Trojan tr/vundo.gen : comment m'en défaire ? [Resolu]

Bonjour, j'ai mon Avira antivir qui detecte sans cesse le trojan TR/Vundo.Gen quand antivir guard est activé.
J'ai essayé plusieurs logiciels mais qui n'ont pas réussi à enlever ce trojan.
Pour utiliser le pc je suis obligé de désactiver antivir guard sinon les fenetres de detection ne cessent de se succéder...

Après avoir lu les posts précédents à ce sujet, J'ai fait un scan avec hijackthis. le voici :

\Documents and Settings\Alex\Local Settings\Temporary Internet Files\Content.IE5\4RAT1ZXW\HiJackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0e012874-d73f-4acf-8a97-01fa43fab3bd} - C:\WINDOWS\system32\sefewana.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {73912227-6EB5-486A-A660-0537640E3512} - C:\WINDOWS\system32\streanci.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [CPMcf773d3c] Rundll32.exe "c:\windows\system32\rawijeku.dll",a
O4 - HKLM\..\Run: [cc440ea0] rundll32.exe "C:\WINDOWS\system32\duvabova.dll",b
O4 - HKLM\..\Run: [gafarudeva] Rundll32.exe "C:\WINDOWS\system32\gomopiwe.dll",s
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LanceurEasyBox] "C:\Program Files\EasyBox\EasyBox.exe" -AutoStart
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Eurobarre.lnk = C:\Program Files\Eurobarre\eb.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} - http://www.pixaco.fr/static/downlo [...] upload.cab
O16 - DPF: {34AD0F96-3109-4D6F-82C7-7F1EE9BBEC5E} (Setup Class) - http://www.voicefive.com/exe/WATSetup.cab
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/33.02/uploader2.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.comboost.com/Drivers/ImageUploader5.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/ [...] DP-1.1.cab
O16 - DPF: {DAF94F73-2AA6-44D8-A562-A28831820D34} (Pixum EasyUploadX Control) - http://www.pixum.fr/apps/EasyUploadX.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telech [...] oader4.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: c:\windows\system32\rawijeku.dll,C:\WINDOWS\system32\zilozama.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\rawijeku.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\rawijeku.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 10200 bytes


Merci à vous de m'aider à résoudre ce problème.

effectivement... désolée !

voici la 1ere partie
merci à vous !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:52:31, on 09/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Eurobarre\eb.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Documents and Settings\Alex\Local Settings\Temporary Internet Files\Content.IE5\4RAT1ZXW\HiJackThis[1].exe

oops
un message d'erreur apparait :

vous ne pouvez pas renommer comboFix en ComboFix[1]

alors que je n'ai fait aucune autre manip' que de cliquer sur lien...

ComboFix 09-05-08.03 - Alex 09/05/2009 14:37.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.568 [GMT 2:00]
Lancé depuis: c:\documents and settings\Alex\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated)
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\Alex\LOCALS~1\Temp\install_flash_player.exe
c:\windows\IE4 Error Log.txt
c:\windows\system32\avobavud.ini
c:\windows\system32\duvabova.dll
c:\windows\system32\gomopiwe.dll
c:\windows\system32\idiyiwel.ini
c:\windows\system32\lewiyidi.dll
c:\windows\system32\mohasobi.dll
c:\windows\system32\rawijeku.dll
c:\windows\system32\sefewana.dll
c:\windows\system32\zilozama.dll

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NPF
-------\Legacy_OREANS32
-------\Legacy_WINDOWS_LOG
-------\Service_oreans32


((((((((((((((((((((((((((((( Fichiers créés du 2009-04-09 au 2009-05-09 ))))))))))))))))))))))))))))))))))))
.

2009-05-09 10:24 . 2009-05-09 10:24 -------- d-----w C:\VundoFix Backups
2009-05-09 08:31 . 2009-03-24 14:07 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys
2009-05-09 08:31 . 2009-05-09 08:31 -------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-05-09 08:31 . 2009-05-09 08:31 -------- d-----w c:\program files\Avira
2009-05-02 07:09 . 2009-05-08 09:45 -------- d-----w c:\program files\NDSROM Player
2009-05-01 18:57 . 2009-05-04 17:07 -------- d--h--w C:\LG3G
2009-05-01 18:57 . 2009-05-01 18:57 -------- d-----w C:\lgupload
2009-04-18 07:08 . 2009-04-18 07:09 -------- d-----w c:\documents and settings\Alex\Local Settings\Application Data\Deployment
2009-04-17 16:45 . 2009-02-06 10:10 227840 -c----w c:\windows\system32\dllcache\wmiprvse.exe
2009-04-17 16:45 . 2009-03-06 14:20 286720 -c----w c:\windows\system32\dllcache\pdh.dll
2009-04-17 16:45 . 2009-02-09 11:23 111104 -c----w c:\windows\system32\dllcache\services.exe
2009-04-17 16:45 . 2009-02-09 10:53 401408 -c----w c:\windows\system32\dllcache\rpcss.dll
2009-04-17 16:45 . 2009-02-09 10:53 473600 -c----w c:\windows\system32\dllcache\fastprox.dll
2009-04-17 16:45 . 2009-02-09 10:53 685568 -c----w c:\windows\system32\dllcache\advapi32.dll
2009-04-17 16:45 . 2009-02-09 10:53 735744 -c----w c:\windows\system32\dllcache\lsasrv.dll
2009-04-17 16:45 . 2009-02-09 10:53 453120 -c----w c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-17 16:45 . 2009-02-09 10:53 739840 -c----w c:\windows\system32\dllcache\ntdll.dll
2009-04-17 16:43 . 2008-12-16 12:31 354304 -c----w c:\windows\system32\dllcache\winhttp.dll
2009-04-17 16:39 . 2008-04-21 21:15 219136 -c----w c:\windows\system32\dllcache\wordpad.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-09 12:43 . 2009-01-02 21:25 -------- d-----w c:\program files\DNA
2009-05-09 07:29 . 2007-10-28 14:13 445 ----a-w c:\windows\EntPack.dat
2009-05-02 14:49 . 2007-07-21 07:07 -------- d-----w c:\program files\eMule
2009-04-26 13:30 . 2007-01-03 11:26 -------- d-----w c:\program files\Messenger Plus! Live
2009-04-18 06:59 . 2002-08-30 12:00 82780 ----a-w c:\windows\system32\perfc00C.dat
2009-04-18 06:59 . 2002-08-30 12:00 489746 ----a-w c:\windows\system32\perfh00C.dat
2009-03-14 10:12 . 2009-01-02 21:41 -------- d-----w c:\program files\Vuze
2009-03-06 14:20 . 2004-08-19 15:09 286720 ----a-w c:\windows\system32\pdh.dll
2009-03-03 00:13 . 2004-08-19 15:09 826368 ----a-w c:\windows\system32\wininet.dll
2009-02-20 17:10 . 2004-08-19 15:09 78336 ----a-w c:\windows\system32\ieencode.dll
2009-02-09 14:05 . 2004-08-19 15:00 1846912 ----a-w c:\windows\system32\win32k.sys
2009-02-09 11:23 . 2004-08-19 16:04 2025984 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:23 . 2004-08-19 15:04 2147328 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:23 . 2004-08-19 15:10 111104 ----a-w c:\windows\system32\services.exe
2009-02-09 10:53 . 2004-08-19 15:09 735744 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:53 . 2004-08-19 15:09 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-09 10:53 . 2004-08-19 15:09 685568 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 10:53 . 2004-08-19 15:09 739840 ----a-w c:\windows\system32\ntdll.dll
2009-02-08 17:15 . 2009-02-08 17:15 48640 --sha-w c:\windows\system32\yatewefa.dll.tmp
2009-02-08 17:15 . 2009-02-08 17:15 48640 --sha-w c:\windows\system32\givinoye.dll.tmp
2009-02-08 17:15 . 2009-02-08 17:15 48640 --sha-w c:\windows\system32\fapilizu.dll.tmp
2006-01-10 20:55 . 2006-01-10 20:55 5549663 -c--a-w c:\program files\wildthingssetup.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 94208]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2004-06-01 196608]
"LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-03-16 67128]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-01-02 342848]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-17 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-05-21 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-06-01 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-06-01 217088]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-06-30 282624]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2007-05-14 35328]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-10-12 185632]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"AlcxMonitor"="ALCXMNTR.EXE" - c:\windows\ALCXMNTR.EXE [2004-09-07 57344]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Alex\Menu D‚marrer\Programmes\D‚marrage\
Eurobarre.lnk - c:\program files\Eurobarre\eb.exe [2007-1-24 103936]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456]
hpoddt01.exe.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-3-16 67128]
Windows Desktop Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\zilozama.dll c:\windows\system32\rawijeku.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"c:\\WINDOWS\\system32\\svchost.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Namo\\WebEditor 6 Trial\\bin\\WebEditor.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\BitDownload\\BitDownload.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\HomePlayer\\HomePlayer.exe"=
"c:\\Program Files\\HomePlayer\\VLC\\vlc.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4672:UDP"= 4672:UDP:eMule : UDP Entrant
"4662:TCP"= 4662:TCP:eMule : TCP Entrant

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [09/05/2009 10:31 108289]
S3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys --> c:\windows\system32\drivers\av5flt.sys [?]
S3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\system32\drivers\fbxusb32.sys [20/10/2004 15:23 21344]
.
Contenu du dossier 'Tâches planifiées'

2006-03-25 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8135439415.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 23:52]

2009-05-09 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-31 20:37]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{0e012874-d73f-4acf-8a97-01fa43fab3bd} - c:\windows\system32\sefewana.dll
BHO-{73912227-6EB5-486A-A660-0537640E3512} - c:\windows\system32\streanci.dll
HKCU-Run-LanceurEasyBox - c:\program files\EasyBox\EasyBox.exe
HKLM-Run-NWEReboot - (no file)


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = localhost
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: localhost
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} - hxxp://www.pixaco.fr/static/download/pixacodndupload.cab
DPF: {34AD0F96-3109-4D6F-82C7-7F1EE9BBEC5E} - hxxp://www.voicefive.com/exe/WATSetup.cab
DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
DPF: {DAF94F73-2AA6-44D8-A562-A28831820D34} - hxxp://www.pixum.fr/apps/EasyUploadX.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-09 14:43
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...


**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,a7,3c,b6,ec,49,
50,cf,5b,e2,63,26,f1,3f,c8,ff,68,41,78,54,6b,cb,25,73,5e,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:6a,9c,d6,61,af,45,84,18,c4,8a,60,e2,54,
09,51,41,6a,9c,d6,61,af,45,84,18,38,bb,d5,45,c2,68,70,5c,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,a3,11,d1,33,31,
f2,8f,e4,ff,7c,85,e0,43,d4,0e,fe,e7,38,ef,42,95,63,97,c3,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:86,8c,21,01,be,91,eb,e7,6b,35,2a,6a,a9,
4a,6b,72,86,8c,21,01,be,91,eb,e7,ba,33,a5,03,1a,41,48,16,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:f5,1d,4d,73,a8,13,5c,05,bf,eb,52,72,d9,
34,31,16,f5,1d,4d,73,a8,13,5c,05,1d,83,69,e8,ac,fb,66,38,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,d1,3d,9d,85,4a,
5b,1d,94,df,20,58,62,78,6b,cf,c8,4e,9e,52,48,ec,c0,a7,1c,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,70,e8,0d,5e,af,
13,7c,10,fb,a7,78,e6,12,2f,9a,ea,e2,c6,0d,83,3a,45,f8,77,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,66,2f,d4,91,f6,
2b,69,64,01,3a,48,fc,e8,04,4a,f1,82,29,83,2f,7d,40,7b,d2,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,5b,b6,2b,5e,f4,
55,8e,f8,f6,0f,4e,58,98,5b,89,c9,25,df,65,00,2e,63,32,b1,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:3d,ce,ea,26,2d,45,aa,78,56,fd,71,d2,af,
63,a5,f2,3d,ce,ea,26,2d,45,aa,78,37,32,9f,41,5c,1f,78,77,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,23,78,f4,93,ee,
43,20,d9,2a,b7,cc,b5,b9,7f,41,e7,8b,2c,6d,d9,31,77,a6,50,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:05,73,21,dd,54,d8,4a,c5,09,df,9c,99,b0,
a2,0a,3e,6c,43,2d,1e,aa,22,2f,9c,92,e1,1e,0f,d6,06,73,36,6c,43,2d,1e,aa,22,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3436)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\searchindexer.exe
c:\program files\Logitech\Video\FxSvr2.exe
c:\windows\system32\searchprotocolhost.exe
c:\program files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
c:\program files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
c:\program files\Java\jre1.6.0_07\bin\jucheck.exe
c:\windows\system32\searchfilterhost.exe
.
**************************************************************************
.
Heure de fin: 2009-05-09 14:48 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-05-09 12:47

Avant-CF: 1 293 484 032 octets libres
Après-CF: 3 080 949 760 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

269 --- E O F --- 2009-04-29 21:02



J'ai l'impression que c'est bon, qu'en penses-tu ?

Et voilà le compte rendu :

ComboFix 09-05-08.03 - Alex 09/05/2009 15:06.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.626 [GMT 2:00]
Lancé depuis: c:\documents and settings\Alex\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Alex\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated)

FILE ::
c:\program files\wildthingssetup.exe
c:\windows\system32\fapilizu.dll.tmp
c:\windows\system32\givinoye.dll.tmp
c:\windows\system32\yatewefa.dll.tmp
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Eurobarre
c:\program files\Eurobarre\eb.exe
c:\program files\Eurobarre\inf.bmp
c:\program files\Eurobarre\pub.bmp
c:\program files\Eurobarre\skin\Eurobarre_skin3.gif
c:\program files\Eurobarre\skin\Eurobarre_skin3.txt
c:\program files\Eurobarre\skin\rondo.gif
c:\program files\Eurobarre\skin\rondo.txt
c:\program files\Eurobarre\uninstall.exe
c:\program files\wildthingssetup.exe
C:\VundoFix Backups
c:\windows\system32\fapilizu.dll.tmp
c:\windows\system32\givinoye.dll.tmp
c:\windows\system32\yatewefa.dll.tmp

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-04-09 au 2009-05-09 ))))))))))))))))))))))))))))))))))))
.

2009-05-09 08:31 . 2009-03-24 14:07 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys
2009-05-09 08:31 . 2009-05-09 08:31 -------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-05-09 08:31 . 2009-05-09 08:31 -------- d-----w c:\program files\Avira
2009-05-02 07:09 . 2009-05-08 09:45 -------- d-----w c:\program files\NDSROM Player
2009-05-01 18:57 . 2009-05-04 17:07 -------- d--h--w C:\LG3G
2009-05-01 18:57 . 2009-05-01 18:57 -------- d-----w C:\lgupload
2009-04-18 07:08 . 2009-04-18 07:09 -------- d-----w c:\documents and settings\Alex\Local Settings\Application Data\Deployment
2009-04-17 16:45 . 2009-02-06 10:10 227840 -c----w c:\windows\system32\dllcache\wmiprvse.exe
2009-04-17 16:45 . 2009-03-06 14:20 286720 -c----w c:\windows\system32\dllcache\pdh.dll
2009-04-17 16:45 . 2009-02-09 11:23 111104 -c----w c:\windows\system32\dllcache\services.exe
2009-04-17 16:45 . 2009-02-09 10:53 401408 -c----w c:\windows\system32\dllcache\rpcss.dll
2009-04-17 16:45 . 2009-02-09 10:53 473600 -c----w c:\windows\system32\dllcache\fastprox.dll
2009-04-17 16:45 . 2009-02-09 10:53 685568 -c----w c:\windows\system32\dllcache\advapi32.dll
2009-04-17 16:45 . 2009-02-09 10:53 735744 -c----w c:\windows\system32\dllcache\lsasrv.dll
2009-04-17 16:45 . 2009-02-09 10:53 453120 -c----w c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-17 16:45 . 2009-02-09 10:53 739840 -c----w c:\windows\system32\dllcache\ntdll.dll
2009-04-17 16:43 . 2008-12-16 12:31 354304 -c----w c:\windows\system32\dllcache\winhttp.dll
2009-04-17 16:39 . 2008-04-21 21:15 219136 -c----w c:\windows\system32\dllcache\wordpad.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-09 13:10 . 2009-01-02 21:25 -------- d-----w c:\program files\DNA
2009-05-09 07:29 . 2007-10-28 14:13 445 ----a-w c:\windows\EntPack.dat
2009-05-02 14:49 . 2007-07-21 07:07 -------- d-----w c:\program files\eMule
2009-04-26 13:30 . 2007-01-03 11:26 -------- d-----w c:\program files\Messenger Plus! Live
2009-04-18 06:59 . 2002-08-30 12:00 82780 ----a-w c:\windows\system32\perfc00C.dat
2009-04-18 06:59 . 2002-08-30 12:00 489746 ----a-w c:\windows\system32\perfh00C.dat
2009-03-14 10:12 . 2009-01-02 21:41 -------- d-----w c:\program files\Vuze
2009-03-06 14:20 . 2004-08-19 15:09 286720 ----a-w c:\windows\system32\pdh.dll
2009-03-03 00:13 . 2004-08-19 15:09 826368 ----a-w c:\windows\system32\wininet.dll
2009-02-20 17:10 . 2004-08-19 15:09 78336 ----a-w c:\windows\system32\ieencode.dll
2009-02-09 14:05 . 2004-08-19 15:00 1846912 ----a-w c:\windows\system32\win32k.sys
2009-02-09 11:23 . 2004-08-19 16:04 2025984 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:23 . 2004-08-19 15:04 2147328 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:23 . 2004-08-19 15:10 111104 ----a-w c:\windows\system32\services.exe
2009-02-09 10:53 . 2004-08-19 15:09 735744 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:53 . 2004-08-19 15:09 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-09 10:53 . 2004-08-19 15:09 685568 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 10:53 . 2004-08-19 15:09 739840 ----a-w c:\windows\system32\ntdll.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 94208]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2004-06-01 196608]
"LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-03-16 67128]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-01-02 342848]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-17 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-05-21 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-06-01 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-06-01 217088]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-06-30 282624]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2007-05-14 35328]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-10-12 185632]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"AlcxMonitor"="ALCXMNTR.EXE" - c:\windows\ALCXMNTR.EXE [2004-09-07 57344]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Alex\Menu D‚marrer\Programmes\D‚marrage\
Eurobarre.lnk - c:\qoobox\Quarantine\C\Program Files\Eurobarre\eb.exe.vir [2007-1-24 103936]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456]
hpoddt01.exe.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-3-16 67128]
Windows Desktop Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"c:\\WINDOWS\\system32\\svchost.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Namo\\WebEditor 6 Trial\\bin\\WebEditor.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\HomePlayer\\HomePlayer.exe"=
"c:\\Program Files\\HomePlayer\\VLC\\vlc.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4672:UDP"= 4672:UDP:eMule : UDP Entrant
"4662:TCP"= 4662:TCP:eMule : TCP Entrant

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [09/05/2009 10:31 108289]
S3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys --> c:\windows\system32\drivers\av5flt.sys [?]
S3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\system32\drivers\fbxusb32.sys [20/10/2004 15:23 21344]
.
Contenu du dossier 'Tâches planifiées'

2006-03-25 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8135439415.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 23:52]

2009-05-09 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-31 20:37]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = localhost
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: localhost
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} - hxxp://www.pixaco.fr/static/download/pixacodndupload.cab
DPF: {34AD0F96-3109-4D6F-82C7-7F1EE9BBEC5E} - hxxp://www.voicefive.com/exe/WATSetup.cab
DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
DPF: {DAF94F73-2AA6-44D8-A562-A28831820D34} - hxxp://www.pixum.fr/apps/EasyUploadX.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-09 15:10
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...


**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,a7,3c,b6,ec,49,
50,cf,5b,e2,63,26,f1,3f,c8,ff,68,41,78,54,6b,cb,25,73,5e,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:6a,9c,d6,61,af,45,84,18,c4,8a,60,e2,54,
09,51,41,6a,9c,d6,61,af,45,84,18,38,bb,d5,45,c2,68,70,5c,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,a3,11,d1,33,31,
f2,8f,e4,ff,7c,85,e0,43,d4,0e,fe,e7,38,ef,42,95,63,97,c3,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:86,8c,21,01,be,91,eb,e7,6b,35,2a,6a,a9,
4a,6b,72,86,8c,21,01,be,91,eb,e7,ba,33,a5,03,1a,41,48,16,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:f5,1d,4d,73,a8,13,5c,05,bf,eb,52,72,d9,
34,31,16,f5,1d,4d,73,a8,13,5c,05,1d,83,69,e8,ac,fb,66,38,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,d1,3d,9d,85,4a,
5b,1d,94,df,20,58,62,78,6b,cf,c8,4e,9e,52,48,ec,c0,a7,1c,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,70,e8,0d,5e,af,
13,7c,10,fb,a7,78,e6,12,2f,9a,ea,e2,c6,0d,83,3a,45,f8,77,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,66,2f,d4,91,f6,
2b,69,64,01,3a,48,fc,e8,04,4a,f1,82,29,83,2f,7d,40,7b,d2,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,5b,b6,2b,5e,f4,
55,8e,f8,f6,0f,4e,58,98,5b,89,c9,25,df,65,00,2e,63,32,b1,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:3d,ce,ea,26,2d,45,aa,78,56,fd,71,d2,af,
63,a5,f2,3d,ce,ea,26,2d,45,aa,78,37,32,9f,41,5c,1f,78,77,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,23,78,f4,93,ee,
43,20,d9,2a,b7,cc,b5,b9,7f,41,e7,8b,2c,6d,d9,31,77,a6,50,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:05,73,21,dd,54,d8,4a,c5,09,df,9c,99,b0,
a2,0a,3e,6c,43,2d,1e,aa,22,2f,9c,92,e1,1e,0f,d6,06,73,36,6c,43,2d,1e,aa,22,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(1228)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\searchindexer.exe
c:\program files\Logitech\Video\FxSvr2.exe
c:\program files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
c:\program files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
c:\windows\system32\searchprotocolhost.exe
c:\windows\system32\searchfilterhost.exe
c:\program files\Java\jre1.6.0_07\bin\jucheck.exe
.
**************************************************************************
.
Heure de fin: 2009-05-09 15:15 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-05-09 13:14
ComboFix2.txt 2009-05-09 12:48

Avant-CF: 3 076 919 296 octets libres
Après-CF: 3 066 896 384 octets libres

253 --- E O F --- 2009-04-29 21:02

il y avait bien des fichiers malvoyants...
voici le rapport :

Malwarebytes' Anti-Malware 1.36
Version de la base de données: 2099
Windows 5.1.2600 Service Pack 3

09/05/2009 15:46:32
mbam-log-2009-05-09 (15-46-32).txt

Type de recherche: Examen rapide
Eléments examinés: 78517
Temps écoulé: 4 minute(s), 40 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 7
Fichier(s) infecté(s): 40

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bitdownload (Trojan.Lop) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Lang (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\log (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Media (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Skin (Trojan.Lop) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\BitDownload\asoc.ini (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload.exe (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload.ico (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\EndProg.exe (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\iphox_downloader_p.exe (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\player.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\RegExt.exe (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\rtl70.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\set.ini (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\tcpip_patcher.sys (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Uninstall.exe (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Units.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\units.elf (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\vcl70.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\vclshlctrls70.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\vclx70.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\VersionChecker.exe (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\WinSkinD7R.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Lang\English.lng (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Lang\Russian.lng (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\log\BitDownload.log (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Media\FileComplete.wav (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\CDBurningPlugin.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\CDRipper.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\ClosestSearch.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\Notification.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\PeerInfoSearch.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\Search.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\VirtualTracker.bpl (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip\akrip32.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip\cdcache.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip\lame_enc.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip\Rip.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip\vorb_enc.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\plug-ins\rip\xtenc.dll (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Skin\Aqua.skn (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Skin\Default.skn (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Skin\Desert.skn (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Skin\Forest.skn (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\Skin\Sea.skn (Trojan.Lop) -> Quarantined and deleted successfully.

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 04/14/04 23:56:12 Ver: 08.00.09
USER : Alex ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Not Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:2 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:160 Go (Free:152 Go)
M:\ (Local Disk) - NTFS - Total:111 Go (Free:10 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 09/05/2009|16:06 )

--------------------\\ Listing des dossiers dans APPLIC~1

[28/10/2008|19:01] C:\DOCUME~1\Alex\APPLIC~1\Adobe
[22/01/2007|16:57] C:\DOCUME~1\Alex\APPLIC~1\AdobeUM
[24/12/2005|09:39] C:\DOCUME~1\Alex\APPLIC~1\Ahead
[14/01/2006|14:17] C:\DOCUME~1\Alex\APPLIC~1\ArcSoft
[18/04/2009|22:36] C:\DOCUME~1\Alex\APPLIC~1\Azureus
[07/09/2008|17:56] C:\DOCUME~1\Alex\APPLIC~1\BitDownload
[05/06/2008|19:11] C:\DOCUME~1\Alex\APPLIC~1\DivX
[09/05/2009|15:58] C:\DOCUME~1\Alex\APPLIC~1\DNA
[28/02/2009|19:03] C:\DOCUME~1\Alex\APPLIC~1\dvdcss
[08/01/2006|13:17] C:\DOCUME~1\Alex\APPLIC~1\FotoWire
[26/06/2006|22:38] C:\DOCUME~1\Alex\APPLIC~1\Google
[24/12/2005|16:03] C:\DOCUME~1\Alex\APPLIC~1\Help
[24/12/2005|17:51] C:\DOCUME~1\Alex\APPLIC~1\Hewlett-Packard
[12/10/2007|18:57] C:\DOCUME~1\Alex\APPLIC~1\Identities
[01/06/2008|10:56] C:\DOCUME~1\Alex\APPLIC~1\InstallShield
[01/04/2006|13:10] C:\DOCUME~1\Alex\APPLIC~1\Lavasoft
[01/06/2008|11:27] C:\DOCUME~1\Alex\APPLIC~1\LG Electronics
[16/11/2008|19:17] C:\DOCUME~1\Alex\APPLIC~1\LimeWire
[29/12/2005|20:14] C:\DOCUME~1\Alex\APPLIC~1\Macromedia
[09/05/2009|15:38] C:\DOCUME~1\Alex\APPLIC~1\Malwarebytes
[24/03/2007|14:38] C:\DOCUME~1\Alex\APPLIC~1\Media Player Classic
[08/02/2009|10:44] C:\DOCUME~1\Alex\APPLIC~1\Microsoft
[05/06/2007|22:07] C:\DOCUME~1\Alex\APPLIC~1\Mozilla
[26/07/2006|16:33] C:\DOCUME~1\Alex\APPLIC~1\MSN6
[14/01/2006|22:34] C:\DOCUME~1\Alex\APPLIC~1\Nikon
[05/06/2007|22:07] C:\DOCUME~1\Alex\APPLIC~1\Nvu
[24/01/2009|19:26] C:\DOCUME~1\Alex\APPLIC~1\PIFreePC
[13/12/2006|15:04] C:\DOCUME~1\Alex\APPLIC~1\PlayFirst
[28/01/2006|12:19] C:\DOCUME~1\Alex\APPLIC~1\Real
[15/01/2008|18:30] C:\DOCUME~1\Alex\APPLIC~1\Samsung
[20/03/2007|15:38] C:\DOCUME~1\Alex\APPLIC~1\Screenshot Sender
[12/12/2006|17:23] C:\DOCUME~1\Alex\APPLIC~1\Snapfish
[24/12/2005|11:39] C:\DOCUME~1\Alex\APPLIC~1\Sun
[20/09/2008|10:02] C:\DOCUME~1\Alex\APPLIC~1\vlc
[10/07/2008|18:50] C:\DOCUME~1\Alex\APPLIC~1\Vso
[30/09/2007|10:19] C:\DOCUME~1\Alex\APPLIC~1\Windows Desktop Search
[29/09/2007|11:57] C:\DOCUME~1\Alex\APPLIC~1\Windows Live Writer
[12/10/2007|18:57] C:\DOCUME~1\Alex\APPLIC~1\Zylom

[10/08/2008|08:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[09/05/2009|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[02/01/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[26/10/2008|16:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[27/03/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[24/12/2005|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\element5
[25/01/2009|22:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[09/05/2009|10:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[24/03/2007|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[09/05/2009|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[03/01/2007|14:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[18/12/2008|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[26/07/2006|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[26/09/2006|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[27/09/2006|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle Studio
[13/12/2006|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[14/01/2006|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[01/04/2006|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[08/07/2008|21:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[17/12/2005|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/10/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[08/07/2008|21:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[24/12/2005|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[17/10/2007|17:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[17/12/2005|14:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[29/09/2007|10:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[29/09/2007|10:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[29/09/2007|10:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[09/05/2009 15:48][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[25/03/2006 18:36][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1135439415.job
[09/05/2009 15:48][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 14:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[23/08/2008|09:23] C:\Program Files\Adobe
[01/05/2008|13:03] C:\Program Files\Alwil Software
[14/01/2008|18:28] C:\Program Files\ArcSoft
[09/05/2009|10:31] C:\Program Files\Avira
[14/01/2008|18:03] C:\Program Files\Azureus
[11/01/2009|16:03] C:\Program Files\Circle Developement
[12/07/2008|15:42] C:\Program Files\DivX
[09/05/2009|15:48] C:\Program Files\DNA
[23/12/2005|09:22] C:\Program Files\DVD Shrink
[02/05/2009|16:49] C:\Program Files\eMule
[09/05/2009|15:07] C:\Program Files\Fichiers communs
[20/09/2008|10:34] C:\Program Files\Freeplayer
[26/01/2009|00:21] C:\Program Files\Google
[23/09/2007|08:39] C:\Program Files\GpsPrevent
[20/05/2006|12:25] C:\Program Files\Heredis 8
[14/01/2008|18:03] C:\Program Files\Hewlett-Packard
[24/01/2009|19:15] C:\Program Files\HomePlayer
[07/01/2006|19:05] C:\Program Files\HP
[14/12/2008|14:35] C:\Program Files\InstallShield Installation Information
[17/04/2009|22:32] C:\Program Files\Internet Explorer
[30/08/2008|15:05] C:\Program Files\Java
[24/03/2007|12:58] C:\Program Files\Kodak
[01/04/2006|13:07] C:\Program Files\Lavasoft
[01/06/2008|10:58] C:\Program Files\LG Electronics
[01/06/2008|10:57] C:\Program Files\LG PC Suite 2
[17/01/2009|16:36] C:\Program Files\LimeWire
[08/01/2006|13:17] C:\Program Files\Logitech
[24/03/2007|14:37] C:\Program Files\Media Player Classic
[25/09/2008|20:19] C:\Program Files\Messenger
[26/04/2009|15:30] C:\Program Files\Messenger Plus! Live
[14/01/2006|22:50] C:\Program Files\Micro Application
[18/12/2008|22:57] C:\Program Files\Microsoft
[17/12/2005|14:08] C:\Program Files\microsoft frontpage
[17/12/2005|15:11] C:\Program Files\Microsoft Office
[27/02/2009|11:36] C:\Program Files\Microsoft Silverlight
[29/09/2007|10:07] C:\Program Files\Microsoft SQL Server Compact Edition
[05/10/2007|22:33] C:\Program Files\Microsoft Works
[17/12/2005|15:12] C:\Program Files\Microsoft.NET
[26/10/2008|16:12] C:\Program Files\Mindscape
[25/09/2008|19:25] C:\Program Files\Movie Maker
[26/07/2006|16:30] C:\Program Files\MSN
[17/12/2005|14:04] C:\Program Files\MSN Gaming Zone
[30/04/2008|15:50] C:\Program Files\MSN Messenger
[19/11/2006|23:03] C:\Program Files\MSXML 4.0
[15/06/2007|19:14] C:\Program Files\Namo
[08/05/2009|11:45] C:\Program Files\NDSROM Player
[23/12/2005|19:43] C:\Program Files\Nero
[25/09/2008|19:23] C:\Program Files\NetMeeting
[13/05/2007|11:19] C:\Program Files\Nikon
[26/10/2008|14:45] C:\Program Files\Nvu
[25/09/2008|20:19] C:\Program Files\Outlook Express
[12/03/2006|13:28] C:\Program Files\PhotoFiltre
[05/10/2008|22:51] C:\Program Files\Picasa2
[24/03/2007|14:36] C:\Program Files\QuickTime
[24/03/2007|14:37] C:\Program Files\QuickTime Alternative
[28/01/2006|12:15] C:\Program Files\Real
[20/09/2007|16:12] C:\Program Files\ReflexiveArcade
[14/01/2008|16:48] C:\Program Files\Samsung
[17/12/2005|14:06] C:\Program Files\Services en ligne
[01/04/2006|13:53] C:\Program Files\Spybot - Search & Destroy
[30/08/2008|15:05] C:\Program Files\Sun
[17/12/2005|14:53] C:\Program Files\Uninstall Information
[25/10/2006|14:25] C:\Program Files\VideoLAN
[14/03/2009|12:12] C:\Program Files\Vuze
[14/02/2009|18:44] C:\Program Files\Winamp
[29/09/2007|10:06] C:\Program Files\Windows Desktop Search
[01/01/2009|13:58] C:\Program Files\Windows Live
[18/12/2008|22:56] C:\Program Files\Windows Live SkyDrive
[17/10/2007|22:53] C:\Program Files\Windows Live Toolbar
[24/12/2006|12:09] C:\Program Files\Windows Media Connect 2
[25/09/2008|19:23] C:\Program Files\Windows Media Player
[25/09/2008|19:23] C:\Program Files\Windows NT
[17/12/2005|14:07] C:\Program Files\WindowsUpdate
[25/12/2005|00:10] C:\Program Files\winOKE Ltd
[11/02/2006|12:07] C:\Program Files\WinRAR
[17/12/2005|14:08] C:\Program Files\xerox
[12/10/2007|19:03] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[10/08/2008|08:53] C:\Program Files\Fichiers communs\Adobe
[23/12/2005|19:43] C:\Program Files\Fichiers communs\Ahead
[17/12/2005|15:11] C:\Program Files\Fichiers communs\DESIGNER
[06/10/2006|22:37] C:\Program Files\Fichiers communs\element5 Shared
[08/01/2006|13:17] C:\Program Files\Fichiers communs\FotoWire
[24/12/2005|17:46] C:\Program Files\Fichiers communs\Hewlett-Packard
[26/09/2006|18:00] C:\Program Files\Fichiers communs\InstallShield
[24/12/2005|11:37] C:\Program Files\Fichiers communs\Java
[08/01/2006|13:15] C:\Program Files\Fichiers communs\Logitech
[09/05/2009|10:28] C:\Program Files\Fichiers communs\Microsoft Shared
[17/12/2005|14:06] C:\Program Files\Fichiers communs\MSSoap
[13/05/2007|11:18] C:\Program Files\Fichiers communs\Nikon
[17/12/2005|14:34] C:\Program Files\Fichiers communs\ODBC
[30/04/2008|18:35] C:\Program Files\Fichiers communs\Panda Software
[12/10/2007|20:00] C:\Program Files\Fichiers communs\Real
[17/12/2005|14:06] C:\Program Files\Fichiers communs\Services
[17/12/2005|14:34] C:\Program Files\Fichiers communs\SpeechEngines
[20/05/2008|20:46] C:\Program Files\Fichiers communs\Symantec Shared
[25/09/2008|20:19] C:\Program Files\Fichiers communs\System
[25/12/2005|12:47] C:\Program Files\Fichiers communs\Vbox
[18/12/2008|22:48] C:\Program Files\Fichiers communs\Windows Live
[13/11/2007|12:50] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[12/10/2007|20:00] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 49 Processes )

iexplore.exe ~ [PID:4016]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Alex\APPLIC~1\Bitdownload
C:\DOCUME~1\Alex\APPLIC~1\BitDownload
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\BitDownload.ini
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\PlayLists
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\search.ini
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\SPK.bin
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\Storage
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\Torrents
C:\DOCUME~1\Alex\APPLIC~1\BitDownload\URLs.ini
C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload
C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload\BitDownload Downloads.lnk
C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload\BitDownload Uninstall.lnk
C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload\BitDownload.lnk
C:\Program Files\Circle Developement
C:\DOCUME~1\Alex\Cookies\alex@advertising[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-09 16:07:53
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 720

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility
C:\DOCUME~1\Alex\Mes documents\alexia\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\Crack
C:\DOCUME~1\Alex\Mes documents\alexia\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\Crack\crack.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\DivX Create bunble 6.0.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\DivXPlay.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)\file_id.diz
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)\keygen.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)\virility.nfo
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE\file_id.diz
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE\HERiTAGE.nfo
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE\htgrac10.zip
C:\DOCUME~1\Alex\Mes documents\alexia\Winamp.v5.08e-Pro\keygen.exe


[F:4][D:2]-> C:\DOCUME~1\Alex\LOCALS~1\Temp
[F:129][D:0]-> C:\DOCUME~1\Alex\Cookies
[F:1836][D:4]-> C:\DOCUME~1\Alex\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 09/05/2009|16:12 - Option : [1]

--------------------\\ Fin du rapport a 16:12:38

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 04/14/04 23:56:12 Ver: 08.00.09
USER : Alex ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.26 (Not Activated)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:2 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:160 Go (Free:152 Go)
M:\ (Local Disk) - NTFS - Total:111 Go (Free:10 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 09/05/2009|16:24 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\BitDownload.ini
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\PlayLists
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\search.ini
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\SPK.bin
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\Storage
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\Torrents
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\BitDownload\URLs.ini
Supprime! - C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload\BitDownload Downloads.lnk
Supprime! - C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload\BitDownload Uninstall.lnk
Supprime! - C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload\BitDownload.lnk
Supprime! - C:\DOCUME~1\Alex\APPLIC~1\Bitdownload
Supprime! - C:\DOCUME~1\Alex\MENUDM~1\PROGRA~1\BitDownload
Supprime! - C:\Program Files\Circle Developement

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[28/10/2008|19:01] C:\DOCUME~1\Alex\APPLIC~1\Adobe
[22/01/2007|16:57] C:\DOCUME~1\Alex\APPLIC~1\AdobeUM
[24/12/2005|09:39] C:\DOCUME~1\Alex\APPLIC~1\Ahead
[14/01/2006|14:17] C:\DOCUME~1\Alex\APPLIC~1\ArcSoft
[18/04/2009|22:36] C:\DOCUME~1\Alex\APPLIC~1\Azureus
[05/06/2008|19:11] C:\DOCUME~1\Alex\APPLIC~1\DivX
[09/05/2009|16:18] C:\DOCUME~1\Alex\APPLIC~1\DNA
[28/02/2009|19:03] C:\DOCUME~1\Alex\APPLIC~1\dvdcss
[08/01/2006|13:17] C:\DOCUME~1\Alex\APPLIC~1\FotoWire
[26/06/2006|22:38] C:\DOCUME~1\Alex\APPLIC~1\Google
[24/12/2005|16:03] C:\DOCUME~1\Alex\APPLIC~1\Help
[24/12/2005|17:51] C:\DOCUME~1\Alex\APPLIC~1\Hewlett-Packard
[12/10/2007|18:57] C:\DOCUME~1\Alex\APPLIC~1\Identities
[01/06/2008|10:56] C:\DOCUME~1\Alex\APPLIC~1\InstallShield
[01/04/2006|13:10] C:\DOCUME~1\Alex\APPLIC~1\Lavasoft
[01/06/2008|11:27] C:\DOCUME~1\Alex\APPLIC~1\LG Electronics
[16/11/2008|19:17] C:\DOCUME~1\Alex\APPLIC~1\LimeWire
[29/12/2005|20:14] C:\DOCUME~1\Alex\APPLIC~1\Macromedia
[09/05/2009|15:38] C:\DOCUME~1\Alex\APPLIC~1\Malwarebytes
[24/03/2007|14:38] C:\DOCUME~1\Alex\APPLIC~1\Media Player Classic
[08/02/2009|10:44] C:\DOCUME~1\Alex\APPLIC~1\Microsoft
[05/06/2007|22:07] C:\DOCUME~1\Alex\APPLIC~1\Mozilla
[26/07/2006|16:33] C:\DOCUME~1\Alex\APPLIC~1\MSN6
[14/01/2006|22:34] C:\DOCUME~1\Alex\APPLIC~1\Nikon
[05/06/2007|22:07] C:\DOCUME~1\Alex\APPLIC~1\Nvu
[24/01/2009|19:26] C:\DOCUME~1\Alex\APPLIC~1\PIFreePC
[13/12/2006|15:04] C:\DOCUME~1\Alex\APPLIC~1\PlayFirst
[28/01/2006|12:19] C:\DOCUME~1\Alex\APPLIC~1\Real
[15/01/2008|18:30] C:\DOCUME~1\Alex\APPLIC~1\Samsung
[20/03/2007|15:38] C:\DOCUME~1\Alex\APPLIC~1\Screenshot Sender
[12/12/2006|17:23] C:\DOCUME~1\Alex\APPLIC~1\Snapfish
[24/12/2005|11:39] C:\DOCUME~1\Alex\APPLIC~1\Sun
[20/09/2008|10:02] C:\DOCUME~1\Alex\APPLIC~1\vlc
[10/07/2008|18:50] C:\DOCUME~1\Alex\APPLIC~1\Vso
[30/09/2007|10:19] C:\DOCUME~1\Alex\APPLIC~1\Windows Desktop Search
[29/09/2007|11:57] C:\DOCUME~1\Alex\APPLIC~1\Windows Live Writer
[12/10/2007|18:57] C:\DOCUME~1\Alex\APPLIC~1\Zylom

[10/08/2008|08:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[09/05/2009|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[02/01/2009|23:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[26/10/2008|16:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[27/03/2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[24/12/2005|16:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\element5
[25/01/2009|22:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[09/05/2009|10:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[24/03/2007|13:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak
[09/05/2009|15:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[03/01/2007|14:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[18/12/2008|22:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[26/07/2006|16:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[26/09/2006|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
[27/09/2006|09:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle Studio
[13/12/2006|15:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
[14/01/2006|14:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[01/04/2006|15:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[08/07/2008|21:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[17/12/2005|15:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[13/10/2007|13:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[08/07/2008|21:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
[24/12/2005|14:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

[17/10/2007|17:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[17/12/2005|14:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[29/09/2007|10:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[29/09/2007|10:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Identities
[29/09/2007|10:07] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[09/05/2009 15:48][--a------] C:\WINDOWS\tasks\Google Software Updater.job
[25/03/2006 18:36][--a------] C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1135439415.job
[09/05/2009 15:48][--ah-----] C:\WINDOWS\tasks\SA.DAT
[30/08/2002 14:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[23/08/2008|09:23] C:\Program Files\Adobe
[01/05/2008|13:03] C:\Program Files\Alwil Software
[14/01/2008|18:28] C:\Program Files\ArcSoft
[09/05/2009|10:31] C:\Program Files\Avira
[14/01/2008|18:03] C:\Program Files\Azureus
[12/07/2008|15:42] C:\Program Files\DivX
[09/05/2009|15:48] C:\Program Files\DNA
[23/12/2005|09:22] C:\Program Files\DVD Shrink
[02/05/2009|16:49] C:\Program Files\eMule
[09/05/2009|15:07] C:\Program Files\Fichiers communs
[20/09/2008|10:34] C:\Program Files\Freeplayer
[26/01/2009|00:21] C:\Program Files\Google
[23/09/2007|08:39] C:\Program Files\GpsPrevent
[20/05/2006|12:25] C:\Program Files\Heredis 8
[14/01/2008|18:03] C:\Program Files\Hewlett-Packard
[24/01/2009|19:15] C:\Program Files\HomePlayer
[07/01/2006|19:05] C:\Program Files\HP
[14/12/2008|14:35] C:\Program Files\InstallShield Installation Information
[17/04/2009|22:32] C:\Program Files\Internet Explorer
[30/08/2008|15:05] C:\Program Files\Java
[24/03/2007|12:58] C:\Program Files\Kodak
[01/04/2006|13:07] C:\Program Files\Lavasoft
[01/06/2008|10:58] C:\Program Files\LG Electronics
[01/06/2008|10:57] C:\Program Files\LG PC Suite 2
[17/01/2009|16:36] C:\Program Files\LimeWire
[08/01/2006|13:17] C:\Program Files\Logitech
[24/03/2007|14:37] C:\Program Files\Media Player Classic
[25/09/2008|20:19] C:\Program Files\Messenger
[26/04/2009|15:30] C:\Program Files\Messenger Plus! Live
[14/01/2006|22:50] C:\Program Files\Micro Application
[18/12/2008|22:57] C:\Program Files\Microsoft
[17/12/2005|14:08] C:\Program Files\microsoft frontpage
[17/12/2005|15:11] C:\Program Files\Microsoft Office
[27/02/2009|11:36] C:\Program Files\Microsoft Silverlight
[29/09/2007|10:07] C:\Program Files\Microsoft SQL Server Compact Edition
[05/10/2007|22:33] C:\Program Files\Microsoft Works
[17/12/2005|15:12] C:\Program Files\Microsoft.NET
[26/10/2008|16:12] C:\Program Files\Mindscape
[25/09/2008|19:25] C:\Program Files\Movie Maker
[26/07/2006|16:30] C:\Program Files\MSN
[17/12/2005|14:04] C:\Program Files\MSN Gaming Zone
[30/04/2008|15:50] C:\Program Files\MSN Messenger
[19/11/2006|23:03] C:\Program Files\MSXML 4.0
[15/06/2007|19:14] C:\Program Files\Namo
[08/05/2009|11:45] C:\Program Files\NDSROM Player
[23/12/2005|19:43] C:\Program Files\Nero
[25/09/2008|19:23] C:\Program Files\NetMeeting
[13/05/2007|11:19] C:\Program Files\Nikon
[26/10/2008|14:45] C:\Program Files\Nvu
[25/09/2008|20:19] C:\Program Files\Outlook Express
[12/03/2006|13:28] C:\Program Files\PhotoFiltre
[05/10/2008|22:51] C:\Program Files\Picasa2
[24/03/2007|14:36] C:\Program Files\QuickTime
[24/03/2007|14:37] C:\Program Files\QuickTime Alternative
[28/01/2006|12:15] C:\Program Files\Real
[20/09/2007|16:12] C:\Program Files\ReflexiveArcade
[14/01/2008|16:48] C:\Program Files\Samsung
[17/12/2005|14:06] C:\Program Files\Services en ligne
[01/04/2006|13:53] C:\Program Files\Spybot - Search & Destroy
[30/08/2008|15:05] C:\Program Files\Sun
[17/12/2005|14:53] C:\Program Files\Uninstall Information
[25/10/2006|14:25] C:\Program Files\VideoLAN
[14/03/2009|12:12] C:\Program Files\Vuze
[14/02/2009|18:44] C:\Program Files\Winamp
[29/09/2007|10:06] C:\Program Files\Windows Desktop Search
[01/01/2009|13:58] C:\Program Files\Windows Live
[18/12/2008|22:56] C:\Program Files\Windows Live SkyDrive
[17/10/2007|22:53] C:\Program Files\Windows Live Toolbar
[24/12/2006|12:09] C:\Program Files\Windows Media Connect 2
[25/09/2008|19:23] C:\Program Files\Windows Media Player
[25/09/2008|19:23] C:\Program Files\Windows NT
[17/12/2005|14:07] C:\Program Files\WindowsUpdate
[25/12/2005|00:10] C:\Program Files\winOKE Ltd
[11/02/2006|12:07] C:\Program Files\WinRAR
[17/12/2005|14:08] C:\Program Files\xerox
[12/10/2007|19:03] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[10/08/2008|08:53] C:\Program Files\Fichiers communs\Adobe
[23/12/2005|19:43] C:\Program Files\Fichiers communs\Ahead
[17/12/2005|15:11] C:\Program Files\Fichiers communs\DESIGNER
[06/10/2006|22:37] C:\Program Files\Fichiers communs\element5 Shared
[08/01/2006|13:17] C:\Program Files\Fichiers communs\FotoWire
[24/12/2005|17:46] C:\Program Files\Fichiers communs\Hewlett-Packard
[26/09/2006|18:00] C:\Program Files\Fichiers communs\InstallShield
[24/12/2005|11:37] C:\Program Files\Fichiers communs\Java
[08/01/2006|13:15] C:\Program Files\Fichiers communs\Logitech
[09/05/2009|10:28] C:\Program Files\Fichiers communs\Microsoft Shared
[17/12/2005|14:06] C:\Program Files\Fichiers communs\MSSoap
[13/05/2007|11:18] C:\Program Files\Fichiers communs\Nikon
[17/12/2005|14:34] C:\Program Files\Fichiers communs\ODBC
[30/04/2008|18:35] C:\Program Files\Fichiers communs\Panda Software
[12/10/2007|20:00] C:\Program Files\Fichiers communs\Real
[17/12/2005|14:06] C:\Program Files\Fichiers communs\Services
[17/12/2005|14:34] C:\Program Files\Fichiers communs\SpeechEngines
[20/05/2008|20:46] C:\Program Files\Fichiers communs\Symantec Shared
[25/09/2008|20:19] C:\Program Files\Fichiers communs\System
[25/12/2005|12:47] C:\Program Files\Fichiers communs\Vbox
[18/12/2008|22:48] C:\Program Files\Fichiers communs\Windows Live
[13/11/2007|12:50] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[12/10/2007|20:00] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 46 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Alex\Cookies\alex@advertising[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-09 16:26:05
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 720

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility
C:\DOCUME~1\Alex\Mes documents\alexia\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\Crack
C:\DOCUME~1\Alex\Mes documents\alexia\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\dBPowerAmp_rel._10.1_with_PowerPack_rel._3\Crack\crack.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\DivX Create bunble 6.0.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\DivXPlay.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)\file_id.diz
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)\keygen.exe
C:\DOCUME~1\Alex\Mes documents\alexia\Divx Create Bundle v6.0 +Keygen Only-Virility\Divx.Create.Bundle.v6.0.Fr+Keygen.Only-Virility_By.Scilli.Team(Din@.&.V@ssili)\virility.nfo
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE\file_id.diz
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE\HERiTAGE.nfo
C:\DOCUME~1\Alex\Mes documents\alexia\REAL AUDIO CONVERTER\Real.Audio.Converter.v1.0.Incl.Keygen-HERiTAGE\htgrac10.zip
C:\DOCUME~1\Alex\Mes documents\alexia\Winamp.v5.08e-Pro\keygen.exe


[F:1][D:2]-> C:\DOCUME~1\Alex\LOCALS~1\Temp
[F:129][D:0]-> C:\DOCUME~1\Alex\Cookies
[F:2061][D:4]-> C:\DOCUME~1\Alex\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 09/05/2009|16:12 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 09/05/2009|16:27 - Option : [2]

--------------------\\ Fin du rapport a 16:27:34

Logfile of random's system information tool 1.06 (written by random/random)
Run by Alex at 2009-05-09 16:34:15
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 3 GB (10%) free of 30 GB
Total RAM: 1023 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:34:27, on 09/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Alex\Local Settings\Temporary Internet Files\Content.IE5\UAT6E40L\RSIT[1].exe
C:\Program Files\trend micro\Alex.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Eurobarre.lnk = C:\Qoobox\Quarantine\C\Program Files\Eurobarre\eb.exe.vir
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} - http://www.pixaco.fr/static/downlo [...] upload.cab
O16 - DPF: {34AD0F96-3109-4D6F-82C7-7F1EE9BBEC5E} (Setup Class) - http://www.voicefive.com/exe/WATSetup.cab
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/33.02/uploader2.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.comboost.com/Drivers/ImageUploader5.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/ [...] DP-1.1.cab
O16 - DPF: {DAF94F73-2AA6-44D8-A562-A28831820D34} (Pixum EasyUploadX Control) - http://www.pixum.fr/apps/EasyUploadX.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.photoservice.com/telech [...] oader4.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 8768 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1135439415.job
C:\WINDOWS\tasks\Google Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-04-29 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-27 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-29 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-04-29 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"AlcxMonitor"=C:\WINDOWS\ALCXMNTR.EXE [2004-09-07 57344]
"KBD"=C:\HP\KBD\KBD.EXE [2005-02-02 61440]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2004-05-21 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2004-06-01 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2004-06-01 217088]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-06-30 282624]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2007-05-15 35328]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2007-10-12 185632]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe [2005-09-03 94208]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2004-06-01 196608]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-03-16 67128]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-01-02 342848]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-06-17 68856]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
hp psc 1000 series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\Documents and Settings\Alex\Menu Démarrer\Programmes\Démarrage
Eurobarre.lnk - C:\Qoobox\Quarantine\C\Program Files\Eurobarre\eb.exe.vir

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Freeplayer\vlc\vlc.exe"="C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player"
"C:\WINDOWS\system32\svchost.exe"="C:\WINDOWS\system32\svchost.exe:*:Enabled:Microsoft Update"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Namo\WebEditor 6 Trial\bin\WebEditor.exe"="C:\Program Files\Namo\WebEditor 6 Trial\bin\WebEditor.exe:*:Enabled:Namo WebEditor 6"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:EnabledNA"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus"
"C:\Program Files\HomePlayer\HomePlayer.exe"="C:\Program Files\HomePlayer\HomePlayer.exe:*:Enabled:HomePlayer"
"C:\Program Files\HomePlayer\VLC\vlc.exe"="C:\Program Files\HomePlayer\VLC\vlc.exe:*:Enabled:VLC HomePlayer"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-05-09 16:34:16 ----D---- C:\Program Files\trend micro
2009-05-09 16:34:15 ----D---- C:\rsit
2009-05-09 16:05:59 ----D---- C:\ComboFix
2009-05-09 16:05:58 ----A---- C:\WINDOWS\system32\CF17608.exe
2009-05-09 16:04:24 ----A---- C:\lopR.txt
2009-05-09 16:03:52 ----D---- C:\Lop SD
2009-05-09 15:38:48 ----D---- C:\Documents and Settings\Alex\Application Data\Malwarebytes
2009-05-09 15:38:37 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-05-09 15:15:27 ----D---- C:\WINDOWS\temp
2009-05-09 15:15:26 ----A---- C:\ComboFix.txt
2009-05-09 14:36:03 ----A---- C:\Boot.bak
2009-05-09 14:35:55 ----RASHD---- C:\cmdcons
2009-05-09 14:32:51 ----A---- C:\WINDOWS\zip.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\vFind.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\SWSC.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\SWREG.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\sed.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\NIRCMD.exe
2009-05-09 14:32:51 ----A---- C:\WINDOWS\grep.exe
2009-05-09 14:32:36 ----D---- C:\WINDOWS\ERDNT
2009-05-09 13:43:55 ----D---- C:\Qoobox
2009-05-09 12:24:50 ----A---- C:\VundoFix.txt
2009-05-09 10:31:02 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-05-09 10:31:01 ----D---- C:\Program Files\Avira
2009-05-02 09:09:56 ----D---- C:\Program Files\NDSROM Player
2009-05-01 20:57:29 ----HD---- C:\LG3G
2009-05-01 20:57:08 ----D---- C:\lgupload
2009-04-29 23:01:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-04-17 22:33:05 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-04-17 22:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-04-17 22:30:03 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-04-17 22:29:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-04-17 22:29:34 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-04-17 22:27:36 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

======List of files/folders modified in the last 1 months======

2009-05-09 16:34:16 ----D---- C:\Program Files
2009-05-09 16:28:44 ----D---- C:\Documents and Settings\Alex\Application Data\DNA
2009-05-09 16:06:02 ----D---- C:\WINDOWS\system32
2009-05-09 16:06:01 ----D---- C:\WINDOWS\system32\CatRoot2
2009-05-09 15:48:47 ----SD---- C:\WINDOWS\Tasks
2009-05-09 15:48:40 ----D---- C:\Program Files\DNA
2009-05-09 15:47:49 ----D---- C:\WINDOWS\system32\drivers
2009-05-09 15:47:04 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-05-09 15:15:27 ----D---- C:\WINDOWS
2009-05-09 15:10:28 ----A---- C:\WINDOWS\system.ini
2009-05-09 15:07:43 ----D---- C:\WINDOWS\AppPatch
2009-05-09 15:07:38 ----D---- C:\Program Files\Fichiers communs
2009-05-09 14:40:54 ----D---- C:\WINDOWS\system32\config
2009-05-09 14:36:03 ----RASH---- C:\boot.ini
2009-05-09 13:43:48 ----D---- C:\WINDOWS\Prefetch
2009-05-09 13:16:38 ----AC---- C:\WINDOWS\ntbtlog.txt
2009-05-09 10:45:57 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-05-09 10:31:30 ----HD---- C:\WINDOWS\inf
2009-05-09 10:29:00 ----SHD---- C:\WINDOWS\Installer
2009-05-09 10:28:56 ----D---- C:\WINDOWS\WinSxS
2009-05-09 10:28:53 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-09 09:29:51 ----A---- C:\WINDOWS\EntPack.ini
2009-05-08 19:55:25 ----A---- C:\WINDOWS\TemplateWizard.INI
2009-05-04 09:17:53 ----A---- C:\WINDOWS\NeroDigital.ini
2009-05-02 16:49:42 ----D---- C:\Program Files\eMule
2009-04-29 23:01:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-04-29 21:26:11 ----HD---- C:\WINDOWS\$hf_mig$
2009-04-26 15:30:51 ----D---- C:\Program Files\Messenger Plus! Live
2009-04-18 22:36:53 ----D---- C:\Documents and Settings\Alex\Application Data\Azureus
2009-04-18 17:44:03 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-04-18 08:59:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-04-18 08:54:29 ----D---- C:\WINDOWS\system32\wbem
2009-04-17 22:33:09 ----A---- C:\WINDOWS\imsins.BAK
2009-04-17 22:32:34 ----D---- C:\WINDOWS\system32\fr-fr
2009-04-17 22:32:34 ----D---- C:\Program Files\Internet Explorer
2009-04-17 22:32:08 ----D---- C:\WINDOWS\ie7updates
2009-04-17 22:29:11 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-02-13 28376]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-08-30 12032]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-04 11868]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-10-01 2279424]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2004-08-04 1041536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2004-08-04 220032]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-05-27 19968]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
R3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2004-05-21 471232]
R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 StillCam;Pilote d'appareil photo numérique série; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-23 6912]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2004-08-04 685056]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 AvFlt;Antivirus Filter Driver; C:\WINDOWS\system32\drivers\av5flt.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Alex\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 fbxusb;Carte réseau virtuelle FreeBox USB; C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-03-09 51024]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-03-09 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-03-09 21456]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2003-07-16 43264]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2005-12-22 80272]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2005-12-22 10864]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2005-12-22 137884]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2003-12-22 104064]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-04-01 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-03-02 185089]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 WSearch;Recherche Windows; C:\WINDOWS\system32\SearchIndexer.exe [2007-02-05 300032]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-27 183280]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-03-09 65795]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

ça risque d'etre particulierement long, je n'en suis qu'à 3.7 %....

Le scan est "enfin" fini... par contre je n'ai pas le rapport de suite.
il me demande d'abord de choisir entre "tout réparer" ou "annuler" : il doit y avoir une 50aine d'objets touchés par un virus ou un programme indesirable.
Que dois-je chosir entre les 2 options ?

Ton PC va bien ?

Peux-tu me poster le rapport info situé dans C:\rsit ?

1/

• Désinstalle les programmes suivants :

- HijackThis
- J2SE Runtime Environment 5.0 Update 11
- Java 6 Update 3
- Java 6 Update 7

• Mets à jour Java.

• Mets à jour Adobe Reader.

• Télécharge ToolsCleaner2 sur ton Bureau.
• Double-clique sur ToolsCleaner2.exe pour le lancer.
• Clique sur Recherche et laisse le scan agir.
• Clique sur Suppression pour finaliser.
• Tu peux, si tu le souhaites, te servir des Options Facultatives.
• Clique sur Quitter pour obtenir le rapport.
• Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

2/

• Télécharge et installe CCleaner Slim.
• Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
• Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
• Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

3/

• Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

==Prévention==

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer.

Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


==Problème résolu ?==

Si tu estimes que ton problème est résolu :

---> Ajoute maintenant [Résolu] au titre. Pour cela :

• Clique, dans ton premier message, sur le bouton Editer .
• Rajoute la mention [Résolu] devant le titre.
• Clique ensuite sur Valider votre message.

Sois plus vigilant(e) sur Internet

Tu peux supprimer ToolsCleaner et ComboFix.