Problème virus ...

si ca peut aider voici un scan avec HijackThis

Logfile of HijackThis v1.99.1
Scan saved at 14:30:59, on 10/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\Documents and Settings\Clem et Titou\Bureau\dfg.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunServices: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolb [...] xdm451YYFR
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: c:\program,files\premieropinion\pmai.dll,c:\program files\premieropinion\pmai.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: zoneclim32 - C:\WINDOWS\SYSTEM32\zoneclim32.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\maconfservice.exe (file missing)
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Zone Client Library (zoneclim32) - Unknown owner - rundll32.exe (file missing)

voici le 1er rapport:

-----------\\ ToolBar S&D 1.2.6 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : Default System BIOS
USER : Clem et Titou ( Administrator )
BOOT : Normal boot
Antivirus : McAfee VirusScan Enterprise 8.5.0.781 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:78 Go (Free:9 Go)
D:\ (Local Disk) - NTFS - Total:154 Go (Free:26 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (CD or DVD)
J:\ (CD or DVD)
K:\ (USB)

"C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
Option : [1] ( 2008-12-10|15:31 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\CLEMET~1\Cookies\clem_et_titou@mywebsearch[1].txt
C:\DOCUME~1\CLEMET~1\APPLIC~1\Search Settings
C:\DOCUME~1\CLEMET~1\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\CLEMET~1\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\CLEMET~1\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Mary\APPLIC~1\Search Settings
C:\DOCUME~1\Mary\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Mary\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Mary\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Mary\APPLIC~1\Search Settings\kb127\temp\ws-14163.log

-----------\\ Extensions

(Clem et Titou) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar
(Clem et Titou) - {a50b11b9-8495-450d-a90a-0b6be34abe9e} => foxtorrent


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.google.fr/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"


--------------------\\ Recherche d'autres infections

--------------------\\ ROOTKIT !!

Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Enum\Root\LEGACY_SROSA]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\srosa]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\srosa]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\srosa]

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\CLEMET~1\Application Data\uTorrent\Adobe Premiere Pro CS3 Multi-language Incl Crack & Instructions.torrent
C:\DOCUME~1\CLEMET~1\Application Data\uTorrent\Adobe Premiere Pro v2.0 + Crack [App][MULTI][www.zonatorrent.com].torrent
C:\DOCUME~1\CLEMET~1\Application Data\uTorrent\crack et SN pour code gear delphi 2007.torrent
C:\DOCUME~1\CLEMET~1\Application Data\uTorrent\rld-ra3cCRACKFIXcampaign.rar.torrent
C:\DOCUME~1\CLEMET~1\Application Data\uTorrent\STALKER.CLEAR.SKY.WITH.CRACK-MAVERICK.iso.torrent



1 - "C:\ToolBar SD\TB_1.txt" - 2008-12-10|15:31 - Option : [1]

-----------\\ Fin du rapport a 15:31:55.98

et enfin rapport DDS :

DDS (Version 1.0) - NTFSx86
Run by Clem et Titou at 16:47:28.89 on 2008-12-10
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1023.549 [GMT 1:00]

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\rundll32.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Documents and Settings\Clem et Titou\Bureau\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.fr/
uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: {02478D38-C3F9-4EFB-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: {0347C33E-8762-4905-BF09-768834316C61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\fichiers communs\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: {6A87B991-A31F-4130-AE72-6D0C294BF082} - c:\program files\dealio\kb127\Dealio.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan enterprise\Scriptcl.dll
BHO: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - c:\program files\dealio\kb127\Dealio.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [McAfeeUpdaterUI] "c:\program files\mcafee\common framework\UdaterUI.exe" /StartedFromRunKey
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [LVCOMSX] c:\windows\system32\LVCOMSX.EXE
mRun: [ShStatEXE] "c:\program files\mcafee\virusscan enterprise\SHSTAT.EXE" /STANDALONE
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRunServices: [Keyboard Manager] c:\program files\netropa\one-touch multimedia keyboard\MMKeybd.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\menudm~1\progra~1\dmarra~1\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: &Search - http://edits.mywebsearch.com/toolb [...] xdm451YYFR
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Notify: AtiExtEvent - Ati2evxx.dll
Notify: zoneclim32 - zoneclim32.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 appdrv01;Application Driver (01);c:\windows\system32\drivers\appdrv01.sys [2008-9-19 2915944]
R1 mferkdk;VSCore mferkdk;\??\c:\program files\mcafee\virusscan enterprise\mferkdk.sys [2006-11-30 31944]
R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\drivers\msikbd2k.sys [2008-11-25 6783]
R2 McTaskManager;McAfee Task Manager;"c:\program files\mcafee\virusscan enterprise\VsTskMgr.exe" [2007-2-22 54872]
R2 zoneclim32;Zone Client Library;rundll32.exe c:\windows\system32\zoneclim32.dll,yloj []
S1 aswSP;avast! Self Protection; []
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\system32\appdrvrem01.exe svc []
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys []
S2 McShield;McAfee McShield;"c:\program files\mcafee\virusscan enterprise\Mcshield.exe" [2007-2-22 144960]
S3 jatmlano;jatmlano;\??\c:\docume~1\clemet~1\locals~1\temp\jatmlano.sys []
S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" []
S3 mfeavfk;McAfee Inc.;c:\windows\system32\drivers\mfeavfk.sys [2007-10-31 72264]
S3 mfebopk;McAfee Inc.;c:\windows\system32\drivers\mfebopk.sys [2007-10-31 34152]
S3 mfehidk;McAfee Inc.;c:\windows\system32\drivers\mfehidk.sys [2007-10-31 170408]
S3 mirrorv3;mirrorv3;c:\windows\system32\drivers\rminiv3.sys [2006-11-1 3328]
S3 XDva032;XDva032;\??\c:\windows\system32\XDva032.sys []
S3 zlportio;zlportio;\??\d:\program files\ultrastar\zlportio.sys []
S4 avast! Antivirus;avast! Antivirus;"c:\program files\alwil software\avast4\ashServ.exe" [2008-12-10 155160]
S4 avast! Mail Scanner;avast! Mail Scanner;"c:\program files\alwil software\avast4\ashMaiSv.exe" /service [2008-12-10 254040]
S4 avast! Web Scanner;avast! Web Scanner;"c:\program files\alwil software\avast4\ashWebSv.exe" /service [2008-12-10 352920]
S4 McAfeeFramework;McAfee Framework Service;"c:\program files\mcafee\common framework\FrameworkService.exe" /ServiceStart [2008-10-12 104000]

=============== Created Last 30 ================

2008-12-10 15:35 250 a------- c:\windows\gmer.ini
2008-12-10 15:31 <DIR> --d----- C:\ToolBar SD
2008-12-10 15:28 401,408 a------- c:\windows\system32\CF3706.exe
2008-12-10 15:28 <DIR> --d----- C:\vgggggg
2008-12-10 14:48 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2008-12-10 14:48 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2008-12-09 22:24 <DIR> --d-h--- c:\docume~1\clemet~1\applic~1\drivers
2008-12-07 09:19 <DIR> --d----- C:\Downloads
2008-12-06 23:32 <DIR> --d----- c:\program files\Free Download Manager
2008-12-05 21:42 <DIR> --d----- c:\program files\Common Files
2008-12-05 21:29 <DIR> --d----- c:\program files\100%Naruto v2
2008-12-05 18:36 <DIR> --d----- c:\program files\Meegos Creator
2008-12-02 17:38 <DIR> --d----- c:\program files\RADVideo
2008-11-26 22:46 <DIR> --d----- c:\program files\AviSynth 2.5
2008-11-25 21:48 <DIR> --d----- c:\program files\fichiers communs\HP
2008-11-25 21:45 <DIR> --d----- c:\program files\Netropa
2008-11-25 21:39 16,496 a----r-- c:\windows\system32\drivers\HPZipr12.sys
2008-11-25 21:39 49,920 a----r-- c:\windows\system32\drivers\HPZid412.sys
2008-11-25 21:39 271,704 a----r-- c:\windows\system32\hpzids01.dll
2008-11-25 21:39 118,272 a------- c:\windows\system32\hpz3l5mu.dll
2008-11-25 21:39 21,568 a----r-- c:\windows\system32\drivers\HPZius12.sys
2008-11-25 21:38 372,736 a----r-- c:\windows\system32\hppldcoi.dll
2008-11-25 21:38 309,760 a----r-- c:\windows\system32\difxapi.dll
2008-11-25 21:38 970,752 a----r-- c:\windows\system32\hpotiop6.dll
2008-11-25 21:38 303,104 a----r-- c:\windows\system32\hpovst14.dll
2008-11-25 21:31 <DIR> --d----- c:\docume~1\clemet~1\applic~1\Search Settings
2008-11-25 21:31 <DIR> --d----- c:\program files\Yahoo!
2008-11-25 20:46 187,678 -------- c:\windows\hpoins29.dat.temp
2008-11-25 20:46 799 -------- c:\windows\hpomdl29.dat.temp
2008-11-20 21:44 42,320 a------- c:\windows\system32\xfcodec.dll
2008-11-18 20:42 0 a------- c:\windows\system32\atiicdxx.dat
2008-11-18 20:33 <DIR> --d----- c:\program files\ATI Technologies
2008-11-18 12:23 <DIR> --d----- c:\program files\ma-config.com
2008-11-13 07:08 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2008-11-13 07:07 1,106,944 -c------ c:\windows\system32\dllcache\msxml3.dll
2008-11-10 19:29 <DIR> --d----- c:\docume~1\alluse~1\applic~1\WEBREG
2008-11-10 18:50 <DIR> --d----- c:\program files\fichiers communs\Hewlett-Packard
2008-11-10 18:49 <DIR> --d----- c:\program files\HP
2008-11-10 18:46 187,818 a------- c:\windows\hpoins29.dat
2008-11-10 18:46 799 -------- c:\windows\hpomdl29.dat

==================== Find3M ====================

2008-11-21 22:39 138,464 ac------ c:\windows\system32\drivers\PnkBstrK.sys
2008-11-21 22:38 111,928 a------- c:\windows\system32\PnkBstrB.exe
2008-11-19 12:46 107,888 a------- c:\windows\system32\CmdLineExt.dll
2008-10-31 18:33 2,560 a------- c:\windows\_MSRSTRT.EXE
2008-10-28 18:48 1,048,064 a------- c:\windows\system32\Sarkophage.exe
2008-10-26 20:18 293 a------- C:\muxmp4.bat
2008-10-24 12:21 455,296 a------- c:\windows\system32\drivers\mrxsmb.sys
2008-10-16 14:06 268,648 a------- c:\windows\system32\mucltui.dll
2008-10-16 14:06 208,744 a------- c:\windows\system32\muweb.dll
2008-10-11 19:52 361,600 a------- c:\windows\system32\drivers\TCPIP.SYS
2008-10-11 19:51 361,600 a------- c:\windows\system32\drivers\TCPIP.SYS.ORIGINAL
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-19 21:53 304,528 a------- c:\windows\system32\appdrvrem01.exe
2008-09-15 16:26 1,846,528 a------- c:\windows\system32\win32k.sys
2008-09-11 17:09 86,327 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2001-11-18 21:07 22,328 ac------ c:\docume~1\clemet~1\applic~1\PnkBstrK.sys
2006-05-03 10:06 163,328 ---shr-- c:\windows\system32\flvDX.dll
2007-02-21 11:47 31,232 ---shr-- c:\windows\system32\msfDX.dll
2002-09-11 19:49 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\historique\history.ie5\mshist012002091120020912\index.dat

============= FINISH: 16:47:36.57 ===============

rapport ComboFix ... et merci encor pour ton aide

ComboFix 08-12-09.03 - Clem et Titou 2008-12-11 17:39:51.5 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.637 [GMT 1:00]
Lancé depuis: c:\documents and settings\Clem et Titou\Bureau\cboo.exe
* Un nouveau point de restauration a été créé
.
/wow section - STAGE 41


(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\InfoSat.txt
c:\program files\Windows Live\Messenger\msimg32.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-11-11 au 2008-12-11 ))))))))))))))))))))))))))))))))))))
.

2008-12-10 15:35 . 2008-12-10 15:36 250 --a------ c:\windows\gmer.ini
2008-12-10 15:31 . 2008-12-10 15:31 <REP> d-------- C:\ToolBar SD
2008-12-10 15:28 . 2008-12-10 15:28 <REP> d-------- C:\vgggggg
2008-12-10 14:48 . 2008-12-10 14:48 <REP> d-------- c:\program files\Spybot - Search & Destroy
2008-12-10 14:48 . 2008-12-10 14:48 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2008-12-09 22:24 . 2008-12-10 15:25 <REP> d--h----- c:\documents and settings\Clem et Titou\Application Data\drivers
2008-12-07 09:19 . 2008-12-07 09:19 <REP> d-------- C:\Downloads
2008-12-06 23:32 . 2008-12-10 15:25 <REP> d-------- c:\program files\Free Download Manager
2008-12-05 21:42 . 2008-12-05 21:42 <REP> d-------- c:\program files\Common Files
2008-12-05 21:29 . 2008-12-07 09:46 <REP> d-------- c:\program files\100%Naruto v2
2008-12-05 18:36 . 2008-12-06 23:26 <REP> d-------- c:\program files\Meegos Creator
2008-12-02 17:38 . 2008-12-02 17:38 <REP> d-------- c:\program files\RADVideo
2008-11-27 13:31 . 2008-12-08 20:47 <REP> d-------- c:\documents and settings\Mary\Application Data\HPAppData
2008-11-26 22:46 . 2008-11-26 13:47 <REP> d-------- c:\program files\AviSynth 2.5
2008-11-25 22:34 . 2008-12-11 17:39 <REP> d-------- c:\documents and settings\Clem et Titou\Application Data\HPAppData
2008-11-25 21:48 . 2008-11-25 21:48 <REP> d-------- c:\program files\Hewlett-Packard
2008-11-25 21:48 . 2008-11-25 21:48 <REP> d-------- c:\program files\Fichiers communs\HP
2008-11-25 21:48 . 2008-11-25 21:48 <REP> d-------- c:\documents and settings\All Users\Application Data\HP Product Assistant
2008-11-25 21:45 . 2008-11-25 21:45 <REP> d-------- c:\program files\Netropa
2008-11-25 21:39 . 2008-11-25 21:39 <REP> d-------- c:\documents and settings\All Users\Application Data\Hewlett-Packard
2008-11-25 21:39 . 2008-01-24 23:23 271,704 -ra------ c:\windows\system32\hpzids01.dll
2008-11-25 21:39 . 2008-02-07 10:26 118,272 --a------ c:\windows\system32\hpz3l5mu.dll
2008-11-25 21:39 . 2008-01-24 23:25 49,920 -ra------ c:\windows\system32\drivers\HPZid412.sys
2008-11-25 21:39 . 2008-01-24 23:25 21,568 -ra------ c:\windows\system32\drivers\HPZius12.sys
2008-11-25 21:39 . 2008-01-24 23:25 16,496 -ra------ c:\windows\system32\drivers\HPZipr12.sys
2008-11-25 21:38 . 2008-01-24 23:25 970,752 -ra------ c:\windows\system32\hpotiop6.dll
2008-11-25 21:38 . 2008-01-24 23:25 372,736 -ra------ c:\windows\system32\hppldcoi.dll
2008-11-25 21:38 . 2008-01-24 23:25 309,760 -ra------ c:\windows\system32\difxapi.dll
2008-11-25 21:38 . 2008-01-24 23:25 303,104 -ra------ c:\windows\system32\hpovst14.dll
2008-11-25 21:31 . 2008-11-25 21:31 <REP> d-------- c:\program files\Yahoo!
2008-11-25 21:31 . 2008-11-25 21:31 <REP> d-------- c:\documents and settings\Clem et Titou\Application Data\Search Settings
2008-11-25 20:46 . 2008-11-25 21:27 187,678 --------- c:\windows\hpoins29.dat.temp
2008-11-25 20:46 . 2008-05-05 01:13 799 --------- c:\windows\hpomdl29.dat.temp
2008-11-20 21:44 . 2008-11-20 21:44 42,320 --a------ c:\windows\system32\xfcodec.dll
2008-11-18 20:42 . 2008-11-18 20:42 0 --a------ c:\windows\system32\atiicdxx.dat
2008-11-18 20:34 . 2008-11-18 20:34 <REP> d-------- c:\documents and settings\All Users\Application Data\ATI
2008-11-18 20:33 . 2008-11-18 20:33 <REP> d-------- c:\program files\ATI Technologies
2008-11-18 12:23 . 2008-11-18 20:35 <REP> d-------- c:\program files\ma-config.com
2008-11-13 07:08 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
2008-11-13 07:07 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-10 20:23 --------- d-----r c:\program files\eMule
2008-12-10 20:04 --------- d-----w c:\program files\Paint Shop Pro 6
2008-12-10 17:41 --------- d-----w c:\program files\MediaCoder
2008-12-10 17:13 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-12-10 14:25 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Xfire
2008-12-10 14:24 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\uTorrent
2008-12-10 12:40 --------- d-----w c:\program files\Activision
2008-11-29 14:45 --------- d-----w c:\program files\Xfire
2008-11-26 12:48 --------- d-----w c:\program files\Google
2008-11-26 12:47 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-26 12:46 --------- d-----w c:\program files\Sony Ericsson
2008-11-26 12:45 --------- d-----w c:\program files\Fichiers communs\Teleca Shared
2008-11-26 12:45 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Teleca
2008-11-26 12:36 --------- d-----w c:\program files\Electronic Arts
2008-11-25 20:51 --------- d-----w c:\program files\HP
2008-11-25 20:31 --------- d-----w c:\program files\Ripp-it_AM
2008-11-21 21:39 138,464 -c--a-w c:\windows\system32\drivers\PnkBstrK.sys
2008-11-21 21:38 111,928 ----a-w c:\windows\system32\PnkBstrB.exe
2008-11-19 11:46 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2008-11-18 19:38 --------- d-----w c:\documents and settings\All Users\Application Data\HP
2008-11-18 19:36 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Red Alert 3
2008-11-18 19:35 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com
2008-11-10 18:34 --------- d-----w c:\documents and settings\All Users\Application Data\HPSSUPPLY
2008-11-10 18:29 --------- d-----w c:\documents and settings\All Users\Application Data\WEBREG
2008-11-10 18:00 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\HP
2008-11-10 17:50 --------- d-----w c:\program files\Fichiers communs\Hewlett-Packard
2008-11-10 14:07 --------- d-----w c:\documents and settings\Mary\Application Data\Teleca
2008-11-10 13:59 --------- d-----w c:\documents and settings\Mary\Application Data\Sony Ericsson
2008-11-07 18:34 --------- d-----w c:\program files\Alwil Software
2008-11-01 11:13 --------- d-----w c:\program files\mTC
2008-10-31 19:21 --------- d-----w c:\program files\CCleaner
2008-10-31 18:36 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2008-10-31 17:35 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Apple Computer
2008-10-31 17:33 2,560 ----a-w c:\windows\_MSRSTRT.EXE
2008-10-30 22:28 --------- d-----w c:\documents and settings\All Users\Application Data\2DBoy
2008-10-28 17:48 1,048,064 ----a-w c:\windows\system32\Sarkophage.exe
2008-10-27 16:58 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Sony Ericsson
2008-10-26 19:30 --------- d-----w c:\program files\eRightSoft
2008-10-26 19:18 293 ----a-w C:\muxmp4.bat
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-18 15:21 --------- d-----w c:\program files\Logitech
2008-10-18 15:21 --------- d-----w c:\program files\Fichiers communs\Logitech
2008-10-18 15:17 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2008-10-17 18:59 --------- d-----w c:\program files\Messenger Plus! Live
2008-10-17 18:58 --------- d-----w c:\program files\Windows Live
2008-10-17 18:55 --------- d-----w c:\program files\MessengerDiscovery
2008-10-17 18:33 --------- d-----w c:\program files\MSN Reaper
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-13 16:52 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2008-10-13 15:26 --------- d-----w c:\program files\Java
2008-10-12 20:06 --------- d-----w c:\documents and settings\All Users\Application Data\PrevxCSI
2008-10-12 17:37 --------- d-----w c:\program files\McAfee
2008-10-12 15:55 --------- d-----w c:\documents and settings\Mary\Application Data\Media Player Classic
2008-10-12 15:23 --------- d-----w c:\documents and settings\All Users\Application Data\CA
2008-10-11 18:52 361,600 ----a-w c:\windows\system32\drivers\TCPIP.SYS
2008-10-11 18:51 361,600 ----a-w c:\windows\system32\drivers\TCPIP.SYS.ORIGINAL
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-19 20:53 304,528 ----a-w c:\windows\system32\appdrvrem01.exe
2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
2001-11-18 20:07 22,328 -c--a-w c:\documents and settings\Clem et Titou\Application Data\PnkBstrK.sys
2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
2002-09-11 18:49 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012002091120020912\index.dat
.

------- Sigcheck -------

2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$hf_mig$\KB917953\SP2GDR\tcpip.sys
2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
2008-06-20 11:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 12:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2008-06-20 11:45 360320 2a5554fc5b1e04e131230e3ce035c3f9 c:\windows\$NtServicePackUninstall$\tcpip.sys
2004-08-04 07:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB917953$\tcpip.sys
2002-08-30 13:00 332928 244a2f9816bc9b593957281ef577d976 c:\windows\$NtUninstallKB917953_0$\tcpip.sys
2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$NtUninstallKB941644$\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\$NtUninstallKB951748$\tcpip.sys
2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\$NtUninstallKB951748_0$\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\ServicePackFiles\i386\TCPIP.SYS
2008-10-11 19:52 361600 a29e1209f925a0e9b330e11da5fc7bab c:\windows\system32\dllcache\TCPIP.SYS
2008-10-11 19:52 361600 a29e1209f925a0e9b330e11da5fc7bab c:\windows\system32\drivers\TCPIP.SYS
.
((((((((((((((((((((((((((((( snapshot_2008-12-10_15.09.18.09 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-12-10 14:35:31 884,736 ----a-w c:\windows\gmer.dll
- 2008-04-17 19:13:02 811,008 ----a-w c:\windows\gmer.exe
+ 2008-04-17 20:13:02 811,008 ----a-w c:\windows\gmer.exe
+ 2008-12-10 14:35:31 85,969 ----a-w c:\windows\system32\drivers\gmer.sys
- 2008-12-10 13:07:44 31,932 ----a-w c:\windows\system32\Restore\rstrlog.dat
+ 2008-12-10 14:25:14 1,044,160 ----a-w c:\windows\system32\Restore\rstrlog.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-12-10 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-12-19 136768]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2008-12-10 112216]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-03-25 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-03-13 81920]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-12-10 81000]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Keyboard Manager"="c:\program files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe" [2001-07-17 589824]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-03-25 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\zoneclim32]
2004-10-12 02:27 12800 c:\windows\system32\zoneclim32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"VIDC.MJPG"= mtkjpeg.dll
"VIDC.XFR1"= xfcodec.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Clem et Titou^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=c:\documents and settings\Clem et Titou\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Clem et Titou^Menu Démarrer^Programmes^Démarrage^Eurobarre.lnk]
path=c:\documents and settings\Clem et Titou\Menu Démarrer\Programmes\Démarrage\Eurobarre.lnk
backup=c:\windows\pss\Eurobarre.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Clem et Titou^Menu Démarrer^Programmes^Démarrage^Xfire.lnk]
path=c:\documents and settings\Clem et Titou\Menu Démarrer\Programmes\Démarrage\Xfire.lnk
backup=c:\windows\pss\Xfire.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate]
--a------ 2005-06-08 13:44 196608 c:\program files\Logitech\Video\ManifestEngine.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair]
--a------ 2005-06-08 14:24 458752 c:\program files\Logitech\Video\ISStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
--a------ 2005-06-08 14:14 217088 c:\program files\Logitech\Video\LogiTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2008-04-14 03:34 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-06-10 03:27 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
-r---c--- 2006-05-16 11:04 2879488 c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"usnjsvc"=3 (0x3)
"CaCCProvSP"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Xfire\\xfire.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Bethesda Softworks\\Fallout 3\\FalloutLauncher.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4662:TCP"= 4662:TCP:EmuleTCP
"4672:UDP"= 4672:UDP:EmuleUDP

R1 appdrv01;Application Driver (01);c:\windows\system32\Drivers\appdrv01.sys [2008-09-19 2915944]
R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\DRIVERS\msikbd2k.sys [2008-11-25 6783]
S1 aswSP;avast! Self Protection; []
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc []
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys []
S2 zoneclim32;Zone Client Library;rundll32.exe c:\windows\system32\zoneclim32.dll,yloj []
S3 jatmlano;jatmlano;\??\c:\docume~1\CLEMET~1\LOCALS~1\Temp\jatmlano.sys []
S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" []
S3 mirrorv3;mirrorv3;c:\windows\system32\DRIVERS\rminiv3.sys [2006-11-01 3328]
S3 XDva032;XDva032;\??\c:\windows\system32\XDva032.sys []
S3 zlportio;zlportio;\??\d:\program files\UltraStar\zlportio.sys []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ab20071a-9882-11dd-8705-806d6172696f}]
\Shell\AutoRun\command - K:\nideiect.com
\Shell\explore\Command - K:\nideiect.com
\Shell\open\Command - K:\nideiect.com
.
Contenu du dossier 'Tâches planifiées'

2008-12-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe []
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
IE: &Search - http://edits.mywebsearch.com/toolb [...] xdm451YYFR

O16 -: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
c:\windows\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd
FireFox -: Profile - c:\documents and settings\Clem et Titou\Application Data\Mozilla\Firefox\Profiles\bl3obuwb.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.ogame.fr/
FF -: plugin - c:\program files\ma-config.com\nphardwaredetection.dll
FF -: plugin - c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-11 17:42:16
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(712)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\zoneclim32.dll
.
Heure de fin: 2008-12-11 17:42:57
ComboFix-quarantined-files.txt 2008-12-11 16:42:55
ComboFix2.txt 2008-12-10 14:12:10
ComboFix3.txt 2008-10-31 19:10:57
ComboFix4.txt 2008-10-13 16:08:15
ComboFix5.txt 2008-12-10 14:28:47

Avant-CF: 9,933,553,664 octets libres
Après-CF: 9,932,021,760 octets libres

296 --- E O F --- 2008-12-10 13:03:22

voila le 2ème rapport de combofix... parcontre je tien a préciser que j'ai eut 2 messages d'erreur lors des étapes !!!

ComboFix 08-12-11.01 - Clem et Titou 2008-12-11 20:34:59.6 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.593 [GMT 1:00]
Lancé depuis: c:\documents and settings\Clem et Titou\Bureau\cboo.exe
Commutateurs utilisés :: c:\documents and settings\Clem et Titou\Bureau\CFScript.txt
* Un nouveau point de restauration a été créé

FILE ::
K:\nideiect.com
.
/wow section - STAGE 41


(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_JATMLANO
-------\Service_jatmlano


((((((((((((((((((((((((((((( Fichiers créés du 2008-11-11 au 2008-12-11 ))))))))))))))))))))))))))))))))))))
.

2008-12-11 19:07 . 2008-12-11 19:07 <REP> d-------- c:\program files\Circle Developement
2008-12-11 19:07 . 2008-12-11 19:07 <REP> d-------- c:\program files\antihelpfork
2008-12-11 19:07 . 2008-12-11 19:08 <REP> d-------- c:\documents and settings\Clem et Titou\Application Data\antihelpfork
2008-12-11 19:07 . 2008-12-11 19:07 <REP> d-------- c:\documents and settings\All Users\Application Data\File dvd base road
2008-12-10 15:35 . 2008-12-10 15:36 250 --a------ c:\windows\gmer.ini
2008-12-10 15:31 . 2008-12-10 15:31 <REP> d-------- C:\ToolBar SD
2008-12-10 15:28 . 2008-12-10 15:28 <REP> d-------- C:\vgggggg
2008-12-09 22:24 . 2008-12-10 15:25 <REP> d--h----- c:\documents and settings\Clem et Titou\Application Data\drivers
2008-12-07 09:19 . 2008-12-07 09:19 <REP> d-------- C:\Downloads
2008-12-06 23:32 . 2008-12-10 15:25 <REP> d-------- c:\program files\Free Download Manager
2008-12-05 21:42 . 2008-12-05 21:42 <REP> d-------- c:\program files\Common Files
2008-12-05 21:29 . 2008-12-07 09:46 <REP> d-------- c:\program files\100%Naruto v2
2008-12-05 18:36 . 2008-12-06 23:26 <REP> d-------- c:\program files\Meegos Creator
2008-12-02 17:38 . 2008-12-02 17:38 <REP> d-------- c:\program files\RADVideo
2008-11-27 13:31 . 2008-12-08 20:47 <REP> d-------- c:\documents and settings\Mary\Application Data\HPAppData
2008-11-26 22:46 . 2008-11-26 13:47 <REP> d-------- c:\program files\AviSynth 2.5
2008-11-25 22:34 . 2008-12-11 19:09 <REP> d-------- c:\documents and settings\Clem et Titou\Application Data\HPAppData
2008-11-25 21:48 . 2008-11-25 21:48 <REP> d-------- c:\program files\Hewlett-Packard
2008-11-25 21:48 . 2008-11-25 21:48 <REP> d-------- c:\program files\Fichiers communs\HP
2008-11-25 21:48 . 2008-11-25 21:48 <REP> d-------- c:\documents and settings\All Users\Application Data\HP Product Assistant
2008-11-25 21:45 . 2008-11-25 21:45 <REP> d-------- c:\program files\Netropa
2008-11-25 21:39 . 2008-11-25 21:39 <REP> d-------- c:\documents and settings\All Users\Application Data\Hewlett-Packard
2008-11-25 21:39 . 2008-01-24 23:23 271,704 -ra------ c:\windows\system32\hpzids01.dll
2008-11-25 21:39 . 2008-02-07 10:26 118,272 --a------ c:\windows\system32\hpz3l5mu.dll
2008-11-25 21:39 . 2008-01-24 23:25 49,920 -ra------ c:\windows\system32\drivers\HPZid412.sys
2008-11-25 21:39 . 2008-01-24 23:25 21,568 -ra------ c:\windows\system32\drivers\HPZius12.sys
2008-11-25 21:39 . 2008-01-24 23:25 16,496 -ra------ c:\windows\system32\drivers\HPZipr12.sys
2008-11-25 21:38 . 2008-01-24 23:25 970,752 -ra------ c:\windows\system32\hpotiop6.dll
2008-11-25 21:38 . 2008-01-24 23:25 372,736 -ra------ c:\windows\system32\hppldcoi.dll
2008-11-25 21:38 . 2008-01-24 23:25 309,760 -ra------ c:\windows\system32\difxapi.dll
2008-11-25 21:38 . 2008-01-24 23:25 303,104 -ra------ c:\windows\system32\hpovst14.dll
2008-11-25 21:31 . 2008-11-25 21:31 <REP> d-------- c:\program files\Yahoo!
2008-11-25 21:31 . 2008-11-25 21:31 <REP> d-------- c:\documents and settings\Clem et Titou\Application Data\Search Settings
2008-11-25 20:46 . 2008-11-25 21:27 187,678 --------- c:\windows\hpoins29.dat.temp
2008-11-25 20:46 . 2008-05-05 01:13 799 --------- c:\windows\hpomdl29.dat.temp
2008-11-20 21:44 . 2008-11-20 21:44 42,320 --a------ c:\windows\system32\xfcodec.dll
2008-11-18 20:42 . 2008-11-18 20:42 0 --a------ c:\windows\system32\atiicdxx.dat
2008-11-18 20:34 . 2008-11-18 20:34 <REP> d-------- c:\documents and settings\All Users\Application Data\ATI
2008-11-18 20:33 . 2008-11-18 20:33 <REP> d-------- c:\program files\ATI Technologies
2008-11-18 12:23 . 2008-11-18 20:35 <REP> d-------- c:\program files\ma-config.com
2008-11-13 07:08 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
2008-11-13 07:07 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-11 18:07 --------- d-----w c:\program files\Messenger Plus! Live
2008-12-11 18:04 --------- d-----r c:\program files\eMule
2008-12-11 18:01 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-12-10 20:04 --------- d-----w c:\program files\Paint Shop Pro 6
2008-12-10 17:41 --------- d-----w c:\program files\MediaCoder
2008-12-10 14:25 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Xfire
2008-12-10 14:24 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\uTorrent
2008-12-10 12:40 --------- d-----w c:\program files\Activision
2008-11-29 14:45 --------- d-----w c:\program files\Xfire
2008-11-26 12:48 --------- d-----w c:\program files\Google
2008-11-26 12:47 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-26 12:46 --------- d-----w c:\program files\Sony Ericsson
2008-11-26 12:45 --------- d-----w c:\program files\Fichiers communs\Teleca Shared
2008-11-26 12:45 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Teleca
2008-11-26 12:36 --------- d-----w c:\program files\Electronic Arts
2008-11-25 20:51 --------- d-----w c:\program files\HP
2008-11-25 20:31 --------- d-----w c:\program files\Ripp-it_AM
2008-11-21 21:39 138,464 -c--a-w c:\windows\system32\drivers\PnkBstrK.sys
2008-11-18 19:38 --------- d-----w c:\documents and settings\All Users\Application Data\HP
2008-11-18 19:36 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Red Alert 3
2008-11-18 19:35 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com
2008-11-10 18:34 --------- d-----w c:\documents and settings\All Users\Application Data\HPSSUPPLY
2008-11-10 18:29 --------- d-----w c:\documents and settings\All Users\Application Data\WEBREG
2008-11-10 18:00 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\HP
2008-11-10 17:50 --------- d-----w c:\program files\Fichiers communs\Hewlett-Packard
2008-11-10 14:07 --------- d-----w c:\documents and settings\Mary\Application Data\Teleca
2008-11-10 13:59 --------- d-----w c:\documents and settings\Mary\Application Data\Sony Ericsson
2008-11-07 18:34 --------- d-----w c:\program files\Alwil Software
2008-11-01 11:13 --------- d-----w c:\program files\mTC
2008-10-31 19:21 --------- d-----w c:\program files\CCleaner
2008-10-31 18:36 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2008-10-31 17:35 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Apple Computer
2008-10-31 17:33 2,560 ----a-w c:\windows\_MSRSTRT.EXE
2008-10-30 22:28 --------- d-----w c:\documents and settings\All Users\Application Data\2DBoy
2008-10-27 16:58 --------- d-----w c:\documents and settings\Clem et Titou\Application Data\Sony Ericsson
2008-10-26 19:30 --------- d-----w c:\program files\eRightSoft
2008-10-26 19:18 293 ----a-w C:\muxmp4.bat
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-18 15:21 --------- d-----w c:\program files\Logitech
2008-10-18 15:21 --------- d-----w c:\program files\Fichiers communs\Logitech
2008-10-18 15:17 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2008-10-17 18:58 --------- d-----w c:\program files\Windows Live
2008-10-17 18:55 --------- d-----w c:\program files\MessengerDiscovery
2008-10-17 18:33 --------- d-----w c:\program files\MSN Reaper
2008-10-13 16:52 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2008-10-13 15:26 --------- d-----w c:\program files\Java
2008-10-12 20:06 --------- d-----w c:\documents and settings\All Users\Application Data\PrevxCSI
2008-10-12 17:37 --------- d-----w c:\program files\McAfee
2008-10-12 15:55 --------- d-----w c:\documents and settings\Mary\Application Data\Media Player Classic
2008-10-12 15:23 --------- d-----w c:\documents and settings\All Users\Application Data\CA
2008-10-11 18:52 361,600 ----a-w c:\windows\system32\drivers\TCPIP.SYS
2008-10-11 18:51 361,600 ----a-w c:\windows\system32\drivers\TCPIP.SYS.ORIGINAL
2001-11-18 20:07 22,328 -c--a-w c:\documents and settings\Clem et Titou\Application Data\PnkBstrK.sys
2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
2002-09-11 18:49 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012002091120020912\index.dat
.

------- Sigcheck -------

2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$hf_mig$\KB917953\SP2GDR\tcpip.sys
2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
2008-06-20 11:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
2008-06-20 12:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
2008-06-20 12:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
2008-06-20 11:45 360320 2a5554fc5b1e04e131230e3ce035c3f9 c:\windows\$NtServicePackUninstall$\tcpip.sys
2004-08-04 07:14 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB917953$\tcpip.sys
2002-08-30 13:00 332928 244a2f9816bc9b593957281ef577d976 c:\windows\$NtUninstallKB917953_0$\tcpip.sys
2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$NtUninstallKB941644$\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\$NtUninstallKB951748$\tcpip.sys
2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\$NtUninstallKB951748_0$\tcpip.sys
2008-04-13 20:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\ServicePackFiles\i386\TCPIP.SYS
2008-10-11 19:52 361600 a29e1209f925a0e9b330e11da5fc7bab c:\windows\system32\dllcache\TCPIP.SYS
2008-10-11 19:52 361600 a29e1209f925a0e9b330e11da5fc7bab c:\windows\system32\drivers\TCPIP.SYS
.
((((((((((((((((((((((((((((( snapshot_2008-12-10_15.09.18.09 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-12-10 14:35:31 884,736 ----a-w c:\windows\gmer.dll
- 2008-04-17 19:13:02 811,008 ----a-w c:\windows\gmer.exe
+ 2008-04-17 20:13:02 811,008 ----a-w c:\windows\gmer.exe
- 2002-09-11 20:04:29 29,926 ----a-r c:\windows\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
+ 2008-12-11 18:03:50 29,926 ----a-r c:\windows\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
+ 2008-12-10 14:35:31 85,969 ----a-w c:\windows\system32\drivers\gmer.sys
- 2008-12-10 13:07:44 31,932 ----a-w c:\windows\system32\Restore\rstrlog.dat
+ 2008-12-10 14:25:14 1,044,160 ----a-w c:\windows\system32\Restore\rstrlog.dat
- 2007-10-18 09:31:46 51,224 ----a-w c:\windows\system32\sirenacm.dll
+ 2007-10-18 10:31:46 51,224 ----a-w c:\windows\system32\sirenacm.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"EXIT META"="c:\docume~1\CLEMET~1\APPLIC~1\ANTIHE~1\link surf part.exe" [2008-12-11 590848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-12-19 136768]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2008-12-10 112216]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-03-25 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-03-13 81920]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-12-10 81000]
"Base road long save"="c:\documents and settings\All Users\Application Data\File dvd base road\delete aim.exe" [2008-12-11 1046016]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Keyboard Manager"="c:\program files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe" [2001-07-17 589824]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-03-25 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\zoneclim32]
2004-10-12 02:27 12800 c:\windows\system32\zoneclim32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"VIDC.MJPG"= mtkjpeg.dll
"VIDC.XFR1"= xfcodec.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Clem et Titou^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=c:\documents and settings\Clem et Titou\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Clem et Titou^Menu Démarrer^Programmes^Démarrage^Eurobarre.lnk]
path=c:\documents and settings\Clem et Titou\Menu Démarrer\Programmes\Démarrage\Eurobarre.lnk
backup=c:\windows\pss\Eurobarre.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Clem et Titou^Menu Démarrer^Programmes^Démarrage^Xfire.lnk]
path=c:\documents and settings\Clem et Titou\Menu Démarrer\Programmes\Démarrage\Xfire.lnk
backup=c:\windows\pss\Xfire.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate]
--a------ 2005-06-08 13:44 196608 c:\program files\Logitech\Video\ManifestEngine.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair]
--a------ 2005-06-08 14:24 458752 c:\program files\Logitech\Video\ISStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
--a------ 2005-06-08 14:14 217088 c:\program files\Logitech\Video\LogiTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2008-04-14 03:34 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-06-10 03:27 144784 c:\program files\Java\jre1.6.0_07\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
-r---c--- 2006-05-16 11:04 2879488 c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"usnjsvc"=3 (0x3)
"CaCCProvSP"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Xfire\\xfire.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Bethesda Softworks\\Fallout 3\\FalloutLauncher.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4662:TCP"= 4662:TCP:EmuleTCP
"4672:UDP"= 4672:UDP:EmuleUDP

R1 appdrv01;Application Driver (01);c:\windows\system32\Drivers\appdrv01.sys [2008-09-19 2915944]
R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\DRIVERS\msikbd2k.sys [2008-11-25 6783]
R2 zoneclim32;Zone Client Library;rundll32.exe c:\windows\system32\zoneclim32.dll,yloj []
S1 aswSP;avast! Self Protection; []
S2 appdrvrem01;Application Driver Auto Removal Service (01);c:\windows\System32\appdrvrem01.exe svc []
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys []
S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" []
S3 mirrorv3;mirrorv3;c:\windows\system32\DRIVERS\rminiv3.sys [2006-11-01 3328]
S3 XDva032;XDva032;\??\c:\windows\system32\XDva032.sys []
S3 zlportio;zlportio;\??\d:\program files\UltraStar\zlportio.sys []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenu du dossier 'Tâches planifiées'

2008-12-11 c:\windows\Tasks\AC39C69791CA426B.job
- c:\docume~1\clemet~1\applic~1\antihe~1\admindoessign.exe [2008-12-11 19:08]

2008-12-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe []
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
IE: &Search - http://edits.mywebsearch.com/toolb [...] xdm451YYFR

O16 -: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
c:\windows\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-11 20:39:58
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(716)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\zoneclim32.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\rundll32.exe
c:\program files\McAfee\VirusScan Enterprise\VsTskMgr.exe
c:\windows\system32\rundll32.exe
c:\program files\McAfee\Common Framework\Mctray.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files\Internet Explorer\iexplore.exe
c:\program files\Internet Explorer\iexplore.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\program files\Windows Live\Messenger\usnsvc.exe
.
**************************************************************************
.
Heure de fin: 2008-12-11 20:43:18 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-12-11 19:43:15
ComboFix2.txt 2008-12-11 16:43:44
ComboFix3.txt 2008-12-10 14:12:10
ComboFix4.txt 2008-10-31 19:10:57
ComboFix5.txt 2008-12-11 19:34:12

Avant-CF: 7 885 508 608 octets libres
Après-CF: 7,881,101,312 octets libres

307 --- E O F --- 2008-12-10 13:03:22

Re,

Télécharge Lop S&D.exe (d’ Eric 71 & Angeldark) sur ton bureau.

• Double-clique dessus pour lancer l'installation
• Puis double-clique sur le raccourci Lop S&D présent sur ton bureau (Si tu es sous Vista, clique droit -> exécuter en tant qu'admin)
• Séléctionne la langue souhaitée , puis choisis l'Option 1 (Recherche)
• Patiente jusqu'à la fin du scan
• Poste le rapport généré (C:\lopR.txt)

Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "Nouvelle tâche (exécuter)"
Tapes explorer et valide. Cela te fera apparaitre ton bureau

Re,

Si bien sûr

D'abord je veux être sûr que tu puisses voir les fichiers/dossiers cachés :

[~]Aller dans poste de travail/outils/option des dossiers/affichage/afficher les fichiers et dossiers cachés/Appliquer - - > OK
[~]Aller dans poste de travail/outils/option des dossiers/affichage/décocher masquer les fichiers protégés du système d'exploitation./Appliquer - - > OK
Tu recocheras après.

[~] Poste de travail/outils/option des dossiers/affichage/décocher masquer les extensions dont le type est connu./Appliquer - - > OK


1) Télécharge OTMoveIt3 (OldTimer). Sauvegarde-le sur ton Bureau.
Copie (Ctrl+C) le texte se situant dans le cadre ci-dessous :

Double clique sur OTMoveIt3.exe afin de le lancer.
Colle (ou Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

2) Rends toi sur ce lien : Virus Total

• Clique sur Parcourir
• Rends toi jusque sur ce fichier si tu le trouves :

c:\windows\system32\drivers\TCPIP.SYS

• Clique sur Envoyer le fichier et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
• Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
• Lorsque l'analyse est terminée ("Situation actuelle: terminé" ), clique sur Formaté
• Une nouvelle fenêtre de ton navigateur va apparaître
• Clique alors sur cette image :
• Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
• Enfin colle le résultat dans ta prochaine réponse.

Note : Peu importe le résultat, il est important de me communiquer le résultat de toute l'analyse.
Il est possible que tes outils de sécurité réagissent à l'envoi du fichier, en ce cas il te faudra ignorer les alertes.

Fichier TCPIP.SYS reçu le 2008.12.14 14:30:10 (CET)Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.12.12.2 2008.12.14 -
AntiVir 7.9.0.45 2008.12.12 -
Authentium 5.1.0.4 2008.12.13 -
Avast 4.8.1281.0 2008.12.13 -
AVG 8.0.0.199 2008.12.13 -
BitDefender 7.2 2008.12.14 -
CAT-QuickHeal 10.00 2008.12.13 -
ClamAV 0.94.1 2008.12.14 -
Comodo 749 2008.12.13 -
DrWeb 4.44.0.09170 2008.12.14 -
eSafe 7.0.17.0 2008.12.14 -
eTrust-Vet 31.6.6258 2008.12.12 -
Ewido 4.0 2008.12.14 -
F-Prot 4.4.4.56 2008.12.13 -
F-Secure 8.0.14332.0 2008.12.14 -
Fortinet 3.117.0.0 2008.12.14 -
GData 19 2008.12.14 -
Ikarus T3.1.1.45.0 2008.12.14 -
K7AntiVirus 7.10.553 2008.12.13 -
Kaspersky 7.0.0.125 2008.12.14 -
McAfee 5463 2008.12.13 -
McAfee+Artemis 5463 2008.12.13 -
Microsoft 1.4205 2008.12.14 -
NOD32 3689 2008.12.14 -
Norman 5.80.02 2008.12.12 -
Panda 9.0.0.4 2008.12.14 -
PCTools 4.4.2.0 2008.12.14 -
Prevx1 V2 2008.12.14 -
Rising 21.07.62.00 2008.12.14 -
SecureWeb-Gateway 6.7.6 2008.12.12 -
Sophos 4.36.0 2008.12.14 -
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.14 -
TheHacker 6.3.1.4.187 2008.12.13 -
TrendMicro 8.700.0.1004 2008.12.12 -
VBA32 3.12.8.10 2008.12.13 -
ViRobot 2008.12.12.1515 2008.12.12 -
VirusBuster 4.5.11.0 2008.12.13 -

Information additionnelle
File size: 361600 bytes
MD5...: a29e1209f925a0e9b330e11da5fc7bab
SHA1..: 37094660a2e14d215a477db6f0f9bdaaebb97c94
SHA256: ecc0da9dffdc7ae260304239c50ab91b17860e964eceec6871fca23933d6a248
SHA512: 84bb38e77aa4438d21061e888de4599c892783f00e1e162bf0b6ecf4d1ab5fa2<BR>988ec7b9b664773fb1e3997187d015833d52e6351b460331562de90175501b63<BR>
ssdeep: 6144:4JVxTJMCOHOcecOeaVrith/CC/LxGh5wCQCzKLQ/xFczo:4DxTl2OzryZCA<BR>Q4CQDQ/<BR>
PEiD..: -
TrID..: File type identification<BR>Win32 Executable Generic (68.0%)<BR>Generic Win/DOS Executable (15.9%)<BR>DOS Executable Generic (15.9%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x60d23<BR>timedatestamp.....: 0x485b99ad (Fri Jun 20 11:51:09 2008)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 10 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x380 0x3f05a 0x3f080 6.58 469827b02f4403f5236e017c0c4bc49a<BR>.rdata 0x3f400 0x574 0x580 4.44 0eb5bdbba26ed4d079a201f965266cb4<BR>.data 0x3f980 0xa4a4 0xa500 0.06 ea0c5005c163289d0c29ae80301cb86f<BR>PAGE 0x49e80 0x1f85 0x2000 6.38 29223020b8202f58b61651e2099c84e8<BR>PAGELK 0x4be80 0x6f2 0x700 6.19 d82540f4886ebcffb849774114194524<BR>PAGEIPMc 0x4c580 0x2781 0x2800 6.43 bb13276e642dee8cf0a818967e06b022<BR>.edata 0x4ed80 0x341 0x380 5.23 32781ababdbcd87358c1d1eb84509dd0<BR>INIT 0x4f100 0x5936 0x5980 6.19 bafeca2e824bf19cb180841b36644365<BR>.rsrc 0x54a80 0x3f0 0x400 3.41 3fd0d62483602aa6ce780c14866b4e39<BR>.reloc 0x54e80 0x3590 0x3600 6.79 1e3ca28ef6ff9cf6fa16149dbf4fe144<BR><BR>( 4 imports ) <BR>&gt; HAL.dll: KfLowerIrql, KeRaiseIrqlToDpcLevel, KfReleaseSpinLock, KfAcquireSpinLock, KfRaiseIrql, KeGetCurrentIrql, KeQueryPerformanceCounter, ExAcquireFastMutex, ExReleaseFastMutex<BR>&gt; NDIS.SYS: NdisCloseAdapter, NdisCancelSendPackets, NdisFreePacket, NdisUnchainBufferAtFront, NdisCompletePnPEvent, NdisFreePacketPool, NdisRequest, NdisAllocatePacket, NdisFreeMemory, NdisQueryAdapterInstanceName, NdisGetDriverHandle, NdisOpenAdapter, NdisAllocatePacketPoolEx, NdisGetReceivedPacket, NdisRegisterProtocol, NdisAllocateBuffer, NdisSetPacketPoolProtocolId, NdisReturnPackets, NdisCopyBuffer, NdisAllocateBufferPool, NdisFreeBufferPool, NdisReEnumerateProtocolBindings, NdisCompleteBindAdapter<BR>&gt; ntoskrnl.exe: IoCreateDevice, _wcsicmp, wcscpy, wcsncpy, wcschr, ZwSetInformationThread, KeLeaveCriticalRegion, KeEnterCriticalRegion, KeQueryTimeIncrement, KeSetEvent, IoDeleteSymbolicLink, ExDeleteNPagedLookasideList, KeDelayExecutionThread, ZwOpenKey, KeSetTimerEx, KeInitializeTimer, KeInitializeDpc, ExInitializeNPagedLookasideList, MmLockPagableSectionByHandle, ZwQueryValueKey, ZwSetValueKey, InterlockedPopEntrySList, InterlockedPushEntrySList, ExIsProcessorFeaturePresent, RtlAddAccessAllowedAce, RtlCreateAcl, RtlLengthSid, SeExports, RtlMapGenericMask, IoGetFileObjectGenericMapping, ObReleaseObjectSecurity, SeSetSecurityDescriptorInfo, RtlLengthSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlCreateSecurityDescriptor, ObGetObjectSecurity, IofCallDriver, IoBuildDeviceIoControlRequest, IoGetDeviceObjectPointer, ObfDereferenceObject, RtlAddAce, RtlGetAce, IoCreateSymbolicLink, RtlInitializeSid, RtlLengthRequiredSid, ObSetSecurityObjectByPointer, RtlSelfRelativeToAbsoluteSD, RtlGetSaclSecurityDescriptor, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, RtlGetDaclSecurityDescriptor, RtlVerifyVersionInfo, VerSetConditionMask, IoWMIRegistrationControl, IoGetCurrentProcess, KeInitializeTimerEx, RtlExtendedIntegerMultiply, KeQueryInterruptTime, _aulldiv, DbgBreakPoint, KeSetTargetProcessorDpc, RtlSetBit, SeUnlockSubjectContext, SeAccessCheck, SeLockSubjectContext, ObDereferenceSecurityDescriptor, PsGetCurrentProcessId, RtlWalkFrameChain, ExNotifyCallback, ExCreateCallback, ObReferenceObjectByHandle, MmUnlockPages, SeFreePrivileges, SeAppendPrivileges, ObLogSecurityDescriptor, SeAssignSecurity, IoFileObjectType, MmProbeAndLockPages, IoAllocateMdl, _except_handler3, ProbeForWrite, ObfReferenceObject, PsGetCurrentProcess, RtlPrefetchMemoryNonTemporal, KeInitializeMutex, MmIsThisAnNtAsSystem, KeWaitForSingleObject, KeReleaseMutex, KeReadStateEvent, IoDeleteDevice, ZwEnumerateValueKey, RtlUnicodeStringToInteger, RtlIpv4StringToAddressW, RtlTimeToTimeFields, ExLocalTimeToSystemTime, RtlExtendedMagicDivide, RtlAppendUnicodeToString, ZwClose, _allmul, MmQuerySystemSize, RtlCompareUnicodeString, RtlInitializeBitMap, RtlClearAllBits, RtlSetBits, wcslen, RtlAreBitsSet, RtlClearBits, RtlFindClearBitsAndSet, RtlFindClearRuns, DbgPrint, memmove, RtlCopyUnicodeString, RtlAppendUnicodeStringToString, ZwLoadDriver, KeResetEvent, IoAcquireCancelSpinLock, IoReleaseCancelSpinLock, IofCompleteRequest, ExfInterlockedAddUlong, MmMapLockedPagesSpecifyCache, IoFreeMdl, ExfInterlockedInsertTailList, RtlInitUnicodeString, MmMapLockedPages, KeNumberProcessors, RtlUnicodeStringToAnsiString, MmLockPagableDataSection, MmUnlockPagableImageSection, RtlCompareMemory, ExAllocatePoolWithTag, KeCancelTimer, KeClearEvent, RtlAnsiStringToUnicodeString, IoRaiseInformationalHardError, KeInitializeEvent, ExFreePoolWithTag, ExAllocatePoolWithTagPriority, KeInitializeSpinLock, _alldiv, KeQuerySystemTime, KefAcquireSpinLockAtDpcLevel, KefReleaseSpinLockFromDpcLevel, KeBugCheckEx, RtlSubAuthoritySid, KeTickCount, MmBuildMdlForNonPagedPool, ZwDeviceIoControlFile, ZwCreateFile<BR>&gt; TDI.SYS: CTESystemUpTime, CTEBlock, CTELogEvent, CTESignal, CTEBlockWithTracker, CTEStartTimer, CTEInitEvent, CTEScheduleDelayedEvent, CTEInitTimer, TdiProviderReady, CTEInitialize, TdiDeregisterNetAddress, TdiRegisterNetAddress, TdiDeregisterDeviceObject, TdiRegisterDeviceObject, TdiDeregisterProvider, TdiRegisterProvider, TdiPnPPowerRequest, TdiCopyMdlChainToMdlChain, TdiInitialize, TdiDeregisterPnPHandlers, TdiRegisterPnPHandlers, CTEScheduleEvent, TdiCopyBufferToMdl, CTERemoveBlockTracker, CTEInsertBlockTracker, TdiMapUserRequest, TdiCopyBufferToMdlWithReservedMappingAtDpcLevel<BR><BR>( 31 exports ) <BR>ARPRcv, ARPRcvPacket, FreeIprBuff, GetIFAndLink, IPAddInterface, IPAllocBuff, IPDelInterface, IPDelayedNdisReEnumerateBindings, IPDeregisterARP, IPDisableSniffer, IPEnableSniffer, IPFreeBuff, IPGetAddrType, IPGetBestInterface, IPGetInfo, IPInjectPkt, IPProxyNdisRequest, IPRcvComplete, IPRcvPacket, IPRegisterARP, IPRegisterProtocol, IPSetIPSecStatus, IPTransmit, LookupRoute, LookupRouteInformation, LookupRouteInformationWithBuffer, SendICMPErr, SetIPSecPtr, UnSetIPSecPtr, UnSetIPSecSendPtr, tcpxsum<BR>

Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.12.12.2 2008.12.14 -
AntiVir 7.9.0.45 2008.12.12 -
Authentium 5.1.0.4 2008.12.13 -
Avast 4.8.1281.0 2008.12.13 -
AVG 8.0.0.199 2008.12.13 -
BitDefender 7.2 2008.12.14 -
CAT-QuickHeal 10.00 2008.12.13 -
ClamAV 0.94.1 2008.12.14 -
Comodo 749 2008.12.13 -
DrWeb 4.44.0.09170 2008.12.14 -
eSafe 7.0.17.0 2008.12.14 -
eTrust-Vet 31.6.6258 2008.12.12 -
Ewido 4.0 2008.12.14 -
F-Prot 4.4.4.56 2008.12.13 -
F-Secure 8.0.14332.0 2008.12.14 -
Fortinet 3.117.0.0 2008.12.14 -
GData 19 2008.12.14 -
Ikarus T3.1.1.45.0 2008.12.14 -
K7AntiVirus 7.10.553 2008.12.13 -
Kaspersky 7.0.0.125 2008.12.14 -
McAfee 5463 2008.12.13 -
McAfee+Artemis 5463 2008.12.13 -
Microsoft 1.4205 2008.12.14 -
NOD32 3689 2008.12.14 -
Norman 5.80.02 2008.12.12 -
Panda 9.0.0.4 2008.12.14 -
PCTools 4.4.2.0 2008.12.14 -
Prevx1 V2 2008.12.14 -
Rising 21.07.62.00 2008.12.14 -
SecureWeb-Gateway 6.7.6 2008.12.12 -
Sophos 4.36.0 2008.12.14 -
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.14 -
TheHacker 6.3.1.4.187 2008.12.13 -
TrendMicro 8.700.0.1004 2008.12.12 -
VBA32 3.12.8.10 2008.12.13 -
ViRobot 2008.12.12.1515 2008.12.12 -
VirusBuster 4.5.11.0 2008.12.13 -

Information additionnelle
File size: 361600 bytes
MD5...: a29e1209f925a0e9b330e11da5fc7bab
SHA1..: 37094660a2e14d215a477db6f0f9bdaaebb97c94
SHA256: ecc0da9dffdc7ae260304239c50ab91b17860e964eceec6871fca23933d6a248
SHA512: 84bb38e77aa4438d21061e888de4599c892783f00e1e162bf0b6ecf4d1ab5fa2<BR>988ec7b9b664773fb1e3997187d015833d52e6351b460331562de90175501b63<BR>
ssdeep: 6144:4JVxTJMCOHOcecOeaVrith/CC/LxGh5wCQCzKLQ/xFczo:4DxTl2OzryZCA<BR>Q4CQDQ/<BR>
PEiD..: -
TrID..: File type identification<BR>Win32 Executable Generic (68.0%)<BR>Generic Win/DOS Executable (15.9%)<BR>DOS Executable Generic (15.9%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x60d23<BR>timedatestamp.....: 0x485b99ad (Fri Jun 20 11:51:09 2008)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 10 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x380 0x3f05a 0x3f080 6.58 469827b02f4403f5236e017c0c4bc49a<BR>.rdata 0x3f400 0x574 0x580 4.44 0eb5bdbba26ed4d079a201f965266cb4<BR>.data 0x3f980 0xa4a4 0xa500 0.06 ea0c5005c163289d0c29ae80301cb86f<BR>PAGE 0x49e80 0x1f85 0x2000 6.38 29223020b8202f58b61651e2099c84e8<BR>PAGELK 0x4be80 0x6f2 0x700 6.19 d82540f4886ebcffb849774114194524<BR>PAGEIPMc 0x4c580 0x2781 0x2800 6.43 bb13276e642dee8cf0a818967e06b022<BR>.edata 0x4ed80 0x341 0x380 5.23 32781ababdbcd87358c1d1eb84509dd0<BR>INIT 0x4f100 0x5936 0x5980 6.19 bafeca2e824bf19cb180841b36644365<BR>.rsrc 0x54a80 0x3f0 0x400 3.41 3fd0d62483602aa6ce780c14866b4e39<BR>.reloc 0x54e80 0x3590 0x3600 6.79 1e3ca28ef6ff9cf6fa16149dbf4fe144<BR><BR>( 4 imports ) <BR>&gt; HAL.dll: KfLowerIrql, KeRaiseIrqlToDpcLevel, KfReleaseSpinLock, KfAcquireSpinLock, KfRaiseIrql, KeGetCurrentIrql, KeQueryPerformanceCounter, ExAcquireFastMutex, ExReleaseFastMutex<BR>&gt; NDIS.SYS: NdisCloseAdapter, NdisCancelSendPackets, NdisFreePacket, NdisUnchainBufferAtFront, NdisCompletePnPEvent, NdisFreePacketPool, NdisRequest, NdisAllocatePacket, NdisFreeMemory, NdisQueryAdapterInstanceName, NdisGetDriverHandle, NdisOpenAdapter, NdisAllocatePacketPoolEx, NdisGetReceivedPacket, NdisRegisterProtocol, NdisAllocateBuffer, NdisSetPacketPoolProtocolId, NdisReturnPackets, NdisCopyBuffer, NdisAllocateBufferPool, NdisFreeBufferPool, NdisReEnumerateProtocolBindings, NdisCompleteBindAdapter<BR>&gt; ntoskrnl.exe: IoCreateDevice, _wcsicmp, wcscpy, wcsncpy, wcschr, ZwSetInformationThread, KeLeaveCriticalRegion, KeEnterCriticalRegion, KeQueryTimeIncrement, KeSetEvent, IoDeleteSymbolicLink, ExDeleteNPagedLookasideList, KeDelayExecutionThread, ZwOpenKey, KeSetTimerEx, KeInitializeTimer, KeInitializeDpc, ExInitializeNPagedLookasideList, MmLockPagableSectionByHandle, ZwQueryValueKey, ZwSetValueKey, InterlockedPopEntrySList, InterlockedPushEntrySList, ExIsProcessorFeaturePresent, RtlAddAccessAllowedAce, RtlCreateAcl, RtlLengthSid, SeExports, RtlMapGenericMask, IoGetFileObjectGenericMapping, ObReleaseObjectSecurity, SeSetSecurityDescriptorInfo, RtlLengthSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlCreateSecurityDescriptor, ObGetObjectSecurity, IofCallDriver, IoBuildDeviceIoControlRequest, IoGetDeviceObjectPointer, ObfDereferenceObject, RtlAddAce, RtlGetAce, IoCreateSymbolicLink, RtlInitializeSid, RtlLengthRequiredSid, ObSetSecurityObjectByPointer, RtlSelfRelativeToAbsoluteSD, RtlGetSaclSecurityDescriptor, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, RtlGetDaclSecurityDescriptor, RtlVerifyVersionInfo, VerSetConditionMask, IoWMIRegistrationControl, IoGetCurrentProcess, KeInitializeTimerEx, RtlExtendedIntegerMultiply, KeQueryInterruptTime, _aulldiv, DbgBreakPoint, KeSetTargetProcessorDpc, RtlSetBit, SeUnlockSubjectContext, SeAccessCheck, SeLockSubjectContext, ObDereferenceSecurityDescriptor, PsGetCurrentProcessId, RtlWalkFrameChain, ExNotifyCallback, ExCreateCallback, ObReferenceObjectByHandle, MmUnlockPages, SeFreePrivileges, SeAppendPrivileges, ObLogSecurityDescriptor, SeAssignSecurity, IoFileObjectType, MmProbeAndLockPages, IoAllocateMdl, _except_handler3, ProbeForWrite, ObfReferenceObject, PsGetCurrentProcess, RtlPrefetchMemoryNonTemporal, KeInitializeMutex, MmIsThisAnNtAsSystem, KeWaitForSingleObject, KeReleaseMutex, KeReadStateEvent, IoDeleteDevice, ZwEnumerateValueKey, RtlUnicodeStringToInteger, RtlIpv4StringToAddressW, RtlTimeToTimeFields, ExLocalTimeToSystemTime, RtlExtendedMagicDivide, RtlAppendUnicodeToString, ZwClose, _allmul, MmQuerySystemSize, RtlCompareUnicodeString, RtlInitializeBitMap, RtlClearAllBits, RtlSetBits, wcslen, RtlAreBitsSet, RtlClearBits, RtlFindClearBitsAndSet, RtlFindClearRuns, DbgPrint, memmove, RtlCopyUnicodeString, RtlAppendUnicodeStringToString, ZwLoadDriver, KeResetEvent, IoAcquireCancelSpinLock, IoReleaseCancelSpinLock, IofCompleteRequest, ExfInterlockedAddUlong, MmMapLockedPagesSpecifyCache, IoFreeMdl, ExfInterlockedInsertTailList, RtlInitUnicodeString, MmMapLockedPages, KeNumberProcessors, RtlUnicodeStringToAnsiString, MmLockPagableDataSection, MmUnlockPagableImageSection, RtlCompareMemory, ExAllocatePoolWithTag, KeCancelTimer, KeClearEvent, RtlAnsiStringToUnicodeString, IoRaiseInformationalHardError, KeInitializeEvent, ExFreePoolWithTag, ExAllocatePoolWithTagPriority, KeInitializeSpinLock, _alldiv, KeQuerySystemTime, KefAcquireSpinLockAtDpcLevel, KefReleaseSpinLockFromDpcLevel, KeBugCheckEx, RtlSubAuthoritySid, KeTickCount, MmBuildMdlForNonPagedPool, ZwDeviceIoControlFile, ZwCreateFile<BR>&gt; TDI.SYS: CTESystemUpTime, CTEBlock, CTELogEvent, CTESignal, CTEBlockWithTracker, CTEStartTimer, CTEInitEvent, CTEScheduleDelayedEvent, CTEInitTimer, TdiProviderReady, CTEInitialize, TdiDeregisterNetAddress, TdiRegisterNetAddress, TdiDeregisterDeviceObject, TdiRegisterDeviceObject, TdiDeregisterProvider, TdiRegisterProvider, TdiPnPPowerRequest, TdiCopyMdlChainToMdlChain, TdiInitialize, TdiDeregisterPnPHandlers, TdiRegisterPnPHandlers, CTEScheduleEvent, TdiCopyBufferToMdl, CTERemoveBlockTracker, CTEInsertBlockTracker, TdiMapUserRequest, TdiCopyBufferToMdlWithReservedMappingAtDpcLevel<BR><BR>( 31 exports ) <BR>ARPRcv, ARPRcvPacket, FreeIprBuff, GetIFAndLink, IPAddInterface, IPAllocBuff, IPDelInterface, IPDelayedNdisReEnumerateBindings, IPDeregisterARP, IPDisableSniffer, IPEnableSniffer, IPFreeBuff, IPGetAddrType, IPGetBestInterface, IPGetInfo, IPInjectPkt, IPProxyNdisRequest, IPRcvComplete, IPRcvPacket, IPRegisterARP, IPRegisterProtocol, IPSetIPSecStatus, IPTransmit, LookupRoute, LookupRouteInformation, LookupRouteInformationWithBuffer, SendICMPErr, SetIPSecPtr, UnSetIPSecPtr, UnSetIPSecSendPtr, tcpxsum<BR>

Rapport DDS :

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Version 1.0)

Microsoft Windows XP Professionnel
Boot Device: \Device\HarddiskVolume1
Install Date: 2007-06-08 19:34:11
System Uptime: 2008-12-10 15:25:42 (1 hours ago)

Motherboard: | | AM2NF6G-VSTA
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ | CPUSocket | 2009/200mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 78 GiB total, 9.561 GiB free.
D: is FIXED (NTFS) - 155 GiB total, 26.656 GiB free.
E: is Removable
F: is Removable
G: is Removable
H: is Removable
I: is CDROM ()
J: is CDROM ()
K: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP215: 2008-11-24 21:58:35 - Point de vérification système
RP216: 2008-11-25 17:43:58 - Removed Command & Conquer 3.
RP217: 2008-11-25 17:45:03 - Removed Dealio Toolbar 3.4.
RP218: 2008-11-25 17:47:38 - Removed Search Settings 1.2.
RP219: 2008-11-25 17:49:39 - Google Earth a été supprimé.
RP220: 2008-11-25 21:18:29 - Mettre à jour vers un pilote non signé
RP221: 2008-11-25 21:23:33 - Installation de pilote non signé
RP222: 2008-11-25 21:30:24 - Opération de restauration
RP223: 2008-11-26 07:19:41 - Removed Dealio Toolbar 3.4.
RP224: 2008-11-26 13:36:16 - Removed Command & Conquer 3.
RP225: 2008-11-26 13:46:38 - Configured VeohTV BETA
RP226: 2008-11-26 13:48:30 - Google Earth a été supprimé.
RP227: 2008-11-27 19:33:08 - Point de vérification système
RP228: 2008-11-28 21:16:26 - Point de vérification système
RP229: 2008-11-29 23:06:37 - Point de vérification système
RP230: 2008-12-01 17:35:07 - Point de vérification système
RP231: 2008-12-03 13:14:15 - Point de vérification système
RP232: 2008-12-04 18:30:58 - Point de vérification système
RP233: 2008-12-05 19:16:28 - Point de vérification système
RP234: 2008-12-06 21:36:59 - Point de vérification système
RP235: 2008-12-08 20:39:12 - Point de vérification système
RP236: 2008-12-10 13:37:08 - Supprimé Call of Duty(R) - World at War(TM)
RP237: 2008-12-10 14:10:49 - Opération de restauration
RP238: 2008-12-10 14:56:36 - ComboFix created restore point
RP239: 2008-12-10 15:27:48 - Opération de restauration

==== Installed Programs ======================

1.0
100%Naruto v2
32 Bit HP CIO Components Installer
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Help Center 2.0
Adobe Premiere Pro 2.0
Adobe Reader 8.1.2 - Français
Adobe Reader 8.1.2 Security Update 1 (KB403742)
Adobe Stock Photos 1.0
ALCATEL PC Suite V6.2.8
Apple Software Update
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
µTorrent
Audacity 1.3.4 (Unicode)
avast! Antivirus
Bink and Smacker
BufferChm
C4400
C4400_Help
Call of Duty(R) - World at War(TM) 1.1 Patch
Call of Duty(R) 4 - Modern Warfare(TM)
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
CamStudio
Cards_Calendar_OrderGift_DoMorePlugout
CartoExploreur
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help English
CCleaner (remove only)
Copy
Correctif pour Lecteur Windows Media 11 (KB939683)
Correctif pour Windows Internet Explorer 7 (KB947864)
Correctif pour Windows XP (KB952287)
Crysis(R)
CustomerResearchQFolder
Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî
Dawn of War - Dark Crusade
Dawn of War - Soulstorm
Destination Component
DeviceDiscovery
DeviceManagementQFolder
DivX Web Player
DocProc
DocProcQFolder
eMule
eSupportQFolder
Fallout 3
GPBaseService
High Definition Audio Driver Package - KB888111
HijackThis 1.99.1
Hotfix for Windows Media Format 11 SDK (KB929399)
HP Customer Participation Program 11.0
HP Imaging Device Functions 11.0
HP Photosmart C4400 All-In-One Driver Software 11.0 Rel .3
HP Photosmart Essential 2.5
HP Photosmart Essential 3.0
HP Smart Web Printing
HP Solution Center 11.0
HP Update
HPPhotoSmartPhotobookWebPack1
HPProductAssistant
HPSSupply
Indeo® Software
Java(TM) 6 Update 5
Java(TM) 6 Update 7
K-Lite Codec Pack 4.0.0 (Full)
Kit de développement Microsoft .NET Framework 2.0 SDK - FRA
Lame ACM MP3 Codec
Lecteur Windows Media 11
Les Sims 2
Les Sims 2 : Nuits de Folie
Les Sims 2 Fun en Famille Kit
Les Sims 2 : La bonne affaire
Les Sims™ 2 Animaux & Cie
Les Sims™ 2 Kit Glamour
Les Sims™ 2 Tout pour les ados Kit
Les Sims™ 2 Au fil des saisons
Les Sims™ 2 Bon Voyage
Logiciel QuickCam de Logitech
LooKeys
Managed DirectX (0900)
MarketResearch
McAfee VirusScan Enterprise
MediaCoder 0.6.1
Messenger Plus! Live & Sponsor (CiD)
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft .NET Framework 2.0 SDK - FRA
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft DirectX 9.0 SDK
Microsoft Games for Windows - LIVE Redistributable
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Professional
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual J# 2.0 Redistributable Package
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
Mise à jour de sécurité pour Lecteur Windows Media 8 (KB917734)
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)
Mise à jour de sécurité pour Windows XP (KB923689)
Mise à jour de sécurité pour Windows XP (KB938464)
Mise à jour de sécurité pour Windows XP (KB941569)
Mise à jour de sécurité pour Windows XP (KB946648)
Mise à jour de sécurité pour Windows XP (KB950760)
Mise à jour de sécurité pour Windows XP (KB950762)
Mise à jour de sécurité pour Windows XP (KB950974)
Mise à jour de sécurité pour Windows XP (KB951066)
Mise à jour de sécurité pour Windows XP (KB951376-v2)
Mise à jour de sécurité pour Windows XP (KB951376)
Mise à jour de sécurité pour Windows XP (KB951698)
Mise à jour de sécurité pour Windows XP (KB951748)
Mise à jour de sécurité pour Windows XP (KB952954)
Mise à jour de sécurité pour Windows XP (KB953839)
Mise à jour de sécurité pour Windows XP (KB954211)
Mise à jour de sécurité pour Windows XP (KB954459)
Mise à jour de sécurité pour Windows XP (KB955069)
Mise à jour de sécurité pour Windows XP (KB956391)
Mise à jour de sécurité pour Windows XP (KB956803)
Mise à jour de sécurité pour Windows XP (KB956841)
Mise à jour de sécurité pour Windows XP (KB957095)
Mise à jour de sécurité pour Windows XP (KB957097)
Mise à jour de sécurité pour Windows XP (KB958644)
Mise à jour pour Windows XP (KB951072-v2)
Mise à jour pour Windows XP (KB951978)
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
MSN Reaper
MSXML 4.0 SP2 (KB954430)
MSXML 6.0 Parser (KB925673)
mTC (remove only)
Nero Suite
NVIDIA Drivers
Oblivion
OCR Software by I.R.I.S. 11.0
One-touch Multimedia Keyboard
osu!
Paint Shop Pro 6.0 (CD-ROM)
PanoStandAlone
Pcsx2 0.9.4 Watermoose
Programme de gestion Camera de Logitech®
PS_AIO_03_C4400_ProductContext
PS_AIO_03_C4400_Software
PS_AIO_03_C4400_Software_Min
PSSWCORE
PunkBuster Services
Rappelz
Realtek High Definition Audio Driver
Ri4m v5.0.1d
RPG Maker VX 1.02
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0006]
Scan
Search Settings 1.2
Security Update for CAPICOM (KB931906)
Shop for HP Supplies
Skins
SmartWebPrinting
SolutionCenter
Speed Gear 5.00
SPORE™
Spybot - Search & Destroy
Star Wars Jedi Knight Jedi Academy
Status
SUPER © Version 2007.bld.23 (July 4, 2007)
The Sims 2 University
Toolbox
TrayApp
UnloadSupport
VideoLAN VLC media player 0.8.6c
VideoToolkit01
Warhammer 40,000: Dawn Of War - Gold Edition
WebFldrs XP
WebReg
Windows Communication Foundation
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Live installer
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
Windows Workflow Foundation
Windows XP Service Pack 3
World of Warcraft
Xfire (remove only)
XML Paper Specification Shared Components Pack 1.0
Yahoo! Toolbar

==== Event Viewer Messages ===================


==== End Of File ===========================

sur " http://www.kaspersky.com/kos/eng/p [...] bscan.html " le download fini, la page ne fait plus rien même pas de scan...