[Résolu] HELP: Virus Trojan + Worm

Salut,

• Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
• Double-clique sur RSIT.exe afin de lancer le programme.
• Clique sur Continue à l'écran Disclaimer.
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit\.

Ok pour le rapport HijackThis.

---> Tu as ta réponse.

Message édité par Destrio5.

Et aussi...par rapport à ma citation dont tu m'a mis la réponse en dessus (que je ne comprends en rien d'ailleurs ! lol) que dois-je faire ?

Merci encore

---> UsbFix ne peut pas nettoyer ta clé USB par exemple si elle n'est pas branchée.

Aussi, maintenant il y a la fenetre poste de travail qui s'ouvre au demarrage ! lol

Voici les deux rapports:

1 - otviewit.txt:

OTViewIt logfile created on: 26/02/2009 19:12:46 - Run
OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\HP_Propriétaire\Bureau
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

382,48 Mb Total Physical Memory | 158,07 Mb Available Physical Memory | 41,33% Memory free
919,22 Mb Paging File | 631,07 Mb Available in Paging File | 68,65% Paging File free
Paging file location(s): C:\pagefile.sys 576 1152;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 143,04 Gb Total Space | 26,13 Gb Free Space | 18,27% Space Free | Partition Type: NTFS
Drive D: | 5,99 Gb Total Space | 1,49 Gb Free Space | 24,94% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PCZABO
Current User Name: HP_Propriétaire
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Whitelist: On
File Age = 30 Days

[color=orange]========== Processes ==========[/color]

[2005/04/06 05:52:52 | 00,364,544 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
[2005/04/06 05:52:52 | 00,364,544 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe
[2008/11/07 14:28:16 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[2009/02/23 22:27:12 | 00,298,264 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe
[2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[2008/12/15 17:13:29 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[2009/02/23 22:27:16 | 00,903,960 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe
[2009/02/23 22:27:13 | 00,832,280 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgam.exe
[2009/02/23 22:27:24 | 00,484,120 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe
[2009/02/23 22:27:24 | 00,592,128 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe
[2009/02/23 22:27:23 | 00,687,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgcsrvx.exe
[2001/11/15 18:05:40 | 00,196,608 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
[2008/12/15 17:13:30 | 00,136,600 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
[2008/11/20 13:20:54 | 00,290,088 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe
[2009/02/23 22:27:17 | 01,601,304 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgtray.exe
[2008/11/20 13:20:44 | 00,536,872 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe
[2009/02/26 19:10:13 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.exe

[color=orange]========== (O23) Win32 Services ==========[/color]

[2008/11/07 14:28:16 | 00,132,424 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running])
[2007/10/24 00:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
[2005/04/06 05:52:52 | 00,364,544 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
[2009/02/23 22:27:16 | 00,903,960 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc [Auto | Running])
[2009/02/23 22:27:12 | 00,298,264 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running])
[2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running])
[2007/10/24 00:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
[2005/04/03 23:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
[2008/11/20 13:20:44 | 00,536,872 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service [On_Demand | Running])
[2008/12/15 17:13:29 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
[2004/09/29 19:14:36 | 00,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12 [Disabled | Stopped])
[2007/10/18 11:31:54 | 00,098,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\usnsvc.exe -- (usnjsvc [On_Demand | Stopped])
[2006/05/12 14:04:08 | 00,439,248 | ---- | M] (RealVNC Ltd.) -- C:\Program Files\RealVNC\VNC4\winvnc4.exe -- (WinVNC4 [Auto | Stopped])
[2007/10/25 15:27:54 | 00,266,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc [On_Demand | Stopped])
[2006/11/03 09:59:14 | 00,918,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

[color=orange]========== Driver Services ==========[/color]

[2006/01/25 16:24:30 | 01,149,888 | ---- | M] (Agere Systems) -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem [On_Demand | Running])
[2005/04/20 19:00:56 | 02,317,696 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Stopped])
[2005/03/09 22:53:00 | 00,043,008 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8 [System | Running])
[2005/04/06 05:58:48 | 01,035,776 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
[2009/02/23 22:27:50 | 00,325,128 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86 [System | Running])
[2009/02/23 22:27:49 | 00,027,656 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86 [System | Running])
[2009/02/23 22:27:56 | 00,012,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (AvgRkx86 [Boot | Running])
[2009/02/23 22:27:56 | 00,107,272 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX [System | Running])
[2005/01/10 11:15:24 | 00,138,752 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k [On_Demand | Running])
[2003/03/29 02:49:30 | 00,008,377 | ---- | M] () -- C:\Program Files\K!\K!TV XP\DSDrv4.sys -- (DSDrv4 [On_Demand | Stopped])
[2004/10/20 14:23:34 | 00,021,344 | R--- | M] (FreeBox SA) -- C:\WINDOWS\system32\drivers\fbxusb32.sys -- (fbxusb [On_Demand | Stopped])
[2008/04/17 12:12:54 | 00,015,464 | ---- | M] (GEAR Software Inc.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])
[2005/12/20 02:07:00 | 00,014,976 | R--- | M] (KORG Inc.) -- C:\WINDOWS\system32\drivers\KORGUMDS.SYS -- (KORGUMDS [On_Demand | Stopped])
[2004/08/04 07:46:46 | 00,607,452 | ---- | M] (LT) -- C:\WINDOWS\system32\drivers\ltmdmnt.sys -- (ltmodem5 [On_Demand | Stopped])
[2002/06/10 08:21:02 | 00,010,254 | R--- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\LVBULK.sys -- (LVBulk [On_Demand | Stopped])
[2005/01/10 11:15:30 | 00,106,496 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv [On_Demand | Running])
[2005/07/07 09:14:30 | 01,389,056 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\P17.sys -- (P17 [On_Demand | Running])
[2005/01/19 17:21:56 | 00,012,416 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\system32\drivers\PcdrNdisuio.sys -- (PcdrNdisuio [On_Demand | Stopped])
[2004/07/16 16:47:14 | 00,014,165 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\system32\drivers\Pclepci.sys -- (PCLEPCI [System | Running])
[2000/02/08 16:56:16 | 00,038,848 | ---- | M] (Pinnacle Systems) -- C:\WINDOWS\system32\drivers\pctvw2k.sys -- (pctvNT [System | Running])
[2003/07/01 17:47:08 | 00,009,856 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc [On_Demand | Running])
[2002/06/10 08:24:38 | 00,220,079 | R--- | M] (Logitech Inc.) -- C:\WINDOWS\system32\drivers\LV551AV.sys -- (PID_0900_V [On_Demand | Stopped])
[2004/05/13 12:19:36 | 00,079,488 | ---- | M] (Protection Technology) -- C:\WINDOWS\system32\drivers\prodrv06.sys -- (prodrv06 [System | Running])
[2004/05/13 14:00:04 | 00,111,808 | ---- | M] (Protection Technology) -- C:\WINDOWS\system32\drivers\prohlp02.sys -- (prohlp02 [Boot | Running])
[2003/09/06 13:22:08 | 00,006,944 | ---- | M] (Protection Technology) -- C:\WINDOWS\system32\drivers\prosync1.sys -- (prosync1 [Boot | Running])
[2001/06/04 14:00:00 | 00,014,112 | ---- | M] (Hewlett-Packard Company) -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2 [On_Demand | Running])
[2004/08/05 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink [On_Demand | Running])
[2007/09/28 17:07:50 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\drivers\pxhelp20.sys -- (PxHelp20 [Boot | Running])
[2002/10/04 18:04:10 | 00,046,976 | ---- | M] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\system32\drivers\R8139n51.sys -- (rtl8139 [On_Demand | Running])
[2006/05/01 12:16:22 | 00,061,600 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE2Ebus.sys -- (SE2Ebus [On_Demand | Stopped])
[2006/05/01 12:17:12 | 00,009,360 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE2Emdfl.sys -- (SE2Emdfl [On_Demand | Stopped])
[2006/05/01 12:17:16 | 00,097,184 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE2Emdm.sys -- (SE2Emdm [On_Demand | Stopped])
[2006/05/01 12:18:04 | 00,088,688 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE2Emgmt.sys -- (SE2Emgmt [On_Demand | Stopped])
[2006/05/01 12:15:50 | 00,018,704 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se2End5.sys -- (se2End5 [On_Demand | Stopped])
[2006/05/01 12:18:54 | 00,086,560 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\SE2Eobex.sys -- (SE2Eobex [On_Demand | Stopped])
[2006/05/01 12:15:44 | 00,090,800 | R--- | M] (MCCI) -- C:\WINDOWS\system32\drivers\se2Eunic.sys -- (se2Eunic [On_Demand | Stopped])
[2007/11/13 11:25:54 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv [On_Demand | Stopped])
[2003/12/01 16:20:52 | 00,004,832 | ---- | M] (Protection Technology) -- C:\WINDOWS\system32\drivers\sfhlp01.sys -- (sfhlp01 [Boot | Running])
[2008/10/12 12:47:22 | 00,717,296 | ---- | M] () -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd [Boot | Running])
[2000/02/08 09:25:50 | 00,002,145 | ---- | M] (Pinnacle Systems) -- C:\WINDOWS\system32\drivers\PCTVAud.sys -- (TESTCAP [On_Demand | Running])
[2008/10/01 12:01:28 | 00,032,000 | ---- | M] (Apple, Inc.) -- C:\WINDOWS\system32\drivers\usbaapl.sys -- (USBAAPL [On_Demand | Stopped])
[2004/08/03 23:07:56 | 00,059,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio [On_Demand | Stopped])

[color=orange]========== (R ) Internet Explorer ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://go.microsoft.com/fwlink/?LinkId=69157
"Default_Search_URL"=http://go.microsoft.com/fwlink/?LinkId=54896
"Default_Secondary_Page_URL"=
"Extensions Off Page"=about:NoAdd-ons
"Local Page"=%SystemRoot%\system32\blank.htm
"Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896
"Security Risk Page"=about:SecurityRisk
"Start Page"=http://fr.msn.com/

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"CustomizeSearch"=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
"Default_Search_URL"=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
"SearchAssistant"=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL"=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
"Local Page"=C:\WINDOWS\system32\blank.htm
"Page_Transitions"=
"Search Page"=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
"Start Page"=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL]
""=http://home.microsoft.com/access/autosearch.asp?p=%s

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
"ProxyOverride" = *.local

[color=orange]========== (O1) Hosts File ==========[/color]

HOSTS File = (297202 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
First 25 entries...
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1001namen.com
127.0.0.1 1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
10268 more lines...

[color=orange]========== (O2) BHO's ==========[/color]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (HKLM) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (HKLM) -- C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (HKLM) -- C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
{9030D464-4C02-4ABF-8ECC-5164760863C6} (HKLM) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
{DBC80044-A445-435b-BC74-9C25C1C588A9} (HKLM) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (HKLM) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)

[color=orange]========== (O3) Toolbars ==========[/color]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found
"{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found
"{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5}" (HKLM) -- Reg Error: Key does not exist or could not be opened. File not found

[color=orange]========== (O4) Run Keys ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
"AppleSyncNotifier"=C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe (HP)
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)

[color=orange]========== (O4) Startup Folders ==========[/color]


[color=orange]========== (O6 & O7) Current Version Policies ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoCDBurning"=0
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=255
"NoDrives"=0
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"HideLegacyLogonScripts"=0
"HideLogoffScripts"=0
"RunLogonScriptSync"=1
"RunStartupScriptSync"=0
"HideStartupScripts"=0

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"HideLegacyLogonScripts"=0
"HideLogoffScripts"=0
"RunLogonScriptSync"=1
"RunStartupScriptSync"=0
"HideStartupScripts"=0

[color=orange]========== (O9) IE Extensions ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
{85d1f590-48f4-11d9-9669-0800200c9a66}: Menu: Uninstall BitDefender Online Scanner v8 -- %SystemRoot%\bdoscandel.exe [2006/05/25 00:22:06 | 00,053,248 | ---- | M] ()
{e2e2dd38-d088-4134-82b7-f2ba38496583}: Menu: @xpsp3res.dll,-20001 -- %SystemRoot%\network diagnostic\xpnetdiag.exe [2006/10/10 13:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> [Reg Error: Value does not exist or could not be read.] -> File not found
CmdMapping\\{44627E97-789B-40d4-B5C2-58BD171129A1} [HKLM] -> [Reg Error: Key does not exist or could not be opened.] -> File not found
CmdMapping\\{E2D4D26B-0180-43a4-B05F-462D6D54C789} [HKLM] -> [Reg Error: Key does not exist or could not be opened.] -> File not found
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> [Reg Error: Key does not exist or could not be opened.] -> File not found

[color=orange]========== (O12) Internet Explorer Plugins ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\]
PluginsPage: "" = http://activex.microsoft.com/contr [...] %s&mime=%s
PluginsPageFriendlyName: "" = Microsoft ActiveX Gallery

[color=orange]========== (O13) Default Prefixes ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
""=http://

[color=orange]========== (O15) Trusted Sites ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
49 domain(s) and sub-domain(s) not assigned to a zone.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
56 domain(s) and sub-domain(s) not assigned to a zone.

[color=orange]========== (O16) DPF ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]
{0CCA191D-13A6-4E29-B746-314DEE697D83}: http://upload.facebook.com/control [...] oader5.cab -- Facebook Photo Uploader 5 Control
{4F1E5B1A-2A80-42CA-8532-2D05CB959537}: http://gfx1.hotmail.com/mail/w3/pr [...] NPUpld.cab -- MSN Photo Upload Tool
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}: http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab -- BDSCANONLINE Control
{67DABFBF-D0AB-41FA-9C46-CC0F21721616}: http://download.divx.com/player/DivXBrowserPlugin.cab -- DivXBrowserPlugin Object
{88764F69-3831-4EC1-B40B-FF21D8381345}: https://static.impots.gouv.fr/tdir/ [...] DP-1.1.cab -- AdVerifierADPCtrl Class
{8AD9C840-044E-11D1-B3E9-00805F499D93}: http://java.sun.com/update/1.6.0/j [...] s-i586.cab -- Java Plug-in 1.6.0_11
{BA162249-F2C5-4851-8ADC-FC58CB424243}: http://copainsdavant.linternaute.c [...] oader5.cab -- Image Uploader Control
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/j [...] s-i586.cab -- Java Plug-in 1.6.0_07
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/j [...] s-i586.cab -- Java Plug-in 1.6.0_11
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/j [...] s-i586.cab -- Java Plug-in 1.6.0_11
{D27CDB6E-AE6D-11CF-96B8-444553540000}: http://fpdownload2.macromedia.com/ [...] wflash.cab -- Shockwave Flash Object

[color=orange]========== (O17) DNS Name Servers ==========[/color]

{1B28E715-136C-4854-9C71-DF4514EB7436} (Servers: | Description: )
{A8DFB5B2-DADA-4AC9-9656-C8E5121CB05A} (Servers: | Description: )
{BA20BCFC-B378-48B4-907D-1A9B5CA454E3} (Servers: | Description: Carte réseau 1394)
{D82A983E-152C-4894-82B3-3F81190E700D} (Servers: | Description: Sony Ericsson Device 046 USB Ethernet Emulation (NDIS 5))
{E67885A0-82A9-482F-B96A-AA1FAEE72E6B} (Servers: 212.27.54.252,212.27.53.252 | Description: Realtek RTL8139/810x Family Fast Ethernet NIC)

[color=orange]========== (O20) Winlogon Notify Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\]
AtiExtEvent: "DllName" = Ati2evxx.dll -- C:\WINDOWS\system32\ati2evxx.dll (ATI Technologies Inc.)
avgrsstarter: "DllName" = avgrsstx.dll -- C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)

[color=orange]========== Safeboot Options ==========[/color]

"AlternateShell"=cmd.exe

[color=orange]========== CDRom AutoRun Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun" = 1

[color=orange]========== Autorun Files on Drives ==========[/color]

AUTOEXEC.BAT [PATH=%PATH%;C:\PROGRA~1\FICHIE~1\MUVEET~1\030625 | ]
[2005/01/02 03:16:55 | 00,000,050 | ---- | M] () -- C:\AUTOEXEC.BAT -- [ NTFS ]

autorun.inf []
[2009/02/26 18:06:45 | 00,000,000 | -H-D | M] -- C:\autorun.inf -- [ NTFS ]

AUTOEXEC.BAT []
[2001/07/28 07:07:38 | 00,000,000 | -HS- | M] () -- D:\AUTOEXEC.BAT -- [ FAT32 ]

autorun.inf []
[2009/02/26 18:06:46 | 00,000,000 | -H-D | M] -- D:\autorun.inf -- [ FAT32 ]

[color=orange]========== Files/Folders - Created Within 30 Days ==========[/color]

File not found -- C:\WINDOWS\System32\cletcfg.dll
[2009/02/26 19:10:10 | 00,422,912 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.exe
[2009/02/26 19:09:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Propriétaire\Bureau\backups
[2009/02/26 18:06:45 | 00,000,000 | -H-D | C] -- C:\autorun.inf
[2009/02/26 17:27:55 | 00,000,000 | ---D | C] -- C:\Program Files\UsbFix
[2009/02/26 17:17:41 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\HP_Propriétaire\Bureau\HiJackThis.exe
[2009/02/26 16:53:13 | 00,000,000 | ---D | C] -- C:\rsit
[2009/02/26 12:06:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Propriétaire\Bureau\Airbourne - Runnin' Wild 2007
[2009/02/25 19:55:17 | 00,003,888 | ---- | C] () -- C:\Documents and Settings\HP_Propriétaire\Mes documents\avgexterne.csv
[2009/02/25 18:37:49 | 00,010,616 | ---- | C] () -- C:\Documents and Settings\HP_Propriétaire\Mes documents\scanAVG.csv
[2009/02/23 22:38:49 | 00,000,000 | -H-D | C] -- C:\$AVG8.VAULT$
[2009/02/23 22:27:56 | 00,107,272 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/02/23 22:27:56 | 00,012,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2009/02/23 22:27:56 | 00,010,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2009/02/23 22:27:50 | 00,325,128 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/02/23 22:27:49 | 00,027,656 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/02/23 22:27:36 | 33,526,035 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/02/23 22:27:36 | 00,401,372 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/02/23 22:27:36 | 00,008,322 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/02/23 22:27:34 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/02/23 22:27:34 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg
[2009/02/23 22:27:04 | 00,000,000 | ---D | C] -- C:\Program Files\AVG
[2009/02/23 22:27:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\avg8
[2009/02/23 22:20:01 | 00,000,250 | ---- | C] () -- C:\WINDOWS\BissHM.ini
[2009/02/23 19:03:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Propriétaire\Bureau\Protection virus
[2009/02/23 18:51:45 | 00,000,000 | ---D | C] -- C:\Program Files\Bluetack
[2009/02/23 18:36:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
[2009/02/23 18:36:26 | 00,000,000 | ---D | C] -- C:\Program Files\SpywareBlaster
[2009/02/23 17:43:07 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/02/23 17:43:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009/02/08 20:58:17 | 00,000,282 | ---- | C] () -- C:\Documents and Settings\HP_Propriétaire\Bureau\Les Docs de Zabo.lnk
[2009/02/08 11:37:09 | 00,038,496 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/02/07 13:10:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Propriétaire\Bureau\The Dallas Puppen
[2009/02/01 15:43:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\HP_Propriétaire\Bureau\Compos

[color=orange]========== Files - Modified Within 30 Days ==========[/color]

[4 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
File not found -- C:\WINDOWS\System32\cletcfg.dll
[2009/02/26 19:10:13 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.exe
[2009/02/26 18:05:51 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/02/26 18:04:41 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009/02/26 18:04:25 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/02/26 17:17:42 | 00,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\HP_Propriétaire\Bureau\HiJackThis.exe
[2009/02/26 17:09:58 | 00,217,600 | ---- | M] () -- C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/02/26 13:32:46 | 33,526,035 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/02/26 09:22:58 | 00,000,610 | ---- | M] () -- C:\Documents and Settings\HP_Propriétaire\Mes documents\Mes dossiers de partage.lnk
[2009/02/25 19:55:17 | 00,003,888 | ---- | M] () -- C:\Documents and Settings\HP_Propriétaire\Mes documents\avgexterne.csv
[2009/02/25 18:37:49 | 00,010,616 | ---- | M] () -- C:\Documents and Settings\HP_Propriétaire\Mes documents\scanAVG.csv
[2009/02/23 22:32:06 | 00,401,372 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009/02/23 22:32:06 | 00,008,322 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/02/23 22:27:56 | 00,107,272 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/02/23 22:27:56 | 00,012,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2009/02/23 22:27:56 | 00,010,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2009/02/23 22:27:50 | 00,325,128 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2009/02/23 22:27:49 | 00,027,656 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2009/02/23 22:27:36 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2009/02/23 22:20:01 | 00,000,250 | ---- | M] () -- C:\WINDOWS\BissHM.ini
[2009/02/23 22:15:30 | 00,398,344 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/02/23 17:57:06 | 00,297,202 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\HOSTS
[2009/02/23 17:56:02 | 00,297,202 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20090223-175706.backup
[2009/02/10 14:13:07 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/02/08 20:58:17 | 00,000,282 | ---- | M] () -- C:\Documents and Settings\HP_Propriétaire\Bureau\Les Docs de Zabo.lnk
[2009/02/05 08:36:36 | 00,002,137 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\iTunes.lnk
[2009/02/04 00:21:12 | 21,244,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
< End of report >


2 - extras:

OTViewIt Extras logfile created on: 26/02/2009 19:12:46 - Run
OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\HP_Propriétaire\Bureau
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

382,48 Mb Total Physical Memory | 158,07 Mb Available Physical Memory | 41,33% Memory free
919,22 Mb Paging File | 631,07 Mb Available in Paging File | 68,65% Paging File free
Paging file location(s): C:\pagefile.sys 576 1152;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 143,04 Gb Total Space | 26,13 Gb Free Space | 18,27% Space Free | Partition Type: NTFS
Drive D: | 5,99 Gb Total Space | 1,49 Gb Free Space | 24,94% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PCZABO
Current User Name: HP_Propriétaire
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Whitelist: On
File Age = 30 Days

[color=orange]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=orange]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=1
"AntiVirusDisableNotify"=1
"FirewallDisableNotify"=0
"UpdatesDisableNotify"=0
"AntiVirusOverride"=0
"FirewallOverride"=0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall"=1
"DisableNotifications"=0
"DoNotAllowExceptions"=0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]

[color=orange]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[2004/08/05 19:00:00 | 00,142,336 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
[2008/11/20 13:20:48 | 14,294,824 | ---- | M] (Apple Inc.) -- %ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes
[2006/10/10 13:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2007/10/18 11:34:04 | 05,724,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
[2007/10/02 17:18:24 | 00,304,488 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[2004/08/05 19:00:00 | 00,142,336 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
[2004/10/14 00:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
[2007/05/13 15:57:46 | 05,308,416 | ---- | M] (http://www.emule-project.net) -- C:\Program Files\eMule\emule.exe:*:Enabled:eMule
[2006/10/10 13:44:50 | 00,557,568 | ---- | M] (Microsoft Corporation) -- %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2007/10/18 11:34:04 | 05,724,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
[2007/10/02 17:18:24 | 00,304,488 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\livecall.exe:*isabled:Windows Live Messenger (Phone)
File not found -- C:\Program Files\EasyBox\vlc\vlc.exe:*:Enabled:VLC media player
File not found -- C:\Program Files\EasyBox\apache\apache.exe:*:Enabled:Apache HTTP Server
[2005/04/17 23:08:10 | 03,112,960 | ---- | M] () -- C:\Program Files\Soulseek\slsk.exe:*:Enabled:SoulSeek
[2008/08/02 14:59:20 | 03,461,120 | ---- | M] () -- C:\Program Files\SoulseekNS\slsk.exe:*:Enabled:SoulSeek
[2006/05/12 14:04:08 | 00,439,248 | ---- | M] (RealVNC Ltd.) -- C:\Program Files\RealVNC\VNC4\winvnc4.exe:*:Enabled:VNC Server Free Edition for Win32
[2008/11/20 13:20:48 | 14,294,824 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes
[2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
[2009/02/23 22:27:13 | 00,832,280 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgam.exe:*:Enabled:avgam.exe
[2009/02/23 22:27:16 | 00,903,960 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe
[2009/02/23 22:27:17 | 01,032,984 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe
[2009/02/23 22:27:24 | 00,592,128 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe

[color=orange]========== (O10) Winsock2 Catalogs ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\]
NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] -- C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

[color=orange]========== (O18) Protocol Handlers ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
ipp: [HKLM - No CLSID value]
[2002/05/24 02:22:16 | 00,532,480 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - Microsoft OLE DB Moniker Binder for Internet Publishing]
[2009/02/23 22:27:31 | 00,079,128 | ---- | M] (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG8\avgpp.dll (linkscanner:{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} (HKLM) [XPLPPFilter Class])
[2007/10/18 11:31:54 | 00,066,072 | ---- | M] (Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (livecall:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])
msdaipp: [HKLM - No CLSID value]
[2002/05/24 02:22:16 | 00,532,480 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - Microsoft OLE DB Moniker Binder for Internet Publishing]
[2002/05/24 02:22:16 | 00,532,480 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]
[2007/10/18 11:31:54 | 00,066,072 | ---- | M] (Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (msnim:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[color=orange]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0000040C-78E1-11D2-B60F-006097C998E7}"=Microsoft Office 2000 Premium
"{07287123-B8AC-41CE-8346-3D777245C35B}"=Bonjour
"{075473F5-846A-448B-BCB3-104AA1760205}"=Sonic RecordNow Data
"{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}"=WD Diagnostics
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}"=ATI Control Panel
"{13F3917B56CD4C25848BDC69916971BB}"=DivX Converter
"{17293791-C82E-476C-9997-9A0FF234A19B}"=HP Product Assistant
"{18D10072035C4515918F7E37EAFAACFC}"=AutoUpdate
"{19C989C4-50AE-43A4-B06E-8C70FFFF852F}"=PC-Doctor for Windows
"{21657574-BD54-48A2-9450-EB03B2C7FC29}"=Sonic MyDVD Plus
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}"=Java(TM) 6 Update 11
"{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}"=HP Deskjet Printer Preload
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}"=Sonic Update Manager
"{318AB667-3230-41B5-A617-CB3BF748D371}"=iTunes
"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java(TM) 6 Update 7
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP
"{36B4AC7A-E281-48A4-B4EE-1AEB8FD75CD3}"=K!TV XP
"{3912A629-0020-0005-3757-2FBA74D4DF0A}"=InterVideo WinDVD Player
"{3AEF2F6C-F1D3-47CD-BF3B-A327F1FABE58}"=PSPrinters06
"{3FC7CBBC4C1E11DCA1A752EA55D89593}"=DivX Version Checker
"{64FC0C98-B035-4530-B15D-3D30610B6DF1}"=HP Software Update
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}"=Sonic Express Labeler
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}"=Apple Software Update
"{6DA9102E-199F-43A0-A36B-6EF48081A658}"=Panneau de configuration MobileMe
"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}"=VC80CRTRedist - 8.0.50727.762
"{79D57C50-A329-4A58-8340-9B08D67E3010}"=KORG K-Series Editor
"{7B63B2922B174135AFC0E1377DD81EC2}"=DivX Codec
"{8ADFC4160D694100B5B8A22DE9DCABD9}"=DivX Player
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}"=InterVideo WinDVD Player
"{95633EBE-216B-48B5-B103-0C9919787F46}"=Obscure
"{9A394342-4A68-4EBA-85A6-55B559F4E700}"=Microsoft .NET Framework 1.1 French Language Pack
"{A931C76A-8189-4485-A686-53A91658CD30}"=B.I.S.S. Hosts Manager
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}"=HP Help and Support 4.0
"{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}"=Photosmart 320,370,7400,8100,8400 Series (fra)
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}"=Sonic RecordNow Audio
"{AC76BA86-7AD7-1036-7B44-A81300000003}"=Adobe Reader 8.1.3 - Français
"{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}"=Assistant de connexion Windows Live
"{B12665F4-4E93-4AB4-B7FC-37053B524629}"=Sonic RecordNow Copy
"{B13A7C41581B411290FBC0395694E2A9}"=DivX Converter
"{B508B3F1-A24A-32C0-B310-85786919EF28}"=Microsoft .NET Framework 2.0 Service Pack 1
"{B7050CBDB2504B34BC2A9CA0A692CC29}"=DivX Web Player
"{BADF6744-3787-48F6-B8C9-4C4995401D65}"=Windows Live Messenger
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}"=Microsoft .NET Framework 1.1
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}"=HpSdpAppCoreApp
"{EC4455AB-F155-4CC1-A4C5-88F3777F9886}"=Apple Mobile Device Support
"{EDE721EC-870A-11D8-9D75-000129760D75}"=PowerDirector Express
"{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}"=Microsoft .NET Framework 2.0 Language Pack - FRA
"{F958CA02-BB40-4007-894B-258729456EE4}"=QuickTime
"{FB0ADDC4-6658-4D46-8A4F-A0DEBF7497DF}"=ReFX Beast VSTi v1.0
"{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}"=Windows Live installer
"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin
"Adobe Photoshop 7.0"=Adobe Photoshop 7.0
"Agere Systems Soft Modem"=Agere Systems PCI Soft Modem
"ATI Display Driver"=ATI Display Driver
"AVG8Uninstall"=AVG 8.0
"CCleaner"=CCleaner (remove only)
"Collab"=Collab
"dBpowerAMP Mp4 Codec"=dBpowerAMP Mp4 Codec
"dBpowerAMP Musepack Codec"=dBpowerAMP Musepack Codec
"dBpowerAMP Music Converter"=dBpowerAMP Music Converter
"dBpowerAMP Ogg Vorbis Codec"=dBpowerAMP Ogg Vorbis Codec
"eMule"=eMule
"FileZilla"=FileZilla (remove only)
"FL Studio 6"=FL Studio 6
"Free Ipod Video Converter_is1"=Free Ipod Video Converter V 2.6
"Help and Support Additions"=Compléments d'aide et de support
"HijackThis"=HijackThis 2.0.2
"hp deskjet 840c series"=hp deskjet 840c series (Supprimer uniquement)
"IDNMitigationAPIs"=Microsoft Internationalized Domain Names Mitigation APIs
"ie7"=Windows Internet Explorer 7
"InstallShield_{19C989C4-50AE-43A4-B06E-8C70FFFF852F}"=PC-Doctor for Windows
"InstallShield_{95633EBE-216B-48B5-B103-0C9919787F46}"=Obscure
"KLiteCodecPack_is1"=K-Lite Codec Pack 2.54 Full
"LinPlug Albino VSTi v2.1.1"=LinPlug Albino VSTi v2.1.1
"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware
"Matroska Playback Pack"=Matroska Playback Pack
"Microsoft .NET Framework 1.1 (1033)"=Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - FRA"=Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
"miroVIDEO PCTV"=Studio PCTV
"MKV Minimum Set (LD-Anime) - MatroskaSplitter & VSFilter_is1"=Matroska Pack - Lazy Man's MKV 0.9.9
"Mozilla Firefox (3.0.6)"=Mozilla Firefox (3.0.6)
"MS Access 97 SP2"=MS Access 97 SP2
"MSCompPackV1"=Microsoft Compression Client Pack 1.0 for Windows XP
"Native Instruments Absynth 4"=Native Instruments Absynth 4
"Native Instruments FM7 VSTi DXI RTAS v1.1.3.4"=Native Instruments FM7 VSTi DXI RTAS v1.1.3.4
"Native Instruments FM8"=Native Instruments FM8
"NLSDownlevelMapping"=Microsoft National Language Support Downlevel APIs
"Novuzeit The Hands Of Darkness v1.5 CLENCHED VSTi"=Novuzeit The Hands Of Darkness v1.5 CLENCHED VSTi
"PS2"=PS2
"Python 2.2.3"=Python 2.2.3
"pywin32-py2.2"=Python 2.2 pywin32 extensions (build 203)
"RealVNC_is1"=VNC Free Edition 4.1.2
"reFX Vanguard VSTi_is1"=reFX Vanguard VSTi v1.6.3
"ShockwaveFlash"=Adobe Flash Player 9 ActiveX
"Soulseek"=SoulSeek Client 156c
"Soulseek2"=SoulSeek 157 NS 13c
"SpywareBlaster_is1"=SpywareBlaster 4.1
"TBL BassLine v1.3 VSTi"=TBL BassLine v1.3 VSTi
"Thoosje Sidebar V2.3"=Thoosje Sidebar V2.3
"Virsyn TERA v2.0"=Virsyn TERA v2.0
"VirtualDubMOD 1.5.10.2 b2540 Fr"=VirtualDubMOD 1.5.10.2 b2540 Fr
"VLC media player"=VideoLAN VLC media player 0.8.6d
"Windows Media Format Runtime"=Windows Media Format 11 runtime
"Windows Media Player"=Lecteur Windows Media 11
"WinRAR archiver"=Archiveur WinRAR
"WMFDist11"=Windows Media Format 11 runtime
"wmp11"=Windows Media Player 11
"Wudf01000"=Microsoft User-Mode Driver Framework Feature Pack 1.0

[color=orange]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 09/12/2008 17:08:48 | Computer Name = PCZABO | Source = Avira AntiVir | ID = 4118
Description =

Error - 17/12/2008 04:18:28 | Computer Name = PCZABO | Source = Avira AntiVir | ID = 4118
Description =

Error - 17/12/2008 04:19:40 | Computer Name = PCZABO | Source = Application Hang | ID = 1002
Description = Application bloquée firefox.exe, version 1.9.0.3224, module bloqué
hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

Error - 18/12/2008 03:23:56 | Computer Name = PCZABO | Source = Application Error | ID = 1000
Description = Application défaillante itunes.exe, version 8.0.2.20, module défaillant
quicktime.qts, version 7.55.90.70, adresse de défaillance 0x001517a4.

Error - 23/12/2008 19:49:52 | Computer Name = PCZABO | Source = Avira AntiVir | ID = 4118
Description =

Error - 25/12/2008 09:37:26 | Computer Name = PCZABO | Source = Application Error | ID = 1000
Description = Application défaillante itunes.exe, version 8.0.2.20, module défaillant
quicktime.qts, version 7.55.90.70, adresse de défaillance 0x001517a4.

Error - 25/12/2008 13:08:10 | Computer Name = PCZABO | Source = Avira AntiVir | ID = 4118
Description =

Error - 03/01/2009 18:23:42 | Computer Name = PCZABO | Source = Avira AntiVir | ID = 4118
Description =

Error - 06/01/2009 17:20:35 | Computer Name = PCZABO | Source = Avira AntiVir | ID = 4118
Description =

Error - 24/01/2009 09:59:13 | Computer Name = PCZABO | Source = Application Error | ID = 1000
Description = Application défaillante itunes.exe, version 8.0.2.20, module défaillant
quicktime.qts, version 7.55.90.70, adresse de défaillance 0x001517a4.

[ System Events ]
Error - 26/12/2008 04:05:17 | Computer Name = PCZABO | Source = BROWSER | ID = 8032
Description = Le service Explorateur d'ordinateur a rencontré un nombre d'échecs
trop important en essayant de retrouver la copie de sauvegarde de la liste sur
le transport \Device\NetBT_Tcpip_{E67885A0-82A9-482F-B96A-AA1FAEE72E6B}. L'explorateur
secondaire s'arrête.

Error - 05/01/2009 13:12:37 | Computer Name = PCZABO | Source = Service Control Manager | ID = 7026
Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
charger : RasAcd

Error - 15/01/2009 17:13:20 | Computer Name = PCZABO | Source = Tcpip | ID = 4199
Description = Le système a détecté un conflit d'adresses pour l'adresse IP 192.168.0.10
avec le système d'adresse physique réseau 00:13:02:BC:7A:E9. En conséquence les
opérations réseau sur se système peuvent être interrompues.

Error - 04/02/2009 03:47:50 | Computer Name = PCZABO | Source = System Error | ID = 1003
Description = Code erreur 1000007f, paramètre 1 00000008, paramètre 2 80042000,
paramètre 3 00000000, paramètre 4 00000000.

Error - 23/02/2009 17:37:25 | Computer Name = PCZABO | Source = Service Control Manager | ID = 7011
Description = Délai (30000 millisecondes) d'attente pour une réponse du service
avg8wd à une transaction.

Error - 24/02/2009 20:20:01 | Computer Name = PCZABO | Source = DCOM | ID = 10005
Description = DCOM a reçu l'erreur "%1053" lors de la mise en route du service iPod
Service avec les arguments "" pour démarrer le serveur : {063D34A4-BF84-4B8D-B699-E8CA06504DDE}

Error - 24/02/2009 20:20:01 | Computer Name = PCZABO | Source = Service Control Manager | ID = 7009
Description = Délai (30000 millisecondes) d'attente pour une connexion du service
Service de l’iPod.

Error - 24/02/2009 20:20:01 | Computer Name = PCZABO | Source = Service Control Manager | ID = 7000
Description = Le service Service de l’iPod n'a pas pu démarrer en raison de l'erreur :
%%1053


< End of report >

Malwares Bytes n'a rien trouvé, je poste quand même le rapport:

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1807
Windows 5.1.2600 Service Pack 2

26/02/2009 20:16:36
mbam-log-2009-02-26 (20-16-36).txt

Type de recherche: Examen rapide
Eléments examinés: 64682
Temps écoulé: 8 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Salut

Oui mon PC va bien ! lol Mieux apparement, il rame moins.

Pour le net, j'utilise mozilla et j'ai aussi installer NoScript et ADblock plus, du coup ça peut le faire ramer un peu...sachant que mon PC a au moins 5 ans et donc pas aussi puissant que ceux d'aujourd'hui.

Mais je relancerai un scan AVG ce week end

Merci

Salut,

Voici le rapport ToolsCleaner2, je n'ai pas encore pu faire de scan AVG, je le poste d'ici 2 jours max.

[ Rapport ToolsCleaner version 2.3.2 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\VundoFix.txt: trouvé !
C:\Combofix.txt: trouvé !
C:\avenger.txt: trouvé !
C:\UsbFix.txt: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.exe: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\hijackthis.log: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.txt: trouvé !
C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.exe: trouvé !
C:\Documents and Settings\HP_Propriétaire\Mes documents\Logiciels\hijackthis.log: trouvé !
C:\Program Files\UsbFix: trouvé !
C:\Program Files\Trend Micro\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\HP_Propriétaire\Bureau\HijackThis.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis.exe: supprimé !
C:\VundoFix.txt: supprimé !
C:\Combofix.txt: supprimé !
C:\avenger.txt: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\hijackthis.log: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.txt: supprimé !
C:\Documents and Settings\HP_Propriétaire\Bureau\OTViewIt.exe: supprimé !
C:\Documents and Settings\HP_Propriétaire\Mes documents\Logiciels\hijackthis.log: supprimé !
C:\Program Files\Trend Micro\hijackthis.log: supprimé !
C:\Rsit: supprimé !
C:\Program Files\UsbFix: supprimé !

Salut,

Voila, j'ai fais toutes les démarches + un scan AVG et il n'a rien trouvé !! C'est donc ok !

Un grand merci donc !

Zabo