: télécharger avec idm - c:\program files\Internet Download Manager\IEExt.htm
IE: Télécharger avec Star Downloader - c:\program files\Star Downloader\sdie.htm
IE: télécharger la sélection avec free download manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: télécharger la vidéo avec free download manager - file://c:\program files\Free Download Manager\dlfvideo.htm
IE: télécharger le contenu de video flv avec idm - c:\program files\Internet Download Manager\IEGetVL.htm
IE: télécharger tous les liens avec idm - c:\program files\Internet Download Manager\IEGetAll.htm
Trusted Zone: localhost
TCP: {1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C} = 213.174.139.72,192.168.30.1
TCP: {2548FB6B-68AA-4EB9-9E86-6007ACD78893} = 213.174.139.72,192.168.30.1
TCP: {4800587A-1FAE-413C-AC27-0C8146C76820} = 213.174.139.72,192.168.30.1
TCP: {79E8F62B-5A2D-4DEA-A8F4-F6F0CF18D658} = 213.174.139.72,192.168.30.1
TCP: {7DD85F4F-1B2D-428D-A486-8E4277716D1A} = 213.174.139.72,192.168.30.1
TCP: {BC239D17-3892-4712-BF0A-E0B6025458AC} = 213.174.139.72,192.168.30.1
TCP: {F7F66AB8-92F2-4DAC-8725-21196F57B438} = 213.174.139.72,192.168.30.1
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} -
FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\cmpxexao.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.ustart.org/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar&search=
FF - component: c:\documents and settings\HP_Administrateur\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\program files\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-01 13:21
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-3999763384-2490404069-1611723408-1007\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-3999763384-2490404069-1611723408-1007\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:49,8f,d2,25,4f,a2,e1,ff,a8,0b,09,82,ed,aa,3e,9a,71,80,ef,c7,c0,71,e6,
24,49,53,fa,a4,d3,b1,cd,a3,27,a1,16,7c,00,5b,36,b7,66,81,1e,a7,7c,3f,20,f7,\
"??"=hex:b9,96,f3,6c,fd,47,a3,54,a5,6f,0d,b3,ee,a7,72,9c

[HKEY_USERS\S-1-5-21-3999763384-2490404069-1611723408-1007\Software\SecuROM\License information*]
"datasecu"=hex:3a,59,e2,b8,80,b7,b2,c3,c2,cf,99,dc,b8,4c,b5,25,a6,a6,89,a6,63,
0f,e8,9c,92,dc,6f,e5,ee,1a,7f,55,d5,9c,b9,4a,93,1b,de,03,ad,f6,08,aa,7d,21,\
"rkeysecu"=hex:34,2a,1a,80,9a,9e,0d,fa,76,6a,c1,d4,42,37,0b,24
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(940)
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

- - - - - - - > 'explorer.exe'(9920)
c:\program files\Fichiers communs\Logishrd\LVMVFM\LVPrcInj.dll
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSFR.DLL
c:\windows\system32\nvwddi.dll
c:\progra~1\WINDOW~1\wmpband.dll
c:\program files\Windows Desktop Search\deskbar.dll
c:\program files\Windows Desktop Search\fr-fr\dbres.dll.mui
c:\program files\Windows Desktop Search\dbres.dll
c:\program files\Windows Desktop Search\wordwheel.dll
c:\program files\Windows Desktop Search\fr-fr\msnlExtRes.dll.mui
c:\program files\Windows Desktop Search\msnlExtRes.dll
c:\windows\system32\eappprxy.dll
c:\program files\Stardock\Object Desktop\WindowBlinds\tray.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\IncrediMail\bin\B4ImApp.dll
c:\program files\Internet Download Manager\idmmkb.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\a-squared Anti-Malware\a2service.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\IoctlSvc.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
c:\windows\system32\searchindexer.exe
c:\program files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\ELService.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\dllhost.exe
c:\windows\ehome\ehmsas.exe
c:\windows\system32\rundll32.exe
c:\hp\KBD\kbd.exe
c:\windows\system32\rundll32.exe
c:\windows\system\hpsysdrv.exe
c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe
c:\windows\system32\osk.exe
c:\program files\IncrediMail\bin\ImApp.exe
c:\program files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe
c:\windows\system32\msswchx.exe
c:\program files\Internet Download Manager\IEMonitor.exe
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\windows\system32\searchprotocolhost.exe
c:\program files\Java\jre1.6.0_03\bin\jucheck.exe
c:\windows\system32\searchfilterhost.exe
.
**************************************************************************
.
Heure de fin: 2009-06-01 13:33 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-06-01 11:33

Avant-CF: 157,338,898,432 octets libres
Après-CF: 157,196,660,736 octets libres

Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=,1,2,3,4
490 --- E O F --- 2009-05-13 22:47

Télécharge SDFix sur ton bureau :
ici :SDFix
ou ici SDFix
ou ici SDFix

--> Double-clique sur SDFix.exe et choisis "Install" .

Tuto

Puis une fois l'installe faite ,

Impératif : Démarrer en mode sans echec .

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

Comment aller en Mode sans échec :
1) Redémarre ton ordi .
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
5) Choisis ton compte habituel ( et pas Administrateur ).
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...

Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
-->Tapes Y pour lancer le script ...
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
presses une touche pour redémarrer quand il te le sera demandé .

Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .

Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
C:\SDFix sous le nom "Report.txt".

Poste ce dernier dans ta prochaine réponse

Si SDfix ne se lance pas (ça arrive!)

* Démarrer->Exécuter

* Copie/colle ceci :

%systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe

* Clique sur ok, et valide.

* Redémarre et essaye de nouveau de lancer SDfix.

salut ça va?

voilà le rapport sdfix

[b]SDFix: Version 1.240 [/b]
Run by HP_Administrateur on 2009-06-04 at 13:52

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

[b]Checking Files [/b]:

Trojan Files Found:

C:\Documents and Settings\All Users\Documents\yrecewa.scr - Deleted

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-04 14:03:38
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:94,bd,00,02,0d,d2,d1,22,2b,57,7c,12,45,6c,54,23,bb,64,ac,cf,bb,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 52\"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:ab390be4
"s2"=dword:7ad795bf
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:7e,88,24,b3,f7,02,a1,21,f0,c9,16,24,35,9a,1e,3c,0d,f7,37,df,f6,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:7c,52,f4,69,6a,28,e1,5e,42,d1,d2,27,0c,b7,66,c5,b7,e0,3f,39,ff,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 52\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:7e,88,24,b3,f7,02,a1,21,f0,c9,16,24,35,9a,1e,3c,0d,f7,37,df,f6,..
"p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\IncrediMail\\bin\\IMApp.exe"="C:\\Program Files\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\Metin2_France\\metin2.bin"="C:\\Program Files\\Metin2_France\\metin2.bin:*:Enabled:metin2"
"C:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\TAGMonitor.exe"="C:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\TAGMonitor.exe:*:Enabled:TAGMonitor.exe"
"C:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\LeapFrogConnectTag.exe"="C:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\LeapFrogConnectTag.exe:*:Enabled:LeapFrogConnectTag.exe"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"="C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe:*:Enabled:Crysis_32"
"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"="C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\\Program Files\\Pando Networks\\Pando\\pando.exe"="C:\\Program Files\\Pando Networks\\Pando\\pando.exe:*:Enabled:Pando Application"
"C:\\Program Files\\Java\\jre1.6.0_03\\launch4j-tmp\\frd.exe"="C:\\Program Files\\Java\\jre1.6.0_03\\launch4j-tmp\\frd.exe:*:Enabled:Java(TM) Platform SE binary"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[b]Remaining Files [/b]:

File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Thu 22 Feb 2007 211 A.SHR --- "C:\BOOT.BAK"
Fri 22 May 2009 7,841,043 A..H. --- "C:\Downloads\Software\Firefox Setup 3.0.7.exe"
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Tue 8 May 2007 10,856 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Tue 4 Sep 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 6 Mar 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Mon 1 Dec 2008 1,301 ...HR --- "C:\Documents and Settings\HP_Administrateur\Application Data\SecuROM\UserData\securom_v7_01.bak"
Thu 4 Jun 2009 5,686 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\TempRec\TempSBE\SBE8.tmp"
Thu 4 Jun 2009 5,940 A.SH. --- "C:\Documents and Settings\All Users\Documents\TV enregistr‚e\TempRec\TempSBE\SBE9.tmp"
Sun 26 Oct 2008 3,694,592 A.SH. --- "C:\Documents and Settings\HP_Administrateur\Mes documents\hacer\photo abi\100CASIO\SIV1A2.tmp"

[b]Finished![/b]

salut :

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

voilà le log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by HP_Administrateur at 2009-06-04 15:11:31
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 150 GB (65%) free of 232 GB
Total RAM: 2046 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:11:55, on 2009-06-04
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Prolific\One Button\OneBtn.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\ctfmon.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\Documents and Settings\HP_Administrateur\Bureau\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\HP_Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: CInterceptor Object - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - C:\Program Files\Pando Networks\Pando\PandoIEPlugin.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (file missing)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (file missing)
O2 - BHO: FDMIECookiesBHO Class - {cc59e0f9-7e43-44fa-9faa-8377850bf205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: (no name) - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [TagMonitor] "C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [Prolific_OneButton] C:\Program Files\Prolific\One Button\OneBtn.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ALDI_FotoSuite_Download] "C:\Program Files\ALDI Service Photo\ALDI_Service_Photo\FotoSuite.exe" /autorun
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 5.1\THGuard.exe"
O4 - HKLM\..\Run: [AlbaNet.a] C:\Documents and Settings\HP_Administrateur\Local Settings\AlbaNet.a
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - S-1-5-18 Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: PulsRadio.lnk = C:\Program Files\PulsRadio\PulsRadio.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Registration Paradise.LNK = C:\Program Files\UBISOFT\White Birds\Paradise\support\register\RegistrationReminder.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (User 'Default user')
O4 - .DEFAULT Startup: PulsRadio.lnk = C:\Program Files\PulsRadio\PulsRadio.exe (User 'Default user')
O4 - .DEFAULT Startup: Registration Paradise.LNK = C:\Program Files\UBISOFT\White Birds\Paradise\support\register\RegistrationReminder.exe (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Startup: PulsRadio.lnk = C:\Program Files\PulsRadio\PulsRadio.exe
O4 - Startup: Registration Paradise.LNK = C:\Program Files\UBISOFT\White Birds\Paradise\support\register\RegistrationReminder.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: tout télécharger avec free download manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: télécharger avec free download manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: télécharger la sélection avec free download manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: télécharger la vidéo avec free download manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7Pro\IE7Pro.dll
O9 - Extra 'Tools' menuitem: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7Pro\IE7Pro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{2548FB6B-68AA-4EB9-9E86-6007ACD78893}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{4800587A-1FAE-413C-AC27-0C8146C76820}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{79E8F62B-5A2D-4DEA-A8F4-F6F0CF18D658}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{7DD85F4F-1B2D-428D-A486-8E4277716D1A}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC239D17-3892-4712-BF0A-E0B6025458AC}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F7F66AB8-92F2-4DAC-8725-21196F57B438}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CS4\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 213.174.139.72,192.168.30.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: a-squared Anti-Malware Service (a2antimalware) - Emsi Software GmbH - C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: mbamservice - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OpenCASE Media Agent - ExtendMedia Inc. - C:\Program Files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: websrvx - Unknown owner - C:\Program Files\websrvx\websrvx.exe (file missing)
O23 - Service: Mises à jour automatiques (wuauserv) - Unknown owner - C:\WINDOWS\

__________________________________________________________
=>/!\ ATTENTION /!\ Le script qui suit a été écrit spécialement cet ordinateur,<=
=>il est fort déconseillé de le transposer sur un autre ordinateur !<=====|
---------------------------------------------------------------

Toujours avec toutes les protections désactivées, fais ceci :

• Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
• Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

------------------------------------------------------------------
File::
C:\WINDOWS\101.txt
C:\WINDOWS\108.txt
C:\WINDOWS\104.txt
C:\WINDOWS\103.txt
C:\WINDOWS\102.txt
C:\WINDOWS\kmssx32.dll
C:\WINDOWS\PEV.exe

Folder::
C:\Program Files\websrvx
C:\WINDOWS\system32\547372
C:\WINDOWS\system32\121973
C:\WINDOWS\system32\870159
C:\WINDOWS\system32\571599

Driver::
websrvx
SYMIDSCO
amvisb7f
CDRPDACC
------------------------------------------------------------------

• Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
• Quitte le Bloc Notes

• Fais un glisser/déposer de ce fichier CFScript sur le fichier C-Fix.exe (combofix) Comme ceci

• Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
• Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
• Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

voilà la rapport combofix

ComboFix 09-06-03.04 - HP_Administrateur 2009-06-04 15:56.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2046.1319 [GMT 2:00]
Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\HP_Administrateur\Bureau\CFScript.txt
AV: a-squared Anti-Malware *On-access scanning disabled* (Updated) {0F8591BB-342B-4493-91C3-4E948ED21255}
AV: avast! antivirus 4.8.1296 [VPS 090603-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

FILE ::
"c:\windows\101.txt"
"c:\windows\102.txt"
"c:\windows\103.txt"
"c:\windows\104.txt"
"c:\windows\108.txt"
"c:\windows\kmssx32.dll"
"c:\windows\PEV.exe"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\websrvx
c:\windows\101.txt
c:\windows\102.txt
c:\windows\103.txt
c:\windows\104.txt
c:\windows\108.txt
c:\windows\kmssx32.dll
c:\windows\PEV.exe
c:\windows\system32\121973
c:\windows\system32\547372
c:\windows\system32\571599
c:\windows\system32\870159
c:\windows\system32\drivers\logiflt.iad
c:\windows\system32\drivers\lvuvc.hs

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_CDRPDACC
-------\Legacy_SYMIDSCO
-------\Legacy_WEBSRVX
-------\Service_amvisb7f
-------\Service_CDRPDACC
-------\Service_SYMIDSCO
-------\Service_websrvx

((((((((((((((((((((((((((((( Fichiers créés du 2009-05-04 au 2009-06-04 ))))))))))))))))))))))))))))))))))))
.

2009-06-04 13:11 . 2009-06-04 13:12 -------- d-----w- C:\rsit
2009-06-04 11:50 . 2009-06-04 11:50 579584 ----a-w- c:\windows\system32\dllcache\user32.dll
2009-06-04 11:46 . 2009-06-04 11:46 -------- d-----w- c:\windows\ERUNT
2009-06-04 11:37 . 2009-06-04 12:08 -------- d-----w- C:\SDFix
2009-06-03 14:48 . 2009-06-03 14:48 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\IDM
2009-05-31 13:27 . 2009-05-31 14:07 -------- d-----w- C:\UsbFix
2009-05-29 11:01 . 2009-05-31 10:50 -------- d-----w- c:\program files\Loaris Trojan Remover
2009-05-28 15:11 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-28 15:11 . 2009-05-28 15:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-05-28 15:11 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-05-28 12:59 . 2009-05-28 13:17 -------- d-----w- c:\program files\Super Internet TV
2009-05-28 09:31 . 2009-06-03 15:40 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\DMCache
2009-05-27 16:20 . 2009-05-27 16:20 -------- d-----w- c:\program files\Software Informer
2009-05-27 16:20 . 2009-05-27 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\FreeDownloadManager.ORG
2009-05-27 15:18 . 2009-05-27 15:18 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\VitySoft
2009-05-26 16:11 . 2009-05-27 15:12 -------- d-----w- c:\program files\Trojan Remover
2009-05-26 13:58 . 2009-05-27 06:58 -------- d-----w- c:\program files\a-squared Anti-Malware
2009-05-26 13:47 . 2009-05-26 13:47 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\AVG8
2009-05-23 01:37 . 2009-05-26 13:14 78350 ----a-w- c:\windows\kmsjsx32.sys
2009-05-22 16:55 . 2009-05-22 16:55 2 ---h--w- c:\windows\sto453148.dat
2009-05-22 16:55 . 2009-05-22 16:55 2 ---h--w- c:\windows\sto452688.dat
2009-05-22 16:37 . 2009-05-22 18:22 -------- d-----w- c:\program files\Invisible IP Map
2009-05-22 16:28 . 2009-05-22 16:28 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\TrojanHunter
2009-05-22 16:22 . 2009-05-22 20:41 -------- d-----w- c:\program files\TrojanHunter 5.1
2009-05-20 16:52 . 2009-05-22 19:14 -------- d-----w- c:\windows\ie8updates
2009-05-20 16:52 . 2009-04-25 05:30 102400 ------w- c:\windows\system32\dllcache\iecompat.dll
2009-05-20 16:50 . 2009-02-20 17:10 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-05-20 16:50 . 2009-02-20 17:10 78336 ----a-w- c:\windows\system32\dllcache\ieencode.dll
2009-05-20 15:53 . 2009-05-20 15:53 2 ---h--w- c:\windows\sto452730.dat
2009-05-20 13:16 . 2009-05-20 13:16 2 ---h--w- c:\windows\sto452739.dat
2009-05-20 13:16 . 2009-05-20 13:16 2 ---h--w- c:\windows\sto452712.dat
2009-05-20 11:16 . 2009-05-20 11:16 2 ---h--w- c:\windows\sto452738.dat
2009-05-19 17:48 . 2009-05-19 17:48 2 ---h--w- c:\windows\sto453251.dat
2009-05-19 17:48 . 2009-05-19 17:48 2 ---h--w- c:\windows\sto453224.dat
2009-05-19 15:48 . 2009-05-19 15:48 2 ---h--w- c:\windows\sto453250.dat
2009-05-19 15:47 . 2009-05-24 21:41 148 --s-a-w- c:\windows\system32\404469053.dat
2009-05-19 15:41 . 2009-05-19 15:41 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-05-19 15:41 . 2009-05-19 15:41 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2009-05-19 11:44 . 2001-05-16 15:54 309616 ----a-w- c:\windows\system32\wmv8dmod.dll
2009-05-19 11:42 . 2009-05-21 09:44 -------- d-----w- c:\program files\ALDI Service Photo
2009-05-13 13:04 . 2009-05-13 13:05 -------- d-----w- c:\windows\system32\Adobe
2009-05-13 09:54 . 2009-05-13 09:58 -------- d-----w- c:\documents and settings\All Users\Application Data\IM
2009-05-12 11:56 . 2009-05-12 11:56 -------- d-----w- c:\documents and settings\All Users\Application Data\IncrediMail
2009-05-08 17:20 . 2009-05-20 15:56 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\RayV
2009-05-08 09:55 . 2009-05-08 09:55 -------- d-----w- c:\program files\Panasonic
2009-05-08 09:55 . 2006-02-27 09:45 36864 ----a-w- c:\windows\system32\SDDEVMGR.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-04 13:54 . 2009-04-16 12:09 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Free Download Manager
2009-06-04 13:11 . 2007-12-12 13:10 -------- d-----w- c:\program files\Trend Micro
2009-06-03 16:09 . 2008-04-29 14:54 -------- d-----w- c:\program files\Handicap International
2009-05-28 13:17 . 2007-10-22 23:20 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-05-27 16:29 . 2009-04-16 12:09 -------- d-----w- c:\program files\Free Download Manager
2009-05-26 16:37 . 2007-11-12 19:24 -------- d-----w- c:\program files\Pando Networks
2009-05-26 15:26 . 2008-12-06 16:11 -------- d-----w- c:\program files\Freeze.com
2009-05-26 15:26 . 2007-03-05 22:22 -------- d-----w- c:\program files\Assistant Dartybox
2009-05-26 09:23 . 2008-08-24 14:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-05-26 08:28 . 2008-08-24 14:28 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-05-21 16:38 . 2007-02-22 12:23 -------- d-----w- c:\program files\Google
2009-05-21 09:47 . 2007-02-22 11:54 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-21 09:46 . 2008-07-23 11:06 -------- d-----w- c:\program files\Matroska Pack
2009-05-21 09:46 . 2007-03-23 13:55 -------- d-----w- c:\program files\GRETECH
2009-05-20 17:21 . 2007-03-05 22:28 200208 ----a-w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-20 16:46 . 2008-03-29 12:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-20 16:43 . 2008-03-29 12:25 -------- d-----w- c:\program files\Microsoft Works
2009-05-20 16:37 . 2008-04-15 11:11 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-05-20 16:34 . 2009-01-29 09:49 -------- d-----w- c:\program files\FrostWire
2009-05-20 16:33 . 2007-03-16 10:43 -------- d-----w- c:\program files\Fichiers communs\AVSMedia
2009-05-20 16:33 . 2008-10-29 17:28 -------- d-----w- c:\program files\AVS4YOU
2009-05-20 16:33 . 2009-04-02 15:41 -------- d-----w- c:\program files\Imaginewheel
2009-05-20 16:31 . 2008-10-29 17:41 -------- d-----w- c:\program files\Free Video Converter
2009-05-20 15:57 . 2009-04-24 16:19 -------- d-----w- c:\program files\PCCloneEX
2009-05-20 15:55 . 2009-04-24 18:51 -------- d-----w- c:\documents and settings\All Users\Application Data\ExtraFilm
2009-05-20 15:55 . 2009-04-24 18:51 -------- d-----w- c:\program files\Extrafilm Designer FR
2009-05-20 15:50 . 2007-02-22 12:27 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-05-19 11:44 . 2007-11-20 21:14 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX
2009-05-19 11:44 . 2008-10-01 12:08 -------- d-----w- c:\program files\ALDI
2009-05-13 09:57 . 2008-07-03 14:42 -------- d-----w- c:\program files\IncrediMail
2009-05-13 09:50 . 2007-04-24 09:35 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Thunderbird
2009-05-08 13:11 . 2008-07-09 15:48 -------- d-----w- c:\program files\Micro Application
2009-05-07 18:01 . 2008-08-28 11:23 -------- d-----w- c:\program files\Metin2_France
2009-05-05 16:02 . 2007-03-06 16:21 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\FrostWire
2009-05-05 10:08 . 2009-04-13 18:02 -------- d-----w- c:\program files\Architecte_3D_Platinium
2009-05-05 09:53 . 2008-10-20 08:45 -------- d-----w- c:\documents and settings\All Users\Application Data\BVRP Software
2009-05-04 16:05 . 2007-03-19 22:35 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-04-30 16:25 . 2009-04-30 16:16 -------- d-----w- c:\program files\PulsPlayer
2009-04-28 15:21 . 2009-04-10 11:23 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\dvdcss
2009-04-24 20:45 . 2009-04-24 20:45 -------- d-----w- c:\program files\GPL MPEG Decoder
2009-04-24 20:12 . 2009-04-24 16:19 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\PcCloneEx
2009-04-24 19:07 . 2009-04-24 19:00 -------- d-----w- c:\program files\adslTV
2009-04-24 18:52 . 2009-04-24 18:52 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\ExtraFilm
2009-04-24 16:20 . 2009-04-24 16:20 -------- d-----w- c:\program files\Prolific
2009-04-24 16:16 . 2007-03-06 10:35 -------- d-----w- c:\program files\Realtek
2009-04-24 10:59 . 2008-04-30 14:50 -------- d-----w- c:\program files\Clavicom
2009-04-24 10:58 . 2007-03-06 10:16 -------- d-----w- c:\program files\Star Downloader
2009-04-24 10:55 . 2007-12-14 16:09 -------- d-----w- c:\program files\Minilyrics
2009-04-23 17:32 . 2009-04-23 17:32 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Carnival Software
2009-04-21 12:18 . 2009-04-21 12:18 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-04-21 12:18 . 2009-04-21 12:18 22328 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\PnkBstrK.sys
2009-04-21 12:18 . 2009-04-21 12:18 22328 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\PnkBstrK.sys
2009-04-21 12:18 . 2009-04-21 12:18 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-04-21 12:18 . 2009-04-21 12:18 669184 ----a-w- c:\windows\system32\pbsvc.exe
2009-04-21 12:18 . 2009-04-21 12:18 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-04-21 12:06 . 2009-04-21 12:06 -------- d-----w- c:\program files\Electronic Arts
2009-04-20 21:04 . 2009-04-20 21:04 19 ----a-w- c:\windows\popcinfo.dat
2009-04-20 20:12 . 2009-04-20 20:07 -------- d-----w- c:\program files\HP Games
2009-04-20 20:08 . 2009-04-20 20:08 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\WildTangent
2009-04-20 20:08 . 2009-04-20 20:07 -------- d-----w- c:\documents and settings\All Users\Application Data\WildTangent
2009-04-20 09:43 . 2005-10-10 11:39 94866 ----a-w- c:\windows\system32\perfc00C.dat
2009-04-20 09:43 . 2005-10-10 11:39 535140 ----a-w- c:\windows\system32\perfh00C.dat
2009-04-18 08:13 . 2007-02-22 12:11 -------- d-----w- c:\program files\DivX
2009-04-17 19:35 . 2007-10-19 16:06 -------- d-----w- c:\program files\Samsung
2009-04-17 19:12 . 2007-07-02 18:58 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Samsung
2009-04-17 10:47 . 2007-02-22 12:12 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-04-17 10:38 . 2008-11-27 20:18 -------- d-----w- c:\program files\Zylom Games
2009-04-17 10:38 . 2008-03-19 12:22 -------- d-----w- c:\program files\Sony
2009-04-17 10:34 . 2009-04-06 16:24 -------- d-----w- c:\program files\Image-Line
2009-04-17 10:28 . 2007-02-22 11:59 -------- d-----w- c:\program files\HP
2009-04-17 10:14 . 2009-04-14 09:35 -------- d-----w- c:\program files\DAP
2009-04-16 16:11 . 2007-07-02 15:45 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2009-04-16 15:58 . 2009-01-03 20:15 -------- d-----w- c:\program files\DIFX
2009-04-16 12:07 . 2009-04-14 09:35 -------- d-----w- c:\documents and settings\All Users\Application Data\SpeedBit
2009-04-14 09:35 . 2009-04-14 09:35 50688 ----a-w- c:\windows\system32\wbhelp2.dll
2009-04-10 20:23 . 2009-04-10 20:21 -------- d-----w- c:\program files\WebSite X5 Smart
2009-04-10 18:54 . 2007-03-07 22:01 -------- d-----w- c:\program files\Alcohol Soft
2009-04-10 18:45 . 2007-03-07 21:58 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-04-10 16:42 . 2009-03-25 15:16 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-04-10 11:37 . 2009-04-10 11:20 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\vlc
2009-04-06 17:07 . 2009-04-06 16:26 -------- d-----w- c:\program files\VstPlugins
2009-04-06 16:26 . 2009-04-06 16:26 -------- d-----w- c:\program files\Outsim
2009-04-01 15:28 . 2009-04-01 15:28 88774 ----a-r- c:\documents and settings\HP_Administrateur\Application Data\Microsoft\Installer\{F2996FC2-47B9-409E-9442-C89390D49D8E}\_6FEFF9B68218417F98F549.exe
2009-03-27 06:14 . 2008-08-23 11:34 453152 ----a-w- c:\windows\system32\NVUNINST.EXE
2008-11-12 11:38 . 2008-11-12 11:38 11222 ----a-w- c:\program files\Fichiers communs\qodyw._dl
2008-11-12 09:00 . 2008-11-12 09:00 17321 ----a-w- c:\program files\Fichiers communs\fijihodu.exe
2008-11-12 09:00 . 2008-11-12 09:00 14842 ----a-w- c:\program files\Fichiers communs\akil._dl
2008-11-12 09:00 . 2008-11-12 09:00 13212 ----a-w- c:\program files\Fichiers communs\ylyzelyco.lib
2008-11-12 09:00 . 2008-11-12 09:00 12648 ----a-w- c:\program files\Fichiers communs\ygomoqi.db
2008-03-19 16:02 . 2008-03-19 16:02 251 ----a-w- c:\program files\wt3d.ini
2007-01-25 01:52 . 2007-01-25 01:52 65536 ----a-w- c:\program files\Fichiers communs\NMSAccessU.exe
2009-05-22 18:58 . 2009-05-22 15:34 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2009-05-22 18:58 . 2009-05-22 15:34 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2009-05-22 18:58 . 2009-05-22 15:34 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2009-05-22 18:58 . 2009-05-22 15:34 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2009-05-22 18:58 . 2009-05-22 15:34 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2007-05-08 18:25 . 2007-05-08 18:25 10856 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-06-01_11.21.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-04 14:37 . 2009-06-04 14:37 16384 c:\windows\Temp\Perflib_Perfdata_6cc.dat
+ 2009-06-04 14:02 . 2009-06-04 14:02 16384 c:\windows\Temp\History\History.IE5\index.dat
+ 2009-06-04 14:02 . 2009-06-04 14:02 32768 c:\windows\Temp\Fichiers Internet temporaires\Content.IE5\index.dat
+ 2009-06-04 14:02 . 2009-06-04 14:02 16384 c:\windows\Temp\Cookies\index.dat
+ 2009-06-04 11:46 . 2009-06-04 11:46 286720 c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0/u0000002\UsrClass.dat
+ 2009-06-04 11:46 . 2008-08-07 13:27 163328 c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE
+ 2009-06-04 11:47 . 2009-06-04 11:47 286720 c:\windows\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
+ 2009-06-04 11:47 . 2008-08-07 13:27 163328 c:\windows\ERUNT\SDFIX\ERDNT.EXE
+ 2009-06-04 11:46 . 2009-06-04 11:46 14848000 c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0/u0000001\ntuser.dat
+ 2009-06-04 11:47 . 2009-06-04 11:47 14848000 c:\windows\ERUNT\SDFIX\Users\[u]0/u0000001\ntuser.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-02-24 203928]
"Pando"="c:\program files\Pando Networks\Pando\Pando.exe" [2009-01-13 3699016]
"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2009-01-31 3399727]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2009-04-16 251264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AlbaNet.a"="c:\documents and settings\HP_Administrateur\Local Settings\AlbaNet.a" [X]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-27 13684736]
"DMAScheduler"="c:\program files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-04-13 90112]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"Reminder"="c:\windows\Creator\Remind_XP.exe" [2004-12-13 663552]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 132496]
"ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-08-09 221184]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Autoconfigurateur WiFi Neuf"="c:\program files\Neuf\Kit\WiFi\9wifi.exe" [2008-06-09 287984]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
"TagMonitor"="c:\program files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe" [2008-07-14 886088]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"Prolific_OneButton"="c:\program files\Prolific\One Button\OneBtn.exe" [2006-04-03 32768]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-27 86016]
"ALDI_FotoSuite_Download"="c:\program files\ALDI Service Photo\ALDI_Service_Photo\FotoSuite.exe" [2007-07-04 1171456]
"THGuard"="c:\program files\TrojanHunter 5.1\THGuard.exe" [2009-05-22 1061536]
"a-squared"="c:\program files\A-SQUARED ANTI-MALWARE\a2guard.exe" [2009-05-26 2940560]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-05-26 414480]
"ftutil2"="ftutil2.dll" - c:\windows\system32\ftutil2.dll [2004-06-07 106496]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-03-27 1657376]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-01-30 16116224]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-6-21 385024]
PulsRadio.lnk - c:\program files\PulsRadio\PulsRadio.exe [2008-4-6 385024]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-6-21 385024]
PulsRadio.lnk - c:\program files\PulsRadio\PulsRadio.exe [2008-4-6 385024]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2008-6-21 385024]
PulsRadio.lnk - c:\program files\PulsRadio\PulsRadio.exe [2008-4-6 385024]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
Windows Desktop Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"=hex(2):76,69,73,74,61,75,69,2e,65,78,65,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2005-12-06 20:16 176128 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IMApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Metin2_France\\metin2.bin"=
"c:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\TAGMonitor.exe"=
"c:\\Program Files\\LeapFrog\\LeapFrog Connect Tag\\bin\\LeapFrogConnectTag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Pando Networks\\Pando\\pando.exe"=
"c:\\Program Files\\Java\\jre1.6.0_03\\launch4j-tmp\\frd.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"50000:TCP"= 50000:TCP:Mezzmo Media Sharing Service
"56980:TCP"= 56980:TCP:Pando P2P TCP Listening Port
"56980:UDP"= 56980:UDP:Pando P2P UDP Listening Port

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-11-12 111184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-11-12 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-01-17 55136]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
R2 mbamservice;mbamservice;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2009-05-28 194832]
R2 SBKUPNT;SBKUPNT;c:\windows\system32\drivers\SBKUPNT.SYS [2009-04-24 14976]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2007-02-22 2829696]
R3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\drivers\A5AGU.sys [2008-03-12 347648]
R3 mbamprotector;mbamprotector;c:\windows\system32\drivers\mbam.sys [2009-05-28 19096]
S0 yeiengz;yeiengz;c:\windows\system32\drivers\ttiktte.sys --> c:\windows\system32\drivers\ttiktte.sys [?]
S2 OpenCASE Media Agent;OpenCASE Media Agent;c:\program files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe [2008-01-16 814728]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2007-11-20 1527900]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2009-01-03 18560]
S3 s916bus;Sony Ericsson Device 916 driver (WDM);c:\windows\system32\drivers\s916bus.sys [2007-11-02 83496]
S3 s916mdfl;Sony Ericsson Device 916 USB WMC Modem Filter;c:\windows\system32\drivers\s916mdfl.sys [2007-11-02 15016]
S3 s916mdm;Sony Ericsson Device 916 USB WMC Modem Driver;c:\windows\system32\drivers\s916mdm.sys [2007-11-02 109992]
S3 UPnPService;UPnPService;c:\program files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe [2007-11-20 544768]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A8E96F42-3C05-61A5-C065-BB6599465C0E}]
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\MSN.exe
.
.
------- Examen supplémentaire -------
.
uInternet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
uInternet Settings,ProxyServer = http=localhost:7171
uInternet Settings,ProxyOverride = *.local;<local>
IE: tout télécharger avec free download manager - file://c:\program files\Free Download Manager\dlall.htm
IE: télécharger avec free download manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger avec Star Downloader - c:\program files\Star Downloader\sdie.htm
IE: télécharger la sélection avec free download manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: télécharger la vidéo avec free download manager - file://c:\program files\Free Download Manager\dlfvideo.htm
Trusted Zone: localhost
TCP: {1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C} = 213.174.139.72,192.168.30.1
TCP: {2548FB6B-68AA-4EB9-9E86-6007ACD78893} = 213.174.139.72,192.168.30.1
TCP: {4800587A-1FAE-413C-AC27-0C8146C76820} = 213.174.139.72,192.168.30.1
TCP: {79E8F62B-5A2D-4DEA-A8F4-F6F0CF18D658} = 213.174.139.72,192.168.30.1
TCP: {7DD85F4F-1B2D-428D-A486-8E4277716D1A} = 213.174.139.72,192.168.30.1
TCP: {BC239D17-3892-4712-BF0A-E0B6025458AC} = 213.174.139.72,192.168.30.1
TCP: {F7F66AB8-92F2-4DAC-8725-21196F57B438} = 213.174.139.72,192.168.30.1
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} -
FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\cmpxexao.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.ustart.org/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar&search=
FF - component: c:\program files\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-04 16:38
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

c:\windows\TEMP\_av_proI.tm~a04772\dld1.tmp

Scan terminé avec succès
Fichiers cachés: 1

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-3999763384-2490404069-1611723408-1007\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-3999763384-2490404069-1611723408-1007\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:49,8f,d2,25,4f,a2,e1,ff,a8,0b,09,82,ed,aa,3e,9a,71,80,ef,c7,c0,71,e6,
24,49,53,fa,a4,d3,b1,cd,a3,27,a1,16,7c,00,5b,36,b7,66,81,1e,a7,7c,3f,20,f7,\
"??"=hex:b9,96,f3,6c,fd,47,a3,54,a5,6f,0d,b3,ee,a7,72,9c

[HKEY_USERS\S-1-5-21-3999763384-2490404069-1611723408-1007\Software\SecuROM\License information*]
"datasecu"=hex:3a,59,e2,b8,80,b7,b2,c3,c2,cf,99,dc,b8,4c,b5,25,a6,a6,89,a6,63,
0f,e8,9c,92,dc,6f,e5,ee,1a,7f,55,d5,9c,b9,4a,93,1b,de,03,ad,f6,08,aa,7d,21,\
"rkeysecu"=hex:34,2a,1a,80,9a,9e,0d,fa,76,6a,c1,d4,42,37,0b,24
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(944)
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

- - - - - - - > 'explorer.exe'(9220)
c:\program files\Fichiers communs\Logishrd\LVMVFM\LVPrcInj.dll
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSFR.DLL
c:\windows\system32\nvwddi.dll
c:\progra~1\WINDOW~1\wmpband.dll
c:\program files\Windows Desktop Search\deskbar.dll
c:\program files\Windows Desktop Search\fr-fr\dbres.dll.mui
c:\program files\Windows Desktop Search\dbres.dll
c:\program files\Windows Desktop Search\wordwheel.dll
c:\program files\Windows Desktop Search\fr-fr\msnlExtRes.dll.mui
c:\program files\Windows Desktop Search\msnlExtRes.dll
c:\program files\IncrediMail\bin\B4ImApp.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Stardock\Object Desktop\WindowBlinds\tray.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\a-squared Anti-Malware\a2service.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\IoctlSvc.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\system32\searchindexer.exe
c:\program files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\ELService.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\dllhost.exe
c:\windows\system32\rundll32.exe
c:\windows\ehome\ehmsas.exe
c:\hp\KBD\kbd.exe
c:\windows\system32\rundll32.exe
c:\windows\system\hpsysdrv.exe
c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe
c:\windows\system32\osk.exe
c:\windows\system32\msswchx.exe
c:\program files\IncrediMail\bin\ImApp.exe
c:\program files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe
c:\program files\Java\jre1.6.0_03\bin\jucheck.exe
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\windows\system32\searchprotocolhost.exe
c:\windows\system32\searchfilterhost.exe
.
**************************************************************************
.
Heure de fin: 2009-06-04 16:54 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-06-04 14:54
ComboFix2.txt 2009-06-01 11:33

Avant-CF: 156,116,086,784 octets libres
Après-CF: 156,385,710,080 octets libres

Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=,1,2,3,4
446 --- E O F --- 2009-05-13 22:47

bien relances rsit stp (des fichiers se régénèrent tout seuls) , il va falloir jouer sérré

voilà c fait

Logfile of random's system information tool 1.06 (written by random/random)
Run by HP_Administrateur at 2009-06-04 17:42:44
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 149 GB (64%) free of 232 GB
Total RAM: 2046 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:42:58, on 2009-06-04
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2service.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Prolific\One Button\OneBtn.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
c:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
C:\WINDOWS\system32\OSK.exe
C:\WINDOWS\system32\MSSWCHX.EXE
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Administrateur\Bureau\RSIT.exe
C:\Program Files\trend micro\HP_Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: CInterceptor Object - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - C:\Program Files\Pando Networks\Pando\PandoIEPlugin.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (file missing)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (file missing)
O2 - BHO: FDMIECookiesBHO Class - {cc59e0f9-7e43-44fa-9faa-8377850bf205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: (no name) - {E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [TagMonitor] "C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [Prolific_OneButton] C:\Program Files\Prolific\One Button\OneBtn.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ALDI_FotoSuite_Download] "C:\Program Files\ALDI Service Photo\ALDI_Service_Photo\FotoSuite.exe" /autorun
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 5.1\THGuard.exe"
O4 - HKLM\..\Run: [AlbaNet.a] C:\Documents and Settings\HP_Administrateur\Local Settings\AlbaNet.a
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Minimized
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - S-1-5-18 Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: PulsRadio.lnk = C:\Program Files\PulsRadio\PulsRadio.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: Registration Paradise.LNK = C:\Program Files\UBISOFT\White Birds\Paradise\support\register\RegistrationReminder.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (User 'Default user')
O4 - .DEFAULT Startup: PulsRadio.lnk = C:\Program Files\PulsRadio\PulsRadio.exe (User 'Default user')
O4 - .DEFAULT Startup: Registration Paradise.LNK = C:\Program Files\UBISOFT\White Birds\Paradise\support\register\RegistrationReminder.exe (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
O4 - Startup: PulsRadio.lnk = C:\Program Files\PulsRadio\PulsRadio.exe
O4 - Startup: Registration Paradise.LNK = C:\Program Files\UBISOFT\White Birds\Paradise\support\register\RegistrationReminder.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: tout télécharger avec free download manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: télécharger avec free download manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: télécharger la sélection avec free download manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: télécharger la vidéo avec free download manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7Pro\IE7Pro.dll
O9 - Extra 'Tools' menuitem: IE7pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IE7Pro\IE7Pro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{2548FB6B-68AA-4EB9-9E86-6007ACD78893}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{4800587A-1FAE-413C-AC27-0C8146C76820}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{79E8F62B-5A2D-4DEA-A8F4-F6F0CF18D658}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{7DD85F4F-1B2D-428D-A486-8E4277716D1A}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC239D17-3892-4712-BF0A-E0B6025458AC}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F7F66AB8-92F2-4DAC-8725-21196F57B438}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 213.174.139.72,192.168.30.1
O17 - HKLM\System\CS4\Services\Tcpip\..\{1CEDAE29-FA41-4AE6-BD3D-D3CBBA6A701C}: NameServer = 213.174.139.72,192.168.30.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: a-squared Anti-Malware Service (a2antimalware) - Emsi Software GmbH - C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: mbamservice - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OpenCASE Media Agent - ExtendMedia Inc. - C:\Program Files\OpenCASE\OpenCASE Media Agent\MediaAgent.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe

on va deja te virer cette passoire

Passer de Avast à AntiVir :

Télécharge Désinstalleur d'Avast!.

redemarre en mode sans echec :

Comment aller en Mode sans échec
1) Redémarres ton ordi
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
3) Tu verras un écran avec options de démarrage apparaître
4) Choisis la première option : Sans Échec, et valide avec "Entrée"
5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)

Désinstalle via Ajout/Suppression de Programmes (si présents) :

* Avast!

ensuite execute le desinstaller

Ceci effacera la majorité des traces du produit Avast! d'Alwil Software.

redemarre

Télécharge Ccleaner sur ton Bureau. :

* Clique sur "download the latest version"
* Installe-le en laissant seulement les options suivantes cochées :

- Ajouter un raccourci sur le Bureau
- Contrôler automatiquement les mises à jour de CCleaner

* Lance le Nettoyage
* Clique sur Chercher des erreurs et sauvegarde si tu le souhaites.

plus de precision sur la configuration de ccleaner te seront donnees plus tard

tuto Comment utiliser CCleaner.
***************

Télécharge Antivir en Francais ou Antivir en Francais sur ton Bureau.:

* Double clique sur l'exécutable téléchargé pour lancer l'installation.
* À la fin de l'installation, clique sur Finish.
* Ouvre Antivir, assure-toi qu’il soit bien à jour !
* Dans l'onglet Protection Locale, choisis Contrôler.
* Active la recherche de rootkits via le + de Recherche de Rootkits, puis dans Sélection manuelle, coche tout (tes partitions de disque dur).
* Clique sur la loupe du milieu pour lancer le scan en tant qu'Administrateur.
* Poste moi le rapport généré : Pour cela, clique sur l'onglet Aperçu, puis choisis Rapports, tu trouveras son rapport..
* Sélectionne le rapport et clique sur l'icône "Afficher le fichier de rapport du rapport sélectionné.

Note : Pour une éradication des menaces plus efficace, lance le scan en mode sans échec.

Pourquoi changer ? :Avast Vs Antivir

Tuto Antivir: Comment installer et utiliser AntiVir.

***************************************
Une fois AntiVir ouvert, clique sur "configuration" et coche la case " mode expert " :
* mets toi sur "scanner"/"recherche" (à gauche) -> dans "fichiers", coche tous les fichiers et en dessous dans priorité scanner= élevé .
coche aussi : autorisé l'arrêt , comme cela tu peux faire une pause pendant le scan si tu le desir.
* toujours dans "recherche" -> " Autres réglages ", coche les cases suivantes :

>secteur d'amorçage lecteurs de rech.

>Contrôler secteurs d'amorçage maître

>Suivre les liens symboliques

>Rech.Rootkit au dém. de la recherche

et décoche :

ignorer les fichiers hors ligne

* mets toi sur "scanner"/"recherche"/ "heuristique" -> Heuristique macrovirus= coché, et en dessous coche activer AHeADet coche la case degré d'identification moyen ...

---> clique sur "OK" pour valider le réglage ...
****************************************

salut
c fait

ok tu me donnes le rapport de scan ?

non ca c est le rapport d'installation

tu as fait un scan avec antivir deja ?