Analyse de rapport suite combofix pour le virus backdoor.tidserv!inf

Bonjour à tous,

J'ai été victime d'un virus nommé backdoor.tidserv!inf, j'ai donc exécuter le combifix.exe dont voici le rapport d'analyse :


[b][b][b][b]ComboFix 09-02-18.01 - Administrateur 2009-02-19 18:33:21.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1023.697 [GMT 1:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
c:\program files\Mozilla Firefox\components\iamfamous.dll
c:\recycler\S-1-4-32-100018001-100008902-100028731-5611.com
c:\windows\system32\d3d8caps.dat
c:\windows\system32\drivers\gaopdxpqekdbtp.sys
c:\windows\system32\drivers\gaopdxqhxvmppw.sys
c:\windows\system32\drivers\gaopdxserv.sys
c:\windows\system32\gaopdxaoevstji.dll
c:\windows\system32\gaopdxcounter
D:\Autorun.inf
d:\recycler\S-1-4-32-100018001-100008902-100028731-5611.com
d:\recycler\S-3-6-33-100027352-100008270-100004844-5493.com
d:\recycler\S-4-2-12-100024945-100025626-100028318-8586.com
G:\Autorun.inf
g:\recycler\S-1-4-32-100018001-100008902-100028731-5611.com
g:\recycler\S-3-6-33-100027352-100008270-100004844-5493.com
g:\recycler\S-4-2-12-100024945-100025626-100028318-8586.com
H:\autorun.inf
h:\recycler\S-1-4-32-100018001-100008902-100028731-5611.com

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_gaopdxserv.sys


((((((((((((((((((((((((((((( Fichiers créés du 2009-01-19 au 2009-02-19 ))))))))))))))))))))))))))))))))))))
.

2009-02-18 22:37 . 2009-02-18 22:37 <REP> d-------- c:\program files\Norton Support
2009-02-18 22:16 . 2008-12-12 04:08 36,272 -ra------ c:\windows\system32\drivers\SymIM.sys
2009-02-18 20:28 . 2009-02-18 20:28 <REP> d-------- c:\documents and settings\All Users\Application Data\Symantec
2009-02-18 20:27 . 2009-02-18 22:26 <REP> d-------- c:\windows\system32\drivers\NAV
2009-02-18 20:27 . 2009-02-18 20:27 <REP> d-------- c:\program files\Windows Sidebar
2009-02-18 20:27 . 2009-02-18 20:27 <REP> d-------- c:\program files\Symantec
2009-02-18 20:27 . 2009-02-18 20:27 <REP> d-------- c:\program files\Norton AntiVirus
2009-02-18 20:27 . 2009-02-18 20:46 <REP> d-------- c:\program files\Fichiers communs\Symantec Shared
2009-02-18 20:27 . 2009-02-18 20:27 124,464 --a------ c:\windows\system32\drivers\SYMEVENT.SYS
2009-02-18 20:27 . 2009-02-18 20:27 60,808 --a------ c:\windows\system32\S32EVNT1.DLL
2009-02-18 20:27 . 2009-02-18 20:27 10,635 --a------ c:\windows\system32\drivers\SYMEVENT.CAT
2009-02-18 20:27 . 2009-02-18 20:27 806 --a------ c:\windows\system32\drivers\SYMEVENT.INF
2009-02-18 20:26 . 2009-02-18 20:26 <REP> d-------- c:\program files\NortonInstaller
2009-02-18 20:26 . 2009-02-18 20:26 <REP> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-02-18 20:26 . 2009-02-18 20:32 <REP> d-------- c:\documents and settings\All Users\Application Data\Norton
2009-02-18 19:05 . 2009-02-18 19:05 <REP> d-------- c:\program files\Fichiers communs\CyberLink
2009-02-18 19:05 . 2009-02-18 19:05 <REP> d-------- c:\program files\CyberLink
2009-02-18 19:03 . 2009-02-18 19:03 <REP> d-------- c:\documents and settings\All Users\Application Data\Temp
2009-02-18 18:48 . 2009-02-18 18:48 <REP> d-------- c:\documents and settings\Administrateur\Application Data\CyberLink
2009-02-18 18:47 . 2009-02-18 18:48 <REP> d-------- c:\documents and settings\All Users\Application Data\CyberLink
2009-02-18 18:46 . 2009-02-18 19:04 29,480 --a------ c:\windows\system32\msxml3a.dll
2009-02-15 20:52 . 2009-02-15 20:52 <REP> d-------- c:\program files\AnalogX
2009-02-14 20:06 . 2009-02-14 20:06 <REP> d-------- c:\documents and settings\Administrateur\Application Data\vlc
2009-02-14 20:05 . 2009-02-14 20:05 <REP> d-------- c:\program files\VideoLAN
2009-02-14 20:00 . 2009-02-14 20:00 <REP> d-------- c:\program files\AC3Filter
2009-02-14 20:00 . 2008-07-09 09:05 421,888 --a------ c:\windows\system32\ac3filter.acm
2009-02-14 19:56 . 2008-09-24 21:26 336,384 --a------ c:\windows\system32\lame.ax
2009-02-14 19:52 . 2009-02-14 19:52 37,270 --a------ c:\windows\system32\OggDSUninst.exe
2009-02-14 19:44 . 2009-02-14 19:44 <REP> d-------- c:\documents and settings\Administrateur\Application Data\DivX
2009-02-12 20:07 . 2009-02-12 20:09 <REP> d-------- c:\program files\Windows Media Connect
2009-02-12 20:07 . 2009-02-12 20:09 1,008 --a------ c:\windows\system32\InstallUtil.InstallLog
2009-02-12 19:21 . 2009-02-12 19:21 8,192 --a------ c:\windows\REGLOCS.OLD
2009-02-10 22:49 . 2009-02-10 22:49 <REP> d-------- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-02-10 22:43 . 2009-02-12 00:29 <REP> d--h----- c:\windows\$hf_mig$
2009-02-10 22:43 . 2009-02-10 22:43 <REP> d-------- c:\program files\MSXML 4.0
2009-02-10 22:23 . 2009-02-10 22:23 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Nero
2009-02-10 19:29 . 2009-02-10 19:29 <REP> d-------- c:\program files\Lame
2009-02-10 19:29 . 2003-12-22 15:33 270,336 --a------ c:\windows\system32\lame_enc.dll
2009-02-10 19:18 . 2009-02-10 19:18 <REP> d-------- c:\program files\GoldWave
2009-02-10 19:18 . 2009-02-10 19:18 6,592 --a------ c:\windows\gwpreset.ini
2009-02-10 19:18 . 2009-02-10 19:18 3,362 --a------ c:\windows\express.eqx
2009-02-10 19:18 . 2009-02-10 19:30 1,720 --a------ c:\windows\goldwave.ini
2009-02-10 18:30 . 2008-04-13 09:40 43,904 --a------ c:\windows\system32\drivers\sbp2port.sys
2009-02-10 18:23 . 2009-02-10 18:23 <REP> d-------- c:\program files\Fichiers communs\Adobe
2009-02-10 17:47 . 2008-10-16 14:06 268,648 --a------ c:\windows\system32\mucltui.dll
2009-02-10 17:47 . 2008-10-16 14:06 208,744 --a------ c:\windows\system32\muweb.dll
2009-02-10 17:47 . 2008-10-16 14:06 27,496 --a------ c:\windows\system32\mucltui.dll.mui
2009-02-09 22:05 . 2009-02-09 22:05 <REP> d-------- c:\program files\uTorrent
2009-02-09 22:05 . 2009-02-18 22:41 <REP> d-------- c:\documents and settings\Administrateur\Application Data\uTorrent
2009-02-09 22:02 . 2009-02-18 22:22 <REP> d-------- c:\documents and settings\Administrateur\Tracing
2009-02-09 22:01 . 2009-02-09 22:01 <REP> d-------- c:\program files\Windows Live SkyDrive
2009-02-09 22:01 . 2009-02-09 22:01 <REP> d-------- c:\program files\Microsoft
2009-02-09 22:00 . 2009-02-09 22:01 <REP> d-------- c:\program files\Windows Live
2009-02-09 21:42 . 2005-05-20 15:00 13,056 --a------ c:\windows\system32\drivers\L8042Kbd.sys
2009-02-09 21:39 . 2009-02-09 21:39 <REP> d--hs---- c:\windows\ftpcache
2009-02-09 21:39 . 2009-02-09 21:39 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Logitech
2009-02-09 21:37 . 2005-05-20 15:01 68,352 --a------ c:\windows\system32\drivers\LMOUKE.sys
2009-02-09 21:37 . 2005-05-20 15:00 54,528 --a------ c:\windows\system32\drivers\L8042MOU.SYS
2009-02-09 21:32 . 2009-02-09 21:37 <REP> d-------- c:\program files\Logitech
2009-02-09 21:32 . 2009-02-09 21:32 <REP> d-------- c:\program files\Fichiers communs\Logitech
2009-02-09 21:32 . 2002-05-29 18:44 322,832 --a------ c:\windows\system32\MFC30.DLL
2009-02-09 21:32 . 2002-05-23 17:59 10,432 --a------ c:\windows\system32\drivers\itchfltr.sys
2009-02-09 21:24 . 2009-02-09 21:24 <REP> d-------- c:\program files\Fichiers communs\Windows Live
2009-02-09 21:24 . 2009-02-09 21:24 244 --ah----- C:\sqmnoopt00.sqm
2009-02-09 21:24 . 2009-02-09 21:24 232 --ah----- C:\sqmdata00.sqm
2009-02-09 21:22 . 2009-02-09 21:22 <REP> d-------- c:\documents and settings\Administrateur\Contacts
2009-02-09 21:20 . 2009-02-14 20:37 <REP> d-------- c:\program files\eMule
2009-02-09 21:15 . 2008-04-13 17:33 159,232 --a------ c:\windows\system32\ptpusd.dll
2009-02-09 21:15 . 2001-08-23 15:47 5,632 --a------ c:\windows\system32\ptpusb.dll
2009-02-09 21:12 . 2009-02-09 21:12 <REP> d-------- c:\program files\iTunes
2009-02-09 21:12 . 2009-02-09 21:12 <REP> d-------- c:\program files\iPod
2009-02-09 21:12 . 2009-02-09 21:12 <REP> d-------- c:\program files\Bonjour
2009-02-09 21:12 . 2009-02-09 21:12 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-09 21:12 . 2009-02-15 20:26 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Apple Computer
2009-02-09 21:12 . 2008-04-17 13:12 107,368 --a------ c:\windows\system32\GEARAspi.dll
2009-02-09 21:12 . 2008-04-17 13:12 15,464 --a------ c:\windows\system32\drivers\GEARAspiWDM.sys
2009-02-09 21:11 . 2009-02-09 21:12 <REP> d-------- c:\program files\QuickTime
2009-02-09 21:11 . 2009-02-09 21:12 <REP> d-------- c:\program files\Fichiers communs\Apple
2009-02-09 21:11 . 2009-02-09 21:11 <REP> d-------- c:\program files\Apple Software Update
2009-02-09 21:11 . 2009-02-09 21:11 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple Computer
2009-02-09 21:11 . 2009-02-09 21:11 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple
2009-02-09 21:11 . 2008-11-07 14:23 32,000 --a------ c:\windows\system32\drivers\usbaapl.sys
2009-02-09 20:48 . 2009-02-09 20:52 <REP> d-------- c:\program files\DivX
2009-02-09 20:47 . 2009-02-09 20:47 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Xentient
2009-02-09 20:42 . 2009-02-09 20:42 <REP> d-------- c:\program files\M-Audio Firewire Family
2009-02-09 20:42 . 2009-02-09 20:42 <REP> d-------- c:\program files\M-Audio
2009-02-09 20:42 . 2005-09-21 16:28 2,381,766 --a------ c:\windows\system32\fwfmdio.dll
2009-02-09 20:33 . 2009-02-09 20:33 <REP> d-------- c:\documents and settings\Administrateur\Application Data\ArcSoft
2009-02-09 20:32 . 2009-02-09 20:32 <REP> d-------- c:\program files\Philips_VLounge
2009-02-09 20:32 . 2009-02-09 20:32 <REP> d-------- c:\program files\Fichiers communs\ArcSoft
2009-02-09 20:32 . 2005-05-25 02:40 258,352 --a------ c:\windows\system32\unicows.dll
2009-02-09 20:08 . 2009-02-09 20:08 <REP> d-------- c:\program files\Neuf
2009-02-09 20:01 . 2009-02-09 20:01 <REP> d-------- c:\program files\Microsoft Works
2009-02-09 20:00 . 2009-02-09 20:00 <REP> d-------- c:\program files\Microsoft.NET

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-11 23:29 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-02-09 20:37 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-09 18:54 --------- d-----w c:\program files\DAEMON Tools
2009-02-09 18:52 685,816 ----a-w c:\windows\system32\drivers\sptd.sys
2009-02-09 18:49 --------- d-----w c:\program files\HP
2009-02-09 18:48 --------- d-----w c:\program files\Fichiers communs\HP
2009-02-09 18:47 --------- d-----w c:\program files\Hewlett-Packard
2009-02-09 18:47 --------- d-----w c:\documents and settings\All Users\Application Data\Hewlett-Packard
2009-02-09 18:46 --------- d-----w c:\program files\Fichiers communs\Hewlett-Packard
2009-02-09 18:40 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2009-02-09 18:40 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_phaudlwr_01005.Wdf
2009-02-09 18:38 --------- d-----w c:\program files\Philips
2009-02-09 18:38 --------- d-----w c:\documents and settings\All Users\Application Data\Philips
2009-02-09 18:37 --------- d-----w c:\program files\Fichiers communs\SPC530NC
2009-02-09 18:37 --------- d-----w c:\program files\DIFX
2009-02-09 18:32 --------- d-----w c:\documents and settings\All Users\Application Data\nView_Profiles
2009-02-09 18:26 --------- d-----w c:\program files\C-Media 3D Audio
2009-02-09 18:25 --------- d-----w c:\program files\Fichiers communs\InstallShield
2009-02-09 18:24 --------- d-----w c:\program files\Intel
2009-02-09 17:45 --------- d-----w c:\program files\Nero
2009-02-09 17:45 --------- d-----w c:\program files\Fichiers communs\Nero
2009-02-09 17:45 --------- d-----w c:\documents and settings\All Users\Application Data\Nero
2009-02-09 17:44 --------- d-----w c:\program files\TaskSwitchXP
2009-02-09 17:44 --------- d-----w c:\program files\Mozilla Thunderbird
2009-02-09 17:43 --------- d-----w c:\program files\Cpu-z
2009-02-09 17:36 --------- d-----w c:\program files\Windows Media Connect 2
2009-01-16 16:20 3,596,288 ------w c:\windows\system32\dllcache\mshtml.dll
2008-12-19 09:41 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-12-19 09:41 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-12-19 05:25 634,024 ------w c:\windows\system32\dllcache\iexplore.exe
2008-12-19 05:24 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2008-12-11 00:33 86,016 ----a-w c:\windows\system32\dpl100.dll
2008-12-11 00:33 200,704 ----a-w c:\windows\system32\dtu100.dll
2008-12-09 02:28 593,920 ----a-w c:\windows\system32\dpuGUI11.dll
2008-12-09 02:28 57,344 ----a-w c:\windows\system32\dpv11.dll
2008-12-09 02:28 344,064 ----a-w c:\windows\system32\dpus11.dll
2008-12-09 02:28 294,912 ----a-w c:\windows\system32\dpu11.dll
2008-12-02 21:37 49,480 ----a-w c:\windows\system32\sirenacm.dll
.

------- Sigcheck -------

2008-05-02 23:57 2011136 22f702a6dcbdb4f7282c4b73b95ee4e4 c:\windows\explorer.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TaskSwitchXP"="c:\program files\TaskSwitchXP\TaskSwitchXP.exe" [2006-08-04 62976]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-05-02 15360]
"Philips Intelligent Agent"="c:\program files\Philips\Intelligent Agent\Philips Intelligent Agent.exe" [2008-02-21 613792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2004-02-12 49152]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"MAFWTaskbarApp"="c:\windows\system32\MAFWTray.exe" [2005-09-20 155648]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"zBrowser Launcher"="c:\program files\Logitech\iTouch\iTouch.exe" [2002-05-29 520192]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 83240]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"BDRegion"="c:\program files\Cyberlink\Shared Files\brs.exe" [2008-10-07 75048]
"nwiz"="nwiz.exe" [2005-10-10 c:\windows\system32\nwiz.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TaskSwitchXP"="c:\program files\TaskSwitchXP\TaskSwitchXP.exe" [2006-08-04 62976]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2008-12-21 c:\windows\system32\advpack.dll]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
D‚marrage rapide du logiciel HP Image Zone.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2004-05-28 53248]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-05-28 241664]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-02-09 450560]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ac3filter"= ac3filter.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Philips\\Intelligent Agent\\Philips Intelligent Agent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\eMule\\emule.exe"=

R0 Si3124;Si3124;c:\windows\system32\drivers\si3124.sys [2008-05-02 76208]
R0 Si3132r5;Si3132r5;c:\windows\system32\drivers\Si3132r5.sys [2008-05-02 208688]
R0 Si3531;Si3531;c:\windows\system32\drivers\Si3531.sys [2008-05-02 210224]
R0 SymEFA;Symantec Extended File Attributes;\SystemRoot\\SystemRoot\System32\Drivers\NAV\1002000.007\SYMEFA.SYS --> \SystemRoot\\SystemRoot\System32\Drivers\NAV\1002000.007\SYMEFA.SYS [?]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\NAV\1002000.007\BHDrvx86.sys [2009-02-18 255536]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NAV\1002000.007\cchpx86.sys [2009-02-18 362544]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090212.003\IDSxpx86.sys [2009-02-18 276344]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};c:\program files\CyberLink\PowerDVD8\000.fcl [2008-10-07 20:31:38 61424]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe [2009-02-18 115560]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2009-02-18 99376]
R3 phaudlwr;Philips Audio Filter;c:\windows\system32\drivers\phaudlwr.sys [2009-02-09 88704]
R3 SPC530;Philips SPC530NC PC Camera;c:\windows\system32\drivers\SPC530.sys [2009-02-09 486912]
R3 SPC530m;Philips SPC530NC PC Cameram;c:\windows\system32\drivers\SPC530m.sys [2009-02-09 7680]
S2 .norton2009Reset;Norton 2009 Reset;c:\documents and settings\All Users\Application Data\Norton\Norton2009Reset.exe [2009-02-18 280833]
.
Contenu du dossier 'Tâches planifiées'

2009-02-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
- - - - ORPHELINS SUPPRIMES - - - -

Toolbar-ITBar7Layout - (no file)
Toolbar-ITBar7Position - (no file)
HKLM-Run-Cmaudio - cmicnfg.cpl
HKLM-RunOnce-<NO NAME> - (no file)


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.neufportail.fr/
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
FF - ProfilePath -
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-19 18:35:39
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Norton AntiVirus]
"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe\" /s \"Norton AntiVirus\" /m \"c:\program files\Norton AntiVirus\Engine\16.2.0.7\diMaster.dll\" /prefetch:1"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD8\000.fcl"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1212)
c:\windows\system32\SETUPAPI.dll

- - - - - - - > 'lsass.exe'(1316)
c:\windows\system32\setupapi.dll
c:\windows\system32\scecli.dll
.
Heure de fin: 2009-02-19 18:37:38
ComboFix-quarantined-files.txt 2009-02-19 17:37:36

Avant-CF: 27,132,825,600 octets libres
Après-CF: 27,203,575,808 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

291 --- E O F --- 2009-02-14 02:10:33[/b][/b][/b][/b]



Depuis que j'ai exécuter ce combofix je n'ai plus de problème, mais apparemment il est conseiller de faire analyser le rapport par un spécialiste. C'est pour cela que je poste ce rapport ! Y-a-t'il un spécialiste dans le coin qui pourrai me venir en aide ??

Je vous remercie par avance.

Anthony

Merci pour la réponse,

Quand je tape combofix /u dans executer, j'ai un message comme quoi windows ne trouve pas combofix.
JE lance quand même Malwarebytes' Anti-Malware (MBAM) ?

alors voici le rapport :

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1779
Windows 5.1.2600 Service Pack 3

19/02/2009 20:51:35
mbam-log-2009-02-19 (20-51-27).txt

Type de recherche: Examen rapide
Eléments examinés: 59197
Temps écoulé: 4 minute(s), 16 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

voila le nouveau rapport !

Logfile of random's system information tool 1.05 (written by random/random)
Run by Administrateur at 2009-02-19 21:02:20
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 26 GB (33%) free of 78 GB
Total RAM: 1023 MB (40% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\IPSBHO.DLL [2009-02-18 107896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2008-11-18 408952]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-10-10 7286784]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-10-10 86016]
"HP Software Update"=c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2004-02-12 49152]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]
"MAFWTaskbarApp"=C:\WINDOWS\system32\MAFWTray.exe [2005-09-20 155648]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"zBrowser Launcher"=C:\Program Files\Logitech\iTouch\iTouch.exe [2002-05-29 520192]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"RemoteControl8"=C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-03-20 83240]
"PDVD8LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472]
"BDRegion"=C:\Program Files\Cyberlink\Shared Files\brs.exe [2008-10-07 75048]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"TaskSwitchXP"=C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe [2006-08-04 62976]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-05-02 15360]
"Philips Intelligent Agent"=C:\Program Files\Philips\Intelligent Agent\Philips Intelligent Agent.exe [2008-02-21 613792]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Démarrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-05-02 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-05-02 240128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoSMHelp"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Philips\Intelligent Agent\Philips Intelligent Agent.exe"="C:\Program Files\Philips\Intelligent Agent\Philips Intelligent Agent.exe:*:Enabledhilips Intelligent Agent"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-02-19 21:02:21 ----D---- C:\Program Files\trend micro
2009-02-19 21:02:20 ----D---- C:\rsit
2009-02-19 20:41:20 ----D---- C:\Program Files\xerox
2009-02-19 20:41:19 ----D---- C:\WINDOWS\system32\xircom
2009-02-19 20:41:19 ----D---- C:\WINDOWS\system32\oobe
2009-02-19 20:41:19 ----D---- C:\WINDOWS\system32\npp
2009-02-19 20:41:19 ----D---- C:\WINDOWS\system32\ime
2009-02-19 20:41:19 ----D---- C:\WINDOWS\msagent
2009-02-19 20:41:19 ----D---- C:\Program Files\windows nt
2009-02-19 20:41:19 ----D---- C:\Program Files\netmeeting
2009-02-19 20:41:19 ----D---- C:\Program Files\msn gaming zone
2009-02-19 20:41:19 ----D---- C:\Program Files\movie maker
2009-02-19 20:41:19 ----D---- C:\Program Files\microsoft frontpage
2009-02-19 20:41:19 ----D---- C:\Program Files\Fichiers communs\speechengines
2009-02-19 20:32:11 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-02-19 20:32:03 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-02-19 20:32:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-02-19 20:11:53 ----A---- C:\ComboFix.txt
2009-02-19 19:00:02 ----SHD---- C:\RECYCLER
2009-02-19 18:27:40 ----A---- C:\Boot.bak
2009-02-19 18:27:33 ----RASHD---- C:\cmdcons
2009-02-19 18:26:41 ----A---- C:\WINDOWS\zip.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\VFIND.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\SWSC.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\SWREG.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\sed.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\NIRCMD.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\grep.exe
2009-02-19 18:26:41 ----A---- C:\WINDOWS\fdsv.exe
2009-02-19 18:26:37 ----D---- C:\WINDOWS\ERDNT
2009-02-19 18:26:37 ----AD---- C:\Qoobox
2009-02-19 18:26:36 ----D---- C:\ComboFix
2009-02-18 22:37:56 ----D---- C:\Program Files\Norton Support
2009-02-18 20:28:40 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-02-18 20:27:24 ----D---- C:\Program Files\Symantec
2009-02-18 20:27:24 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-02-18 20:27:24 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-02-18 20:27:00 ----D---- C:\Program Files\Windows Sidebar
2009-02-18 20:27:00 ----D---- C:\Program Files\Norton AntiVirus
2009-02-18 20:26:59 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2009-02-18 20:26:46 ----D---- C:\Program Files\NortonInstaller
2009-02-18 20:26:46 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-02-18 19:05:44 ----D---- C:\Program Files\Fichiers communs\CyberLink
2009-02-18 19:05:10 ----D---- C:\Program Files\CyberLink
2009-02-18 19:03:24 ----D---- C:\Documents and Settings\All Users\Application Data\Temp
2009-02-18 18:48:12 ----D---- C:\Documents and Settings\Administrateur\Application Data\CyberLink
2009-02-18 18:47:40 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-02-18 18:46:22 ----A---- C:\WINDOWS\system32\msxml3a.dll
2009-02-15 20:52:55 ----D---- C:\Program Files\AnalogX
2009-02-14 20:06:22 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2009-02-14 20:05:51 ----D---- C:\Program Files\VideoLAN
2009-02-14 20:00:12 ----D---- C:\Program Files\AC3Filter
2009-02-14 19:52:28 ----A---- C:\WINDOWS\system32\OggDSUninst.exe
2009-02-14 19:44:24 ----D---- C:\Documents and Settings\Administrateur\Application Data\DivX
2009-02-12 20:07:34 ----D---- C:\Program Files\Windows Media Connect
2009-02-12 00:29:14 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-02-10 22:53:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-02-10 22:52:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-02-10 22:52:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-02-10 22:52:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2009-02-10 22:52:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-02-10 22:51:06 ----D---- C:\WINDOWS\ie7updates
2009-02-10 22:51:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-02-10 22:50:52 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2009-02-10 22:50:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-02-10 22:49:49 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-02-10 22:48:48 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-02-10 22:48:43 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-02-10 22:48:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-02-10 22:48:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-02-10 22:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-02-10 22:43:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-02-10 22:43:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-02-10 22:43:30 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2009-02-10 22:43:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-02-10 22:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-02-10 22:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-02-10 22:43:10 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-02-10 22:43:10 ----HD---- C:\WINDOWS\$hf_mig$
2009-02-10 22:43:06 ----D---- C:\Program Files\MSXML 4.0
2009-02-10 22:42:55 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-02-10 22:23:57 ----D---- C:\Documents and Settings\Administrateur\Application Data\Nero
2009-02-10 19:29:46 ----A---- C:\WINDOWS\system32\lame_enc.dll
2009-02-10 19:29:36 ----D---- C:\Program Files\Lame
2009-02-10 19:18:06 ----A---- C:\WINDOWS\gwpreset.ini
2009-02-10 19:18:06 ----A---- C:\WINDOWS\goldwave.ini
2009-02-10 19:18:05 ----D---- C:\Program Files\GoldWave
2009-02-10 18:23:51 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-02-10 18:23:45 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-02-10 18:23:45 ----D---- C:\Program Files\Adobe
2009-02-10 17:47:55 ----A---- C:\WINDOWS\system32\muweb.dll
2009-02-10 17:47:55 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-02-10 17:47:55 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-02-09 22:05:09 ----D---- C:\Program Files\uTorrent
2009-02-09 22:05:00 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2009-02-09 22:01:25 ----D---- C:\Program Files\Microsoft
2009-02-09 22:01:09 ----D---- C:\Program Files\Windows Live SkyDrive
2009-02-09 22:00:46 ----D---- C:\Program Files\Windows Live
2009-02-09 21:39:44 ----D---- C:\Documents and Settings\Administrateur\Application Data\Logitech
2009-02-09 21:39:30 ----SHD---- C:\WINDOWS\ftpcache
2009-02-09 21:32:55 ----D---- C:\Program Files\Fichiers communs\Logitech
2009-02-09 21:32:54 ----A---- C:\WINDOWS\system32\MFC30.DLL
2009-02-09 21:32:53 ----D---- C:\Program Files\Logitech
2009-02-09 21:31:12 ----D---- C:\WINDOWS\system32\appmgmt
2009-02-09 21:24:11 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-02-09 21:20:24 ----D---- C:\Program Files\eMule
2009-02-09 21:15:29 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-02-09 21:15:28 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-02-09 21:12:51 ----D---- C:\Documents and Settings\Administrateur\Application Data\Apple Computer
2009-02-09 21:12:46 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2009-02-09 21:12:35 ----D---- C:\Program Files\iPod
2009-02-09 21:12:33 ----D---- C:\Program Files\iTunes
2009-02-09 21:12:33 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-09 21:12:18 ----D---- C:\Program Files\Bonjour
2009-02-09 21:11:56 ----D---- C:\Program Files\QuickTime
2009-02-09 21:11:55 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-02-09 21:11:44 ----D---- C:\Program Files\Apple Software Update
2009-02-09 21:11:29 ----D---- C:\Program Files\Fichiers communs\Apple
2009-02-09 21:11:28 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-02-09 20:49:06 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2009-02-09 20:49:06 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2009-02-09 20:49:06 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2009-02-09 20:49:06 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2009-02-09 20:49:06 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2009-02-09 20:49:06 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-02-09 20:49:05 ----N---- C:\WINDOWS\system32\vxblock.dll
2009-02-09 20:49:05 ----N---- C:\WINDOWS\system32\pxwave.dll
2009-02-09 20:49:05 ----N---- C:\WINDOWS\system32\pxsfs.dll
2009-02-09 20:49:05 ----N---- C:\WINDOWS\system32\pxmas.dll
2009-02-09 20:49:05 ----N---- C:\WINDOWS\system32\pxdrv.dll
2009-02-09 20:49:05 ----N---- C:\WINDOWS\system32\px.dll
2009-02-09 20:48:59 ----D---- C:\Program Files\DivX
2009-02-09 20:47:55 ----D---- C:\Documents and Settings\Administrateur\Application Data\Xentient
2009-02-09 20:42:51 ----D---- C:\Program Files\M-Audio
2009-02-09 20:42:51 ----A---- C:\WINDOWS\system32\mafwTray.exe
2009-02-09 20:42:51 ----A---- C:\WINDOWS\system32\mafwpnl.dll
2009-02-09 20:42:51 ----A---- C:\WINDOWS\system32\mafwcpl.exe
2009-02-09 20:42:51 ----A---- C:\WINDOWS\system32\MAFWCoIn.dll
2009-02-09 20:42:51 ----A---- C:\WINDOWS\system32\fwfmdio.dll
2009-02-09 20:42:51 ----A---- C:\WINDOWS\system32\defwasio.dll
2009-02-09 20:42:28 ----D---- C:\Program Files\M-Audio Firewire Family
2009-02-09 20:33:16 ----D---- C:\Documents and Settings\Administrateur\Application Data\ArcSoft
2009-02-09 20:32:59 ----D---- C:\Program Files\Fichiers communs\ArcSoft
2009-02-09 20:32:52 ----D---- C:\Program Files\Philips_VLounge
2009-02-09 20:32:51 ----A---- C:\WINDOWS\system32\unicows.dll
2009-02-09 20:27:23 ----D---- C:\Documents and Settings\Administrateur\Application Data\WinRAR
2009-02-09 20:17:52 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2009-02-09 20:08:18 ----D---- C:\Program Files\Neuf
2009-02-09 20:05:29 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-02-09 20:01:19 ----D---- C:\Program Files\Microsoft Works
2009-02-09 20:00:59 ----D---- C:\Program Files\Microsoft Visual Studio
2009-02-09 20:00:58 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-02-09 20:00:34 ----D---- C:\Program Files\Microsoft.NET
2009-02-09 19:58:38 ----D---- C:\WINDOWS\SHELLNEW
2009-02-09 19:58:22 ----D---- C:\Program Files\Microsoft Office
2009-02-09 19:58:22 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-02-09 19:58:03 ----RHD---- C:\MSOCache
2009-02-09 19:54:06 ----D---- C:\Program Files\DAEMON Tools
2009-02-09 19:50:29 ----A---- C:\_Sid.txt
2009-02-09 19:48:15 ----D---- C:\Program Files\Fichiers communs\HP
2009-02-09 19:47:24 ----D---- C:\Program Files\Hewlett-Packard
2009-02-09 19:47:24 ----D---- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
2009-02-09 19:47:20 ----RA---- C:\WINDOWS\system32\MSXML4r.dll
2009-02-09 19:47:20 ----RA---- C:\WINDOWS\system32\MSXML4a.dll
2009-02-09 19:47:20 ----RA---- C:\WINDOWS\system32\hpvcr70.dll
2009-02-09 19:47:20 ----RA---- C:\WINDOWS\system32\hpvcp70.dll
2009-02-09 19:47:20 ----RA---- C:\WINDOWS\system32\hpvaut32.dll
2009-02-09 19:46:42 ----D---- C:\Program Files\Fichiers communs\Hewlett-Packard
2009-02-09 19:45:05 ----A---- C:\WINDOWS\system32\HPZisn12.dll
2009-02-09 19:45:05 ----A---- C:\WINDOWS\system32\HPZipt12.dll
2009-02-09 19:45:05 ----A---- C:\WINDOWS\system32\HPZipr12.dll
2009-02-09 19:45:05 ----A---- C:\WINDOWS\system32\HPZipm12.exe
2009-02-09 19:45:05 ----A---- C:\WINDOWS\system32\HPZinw12.exe
2009-02-09 19:45:05 ----A---- C:\WINDOWS\system32\HPZidr12.dll
2009-02-09 19:45:00 ----A---- C:\WINDOWS\IsUninst.exe
2009-02-09 19:44:09 ----D---- C:\Program Files\HP
2009-02-09 19:43:46 ----HD---- C:\Config.Msi
2009-02-09 19:42:36 ----D---- C:\temp
2009-02-09 19:40:46 ----A---- C:\WINDOWS\imsins.BAK
2009-02-09 19:40:43 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-02-09 19:40:38 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-02-09 19:40:37 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2009-02-09 19:38:30 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-02-09 19:38:30 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-02-09 19:38:30 ----A---- C:\WINDOWS\PCDLIB32.DLL
2009-02-09 19:38:14 ----D---- C:\Documents and Settings\All Users\Application Data\Philips
2009-02-09 19:37:53 ----D---- C:\Program Files\DIFX
2009-02-09 19:37:53 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
2009-02-09 19:37:50 ----D---- C:\Program Files\Philips
2009-02-09 19:37:32 ----A---- C:\WINDOWS\VPro530.exe
2009-02-09 19:37:31 ----D---- C:\WINDOWS\Philips
2009-02-09 19:37:31 ----D---- C:\Program Files\Fichiers communs\SPC530NC
2009-02-09 19:35:07 ----A---- C:\WINDOWS\system32\h323log.txt
2009-02-09 19:34:45 ----D---- C:\WINDOWS\Drivers
2009-02-09 19:34:09 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-02-09 19:34:09 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-02-09 19:32:49 ----A---- C:\WINDOWS\system32\usbui.dll
2009-02-09 19:32:48 ----D---- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2009-02-09 19:31:19 ----SHD---- C:\WINDOWS\Installer
2009-02-09 19:31:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-02-09 19:31:18 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-02-09 19:31:18 ----D---- C:\Program Files\Fichiers communs
2009-02-09 19:31:18 ----D---- C:\Program Files
2009-02-09 19:31:18 ----A---- C:\WINDOWS\ODBCINST.INI
2009-02-09 19:31:11 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-02-09 19:31:11 ----A---- C:\WINDOWS\system32\irclass.dll
2009-02-09 19:31:11 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-02-09 19:31:11 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-02-09 19:31:11 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-02-09 19:31:09 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-02-09 19:31:08 ----A---- C:\WINDOWS\system32\batt.dll
2009-02-09 19:31:08 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-02-09 19:31:07 ----A---- C:\WINDOWS\system32\storprop.dll
2009-02-09 19:30:59 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-02-09 19:30:42 ----D---- C:\WINDOWS\system32\CatRoot2
2009-02-09 19:30:42 ----D---- C:\WINDOWS\system32\CatRoot
2009-02-09 19:30:36 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-02-09 19:30:18 ----A---- C:\WINDOWS\setuplog.txt
2009-02-09 19:30:14 ----SHD---- C:\System Volume Information
2009-02-09 19:30:14 ----D---- C:\Documents and Settings
2009-02-09 19:30:11 ----D---- C:\WINDOWS\nview
2009-02-09 19:30:11 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-02-09 19:29:47 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-02-09 19:29:39 ----RASH---- C:\boot.ini
2009-02-09 19:26:28 ----RA---- C:\WINDOWS\system32\Audio3D.dll
2009-02-09 19:26:28 ----RA---- C:\WINDOWS\system32\a3d.dll
2009-02-09 19:26:27 ----RA---- C:\WINDOWS\system32\udaprop.dll
2009-02-09 19:26:27 ----RA---- C:\WINDOWS\system32\cmuda.dll
2009-02-09 19:26:27 ----RA---- C:\WINDOWS\system32\cmirmdrv.exe
2009-02-09 19:26:27 ----RA---- C:\WINDOWS\system32\cmirmdrv.dll
2009-02-09 19:26:21 ----A---- C:\WINDOWS\CMISETUP.INI
2009-02-09 19:26:21 ----A---- C:\WINDOWS\CMCDPLAY.INI
2009-02-09 19:26:18 ----A---- C:\WINDOWS\Wininit.ini
2009-02-09 19:26:13 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-02-09 19:26:13 ----RSD---- C:\WINDOWS\Fonts
2009-02-09 19:26:13 ----D---- C:\WINDOWS\WinSxS
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Web
2009-02-09 19:26:13 ----D---- C:\WINDOWS\WBEM
2009-02-09 19:26:13 ----D---- C:\WINDOWS\twain_32
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Temp
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\wins
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\wbem
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\usmt
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\spool
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\ShellExt
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\Setup
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\ras
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\PreInstall
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\mui
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\inetsrv
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\icsxml
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\ias
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\fr-fr
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\fr
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\export
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\drivers
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\dhcp
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\config
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\3com_dmi
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\3076
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\2052
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1054
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1042
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1041
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1037
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1036
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1033
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1031
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1028
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32\1025
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system32
2009-02-09 19:26:13 ----D---- C:\WINDOWS\system
2009-02-09 19:26:13 ----D---- C:\WINDOWS\security
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Resources
2009-02-09 19:26:13 ----D---- C:\WINDOWS\repair
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Provisioning
2009-02-09 19:26:13 ----D---- C:\WINDOWS\PeerNet
2009-02-09 19:26:13 ----D---- C:\WINDOWS\pchealth
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Offline Web Pages
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Network Diagnostic
2009-02-09 19:26:13 ----D---- C:\WINDOWS\mui
2009-02-09 19:26:13 ----D---- C:\WINDOWS\msapps
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Media
2009-02-09 19:26:13 ----D---- C:\WINDOWS\L2Schemas
2009-02-09 19:26:13 ----D---- C:\WINDOWS\java
2009-02-09 19:26:13 ----D---- C:\WINDOWS\inf
2009-02-09 19:26:13 ----D---- C:\WINDOWS\ime
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Help
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Driver Cache
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Debug
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Cursors
2009-02-09 19:26:13 ----D---- C:\WINDOWS\Config
2009-02-09 19:26:13 ----D---- C:\WINDOWS\AppPatch
2009-02-09 19:26:13 ----D---- C:\WINDOWS\addins
2009-02-09 19:26:13 ----D---- C:\WINDOWS
2009-02-09 19:26:12 ----A---- C:\WINDOWS\CMIUninstall.exe
2009-02-09 19:26:11 ----D---- C:\Program Files\C-Media 3D Audio
2009-02-09 19:26:11 ----A---- C:\WINDOWS\CmiRmRedundDir.exe
2009-02-09 19:26:11 ----A---- C:\WINDOWS\CMIRmDriver.dll
2009-02-09 19:25:00 ----D---- C:\WINDOWS\OPTIONS
2009-02-09 19:24:59 ----HD---- C:\Program Files\InstallShield Installation Information
2009-02-09 19:24:46 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-02-09 19:24:11 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-02-09 19:24:10 ----D---- C:\Program Files\Intel
2009-02-09 19:23:18 ----A---- C:\WINDOWS\Ascd_tmp.ini
2009-02-09 18:53:35 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2009-02-09 18:53:33 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-02-09 18:53:04 ----HD---- C:\Program Files\Uninstall Information
2009-02-09 18:52:23 ----ASH---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2009-02-09 18:52:21 ----D---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-02-09 18:52:16 ----D---- C:\WINDOWS\SoftwareDistribution
2009-02-09 18:52:04 ----D---- C:\WINDOWS\Prefetch
2009-02-09 18:52:03 ----SD---- C:\WINDOWS\system32\Microsoft
2009-02-09 18:52:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-02-09 18:45:43 ----AD---- C:\WINDOWS\i386
2009-02-09 18:45:37 ----D---- C:\Program Files\WinRAR
2009-02-09 18:45:10 ----D---- C:\Program Files\Nero
2009-02-09 18:45:10 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2009-02-09 18:45:09 ----D---- C:\Program Files\Fichiers communs\Nero
2009-02-09 18:44:46 ----D---- C:\Program Files\Mozilla Thunderbird
2009-02-09 18:44:37 ----D---- C:\Program Files\Mozilla Firefox
2009-02-09 18:44:27 ----D---- C:\Program Files\TaskSwitchXP
2009-02-09 18:44:19 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-02-09 18:44:00 ----D---- C:\Program Files\AusLogics System Information
2009-02-09 18:43:59 ----D---- C:\Program Files\Recuva
2009-02-09 18:43:58 ----D---- C:\Program Files\Paint.NET
2009-02-09 18:43:56 ----D---- C:\Program Files\Occtpt
2009-02-09 18:43:55 ----D---- C:\Program Files\Foxit Reader
2009-02-09 18:43:51 ----D---- C:\Program Files\Everest
2009-02-09 18:43:45 ----D---- C:\Program Files\EasyRecovery
2009-02-09 18:43:43 ----D---- C:\Program Files\Cpu-z
2009-02-09 18:43:43 ----D---- C:\Program Files\CCleaner
2009-02-09 18:43:42 ----D---- C:\Program Files\AusLogics Registry Defrag
2009-02-09 18:43:40 ----D---- C:\Program Files\AusLogics Disk Defrag
2009-02-09 18:43:36 ----D---- C:\Program Files\Ad-Aware
2009-02-09 18:43:31 ----A---- C:\WINDOWS\system32\jit.dll
2009-02-09 18:43:31 ----A---- C:\WINDOWS\setdebug.exe
2009-02-09 18:43:30 ----A---- C:\WINDOWS\system32\javaee.dll
2009-02-09 18:43:30 ----A---- C:\WINDOWS\system32\dx3j.dll
2009-02-09 18:43:26 ----A---- C:\WINDOWS\system32\wjview.exe
2009-02-09 18:43:26 ----A---- C:\WINDOWS\system32\vmhelper.dll
2009-02-09 18:43:26 ----A---- C:\WINDOWS\system32\msjdbc10.dll
2009-02-09 18:43:26 ----A---- C:\WINDOWS\system32\msjava.dll
2009-02-09 18:43:26 ----A---- C:\WINDOWS\system32\msawt.dll
2009-02-09 18:43:25 ----A---- C:\WINDOWS\system32\jview.exe
2009-02-09 18:43:25 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
2009-02-09 18:43:25 ----A---- C:\WINDOWS\system32\javart.dll
2009-02-09 18:43:25 ----A---- C:\WINDOWS\system32\javaprxy.dll
2009-02-09 18:43:25 ----A---- C:\WINDOWS\system32\javacypt.dll
2009-02-09 18:43:24 ----A---- C:\WINDOWS\system32\clspack.exe
2009-02-09 18:40:50 ----RSD---- C:\WINDOWS\assembly
2009-02-09 18:40:50 ----D---- C:\WINDOWS\Microsoft.NET
2009-02-09 18:40:49 ----D---- C:\WINDOWS\system32\URTTemp
2009-02-09 18:40:13 ----A---- C:\WINDOWS\control.ini
2009-02-09 18:40:13 ----A---- C:\AUTOEXEC.BAT
2009-02-09 18:39:57 ----A---- C:\WINDOWS\OEWABLog.txt
2009-02-09 18:39:50 ----D---- C:\WINDOWS\system32\dllcache
2009-02-09 18:39:50 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-02-09 18:39:06 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-02-09 18:39:03 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-02-09 18:38:55 ----HD---- C:\Program Files\WindowsUpdate
2009-02-09 18:38:36 ----A---- C:\WINDOWS\system32\acctres.dll
2009-02-09 18:38:35 ----D---- C:\Program Files\Fichiers communs\Services
2009-02-09 18:38:33 ----SD---- C:\WINDOWS\Tasks
2009-02-09 18:38:33 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-02-09 18:38:29 ----D---- C:\WINDOWS\srchasst
2009-02-09 18:38:28 ----D---- C:\WINDOWS\system32\Macromed
2009-02-09 18:38:26 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-02-09 18:38:26 ----A---- C:\WINDOWS\system32\wups.dll
2009-02-09 18:38:26 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-02-09 18:38:26 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-02-09 18:38:26 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-02-09 18:38:26 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-02-09 18:38:25 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-02-09 18:38:24 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-02-09 18:38:24 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-02-09 18:38:23 ----D---- C:\WINDOWS\system32\Restore
2009-02-09 18:38:23 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-02-09 18:38:23 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-02-09 18:38:23 ----A---- C:\WINDOWS\system32\srclient.dll
2009-02-09 18:38:23 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-02-09 18:38:22 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-02-09 18:38:22 ----A---- C:\WINDOWS\system32\inetres.dll
2009-02-09 18:38:21 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-02-09 18:38:20 ----D---- C:\Program Files\Outlook Express
2009-02-09 18:38:20 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-02-09 18:38:20 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-02-09 18:38:20 ----A---- C:\WINDOWS\system32\mstask.dll
2009-02-09 18:38:16 ----D---- C:\Program Files\Fichiers communs\System
2009-02-09 18:38:15 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-02-09 18:38:14 ----D---- C:\Program Files\Internet Explorer
2009-02-09 18:37:08 ----D---- C:\Program Files\ComPlus Applications
2009-02-09 18:37:06 ----A---- C:\WINDOWS\vbaddin.ini
2009-02-09 18:37:06 ----A---- C:\WINDOWS\vb.ini
2009-02-09 18:37:01 ----D---- C:\WINDOWS\Registration
2009-02-09 18:36:41 ----D---- C:\Program Files\Windows Media Connect 2
2009-02-09 18:36:40 ----D---- C:\Program Files\Windows Media Player
2009-02-09 18:36:39 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-02-09 18:36:35 ----A---- C:\WINDOWS\system32\getuname.dll
2009-02-09 18:36:35 ----A---- C:\WINDOWS\system32\charmap.exe
2009-02-09 18:36:35 ----A---- C:\WINDOWS\system32\calc.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\winmine.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\tskill.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\tscon.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\sol.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\reset.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-02-09 18:36:34 ----A---- C:\WINDOWS\system32\freecell.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\shadow.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\regini.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\msg.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\logoff.exe
2009-02-09 18:36:33 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-02-09 18:36:27 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-02-09 18:36:27 ----A---- C:\WINDOWS\system32\spider.exe
2009-02-09 18:36:27 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-02-09 18:36:26 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-02-09 18:36:26 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-02-09 18:36:26 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-02-09 18:36:26 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-02-09 18:36:25 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-02-09 18:36:24 ----D---- C:\WINDOWS\system32\MsDtc
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-02-09 18:36:24 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-02-09 18:36:23 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-02-09 18:36:23 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-02-09 18:36:23 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-02-09 18:36:23 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-02-09 18:36:23 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-02-09 18:36:23 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-02-09 18:36:22 ----D---- C:\WINDOWS\system32\Com
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\stclient.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\colbact.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-02-09 18:36:22 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-02-09 18:36:21 ----A---- C:\WINDOWS\system32\comuid.dll
2009-02-09 18:36:21 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-02-09 18:36:21 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-02-09 18:36:21 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-02-09 18:36:21 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-02-09 18:36:21 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-02-09 18:36:14 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-02-09 18:36:14 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-02-09 18:36:14 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-02-09 18:36:13 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-02-19 18:35:44 ----A---- C:\WINDOWS\system.ini
2009-02-12 05:56:17 ----A---- C:\WINDOWS\system32\mrt.exe
2009-02-10 22:47:11 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 BHDrvx86;Symantec Heuristics Driver; C:\WINDOWS\System32\Drivers\NAV\1002000.007\BHDrvx86.sys [2008-12-12 255536]
R1 ccHP;Symantec Hash Provider; C:\WINDOWS\System32\Drivers\NAV\1002000.007\ccHPx86.sys [2009-02-18 362544]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20090212.003\IDSxpx86.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 40576]
R1 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SRTSP.SYS [2008-12-12 306736]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\System32\Drivers\NAV\1002000.007\SRTSPX.SYS [2008-12-12 43696]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SYMTDI.SYS [2008-12-12 198192]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; \??\C:\Program Files\CyberLink\PowerDVD8\000.fcl []
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-05-02 60800]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2005-05-12 1332544]
R3 DELTAFW;Service for M-Audio FW Driver (WDM); C:\WINDOWS\system32\DRIVERS\deltafw.sys [2005-09-20 182656]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-22 51088]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-22 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-22 21744]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2005-05-20 13056]
R3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2005-05-20 54528]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2005-05-20 68352]
R3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090219.003\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090219.003\NAVEX15.SYS []
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-05-02 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-10-10 3530432]
R3 phaudlwr;Philips Audio Filter; C:\WINDOWS\system32\DRIVERS\phaudlwr.sys [2008-05-07 88704]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
R3 SPC530;Philips SPC530NC PC Camera; C:\WINDOWS\system32\drivers\SPC530.sys [2008-05-21 486912]
R3 SPC530m;Philips SPC530NC PC Cameram; C:\WINDOWS\system32\drivers\SPC530m.sys [2008-05-21 7680]
R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SYMDNS.SYS [2008-12-12 12976]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SYMFW.SYS [2008-12-12 89904]
R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SYMIDS.SYS [2008-12-12 34608]
R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2008-12-12 36272]
R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SYMNDIS.SYS [2008-12-12 37424]
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\NAV\1002000.007\SYMREDRV.SYS [2008-12-12 24624]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-05-02 17152]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 abkvtqa0;abkvtqa0; C:\WINDOWS\system32\drivers\abkvtqa0.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 itchfltr;iTouch Keyboard Filter; C:\WINDOWS\system32\DRIVERS\itchfltr.sys [2002-05-23 10432]
S3 MAFWBOOT;Bootloader Service for M-Audio FW Driver (WDM); C:\WINDOWS\system32\DRIVERS\mafwboot.sys [2005-09-20 17536]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2008-12-12 36272]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-11-07 32000]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-05-02 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-02 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 Norton AntiVirus;Norton AntiVirus; C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe [2008-12-12 115560]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-10-10 131139]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
R3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
S2 .norton2009Reset;Norton 2009 Reset; C:\Documents and Settings\All Users\Application Data\Norton\Norton2009Reset.exe [2009-02-18 280833]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-07-16 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-07-16 68952]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-05-02 14336]

-----------------EOF-----------------

voila

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:12, on 19/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20978)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\MAFWTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: ;Tag&rename
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\IPSBHO.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [MAFWTaskbarApp] C:\WINDOWS\system32\MAFWTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"
O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Philips Intelligent Agent] "C:\Program Files\Philips\Intelligent Agent\Philips Intelligent Agent.exe" /SILENT
O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Norton 2009 Reset (.norton2009Reset) - Unknown owner - C:\Documents and Settings\All Users\Application Data\Norton\Norton2009Reset.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CiSvc - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 6756 bytes

Oui mon pc va bien !!

Je te remerci de m'avoir consacrer du temps pour mon problème, et j'aurai pas pu faire tout ça tout seul.

UN GRAND MERCI DONC

Bonne soirée et bonne continuation

[resolu]