[Résolu] Infecté par packed.genreic.200

Bonjour,

Tu as une variante du rootkit TDSSServ.

[#ff0000]/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\[/#f]

Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.

Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.

Il va te demander d'installer la console de récupération : accepte.

Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix

Lorsque je lance Combofix il met signal une erreur : Vous ne pouvez pas renommer ComboFix en ComboFix[1]. Veuillez choisir un autre nom, de préférence composé de caractères alphanumériques.

Je ne peux pas le lancer après l'avoir télécharger, je suis obligé de passer par IE et de faire "executer".

Renomme-le en IDN puis essaie de l'exécuter.

Toujours pareil, Lorque je regarde dans les processus, il reste "figé"

Télécharge The Avenger sur ton Bureau.

Dézippe le fichier avenger.zip (Clique droit > Extraire).

Ferme toutes les fenêtres et toutes les applications en cours et double-clique sur l'icône avenger (Icône avec l'épée).

Clique sur OK pour accepter les termes d'utilisation.

Une fois le programme lancé, verifie bien que :

Citation :

La case "Scan For RootKit" soit cochée
La case "Automatically disable any rootkits found ne soit pas cochée"

Clique sur Execute pour lancer le scan.

Répondre Oui à ce message de confirmation.

Répondre Oui pour exécuter un scan antirootkit.

La première étape étant finie, The Avenger a désormais besoin de redémarrer votre PC pour finir, clique sur Oui.
Ton PC redémarrera alors automatiquement.

Au redémarrage, le rapport de The Avenger s'ouvrira automatiquement, poste-le (C:\avenger.txt).

Voila le rapport :

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "avg6u4nx" found!
Start Type: 3 (Manual)

Rootkit scan completed.


Completed script processing.

*******************

Finished! Terminate.

Tu sais redémarrer en mode sans échec ?

Ouep ^^

Voila je suis en mode sans echec.

Réessaie de lancer ComboFix renommé.

Ca se lance, je fais la manip précité dans ton post.

ComboFixe s'est exécuté.

Voici le rapport :

ComboFix 09-06-13.09 - Administrateur 14/06/2009 17:33.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.3583.3219 [GMT 2:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\IDN.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\UACqpkcjadrpxsiblm.sys
c:\windows\system32\msconfig.exe
c:\windows\system32\tmp.reg
c:\windows\system32\UACaqttrgyurwtaqoq.log
c:\windows\system32\UACbxjrvllktvdgtqw.db
c:\windows\system32\UACcdxmcgqlybeapeg.log
c:\windows\system32\UACfgrsequfruqxlnh.dll
c:\windows\system32\UACfvcmxjaoykjgeyk.dll
c:\windows\system32\UACilxxyojevpqvnpn.dll
c:\windows\system32\uacinit.dll
c:\windows\system32\UACjdaeocnpugnqmwo.dll
c:\windows\system32\UAClppindrhcynyvow.dll
c:\windows\system32\UACqptitpioatkfefy.log
c:\windows\system32\UACrxtuliyotlhuasr.dll
c:\windows\system32\UACwsvsokpxtppelvi.dat

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_UACd.sys


((((((((((((((((((((((((((((( Fichiers créés du 2009-05-14 au 2009-06-14 ))))))))))))))))))))))))))))))))))))
.

2009-06-14 15:32 . 2009-06-09 15:10 165240 ----a-r- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\IPSFFPlgn\components\IPSFFPl.dll
2009-06-14 13:13 . 2008-06-19 15:24 28544 ----a-w- c:\windows\system32\drivers\pavboot.sys
2009-06-14 13:13 . 2009-06-14 13:13 -------- d-----w- c:\program files\Panda Security
2009-06-14 13:08 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-14 13:08 . 2009-06-14 14:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-14 13:08 . 2009-06-14 13:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-06-14 13:08 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-14 10:58 . 2009-06-14 10:58 -------- d-----w- c:\documents and settings\Administrateur\.housecall6.6
2009-06-14 10:48 . 2009-06-14 10:48 -------- d-----w- c:\windows\Sun
2009-06-14 10:45 . 2009-06-14 10:45 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-06-14 10:45 . 2009-06-14 10:45 -------- d-----w- c:\program files\Java
2009-06-14 10:45 . 2009-06-14 10:45 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
2009-06-14 10:45 . 2009-06-14 10:45 152576 ----a-w- c:\documents and settings\Administrateur\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
2009-06-14 10:36 . 2009-06-14 11:38 -------- d-----w- C:\UsbFix
2009-06-14 10:26 . 2009-06-14 10:26 -------- d-----w- C:\rsit
2009-06-14 10:26 . 2009-06-14 10:26 -------- d-----w- c:\program files\trend micro
2009-06-14 10:16 . 2009-06-09 15:10 89104 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVENG.SYS
2009-06-14 10:16 . 2009-06-09 15:10 876144 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVEX15.SYS
2009-06-14 10:16 . 2009-06-09 15:10 371248 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\EECTRL.SYS
2009-06-14 10:16 . 2009-06-09 15:10 101936 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\ERASER.SYS
2009-06-14 10:16 . 2009-06-09 15:10 177520 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVENG32.DLL
2009-06-14 10:16 . 2009-06-09 15:10 1181040 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVEX32A.DLL
2009-06-14 10:16 . 2009-06-09 15:10 259368 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\ECMSVR32.DLL
2009-06-14 10:16 . 2009-06-09 15:10 2414128 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\CCERASER.DLL
2009-06-14 10:15 . 2009-06-14 10:15 -------- d-----w- c:\program files\Norton Support
2009-06-14 10:15 . 2009-06-14 10:15 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Symantec
2009-06-13 23:32 . 2009-06-13 23:32 603904 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-13 23:32 . 2009-06-13 23:32 362240 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-13 23:32 . 2008-11-12 14:44 27904 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-13 23:32 . 2009-06-13 23:32 -------- d-----w- c:\documents and settings\Administrateur\Application Data\TuneUp Software
2009-06-13 23:31 . 2009-06-13 23:32 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-13 23:31 . 2009-06-13 23:31 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2009-06-13 02:27 . 2009-06-13 02:28 -------- d-----w- c:\program files\Counter-Strike 1.6
2009-06-13 01:33 . 2009-06-13 01:33 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Gas Powered Games
2009-06-12 21:41 . 2009-06-09 15:10 396848 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610.006\IDSviA64.sys
2009-06-12 21:41 . 2009-06-09 15:10 292912 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610.006\IDSvix86.sys
2009-06-12 21:41 . 2009-06-09 15:10 276344 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610.006\IDSXpx86.sys
2009-06-12 21:41 . 2009-06-09 15:10 447864 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610.006\IDSxpx86.dll
2009-06-12 21:41 . 2009-03-16 20:03 533880 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610.006\Scxpx86.dll
2009-06-12 20:26 . 2009-06-12 20:28 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Command & Conquer 3 Les guerres du Tiberium
2009-06-11 20:26 . 2008-04-13 07:39 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2009-06-11 20:25 . 2009-06-11 20:25 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Ahead
2009-06-11 20:25 . 2009-06-11 20:29 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Ahead
2009-06-11 20:23 . 2009-06-11 20:25 -------- d-----w- c:\program files\Fichiers communs\Ahead
2009-06-11 20:23 . 2009-06-11 20:23 -------- d-----w- c:\program files\Nero
2009-06-11 19:56 . 2009-06-11 19:57 -------- d-----w- c:\program files\Yamp 2.3
2009-06-11 18:40 . 2009-06-11 18:40 3262 ----a-r- c:\documents and settings\Administrateur\Application Data\Microsoft\Installer\{E7394983-3869-46F4-A117-EB148F104D79}\BOINCManagerShortcut_F8D63239C34C43E18FC7841149A9E4C1.exe
2009-06-11 18:40 . 2009-06-11 18:40 3262 ----a-r- c:\documents and settings\Administrateur\Application Data\Microsoft\Installer\{E7394983-3869-46F4-A117-EB148F104D79}\ARPPRODUCTICON.exe
2009-06-11 18:40 . 2009-06-14 15:05 -------- d-----w- c:\documents and settings\All Users\Application Data\BOINC
2009-06-11 18:40 . 2009-06-11 18:44 -------- d-----w- c:\program files\BOINC
2009-06-11 18:40 . 2009-06-11 18:40 -------- d-----w- c:\windows\Downloaded Installations
2009-06-10 16:28 . 2009-06-14 11:35 -------- d-----w- C:\RESTORE
2009-06-10 15:31 . 2009-06-10 15:31 -------- d-----w- c:\program files\Microsoft Works
2009-06-10 15:30 . 2009-06-10 15:30 -------- d-----w- c:\program files\MSBuild
2009-06-10 15:30 . 2009-06-10 15:30 -------- d-----w- c:\program files\Microsoft.NET
2009-06-10 15:28 . 2009-06-10 15:28 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-06-10 15:27 . 2009-06-10 15:30 -------- d-----w- c:\windows\SHELLNEW
2009-06-10 15:26 . 2009-06-10 15:26 -------- d--h--r- C:\MSOCache
2009-06-09 21:24 . 2009-06-09 21:24 -------- d-----w- c:\program files\AxBx
2009-06-09 15:28 . 2007-03-21 21:22 2781184 ----a-w- c:\documents and settings\Administrateur\Application Data\Adobe\Dreamweaver 9\Configuration\Flash Player\authplay.dll
2009-06-09 15:13 . 2009-06-09 15:10 396848 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090604.001\IDSviA64.sys
2009-06-09 15:13 . 2009-06-09 15:10 292912 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090604.001\IDSvix86.sys
2009-06-09 15:13 . 2009-06-09 15:10 276344 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090604.001\IDSXpx86.sys
2009-06-09 15:13 . 2009-06-09 15:10 447864 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090604.001\IDSxpx86.dll
2009-06-09 15:13 . 2009-03-16 20:03 533880 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090604.001\Scxpx86.dll
2009-06-09 15:11 . 2009-06-09 15:10 554352 ----a-r- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\components\coFFPlgn.dll
2009-06-08 10:57 . 2009-06-09 15:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2009-06-08 10:57 . 2009-06-08 10:57 -------- d-----w- c:\documents and settings\All Users\Application Data\PCSettings
2009-06-08 10:40 . 2009-06-09 15:09 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-06-08 10:40 . 2009-06-08 10:40 -------- d-----w- c:\program files\NortonInstaller
2009-06-08 10:37 . 2009-06-08 10:37 -------- d-----w- c:\documents and settings\All Users\Symantec Temporary Files
2009-06-08 09:20 . 2009-06-14 15:05 -------- d-----w- c:\documents and settings\Administrateur\Application Data\skypePM
2009-06-08 09:20 . 2009-06-08 09:20 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-06-08 09:17 . 2009-06-14 15:05 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Skype
2009-06-08 09:17 . 2009-06-08 09:17 -------- d-----w- c:\program files\Skype
2009-06-08 09:17 . 2009-06-08 09:17 -------- d-----w- c:\program files\Fichiers communs\Skype
2009-06-08 00:14 . 2009-06-08 00:14 -------- d-----w- c:\program files\Microsoft Silverlight
2009-06-07 10:33 . 2007-05-09 13:16 28160 ----a-w- c:\windows\system32\drivers\sncduvc.sys
2009-06-07 10:33 . 2005-11-23 11:55 53248 ----a-w- c:\windows\system32\csnp2uvc.dll
2009-06-07 10:33 . 2007-05-29 10:23 94208 ----a-w- c:\windows\system32\drivers\camfilt2.sys
2009-06-07 10:33 . 2007-05-25 16:37 167936 ----a-w- c:\windows\system32\rsnp2uvc.dll
2009-06-07 10:33 . 2007-05-16 13:33 299008 ----a-w- c:\windows\system32\vsnp2uvc.dll
2009-06-07 10:33 . 2007-05-16 11:02 9602944 ----a-w- c:\windows\system32\drivers\snp2uvc.sys
2009-06-07 10:32 . 2006-08-01 10:31 3600384 ----a-w- c:\windows\ffmpeg.exe
2009-06-07 10:32 . 2009-06-07 10:33 -------- d-----w- c:\windows\system32\HWC HD
2009-06-07 10:32 . 2009-06-07 10:32 -------- d-----w- c:\program files\Hercules
2009-06-06 22:00 . 2009-06-06 22:00 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\PunkBuster
2009-06-06 20:20 . 2009-06-06 20:20 -------- d-----w- c:\documents and settings\All Users\Application Data\RICOH
2009-06-06 20:19 . 2009-06-06 20:19 -------- d-----w- c:\temp\z37831L6
2009-06-06 06:37 . 2009-06-14 10:05 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2009-06-06 06:23 . 2009-06-06 20:19 -------- d-----w- C:\temp
2009-06-06 06:22 . 2009-06-06 06:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Media Center Programs
2009-06-06 05:59 . 2009-06-06 05:59 -------- d-----w- c:\program files\THQ
2009-06-06 05:59 . 2006-09-28 14:05 237848 ----a-w- c:\windows\system32\xactengine2_4.dll
2009-06-06 05:59 . 2006-09-28 14:03 15128 ----a-w- c:\windows\system32\x3daudio1_1.dll
2009-06-06 05:59 . 2006-07-28 07:30 236824 ----a-w- c:\windows\system32\xactengine2_3.dll
2009-06-06 05:59 . 2006-07-28 07:30 62744 ----a-w- c:\windows\system32\xinput1_2.dll
2009-06-06 05:53 . 2009-06-14 15:05 -------- d-----w- c:\program files\Steam
2009-06-06 05:49 . 2009-06-06 05:49 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-06-06 05:48 . 2009-06-06 05:48 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
2009-06-06 05:48 . 2008-08-17 11:39 2928992 -c--a-r- c:\documents and settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}\setup.exe
2009-06-06 05:41 . 2009-06-11 23:06 -------- d-----w- c:\windows\system32\oodag
2009-06-06 05:39 . 2009-06-06 05:39 9838 ----a-w- c:\windows\system32\ealregsnapshot1.reg
2009-06-06 05:39 . 2009-06-06 05:39 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Downloaded Installations
2009-06-06 05:33 . 2009-06-06 05:33 669184 ----a-w- c:\windows\system32\pbsvc.exe
2009-06-06 05:33 . 2007-07-19 16:14 444776 ----a-w- c:\windows\system32\d3dx10_35.dll
2009-06-06 05:33 . 2007-07-19 16:14 1358192 ----a-w- c:\windows\system32\D3DCompiler_35.dll
2009-06-06 05:33 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2009-06-06 05:33 . 2007-05-16 14:45 443752 ----a-w- c:\windows\system32\d3dx10_34.dll
2009-06-06 05:33 . 2007-05-16 14:45 1124720 ----a-w- c:\windows\system32\D3DCompiler_34.dll
2009-06-06 05:33 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2009-06-06 05:33 . 2007-04-04 16:53 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2009-06-06 05:22 . 2009-06-13 01:30 -------- d-----w- c:\program files\WARCRAFT III
2009-06-06 05:20 . 2006-11-29 11:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2009-06-06 05:16 . 2009-06-09 21:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-06-06 02:50 . 2008-09-05 00:22 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-06 02:50 . 2009-06-06 02:50 10134 ----a-r- c:\documents and settings\Administrateur\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-06-06 02:50 . 2009-06-06 02:50 -------- d-----w- c:\program files\Microsoft WSE
2009-06-06 02:49 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-06 02:49 . 2009-06-06 02:49 -------- d-----w- c:\windows\Logs
2009-06-06 02:15 . 2009-06-06 02:15 -------- d-----w- c:\program files\Lavalys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-14 14:08 . 2009-06-06 00:55 -------- d-----w- c:\program files\adslTV
2009-06-13 00:27 . 2009-06-06 01:48 189072 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-06-12 23:38 . 2009-06-06 01:48 138920 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-06-11 23:02 . 2009-06-06 01:01 -------- d-----w- c:\documents and settings\Administrateur\Application Data\SoftPlug
2009-06-10 15:51 . 2009-06-06 00:29 69320 ----a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-10 15:31 . 2009-06-06 00:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-06-09 15:47 . 2009-06-06 00:41 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-06-08 09:17 . 2009-06-06 00:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-06-07 10:32 . 2009-06-06 00:21 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-06 23:43 . 2009-06-06 01:08 -------- d-----w- c:\program files\EA GAMES
2009-06-06 22:00 . 2009-06-06 01:48 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-06-06 06:35 . 2009-06-06 00:51 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-06-06 05:33 . 2009-06-06 01:48 22328 ----a-w- c:\documents and settings\Administrateur\Application Data\PnkBstrK.sys
2009-06-06 05:33 . 2009-06-06 01:48 22328 ----a-w- c:\documents and settings\Administrateur\Application Data\PnkBstrK.sys
2009-06-06 05:21 . 2009-06-06 01:56 -------- d-----w- c:\program files\Electronic Arts
2009-06-06 05:17 . 2009-06-06 00:35 -------- d-----w- c:\program files\Messenger Plus! Live
2009-06-06 01:47 . 2009-06-06 01:46 -------- d-----w- c:\documents and settings\All Users\Application Data\TrackMania
2009-06-06 01:43 . 2009-06-06 01:40 -------- d-----w- c:\program files\TmUnitedForever
2009-06-06 01:38 . 2009-06-06 01:38 -------- d-----w- c:\program files\Activision
2009-06-06 01:27 . 2009-06-06 01:02 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-06-06 01:23 . 2009-06-06 01:23 -------- d-----w- c:\program files\Fichiers communs\Control Panels
2009-06-06 01:22 . 2009-06-06 01:22 -------- d-----w- c:\documents and settings\All Users\Application Data\ALM
2009-06-06 01:16 . 2009-06-06 01:16 -------- d-----w- c:\program files\QuickTime
2009-06-06 01:11 . 2009-06-06 01:11 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-06-06 01:07 . 2009-06-06 00:20 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2009-06-06 01:06 . 2009-06-06 01:06 -------- d-----w- c:\program files\Bonjour
2009-06-06 01:03 . 2009-06-06 01:03 -------- d-----w- c:\program files\Fichiers communs\Macrovision Shared
2009-06-06 01:02 . 2009-06-06 00:36 -------- d-----w- c:\documents and settings\Administrateur\Application Data\DAEMON Tools Lite
2009-06-06 01:01 . 2009-06-06 01:01 -------- d-----w- c:\documents and settings\Administrateur\Application Data\LEA
2009-06-06 01:01 . 2009-06-06 01:01 -------- d-----w- c:\program files\LEA
2009-06-06 01:01 . 2009-06-06 01:01 -------- d-----w- c:\program files\WinPcap
2009-06-06 00:57 . 2009-06-06 00:56 -------- d-----w- c:\documents and settings\Administrateur\Application Data\vlc
2009-06-06 00:52 . 2001-08-28 18:00 76384 ----a-w- c:\windows\system32\perfc00C.dat
2009-06-06 00:52 . 2001-08-28 18:00 471246 ----a-w- c:\windows\system32\perfh00C.dat
2009-06-06 00:51 . 2009-06-06 00:51 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-06-06 00:51 . 2009-06-06 00:51 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2009-06-06 00:48 . 2009-06-06 00:48 -------- d-----w- c:\documents and settings\Administrateur\Application Data\HP
2009-06-06 00:48 . 2009-06-06 00:48 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-06-06 00:43 . 2009-06-06 00:43 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Symantec
2009-06-06 00:43 . 2009-06-06 00:43 -------- d-----w- c:\program files\Windows Sidebar
2009-06-06 00:37 . 2009-06-06 00:36 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Dynamique
2009-06-06 00:37 . 2009-06-06 00:37 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Sites prédéfinis
2009-06-06 00:36 . 2009-06-06 00:36 -------- d-----w- c:\program files\Visicom Media
2009-06-06 00:36 . 2009-06-06 00:36 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-06-06 00:34 . 2009-06-06 00:32 -------- d-----w- c:\program files\Windows Live
2009-06-06 00:33 . 2009-06-06 00:33 -------- d-----w- c:\program files\Microsoft
2009-06-06 00:33 . 2009-06-06 00:33 10134 ----a-r- c:\documents and settings\Administrateur\Application Data\Microsoft\Installer\{12665B01-3F3A-4433-B179-9D8E352D7547}\ARPPRODUCTICON.exe
2009-06-06 00:33 . 2009-06-06 00:32 -------- d-----w- c:\program files\Fichiers communs\Corel
2009-06-06 00:33 . 2009-06-06 00:33 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-06-06 00:33 . 2009-06-06 00:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Corel
2009-06-06 00:32 . 2009-06-06 00:32 -------- d-----w- c:\program files\Corel
2009-06-06 00:30 . 2009-06-06 00:30 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-06-06 00:29 . 2009-06-06 00:29 -------- d-----w- c:\program files\Downloaded Installations
2009-06-06 00:28 . 2009-06-06 00:22 -------- d-----w- c:\program files\Realtek
2009-06-06 00:28 . 2009-06-06 00:28 -------- d-----w- c:\program files\ASUS
2009-06-06 00:22 . 2009-06-06 00:22 -------- d-----w- c:\documents and settings\Administrateur\Application Data\InstallShield
2009-06-06 00:21 . 2009-06-06 00:21 -------- d-----w- c:\program files\VideoLAN
2009-06-06 00:20 . 2009-06-06 00:20 -------- d-----w- c:\program files\VIA
2009-06-06 00:19 . 2009-06-06 00:19 -------- d-----w- c:\program files\OO Software
2009-06-06 00:17 . 2009-06-06 00:17 -------- d-----w- c:\program files\Intel
2009-06-05 23:58 . 2009-06-05 23:58 -------- d-----w- c:\program files\Windows Media Connect 2
2009-06-05 23:56 . 2009-06-05 23:56 21892 ----a-w- c:\windows\system32\emptyregdb.dat
2009-03-16 20:03 . 2009-03-16 20:03 533880 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\Scxpx86.dll
2008-06-30 11:44 . 2009-06-06 06:38 324976 ----a-w- c:\program files\mozilla firefox\components\coFFPlgn.dll
.

------- Sigcheck -------

[-] 2008-04-29 04:12 361344 030DC4D48CC2B894FEE2F390D8E66AD5 c:\windows\system32\drivers\tcpip.sys

[-] 2008-06-15 21:20 2165760 574412116E1B190B325C390A515C4E3E c:\windows\system32\ntkrnlpa.exe

[-] 2008-06-04 19:57 2287104 4332A55A3B40A1B97AA124E6CD6E5420 c:\windows\system32\ntoskrnl.exe

[-] 2008-06-04 21:18 979968 D1EA0A366973ECA3E03F1ACBEFDA8F43 c:\windows\explorer.exe

[-] 2008-06-04 21:18 102400 478B314098276163EDD8FCD47CC15BE5 c:\windows\system32\wuauclt.exe

[-] 2008-04-28 03:00 1571840 1697B0EFD4E0FF0181F70CB73F04A518 c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"LClock"="c:\windows\LSD\LClock\lclock.exe" [2004-09-19 65536]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"EVEREST AutoStart"="c:\program files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2009-03-29 2363488]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-18 21633320]
"boincmgr"="c:\program files\BOINC\boincmgr.exe" [2008-11-17 3916544]
"Steam"="c:\program files\steam\steam.exe" [2009-06-11 1217784]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-07-31 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"="c:\windows\system32\oodtray.exe" [2007-06-28 2512128]
"HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2008-08-15 30003200]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-08 13680640]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-08 86016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb12.exe" [2005-03-08 176128]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]
"CamserviceDP"="c:\program files\Hercules\DualPix Exchange\Camservice.exe" [2007-08-10 81920]
"boinctray"="c:\program files\BOINC\boinctray.exe" [2008-11-17 58112]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-06-14 148888]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-03-08 1657376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"WinLSD_SP3"="c:\windows\LSD\end.cmd" [2008-06-17 9944]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2008-04-23 124928]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]
Lancement rapide d'Adobe Acrobat.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe [2009-6-6 295606]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"NoSMBalloonTip"= 0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"="0x00000000"
"AntiVirusDisableNotify"="0x00000000"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander\\bin\\SupremeCommander.exe"=
"c:\\Program Files\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3703:TCP"= 3703:TCP:Adobe Version Cue CS3 Server
"3704:TCP"= 3704:TCP:Adobe Version Cue CS3 Server
"50900:TCP"= 50900:TCP:Adobe Version Cue CS3 Server
"50901:TCP"= 50901:TCP:Adobe Version Cue CS3 Server

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [14/06/2009 15:13 28544]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1005000.086\SymEFA.sys [09/06/2009 17:10 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\NIS\1005000.086\BHDrvx86.sys [09/06/2009 17:10 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NIS\1005000.086\cchpx86.sys [09/06/2009 17:10 482352]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610.006\IDSXpx86.sys [12/06/2009 23:41 276344]
R2 LANPkt;Realtek LANPkt Protocol Driver;c:\windows\system32\drivers\LANPkt.sys [06/06/2009 02:28 8960]
R2 Norton Internet Security;Norton Internet Security;c:\program files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe [09/06/2009 17:10 115560]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [14/06/2009 01:32 603904]
R3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [07/06/2009 12:33 94208]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [09/06/2009 17:13 101936]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [06/06/2009 02:20 845184]
S2 ylyznc;ylyznc;c:\windows\system32\drivers\dswdcrw.sys --> c:\windows\system32\drivers\dswdcrw.sys [?]
S3 BzSpIDer;BzSpIDer;\??\k:\opiron\BzSpIDer.sys --> k:\opiron\BzSpIDer.sys [?]
S3 Diag69xp;Diag69xp;c:\windows\system32\drivers\diag69xp.sys [06/06/2009 02:28 11264]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [06/06/2009 04:15 26224]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [29/06/2007 02:01 42512]
S3 RTLVLAN;Realtek VLAN Intermediate Driver;c:\windows\system32\drivers\RTLVLAN.SYS [06/06/2009 02:28 16640]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'

2009-06-14 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-21 10:14]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKU-Default-RunOnce-tscuninstall - c:\windows\system32\tscupgrd.exe


.
------- Examen supplémentaire -------
.
uInternet Connection Wizard,ShellNext = hxxp://gomyhit.com/MTk2MjQ=/2/288//
uInternet Settings,ProxyOverride = *.local
IE: Ajouter au fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir la sélection en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la sélection en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir les liens sélectionnés en fichier Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convertir les liens sélectionnés en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath -
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-14 17:36
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files\Norton Internet Security\Engine\16.5.0.134\diMaster.dll\" /prefetch:1"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="B16E2CC24BED3E949C014FD66903A7F45FD4A4095F0D08FCDA03270CB2A42916F661B03DF67D14BF6BA50C00C5158132D81C4E24F66F260F2FEE04E5BBE8BF25697B2EF4F114FAC1123C8C8CDF26AB9521B73E27AFF54DA59E11292C3E8BD94C9F973B46423FEDCE0D6EF4B534653A7EB9C243BF1690CEE85016B2A6005BA71E0811E2B4024E18822CE85B55D1C378AF785A2344D171B165BE2CB0C25A6E0D11DF4821E35ED7D9DB94DEFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933A9C6AECB7A5D1407BA7FD869164D6794A6A0AC4980AC7933623B24FAB518F2E5A319241F829062508CF791B49EBB9D31D4791A882937E77A6FECEB316AF01B2CBD1C57347ABCF0721FA63EAF31F71DE3D0E95697F0B732BF93FCB68A3410DCD031BBBBA978E26C443FE0B38A70C4292F4230E33584EF7D09182FD5B22EC3724A35F4F62B17D7F110AE7E8D1411A3E2CE1A9C746F57A89121B86EAD1BA7BCE697F16944ABA0D6722124F8F9DEFBF4C0813CA24A9A908D0858A6C4B8F524911AB8076071DE96FD324ACBEFBDC1D0030E8801DA3F4D09AFCF8207E403BDDBBABE310741E0BEADCF4B61C32730D4DE7665AC34803FE150822CF57324AEACB995DD89769B8908CE32A8C09E04B978AC613B3617F4C977295F340F78F970C3DEE35450CF21F43C15708CC465925DCCF3B4D4755A3AF4728903D02E968491C79C4B4E1501A8C09F52380BCF91812DB9224ACA3DA978E6F91C8BC2374404F0BFFAD4536CEC2A9FBC891D8D4812224FE758DB8B639F7DDCF8BF001C1068DC7DF8B56EB96F6845D8E07593CF16CAED7F466B8959C14B36A71D85C74426E2993D023D68ACB9BD3A461B80F6E3A6127E0E08E6D5C93932392BDBB6AFF46781E5CA3034F82C6D2C70D4C24C86ADED33135D2108A9C5A9CCBDDE6A4BE63E490C92521B713A8CAE647189EF2EE2E5606C8DE4CD3ECE8CFC841ECF44F20301C13A15149F82A7F5A50DE9F7002D1519F672F5AF8AB075AE9ABBDB1F2B107C754E3A06E75EA5A4637F3FAD4B930604A9B06BF6DC9AB83192F3459A7F9DB9AE266D2BA2B439CD7524EB0AB1C2902A814A8D72DEA00363F8F1F96A223966B85A7223234BF8DAA3435C21708FAFA03D3E061595A1C18FF2A8DA23665E2A100DA50B762B06C4AD821C0556E506F72F18D0B7505AD59B4C5C00AD6CE8DEC069E996797340F9BF61F8F1E8C856F596EE46B310CBB4B51D8D4A21A15195580305B31B96AA53F421EC4B1928391FE599548A45959991204AE89794BFD586A1083A860212AD49E8B786714B366C917FA398D7C72051CF99393758C4E681C5387CA431816E16FB68E2A996265A2B75126BB8D761DB8941C69618518248DED3B921A3B430827FB72F98181AAA"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(1764)
c:\windows\system32\scecli.dll
.
Heure de fin: 2009-06-14 17:37
ComboFix-quarantined-files.txt 2009-06-14 15:37

Avant-CF: 60 207 341 568 octets libres
Après-CF: 60 225 945 600 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

375

Norton, ne me signale plus la présence de packed.generic.200. Merci beaucoup  
Que me conseilles-tu comme protection pour m'éviter d'être de nouveau confronter à ce genre de problèmes??

Menu Démarrer > Exécuter > Tape combofix /u et valide.

Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.

Double-clique sur le fichier téléchargé pour lancer le processus d'installation.

Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.

Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.

Sélectionne Exécuter un examen rapide.

Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

Citation :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.

Ferme tes navigateurs.

Si des malwares ont été détectés, clique sur Afficher les résultats.

Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

Voici le rapport :

Malwarebytes' Anti-Malware 1.37
Version de la base de données: 2276
Windows 5.1.2600 Service Pack 3

14/06/2009 18:15:23
mbam-log-2009-06-14 (18-15-23).txt

Type de recherche: Examen rapide
Eléments examinés: 88423
Temps écoulé: 5 minute(s), 3 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Télécharge SDFix (créé par AndyManchesta) sur ton Bureau.

Double-clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.

Redémarre ton ordinateur en Mode sans échec.

Pour redémarrer en mode sans échec :

Redémarre ton PC.

Au démarrage, tapote sur F8 (F5 sur certains PC) juste après l'affichage du BIOS et juste avant le chargement de Windows.

Dans le menu d'options avancées, choisis Mode sans échec.

Choisis ta session.

Déroule la liste des instructions ci-dessous :

Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer le script.

Appuie sur Y pour commencer le processus de nettoyage.

Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.

Appuie sur une touche pour redémarrer le PC.

Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.

Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.

Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.

Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse.

Voici le rapport :


SDFix: Version 1.240
Run by Administrateur on 14/06/2009 at 18:35

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

No Trojan Files Found






Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-14 18:46:35
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:2f,c4,bd,a3,1a,25,0c,48,e4,3a,14,1e,ac,c8,15,88,15,c9,03,11,94,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,90,10,32,a4,07,2c,11,56,40,6d,41,ad,44,e5,77,9b,c6,..
"hdf12"=hex:9d,83,a2,b1,6f,c1,a8,a3,45,74,07,19,bc,bc,73,83,88,03,3f,2c,99,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:74,89,fb,a0,f9,5f,f6,5b,db,ff,66,bb,2d,ef,45,9f,6a,b0,aa,34,47,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1]
"hdf12"=hex:00,45,bd,ac,82,4f,45,0d,9f,61,59,6f,eb,7d,f9,78,a2,e9,ce,ac,4b,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2]
"hdf12"=hex:c8,db,6a,fc,c2,4f,2f,86,c7,ba,d1,0a,0c,78,47,01,0f,eb,12,8c,44,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq3]
"hdf12"=hex:a1,eb,1c,af,80,51,36,97,25,e5,9d,97,a6,bb,f0,56,9d,a4,ee,f1,31,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:2f,c4,bd,a3,1a,25,0c,48,e4,3a,14,1e,ac,c8,15,88,15,c9,03,11,94,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,90,10,32,a4,07,2c,11,56,40,6d,41,ad,44,e5,77,9b,c6,..
"hdf12"=hex:9d,83,a2,b1,6f,c1,a8,a3,45,74,07,19,bc,bc,73,83,88,03,3f,2c,99,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:74,89,fb,a0,f9,5f,f6,5b,db,ff,66,bb,2d,ef,45,9f,6a,b0,aa,34,47,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1]
"hdf12"=hex:00,45,bd,ac,82,4f,45,0d,9f,61,59,6f,eb,7d,f9,78,a2,e9,ce,ac,4b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2]
"hdf12"=hex:c8,db,6a,fc,c2,4f,2f,86,c7,ba,d1,0a,0c,78,47,01,0f,eb,12,8c,44,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq3]
"hdf12"=hex:a1,eb,1c,af,80,51,36,97,25,e5,9d,97,a6,bb,f0,56,9d,a4,ee,f1,31,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG10.00.00.01WORKSTATION"="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"

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"="C:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\Fichiers communs\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"="C:\\Program Files\\Fichiers communs\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled nkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled nkBstrB"
"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"="C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"="C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe:*:Enabled:Crysis_32"
"C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"="C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander\\bin\\SupremeCommander.exe"="C:\\Program Files\\THQ\\Gas Powered Games\\Supreme Commander\\bin\\SupremeCommander.exe:*:Enabled:Supreme Commander"
"C:\\Program Files\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe"="C:\\Program Files\\THQ\\Gas Powered Games\\GPGNet\\GPG.Multiplayer.Client.exe:*:Enabled:GPGNet - Supreme Commander"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

Remaining Files :



Files with Hidden Attributes :

Thu 14 Aug 2008 393,216 ...H. --- "C:\ASUS.SYS\SplashtopDll.dll"

Finished!

Bien. J'ai un doute, fais ceci :

Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

Double-clique sur RSIT.exe afin de lancer le programme.
(Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)

Clique sur Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : les rapports sont sauvegardés dans le dossier C:\rsit.

Ok, alors voici le contenu de log.txt :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-06-14 18:56:29
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 57 GB (37%) free of 153 GB
Total RAM: 3583 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:56:30, on 14/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe
C:\WINDOWS\system32\oodtray.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\BOINC\boinctray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Windows\LSD\LClock\lclock.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files\BOINC\boincmgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\BOINC\boinc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://gomyhit.com/MTk2MjQ=/2/288//
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\IPSBHO.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [CamserviceDP] C:\Program Files\Hercules\DualPix Exchange\Camservice.exe /startup
O4 - HKLM\..\Run: [boinctray] "C:\Program Files\BOINC\boinctray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] C:\Windows\LSD\LClock\lclock.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [boincmgr] "C:\Program Files\BOINC\boincmgr.exe" /a /s
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie....
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/flashplayer/curre...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 10682 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll [2009-06-09 372592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\IPSBHO.DLL [2009-06-09 107896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-14 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-14 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\16.5.0.134\coIEPlg.dll [2009-06-09 372592]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22 321120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OODefragTray"=C:\WINDOWS\system32\oodtray.exe [2007-06-28 2512128]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2008-08-15 30003200]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-08 13680640]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-08 86016]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe [2005-03-08 176128]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2006-10-22 620152]
"Adobe_ID0EYTHM"=C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-03-20 1884160]
"CamserviceDP"=C:\Program Files\Hercules\DualPix Exchange\Camservice.exe [2007-08-10 81920]
"boinctray"=C:\Program Files\BOINC\boinctray.exe [2008-11-17 58112]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-14 148888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"LClock"=C:\Windows\LSD\LClock\lclock.exe [2004-09-19 65536]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"EVEREST AutoStart"=C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe [2009-03-30 2363488]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-11-18 21633320]
"boincmgr"=C:\Program Files\BOINC\boincmgr.exe [2008-11-17 3916544]
"Steam"=c:\program files\steam\steam.exe [2009-06-11 1217784]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2006-07-31 139264]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
Lancement rapide d'Adobe Acrobat.lnk - C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SymEFA.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoSMBalloonTip"=0
"NoDriveAutoRun"=67108863
"HonorAutoRunSetting"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe"="C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled nkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled nkBstrB"
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\Program Files\THQ\Gas Powered Games\Supreme Commander\bin\SupremeCommander.exe"="C:\Program Files\THQ\Gas Powered Games\Supreme Commander\bin\SupremeCommander.exe:*:Enabled:Supreme Commander"
"C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe"="C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe:*:Enabled:GPGNet - Supreme Commander"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2009-06-14 18:33:30 ----D---- C:\WINDOWS\ERUNT
2009-06-14 18:28:27 ----D---- C:\SDFix
2009-06-14 18:07:04 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-06-14 18:06:56 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-06-14 18:04:22 ----D---- C:\Program Files\xerox
2009-06-14 18:04:21 ----D---- C:\WINDOWS\system32\xircom
2009-06-14 18:04:21 ----D---- C:\WINDOWS\srchasst
2009-06-14 18:04:21 ----D---- C:\Program Files\windows nt
2009-06-14 18:04:21 ----D---- C:\Program Files\netmeeting
2009-06-14 18:04:21 ----D---- C:\Program Files\msn gaming zone
2009-06-14 18:04:21 ----D---- C:\Program Files\movie maker
2009-06-14 18:04:21 ----D---- C:\Program Files\Fichiers communs\speechengines
2009-06-14 18:04:20 ----D---- C:\Program Files\microsoft frontpage
2009-06-14 18:00:30 ----SHD---- C:\RECYCLER
2009-06-14 18:00:20 ----A---- C:\WINDOWS\system32\CF6488.exe
2009-06-14 17:54:02 ----RASHD---- C:\autorun.inf
2009-06-14 17:51:35 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2009-06-14 17:29:06 ----A---- C:\Boot.bak
2009-06-14 17:29:03 ----RASHD---- C:\cmdcons
2009-06-14 17:27:52 ----D---- C:\WINDOWS\ERDNT
2009-06-14 17:27:50 ----SD---- C:\IDN
2009-06-14 15:13:14 ----D---- C:\Program Files\Panda Security
2009-06-14 15:08:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-14 14:00:25 ----SHD---- C:\WINDOWS\CSC
2009-06-14 14:00:17 ----A---- C:\WINDOWS\ntbtlog.txt
2009-06-14 13:56:09 ----A---- C:\WINDOWS\system32\tmp.txt
2009-06-14 13:55:59 ----A---- C:\rapport.txt
2009-06-14 13:33:51 ----A---- C:\UsbFix.txt
2009-06-14 12:48:10 ----D---- C:\WINDOWS\Sun
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\javaws.exe
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\javaw.exe
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\java.exe
2009-06-14 12:45:59 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-06-14 12:45:53 ----D---- C:\Program Files\Java
2009-06-14 12:45:46 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2009-06-14 12:45:13 ----D---- C:\Documents and Settings\Administrateur\Application Data\Sun
2009-06-14 12:36:09 ----D---- C:\UsbFix
2009-06-14 12:26:19 ----D---- C:\rsit
2009-06-14 12:26:19 ----D---- C:\Program Files\trend micro
2009-06-14 12:15:31 ----D---- C:\Program Files\Norton Support
2009-06-14 01:32:10 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2009-06-14 01:32:08 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2009-06-14 01:32:08 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2009-06-14 01:32:07 ----D---- C:\Documents and Settings\Administrateur\Application Data\TuneUp Software
2009-06-14 01:31:58 ----D---- C:\Program Files\TuneUp Utilities 2009
2009-06-14 01:31:58 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2009-06-13 22:16:19 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-13 04:27:11 ----D---- C:\Program Files\Counter-Strike 1.6
2009-06-12 22:26:35 ----D---- C:\Documents and Settings\Administrateur\Application Data\Command & Conquer 3 Les guerres du Tiberium
2009-06-11 22:25:10 ----D---- C:\Documents and Settings\Administrateur\Application Data\Ahead
2009-06-11 22:23:54 ----D---- C:\Program Files\Nero
2009-06-11 22:23:54 ----D---- C:\Program Files\Fichiers communs\Ahead
2009-06-11 21:56:04 ----D---- C:\Program Files\Yamp 2.3
2009-06-11 20:40:48 ----D---- C:\Program Files\BOINC
2009-06-11 20:40:48 ----D---- C:\Documents and Settings\All Users\Application Data\BOINC
2009-06-11 20:40:33 ----D---- C:\WINDOWS\Downloaded Installations
2009-06-10 18:28:28 ----D---- C:\RESTORE
2009-06-10 17:31:03 ----D---- C:\Program Files\Microsoft Works
2009-06-10 17:30:56 ----D---- C:\Program Files\MSBuild
2009-06-10 17:30:47 ----D---- C:\Program Files\Microsoft Visual Studio
2009-06-10 17:30:47 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-06-10 17:30:28 ----D---- C:\Program Files\Microsoft.NET
2009-06-10 17:28:16 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-06-10 17:27:33 ----D---- C:\WINDOWS\SHELLNEW
2009-06-10 17:26:15 ----RHD---- C:\MSOCache
2009-06-09 17:10:45 ----D---- C:\Program Files\Symantec
2009-06-09 17:10:45 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2009-06-09 17:10:04 ----D---- C:\Program Files\Norton Internet Security
2009-06-08 12:57:05 ----D---- C:\Documents and Settings\All Users\Application Data\PCSettings
2009-06-08 12:57:05 ----D---- C:\Documents and Settings\All Users\Application Data\Norton
2009-06-08 12:40:17 ----D---- C:\Program Files\NortonInstaller
2009-06-08 12:40:17 ----D---- C:\Documents and Settings\All Users\Application Data\NortonInstaller
2009-06-08 11:20:33 ----D---- C:\Documents and Settings\Administrateur\Application Data\skypePM
2009-06-08 11:17:48 ----D---- C:\Documents and Settings\Administrateur\Application Data\Skype
2009-06-08 11:17:11 ----D---- C:\Program Files\Skype
2009-06-08 11:17:11 ----D---- C:\Program Files\Fichiers communs\Skype
2009-06-08 02:14:09 ----D---- C:\Program Files\Microsoft Silverlight
2009-06-07 12:33:18 ----A---- C:\WINDOWS\system32\csnp2uvc.dll
2009-06-07 12:33:17 ----A---- C:\WINDOWS\system32\vsnp2uvc.dll
2009-06-07 12:33:17 ----A---- C:\WINDOWS\system32\rsnp2uvc.dll
2009-06-07 12:33:17 ----A---- C:\WINDOWS\snp2uvc.ini
2009-06-07 12:32:56 ----A---- C:\WINDOWS\ffmpeg.exe
2009-06-07 12:32:52 ----D---- C:\WINDOWS\system32\HWC HD
2009-06-07 12:32:52 ----D---- C:\Program Files\Hercules
2009-06-06 22:20:18 ----D---- C:\Documents and Settings\All Users\Application Data\RICOH
2009-06-06 22:20:18 ----A---- C:\WINDOWS\ricdb.ini
2009-06-06 08:37:22 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2009-06-06 08:23:37 ----D---- C:\temp
2009-06-06 08:22:55 ----D---- C:\Documents and Settings\All Users\Application Data\Media Center Programs
2009-06-06 07:59:44 ----D---- C:\Program Files\THQ
2009-06-06 07:59:44 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-06-06 07:59:44 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-06-06 07:59:42 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-06-06 07:59:42 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-06-06 07:53:48 ----D---- C:\Program Files\Steam
2009-06-06 07:49:47 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-06-06 07:48:40 ----HDC---- C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
2009-06-06 07:41:03 ----D---- C:\WINDOWS\system32\oodag
2009-06-06 07:33:18 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-06-06 07:33:10 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-06-06 07:33:10 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-06-06 07:33:09 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-06-06 07:33:08 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-06-06 07:33:08 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-06-06 07:33:07 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-06-06 07:33:03 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-06-06 07:22:09 ----D---- C:\Program Files\WARCRAFT III
2009-06-06 07:20:58 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-06-06 07:16:03 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-06-06 04:50:37 ----RA---- C:\WINDOWS\system32\vp6vfw.dll
2009-06-06 04:50:36 ----D---- C:\Program Files\Microsoft WSE
2009-06-06 04:49:34 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-06-06 04:49:29 ----D---- C:\WINDOWS\Logs
2009-06-06 04:15:46 ----D---- C:\Program Files\Lavalys
2009-06-06 03:56:39 ----D---- C:\Program Files\Electronic Arts
2009-06-06 03:54:52 ----A---- C:\WINDOWS\system32\h323log.txt
2009-06-06 03:53:56 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-06-06 03:53:13 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-06-06 03:53:11 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-06-06 03:52:12 ----A---- C:\WINDOWS\system32\usbui.dll
2009-06-06 03:51:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-06-06 03:51:27 ----SHD---- C:\WINDOWS\Installer
2009-06-06 03:51:27 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-06-06 03:51:27 ----D---- C:\Program Files\Fichiers communs
2009-06-06 03:51:27 ----D---- C:\Program Files
2009-06-06 03:51:27 ----A---- C:\WINDOWS\ODBCINST.INI
2009-06-06 03:51:17 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-06-06 03:51:17 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-06-06 03:51:17 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-06-06 03:51:15 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-06-06 03:51:13 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-06-06 03:51:12 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-06-06 03:51:10 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-06-06 03:51:07 ----A---- C:\WINDOWS\system32\irclass.dll
2009-06-06 03:51:05 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-06-06 03:51:05 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-06-06 03:51:04 ----A---- C:\WINDOWS\system32\batt.dll
2009-06-06 03:51:04 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-06-06 03:51:00 ----A---- C:\WINDOWS\system32\storprop.dll
2009-06-06 03:50:54 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-06-06 03:49:07 ----RA---- C:\WINDOWS\SET7.tmp
2009-06-06 03:49:06 ----RA---- C:\WINDOWS\SET4.tmp
2009-06-06 03:49:04 ----RA---- C:\WINDOWS\SET3.tmp
2009-06-06 03:49:01 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-06 03:49:01 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-06 03:48:55 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-06-06 03:48:17 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-06-06 03:48:14 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-06-06 03:48:13 ----D---- C:\Documents and Settings
2009-06-06 03:48:12 ----SHD---- C:\System Volume Information
2009-06-06 03:48:11 ----A---- C:\WINDOWS\game.ini
2009-06-06 03:47:15 ----RASH---- C:\boot.ini
2009-06-06 03:46:11 ----D---- C:\Documents and Settings\All Users\Application Data\TrackMania
2009-06-06 03:45:08 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-06 03:45:08 ----HD---- C:\WINDOWS\inf
2009-06-06 03:45:08 ----D---- C:\WINDOWS\WinSxS
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Web
2009-06-06 03:45:08 ----D---- C:\WINDOWS\WBEM
2009-06-06 03:45:08 ----D---- C:\WINDOWS\twain_32
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Temp
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\wins
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\wbem
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\usmt
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\spool
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\ShellExt
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\Setup
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\ras
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\oobe
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\npp
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\mui
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\inetsrv
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\IME
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\icsxml
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\ias
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\fr
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\export
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\drivers
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\dhcp
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\config
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\3com_dmi
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\3076
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\2052
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1054
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1042
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1041
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1037
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1036
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1033
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1031
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1028
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32\1025
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system32
2009-06-06 03:45:08 ----D---- C:\WINDOWS\system
2009-06-06 03:45:08 ----D---- C:\WINDOWS\security
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Resources
2009-06-06 03:45:08 ----D---- C:\WINDOWS\repair
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Provisioning
2009-06-06 03:45:08 ----D---- C:\WINDOWS\PeerNet
2009-06-06 03:45:08 ----D---- C:\WINDOWS\PCHealth
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Offline Web Pages
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Network Diagnostic
2009-06-06 03:45:08 ----D---- C:\WINDOWS\mui
2009-06-06 03:45:08 ----D---- C:\WINDOWS\msapps
2009-06-06 03:45:08 ----D---- C:\WINDOWS\msagent
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Media
2009-06-06 03:45:08 ----D---- C:\WINDOWS\L2Schemas
2009-06-06 03:45:08 ----D---- C:\WINDOWS\java
2009-06-06 03:45:08 ----D---- C:\WINDOWS\ime
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Help
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Fonts
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Driver Cache
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Debug
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Cursors
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Connection Wizard
2009-06-06 03:45:08 ----D---- C:\WINDOWS\Config
2009-06-06 03:45:08 ----D---- C:\WINDOWS\AppPatch
2009-06-06 03:45:08 ----D---- C:\WINDOWS\addins
2009-06-06 03:45:08 ----D---- C:\WINDOWS
2009-06-06 03:43:40 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-06-06 03:43:40 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-06-06 03:43:39 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-06-06 03:43:36 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-06-06 03:43:35 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-06-06 03:43:34 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-06-06 03:43:34 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-06-06 03:43:34 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-06-06 03:40:02 ----D---- C:\Program Files\TmUnitedForever
2009-06-06 03:38:52 ----D---- C:\Program Files\Activision
2009-06-06 03:37:42 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2009-06-06 03:37:40 ----SHD---- C:\WINDOWS\ftpcache
2009-06-06 03:26:04 ----D---- C:\Documents and Settings\Administrateur\Application Data\WinRAR
2009-06-06 03:23:54 ----D---- C:\Program Files\Fichiers communs\Control Panels
2009-06-06 03:22:14 ----D---- C:\Documents and Settings\All Users\Application Data\ALM
2009-06-06 03:16:06 ----D---- C:\Program Files\QuickTime
2009-06-06 03:13:25 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-06-06 03:13:24 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-06-06 03:13:20 ----D---- C:\WINDOWS\system32\DirectX
2009-06-06 03:11:38 ----SHD---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-06-06 03:11:15 ----A---- C:\WINDOWS\system32\NPSWF32_FlashUtil.exe
2009-06-06 03:11:15 ----A---- C:\WINDOWS\system32\NPSWF32.dll
2009-06-06 03:08:56 ----D---- C:\Program Files\EA GAMES
2009-06-06 03:08:29 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-06-06 03:06:34 ----D---- C:\Program Files\Bonjour
2009-06-06 03:05:00 ----D---- C:\Program Files\Adobe
2009-06-06 03:03:58 ----D---- C:\Program Files\Fichiers communs\Macrovision Shared
2009-06-06 03:03:46 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-06-06 03:02:47 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-06-06 03:01:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\LEA
2009-06-06 03:01:20 ----D---- C:\Program Files\LEA
2009-06-06 03:01:20 ----D---- C:\Documents and Settings\Administrateur\Application Data\SoftPlug
2009-06-06 03:01:13 ----D---- C:\Program Files\WinPcap
2009-06-06 02:56:02 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2009-06-06 02:55:20 ----D---- C:\Program Files\adslTV
2009-06-06 02:51:13 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-06-06 02:51:07 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-06-06 02:51:06 ----D---- C:\Program Files\DAEMON Tools Lite
2009-06-06 02:48:29 ----D---- C:\Documents and Settings\Administrateur\Application Data\HP
2009-06-06 02:43:59 ----D---- C:\Documents and Settings\Administrateur\Application Data\Symantec
2009-06-06 02:43:14 ----D---- C:\Program Files\Windows Sidebar
2009-06-06 02:42:21 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-06-06 02:41:58 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-06-06 02:39:24 ----D---- C:\WINDOWS\nview
2009-06-06 02:39:24 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-06-06 02:39:04 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-06-06 02:38:49 ----D---- C:\Program Files\Microsoft Office
2009-06-06 02:38:49 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-06-06 02:37:05 ----D---- C:\Documents and Settings\Administrateur\Application Data\Sites prédéfinis
2009-06-06 02:36:49 ----D---- C:\Documents and Settings\Administrateur\Application Data\Dynamique
2009-06-06 02:36:43 ----D---- C:\Program Files\Visicom Media
2009-06-06 02:36:28 ----D---- C:\Documents and Settings\Administrateur\Application Data\DAEMON Tools Lite
2009-06-06 02:35:58 ----D---- C:\Program Files\Messenger Plus! Live
2009-06-06 02:33:46 ----D---- C:\Program Files\Microsoft
2009-06-06 02:33:32 ----D---- C:\Program Files\Windows Live SkyDrive
2009-06-06 02:33:08 ----D---- C:\Documents and Settings\All Users\Application Data\Corel
2009-06-06 02:33:07 ----D---- C:\My Music
2009-06-06 02:32:57 ----D---- C:\Program Files\Fichiers communs\Corel
2009-06-06 02:32:57 ----D---- C:\Program Files\Corel
2009-06-06 02:32:43 ----D---- C:\Program Files\Windows Live
2009-06-06 02:30:09 ----HD---- C:\ASUS.000
2009-06-06 02:30:04 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-06-06 02:29:58 ----HD---- C:\ASUS.SYS
2009-06-06 02:29:39 ----D---- C:\Program Files\Downloaded Installations
2009-06-06 02:28:43 ----A---- C:\WINDOWS\system32\RTLVLAN_NB.DLL
2009-06-06 02:28:28 ----RA---- C:\WINDOWS\system32\AsIO.dll
2009-06-06 02:28:17 ----D---- C:\Program Files\ASUS
2009-06-06 02:22:32 ----D---- C:\WINDOWS\OPTIONS
2009-06-06 02:22:32 ----D---- C:\Program Files\Realtek
2009-06-06 02:22:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\InstallShield
2009-06-06 02:21:07 ----D---- C:\WINDOWS\AsusInstAll
2009-06-06 02:21:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-06 02:21:03 ----D---- C:\Program Files\WinRAR
2009-06-06 02:21:00 ----D---- C:\Program Files\VideoLAN
2009-06-06 02:20:48 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-06-06 02:20:46 ----N---- C:\WINDOWS\system32\difxapi.dll
2009-06-06 02:20:46 ----D---- C:\Program Files\VIA
2009-06-06 02:20:43 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-06-06 02:20:32 ----D---- C:\Program Files\Mozilla Firefox
2009-06-06 02:20:19 ----A---- C:\WINDOWS\OODCNT.INI
2009-06-06 02:19:36 ----D---- C:\Program Files\OO Software
2009-06-06 02:17:30 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-06-06 02:17:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-06-06 02:17:28 ----D---- C:\Program Files\Intel
2009-06-06 02:17:21 ----D---- C:\Intel
2009-06-06 02:17:06 ----A---- C:\WINDOWS\Ascd_log.ini
2009-06-06 02:16:52 ----A---- C:\WINDOWS\Ascd_tmp.ini
2009-06-06 02:13:02 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2009-06-06 02:13:01 ----HD---- C:\Program Files\Uninstall Information
2009-06-06 02:12:56 ----H---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2009-06-06 02:12:55 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-06-06 02:12:55 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2009-06-06 02:06:49 ----D---- C:\WINDOWS\SoftwareDistribution
2009-06-06 02:06:47 ----D---- C:\WINDOWS\Prefetch
2009-06-06 02:06:46 ----SD---- C:\WINDOWS\system32\Microsoft
2009-06-06 02:06:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-06 02:04:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-06-06 02:04:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-06-06 02:04:25 ----D---- C:\WINDOWS\ie7updates
2009-06-06 02:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-06-06 02:04:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2009-06-06 02:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-06-06 02:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$
2009-06-06 02:04:09 ----D---- C:\WINDOWS\system32\PreInstall
2009-06-06 02:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-06-06 02:00:38 ----RSD---- C:\WINDOWS\assembly
2009-06-06 02:00:38 ----D---- C:\WINDOWS\system32\URTTemp
2009-06-06 02:00:38 ----D---- C:\WINDOWS\Microsoft.NET
2009-06-06 02:00:22 ----N---- C:\WINDOWS\system32\LegitCheckControl.dll
2009-06-06 01:59:48 ----D---- C:\WINDOWS\LSD
2009-06-06 01:59:48 ----A---- C:\WINDOWS\system32\oeminfo.ini
2009-06-06 01:59:20 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-06 01:59:17 ----D---- C:\WINDOWS\system32\LogFiles
2009-06-06 01:59:12 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-06-06 01:58:54 ----D---- C:\Program Files\Windows Media Connect 2
2009-06-06 01:58:53 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-06-06 01:58:38 ----A---- C:\WINDOWS\control.ini
2009-06-06 01:58:38 ----A---- C:\AUTOEXEC.BAT
2009-06-06 01:58:31 ----A---- C:\WINDOWS\OEWABLog.txt
2009-06-06 01:58:28 ----D---- C:\WINDOWS\system32\dllcache
2009-06-06 01:58:28 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-06-06 01:58:03 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-06-06 01:58:00 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-06-06 01:57:57 ----HD---- C:\Program Files\WindowsUpdate
2009-06-06 01:57:44 ----A---- C:\WINDOWS\system32\desktop.ini
2009-06-06 01:57:44 ----A---- C:\WINDOWS\desktop.ini
2009-06-06 01:57:43 ----A---- C:\WINDOWS\system32\acctres.dll
2009-06-06 01:57:42 ----D---- C:\Program Files\Fichiers communs\Services
2009-06-06 01:57:39 ----SD---- C:\WINDOWS\Tasks
2009-06-06 01:57:39 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-06-06 01:57:38 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-06-06 01:57:34 ----D---- C:\WINDOWS\system32\Macromed
2009-06-06 01:57:28 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-06-06 01:57:28 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-06-06 01:57:27 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-06-06 01:57:27 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wups.dll
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-06-06 01:57:26 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-06-06 01:57:25 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-06-06 01:57:24 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-06-06 01:56:51 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-06-06 01:56:51 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-06-06 01:56:50 ----D---- C:\WINDOWS\system32\Restore
2009-06-06 01:56:50 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\srclient.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-06-06 01:56:49 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-06-06 01:56:46 ----A---- C:\WINDOWS\system32\inetres.dll
2009-06-06 01:56:45 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-06-06 01:56:41 ----D---- C:\Program Files\Outlook Express
2009-06-06 01:56:41 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-06-06 01:56:41 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-06-06 01:56:41 ----A---- C:\WINDOWS\system32\mstask.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\isign32.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-06-06 01:56:40 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-06-06 01:56:28 ----D---- C:\Program Files\Fichiers communs\System
2009-06-06 01:56:27 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-06-06 01:56:25 ----D---- C:\Program Files\Internet Explorer
2009-06-06 01:56:01 ----D---- C:\Program Files\ComPlus Applications
2009-06-06 01:55:59 ----A---- C:\WINDOWS\vbaddin.ini
2009-06-06 01:55:59 ----A---- C:\WINDOWS\vb.ini
2009-06-06 01:55:56 ----D---- C:\WINDOWS\Registration
2009-06-06 01:55:50 ----D---- C:\Program Files\Windows Media Player
2009-06-06 01:55:47 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tskill.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\tscon.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\reset.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\getuname.dll
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\charmap.exe
2009-06-06 01:55:45 ----A---- C:\WINDOWS\system32\calc.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\shadow.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\regini.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\msg.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\logoff.exe
2009-06-06 01:55:44 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-06-06 01:55:39 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-06-06 01:55:38 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-06-06 01:55:37 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-06-06 01:55:36 ----D---- C:\WINDOWS\system32\MsDtc
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-06-06 01:55:36 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-06-06 01:55:35 ----D---- C:\WINDOWS\system32\Com
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-06-06 01:55:35 ----A---- C:\WINDOWS\system32\colbact.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\stclient.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-06-06 01:55:34 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\comuid.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-06-06 01:55:33 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-06-06 01:55:28 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2009-06-14 17:36:27 ----A---- C:\WINDOWS\system.ini
2009-06-10 17:27:45 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2007-12-17 12400]
R1 BHDrvx86;Symantec Heuristics Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\BHDrvx86.sys []
R1 ccHP;Symantec Hash Provider; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\ccHPx86.sys []
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20090610.006\IDSxpx86.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 SRTSP;Symantec Real Time Storage Protection; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SRTSP.SYS []
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SRTSPX.SYS []
R1 SYMTDI;Symantec Network Dispatch Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMTDI.SYS []
R2 LANPkt;Realtek LANPkt Protocol Driver; C:\WINDOWS\system32\DRIVERS\LANPkt.sys [2007-11-20 8960]
R3 camfilt2;camfilt2; C:\WINDOWS\System32\Drivers\camfilt2.sys [2007-05-29 94208]
R3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 monfilt;monfilt; C:\WINDOWS\system32\drivers\monfilt.sys [2008-02-14 1389056]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-06-01 12288]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-15 5810]
R3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090613.023\NAVEX15.SYS []
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-03-08 6288672]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-21 104320]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2007-05-16 9602944]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMFW;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMFW.SYS []
R3 SYMIDS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMIDS.SYS []
R3 SymIMMP;SymIMMP; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-06-09 36400]
R3 SYMNDIS;Symantec Network Filter Driver; \??\C:\WINDOWS\system32\drivers\NIS\1005000.086\SYMNDIS.SYS []
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-07-25 845184]
S2 ylyznc;ylyznc; C:\WINDOWS\system32\drivers\dswdcrw.sys []
S3 ave0fzou;ave0fzou; C:\WINDOWS\system32\drivers\ave0fzou.sys []
S3 BzSpIDer;BzSpIDer; \??\K:\OPiron\BzSpIDer.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 Diag69xp;Diag69xp; C:\WINDOWS\System32\Drivers\Diag69xp.sys [2007-12-03 11264]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Pilote du Moniteur réseau; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-06-29 42512]
S3 RTLVLAN;Realtek VLAN Intermediate Driver; C:\WINDOWS\system32\DRIVERS\RTLVLAN.SYS [2007-11-20 16640]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\SymIM.sys [2009-06-09 36400]
S3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-06-14 152984]
R2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe [2009-06-09 115560]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-03-08 163908]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2007-06-28 1049856]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-06-07 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-06-13 189072]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2006-11-02 174656]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2009-06-14 603904]
R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-06-06 654848]
S3 Adobe Version Cue CS3;Adobe Version Cue CS3 {fr_FR} ; C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-07-31 720896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-06-29 92792]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-06-14 362240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Et là le contenu de info.txt :
info.txt logfile of random's system information tool 1.06 2009-06-14 12:26:24

info.txt logfile of random's system information tool 1.06 2009-06-14 12:26:24

======Uninstall list======

-->C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe BridgeTalk Plugin CS3-->MsiExec.exe /I{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
Adobe Creative Suite 3 Design Premium-->MsiExec.exe /I{B1EF7B00-8FCC-4209-BFB6-37C50B354B2A}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe Dreamweaver CS3-->MsiExec.exe /I{4BDB76C6-902E-41D5-9064-68768E02886B}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Extension Manager CS3-->MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3}
Adobe Flash CS3-->MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C}
Adobe Flash Video Encoder-->MsiExec.exe /I{1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E}
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Illustrator CS3-->MsiExec.exe /I{6E08CE13-C2AB-4749-9335-5900B958929E}
Adobe InDesign CS3 Icon Handler-->MsiExec.exe /I{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}
Adobe InDesign CS3-->MsiExec.exe /I{FE8327F9-3AC1-4586-8C7E-3DEE2BC92441}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe MotionPicture Color Files-->MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->MsiExec.exe /I{C1FA4B3B-1625-4922-9C9D-780E8FCE161A}
Adobe Setup-->MsiExec.exe /I{9D3F3D5A-BE6D-48C4-B51E-E2D6753ABCDE}
Adobe SING CS3-->MsiExec.exe /I{B671CBFD-4109-4D35-9252-3062D3CCB7B2}
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe Version Cue CS3 Server-->MsiExec.exe /I{1D58229F-C505-45CA-8223-F35F3A34B963}
Adobe WAS CS3-->MsiExec.exe /I{C5BD220A-EFE8-48A5-B70E-9503D535FACE}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
adsl TV-->C:\Program Files\adslTV\Uninstal.exe
Advertisement Service-->C:\WINDOWS\system32\net.net Uninstall
AHV content for Acrobat and Flash-->MsiExec.exe /I{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}
Ajouter ou supprimer Adobe Creative Suite 3 Design Premium-->C:\Program Files\Fichiers communs\Adobe\Installers\e79070e1ef25043cbd93191267ecaf0\Setup.exe
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ASUSUpdate-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{587178E7-B1DF-494E-9838-FA4DD36E873C}\setup.exe" -l0x40c
Battlefield 2 : Forces Spéciales-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{50D4CB89-AF34-4978-96DC-C3034062E901}\setup.exe" -l0x40c -removeonly
Battlefield 2 Server-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F3CA370F-0B4B-4239-BF5A-2CC751EB5D3C}\setup.exe" -l0x9 -removeonly
Battlefield 2(TM)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x40c -removeonly
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch-->C:\Program Files\InstallShield Installation Information\{E5141379-B2D9-4BBC-BB2A-5805541571DD}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Command & Conquer 3-->MsiExec.exe /I{B0C30E93-D3D9-4F04-A2AC-54749B573275}
Condition Zero Deleted Scenes-->"C:\Program Files\Steam\steam.exe" steam://uninstall/100
Condition Zero-->"C:\Program Files\Steam\steam.exe" steam://uninstall/80
Corel Snapfire Plus-->MsiExec.exe /X{7ADE3A47-B425-45E9-8FF6-11BE2B775645}
Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
Crysis WARHEAD(R)-->"C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}\setup.exe" REMOVE=TRUE MODIFY=FALSE
Crysis WARHEAD(R)-->C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}\setup.exe
Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Diagnostics Utility-->C:\Program Files\InstallShield Installation Information\{88253B77-33C9-4A9D-9E4C-4579E39D9158}\setup.exe -runfromtemp -l0x040c -removeonly
EVEREST Ultimate Edition v5.01-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Express Gate-->MsiExec.exe /I{A0494B41-EBD7-4C0D-91B7-DC39741B27BB}
FTP Expert 3-->"C:\Program Files\Visicom Media\FTP Expert 3\uninst-ftp.exe"
GPGNet-->MsiExec.exe /I{C194D333-B84A-4BB7-B35E-060732D98DC4}
Half-Life 2: Deathmatch-->"C:\Program Files\Steam\steam.exe" steam://uninstall/320
Half-Life 2: Episode One-->"C:\Program Files\Steam\steam.exe" steam://uninstall/380
Half-Life 2: Lost Coast-->"C:\Program Files\Steam\steam.exe" steam://uninstall/340
Half-Life Deathmatch: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/360
Hercules DualPix Exchange Webcam-->C:\Program Files\InstallShield Installation Information\{04BEFF7A-DF5D-4E49-AB46-BA3D3BE49FCB}\setup.exe -runfromtemp -l0x040c -removeonly
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Sims™ 3-->"C:\Program Files\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\Sims3Setup.exe" -runfromtemp -l0x040c -removeonly
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
Nero 7 Premium-->MsiExec.exe /I{11439F51-B8D2-4736-9CDF-8889FEBE1036}
Norton Internet Security-->C:\Program Files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\562C4DD5\16.5.0.134\InstStub.exe /X
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
O&O Defrag Professional Edition-->MsiExec.exe /I{53480330-E1D1-41CA-B8F8-7F78644F7F50}
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PC Probe II-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}\setup.exe" -l0x40c
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\Setup.exe -runfromtemp -l0x040c -removeonly
Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SoftPlug V3.1.0-->MsiExec.exe /X{876D774C-04D0-4796-B6A0-B7945340847D}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Supreme Commander-->C:\Program Files\InstallShield Installation Information\{25A1E6A4-2DBD-4AC0-8650-8EA9A45B183D}\setup.exe -runfromtemp -l0x040c -removeonly
TestLAB 2008 Evaluation-->"C:\Program Files\AxBx\TestLAB 2008 Evaluation\unins000.exe"
TmUnitedForever-->"C:\Program Files\TmUnitedForever\unins000.exe"
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
UK Amateur Hannah's Pictures-->"C:\WINDOWS\system32\uninstall UK_Amate.exe"
VIA Gestionnaire de périphériques de plate-forme-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinPcap 4.0.1-->C:\Program Files\WinPcap\uninstall.exe
World Community Grid - BOINC for Windows-->MsiExec.exe /I{E7394983-3869-46F4-A117-EB148F104D79}
Yamp v 2.3-->"C:\Program Files\Yamp 2.3\unins000.exe"

======Hosts File======

127.0.0.1 mpa.one.microsoft.com

Securitycenter WMI appears to be broken

======System event log======

Computer Name: GUTS
Event Code: 6011
Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers GUTS.

Record Number: 5
Source Name: EventLog
Time Written: 20090606015454.000000+120
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 7
Message: Le périphérique \Device\CdRom0 comporte un bloc défectueux.

Record Number: 4
Source Name: Cdrom
Time Written: 20090606035123.000000+120
Event Type: erreur
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Pendant la validation de \Device\Serial0 en tant que port série, une FIFO a été détectée. La FIFO sera utilisée.

Record Number: 3
Source Name: Serial
Time Written: 20090606034835.000000+120
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 2
Source Name: EventLog
Time Written: 20090606034819.000000+120
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20090606034819.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: GUTS
Event Code: 1000
Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 5
Source Name: LoadPerf
Time Written: 20090606015553.000000+120
Event Type: Informations
User:

Computer Name: GUTS
Event Code: 1000
Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 4
Source Name: LoadPerf
Time Written: 20090606015550.000000+120
Event Type: Informations
User:

Computer Name: GUTS
Event Code: 1000
Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 3
Source Name: LoadPerf
Time Written: 20090606015521.000000+120
Event Type: Informations
User:

Computer Name: GUTS
Event Code: 1000
Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 2
Source Name: LoadPerf
Time Written: 20090606015508.000000+120
Event Type: Informations
User:

Computer Name: GUTS
Event Code: 1000
Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 1
Source Name: LoadPerf
Time Written: 20090606015459.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"DEVMGR_SHOW_DETAILS"=1

-----------------EOF-----------------

Désinstalle DAEMON Tools Toolbar.

Télécharge OTM (OldTimer) sur ton Bureau.

Double-clique sur OTM.exe afin de le lancer.

Copie (Ctrl+C) le texte suivant ci-dessous :

:processes
explorer.exe

:services
ave0fzou
ylyznc

:files
C:\WINDOWS\system32\tmp.txt
C:\Program Files\DAEMON Tools Toolbar
C:\WINDOWS\system32\drivers\dswdcrw.sys

:commands
[purity]
[emptytemp]
[reboot]

Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

Clique maintenant sur le bouton MoveIt! puis ferme OTM.

---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
---> Le nom du rapport correspond au moment de sa création : date_heure.log

Voici le rapport :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
Service\Driver ave0fzou not found.
Service\Driver ave0fzou not found.
Service\Driver ave0fzou not found.
Service\Driver ylyznc deleted successfully.
========== FILES ==========
C:\WINDOWS\system32\tmp.txt moved successfully.
File/Folder C:\Program Files\DAEMON Tools Toolbar not found.
File/Folder C:\WINDOWS\system32\drivers\dswdcrw.sys not found.
========== COMMANDS ==========
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.Word\~WRS{9934B26B-10EB-4539-BDFE-71F4B4576E9D}.tmp scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\343W9TWF\ADSAdClient31[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\JET52B.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_630.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7e8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.

OTM by OldTimer - Version 2.1.0.1 log created on 06142009_191424

Files moved on Reboot...
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.Word\~WRS{9934B26B-10EB-4539-BDFE-71F4B4576E9D}.tmp moved successfully.
File C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\343W9TWF\ADSAdClient31[1].htm not found!
File C:\WINDOWS\temp\JET52B.tmp not found!
File C:\WINDOWS\temp\Perflib_Perfdata_630.dat not found!
File C:\WINDOWS\temp\Perflib_Perfdata_7e8.dat not found!
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\urlclassifier3.sqlite moved successfully.

Registry entries deleted on Reboot...

Plus de souci ?

J'effectue une analyse, je reboot et je te dis ce qu'il en est   à tout de suite.

Pfiou bin j'ai fait une analyse de tout mes disques et en complète du sytème donc c'est un peu long, mais j'ai bientot fini. je te tiens au courant dès que j'ai reboot le pc   Merci pour tout le temps que tu passes !!

Si tout est OK, je te donnerai une dernière procédure avec des conseils.

Alors, j'ai effectué l'analyse, il ne trouve plus rien. Mais lors du démarrage, norton me signale qu'il a détecté packed.generic.200. Donc j'ai effectué à nouveau une analyse et il me dit qu'il ne trouve rien. Mdr :s

C'est peut-être un point de restauration infecté.


1/

Désinstalle HijackThis.

Télécharge ToolsCleaner2 sur ton Bureau.

Double-clique sur ToolsCleaner2.exe pour le lancer.

Clique sur Recherche et laisse le scan agir.

Clique sur Suppression pour finaliser.

Tu peux, si tu le souhaites, te servir des Options Facultatives.

Clique sur Quitter pour obtenir le rapport.

Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


2/

Télécharge et installe CCleaner Slim.

Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....

Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.


3/

Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


==Prévention==

Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

Par rapport au P2P : Lien

Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


==Problème résolu ?==

Si tu estimes que ton problème est résolu :

---> Ajoute maintenant [Résolu] au titre. Pour cela :

Clique, dans ton premier message, sur le bouton Editer .

Rajoute la mention [Résolu] devant le titre.

Clique ensuite sur Valider votre message.


Sois plus vigilant(e) sur Internet  

Voici le rapport de Tools Cleaner :
[ Rapport ToolsCleaner version 2.3.6 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\UsbFix.txt: trouvé !
C:\SDFIX: trouvé !
C:\_OTM: trouvé !
C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur\Bureau\SdFix.exe: trouvé !
C:\Documents and Settings\Administrateur\Bureau\OTM.exe: trouvé !
C:\Documents and Settings\Administrateur\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\Administrateur\Bureau\SdFix.exe: supprimé !
C:\Documents and Settings\Administrateur\Bureau\OTM.exe: supprimé !
C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\UsbFix.txt: supprimé !
C:\Documents and Settings\Administrateur\Bureau\Rsit.exe: supprimé !
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\SDFIX: supprimé !
C:\_OTM: supprimé !
C:\UsbFix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\UsbFix: supprimé !

Corbeille vidée!
Fichiers temporaires nettoyés !

Tout a été effectué.

Merci pour tout !!  

Et pour le coup, c'est plutôt faire attention quand tu laisses un ami travailler sur ton PC! LOL  

Merci beaucoup  

Tu peux supprimer ToolsCleaner.

Bonne soirée  

Merci   Bonne soirée à toi aussi !!