200 processus dont 150 helpxxxxxx.exe

Bonjour,

j'ai un petit problème, mon ordinateur rame, et lorsque j'ai ouvert le gestionnaire des tâches, il y avait 200 processus au lieu de 50 à peu près. Il y en avait au moins 150 donc s'appelant help.....exe je ne me rappelle plus du nom exact. Ces processus prenaien chacun environ 10.000 ko et la Charge dédiée était de 2.500 Mo alors que je n'ai que 1Go de RAM.

Il s'affichait "Votre système manque de mémoire virtuelle"

Avec le gestionnaire des taches, je terminais les processus à la main, mais une fois redescendu à 150 processus, une nouvelle floppée ont réapparus

N'ayant rien téléchargé, et paniquant, j'ai éteint le PC avec le bouton.

J'ai rallumé en mode sans échec, mais, impossible d'ouvrir Malwarebytes.

Je redémarre en mode normal, je réinstalle Malwarebytes, je scanne, rien pour l'instant.
Je scanne avec Antivir, Rien pour l'instant.

Je vous envoie mon log HijiackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:27:14, on 19/04/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Taskix\Taskix32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alcohol Soft\Alcohol 52\Alcohol.exe
C:\PROGRAM FILES\FRAPS\FRAPS.EXE
C:\Program Files\trayit\TrayIt!.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Avira\AntiVir Desktop\avscan.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [alcohol.exe Autorun] C:\Program Files\Alcohol Soft\Alcohol 52\Alcohol.exe /startup
O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: TrayIt!.lnk = C:\Program Files\trayit\TrayIt!.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-F [...] E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe

--
End of file - 8497 bytes

Pouvez-vous m'aider ???

Cordialement

Salut,

Comme je l'ai dit, je ne télécharge pas, le seul téléchargement est l'envoi de photos à mon correspondant Marseillais par Podmaling

De plus j'ai remis Antivir car la licence de 30 jours de Kaspersky a expiré!

Voici le log:

ComboFix 09-04-20.A0 - TGV 6773 20/04/2009 14:00.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1022.452 [GMT 2:00]
Lancé depuis: c:\documents and settings\TGV 6773\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated)
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\MW
c:\program files\MW\TGATool2\TGATool2A.exe
c:\program files\MW\TGATool2\unins000.dat
c:\program files\MW\TGATool2\unins000.exe
c:\windows\emMON.exe
c:\windows\IE4 Error Log.txt

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-03-20 au 2009-04-20 ))))))))))))))))))))))))))))))))))))
.

2009-04-20 08:02 . 2009-04-20 08:29 -------- d-----w c:\documents and settings\TGV 6773\Application Data\FileZilla
2009-04-19 18:20 . 2009-02-11 08:19 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-04-19 18:20 . 2009-02-11 08:19 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-19 18:20 . 2009-04-19 18:20 -------- d-----w c:\documents and settings\All Users\Application Data\Malwarebytes
2009-04-18 09:16 . 2009-04-18 09:48 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Canon
2009-04-18 09:13 . 2009-04-18 09:13 -------- d-----w c:\documents and settings\TGV 6773\Application Data\ArcSoft
2009-04-18 09:11 . 2004-08-03 20:58 15104 -c--a-w c:\windows\system32\dllcache\usbscan.sys
2009-04-18 09:11 . 2004-08-03 20:58 15104 ----a-w c:\windows\system32\drivers\usbscan.sys
2009-04-18 09:09 . 2009-04-18 09:09 -------- d-----w c:\documents and settings\TGV 6773\Application Data\ScanSoft
2009-04-18 09:09 . 2009-04-18 09:09 -------- d-----w c:\documents and settings\All Users\Application Data\SSScanWizard
2009-04-18 09:09 . 2009-04-18 09:09 -------- d-----w c:\documents and settings\All Users\Application Data\SSScanAppDataDir
2009-04-18 09:09 . 2009-04-18 09:09 525 ----a-w c:\windows\MAXLINK.INI
2009-04-18 09:06 . 1996-06-30 22:00 77312 ----a-w c:\windows\system32\TWAIN_32.DLL
2009-04-18 09:06 . 1995-07-31 11:44 212480 ----a-w c:\windows\system32\PCDLIB32.DLL
2009-04-18 09:05 . 2002-05-24 01:04 389180 ----a-w c:\windows\system32\UCS32P.DLL
2009-04-18 09:05 . 2009-04-18 09:05 -------- d--h--w C:\CanoScan
2009-04-18 09:05 . 2002-10-22 16:43 217088 ----a-w c:\windows\system32\CNQL1208.dll
2009-04-18 09:05 . 2002-07-15 23:06 36864 ----a-w c:\windows\system32\CNQU71.DLL
2009-04-17 05:28 . 2009-04-17 05:28 717296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-04-16 16:48 . 2009-04-16 17:04 3262 ----a-w c:\windows\system32\fleche.ico
2009-04-16 16:23 . 2003-06-25 14:05 266360 ----a-w c:\windows\system32\TweakUI.exe
2009-04-16 16:23 . 2002-06-21 13:09 160217 ----a-w c:\windows\system32\PowerToysLicense.rtf
2009-04-16 05:31 . 2009-04-16 05:31 -------- d-----w c:\documents and settings\TGV 6773\Application Data\OpenOffice.org
2009-04-16 05:28 . 2008-06-10 00:32 73728 ----a-w c:\windows\system32\javacpl.cpl
2009-04-14 19:04 . 2009-04-19 15:48 -------- d-----r C:\Serveur
2009-04-12 16:32 . 2009-04-13 18:09 -------- d-----w C:\Train Sim Rail de France
2009-04-12 16:15 . 2009-04-12 16:15 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\Help
2009-04-12 16:06 . 2006-03-14 08:48 256512 ------w c:\windows\system32\mwdlg.dll
2009-04-12 16:06 . 2005-12-11 12:15 183296 ------w c:\windows\system32\mwgfx.dll
2009-04-12 16:06 . 2005-11-19 22:16 28160 ------w c:\windows\system32\mwgfxvb.dll
2009-04-12 16:06 . 2005-11-12 22:28 238080 ------w c:\windows\system32\mwgfx24.dll
2009-04-12 16:06 . 2004-03-16 14:47 49152 ------w c:\windows\system32\mwddsvb.dll
2009-04-12 16:06 . 2005-11-23 13:25 103936 ------w c:\windows\system32\mwdds.dll
2009-04-12 16:06 . 2004-05-14 07:13 56832 ------w c:\windows\system32\mwace.dll
2009-04-12 16:06 . 2004-05-14 06:13 27136 ------w c:\windows\system32\mwacevb.dll
2009-04-11 18:42 . 2009-04-11 18:42 7634 ----a-w c:\windows\Theme MSE.Theme
2009-04-11 15:49 . 2009-04-11 15:49 -------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-04-10 20:05 . 2009-04-10 20:05 -------- d-----w c:\documents and settings\All Users\Application Data\nView_Profiles
2009-04-10 16:36 . 2009-04-11 10:04 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\WMTools Downloaded Files
2009-04-10 16:31 . 2009-04-10 18:11 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\Ashampoo
2009-04-06 16:20 . 2009-04-06 16:20 3932214 ----a-w c:\windows\BricoPack Wallpaper.bmp
2009-04-06 16:18 . 2009-04-06 16:19 -------- d-----w c:\windows\Packs
2009-04-06 15:48 . 2009-04-19 15:49 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Audacity
2009-04-06 15:21 . 2009-04-06 15:21 -------- d-----w c:\documents and settings\TGV 6773\Application Data\ViStart
2009-04-06 14:57 . 2009-04-06 14:57 2560 ----a-w c:\windows\_MSRSTRT.EXE
2009-04-05 18:47 . 2008-04-26 14:14 42672 ------w c:\windows\system32\wbsys.dll
2009-04-05 18:18 . 2009-02-03 08:32 3550592 ----a-w c:\windows\procexp.exe
2009-04-05 15:14 . 2009-04-16 16:25 0 ----a-w C:\FileOut.Cns
2009-04-05 15:14 . 2009-04-16 16:25 0 ----a-w C:\FileIn.Cns
2009-04-05 11:45 . 2009-04-20 11:51 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Skype
2009-04-04 18:35 . 2009-04-04 18:35 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\IsolatedStorage
2009-04-04 18:22 . 2004-08-03 21:10 15360 -c--a-w c:\windows\system32\dllcache\mpe.sys
2009-04-04 18:22 . 2004-08-03 21:10 15360 ----a-w c:\windows\system32\drivers\MPE.sys
2009-04-04 18:21 . 2004-08-03 22:54 363520 -c--a-w c:\windows\system32\dllcache\psisdecd.dll
2009-04-04 18:21 . 2004-08-03 22:54 363520 ----a-w c:\windows\system32\PsisDecd.dll
2009-04-04 18:21 . 2004-08-03 22:55 56832 -c--a-w c:\windows\system32\dllcache\msdvbnp.ax
2009-04-04 18:21 . 2004-08-03 22:55 56832 ----a-w c:\windows\system32\MSDvbNP.ax
2009-04-04 18:21 . 2004-08-03 21:10 11776 -c--a-w c:\windows\system32\dllcache\bdasup.sys
2009-04-04 18:21 . 2004-08-03 21:10 11776 ----a-w c:\windows\system32\drivers\BdaSup.sys
2009-04-04 18:21 . 2004-08-03 22:55 33280 -c--a-w c:\windows\system32\dllcache\psisrndr.ax
2009-04-04 18:21 . 2004-08-03 22:55 33280 ----a-w c:\windows\system32\PsisRndr.ax
2009-04-04 18:21 . 2004-08-03 22:55 18432 -c--a-w c:\windows\system32\dllcache\bdaplgin.ax
2009-04-04 18:21 . 2004-08-03 22:55 18432 ----a-w c:\windows\system32\BdaPlgIn.ax
2009-04-04 18:13 . 2006-01-27 13:58 77824 ----a-w c:\windows\system32\PCLECoInst.dll
2009-04-04 18:13 . 2006-02-08 12:12 17792 ----a-w c:\windows\system32\drivers\emOEM.sys
2009-04-04 18:13 . 2006-02-08 12:11 32768 ----a-w c:\windows\system32\emPRP.ax
2009-04-04 18:13 . 2006-02-08 12:12 217216 ----a-w c:\windows\system32\drivers\emBDA.sys
2009-04-04 18:13 . 2005-11-01 15:33 20736 ----a-w c:\windows\system32\drivers\emAudio.sys
2009-04-04 18:11 . 1998-11-02 18:57 138752 ------w c:\windows\system32\MASE32.DLL
2009-04-04 18:11 . 1998-11-02 18:57 57856 ------w c:\windows\system32\MASD32.DLL
2009-04-04 18:11 . 1998-11-02 18:57 196096 ------w c:\windows\system32\MACD32.DLL
2009-04-04 18:11 . 1998-11-02 18:57 136192 ------w c:\windows\system32\MAMC32.DLL
2009-04-04 18:11 . 1998-11-02 18:57 27648 ------w c:\windows\system32\MA32.DLL
2009-04-04 18:10 . 2004-06-03 10:47 385100 ------w c:\windows\system32\MSVCRTD.DLL
2009-04-04 18:10 . 2003-03-19 03:04 765952 ------w c:\windows\system32\msvcp71d.dll
2009-04-04 18:10 . 2003-03-19 03:03 544768 ------w c:\windows\system32\msvcr71d.dll
2009-04-04 18:10 . 2002-01-05 19:16 737280 ------w c:\windows\system32\msvcp70d.dll
2009-04-04 18:10 . 2002-01-05 19:16 536576 ------w c:\windows\system32\msvcr70d.dll
2009-04-04 18:10 . 2003-03-19 04:28 2179072 ------w c:\windows\system32\mfc71d.dll
2009-04-04 18:10 . 2006-01-13 09:48 166912 ------w c:\windows\system32\lame_enc.dll
2009-04-04 18:10 . 2004-07-23 07:00 446464 ------w c:\windows\system32\HHActiveX.dll
2009-04-04 18:10 . 2002-01-05 11:40 487424 ------w c:\windows\system32\MSVCP70.DLL
2009-04-04 18:10 . 2002-01-05 11:37 344064 ------w c:\windows\system32\MSVCR70.DLL
2009-04-04 18:09 . 2009-04-04 18:09 -------- d-----w c:\documents and settings\All Users\Application Data\Pinnacle
2009-04-03 19:00 . 2009-04-03 19:00 -------- d-----w c:\documents and settings\TGV 6773\Application Data\TuneUp Software
2009-04-02 18:01 . 2005-12-06 03:26 380928 ----a-r c:\windows\system32\LVUI2RC.dll
2009-04-02 17:59 . 2005-12-07 18:17 86016 ----a-r c:\windows\system32\vatee.ax
2009-04-02 17:58 . 2005-12-09 13:35 245824 ----a-r c:\windows\Instexec.exe
2009-04-02 17:58 . 2005-12-09 13:31 719 ----a-r c:\windows\system32\InstExec.ini
2009-04-02 17:58 . 2005-12-09 13:31 245824 ----a-r c:\windows\system32\InstExec.exe
2009-04-02 14:41 . 2009-04-02 14:41 -------- d-----w c:\documents and settings\All Users\Application Data\Autodesk, Inc
2009-04-01 15:25 . 2009-04-02 15:47 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Ansys
2009-04-01 14:59 . 2009-04-02 15:46 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Autodesk
2009-04-01 14:58 . 2009-04-02 14:41 -------- d-----w c:\documents and settings\All Users\Application Data\Autodesk
2009-04-01 14:58 . 2009-04-02 14:38 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\Autodesk
2009-04-01 14:57 . 2005-07-27 11:43 150224 ----a-w c:\windows\system32\RGB9Rast_1.dll
2009-03-29 19:07 . 2009-03-29 19:07 -------- d--h--w c:\windows\PIF
2009-03-29 15:51 . 2009-03-29 15:51 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Malwarebytes
2009-03-29 14:53 . 2009-04-20 08:33 -------- d-----w C:\Jeux
2009-03-28 22:50 . 2009-03-30 14:05 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Thinstall
2009-03-28 20:22 . 2009-03-28 20:22 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\Xenocode
2009-03-27 23:11 . 2009-03-27 23:11 -------- d--h--w c:\windows\system32\GroupPolicy
2009-03-27 22:47 . 2009-02-13 09:31 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys
2009-03-27 21:27 . 2009-03-27 21:38 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\Google
2009-03-27 17:43 . 2009-03-27 17:43 -------- d-sh--w c:\documents and settings\TGV 6773\IECompatCache
2009-03-27 17:43 . 2009-03-27 17:43 -------- d-sh--w c:\documents and settings\TGV 6773\PrivacIE
2009-03-27 17:40 . 2009-03-27 17:40 -------- d-----w c:\documents and settings\All Users\Application Data\Micro Application
2009-03-27 17:31 . 2009-03-27 17:31 -------- d-sh--w c:\documents and settings\TGV 6773\IETldCache
2009-03-27 11:55 . 2009-03-27 11:56 -------- dc-h--w c:\windows\ie8
2009-03-27 11:53 . 2008-02-26 12:00 294912 -c----w c:\windows\system32\dllcache\msctf.dll
2009-03-27 11:39 . 2009-03-27 11:56 -------- d-----w c:\windows\system32\fr-FR
2009-03-27 11:37 . 2009-04-19 13:05 365312 ----a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-03-26 19:51 . 2009-04-20 10:08 -------- d-----w c:\documents and settings\TGV 6773\Application Data\dvdcss
2009-03-26 19:37 . 2009-03-26 19:37 -------- d-----w c:\windows\system32\drivers\umdf
2009-03-26 17:37 . 2005-05-26 14:34 2297552 ----a-w c:\windows\system32\d3dx9_26.dll
2009-03-26 10:42 . 2009-04-11 18:10 -------- d-----w c:\windows\system32\LogFiles
2009-03-25 19:19 . 2009-03-25 19:21 -------- d-----w c:\documents and settings\TGV 6773\Application Data\vlc
2009-03-25 19:09 . 2003-06-19 00:31 17920 ----a-w c:\windows\system32\mdimon.dll
2009-03-25 19:08 . 2009-04-20 07:52 -------- d-----r C:\Documents Perso
2009-03-25 19:06 . 2009-03-25 19:08 -------- d-----w c:\windows\SHELLNEW
2009-03-25 19:03 . 2009-03-25 19:03 -------- d--h--r C:\MSOCache
2009-03-25 18:44 . 2009-03-25 18:44 -------- d-----w c:\documents and settings\All Users\Application Data\SlySoft
2009-03-25 17:59 . 2009-03-25 17:59 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Podmailing
2009-03-25 17:55 . 2009-03-25 17:55 -------- d-----w c:\documents and settings\TGV 6773\Application Data\AdobeUM
2009-03-25 17:53 . 2009-04-20 08:05 -------- d-----w c:\documents and settings\TGV 6773\Local Settings\Application Data\Paint.NET

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-20 08:33 . 2009-03-26 17:39 -------- d-----w c:\program files\Rigs of Rods 0.36.1
2009-04-20 08:01 . 2009-04-20 08:01 -------- d-----w c:\program files\FileZilla FTP Client
2009-04-20 07:43 . 2006-04-12 07:38 85972 ----a-w c:\windows\system32\perfc00C.dat
2009-04-20 07:43 . 2006-04-12 07:38 513068 ----a-w c:\windows\system32\perfh00C.dat
2009-04-19 21:07 . 2009-04-19 11:42 -------- d-----w c:\program files\Rigs of Rods 0.35
2009-04-19 18:20 . 2009-04-19 18:20 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-04-18 09:09 . 2009-04-18 09:09 -------- d-----w c:\program files\Fichiers communs\ScanSoft Shared
2009-04-18 09:08 . 2009-04-18 09:08 -------- d-----w c:\program files\ScanSoft
2009-04-18 09:06 . 2009-04-18 09:06 -------- d-----w c:\program files\ArcSoft
2009-04-18 09:06 . 2006-04-12 11:52 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-17 18:03 . 2006-04-12 07:37 11376 ----a-w c:\windows\system32\drivers\secdrv.sys
2009-04-17 17:59 . 2009-04-17 17:59 -------- d-----w c:\program files\SCi
2009-04-17 05:30 . 2009-04-17 05:30 -------- d-----w c:\program files\Alcohol Soft
2009-04-16 05:28 . 2009-04-16 05:28 -------- d-----w c:\program files\JRE
2009-04-16 05:28 . 2009-04-16 05:28 -------- d-----w c:\program files\OpenOffice.org 3
2009-04-16 05:28 . 2006-04-12 08:11 -------- d-----w c:\program files\Java
2009-04-13 11:01 . 2009-04-11 14:52 -------- d-----w c:\program files\Microsoft Games
2009-04-12 17:09 . 2009-04-12 17:09 -------- d-----w c:\program files\Train Cleaner
2009-04-12 16:15 . 2009-04-12 16:13 -------- d-----w c:\program files\Kosmos
2009-04-12 16:07 . 2009-04-12 16:03 -------- d-----w c:\program files\Route_Riter
2009-04-12 16:06 . 2009-04-12 16:06 -------- d-----w c:\program files\AceIt
2009-04-12 15:56 . 2009-04-12 15:56 -------- d-----w c:\program files\Shape Viewer
2009-04-11 15:49 . 2009-04-11 15:49 -------- d-----w c:\program files\Avira
2009-04-11 14:45 . 2009-03-25 17:06 -------- d-----w c:\program files\Fraps
2009-04-09 18:54 . 2009-04-09 18:54 -------- d-----w c:\program files\Trend Micro
2009-04-09 17:45 . 2009-04-09 17:45 -------- d-----w c:\program files\Sunbelt Software
2009-04-09 16:45 . 2009-04-09 16:45 -------- d-----w c:\program files\Auran
2009-04-09 16:00 . 2009-04-09 16:00 -------- d-----w c:\program files\AxBx
2009-04-09 10:09 . 2009-04-09 10:09 -------- d-----w c:\program files\Lame for Audacity
2009-04-09 10:07 . 2009-04-09 10:07 -------- d-----w c:\program files\Audacity 1.3
2009-04-08 16:19 . 2009-03-25 17:23 -------- d-----w c:\program files\MSN Messenger
2009-04-05 11:45 . 2009-04-05 11:45 -------- d-----w c:\program files\Skype
2009-04-05 11:45 . 2009-04-05 11:45 -------- d-----w c:\program files\Fichiers communs\Skype
2009-04-04 18:14 . 2009-04-04 18:14 -------- d-----w c:\program files\DivX
2009-04-04 18:12 . 2009-04-04 18:12 -------- d-----w c:\program files\MSXML 4.0
2009-04-04 18:10 . 2009-04-04 18:10 -------- d-----w c:\program files\Pinnacle
2009-04-03 21:20 . 2009-03-25 17:01 -------- d-----w c:\program files\Microsoft BootVis
2009-04-03 19:52 . 2009-03-25 17:03 -------- d-----w c:\program files\Defraggler
2009-04-02 17:59 . 2009-04-02 17:58 -------- d-----w c:\program files\Fichiers communs\Logitech
2009-04-02 15:55 . 2009-04-01 18:25 -------- d-----w c:\program files\Autodesk Student Community Download Tool
2009-04-02 15:02 . 2009-04-01 14:58 -------- d-----w c:\program files\Fichiers communs\Autodesk Shared
2009-04-02 15:01 . 2009-04-02 14:34 -------- d-----w c:\program files\Autodesk
2009-04-02 15:01 . 2009-04-02 15:01 -------- d-----w c:\program files\Fichiers communs\Autodesk
2009-04-02 14:39 . 2009-04-02 14:38 -------- d-----w c:\program files\DWG TrueView 2009
2009-04-01 15:00 . 2009-04-01 15:00 -------- d-----w c:\program files\Microsoft WSE
2009-03-30 18:08 . 2009-03-30 18:08 -------- d---a-w c:\program files\Google Chrome
2009-03-27 22:50 . 2009-03-25 16:59 -------- d-----w c:\program files\7-Zip
2009-03-27 22:22 . 2009-03-27 22:22 -------- d-----w c:\program files\trayit
2009-03-27 17:40 . 2009-03-27 17:40 -------- d-----w c:\program files\Micro Application
2009-03-27 06:32 . 2009-03-27 06:32 -------- d-----w c:\program files\CCleaner
2009-03-26 11:28 . 2009-03-26 11:28 -------- d-----w c:\program files\Microsoft Virtual PC
2009-03-25 23:02 . 2006-04-12 11:53 -------- d-----w c:\program files\Synaptics
2009-03-25 23:01 . 2006-04-13 05:43 -------- d-----w c:\program files\Sonic
2009-03-25 23:01 . 2006-04-12 07:51 -------- d-----w c:\program files\Services en ligne
2009-03-25 23:01 . 2006-04-13 07:03 -------- d---a-w c:\program files\Offre Wanadoo
2009-03-25 23:00 . 2006-04-12 07:53 -------- d-----w c:\program files\microsoft frontpage
2009-03-25 23:00 . 2006-04-13 05:37 -------- d-----w c:\program files\InterVideo
2009-03-25 22:58 . 2006-04-12 08:11 -------- d-----w c:\program files\Fichiers communs\Java
2009-03-25 22:58 . 2006-04-12 07:59 -------- d-----w c:\program files\Fichiers communs\InstallShield
2009-03-25 22:58 . 2006-04-13 05:50 -------- d-----w c:\program files\Fichiers communs\Adobe
2009-03-25 22:58 . 2006-04-12 11:51 -------- d-----w c:\program files\CONEXANT
2009-03-25 22:49 . 2006-04-12 07:58 -------- d-----w c:\documents and settings\All Users\Application Data\SBSI
2009-03-25 22:49 . 2009-03-25 14:27 -------- d-----w c:\documents and settings\TGV 6773\Application Data\toshiba
2009-03-25 22:49 . 2009-03-25 14:27 -------- d-----w c:\documents and settings\TGV 6773\Application Data\Sonic
2009-03-25 22:49 . 2006-04-13 06:07 -------- d-----w c:\documents and settings\Administrateur\Application Data\Sonic
2009-03-25 22:49 . 2006-04-13 05:36 -------- d-----w c:\documents and settings\Administrateur\Application Data\toshiba
2009-03-25 19:16 . 2009-03-25 19:16 -------- d-----w c:\program files\MSECache
2009-03-25 19:07 . 2009-03-25 19:06 -------- d-----w c:\program files\Microsoft Works
2009-03-25 19:04 . 2009-03-25 19:04 -------- d-----w c:\program files\Microsoft.NET
2009-03-25 17:57 . 2006-04-13 05:59 -------- d-----w c:\documents and settings\All Users\Application Data\Symantec
2009-03-25 17:57 . 2006-04-13 05:59 -------- d-----w c:\program files\Fichiers communs\Symantec Shared
2009-03-25 17:53 . 2009-03-25 17:53 -------- d-----w c:\program files\Paint.NET
2009-03-25 17:49 . 2009-03-25 17:49 -------- d-----w c:\program files\MSBuild
2009-03-25 17:45 . 2009-03-25 17:45 -------- d-----w c:\program files\Reference Assemblies
2009-03-25 17:29 . 2009-03-25 17:28 -------- d-----w c:\program files\StuffPlug3
2009-03-25 17:27 . 2009-03-25 17:27 -------- d-----w c:\program files\Messenger Plus! Live
2009-03-25 17:27 . 2009-03-25 17:27 -------- d-----w c:\program files\Windows Live
2009-03-25 17:15 . 2009-03-25 17:15 -------- d-----w c:\program files\X'nStop 2.5
2009-03-25 17:11 . 2009-03-25 17:11 -------- d-----w c:\program files\TeamViewer
2009-03-25 17:10 . 2009-03-25 17:10 -------- d-----w c:\program files\Pointofix
2009-03-25 17:09 . 2009-03-25 17:09 -------- d-----w c:\program files\Podmailing
2009-03-25 17:09 . 2009-03-25 17:09 -------- d-----w c:\program files\Photo Story 3 for Windows
2009-03-25 17:09 . 2009-03-25 17:09 -------- d-----w c:\program files\PhotoFiltre
2009-03-25 17:08 . 2009-03-25 17:08 -------- d-----w c:\program files\PDFCreator
2009-03-25 17:08 . 2009-03-25 14:27 131 ----a-w c:\documents and settings\TGV 6773\Local Settings\Application Data\fusioncache.dat
2009-03-25 17:07 . 2009-03-25 17:07 -------- d-----w c:\program files\InfraRecorder
2009-03-25 17:07 . 2009-03-25 17:07 -------- d-----w c:\program files\Free Download Manager
2009-03-25 17:03 . 2009-03-25 17:03 -------- d-----w c:\program files\Lavalys
2009-03-25 17:02 . 2009-03-25 17:02 -------- d-----w c:\program files\SlySoft
2009-03-25 17:02 . 2009-03-25 17:02 -------- d-----w c:\program files\CamStudio
2009-03-25 17:01 . 2009-03-25 17:01 -------- d-----w c:\program files\BonkEnc
2009-03-25 17:00 . 2009-03-25 17:00 -------- d-----w c:\program files\aMSN
2009-03-25 17:00 . 2009-03-25 17:00 -------- d-----w c:\program files\VideoLAN
2009-03-25 14:54 . 2009-03-25 14:53 -------- d-----w c:\program files\Unlocker
2009-03-25 14:40 . 2009-03-25 14:40 -------- d-----w c:\program files\Taskix
2009-03-25 14:28 . 2006-04-12 11:17 -------- d-----w c:\program files\Intel
2009-03-08 03:34 . 2006-04-12 07:37 914944 ----a-w c:\windows\system32\WININET.DLL
2009-03-08 03:34 . 2006-04-12 07:37 43008 ----a-w c:\windows\system32\licmgr10.dll
2009-03-08 03:33 . 2006-04-12 07:37 18944 ----a-w c:\windows\system32\corpol.dll
2009-03-08 03:33 . 2006-04-12 07:37 420352 ----a-w c:\windows\system32\vbscript.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EVEREST AutoStart"="c:\program files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2009-02-04 2350176]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-02-16 7557120]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 57344]
"Taskix"="c:\program files\Taskix\Taskix32.exe" [2007-01-25 65536]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-12-09 225280]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-02 761948]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-02-16 1519616]
"NvMediaCenter"="NvMCTray.dll" - c:\windows\system32\nvmctray.dll [2006-02-16 86016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\TGV 6773\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
TrayIt!.lnk - c:\program files\trayit\TrayIt!.exe [2009-3-28 204800]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\TeamViewer\\Version4\\TeamViewer.exe"=
"c:\\Program Files\\aMSN\\bin\\wish.exe"=
"c:\\Program Files\\Podmailing\\podmailing.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Documents and Settings\\TGV 6773\\Local Settings\\Application Data\\Xenocode\\XSandbox\\Diskeeper (TM) Application Launcher\\13.0.3.0\\2008.12.07T11.56\\Virtual\\STUBEXE\\@PROGRAMFILES@\\Diskeeper Corporation\\Diskeeper\\DkService.exe"=
"c:\\Program Files\\Java\\jre1.5.0_04\\launch4j-tmp\\JDownloader.exe"=
"c:\\WINDOWS\\system32\\java.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\Free Download Manager\\fdm.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Rigs of Rods 0.36.1\\Serveurs\\rorserver.exe"=
"c:\\Program Files\\Java\\jre1.6.0_07\\launch4j-tmp\\JDownloader.exe"=

S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-03-05 108289]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [2009-02-04 26224]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - PROCEXP113

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-05-16 c:\windows\Tasks\User_Feed_Synchronization-{72622242-A53E-4EE2-A78F-0F87707C64D7}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
IE: Ajouter à Kaspersky Anti-Bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
FF - ProfilePath - c:\documents and settings\TGV 6773\Application Data\Mozilla\Firefox\Profiles\xcrmf2vf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - component: c:\program files\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll

---- PARAMETRES FIREFOX ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-20 14:02
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\UnlockerDriver5]
"ImagePath"="\??\c:\program files\Unlocker\UnlockerDriver5.sys"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\ASFWHide]
"ImagePath"="\??\c:\docume~1\TGV677~1\LOCALS~1\Temp\ASFWHide"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:e2,63,26,f1,3f,c8,ff,68,b0,6f,dd,2f,90,
70,f2,04,2e,e8,e1,00,eb,16,2b,de,96,b8,b7,9e,0b,bc,fe,ff,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,eb,34,31,e8,b1,
39,26,fc,46,47,15,b0,92,4b,c7,ef,81,93,d3,aa,85,08,fa,6e,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:7a,45,05,fd,91,e8,6f,31,c1,59,11,01,3d,
b0,3a,90,7a,45,05,fd,91,e8,6f,31,67,b7,66,a4,27,7f,88,6b,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:3e,1e,9e,e0,57,5a,93,61,1e,29,a4,4b,7a,
12,f6,d9,6b,65,49,6a,7e,99,74,f7,60,fe,a3,3a,65,6f,e6,ba,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:f5,1d,4d,73,a8,13,5c,05,cd,85,96,97,11,
7f,9c,40,e9,02,6c,fa,fb,1d,47,57,6b,c3,6c,bd,4a,87,5c,9a,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hexf,20,58,62,78,6b,cf,c8,55,a6,c5,90,10,
f2,86,1d,50,93,e5,ab,ec,6a,4e,ab,7d,7c,30,b0,d1,f0,3b,4a,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:97,20,4e,9a,c7,f1,35,ee,58,5c,d3,8d,cb,
7c,36,91,97,20,4e,9a,c7,f1,35,ee,74,72,57,b8,f9,fc,f1,f8,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,60,ac,7b,4d,a9,
d8,7b,6b,aa,52,c6,00,84,3c,26,64,bf,0c,1d,45,1a,4b,6e,cf,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,01,66,9e,01,67,
3e,a6,e3,b2,46,9a,e2,1b,fe,1b,94,56,3d,bb,b8,ad,24,3d,2e,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:b1,cd,45,5a,a8,c4,f8,b9,1e,ac,73,5f,f3,
7c,73,03,37,a4,aa,c3,a6,15,56,0a,a8,7d,b2,66,ea,6b,2a,b4,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:2a,b7,cc,b5,b9,7f,41,e7,22,7b,f1,35,d8,
82,db,f0,f8,31,0f,a9,5f,a0,ec,fb,d3,7f,e2,e7,68,e2,10,34,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:fa,ea,66,7f,d4,3b,6b,70,e8,ab,a8,f4,d9,
bb,a0,99,05,73,21,dd,54,d8,4a,c5,c6,ee,87,8b,6d,17,82,41,6c,43,2d,1e,aa,22,\
.
Heure de fin: 2009-04-20 14:03
ComboFix-quarantined-files.txt 2009-04-20 12:03

Avant-CF: 25 711 996 928 octets libres
Après-CF: 26 113 765 376 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

405.

C'est mieux, on va ire oui, il me l'a fait qu'une fois .... et depuis 10h ce matin jusqu'au COMBOFIX, rien ne s'est passé ....

Je fais Kaspersky

Pour ce prob, je vois pas

Tu as essayé la désinstall/réinstall ?

Ok, bon surf.