Virus ???

Bonjour,
voila mon problème, des que je vais sur google, il me mets les résultats des recherches, mais quand je clique dessus je tombe sur des pubs, genre j'ai gagner, et au démarrage de l'ordinateur une petite fenêtre avec le titre DDownloader et il y a ecrit, patch download du genre comme ça !
Voila un rapport HijackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:27:15, on 23/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
C:\Program Files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BitDefender\BitDefender 2009\uiscan.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\ereg.ini"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Systems Update] C:\Program Files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
O4 - HKCU\..\Policies\Explorer\Run: [Systems Update] C:\Program Files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FA445DF-5424-49C7-8D1D-FB3B31993405}: NameServer = 85.255.112.134,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\..\{5E8930E6-4F8B-4D4F-A523-055F2EFCB806}: NameServer = 85.255.112.134,85.255.112.10
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.134,85.255.112.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{4FA445DF-5424-49C7-8D1D-FB3B31993405}: NameServer = 85.255.112.134,85.255.112.10
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.112.134,85.255.112.10
O17 - HKLM\System\CS3\Services\Tcpip\..\{4FA445DF-5424-49C7-8D1D-FB3B31993405}: NameServer = 85.255.112.134,85.255.112.10
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.134,85.255.112.10
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Unknown owner - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Unknown owner - C:\Program Files\Avira\AntiVir Desktop\sched.exe (file missing)
O23 - Service: Avira AntiVir Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (file missing)
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Unknown owner - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (file missing)
O23 - Service: BitDefender Arrakis Server (Arrakis3) - Unknown owner - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

--
End of file - 7248 bytes

Merci de ta réponse rapide, voila le rapport :
ComboFix 09-05-22.07 - Rajmonda 23/05/2009 13:03.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.511.252 [GMT 2:00]
Lancé depuis: c:\documents and settings\Rajmonda\Bureau\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Rajmonda\Application Data\inst.exe
c:\program files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504
c:\program files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\desktop.ini
c:\program files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\mswinsck.ocx
c:\program files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
c:\program files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\system.ico
c:\program files\Fichiers communs\WinNT 32
c:\program files\Fichiers communs\WinNT 32\service.exe
c:\recycler\S-1-5-21-9187562931-7049173027-089569827-0048\svchost.exe
c:\windows\817778.EXE
c:\windows\833486.EXE
c:\windows\834840.EXE
c:\windows\system32\gxvxcinfbuasklyykahsiaqqlmnadisopltlp.dll
c:\windows\system32\gxvxcpuammeidqkpditqiqnlnhnhwqkiqjxfd.dll
c:\windows\system32\Pncrt.dll
c:\windows\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_GXVXCSERV.SYS
-------\Service_gxvxcserv.sys


((((((((((((((((((((((((((((( Fichiers créés du 2009-04-23 au 2009-05-23 ))))))))))))))))))))))))))))))))))))
.

2009-05-23 10:59 . 2008-04-13 16:57 32128 -c--a-w c:\windows\system32\dllcache\wceusbsh.sys
2009-05-23 10:59 . 2008-04-13 16:57 32128 ----a-w c:\windows\system32\drivers\wceusbsh.sys
2009-05-23 10:50 . 2009-05-23 10:50 81984 ----a-w c:\windows\system32\bdod.bin
2009-05-23 10:27 . 2009-05-23 10:27 -------- d-----w c:\program files\Trend Micro
2009-05-23 10:14 . 2009-05-23 10:14 -------- d-----w c:\windows\system32\logs
2009-05-23 10:13 . 2009-05-23 10:17 -------- d-----w c:\documents and settings\All Users\Application Data\BitDefender
2009-05-23 10:12 . 2009-05-23 10:51 -------- d-----w c:\program files\Fichiers communs\BitDefender
2009-05-23 09:16 . 2009-05-23 10:07 -------- d-----w c:\program files\G Data
2009-05-23 08:53 . 2009-05-23 10:07 -------- d-----w c:\program files\Fichiers communs\G DATA
2009-05-23 07:52 . 2009-05-23 09:23 68424 ----a-w c:\windows\system32\drivers\GRD.sys
2009-05-22 20:01 . 2009-05-23 08:57 50632 ----a-w c:\windows\system32\drivers\MiniIcpt.sys
2009-05-22 19:59 . 2009-05-22 19:59 22272 ----a-w c:\windows\system32\drivers\GDNdisIc.sys
2009-05-22 19:59 . 2009-05-23 08:54 51016 ----a-w c:\windows\system32\drivers\GDTdiIcpt.sys
2009-05-22 19:58 . 2009-05-23 10:07 -------- d-----w c:\documents and settings\All Users\Application Data\G DATA
2009-05-22 19:57 . 2009-05-23 08:51 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Downloaded Installations
2009-05-22 19:11 . 2009-05-22 19:11 -------- d-----w c:\program files\AVG
2009-05-22 19:00 . 2009-05-22 19:00 -------- d--h--w c:\windows\$hf_mig$
2009-05-22 17:50 . 2009-05-22 17:50 -------- d-----w c:\program files\Alwil Software
2009-05-22 17:42 . 2009-05-22 17:42 -------- d-----r c:\documents and settings\LocalService\Favoris
2009-05-22 17:37 . 2009-05-22 17:37 -------- d-----w c:\program files\ESET
2009-05-22 14:51 . 2009-05-22 14:51 -------- d-----w c:\program files\Sony Setup
2009-05-22 14:40 . 2009-05-22 14:40 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Sony
2009-05-22 14:38 . 2009-05-22 14:38 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Publish Providers
2009-05-22 14:38 . 2009-05-22 14:38 -------- d-----w c:\documents and settings\Rajmonda\Application Data\NetMedia Providers
2009-05-22 14:38 . 2009-05-22 14:38 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Sony
2009-05-22 14:00 . 2009-03-21 14:07 1054720 -c----w c:\windows\system32\dllcache\kernel32.dll
2009-05-22 14:00 . 2009-02-03 19:58 56832 -c----w c:\windows\system32\dllcache\secur32.dll
2009-05-22 14:00 . 2009-02-09 14:05 1846912 -c----w c:\windows\system32\dllcache\win32k.sys
2009-05-22 14:00 . 2008-12-05 06:57 144896 -c----w c:\windows\system32\dllcache\schannel.dll
2009-05-22 13:59 . 2009-05-22 13:59 -------- d-s---w c:\documents and settings\Rajmonda\UserData
2009-05-22 12:59 . 2009-05-22 12:59 13104 ----a-w c:\documents and settings\Rajmonda\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-22 12:59 . 2009-05-22 12:59 -------- d-----w c:\documents and settings\All Users\Application Data\InstallShield
2009-05-22 12:54 . 2008-04-13 17:31 7680 ------w c:\windows\system32\kbdsmsfi.dll
2009-05-22 12:52 . 2009-05-22 12:55 -------- d-----w c:\windows\ServicePackFiles
2009-05-22 12:33 . 2007-08-10 06:18 26488 ----a-w c:\windows\system32\spupdsvc.exe
2009-05-22 12:31 . 2009-05-22 12:47 -------- d-----w c:\windows\EHome
2009-05-20 20:01 . 2009-05-20 20:01 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Samsung
2009-05-20 19:53 . 2006-07-24 14:05 5632 ----a-w c:\windows\system32\drivers\StarOpen.sys
2009-05-20 19:53 . 2009-05-20 19:53 -------- d-----w c:\program files\Samsung
2009-05-19 08:25 . 2009-05-19 08:25 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Apple Computer
2009-05-16 14:32 . 2009-05-16 14:32 -------- d-----w c:\program files\Alcohol Soft
2009-05-16 14:30 . 2009-05-16 14:30 721904 ----a-w c:\windows\system32\drivers\sptd.sys
2009-05-15 09:40 . 2006-07-28 07:30 62744 ----a-w c:\windows\system32\xinput1_2.dll
2009-05-15 09:39 . 2009-05-15 09:39 -------- d-----w c:\windows\Logs
2009-05-15 08:34 . 2009-05-23 11:07 -------- d-----w c:\program files\Steam
2009-05-15 08:34 . 2009-05-20 09:25 -------- d-----w c:\documents and settings\Rajmonda\Application Data\FileZilla
2009-05-15 08:34 . 2009-05-15 08:34 -------- d-----w c:\program files\FileZilla FTP Client
2009-05-11 10:00 . 2009-05-11 10:00 -------- d-----w c:\program files\7-Zip
2009-05-10 14:22 . 2009-05-10 14:22 -------- d-----w c:\documents and settings\Rajmonda\Application Data\ScanSoft
2009-05-10 14:22 . 2009-05-10 14:22 -------- d-----w c:\documents and settings\All Users\Application Data\SSScanWizard
2009-05-10 14:22 . 2009-05-10 14:22 -------- d-----w c:\documents and settings\All Users\Application Data\SSScanAppDataDir
2009-05-10 14:20 . 1995-08-01 02:44 212480 ----a-w c:\windows\PCDLIB32.DLL
2009-05-10 14:19 . 1998-11-13 11:16 308224 ----a-w c:\windows\IsUn040c.exe
2009-05-10 14:19 . 2009-05-10 14:19 -------- d-----w c:\windows\StartHtmico
2009-05-10 14:19 . 2009-05-10 14:19 -------- d--h--w c:\windows\system32\CanonMP Uninstaller Information
2009-05-06 14:36 . 2009-05-06 14:36 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\vdownloader
2009-05-06 14:35 . 2009-05-06 14:35 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Desktopicon
2009-05-06 14:35 . 2009-05-06 14:36 -------- d-----w c:\program files\VDOWNLOADER
2009-05-06 08:21 . 2009-05-06 08:21 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Ahead
2009-05-06 08:17 . 2005-09-01 09:03 5888 ------w c:\windows\system32\drivers\imagedrv.sys
2009-05-06 08:17 . 2005-09-01 09:03 127488 ------w c:\windows\system32\drivers\imagesrv.sys
2009-05-06 08:16 . 2006-01-12 13:40 155648 ----a-w c:\windows\system32\NeroCheck.exe
2009-05-06 08:16 . 2004-07-26 14:16 476320 ------w c:\windows\system32\ImagXpr7.dll
2009-05-06 08:16 . 2004-07-26 14:16 471040 ------w c:\windows\system32\ImagXRA7.dll
2009-05-06 08:16 . 2004-07-26 14:16 262144 ------w c:\windows\system32\ImagXR7.dll
2009-05-06 08:16 . 2004-07-26 14:16 1568768 ------w c:\windows\system32\ImagX7.dll
2009-05-06 08:16 . 2004-07-09 06:43 364544 ------w c:\windows\system32\TwnLib4.dll
2009-05-06 08:16 . 2000-06-26 08:45 106496 ----a-w c:\windows\system32\TwnLib20.dll
2009-05-06 08:16 . 2009-05-06 08:16 -------- d-----w c:\program files\Ahead
2009-05-06 08:16 . 2009-05-06 08:16 -------- d-----w c:\program files\Fichiers communs\Ahead
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Ashampoo
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\ashampoo
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\documents and settings\All Users\Application Data\ashampoo
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\program files\Ashampoo
2009-05-05 17:44 . 2009-05-05 17:44 47360 ----a-w c:\windows\system32\drivers\pcouffin.sys
2009-05-05 17:44 . 2009-05-05 17:44 47360 ----a-w c:\documents and settings\Rajmonda\Application Data\pcouffin.sys
2009-05-05 17:44 . 2007-03-18 18:37 65602 ----a-w c:\windows\system32\cook3260.dll
2009-05-05 17:44 . 2006-09-29 10:26 176165 ----a-w c:\windows\system32\drv23260.dll
2009-05-05 17:44 . 2006-09-29 10:25 208935 ----a-w c:\windows\system32\drv33260.dll
2009-05-05 17:44 . 2006-09-29 10:24 217127 ----a-w c:\windows\system32\drv43260.dll
2009-05-03 14:58 . 2009-05-03 14:58 -------- d-----w C:\Pilotes
2009-05-03 14:57 . 2009-05-03 14:57 -------- d-----w c:\program files\IC
2009-05-03 10:12 . 2009-05-03 10:12 -------- d-----w c:\documents and settings\Rajmonda\Application Data\MSN6
2009-05-02 15:10 . 2009-05-02 15:10 -------- d-----w c:\documents and settings\Rajmonda\Application Data\vlc
2009-05-01 18:41 . 2009-05-22 12:40 -------- d-----w c:\documents and settings\Rajmonda\Contacts
2009-05-01 18:41 . 2009-05-22 13:21 -------- d-----w c:\program files\MSN Messenger
2009-05-01 18:40 . 2009-05-01 18:40 -------- d--h--w c:\documents and settings\All Users\Application Data\CanonBJ
2009-05-01 18:38 . 2009-05-10 14:22 -------- d-----w c:\program files\Fichiers communs\ScanSoft Shared
2009-05-01 18:38 . 2009-05-01 18:38 -------- d-----w c:\program files\ScanSoft
2009-05-01 18:37 . 2009-05-01 18:37 -------- d-----w c:\program files\ArcSoft
2009-05-01 18:36 . 2005-08-04 04:13 49152 ----a-w c:\windows\system32\cncisco.dll
2009-05-01 18:36 . 2005-08-04 04:12 221184 ----a-w c:\windows\system32\CNCC150.DLL
2009-05-01 18:36 . 2005-08-04 04:12 69632 ----a-w c:\windows\system32\CNCI150.DLL
2009-05-01 18:36 . 2005-05-30 10:45 139264 ----a-w c:\windows\system32\CNCL150.DLL
2009-05-01 18:36 . 2009-05-01 18:36 -------- d--h--w C:\CanonMP
2009-05-01 18:35 . 2009-05-01 18:37 -------- d-----w c:\program files\Canon
2009-05-01 18:23 . 2009-05-04 17:37 -------- d-----w c:\documents and settings\Rajmonda\.gimp-2.2
2009-05-01 18:10 . 2009-05-01 18:10 -------- d-----w c:\program files\OpenOffice.org 3
2009-05-01 18:10 . 2009-05-01 18:10 -------- d-----w c:\program files\Java
2009-05-01 18:10 . 2009-05-01 18:10 -------- d-----w c:\program files\Fichiers communs\Java
2009-05-01 18:08 . 2009-05-01 18:09 -------- d-----w c:\program files\GIMPshop
2009-05-01 18:02 . 2009-05-10 14:17 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Adobe
2009-05-01 18:01 . 2009-05-01 18:02 -------- d-----w c:\program files\Fichiers communs\Adobe
2009-05-01 18:00 . 2009-05-01 18:00 -------- d-----w c:\program files\VideoLAN

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-23 11:01 . 2009-05-01 17:41 -------- d-----w c:\documents and settings\Rajmonda\Application Data\uTorrent
2009-05-22 14:33 . 2009-05-01 17:37 -------- d-----w c:\program files\Fichiers communs\InstallShield
2009-05-22 14:33 . 2009-05-01 17:37 -------- d--h--w c:\program files\InstallShield Installation Information
2009-05-22 13:16 . 2002-08-30 15:00 63614 ----a-w c:\windows\system32\perfc00C.dat
2009-05-22 13:16 . 2002-08-30 15:00 445016 ----a-w c:\windows\system32\perfh00C.dat
2009-05-22 13:00 . 2009-05-01 15:27 76487 ----a-w c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2009-05-05 17:55 . 2009-05-05 17:55 -------- d-----w c:\documents and settings\Rajmonda\Application Data\DivX
2009-05-05 17:55 . 2009-05-05 17:55 -------- d-----w c:\program files\DivX
2009-05-05 17:55 . 2009-05-05 17:55 -------- d-----w c:\program files\Fichiers communs\DivX Shared
2009-05-05 17:44 . 2009-05-03 15:10 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Vso
2009-05-05 17:44 . 2009-05-03 15:10 -------- d-----w c:\program files\VSO
2009-05-04 17:37 . 2009-05-04 17:37 -------- d-----w c:\program files\Avira
2009-05-04 17:37 . 2009-05-01 16:16 -------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-05-04 17:31 . 2009-05-04 17:31 -------- d-----w c:\program files\SFR
2009-05-04 06:49 . 2009-05-04 06:49 -------- d-----w c:\program files\Duolabs
2009-05-01 17:59 . 2009-05-01 17:59 -------- d-----w c:\program files\KompoZer
2009-05-01 17:59 . 2009-05-01 17:59 -------- d-----w c:\documents and settings\Rajmonda\Application Data\KompoZer
2009-05-01 17:58 . 2009-05-01 17:58 0 ----a-w c:\windows\nsreg.dat
2009-05-01 17:41 . 2009-05-01 17:41 -------- d-----w c:\program files\uTorrent
2009-05-01 17:38 . 2009-05-01 17:38 86576 ----a-w c:\documents and settings\Rajmonda\Application Data\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2009-05-01 17:38 . 2009-05-01 17:38 392728 ----a-w c:\documents and settings\Rajmonda\Application Data\Microsoft\Services Windows Live\Services Windows Live.dll
2009-05-01 17:38 . 2009-05-01 17:38 132672 ----a-w c:\documents and settings\Rajmonda\Application Data\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2009-05-01 17:38 . 2009-05-01 17:37 -------- d-----w c:\program files\ATI Technologies
2009-05-01 15:35 . 2009-05-01 15:35 -------- d-----w c:\program files\microsoft frontpage
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\KJDBNH3J.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\C0JDNH39.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\A7DR1V9J.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\6RFLVZLF.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\3XVJLBHR.DAT
2009-05-01 15:33 . 2009-05-01 15:33 -------- d-----w c:\program files\HighMAT CD Writing Wizard
2009-05-01 15:32 . 2009-05-01 15:32 -------- d-----w c:\program files\Common Files
2009-05-01 15:29 . 2009-05-01 15:29 -------- d-----w c:\program files\Windows Journal Viewer
2009-05-01 15:28 . 2009-05-01 15:28 558142 ----a-w c:\windows\java\Packages\1BP75J7V.ZIP
2009-05-01 15:28 . 2009-05-01 15:28 155995 ----a-w c:\windows\java\Packages\EU75FN9F.ZIP
2009-05-01 15:27 . 2009-05-01 15:25 -------- d-----w c:\program files\Services en ligne
2009-05-01 15:26 . 2009-05-01 15:26 21892 ----a-w c:\windows\system32\emptyregdb.dat
2009-04-15 20:25 . 2009-05-05 17:55 9464 ------w c:\windows\system32\drivers\cdralw2k.sys
2009-04-15 20:25 . 2009-05-05 17:55 9336 ------w c:\windows\system32\drivers\cdr4_xp.sys
2009-04-15 20:25 . 2009-05-05 17:55 43528 ------w c:\windows\system32\drivers\PxHelp20.sys
2009-04-15 20:25 . 2009-05-05 17:55 129784 ------w c:\windows\system32\pxafs.dll
2009-04-15 20:25 . 2009-05-05 17:55 120056 ------w c:\windows\system32\pxcpyi64.exe
2009-04-15 20:25 . 2009-05-05 17:55 118520 ------w c:\windows\system32\pxinsi64.exe
2009-04-15 20:24 . 2009-04-15 20:24 90112 ----a-w c:\windows\system32\dpl100.dll
2009-04-15 20:24 . 2009-04-15 20:24 823296 ----a-w c:\windows\system32\divx_xx0c.dll
2009-04-15 20:24 . 2009-04-15 20:24 823296 ----a-w c:\windows\system32\divx_xx07.dll
2009-04-15 20:24 . 2009-04-15 20:24 815104 ----a-w c:\windows\system32\divx_xx0a.dll
2009-04-15 20:24 . 2009-04-15 20:24 802816 ----a-w c:\windows\system32\divx_xx11.dll
2009-04-15 20:24 . 2009-04-15 20:24 684032 ----a-w c:\windows\system32\DivX.dll
2009-03-30 08:32 . 2009-05-01 17:52 96104 ----a-w c:\windows\system32\drivers\avipbb.sys
2009-03-16 12:18 . 2009-05-15 09:41 69448 ----a-w c:\windows\system32\XAPOFX1_3.dll
2009-03-16 12:18 . 2009-05-15 09:41 517448 ----a-w c:\windows\system32\XAudio2_4.dll
2009-03-16 12:18 . 2009-05-15 09:41 235352 ----a-w c:\windows\system32\xactengine3_4.dll
2009-03-16 12:18 . 2009-05-15 09:41 22360 ----a-w c:\windows\system32\X3DAudio1_6.dll
2009-03-16 12:07 . 2009-05-15 09:40 80896 ----a-w c:\windows\system32\dxdllreg.exe
2009-03-09 13:27 . 2009-05-15 09:41 453456 ----a-w c:\windows\system32\d3dx10_41.dll
2009-03-09 13:27 . 2009-05-15 09:41 4178264 ----a-w c:\windows\system32\D3DX9_41.dll
2009-03-09 13:27 . 2009-05-15 09:41 1846632 ----a-w c:\windows\system32\D3DCompiler_41.dll
2009-03-05 16:08 . 2009-05-23 10:44 49664 ----a-w c:\program files\mozilla firefox\components\FFComm.dll
2009-04-15 20:24 . 2009-04-15 20:24 1044480 ----a-w c:\program files\mozilla firefox\plugins\libdivx.dll
2009-04-15 20:24 . 2009-04-15 20:24 200704 ----a-w c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"Steam"="c:\program files\steam\steam.exe" [2009-05-19 1217784]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-03 339968]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648]
"OpwareSE2"="c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"OPSE reminder"="c:\program files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" [2003-07-07 729088]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Taskman"="c:\recycler\S-1-5-21-9187562931-7049173027-089569827-0048\svchost.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

R0 avgntmgr;avgntmgr;c:\windows\system32\drivers\avgntmgr.sys [01/05/2009 19:52 22360]
R1 avgntdd;avgntdd;c:\windows\system32\drivers\avgntdd.sys [01/05/2009 19:52 45416]
S2 AntiVirMailService;Avira AntiVir MailGuard;"c:\program files\Avira\AntiVir Desktop\avmailc.exe" --> c:\program files\Avira\AntiVir Desktop\avmailc.exe [?]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;"c:\program files\Avira\AntiVir Desktop\sched.exe" --> c:\program files\Avira\AntiVir Desktop\sched.exe [?]
S2 AntiVirWebService;Avira AntiVir WebGuard;"c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE" --> c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [?]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-avgnt - c:\program files\Avira\AntiVir Desktop\avgnt.exe
HKLM-Run-Cmaudio - cmicnfg.cpl
HKCU-Explorer_Run-Systems Update - c:\program files\Fichiers communs\SERVICES\S-1-5-21-1303342014-1704936951-537590071-0504\services.exe
SafeBoot-procexp90.Sys


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Rajmonda\Application Data\Mozilla\Firefox\Profiles\2fjcxnar.default\
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}\components\AvkWebFilterFF.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-23 13:07
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(676)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(732)
c:\program files\Avira\AntiVir Desktop\avsda.dll

- - - - - - - > 'explorer.exe'(724)
c:\program files\ScanSoft\OmniPageSE2.0\ophookSE2.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\ati2evxx.exe
c:\windows\system32\rundll32.exe
.
**************************************************************************
.
Heure de fin: 2009-05-23 13:08 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-05-23 11:08

Avant-CF: 134 980 235 264 octets libres
Après-CF: 136 097 284 096 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /fastdetect /NoExecute=OptIn

291 --- E O F --- 2009-05-22 19:00

Merci beaucoup de ton aide Destrio5
Voila le rapport :
ComboFix 09-05-22.07 - Rajmonda 23/05/2009 13:25.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.511.206 [GMT 2:00]
Lancé depuis: c:\documents and settings\Rajmonda\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Rajmonda\Bureau\CFScript.txt
AV: BitDefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}

FILE ::
c:\recycler\S-1-5-21-9187562931-7049173027-089569827-0048\svchost.exe
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-04-23 au 2009-05-23 ))))))))))))))))))))))))))))))))))))
.

2009-05-23 10:59 . 2008-04-13 16:57 32128 -c--a-w c:\windows\system32\dllcache\wceusbsh.sys
2009-05-23 10:59 . 2008-04-13 16:57 32128 ----a-w c:\windows\system32\drivers\wceusbsh.sys
2009-05-23 10:50 . 2009-05-23 10:50 81984 ----a-w c:\windows\system32\bdod.bin
2009-05-23 10:27 . 2009-05-23 10:27 -------- d-----w c:\program files\Trend Micro
2009-05-23 10:14 . 2009-05-23 10:14 -------- d-----w c:\windows\system32\logs
2009-05-23 10:13 . 2009-05-23 10:17 -------- d-----w c:\documents and settings\All Users\Application Data\BitDefender
2009-05-23 10:12 . 2009-05-23 10:51 -------- d-----w c:\program files\Fichiers communs\BitDefender
2009-05-23 09:16 . 2009-05-23 10:07 -------- d-----w c:\program files\G Data
2009-05-23 08:53 . 2009-05-23 10:07 -------- d-----w c:\program files\Fichiers communs\G DATA
2009-05-23 07:52 . 2009-05-23 09:23 68424 ----a-w c:\windows\system32\drivers\GRD.sys
2009-05-22 20:01 . 2009-05-23 08:57 50632 ----a-w c:\windows\system32\drivers\MiniIcpt.sys
2009-05-22 19:59 . 2009-05-22 19:59 22272 ----a-w c:\windows\system32\drivers\GDNdisIc.sys
2009-05-22 19:59 . 2009-05-23 08:54 51016 ----a-w c:\windows\system32\drivers\GDTdiIcpt.sys
2009-05-22 19:58 . 2009-05-23 10:07 -------- d-----w c:\documents and settings\All Users\Application Data\G DATA
2009-05-22 19:57 . 2009-05-23 08:51 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Downloaded Installations
2009-05-22 19:11 . 2009-05-22 19:11 -------- d-----w c:\program files\AVG
2009-05-22 19:00 . 2009-05-22 19:00 -------- d--h--w c:\windows\$hf_mig$
2009-05-22 17:50 . 2009-05-22 17:50 -------- d-----w c:\program files\Alwil Software
2009-05-22 17:42 . 2009-05-22 17:42 -------- d-----r c:\documents and settings\LocalService\Favoris
2009-05-22 17:37 . 2009-05-22 17:37 -------- d-----w c:\program files\ESET
2009-05-22 14:51 . 2009-05-22 14:51 -------- d-----w c:\program files\Sony Setup
2009-05-22 14:40 . 2009-05-22 14:40 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Sony
2009-05-22 14:38 . 2009-05-22 14:38 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Publish Providers
2009-05-22 14:38 . 2009-05-22 14:38 -------- d-----w c:\documents and settings\Rajmonda\Application Data\NetMedia Providers
2009-05-22 14:38 . 2009-05-22 14:38 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Sony
2009-05-22 14:00 . 2009-03-21 14:07 1054720 -c----w c:\windows\system32\dllcache\kernel32.dll
2009-05-22 14:00 . 2009-02-03 19:58 56832 -c----w c:\windows\system32\dllcache\secur32.dll
2009-05-22 14:00 . 2009-02-09 14:05 1846912 -c----w c:\windows\system32\dllcache\win32k.sys
2009-05-22 14:00 . 2008-12-05 06:57 144896 -c----w c:\windows\system32\dllcache\schannel.dll
2009-05-22 13:59 . 2009-05-22 13:59 -------- d-s---w c:\documents and settings\Rajmonda\UserData
2009-05-22 12:59 . 2009-05-22 12:59 13104 ----a-w c:\documents and settings\Rajmonda\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-22 12:59 . 2009-05-22 12:59 -------- d-----w c:\documents and settings\All Users\Application Data\InstallShield
2009-05-22 12:54 . 2008-04-13 17:31 7680 ------w c:\windows\system32\kbdsmsfi.dll
2009-05-22 12:52 . 2009-05-22 12:55 -------- d-----w c:\windows\ServicePackFiles
2009-05-22 12:33 . 2007-08-10 06:18 26488 ----a-w c:\windows\system32\spupdsvc.exe
2009-05-22 12:31 . 2009-05-22 12:47 -------- d-----w c:\windows\EHome
2009-05-20 20:01 . 2009-05-20 20:01 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Samsung
2009-05-20 19:53 . 2006-07-24 14:05 5632 ----a-w c:\windows\system32\drivers\StarOpen.sys
2009-05-20 19:53 . 2009-05-20 19:53 -------- d-----w c:\program files\Samsung
2009-05-19 08:25 . 2009-05-19 08:25 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Apple Computer
2009-05-16 14:32 . 2009-05-16 14:32 -------- d-----w c:\program files\Alcohol Soft
2009-05-16 14:30 . 2009-05-16 14:30 721904 ----a-w c:\windows\system32\drivers\sptd.sys
2009-05-15 09:40 . 2006-07-28 07:30 62744 ----a-w c:\windows\system32\xinput1_2.dll
2009-05-15 09:39 . 2009-05-15 09:39 -------- d-----w c:\windows\Logs
2009-05-15 08:34 . 2009-05-23 11:28 -------- d-----w c:\program files\Steam
2009-05-15 08:34 . 2009-05-20 09:25 -------- d-----w c:\documents and settings\Rajmonda\Application Data\FileZilla
2009-05-15 08:34 . 2009-05-15 08:34 -------- d-----w c:\program files\FileZilla FTP Client
2009-05-11 10:00 . 2009-05-11 10:00 -------- d-----w c:\program files\7-Zip
2009-05-10 14:22 . 2009-05-10 14:22 -------- d-----w c:\documents and settings\Rajmonda\Application Data\ScanSoft
2009-05-10 14:22 . 2009-05-10 14:22 -------- d-----w c:\documents and settings\All Users\Application Data\SSScanWizard
2009-05-10 14:22 . 2009-05-10 14:22 -------- d-----w c:\documents and settings\All Users\Application Data\SSScanAppDataDir
2009-05-10 14:20 . 1995-08-01 02:44 212480 ----a-w c:\windows\PCDLIB32.DLL
2009-05-10 14:19 . 1998-11-13 11:16 308224 ----a-w c:\windows\IsUn040c.exe
2009-05-10 14:19 . 2009-05-10 14:19 -------- d-----w c:\windows\StartHtmico
2009-05-10 14:19 . 2009-05-10 14:19 -------- d--h--w c:\windows\system32\CanonMP Uninstaller Information
2009-05-06 14:36 . 2009-05-06 14:36 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\vdownloader
2009-05-06 14:35 . 2009-05-06 14:35 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Desktopicon
2009-05-06 14:35 . 2009-05-06 14:36 -------- d-----w c:\program files\VDOWNLOADER
2009-05-06 08:21 . 2009-05-06 08:21 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Ahead
2009-05-06 08:17 . 2005-09-01 09:03 5888 ------w c:\windows\system32\drivers\imagedrv.sys
2009-05-06 08:17 . 2005-09-01 09:03 127488 ------w c:\windows\system32\drivers\imagesrv.sys
2009-05-06 08:16 . 2006-01-12 13:40 155648 ----a-w c:\windows\system32\NeroCheck.exe
2009-05-06 08:16 . 2004-07-26 14:16 476320 ------w c:\windows\system32\ImagXpr7.dll
2009-05-06 08:16 . 2004-07-26 14:16 471040 ------w c:\windows\system32\ImagXRA7.dll
2009-05-06 08:16 . 2004-07-26 14:16 262144 ------w c:\windows\system32\ImagXR7.dll
2009-05-06 08:16 . 2004-07-26 14:16 1568768 ------w c:\windows\system32\ImagX7.dll
2009-05-06 08:16 . 2004-07-09 06:43 364544 ------w c:\windows\system32\TwnLib4.dll
2009-05-06 08:16 . 2000-06-26 08:45 106496 ----a-w c:\windows\system32\TwnLib20.dll
2009-05-06 08:16 . 2009-05-06 08:16 -------- d-----w c:\program files\Ahead
2009-05-06 08:16 . 2009-05-06 08:16 -------- d-----w c:\program files\Fichiers communs\Ahead
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Ashampoo
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\ashampoo
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\documents and settings\All Users\Application Data\ashampoo
2009-05-05 18:21 . 2009-05-05 18:21 -------- d-----w c:\program files\Ashampoo
2009-05-05 17:44 . 2009-05-05 17:44 47360 ----a-w c:\windows\system32\drivers\pcouffin.sys
2009-05-05 17:44 . 2009-05-05 17:44 47360 ----a-w c:\documents and settings\Rajmonda\Application Data\pcouffin.sys
2009-05-05 17:44 . 2007-03-18 18:37 65602 ----a-w c:\windows\system32\cook3260.dll
2009-05-05 17:44 . 2006-09-29 10:26 176165 ----a-w c:\windows\system32\drv23260.dll
2009-05-05 17:44 . 2006-09-29 10:25 208935 ----a-w c:\windows\system32\drv33260.dll
2009-05-05 17:44 . 2006-09-29 10:24 217127 ----a-w c:\windows\system32\drv43260.dll
2009-05-03 14:58 . 2009-05-03 14:58 -------- d-----w C:\Pilotes
2009-05-03 14:57 . 2009-05-03 14:57 -------- d-----w c:\program files\IC
2009-05-03 10:12 . 2009-05-03 10:12 -------- d-----w c:\documents and settings\Rajmonda\Application Data\MSN6
2009-05-02 15:10 . 2009-05-02 15:10 -------- d-----w c:\documents and settings\Rajmonda\Application Data\vlc
2009-05-01 18:41 . 2009-05-22 12:40 -------- d-----w c:\documents and settings\Rajmonda\Contacts
2009-05-01 18:41 . 2009-05-22 13:21 -------- d-----w c:\program files\MSN Messenger
2009-05-01 18:40 . 2009-05-01 18:40 -------- d--h--w c:\documents and settings\All Users\Application Data\CanonBJ
2009-05-01 18:38 . 2009-05-10 14:22 -------- d-----w c:\program files\Fichiers communs\ScanSoft Shared
2009-05-01 18:38 . 2009-05-01 18:38 -------- d-----w c:\program files\ScanSoft
2009-05-01 18:37 . 2009-05-01 18:37 -------- d-----w c:\program files\ArcSoft
2009-05-01 18:36 . 2005-08-04 04:13 49152 ----a-w c:\windows\system32\cncisco.dll
2009-05-01 18:36 . 2005-08-04 04:12 221184 ----a-w c:\windows\system32\CNCC150.DLL
2009-05-01 18:36 . 2005-08-04 04:12 69632 ----a-w c:\windows\system32\CNCI150.DLL
2009-05-01 18:36 . 2005-05-30 10:45 139264 ----a-w c:\windows\system32\CNCL150.DLL
2009-05-01 18:36 . 2009-05-01 18:36 -------- d--h--w C:\CanonMP
2009-05-01 18:35 . 2009-05-01 18:37 -------- d-----w c:\program files\Canon
2009-05-01 18:23 . 2009-05-04 17:37 -------- d-----w c:\documents and settings\Rajmonda\.gimp-2.2
2009-05-01 18:10 . 2009-05-01 18:10 -------- d-----w c:\program files\OpenOffice.org 3
2009-05-01 18:10 . 2009-05-01 18:10 -------- d-----w c:\program files\Java
2009-05-01 18:10 . 2009-05-01 18:10 -------- d-----w c:\program files\Fichiers communs\Java
2009-05-01 18:08 . 2009-05-01 18:09 -------- d-----w c:\program files\GIMPshop
2009-05-01 18:02 . 2009-05-10 14:17 -------- d-----w c:\documents and settings\Rajmonda\Local Settings\Application Data\Adobe
2009-05-01 18:01 . 2009-05-01 18:02 -------- d-----w c:\program files\Fichiers communs\Adobe
2009-05-01 18:00 . 2009-05-01 18:00 -------- d-----w c:\program files\VideoLAN

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-23 11:01 . 2009-05-01 17:41 -------- d-----w c:\documents and settings\Rajmonda\Application Data\uTorrent
2009-05-22 14:33 . 2009-05-01 17:37 -------- d-----w c:\program files\Fichiers communs\InstallShield
2009-05-22 14:33 . 2009-05-01 17:37 -------- d--h--w c:\program files\InstallShield Installation Information
2009-05-22 13:16 . 2002-08-30 15:00 63614 ----a-w c:\windows\system32\perfc00C.dat
2009-05-22 13:16 . 2002-08-30 15:00 445016 ----a-w c:\windows\system32\perfh00C.dat
2009-05-22 13:00 . 2009-05-01 15:27 76487 ----a-w c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2009-05-05 17:55 . 2009-05-05 17:55 -------- d-----w c:\documents and settings\Rajmonda\Application Data\DivX
2009-05-05 17:55 . 2009-05-05 17:55 -------- d-----w c:\program files\DivX
2009-05-05 17:55 . 2009-05-05 17:55 -------- d-----w c:\program files\Fichiers communs\DivX Shared
2009-05-05 17:44 . 2009-05-03 15:10 -------- d-----w c:\documents and settings\Rajmonda\Application Data\Vso
2009-05-05 17:44 . 2009-05-03 15:10 -------- d-----w c:\program files\VSO
2009-05-04 17:37 . 2009-05-04 17:37 -------- d-----w c:\program files\Avira
2009-05-04 17:37 . 2009-05-01 16:16 -------- d-----w c:\documents and settings\All Users\Application Data\Avira
2009-05-04 17:31 . 2009-05-04 17:31 -------- d-----w c:\program files\SFR
2009-05-04 06:49 . 2009-05-04 06:49 -------- d-----w c:\program files\Duolabs
2009-05-01 17:59 . 2009-05-01 17:59 -------- d-----w c:\program files\KompoZer
2009-05-01 17:59 . 2009-05-01 17:59 -------- d-----w c:\documents and settings\Rajmonda\Application Data\KompoZer
2009-05-01 17:58 . 2009-05-01 17:58 0 ----a-w c:\windows\nsreg.dat
2009-05-01 17:41 . 2009-05-01 17:41 -------- d-----w c:\program files\uTorrent
2009-05-01 17:38 . 2009-05-01 17:38 86576 ----a-w c:\documents and settings\Rajmonda\Application Data\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2009-05-01 17:38 . 2009-05-01 17:38 392728 ----a-w c:\documents and settings\Rajmonda\Application Data\Microsoft\Services Windows Live\Services Windows Live.dll
2009-05-01 17:38 . 2009-05-01 17:38 132672 ----a-w c:\documents and settings\Rajmonda\Application Data\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2009-05-01 17:38 . 2009-05-01 17:37 -------- d-----w c:\program files\ATI Technologies
2009-05-01 15:35 . 2009-05-01 15:35 -------- d-----w c:\program files\microsoft frontpage
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\KJDBNH3J.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\C0JDNH39.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\A7DR1V9J.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\6RFLVZLF.DAT
2009-05-01 15:34 . 2009-05-01 15:34 2678 ----a-w c:\windows\java\Packages\Data\3XVJLBHR.DAT
2009-05-01 15:33 . 2009-05-01 15:33 -------- d-----w c:\program files\HighMAT CD Writing Wizard
2009-05-01 15:32 . 2009-05-01 15:32 -------- d-----w c:\program files\Common Files
2009-05-01 15:29 . 2009-05-01 15:29 -------- d-----w c:\program files\Windows Journal Viewer
2009-05-01 15:28 . 2009-05-01 15:28 558142 ----a-w c:\windows\java\Packages\1BP75J7V.ZIP
2009-05-01 15:28 . 2009-05-01 15:28 155995 ----a-w c:\windows\java\Packages\EU75FN9F.ZIP
2009-05-01 15:27 . 2009-05-01 15:25 -------- d-----w c:\program files\Services en ligne
2009-05-01 15:26 . 2009-05-01 15:26 21892 ----a-w c:\windows\system32\emptyregdb.dat
2009-04-15 20:25 . 2009-05-05 17:55 9464 ------w c:\windows\system32\drivers\cdralw2k.sys
2009-04-15 20:25 . 2009-05-05 17:55 9336 ------w c:\windows\system32\drivers\cdr4_xp.sys
2009-04-15 20:25 . 2009-05-05 17:55 43528 ------w c:\windows\system32\drivers\PxHelp20.sys
2009-04-15 20:25 . 2009-05-05 17:55 129784 ------w c:\windows\system32\pxafs.dll
2009-04-15 20:25 . 2009-05-05 17:55 120056 ------w c:\windows\system32\pxcpyi64.exe
2009-04-15 20:25 . 2009-05-05 17:55 118520 ------w c:\windows\system32\pxinsi64.exe
2009-04-15 20:24 . 2009-04-15 20:24 90112 ----a-w c:\windows\system32\dpl100.dll
2009-04-15 20:24 . 2009-04-15 20:24 823296 ----a-w c:\windows\system32\divx_xx0c.dll
2009-04-15 20:24 . 2009-04-15 20:24 823296 ----a-w c:\windows\system32\divx_xx07.dll
2009-04-15 20:24 . 2009-04-15 20:24 815104 ----a-w c:\windows\system32\divx_xx0a.dll
2009-04-15 20:24 . 2009-04-15 20:24 802816 ----a-w c:\windows\system32\divx_xx11.dll
2009-04-15 20:24 . 2009-04-15 20:24 684032 ----a-w c:\windows\system32\DivX.dll
2009-03-30 08:32 . 2009-05-01 17:52 96104 ----a-w c:\windows\system32\drivers\avipbb.sys
2009-03-16 12:18 . 2009-05-15 09:41 69448 ----a-w c:\windows\system32\XAPOFX1_3.dll
2009-03-16 12:18 . 2009-05-15 09:41 517448 ----a-w c:\windows\system32\XAudio2_4.dll
2009-03-16 12:18 . 2009-05-15 09:41 235352 ----a-w c:\windows\system32\xactengine3_4.dll
2009-03-16 12:18 . 2009-05-15 09:41 22360 ----a-w c:\windows\system32\X3DAudio1_6.dll
2009-03-16 12:07 . 2009-05-15 09:40 80896 ----a-w c:\windows\system32\dxdllreg.exe
2009-03-09 13:27 . 2009-05-15 09:41 453456 ----a-w c:\windows\system32\d3dx10_41.dll
2009-03-09 13:27 . 2009-05-15 09:41 4178264 ----a-w c:\windows\system32\D3DX9_41.dll
2009-03-09 13:27 . 2009-05-15 09:41 1846632 ----a-w c:\windows\system32\D3DCompiler_41.dll
2009-03-05 16:08 . 2009-05-23 10:44 49664 ----a-w c:\program files\mozilla firefox\components\FFComm.dll
2009-04-15 20:24 . 2009-04-15 20:24 1044480 ----a-w c:\program files\mozilla firefox\plugins\libdivx.dll
2009-04-15 20:24 . 2009-04-15 20:24 200704 ----a-w c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]
"Steam"="c:\program files\steam\steam.exe" [2009-05-19 1217784]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-03 339968]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648]
"OpwareSE2"="c:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"OPSE reminder"="c:\program files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" [2003-07-07 729088]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-13 15360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

R0 avgntmgr;avgntmgr;c:\windows\system32\drivers\avgntmgr.sys [01/05/2009 19:52 22360]
R1 avgntdd;avgntdd;c:\windows\system32\drivers\avgntdd.sys [01/05/2009 19:52 45416]
S2 AntiVirMailService;Avira AntiVir MailGuard;"c:\program files\Avira\AntiVir Desktop\avmailc.exe" --> c:\program files\Avira\AntiVir Desktop\avmailc.exe [?]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;"c:\program files\Avira\AntiVir Desktop\sched.exe" --> c:\program files\Avira\AntiVir Desktop\sched.exe [?]
S2 AntiVirWebService;Avira AntiVir WebGuard;"c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE" --> c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE [?]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Rajmonda\Application Data\Mozilla\Firefox\Profiles\2fjcxnar.default\
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}\components\AvkWebFilterFF.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-23 13:28
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(680)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(736)
c:\program files\Avira\AntiVir Desktop\avsda.dll

- - - - - - - > 'explorer.exe'(4048)
c:\program files\ScanSoft\OmniPageSE2.0\ophookSE2.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\system32\ati2evxx.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2009-05-23 13:29 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-05-23 11:29
ComboFix2.txt 2009-05-23 11:08

Avant-CF: 136 082 214 912 octets libres
Après-CF: 136 071 323 648 octets libres

257 --- E O F --- 2009-05-22 19:00

J'ai installe la version d'essai mais je l'ai enlever la !
Tu me propose quoi comme bon antivirus ?

Voila le rapport :
Malwarebytes' Anti-Malware 1.36
Version de la base de données: 2170
Windows 5.1.2600 Service Pack 3

23/05/2009 18:50:30
mbam-log-2009-05-23 (18-50-30).txt

Type de recherche: Examen rapide
Eléments examinés: 77852
Temps écoulé: 3 minute(s), 22 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)