Infection virus

bonjour je pense avoir un virus car mon pc rame un peut. quelqu'un peut-il m'aider suis novice en informatique. par avance mercie pour les reponses qui me seront apporter.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:22:29, on 17/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\olivier\AppData\Local\gioaksk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Users\olivier\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Afficher Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "J:\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [gioaksk] "c:\users\olivier\appdata\local\gioaksk.exe" gioaksk
O4 - HKCU\..\Run: [drvsyskit] C:\Users\olivier\AppData\Roaming\drivers\winupgro.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/re [...] oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6 [...] /cabsa.cab
O21 - SSODL: vadokmxt - {DAB3293C-05FE-4A4B-8597-C3DB004CE2BF} - (no file)
O21 - SSODL: wdpoefan - {0D6B3FEB-A35E-4B39-9652-61491C37D924} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: EasyBits Magic Desktop Services for Windows NT (ezntsvc) - EasyBits Software Corp. - C:\Windows\system32\ezNTSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: FrontLine Drivers Update Tool Drivers Auto Removal (pr2ajbeb) (pr2ajbeb) - Unknown owner - C:\Windows\system32\pr2ajbeb.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 10731 bytes

ok vais faire ça et te tiens au courant

DDS (Ver_09-01-07.01) - NTFSx86
Run by olivier at 21:24:39,45 on 17/01/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_11
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.894.136 [GMT 1:00]

AV: Norton Internet Security *On-access scanning disabled* (Outdated)
FW: Norton Internet Security *disabled*

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\olivier\AppData\Local\gioaksk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Windows\system32\ezNTSvc.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\olivier\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Bar = hxxp://recherche.neuf.fr/ie/default.html
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=73&bd=Pavilion&pf=desktop
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=73&bd=Pavilion&pf=desktop
mDefault_Search_URL = hxxp://recherche.neuf.fr/
uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
mSearchAssistant = hxxp://recherche.neuf.fr/ie/default.html
mWinlogon: Userinit=c:\windows\system32\ezShellStart.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: NCO 2.0 IE BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\common files\symantec shared\coshared\browser\2.0\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Programme d'aide de l'Assistant de connexion Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\2.1.1119.1736\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
TB: Afficher Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\common files\symantec shared\coshared\browser\2.0\CoIEPlg.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
EB: &winbutler bar: {5b6d45f9-19ed-419a-84c5-7049ef9c7e8b} - %SystemRoot%\system32\shdocvw.dll
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [gioaksk] "c:\users\olivier\appdata\local\gioaksk.exe" gioaksk
uRun: [drvsyskit] c:\users\olivier\appdata\roaming\drivers\winupgro.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [KBD] c:\hp\kbd\KbdStub.EXE
mRun: [OsdMaestro] "c:\program files\hewlett-packard\on-screen osd indicator\OSD.exe"
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [snpstd3] c:\windows\vsnpstd3.exe
mRun: [fssui] "c:\program files\windows live\family safety\fsui.exe" -autorun
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [QuickTime Task] "J:\qttask.exe" -atboottime
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
StartupFolder: c:\users\olivier\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
uPolicies-system: DisableTaskMgr = 1 (0x1)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xporter vers Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\ssv.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
Handler: ms-its51 - {F6F1E82D-DE4D-11D2-875C-0000F8105754} - c:\program files\common files\microsoft shared\information retrieval\itss51.dll
SSODL: vadokmxt - {DAB3293C-05FE-4A4B-8597-C3DB004CE2BF} - No File
SSODL: wdpoefan - {0D6B3FEB-A35E-4B39-9652-61491C37D924} - No File
SEH: EasyBits ShellExecute Hook: {e54729e8-bb3d-4270-9d49-7389ea579090} - c:\windows\system32\EZUPBH~1.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\olivier\appdata\roaming\mozilla\firefox\profiles\3o7qk2za.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - component: c:\program files\daemon tools toolbar\firefoxdtt\components\DTToolbarFF.dll
FF - component: c:\program files\mozilla firefox\components\coFFPlgn.dll
FF - plugin: c:\program files\bittorrent_dna\npbtdna.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\olivier\program files\dna\plugins\npbtdna.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============

R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\symantec\defini~1\symcdata\ipsdefs\20090113.002\IDSvix86.sys [2009-1-14 270384]
R1 sK9Ou0s;sK9Ou0s;c:\users\olivier\appdata\roaming\drivers\srosa2.sys [2009-1-16 7168]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2008-9-5 99376]
R3 SYMNDISV;SYMNDISV;c:\windows\system32\drivers\symndisv.sys [2008-6-13 41008]
R4 athsgt;athsgt;c:\windows\system32\drivers\athsgt.sys [2008-5-24 164992]
R4 ezntsvc;EasyBits Magic Desktop Services for Windows NT;c:\windows\system32\ezntsvc.exe [2007-8-22 33792]
R4 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2009-1-13 55264]
R4 fsssvc;Windows Live Contrôle parental;c:\program files\windows live\family safety\fsssvc.exe [2008-12-8 533344]
R4 limsgt;limsgt;c:\windows\system32\drivers\limsgt.sys [2008-5-24 12544]
R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\common files\symantec shared\CCSVCHST.EXE [2008-4-23 149352]
R4 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2008-12-4 226640]
S3 Boonty Games;Boonty Games;c:\program files\common files\boonty shared\service\Boonty.exe [2008-4-27 69120]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2007-5-29 23888]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-7-25 191656]
S4 pr2ajbeb;FrontLine Drivers Update Tool Drivers Auto Removal (pr2ajbeb);c:\windows\system32\pr2ajbeb.exe svc --> c:\windows\system32\pr2ajbeb.exe svc [?]

=============== Created Last 30 ================

2009-01-17 20:42 250 a------- c:\windows\gmer.ini
2009-01-17 19:01 <DIR> --d----- C:\ToolBar SD
2009-01-17 17:16 108,336 a------- c:\windows\system32\Mswinsck.OCX
2009-01-17 17:16 <DIR> --d----- c:\program files\Setup Wizard
2009-01-16 17:39 <DIR> --d----- c:\program files\Panda Security
2009-01-16 16:06 <DIR> --d----- c:\programdata\DAEMON Tools Lite
2009-01-16 16:06 <DIR> --d----- c:\progra~2\DAEMON Tools Lite
2009-01-16 16:05 <DIR> --d----- c:\program files\DAEMON Tools Toolbar
2009-01-16 16:04 <DIR> --d----- c:\users\olivier\appdata\roaming\DAEMON Tools Lite
2009-01-16 15:42 <DIR> --d-h--- c:\users\olivier\appdata\roaming\drivers
2009-01-13 23:11 288,768 a------- c:\windows\system32\drivers\srv.sys
2009-01-13 11:56 <DIR> --d----- c:\users\olivier\Tracing
2009-01-13 10:41 55,264 a------- c:\windows\system32\drivers\fssfltr.sys
2009-01-13 10:14 <DIR> --d----- c:\program files\Microsoft
2009-01-13 10:14 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-01-13 09:33 <DIR> --d----- c:\program files\common files\Windows Live
2008-12-19 09:03 410,984 a------- c:\windows\system32\deploytk.dll

==================== Find3M ====================

2009-01-17 17:30 669,652 a------- c:\windows\system32\perfh00C.dat
2009-01-17 17:30 123,690 a------- c:\windows\system32\perfc00C.dat
2009-01-16 10:22 138 a------- c:\users\olivier\appdata\roaming\wklnhst.dat
2009-01-11 10:13 124,464 a------- c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-11 10:13 10,635 a------- c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-11 10:13 806 a------- c:\windows\system32\drivers\SYMEVENT.INF
2009-01-05 15:06 146,351 a------- c:\windows\hpoins18.dat
2008-12-05 00:11 308,584 a------- c:\windows\WLXPGSS.SCR
2008-12-02 22:37 49,480 a------- c:\windows\system32\sirenacm.dll
2008-11-01 04:44 52,736 a------- c:\windows\apppatch\iebrshim.dll
2008-11-01 04:44 2,154,496 a------- c:\windows\apppatch\AcGenral.dll
2008-11-01 04:44 541,696 a------- c:\windows\apppatch\AcLayers.dll
2008-11-01 04:44 460,288 a------- c:\windows\apppatch\AcSpecfc.dll
2008-11-01 04:44 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2008-11-01 04:44 28,672 a------- c:\windows\system32\Apphlpdm.dll
2008-11-01 02:21 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2008-10-29 07:29 2,927,104 a------- c:\windows\explorer.exe
2008-10-22 04:57 241,152 a------- c:\windows\system32\PortableDeviceApi.dll
2008-10-22 02:22 2,048 a------- c:\windows\system32\tzres.dll
2008-10-21 06:25 296,960 a------- c:\windows\system32\gdi32.dll
2008-10-21 06:25 1,645,568 a------- c:\windows\system32\connect.dll
2008-09-18 19:03 143,360 a------- c:\windows\inf\infstrng.dat
2008-09-18 19:03 51,200 a------- c:\windows\inf\infpub.dat
2008-09-18 19:03 86,016 a------- c:\windows\inf\infstor.dat
2008-06-12 02:12 665,600 a------- c:\windows\inf\drvindex.dat
2008-06-04 12:35 174 a--sh--- c:\program files\desktop.ini
2007-11-19 18:54 87,608 a------- c:\users\olivier\appdata\roaming\inst.exe
2007-11-19 18:54 47,360 a------- c:\users\olivier\appdata\roaming\pcouffin.sys
2007-01-03 21:23 340,236 a------- c:\windows\inf\perflib\040c\perfi.dat
2007-01-03 21:23 340,236 a------- c:\windows\inf\perflib\040c\perfh.dat
2007-01-03 21:23 37,390 a------- c:\windows\inf\perflib\040c\perfd.dat
2007-01-03 21:23 37,390 a------- c:\windows\inf\perflib\040c\perfc.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2007-10-16 16:39 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2007-10-16 16:39 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2007-10-16 16:39 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat
2008-05-10 16:37 23 a--sh--- c:\windows\system32\fcdbfafcfce4_z.dll

============= FINISH: 21:25:58,29 ===============

re voici log combofix


ComboFix 09-01-17.03 - olivier 2009-01-18 9:21:59.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.894.193 [GMT 1:00]
Lancé depuis: c:\users\olivier\Desktop\ComboFix.exe
AV: Norton Internet Security *On-access scanning disabled* (Outdated)
FW: Norton Internet Security *disabled*
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Setup Wizard
c:\program files\Setup Wizard\settings.ini
c:\program files\Setup Wizard\SetupWizard.exe
c:\program files\Setup Wizard\spywaredoctor.exe
c:\program files\Setup Wizard\unins000.dat
c:\program files\Setup Wizard\unins000.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Setup Wizard
c:\programdata\Microsoft\Windows\Start Menu\Programs\Setup Wizard\Désinstaller SetupWizard.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Setup Wizard\SetupWizard.lnk
c:\users\olivier\AppData\Local\gioaksk.dat
c:\users\olivier\AppData\Local\gioaksk.exe
c:\users\olivier\AppData\Local\gioaksk_nav.dat
c:\users\olivier\AppData\Local\gioaksk_navps.dat
c:\users\olivier\AppData\Roaming\drivers\downld
c:\users\olivier\AppData\Roaming\drivers\srosa2.sys
c:\users\olivier\AppData\Roaming\drivers\winupgro.exe
c:\users\olivier\AppData\Roaming\inst.exe

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SK9OU0S
-------\Service_Boonty Games
-------\Service_sK9Ou0s
-------\Service_srosa


((((((((((((((((((((((((((((( Fichiers créés du 2008-12-18 au 2009-01-18 ))))))))))))))))))))))))))))))))))))
.

2009-01-17 20:42 . 2009-01-17 20:42 250 --a------ c:\windows\gmer.ini
2009-01-17 19:01 . 2009-01-17 19:14 <REP> d-------- C:\ToolBar SD
2009-01-17 17:16 . 2005-06-06 13:31 108,336 --a------ c:\windows\System32\Mswinsck.OCX
2009-01-16 18:56 . 2009-01-16 19:09 <REP> d-------- c:\windows\BDOSCAN8
2009-01-16 17:51 . 2009-01-16 17:51 <REP> d-------- c:\windows\Sun
2009-01-16 17:39 . 2009-01-17 14:35 <REP> d-------- c:\program files\Panda Security
2009-01-16 16:06 . 2009-01-16 16:06 <REP> d-------- c:\users\All Users\DAEMON Tools Lite
2009-01-16 16:06 . 2009-01-16 16:06 <REP> d-------- c:\programdata\DAEMON Tools Lite
2009-01-16 16:05 . 2009-01-16 16:06 <REP> d-------- c:\program files\DAEMON Tools Toolbar
2009-01-16 16:04 . 2009-01-16 16:08 <REP> d-------- c:\users\olivier\AppData\Roaming\DAEMON Tools Lite
2009-01-16 15:42 . 2009-01-18 09:24 <REP> d--h----- c:\users\olivier\AppData\Roaming\drivers
2009-01-13 23:11 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys
2009-01-13 11:56 . 2009-01-17 19:48 <REP> d-------- c:\users\olivier\Tracing
2009-01-13 10:41 . 2008-12-08 17:01 55,264 --a------ c:\windows\System32\drivers\fssfltr.sys
2009-01-13 10:36 . 2009-01-13 10:36 <REP> d-------- c:\program files\Microsoft Sync Framework
2009-01-13 10:14 . 2009-01-13 10:14 <REP> d-------- c:\program files\Windows Live SkyDrive
2009-01-13 10:14 . 2009-01-13 10:43 <REP> d-------- c:\program files\Microsoft
2009-01-13 09:33 . 2009-01-13 09:33 <REP> d-------- c:\program files\Common Files\Windows Live
2008-12-19 09:03 . 2008-12-19 09:00 410,984 --a------ c:\windows\System32\deploytk.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-17 16:31 --------- d---a-w c:\programdata\TEMP
2009-01-17 16:13 --------- d-----w c:\users\olivier\AppData\Roaming\BitTorrent
2009-01-17 13:49 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-01-17 09:30 --------- d-----w c:\program files\Lavasoft
2009-01-17 09:25 --------- d-----w c:\programdata\Lavasoft
2009-01-16 20:57 --------- d-----w c:\program files\Windows Mail
2009-01-16 15:18 --------- d-----w c:\program files\DAEMON Tools Lite
2009-01-16 15:08 --------- d-----w c:\users\olivier\AppData\Roaming\DAEMON Tools Pro
2009-01-16 15:08 --------- d-----w c:\users\olivier\AppData\Roaming\DAEMON Tools
2009-01-16 13:24 --------- d-----w c:\programdata\Microsoft Help
2009-01-16 09:22 138 ----a-w c:\users\olivier\AppData\Roaming\wklnhst.dat
2009-01-16 01:03 --------- d-----w c:\programdata\Symantec
2009-01-15 07:45 --------- d-----w c:\program files\Everest Poker
2009-01-13 15:13 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-13 09:42 --------- d-----w c:\program files\Windows Live
2009-01-13 09:38 --------- d-----w c:\program files\Windows Live Toolbar
2009-01-11 09:13 806 ----a-w c:\windows\system32\drivers\SYMEVENT.INF
2009-01-11 09:13 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-11 09:13 10,635 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-11 09:13 --------- d-----w c:\program files\Symantec
2009-01-04 20:03 --------- d-----w c:\programdata\Roxio
2008-12-21 12:36 --------- d-----w c:\programdata\DVD Shrink
2008-12-19 14:04 --------- d-----w c:\program files\Anuman Interactive
2008-12-19 13:46 --------- d-----w c:\program files\Java
2008-12-19 13:36 --------- d-----w c:\program files\Atari
2008-12-19 13:35 --------- d-----w c:\program files\Cyanide
2008-12-19 13:26 --------- d-----w c:\program files\Mindscape
2008-12-11 17:08 --------- d-----w c:\program files\Micro Application
2008-12-09 14:07 --------- d-----w c:\program files\Nathan
2008-12-04 23:11 308,584 ----a-w c:\windows\WLXPGSS.SCR
2008-11-24 11:04 --------- d-----w c:\users\olivier\AppData\Roaming\dvdcss
2008-11-20 17:13 --------- d-----w c:\users\olivier\AppData\Roaming\Anuman Interactive
2008-11-01 03:44 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll
2008-11-01 03:44 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll
2008-11-01 03:44 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll
2008-11-01 03:44 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll
2008-11-01 03:44 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll
2008-10-29 06:29 2,927,104 ----a-w c:\windows\explorer.exe
2008-06-04 11:35 174 --sha-w c:\program files\desktop.ini
2007-11-19 17:54 47,360 ----a-w c:\users\olivier\AppData\Roaming\pcouffin.sys
2007-08-24 19:52 300,400 ----a-w c:\program files\mozilla firefox\components\coFFPlgn.dll
2007-10-16 15:39 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2007-10-16 15:39 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2007-10-16 15:39 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
2008-05-10 15:37 23 --sha-w c:\windows\System32\fcdbfafcfce4_z.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-23 68856]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2006-09-28 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2008-12-08 453984]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-22 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-22 92704]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-19 136600]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 c:\windows\RtHDVCpl.exe]

c:\users\olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d'‚cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-01-02 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"= "c:\windows\system32\EZUPBH~1.DLL" [2007-08-22 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2856635891-3439680339-913657767-1000]
"EnableNotificationsRef"=dword:00000002

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{C607E263-78F0-4955-BFBE-D2D3400B79B6}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{1667334A-DF5E-4F24-8AA7-A5AE50518AC2}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"TCP Query User{AAFF800C-E4E1-4EB3-9794-27BADDF5C8CE}k:\\emule\\emule.exe"= UDP:k:\emule\emule.exe:eMule
"UDP Query User{A47058F2-52D4-4FB6-8E3E-06216C0E351F}k:\\emule\\emule.exe"= TCP:k:\emule\emule.exe:eMule
"{11F293D6-A1D7-4D12-8B2D-DF3B9F0B17D4}"= UDP:k:\emule\emule.exe:eMule
"{E72C7EF0-A09C-4C14-917D-FE6FB541BAE0}"= TCP:k:\emule\emule.exe:eMule
"TCP Query User{545452AF-6F02-4A13-A342-8BB00E53A2B5}c:\\program files\\trackmania original\\tmoriginal.exe"= UDP:c:\program files\trackmania original\tmoriginal.exe:TmOriginal
"UDP Query User{08CA54DF-1098-4A89-8404-0DB792430423}c:\\program files\\trackmania original\\tmoriginal.exe"= TCP:c:\program files\trackmania original\tmoriginal.exe:TmOriginal
"{17512FF0-8FAA-4D76-A1B1-DAF281652B95}"= UDP:c:\program files\Cyanide\Pro Cycling Manager\Cym2005.exero Cycling Manager
"{86B885F6-35E9-449E-9E46-A1935EEA516F}"= TCP:c:\program files\Cyanide\Pro Cycling Manager\Cym2005.exero Cycling Manager
"{4DCC1FC9-0179-4FA0-8D3D-0FF8BFB27C5E}"= UDP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter
"{A523AFCE-69EA-4470-A2AF-D2770FEDA428}"= TCP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter
"{2268A78F-E353-40BB-8587-29E8A2D9F4CD}"= UDP:c:\program files\BitTorrent_DNA\dna.exe:BitTorrent DNA
"{F3976C82-3E12-4D06-AE56-6AA9933CE5EB}"= TCP:c:\program files\BitTorrent_DNA\dna.exe:BitTorrent DNA
"{1DC09C42-23E6-4996-982D-9F76F7AF5F4B}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{96257485-5E4E-41F4-82A5-796198B24C35}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{6487BAFC-6AC5-4A08-8747-3D253E84BABC}"= UDP:j:\divers\BitTorrent\bittorrent.exe:BitTorrent
"{91DFB2F7-1982-497E-8A1B-D8937C43A517}"= TCP:j:\divers\BitTorrent\bittorrent.exe:BitTorrent
"TCP Query User{19FBF95D-368A-4DA3-BD4F-1D5455F98A22}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= UDP:c:\users\olivier\program files\bittorrent_dna\dna.exena.exe
"UDP Query User{057209DB-34A5-4DC7-ACE7-143EDAE50EE8}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= TCP:c:\users\olivier\program files\bittorrent_dna\dna.exena.exe
"TCP Query User{ED698191-9762-4F0B-9A92-E1646711329A}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= UDP:c:\users\olivier\program files\bittorrent_dna\dna.exena.exe
"UDP Query User{B3524D6B-C784-4A0F-9FFE-1D35796D48CE}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= TCP:c:\users\olivier\program files\bittorrent_dna\dna.exena.exe
"TCP Query User{E6D3238C-E6A2-46CA-A5C7-B146B27CF778}c:\\users\\olivier\\program files\\dna\\btdna.exe"= UDP:c:\users\olivier\program files\dna\btdna.exe:btdna.exe
"UDP Query User{4B97F46D-521C-421A-8315-9336A1154C2B}c:\\users\\olivier\\program files\\dna\\btdna.exe"= TCP:c:\users\olivier\program files\dna\btdna.exe:btdna.exe
"TCP Query User{4594DA5B-C58C-4223-855D-6AFA9A859C94}c:\\program files\\mswt kart\\msworldtour.exe"= UDP:c:\program files\mswt kart\msworldtour.exe:MSWorldTour
"UDP Query User{798D815C-7F64-458B-AA69-F1554CA495EC}c:\\program files\\mswt kart\\msworldtour.exe"= TCP:c:\program files\mswt kart\msworldtour.exe:MSWorldTour
"{0E8980FF-E58E-4FB5-8CBC-FB798AE874D5}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp
"{54CCA526-2F37-4853-9087-07C4BC46BA5A}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp
"{BEBA31AE-34AF-44E2-A49E-E4278828EAAE}"= UDP:c:\program files\ma-config.com\maconfservice.exe:maconfservice
"{8C7750AA-6B5C-440B-81AE-02AE884C7B74}"= TCP:c:\program files\ma-config.com\maconfservice.exe:maconfservice
"TCP Query User{E9F2E4BC-B7AF-4F98-895E-D57E372BB954}c:\\users\\olivier\\program files\\bittorrent\\bittorrent.exe"= UDP:c:\users\olivier\program files\bittorrent\bittorrent.exe:bittorrent.exe
"UDP Query User{A49CA5D2-8D25-4418-82B2-54DF5200D80B}c:\\users\\olivier\\program files\\bittorrent\\bittorrent.exe"= TCP:c:\users\olivier\program files\bittorrent\bittorrent.exe:bittorrent.exe
"{95433AC2-E401-4AB3-AA40-DF9A9ECB3373}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Program Files\\BitTorrent\\bittorrent.exe"= c:\program files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
"j:\\divers\\BitTorrent\\bittorrent.exe"= j:\divers\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent

R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20090113.002\IDSvix86.sys [2009-01-14 270384]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2008-09-05 99376]
R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [2008-06-13 41008]
R4 athsgt;athsgt;c:\windows\System32\drivers\athsgt.sys [2008-05-24 164992]
R4 ezntsvc;EasyBits Magic Desktop Services for Windows NT;c:\windows\System32\ezntsvc.exe [2007-08-22 33792]
R4 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-01-13 55264]
R4 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
R4 limsgt;limsgt;c:\windows\System32\drivers\limsgt.sys [2008-05-24 12544]
R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [2008-04-23 149352]
R4 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
S3 COH_Mon;COH_Mon;c:\windows\System32\drivers\COH_Mon.sys [2007-05-29 23888]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-07-25 191656]
S4 pr2ajbeb;FrontLine Drivers Update Tool Drivers Auto Removal (pr2ajbeb);c:\windows\system32\pr2ajbeb.exe svc --> c:\windows\system32\pr2ajbeb.exe svc [?]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - COMHOST
*Deregistered* - sptd

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffafc7c9-3bc6-11dd-91d1-001bb97f72f5}]
\shell\AutoRun\command - f:\cdsample\AUTORUN\AUTORUN.EXE
.
Contenu du dossier 'Tâches planifiées'
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-gioaksk - c:\users\olivier\appdata\local\gioaksk.exe
HKLM-Run-QuickTime Task - J:\qttask.exe
SSODL-vadokmxt-{DAB3293C-05FE-4A4B-8597-C3DB004CE2BF} - (no file)
SSODL-wdpoefan-{0D6B3FEB-A35E-4B39-9652-61491C37D924} - (no file)


.
------- Examen supplémentaire -------
.
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=73&bd=Pavilion&pf=desktop
uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
Handler: ms-its51 - {F6F1E82D-DE4D-11D2-875C-0000F8105754} - c:\program files\Common Files\microsoft shared\Information Retrieval\itss51.dll
FF - ProfilePath - c:\users\olivier\AppData\Roaming\Mozilla\Firefox\Profiles\3o7qk2za.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - component: c:\program files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
FF - component: c:\program files\Mozilla Firefox\components\coFFPlgn.dll
FF - plugin: c:\program files\BitTorrent_DNA\npbtdna.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\olivier\Program Files\DNA\plugins\npbtdna.dll

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-18 09:31:20
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\nvvsvc.exe
c:\windows\System32\audiodg.exe
c:\windows\System32\rundll32.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\conime.exe
c:\windows\System32\rundll32.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\HP\Digital Imaging\bin\hpqste08.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\hp\KBD\kbd.exe
.
**************************************************************************
.
Heure de fin: 2009-01-18 9:37:09 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-01-18 08:36:36

Avant-CF: 35ÿ466ÿ936ÿ320 octets libres
AprÞs-CF: 35,299,565,568 octets libres

269 --- E O F --- 2009-01-16 20:57:32

re desoler d'avoir ete aussi long, mais impossible de lancer mba en mode sans echec "erreur 181". je l'ai fait en mode normal ca change quelque chose

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6001 Service Pack 1

18/01/2009 14:35:26
mbam-log-2009-01-18 (14-35-26).txt

Type de recherche: Examen complet (C:\|D:\|J:\|K:\|)
Eléments examinés: 190734
Temps écoulé: 2 hour(s), 9 minute(s), 40 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{af1a6b09-a361-4c27-b5d6-61705f7c28b2} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e5df674f-3727-4856-8d74-8db49a4ce9f1} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{600b86be-a420-44e4-b179-ea0728329d2c} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\OneMoreKey (Rogue.Installer) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Qoobox\Quarantine\C\Users\olivier\AppData\Roaming\drivers\srosa2.sys.vir (Worm.Bagel) -> Quarantined and deleted successfully.