Trojan ou virus ? [Résolu]

bonjours.
donc voila j'ai remarquer que une fenêtre noir cmd se ouvre et se ferme rapidement de plus de msn me fait un message erreur un peu bizarre



merci de m'aider

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-06-15 13:01:38
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 19 GB (34%) free of 56 GB
Total RAM: 3071 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:01:42, on 15/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Acunetix\Web Vulnerability Scanner 6\WVSScheduler.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Program Files\VMware\VMware Player\vmware-authd.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\netlos.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\vsnpstd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\ManyCam 2.4\ManyCam.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Administrateur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\netlos.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [SoundMan] C:\WINDOWS\system32\dllcache\SOUNDMAN.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NodEnabler] C:\Program Files\ESET\ESET Smart Security\NodEnabler\NodEnabler.exe /s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ManyCam] "C:\Program Files\ManyCam 2.4\ManyCam.exe"
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [PSwitch] C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = ?
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware player\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware player\vsocklib.dll
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/ [...] hcImpl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/micros [...] 8766973984
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 8766963390
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537 [...] scan53.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O23 - Service: Acunetix WVS Scheduler v6 (AcuWVSSchedulerv6) - Acunetix Ltd. - C:\Program Files\Acunetix\Web Vulnerability Scanner 6\WVSScheduler.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CiSvc - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Player\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe

--
End of file - 11596 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2009-05-07 5931848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-25 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5A1691B-D188-4419-AD02-90002030B8EE}]
FlashFXP Helper for Internet Explorer - C:\PROGRA~1\FlashFXP\IEFlash.dll [2006-03-31 191096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-04-25 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2009-05-07 5931848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\system32\dllcache\SOUNDMAN.exe [2009-06-13 94208]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-12-06 69216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]
"SNPSTD2"=C:\WINDOWS\vsnpstd2.exe [2004-08-30 286720]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-09-17 13574144]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-09-17 86016]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-04-09 2029640]
"NodEnabler"=C:\Program Files\ESET\ESET Smart Security\NodEnabler\NodEnabler.exe [2009-04-20 373327]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"ManyCam"=C:\Program Files\ManyCam 2.4\ManyCam.exe [2009-03-16 1824040]
"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2009-05-07 160592]
"PSwitch"=C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe [2009-05-28 4600832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-04-09 2029640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-03-12 342312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Piracy]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-05-26 1283344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2008-09-17 13574144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSwitch]
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RarSFX0\App\ProxySwitcher.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime Alternative\qttask.exe [2009-01-05 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoboForm]
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2009-05-07 160592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe [2009-05-29 1217784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMware hqtray]
C:\Program Files\VMware\VMware Player\hqtray.exe [2009-03-26 64048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrateur^Menu Démarrer^Programmes^Démarrage^AutoClick.lnk]
C:\PROGRA~1\AUTOCL~1\AUTOCL~1.EXE [2009-03-17 462848]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
NETGEAR WG111v2 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v2\WG111v2.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2007-06-26 133632]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, digiwet.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"ForceStartMenuLogoff"=0
"NoResolveTrack"=1
"NoResolveSearch"=1
"NoInstrumentation"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe"="C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Application de pilotage à distance TeamViewer"
"C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Documents and Settings\Administrateur\Bureau\Spy-Net [RAT] v1.8\spynet.exe"="C:\Documents and Settings\Administrateur\Bureau\Spy-Net [RAT] v1.8\spynet.exe:*:Enabled:spynet"
"C:\Documents and Settings\Administrateur\Bureau\PI2.3.2\Poison Ivy 2.3.2.exe"="C:\Documents and Settings\Administrateur\Bureau\PI2.3.2\Poison Ivy 2.3.2.exe:*:Enabledoison Ivy Remote Administration"
"C:\Documents and Settings\Administrateur\Bureau\Spy-Net [RAT] v1.8\PI2.3.2\Poison Ivy 2.3.2.exe"="C:\Documents and Settings\Administrateur\Bureau\Spy-Net [RAT] v1.8\PI2.3.2\Poison Ivy 2.3.2.exe:*:Enabledoison Ivy Remote Administration"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ENABLE"
"C:\Program Files\VMware\VMware Player\vmware-authd.exe"="C:\Program Files\VMware\VMware Player\vmware-authd.exe:*:Enabled:VMware Authd"
"C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe"="C:\Program Files\Proxy Switcher Standard\ProxySwitcher.exe:*:Enabledroxy Switcher"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\et\Combat Arms EU\CombatArms.exe"="D:\et\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"D:\et\Combat Arms EU\Engine.exe"="D:\et\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.js - open - "C:\Documents and Settings\Administrateur\Bureau\momo\Adobe_Dreamweaver_CS3_Portable_Fr\Adobe_Dreamweaver_CS3_Portable_Fr\DreamweaverPortable\App\Dreamweaver\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 months======

2009-06-15 13:01:38 ----D---- C:\rsit
2009-06-15 12:16:27 ----A---- C:\WINDOWS\OEWABLog.txt
2009-06-15 12:15:15 ----D---- C:\WINDOWS\Prefetch
2009-06-15 12:13:22 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-15 12:13:11 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-15 12:13:02 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-06-15 12:12:55 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-06-15 12:12:49 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-15 12:12:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-06-15 12:12:30 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-06-15 12:12:25 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-06-15 12:12:18 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-06-15 12:12:12 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-06-15 12:12:04 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-06-15 12:11:58 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-06-15 12:11:52 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-06-15 12:11:45 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-06-15 12:11:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2009-06-15 12:11:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-06-15 12:11:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-06-15 12:11:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-06-15 12:11:06 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-06-15 12:11:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-06-15 12:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-06-15 12:10:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-06-15 12:10:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-06-15 12:10:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-06-15 12:10:23 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2009-06-15 12:10:16 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-06-15 12:10:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-06-15 12:10:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-06-15 12:09:58 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-06-15 12:09:52 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-06-15 12:09:46 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-06-15 12:09:44 ----D---- C:\WINDOWS\LastGood.Tmp
2009-06-15 12:07:39 ----D---- C:\Program Files\Messenger
2009-06-15 12:07:20 ----D---- C:\Program Files\msn
2009-06-15 12:07:19 ----D---- C:\WINDOWS\l2schemas
2009-06-15 12:07:18 ----D---- C:\WINDOWS\system32\fr
2009-06-15 12:07:18 ----D---- C:\WINDOWS\system32\bits
2009-06-15 12:03:31 ----D---- C:\WINDOWS\ServicePackFiles
2009-06-15 11:59:28 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-06-15 11:12:46 ----D---- C:\Program Files\AxBx
2009-06-15 09:31:10 ----A---- C:\WINDOWS\system32\f.exe
2009-06-14 17:11:33 ----D---- C:\Program Files\Microsoft
2009-06-14 16:39:17 ----D---- C:\Program Files\PasToucheXP
2009-06-14 14:30:50 ----D---- C:\fadela
2009-06-14 14:30:48 ----D---- C:\ptc
2009-06-14 14:30:48 ----D---- C:\momo
2009-06-13 21:09:46 ----A---- C:\WINDOWS\system32\plds4.dll
2009-06-13 21:09:44 ----A---- C:\WINDOWS\system32\plc4.dll
2009-06-13 21:09:41 ----A---- C:\WINDOWS\system32\nspr4.dll
2009-06-13 21:09:37 ----A---- C:\WINDOWS\system32\softokn3.dll
2009-06-13 21:09:28 ----A---- C:\WINDOWS\system32\nss3.dll
2009-06-13 21:08:45 ----A---- C:\functionalLog.txt
2009-06-13 21:01:53 ----A---- C:\WINDOWS\system32\fire.bat
2009-06-13 21:01:49 ----A---- C:\WINDOWS\system32\retry.bat
2009-06-13 18:16:09 ----A---- C:\WINDOWS\system32\wpass.exe
2009-06-13 18:16:09 ----A---- C:\WINDOWS\system32\netloss.exe
2009-06-13 18:16:09 ----A---- C:\WINDOWS\system32\netlos.exe
2009-06-13 18:16:08 ----A---- C:\WINDOWS\system32\skinner.dll
2009-06-13 18:16:08 ----A---- C:\WINDOWS\system32\Enigma SQL Inject0r.exe
2009-06-11 19:15:10 ----D---- C:\Program Files\Fichiers communs\DivX Shared
2009-06-11 13:28:41 ----D---- C:\Program Files\PokerStars
2009-06-11 10:42:21 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2009-06-11 10:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 10:40:05 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2009-06-11 10:39:56 ----HDC---- C:\WINDOWS\$NtUninstallKB968537_0$
2009-06-10 17:52:52 ----D---- C:\Documents and Settings\Administrateur\Application Data\e frontier
2009-06-10 17:51:12 ----A---- C:\WINDOWS\IsUninst.exe
2009-06-10 16:13:47 ----D---- C:\Documents and Settings\Administrateur\Application Data\IndexEducation
2009-06-10 16:13:30 ----D---- C:\PRONOTE 2008
2009-06-09 09:42:07 ----D---- C:\WINDOWS\ie8updates
2009-06-09 09:41:23 ----HDC---- C:\WINDOWS\ie8
2009-06-08 19:05:16 ----D---- C:\Documents and Settings\Administrateur\Application Data\Dev-Cpp
2009-06-08 19:05:02 ----D---- C:\Dev-Cpp
2009-06-07 22:30:50 ----D---- C:\Documents and Settings\All Users\Application Data\WNR
2009-06-07 22:30:40 ----D---- C:\Program Files\Proxy Switcher Standard
2009-06-05 13:45:58 ----D---- C:\Documents and Settings\Administrateur\Application Data\.ZMatrix
2009-05-31 20:44:03 ----A---- C:\WINDOWS\system32\instalksk.txt
2009-05-31 20:44:01 ----D---- C:\Program Files\Keylogger spy kpdo V 5.0 Publicado Free versão
2009-05-31 20:29:37 ----D---- C:\Program Files\HTV
2009-05-30 15:37:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961503_0$
2009-05-30 14:04:47 ----D---- C:\Program Files\BreakPoint Software
2009-05-29 17:46:37 ----D---- C:\Program Files\Steam
2009-05-29 08:20:59 ----D---- C:\Program Files\Windows Live SkyDrive
2009-05-29 08:16:28 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-05-29 08:04:56 ----D---- C:\Documents and Settings\Administrateur\Application Data\MessengerDiscovery 2
2009-05-29 08:04:42 ----D---- C:\Program Files\MessengerDiscovery 2
2009-05-25 13:54:46 ----D---- C:\Documents and Settings\Administrateur\Application Data\Megaupload
2009-05-24 12:00:08 ----D---- C:\Program Files\Qemu
2009-05-22 17:44:29 ----D---- C:\Program Files\Drive Rescue
2009-05-21 20:30:23 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2009-05-21 20:12:36 ----D---- C:\Program Files\Fichiers communs\Macrovision Shared
2009-05-17 19:31:06 ----D---- C:\Program Files\ConvertHelper

======List of files/folders modified in the last 1 months======

2009-06-15 13:01:32 ----D---- C:\WINDOWS\TEMP
2009-06-15 12:59:10 ----D---- C:\Program Files\Mozilla Firefox
2009-06-15 12:58:20 ----D---- C:\Program Files\BitComet
2009-06-15 12:55:47 ----D---- C:\Documents and Settings\Administrateur\Application Data\FileZilla
2009-06-15 12:43:30 ----D---- C:\WINDOWS
2009-06-15 12:39:26 ----D---- C:\Downloads
2009-06-15 12:19:36 ----SHD---- C:\WINDOWS\Installer
2009-06-15 12:19:36 ----SHD---- C:\Config.Msi
2009-06-15 12:16:26 ----HD---- C:\WINDOWS\inf
2009-06-15 12:16:10 ----D---- C:\WINDOWS\system32
2009-06-15 12:16:03 ----D---- C:\WINDOWS\Debug
2009-06-15 12:15:29 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-15 12:15:22 ----D---- C:\Documents and Settings\All Users\Application Data\VMware
2009-06-15 12:14:56 ----D---- C:\WINDOWS\system32\wbem
2009-06-15 12:14:56 ----D---- C:\WINDOWS\system32\Setup
2009-06-15 12:14:56 ----D---- C:\WINDOWS\AppPatch
2009-06-15 12:14:55 ----RSD---- C:\WINDOWS\Fonts
2009-06-15 12:14:53 ----D---- C:\WINDOWS\system32\drivers
2009-06-15 12:13:55 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-15 12:13:24 ----D---- C:\WINDOWS\system32\dllcache
2009-06-15 12:13:24 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-15 12:09:52 ----D---- C:\WINDOWS\WinSxS
2009-06-15 12:09:36 ----D---- C:\WINDOWS\security
2009-06-15 12:07:39 ----D---- C:\Program Files
2009-06-15 12:07:38 ----D---- C:\WINDOWS\ehome
2009-06-15 12:07:36 ----D---- C:\WINDOWS\system32\inetsrv
2009-06-15 12:07:36 ----D---- C:\WINDOWS\network diagnostic
2009-06-15 12:07:36 ----D---- C:\WINDOWS\ime
2009-06-15 12:07:36 ----D---- C:\WINDOWS\Help
2009-06-15 12:07:28 ----D---- C:\WINDOWS\system32\usmt
2009-06-15 12:07:28 ----D---- C:\WINDOWS\system32\oobe
2009-06-15 12:07:28 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-15 12:07:18 ----D---- C:\WINDOWS\PeerNet
2009-06-15 12:07:18 ----D---- C:\Program Files\Movie Maker
2009-06-15 12:07:16 ----D---- C:\WINDOWS\Media
2009-06-15 12:03:12 ----D---- C:\WINDOWS\system32\Restore
2009-06-15 12:03:11 ----D---- C:\WINDOWS\system32\npp
2009-06-15 12:03:11 ----D---- C:\WINDOWS\msagent
2009-06-15 12:03:10 ----D---- C:\Program Files\NetMeeting
2009-06-15 12:03:08 ----D---- C:\WINDOWS\system32\Com
2009-06-15 12:03:06 ----D---- C:\Program Files\Windows NT
2009-06-15 12:03:06 ----D---- C:\Program Files\Windows Media Player
2009-06-15 12:03:05 ----D---- C:\Program Files\Outlook Express
2009-06-15 12:03:03 ----D---- C:\Program Files\Fichiers communs\System
2009-06-15 12:02:53 ----D---- C:\WINDOWS\system
2009-06-15 10:23:22 ----D---- C:\Program Files\MSN Messenger
2009-06-15 10:23:20 ----D---- C:\Program Files\Messenger Plus! Live
2009-06-14 17:11:22 ----D---- C:\Program Files\Windows Live
2009-06-14 17:05:54 ----A---- C:\WINDOWS\MegaManager.INI
2009-06-14 17:04:51 ----D---- C:\Documents and Settings\Administrateur\Application Data\Research In Motion
2009-06-14 17:04:31 ----D---- C:\Program Files\Fichiers communs
2009-06-14 16:41:55 ----D---- C:\WINDOWS\Minidump
2009-06-14 16:21:59 ----SHD---- C:\WINDOWS\CSC
2009-06-13 23:01:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-13 21:25:30 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-06-13 12:08:42 ----D---- C:\Documents and Settings\Administrateur\Application Data\VMware
2009-06-12 21:03:02 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-12 17:06:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\teamspeak2
2009-06-11 19:16:02 ----D---- C:\Program Files\DivX
2009-06-11 13:29:13 ----D---- C:\php
2009-06-11 10:43:17 ----D---- C:\Program Files\Internet Explorer
2009-06-11 10:43:07 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-10 18:02:37 ----A---- C:\RecorderSDKLog.txt
2009-06-10 16:13:29 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-07 17:34:23 ----A---- C:\WINDOWS\vbaddin.ini
2009-06-02 13:22:14 ----RSD---- C:\WINDOWS\assembly
2009-06-02 13:04:54 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-06-02 12:38:13 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-06-02 12:12:23 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe
2009-05-31 16:24:45 ----A---- C:\WINDOWS\system32\scrrnfr.dll
2009-05-31 16:24:44 ----A---- C:\WINDOWS\system32\dx7vb.dll
2009-05-30 12:18:51 ----A---- C:\WINDOWS\win.ini
2009-05-28 19:24:47 ----D---- C:\Documents and Settings\Administrateur\Application Data\TeamViewer
2009-05-27 17:38:39 ----D---- C:\ContactExpress
2009-05-27 17:28:14 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-05-25 17:41:31 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2009-05-22 20:19:35 ----A---- C:\WINDOWS\WPE PRO.INI
2009-05-22 16:16:25 ----D---- C:\Documents and Settings\All Users\Application Data\TechSmith
2009-05-21 22:32:10 ----D---- C:\Program Files\QuickMediaConverter
2009-05-21 20:25:05 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-05-21 20:20:32 ----D---- C:\Program Files\Adobe
2009-05-20 10:47:26 ----D---- C:\download

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-19 36864]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-04-09 107256]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-04-09 55768]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 vmm;Virtual Machine Monitor; \??\C:\WINDOWS\system32\Drivers\vmm.sys []
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-07 12032]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; \??\C:\Program Files\CyberLink\PowerDVD\000.fcl []
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-02-07 21035]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-04-09 113960]
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-12-26 15440]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-04-09 133000]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys []
R2 vmci;VMware vmci; \??\C:\WINDOWS\system32\Drivers\vmci.sys []
R2 VMnetBridge;VMware Bridge Protocol; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [2009-03-26 31280]
R2 VMnetuserif;VMware Network Application Interface; \??\C:\WINDOWS\system32\drivers\vmnetuserif.sys []
R2 VMparport;VMware VMparport; \??\C:\WINDOWS\system32\Drivers\VMparport.sys []
R2 vmx86;VMware vmx86; \??\C:\WINDOWS\system32\Drivers\vmx86.sys []
R2 vstor2-ws60;Vstor2 WS60 Virtual Storage Driver; \??\C:\Program Files\VMware\VMware Player\vstor2-ws60.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2006-12-26 34760]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-04-09 33096]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-01-15 23848]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\WINDOWS\system32\DRIVERS\ManyCam.sys [2008-01-14 21632]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2007-06-26 12288]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2006-02-26 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-09-17 6132576]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-04-14 34176]
R3 nvmpu401;Service for NVIDIA(R) nForce(TM) MIDI UART; C:\WINDOWS\system32\drivers\nvmpu401.sys [2006-02-26 10240]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-04-14 13056]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2006-01-01 10368]
R3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\wg111v2.sys [2007-12-26 272128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 vmkbd;VMware kbd; \??\C:\WINDOWS\system32\drivers\VMkbd.sys []
R3 VPCNetS2;Virtual Machine Network Services Driver; C:\WINDOWS\system32\DRIVERS\VMNetSrv.sys [2008-02-05 59960]
S3 acqjpyu7;acqjpyu7; C:\WINDOWS\system32\drivers\acqjpyu7.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 RimUsb;Téléphone intelligent BlackBerry ; C:\WINDOWS\System32\Drivers\RimUsb.sys []
S3 RimVSerPort;RIM Virtual Serial Port v2; C:\WINDOWS\system32\DRIVERS\RimSerial.sys [2007-01-18 26496]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-09-07 5888]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 snpstd2;Trust WB-3100P Portable Webcam; C:\WINDOWS\system32\DRIVERS\snpstd2.sys [2004-10-14 347264]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-03-06 36864]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys []
S3 VBoxUSB;VirtualBox USB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [2009-02-16 31824]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys [2009-03-26 16560]
S3 vmusb;VMware USB Client Driver; C:\WINDOWS\System32\Drivers\vmusb.sys [2009-03-26 31280]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2007-06-26 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2007-06-26 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcuWVSSchedulerv6;Acunetix WVS Scheduler v6; C:\Program Files\Acunetix\Web Vulnerability Scanner 6\WVSScheduler.exe [2009-03-18 994952]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-04-09 731840]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-25 152984]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-09-17 163908]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files\VMware\VMware Player\vmware-authd.exe [2009-03-26 113200]
R2 VMnetDHCP;VMware DHCP Service; C:\WINDOWS\system32\vmnetdhcp.exe [2009-03-26 326192]
R2 VMware NAT Service;VMware NAT Service; C:\WINDOWS\system32\vmnat.exe [2009-03-26 399920]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-04-09 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-05-21 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-03-12 656168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2003-04-04 77824]
S3 ufad-ws60;VMware Agent Service; C:\Program Files\VMware\VMware Player\vmware-ufad.exe [2008-12-01 191024]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe [2009-03-16 6562432]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

• Fais un scan avec Kaspersky Online Scanner 7.0 et poste le rapport.

Tu fais du hack ?

Tu as l'air d'utiliser des petits programmes spéciaux et je voudrais éviter de les supprimer.

• Télécharge OTM (OldTimer) sur ton Bureau.
• Double-clique sur OTM.exe afin de le lancer.
• Copie (Ctrl+C) le texte suivant ci-dessous :

• Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
• Clique maintenant sur le bouton MoveIt! puis ferme OTM.

---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

• Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\

---> Le nom du rapport correspond au moment de sa création : date_heure.log

• Fais analyser les fichiers suivants :

- C:\WINDOWS\system32\dllcache\SOUNDMAN.exe
- C:\WINDOWS\system32\netlos.exe

• Sur VirusTotal et poste les liens des analyses.

Fais pareil avec ceci : C:\WINDOWS\system32\softokn3.dll

bref merci +1 pour ton aide mais j'ai formater mon pc ^^

Moi a ce que je vois tu hack,d'après les fichiers c'est tout simplement du hack
SUR ET CERTAIN.