[Résolu] "you're privacy in danger"

Bonjour,

Télécharge puis installe Hijackthis (Trend Micro).
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

Re,

Télécharge Smitfraudfix (de S!ri).
Enregistre-le sur ton bureau.
Lance SmitfraudFix.exe (le .exe peut ne pas apparaitre).
Choisis l'Option 1 (Recherche)
Poste le premier rapport ici.

**Si le lien ne fonctionne pas, clique ici**

Re,

Redémarre en mode sans échec

Lance SmitfraudFix.exe et choisis cette fois l'Option 2 et réponds oui à la ou les questions.
Sauvegarde le rapport sur ton Bureau.

Redémarre normalement.

Poste les rapports Hijackthis et SmitfraudFix.

Et voici aussi le Second rapport SmitfraudFix :


SmitFraudFix v2.273

Rapport fait à 21:23:50,18, 19/12/2007
Executé à partir de C:\Documents and Settings\Propri%u201Ataire\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{5449A350-8786-4C9B-8970-19C7C23A5C83}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5449A350-8786-4C9B-8970-19C7C23A5C83}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\..\{5449A350-8786-4C9B-8970-19C7C23A5C83}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Désoler pour l'atente, le scan est long .

J'ais recommencé un scan, je n'avais pas fais la mise à jour d'Antivir:


AntiVir PersonalEdition Classic
Report file date: mercredi 19 décembre 2007 22:25

Scanning for 981559 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: LEX

Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 21:24:17
ANTIVIR2.VDF : 7.0.1.96 2048 Bytes 14/12/2007 21:24:17
ANTIVIR3.VDF : 7.0.1.123 122368 Bytes 19/12/2007 21:24:17
AVEWIN32.DLL : 7.6.0.46 3084800 Bytes 19/12/2007 21:24:18
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.2 360488 Bytes 19/12/2007 21:24:19
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mercredi 19 décembre 2007 22:25

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'raid_tool.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'apdproxy.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
35 processes with 35 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '26' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Propriétaire\Bureau\SmitfraudFix.zip
[0] Archive type: ZIP
--> SmitfraudFix/IEDFix.exe
[DETECTION] Is the Trojan horse TR/BHO.agh
[INFO] The file was moved to '47d28ccd.qua'!
C:\Documents and Settings\Propriétaire\Bureau\SmitfraudFix\IEDFix.exe
[DETECTION] Is the Trojan horse TR/BHO.agh
[INFO] The file was moved to '47ad8d87.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP50\A0007174.exe
[DETECTION] Contains detection pattern of the dropper DR/Zlob.Gen
[INFO] The file was moved to '47999058.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP50\A0007175.exe
[DETECTION] Contains detection pattern of the dropper DR/Zlob.Gen
[INFO] The file was moved to '4799905b.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0009099.dll
[DETECTION] Is the Trojan horse TR/Gorshok.A
[INFO] The file was moved to '47999061.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0009110.dll
[DETECTION] Is the Trojan horse TR/Gorshok.A
[INFO] The file was moved to '47999066.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0010109.dll
[DETECTION] Is the Trojan horse TR/Zlob.DCC
[INFO] The file was moved to '47999069.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0010111.dll
[DETECTION] Is the Trojan horse TR/Zlob.DCA
[INFO] The file was moved to '4799906b.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0010121.exe
[DETECTION] Is the Trojan horse TR/BHO.agh
[INFO] The file was moved to '4799906f.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0010125.dll
[DETECTION] Is the Trojan horse TR/Gorshok.A
[INFO] The file was moved to '47999071.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0010144.dll
[DETECTION] Is the Trojan horse TR/Gorshok.A
[INFO] The file was moved to '47999073.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP52\A0011148.dll
[DETECTION] Is the Trojan horse TR/Gorshok.A
[INFO] The file was moved to '47999076.qua'!
C:\System Volume Information\_restore{307C1130-BC23-4CB7-A07F-AFC2246E6A81}\RP53\A0011233.exe
[DETECTION] Is the Trojan horse TR/BHO.agh
[INFO] The file was moved to '4799907b.qua'!
C:\WINDOWS\system32\IEDFix.exe
[DETECTION] Is the Trojan horse TR/BHO.agh
[INFO] The file was moved to '47ad91bc.qua'!


End of the scan: mercredi 19 décembre 2007 22:49
Used time: 24:15 min

The scan has been done completely.

3106 Scanning directories
191457 Files were scanned
14 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
14 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
191443 Files not concerned
1446 Archives were scanned
1 Warnings
0 Notes

Beaucoups de problèmes ont jusqu'à maintenent été résolu comme par exemple : plus de pop up, plus ce fond d'écran ....

Le seul problème qu'il reste est celui du gestionnaire des tâches.





Rapport Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:46:26, on 20/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Driv [...] eqlab2.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: WinFast(R) Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

--
End of file - 7459 bytes

Je n'ai aussi plus acces a mon gestionnaire de tâche, quand je fais CTRL+ALT+SUPPR un message d'erreur s'affiche :" Le gestionnaire des tâches a été désactivé par votre administrateur, alors que je suis bien logger en tant qu'admin.

rapport combofix :

ComboFix 07-12-20.1 - Propriétaire 2007-12-20 18:29:08.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.164 [GMT 1:00]Running from: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Propriétaire\Favoris\Error Cleaner.url
C:\Documents and Settings\Propriétaire\Favoris\Privacy Protector.url
C:\Documents and Settings\Propriétaire\Favoris\Spyware&Malware Protection.url
C:\WINDOWS\dat.txt
C:\WINDOWS\rs.txt
C:\WINDOWS\search_res.txt

.
((((((((((((((((((((((((((((( Fichiers créés 2007-11-20 to 2007-12-20 ))))))))))))))))))))))))))))))))))))
.

2007-12-20 15:41 . 2007-12-20 15:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\HP
2007-12-20 15:40 . 2007-12-20 15:40 <REP> d-------- C:\Program Files\Fichiers communs\HP
2007-12-20 15:38 . 2007-12-20 15:38 <REP> d-------- C:\Program Files\Hewlett-Packard
2007-12-20 15:37 . 2007-12-20 15:37 <REP> d-------- C:\Program Files\Fichiers communs\Hewlett-Packard
2007-12-20 15:35 . 2007-12-20 15:36 <REP> d-------- C:\WINDOWS\system32\URTTemp
2007-12-20 15:34 . 2004-12-14 18:06 51,120 -ra------ C:\WINDOWS\system32\drivers\HPZid412.sys
2007-12-20 15:34 . 2004-12-14 18:06 21,744 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys
2007-12-20 15:34 . 2004-12-14 18:06 16,496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys
2007-12-20 15:33 . 2007-12-20 15:33 <REP> d-------- C:\WINDOWS\LastGood
2007-12-20 15:33 . 2004-09-29 12:12 278,584 --a------ C:\WINDOWS\system32\HPZidr12.dll
2007-12-20 15:33 . 2004-09-29 12:15 204,800 --a------ C:\WINDOWS\system32\HPZipr12.dll
2007-12-20 15:33 . 2004-09-29 12:09 94,208 --a------ C:\WINDOWS\system32\HPZipt12.dll
2007-12-20 15:33 . 2004-09-29 12:14 69,632 --a------ C:\WINDOWS\system32\HPZipm12.exe
2007-12-20 15:33 . 2004-09-29 12:08 61,440 --a------ C:\WINDOWS\system32\HPZinw12.exe
2007-12-20 15:33 . 2004-09-29 12:09 57,344 --a------ C:\WINDOWS\system32\HPZisn12.dll
2007-12-20 15:33 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-12-20 15:33 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2007-12-20 15:32 . 2007-12-20 15:41 <REP> d-------- C:\Program Files\HP
2007-12-20 15:30 . 2007-12-20 15:43 69,662 --a------ C:\WINDOWS\hpoins05.dat
2007-12-20 15:30 . 2004-12-14 18:06 19,696 --------- C:\WINDOWS\hpomdl05.dat
2007-12-19 21:49 . 2007-12-19 21:49 <REP> d-------- C:\Program Files\Avira
2007-12-19 21:49 . 2007-12-19 21:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2007-12-19 21:11 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-12-19 21:11 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-12-19 21:11 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-12-19 21:11 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-12-19 21:11 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-12-19 20:24 . 2007-12-19 21:23 2,464 --a------ C:\WINDOWS\system32\tmp.reg
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-12-19 20:22 . 2007-11-27 18:13 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2007-12-19 20:22 . 2007-11-27 19:06 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2007-12-19 15:45 . 2007-12-19 15:45 <REP> d-------- C:\Program Files\Alwil Software
2007-12-19 15:27 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-12-19 15:27 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2007-12-19 08:37 . 2007-12-19 09:07 <REP> d-------- C:\Program Files\MediaVideoCodec
2007-12-17 09:26 . 2007-12-17 09:26 <REP> d-------- C:\Temp
2007-12-16 21:54 . 2007-12-19 11:45 <REP> d-------- C:\Remote Programs
2007-12-16 21:53 . 2007-05-27 12:33 53,314 --------- C:\WINDOWS\ExentInfo.exe
2007-12-16 21:51 . 2007-12-17 09:29 <REP> d-------- C:\Program Files\Player Metaboli
2007-12-11 21:05 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\All Users\SonicStage
2007-12-11 21:01 . 2007-12-11 21:01 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sony Corporation
2007-12-11 21:00 . 2007-12-11 21:02 <REP> d-------- C:\Program Files\Sony
2007-12-11 20:59 . 2007-12-11 21:00 <REP> d-------- C:\Program Files\Fichiers communs\Sony Shared
2007-12-11 20:59 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Sony Corporation
2007-12-11 20:59 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Sony Corporation
2007-12-11 20:59 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Sony Corporation
2007-12-11 20:50 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2007-12-11 10:35 . 2007-12-11 10:36 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2007-12-11 10:32 . 2007-12-11 10:32 <REP> d-------- C:\WINDOWS\Downloaded Installations
2007-12-08 12:37 . 2007-12-13 13:37 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\DivX
2007-12-08 12:37 . 2007-12-13 13:37 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\DivX
2007-12-08 12:37 . 2007-12-13 13:37 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\DivX
2007-12-08 12:36 . 2007-12-08 12:36 <REP> d-------- C:\Program Files\DivX
2007-12-08 12:36 . 2007-11-29 23:30 120,056 --------- C:\WINDOWS\system32\pxcpyi64.exe
2007-12-08 12:36 . 2007-11-29 23:30 118,520 --------- C:\WINDOWS\system32\pxinsi64.exe
2007-12-08 12:30 . 2007-12-08 12:30 <REP> d-------- C:\Program Files\Windows Media Connect 2
2007-12-08 12:29 . 2007-12-08 12:29 <REP> d-------- C:\WINDOWS\system32\LogFiles
2007-12-08 12:29 . 2007-12-08 12:30 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-12-06 10:45 . 2004-08-05 13:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-12-06 10:35 . 2007-12-20 10:08 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\OpenOffice.org2
2007-12-06 10:35 . 2007-12-20 10:08 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\OpenOffice.org2
2007-12-06 10:35 . 2007-12-20 10:08 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\OpenOffice.org2
2007-12-05 10:24 . 2007-12-05 10:44 <REP> d-------- C:\Program Files\BackgammonMasters
2007-12-05 10:24 . 2007-12-05 10:25 32,854 --a------ C:\WINDOWS\iniLS.dat
2007-12-04 17:03 . 2007-12-04 17:04 <REP> d-------- C:\Program Files\OpenOffice.org 2.3
2007-12-04 02:33 . 2007-12-04 02:33 823,296 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2007-12-04 02:33 . 2007-12-04 02:33 823,296 --a------ C:\WINDOWS\system32\divx_xx07.dll
2007-12-04 02:33 . 2007-12-04 02:33 802,816 --a------ C:\WINDOWS\system32\divx_xx11.dll
2007-12-04 02:33 . 2007-12-04 02:33 682,496 --a------ C:\WINDOWS\system32\DivX.dll
2007-12-04 02:33 . 2007-12-04 02:33 630,784 --a------ C:\WINDOWS\system32\divxdec.ax
2007-12-03 11:34 . 2007-12-03 11:34 <REP> d-------- C:\WINDOWS\Sun
2007-12-03 11:33 . 2007-12-04 17:03 <REP> d-------- C:\Program Files\Java
2007-12-03 11:33 . 2007-12-03 11:35 <REP> d-------- C:\Program Files\Google
2007-12-03 11:33 . 2007-12-03 11:33 <REP> d-------- C:\Program Files\Fichiers communs\Java
2007-12-03 11:33 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-11-30 20:40 . 2007-11-30 22:15 <REP> d-------- C:\Program Files\WowCartographe
2007-11-29 23:30 . 2007-11-29 23:30 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-11-29 23:30 . 2007-11-29 23:30 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-11-29 23:30 . 2007-11-29 23:30 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
2007-11-29 23:30 . 2007-11-29 23:30 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-11-29 23:30 . 2007-11-29 23:30 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm
2007-11-29 23:30 . 2007-11-29 23:30 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb
2007-11-29 23:28 . 2007-11-29 23:28 196,608 --a------ C:\WINDOWS\system32\dtu100.dll
2007-11-29 23:28 . 2007-11-29 23:28 81,920 --a------ C:\WINDOWS\system32\dpl100.dll
2007-11-29 23:28 . 2007-11-29 23:28 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest
2007-11-29 23:28 . 2007-11-29 23:28 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest
2007-11-28 22:55 . 2007-11-28 22:55 156,992 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-11-28 22:53 . 2007-11-28 22:53 593,920 --a------ C:\WINDOWS\system32\dpuGUI11.dll
2007-11-28 22:53 . 2007-11-28 22:53 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax
2007-11-28 22:53 . 2007-11-28 22:53 344,064 --a------ C:\WINDOWS\system32\dpus11.dll
2007-11-28 22:53 . 2007-11-28 22:53 294,912 --a------ C:\WINDOWS\system32\dpu11.dll
2007-11-28 22:53 . 2007-11-28 22:53 294,912 --a------ C:\WINDOWS\system32\dpu10.dll
2007-11-28 22:53 . 2007-11-28 22:53 57,344 --a------ C:\WINDOWS\system32\dpv11.dll
2007-11-28 22:53 . 2007-11-28 22:53 53,248 --a------ C:\WINDOWS\system32\dpuGUI10.dll
2007-11-28 22:52 . 2007-11-28 22:52 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2007-11-28 22:52 . 2007-11-28 22:52 8,835 --a------ C:\WINDOWS\system32\dpufr.qm

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-11 20:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-29 22:30 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2007-11-28 07:05 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2007-11-27 20:52 --------- d-----w C:\Program Files\SystemRequirementsLab
2007-11-27 17:38 --------- d-----w C:\Program Files\Leadtek
2007-11-27 17:31 --------- d-----w C:\Program Files\VIAudioi
2007-11-27 17:31 --------- d-----w C:\Program Files\VIA
2007-11-27 17:18 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-27 17:16 --------- d-----w C:\Program Files\Services en ligne
2007-11-27 17:15 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-18 10:31 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-12-05 12:14]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AudioDeck"="C:\Program Files\VIAudioi\SBADeck\ADeck.exe" [2004-06-24 03:28]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2005-07-20 21:07 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 06:28]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [2007-03-16 11:45]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-19 22:24]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2004-09-13 15:49]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"HPWebUpdate"="" []

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00]

C:\Documents and Settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 22:57:56]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
D‚marrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-04 19:50:52]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-04 19:28:24]
VIA RAID TOOL.lnk - C:\Program Files\VIA\RAID\raid_tool.exe [2007-11-27 18:31:19]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= file:///C:\WINDOWS\privacy_danger\index.htm
FriendlyName= Privacy Protection

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2004-03-29 06:45]
R2 X4HSX32;X4HSX32;C:\Program Files\Player Metaboli\X4HSX32.Sys [2006-12-13 09:34]
R3 GETNDIS;VIA Networking Velocity Family Giga-bit Ethernet Adapter Driver;C:\WINDOWS\system32\DRIVERS\getnd5b.sys [2003-09-02 11:22]
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f6a1742-9d13-11dc-aca3-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe

*Newly Created Service* - CATCHME
*Newly Created Service* - PML_DRIVER_HPZ12
*Newly Created Service* - PROCEXP90
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-20 18:33:03
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-20 18:33:42
.
2007-12-13 02:03:48 --- E O F ---

Oups, petite erreur de ma part, je n'ai pas désactiver ma protection résidente. Je sais pas si celà compte mais je te redonne le rapport combofix :


ComboFix 07-12-20.1 - Propriétaire 2007-12-21 18:42:45.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.491 [GMT 1:00]
Running from: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe
.

((((((((((((((((((((((((((((( Fichiers créés 2007-11-21 to 2007-12-21 ))))))))))))))))))))))))))))))))))))
.

2007-12-20 15:41 . 2007-12-20 15:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\HP
2007-12-20 15:40 . 2007-12-20 15:40 <REP> d-------- C:\Program Files\Fichiers communs\HP
2007-12-20 15:38 . 2007-12-20 15:38 <REP> d-------- C:\Program Files\Hewlett-Packard
2007-12-20 15:37 . 2007-12-20 15:37 <REP> d-------- C:\Program Files\Fichiers communs\Hewlett-Packard
2007-12-20 15:35 . 2007-12-20 15:36 <REP> d-------- C:\WINDOWS\system32\URTTemp
2007-12-20 15:34 . 2004-12-14 18:06 51,120 -ra------ C:\WINDOWS\system32\drivers\HPZid412.sys
2007-12-20 15:34 . 2004-12-14 18:06 21,744 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys
2007-12-20 15:34 . 2004-12-14 18:06 16,496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys
2007-12-20 15:33 . 2007-12-20 15:33 <REP> d-------- C:\WINDOWS\LastGood
2007-12-20 15:33 . 2004-09-29 12:12 278,584 --a------ C:\WINDOWS\system32\HPZidr12.dll
2007-12-20 15:33 . 2004-09-29 12:15 204,800 --a------ C:\WINDOWS\system32\HPZipr12.dll
2007-12-20 15:33 . 2004-09-29 12:09 94,208 --a------ C:\WINDOWS\system32\HPZipt12.dll
2007-12-20 15:33 . 2004-09-29 12:14 69,632 --a------ C:\WINDOWS\system32\HPZipm12.exe
2007-12-20 15:33 . 2004-09-29 12:08 61,440 --a------ C:\WINDOWS\system32\HPZinw12.exe
2007-12-20 15:33 . 2004-09-29 12:09 57,344 --a------ C:\WINDOWS\system32\HPZisn12.dll
2007-12-20 15:33 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-12-20 15:33 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2007-12-20 15:32 . 2007-12-20 15:41 <REP> d-------- C:\Program Files\HP
2007-12-20 15:30 . 2007-12-20 15:43 69,662 --a------ C:\WINDOWS\hpoins05.dat
2007-12-20 15:30 . 2004-12-14 18:06 19,696 --------- C:\WINDOWS\hpomdl05.dat
2007-12-19 21:49 . 2007-12-19 21:49 <REP> d-------- C:\Program Files\Avira
2007-12-19 21:49 . 2007-12-19 21:49 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2007-12-19 21:11 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-12-19 21:11 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-12-19 21:11 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-12-19 21:11 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-12-19 21:11 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-12-19 20:24 . 2007-12-19 21:23 2,464 --a------ C:\WINDOWS\system32\tmp.reg
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-12-19 20:22 . 2007-11-27 18:13 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2007-12-19 20:22 . 2007-11-27 19:06 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2007-12-19 20:22 . 2007-11-27 19:06 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2007-12-19 15:45 . 2007-12-19 15:45 <REP> d-------- C:\Program Files\Alwil Software
2007-12-19 15:27 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-12-19 15:27 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2007-12-19 08:37 . 2007-12-19 09:07 <REP> d-------- C:\Program Files\MediaVideoCodec
2007-12-17 09:26 . 2007-12-17 09:26 <REP> d-------- C:\Temp
2007-12-16 21:54 . 2007-12-19 11:45 <REP> d-------- C:\Remote Programs
2007-12-16 21:53 . 2007-05-27 12:33 53,314 --------- C:\WINDOWS\ExentInfo.exe
2007-12-16 21:51 . 2007-12-17 09:29 <REP> d-------- C:\Program Files\Player Metaboli
2007-12-11 21:05 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\All Users\SonicStage
2007-12-11 21:01 . 2007-12-11 21:01 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sony Corporation
2007-12-11 21:00 . 2007-12-11 21:02 <REP> d-------- C:\Program Files\Sony
2007-12-11 20:59 . 2007-12-11 21:00 <REP> d-------- C:\Program Files\Fichiers communs\Sony Shared
2007-12-11 20:59 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Sony Corporation
2007-12-11 20:59 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Sony Corporation
2007-12-11 20:59 . 2007-12-11 21:05 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\Sony Corporation
2007-12-11 20:50 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2007-12-11 10:35 . 2007-12-11 10:36 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2007-12-11 10:32 . 2007-12-11 10:32 <REP> d-------- C:\WINDOWS\Downloaded Installations
2007-12-08 12:37 . 2007-12-13 13:37 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\DivX
2007-12-08 12:37 . 2007-12-13 13:37 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\DivX
2007-12-08 12:37 . 2007-12-13 13:37 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\DivX
2007-12-08 12:36 . 2007-12-08 12:36 <REP> d-------- C:\Program Files\DivX
2007-12-08 12:36 . 2007-11-29 23:30 120,056 --------- C:\WINDOWS\system32\pxcpyi64.exe
2007-12-08 12:36 . 2007-11-29 23:30 118,520 --------- C:\WINDOWS\system32\pxinsi64.exe
2007-12-08 12:30 . 2007-12-08 12:30 <REP> d-------- C:\Program Files\Windows Media Connect 2
2007-12-08 12:29 . 2007-12-08 12:29 <REP> d-------- C:\WINDOWS\system32\LogFiles
2007-12-08 12:29 . 2007-12-08 12:30 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-12-06 10:45 . 2004-08-05 13:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-12-06 10:35 . 2007-12-20 10:08 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\OpenOffice.org2
2007-12-06 10:35 . 2007-12-20 10:08 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\OpenOffice.org2
2007-12-06 10:35 . 2007-12-20 10:08 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\OpenOffice.org2
2007-12-05 10:24 . 2007-12-05 10:44 <REP> d-------- C:\Program Files\BackgammonMasters
2007-12-05 10:24 . 2007-12-05 10:25 32,854 --a------ C:\WINDOWS\iniLS.dat
2007-12-04 17:03 . 2007-12-04 17:04 <REP> d-------- C:\Program Files\OpenOffice.org 2.3
2007-12-04 02:33 . 2007-12-04 02:33 823,296 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2007-12-04 02:33 . 2007-12-04 02:33 823,296 --a------ C:\WINDOWS\system32\divx_xx07.dll
2007-12-04 02:33 . 2007-12-04 02:33 802,816 --a------ C:\WINDOWS\system32\divx_xx11.dll
2007-12-04 02:33 . 2007-12-04 02:33 682,496 --a------ C:\WINDOWS\system32\DivX.dll
2007-12-04 02:33 . 2007-12-04 02:33 630,784 --a------ C:\WINDOWS\system32\divxdec.ax
2007-12-03 11:34 . 2007-12-03 11:34 <REP> d-------- C:\WINDOWS\Sun
2007-12-03 11:33 . 2007-12-04 17:03 <REP> d-------- C:\Program Files\Java
2007-12-03 11:33 . 2007-12-03 11:35 <REP> d-------- C:\Program Files\Google
2007-12-03 11:33 . 2007-12-03 11:33 <REP> d-------- C:\Program Files\Fichiers communs\Java
2007-12-03 11:33 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-11-30 20:40 . 2007-11-30 22:15 <REP> d-------- C:\Program Files\WowCartographe
2007-11-29 23:30 . 2007-11-29 23:30 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-11-29 23:30 . 2007-11-29 23:30 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-11-29 23:30 . 2007-11-29 23:30 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
2007-11-29 23:30 . 2007-11-29 23:30 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-11-29 23:30 . 2007-11-29 23:30 9,878 --a------ C:\WINDOWS\system32\dsm_fr.qm
2007-11-29 23:30 . 2007-11-29 23:30 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb
2007-11-29 23:28 . 2007-11-29 23:28 196,608 --a------ C:\WINDOWS\system32\dtu100.dll
2007-11-29 23:28 . 2007-11-29 23:28 81,920 --a------ C:\WINDOWS\system32\dpl100.dll
2007-11-29 23:28 . 2007-11-29 23:28 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest
2007-11-29 23:28 . 2007-11-29 23:28 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest
2007-11-28 22:55 . 2007-11-28 22:55 156,992 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-11-28 22:53 . 2007-11-28 22:53 593,920 --a------ C:\WINDOWS\system32\dpuGUI11.dll
2007-11-28 22:53 . 2007-11-28 22:53 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax
2007-11-28 22:53 . 2007-11-28 22:53 344,064 --a------ C:\WINDOWS\system32\dpus11.dll
2007-11-28 22:53 . 2007-11-28 22:53 294,912 --a------ C:\WINDOWS\system32\dpu11.dll
2007-11-28 22:53 . 2007-11-28 22:53 294,912 --a------ C:\WINDOWS\system32\dpu10.dll
2007-11-28 22:53 . 2007-11-28 22:53 57,344 --a------ C:\WINDOWS\system32\dpv11.dll
2007-11-28 22:53 . 2007-11-28 22:53 53,248 --a------ C:\WINDOWS\system32\dpuGUI10.dll
2007-11-28 22:52 . 2007-11-28 22:52 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2007-11-28 22:52 . 2007-11-28 22:52 8,835 --a------ C:\WINDOWS\system32\dpufr.qm

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-11 20:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-29 22:30 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2007-11-28 07:05 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2007-11-27 20:52 --------- d-----w C:\Program Files\SystemRequirementsLab
2007-11-27 17:38 --------- d-----w C:\Program Files\Leadtek
2007-11-27 17:31 --------- d-----w C:\Program Files\VIAudioi
2007-11-27 17:31 --------- d-----w C:\Program Files\VIA
2007-11-27 17:18 --------- d-----w C:\Program Files\microsoft frontpage
2007-11-27 17:16 --------- d-----w C:\Program Files\Services en ligne
2007-11-27 17:15 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-18 10:31 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
.

((((((((((((((((((((((((((((( snapshot@2007-12-20_18.33.08,01 )))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-12-05 12:14]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AudioDeck"="C:\Program Files\VIAudioi\SBADeck\ADeck.exe" [2004-06-24 03:28]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2005-07-20 21:07 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-05 13:00 C:\WINDOWS\system32\rundll32.exe]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-10-10 06:28]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [2007-03-16 11:45]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-12-19 22:24]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2004-09-13 15:49]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"HPWebUpdate"="" []

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00]

C:\Documents and Settings\Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 22:57:56]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
D‚marrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2004-11-04 19:50:52]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-04 19:28:24]
VIA RAID TOOL.lnk - C:\Program Files\VIA\RAID\raid_tool.exe [2007-11-27 18:31:19]

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= file:///C:\WINDOWS\privacy_danger\index.htm
FriendlyName= Privacy Protection

R0 viamraid;viamraid;C:\WINDOWS\system32\DRIVERS\viamraid.sys [2004-03-29 06:45]
R2 X4HSX32;X4HSX32;C:\Program Files\Player Metaboli\X4HSX32.Sys [2006-12-13 09:34]
R3 GETNDIS;VIA Networking Velocity Family Giga-bit Ethernet Adapter Driver;C:\WINDOWS\system32\DRIVERS\getnd5b.sys [2003-09-02 11:22]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

*Newly Created Service* - CATCHME
*Newly Created Service* - PML_DRIVER_HPZ12
*Newly Created Service* - PROCEXP90
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-21 18:44:02
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-21 18:44:51
C:\ComboFix2.txt ... 2007-12-20 18:33
.
2007-12-13 02:03:48 --- E O F ---

Je viens de remarquer que mon gestionnaire des tâches est revenu, et que tous mes autres problèmes précédent ont disparus aussi .


Je te remercie énormément AngelDark pour ton aide, sans quoi je n'aurais pas pu m'en sortir tout seul.

Encore merci !

Et voici le rapport ToolsCleaner :


-->- Recherche:

C:\Qoobox: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\SmitFraudfix: trouvé !
C:\Documents and Settings\Propriétaire\Recent\HijackThis.lnk: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\HijackThis.exe: supprimé !
C:\Documents and Settings\Propriétaire\Recent\HijackThis.lnk: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\SmitFraudfix: supprimé !

Fichiers temporaires nettoyés !
Corbeille vidée!




Il sagissait bien d'un faux codec. Encore merci pour ton aide je serais plus vigilant.
./kiss

Je rappelle que vous êtes géniaux

Bonjour Angeldark,

J'ai un gros souci avec privacy danger. Il a déjà été enlevé plusieurs fois avec smit fraud mais il revient encore et toujours. Peux-tu m'aider à résoudre ce problème s'il te plaît?

Je t'envoie le rapport comme on m'a dit de faire dans "comment utiliser hijackthis.

Merci beaucoup.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:35:07, on 28/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wpabaln.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SXG Advisor - {44C762DC-7ECB-4D32-8A74-117CB882F10B} - C:\WINDOWS\dpvtporpxn.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: elfwgps - {339074ED-B124-4693-AC31-6BCC08B76030} - C:\WINDOWS\elfwgps.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [NI.UGA6PV_0001_N122M2910] "C:\Documents and Settings\celine\Mes documents\telecharger\install_fr.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_SA3.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\\SmartDoctor.exe /start
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O21 - SSODL: aswmklt - {629915DD-EE30-4C24-B4C2-E5B16163282C} - C:\WINDOWS\aswmklt.dll
O21 - SSODL: bqxomdo - {EB670CC5-6F5F-4B82-98E7-D58D2E2B9761} - C:\WINDOWS\bqxomdo.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

--
End of file - 6431 bytes