[RESOLU] Probleme virus crypt.xpack

Bonjours,

depuis un long moment je n'ai pas toucher a mon ordinateur. Et la version d'essai de mon antivirus s'est perimé.
J'ai donc instalé Antivir. Celui-ci me detecte TR/Crypt.XPACK.Gen au demarage de windows plusieur fois. J'ai beau cliquer sur Supprimé rien n'y fait !
Je suis sous Xp Ie6.
Un message windows m'affiche parfois vghpcp.exe a rencontré un problème et doit fermer....
Et il se trouve que le chemin du virus est: C:\Documents and Settings\Propriétaire\vghpcp.exe

Voili voilou

Merci pour ceux qui veulent bien me repondre.

PS: SI QUELQUN A LE MEME PROBLEME QU'IL FASSE SONT PROPRE TOPIC !!!!

Euuhh je suis sous google chrome maintenant !

L'emplacement??? C'est a dire?

Voila le message qu'il y a ecrit sur antivir si ça peut aidé:

Dans le fichier 'C:\Documents and Settings\Propriétaire\vghpcp.exe'
un virus ou un programme indésirable 'TR/Crypt.XPACK.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Re,

Télécharge ComboFix (de sUBs) sur ton Bureau.

• Désactive temporairement toute protection résidente ! (Antivirus, antispywares..)
• Double clique sur ComboFix.exe.
• Accepte la licence en cliquant sur Oui.
• Le programme va te demander si tu souhaites installer la Console de Récupération. C'est une précaution, au cas où l'ordinateur tomberait en panne. Je te conseille donc de l'installer, ça ne coûte rien, et ça pourrait potentiellement servir !
• Lorsque l'opération sera terminée, un rapport apparaîtra. Poste ce rapport dans ta prochaine réponse.

Le rapport se trouve ici : %SystemDrive%\ComboFix.txt (%systemdrive% étant la partition où est installée Windows; C:\ en général)

Aide : Comment utiliser ComboFix.

C'est bon je me suis debrouiller seul, voila le rapport:




ComboFix 09-07-08.01 - Propriétaire 08/07/2009 20:37.1 - FAT32x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1014.636 [GMT 2:00]
Lancé depuis: c:\documents and settings\Propriétaire\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AntiSpywareExpert
c:\program files\WinPCap
c:\program files\WinPCap\daemon_mgm.exe
c:\program files\WinPCap\npf_mgm.exe
c:\program files\WinPCap\rpcapd.exe
c:\windows\Installer\104ae.msi
c:\windows\Installer\10961.msi
c:\windows\Installer\10c7e.msi
c:\windows\Installer\10c9d.msi
c:\windows\Installer\112f6.msi
c:\windows\Installer\118e2.msi
c:\windows\Installer\11bd0.msi
c:\windows\Installer\11cd9.msi
c:\windows\Installer\11e31.msi
c:\windows\Installer\11f2b.msi
c:\windows\Installer\11f99.msi
c:\windows\Installer\120c1.msi
c:\windows\Installer\12b8f.msi
c:\windows\Installer\13718.msi
c:\windows\Installer\1507c.msi
c:\windows\Installer\1530c.msi
c:\windows\Installer\162bc.msi
c:\windows\Installer\17700.msi
c:\windows\Installer\17b84.msi
c:\windows\Installer\17bc3.msi
c:\windows\Installer\17ec0.msi
c:\windows\Installer\1841f.msi
c:\windows\Installer\1845d.msi
c:\windows\Installer\185e4.msi
c:\windows\Installer\189ad.msi
c:\windows\Installer\19872.msi
c:\windows\Installer\19c5a.msi
c:\windows\Installer\19d83.msi
c:\windows\Installer\1a459.msi
c:\windows\Installer\1a93b.msi
c:\windows\Installer\2a0df3.msi
c:\windows\Installer\3129f.msi
c:\windows\Installer\39c12.msi
c:\windows\Installer\39e93.msi
c:\windows\Installer\3da60b.msi
c:\windows\Installer\3fdee4.msi
c:\windows\patch.exe
c:\windows\system32\drivers\npf.sys
c:\windows\system32\Packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll
D:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NPF
-------\Service_NPF
-------\Service_Passthru


((((((((((((((((((((((((((((( Fichiers créés du 2009-06-08 au 2009-07-08 ))))))))))))))))))))))))))))))))))))
.

2009-07-07 22:39 . 2009-07-07 22:39 -------- d-----w- c:\program files\ma-config.com
2009-07-07 22:39 . 2009-07-07 22:39 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
2009-07-07 14:22 . 2009-07-07 14:22 -------- d-----w- c:\program files\CamSpace
2009-07-07 14:05 . 2006-12-14 00:21 231424 ----a-w- c:\windows\system\ConnAPI.dll
2009-07-07 13:55 . 2009-07-07 13:55 -------- d-----w- c:\documents and settings\All Users\Application Data\TEMP
2009-07-07 13:55 . 2007-09-20 11:04 114688 ----a-w- c:\windows\system32\BTCamVideoSource.dll
2009-07-06 21:10 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-07-06 21:10 . 2009-03-24 14:08 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-07-06 21:10 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-07-06 21:10 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-07-06 21:10 . 2009-07-06 21:10 -------- d-----w- c:\program files\Avira
2009-07-06 21:10 . 2009-07-06 21:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-07-05 19:50 . 2003-11-04 13:10 69632 ----a-w- c:\windows\system32\lfgif13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 462848 ----a-w- c:\windows\system32\ltkrn13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 450560 ----a-w- c:\windows\system32\ltimg13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 299008 ----a-w- c:\windows\system32\ltdis13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 163840 ----a-w- c:\windows\system32\ltfil13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 57344 ----a-w- c:\windows\system32\lfbmp13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 401408 ----a-w- c:\windows\system32\lfcmp13n.dll
2009-07-05 19:50 . 2004-01-12 00:09 206336 ----a-w- c:\windows\system32\ltefx13n.dll
2009-07-05 19:40 . 2009-07-05 19:40 188 ----a-w- c:\windows\system32\eDataSecurity.dat
2009-07-05 19:14 . 2006-05-29 06:26 13312 ----a-w- c:\windows\system32\drivers\nmwcdcm.sys
2009-07-05 19:14 . 2006-05-29 06:26 13312 ----a-w- c:\windows\system32\drivers\nmwcdcj.sys
2009-07-05 19:14 . 2006-05-29 06:26 8704 ----a-w- c:\windows\system32\drivers\nmwcdc.sys
2009-07-05 19:14 . 2006-05-29 06:26 127488 ----a-w- c:\windows\system32\drivers\nmwcd.sys
2009-07-05 19:14 . 2006-05-29 06:26 30720 ----a-w- c:\windows\system32\nmwcdcocls.dll
2009-07-05 19:14 . 2006-05-29 06:26 4608 ----a-w- c:\windows\system32\nmwcdlog.dll
2009-07-05 19:14 . 2009-07-05 19:14 -------- d-----w- c:\program files\Nokia
2009-07-05 19:14 . 2006-05-29 06:26 50688 ----a-w- c:\windows\system32\nmwcdcls.dll
2009-07-05 18:26 . 2009-07-05 18:26 -------- d-----w- c:\program files\CStartup
2009-07-05 00:01 . 2009-07-05 00:01 -------- d-----w- c:\program files\CCleaner
2009-07-03 22:40 . 2009-02-06 10:10 227840 ------w- c:\windows\system32\dllcache\wmiprvse.exe
2009-07-03 22:40 . 2009-03-06 14:20 286720 ------w- c:\windows\system32\dllcache\pdh.dll
2009-07-03 22:40 . 2009-02-09 11:23 111104 ------w- c:\windows\system32\dllcache\services.exe
2009-07-03 22:40 . 2009-02-09 10:53 401408 ------w- c:\windows\system32\dllcache\rpcss.dll
2009-07-03 22:40 . 2009-02-09 10:53 685568 ------w- c:\windows\system32\dllcache\advapi32.dll
2009-07-03 22:40 . 2009-02-09 10:53 473600 ------w- c:\windows\system32\dllcache\fastprox.dll
2009-07-03 22:40 . 2009-02-09 10:53 739840 ------w- c:\windows\system32\dllcache\ntdll.dll
2009-07-03 22:40 . 2009-02-09 10:53 735744 ------w- c:\windows\system32\dllcache\lsasrv.dll
2009-07-03 22:40 . 2009-02-09 10:53 453120 ------w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-07-03 22:36 . 2008-12-16 12:31 354304 ------w- c:\windows\system32\dllcache\winhttp.dll
2009-07-03 22:36 . 2008-04-21 21:15 219136 ------w- c:\windows\system32\dllcache\wordpad.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-08 03:05 . 2008-11-07 21:06 98304 ----a-w- c:\windows\system32\drivers\ndisio.sys
2009-07-04 14:38 . 2006-01-06 15:16 64922 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-04 14:38 . 2006-01-06 15:16 447222 ----a-w- c:\windows\system32\perfh00C.dat
2009-05-07 15:33 . 2004-08-05 03:00 348672 ----a-w- c:\windows\system32\localspl.dll
2009-04-29 04:34 . 2004-08-05 03:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-04-29 04:34 . 2004-08-05 03:00 670720 ----a-w- c:\windows\system32\wininet.dll
2009-04-19 19:50 . 2004-08-05 03:00 1847296 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:53 . 2004-08-05 03:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"ISUSPM"="c:\documents and settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-09-28 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-01-07 102491]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-01-07 692315]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-07-18 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-18 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-18 114688]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2005-10-19 69632]
"EPM-DM"="c:\acer\Empowering Technology\ePower\epm-dm.exe" [2005-11-25 212992]
"Acer ePower Management"="c:\acer\Empowering Technology\ePower\Acer ePower Management.exe" [2005-11-09 3084288]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2005-12-01 458752]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 397312]
"ADMTray.exe"="c:\acer\Empowering Technology\admtray.exe" [2005-10-24 2462208]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2005-11-16 15600128]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
D‚marrage d'Office.lnk - c:\program files\Microsoft Office\Office\OSA.EXE [1997-8-29 51984]
Gestionnaire Microsoft Office.lnk - c:\program files\Microsoft Office\Office\MSOFFICE.EXE [1997-8-29 340480]
Microsoft Recherche acc‚l‚r‚e.lnk - c:\program files\Microsoft Office\Office\FINDFAST.EXE [1997-8-29 111376]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mckjnioc.sys]
@="Driver"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"VPbubble"="c:\program files\Nosibay\VPbubble\launcher.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"cctray"="c:\program files\CA\CA Internet Security Suite\cctray\cctray.exe"
"CAVRID"="c:\program files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\System32\\usmt\\migwiz.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [06/07/2009 23:10 108289]
S0 mckjnioc;mckjnioc;c:\windows\system32\drivers\mckjnioc.sys [25/11/2008 06:50 44288]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
S3 TV_551805_Sp50;TV_551805_Sp50 NDIS Protocol Driver;c:\windows\system32\drivers\TV_551805_Sp50.sys [21/05/2008 11:52 27072]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-dsdbk - c:\windows\system32\dsdbk.exe
SSODL-xvorfwbd-{6DA36E8B-0C5A-4EB3-ACCD-114D9DFDCF78} - (no file)


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mStart Page = hxxp://fr.yahoo.com
uInternet Connection Wizard,ShellNext = hxxp://www.google.fr/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Sample Toolband Serach - c:\windows\system32\ToolBand.dll/MENUSEARCH.HTM
TCP: {5872D377-AF82-4586-A132-BE9E2B334E41} = 192.168.1.1,192.168.1.15
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-08 20:43
Windows 5.1.2600 Service Pack 3 FAT NTAPI

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(340)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3140)
c:\windows\system32\MSNChatHook.dll
c:\windows\system32\sysenv.dll
c:\windows\system32\MSVCR71.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\INTEL\WIRELESS\BIN\EVTENG.EXE
c:\program files\INTEL\WIRELESS\BIN\S24EVMON.EXE
c:\program files\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE
c:\acer\EMPOWERING TECHNOLOGY\ADMSERV.EXE
c:\program files\INTEL\WIRELESS\BIN\REGSRVC.EXE
c:\program files\LAUNCH MANAGER\QTZGACER.EXE
c:\windows\SYSTEM32\IGFXSRVC.EXE
c:\windows\SYSTEM32\IGFXEXT.EXE
c:\windows\SYSTEM32\WSCNTFY.EXE
.
**************************************************************************
.
Heure de fin: 2009-07-08 20:45 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-07-08 18:45

Avant-CF: 36 137 271 296 octets libres
Après-CF: 36 169 515 008 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

239 --- E O F --- 2009-07-04 10:09

Oui c'est bon pour le wifi

Bonjour,

Angeldark est en vacances.

• Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
• Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
• Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
• Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
• Sélectionne Exécuter un examen rapide.
• Clique sur Rechercher. L'analyse démarre.
• A la fin de l'analyse, un message s'affiche :

• Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
• Ferme tes navigateurs.
• Si des malwares ont été détectés, clique sur Afficher les résultats.
• Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
• MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

• Fais analyser le fichier suivant : c:\windows\system32\drivers\mckjnioc.sys

• Sur VirusTotal et poste le lien de l'analyse.

dans ouvrir je met: c:\windows\system32\drivers\mckjnioc.sys ??
Quand je le cherche manuellement je trouve pas

Merci et le voila:


ComboFix 09-07-13.01 - Propriétaire 14/07/2009 18:07.2.1 - FAT32x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1014.617 [GMT 2:00]
Running from: c:\documents and settings\Propriétaire\Mes documents\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\Propriétaire\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\windows\system32\drivers\mckjnioc.sys"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MCKJNIOC
-------\Service_mckjnioc
-------\Service_Passthru


((((((((((((((((((((((((( Files Created from 2009-06-14 to 2009-07-14 )))))))))))))))))))))))))))))))
.

2009-07-14 15:58 . 2009-07-14 15:58 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-07-13 21:55 . 2009-07-13 21:54 404225 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\update.exe
2009-07-13 21:55 . 2009-07-13 21:54 345345 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\update.dll
2009-07-13 21:55 . 2009-04-17 15:07 87297 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updaterc.dll
2009-07-13 21:55 . 2009-02-17 12:49 79105 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\updext.dll
2009-07-13 21:55 . 2008-10-20 06:38 126721 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\TMP_UPDATE\scewxmlw.dll
2009-07-13 21:52 . 2009-07-13 11:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-13 21:52 . 2009-07-13 21:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-13 21:52 . 2009-07-13 21:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-07-13 21:52 . 2009-07-13 11:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-13 21:48 . 2009-06-02 10:12 102912 ------w- c:\windows\system32\dllcache\iecompat.dll
2009-07-13 21:47 . 2009-07-13 21:47 -------- d-----w- c:\windows\ie8updates
2009-07-13 21:47 . 2009-04-30 21:16 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2009-07-13 21:47 . 2009-04-30 21:16 1985024 ------w- c:\windows\system32\dllcache\iertutil.dll
2009-07-13 21:47 . 2009-04-30 21:16 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2009-07-13 21:47 . 2009-04-30 21:16 11064832 ------w- c:\windows\system32\dllcache\ieframe.dll
2009-07-13 21:45 . 2009-07-13 21:45 -------- d--h--w- c:\windows\ie8
2009-07-13 16:57 . 2009-07-13 16:57 -------- d-----w- c:\program files\mp3DirectCut
2009-07-12 18:35 . 2009-07-12 18:35 -------- d-----w- C:\Temp
2009-07-12 13:10 . 2009-07-12 13:10 -------- d-----w- c:\program files\VDOWNLOADER
2009-07-12 12:59 . 2009-07-12 12:59 -------- d-----w- c:\documents and settings\All Users\Application Data\AVS4YOU
2009-07-12 12:58 . 2009-07-12 12:58 -------- d-----w- c:\program files\Fichiers communs\AVSMedia
2009-07-12 12:57 . 2009-07-12 12:57 -------- d-----w- c:\windows\system32\drivers\umdf
2009-07-12 12:55 . 2008-08-13 09:22 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2009-07-11 23:49 . 2009-07-11 23:49 -------- d-----w- c:\program files\Fichiers communs\DVDVIDEOSOFT
2009-07-11 23:49 . 2009-07-11 23:49 -------- d-----w- c:\program files\DVDVIDEOSOFT
2009-07-11 23:42 . 2009-07-11 23:42 -------- d-----w- c:\program files\Fichiers communs\xing shared
2009-07-11 23:42 . 2009-07-11 23:42 -------- d-----w- c:\program files\Real
2009-07-11 23:42 . 2009-07-11 23:42 -------- d-----w- c:\program files\Fichiers communs\Real
2009-07-10 22:13 . 2009-07-10 22:13 -------- d-sh--w- C:\FOUND.003
2009-07-09 22:01 . 2009-05-26 19:30 607472 ----a-w- c:\documents and settings\All Users\Application Data\Yahoo!\YUpdater\yupdater.exe
2009-07-09 22:01 . 2009-07-09 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-07-09 16:38 . 2009-07-09 16:38 -------- d-----w- c:\program files\Alarme 30
2009-07-07 22:39 . 2009-07-07 22:39 -------- d-----w- c:\program files\ma-config.com
2009-07-07 22:39 . 2009-07-07 22:39 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
2009-07-07 14:05 . 2006-12-14 00:21 231424 ----a-w- c:\windows\system\ConnAPI.dll
2009-07-07 13:55 . 2009-07-07 13:55 -------- d-----w- c:\documents and settings\All Users\Application Data\TEMP
2009-07-07 13:55 . 2007-09-20 11:04 114688 ----a-w- c:\windows\system32\BTCamVideoSource.dll
2009-07-06 21:10 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-07-06 21:10 . 2009-03-24 14:08 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-07-06 21:10 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-07-06 21:10 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-07-06 21:10 . 2009-07-06 21:10 -------- d-----w- c:\program files\Avira
2009-07-06 21:10 . 2009-07-06 21:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-07-05 19:50 . 2003-11-04 13:10 69632 ----a-w- c:\windows\system32\lfgif13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 462848 ----a-w- c:\windows\system32\ltkrn13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 450560 ----a-w- c:\windows\system32\ltimg13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 299008 ----a-w- c:\windows\system32\ltdis13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 163840 ----a-w- c:\windows\system32\ltfil13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 57344 ----a-w- c:\windows\system32\lfbmp13n.dll
2009-07-05 19:50 . 2004-05-14 14:53 401408 ----a-w- c:\windows\system32\lfcmp13n.dll
2009-07-05 19:50 . 2004-01-12 00:09 206336 ----a-w- c:\windows\system32\ltefx13n.dll
2009-07-05 19:40 . 2009-07-05 19:40 188 ----a-w- c:\windows\system32\eDataSecurity.dat
2009-07-05 19:14 . 2006-05-29 06:26 13312 ----a-w- c:\windows\system32\drivers\nmwcdcm.sys
2009-07-05 19:14 . 2006-05-29 06:26 13312 ----a-w- c:\windows\system32\drivers\nmwcdcj.sys
2009-07-05 19:14 . 2006-05-29 06:26 8704 ----a-w- c:\windows\system32\drivers\nmwcdc.sys
2009-07-05 19:14 . 2006-05-29 06:26 127488 ----a-w- c:\windows\system32\drivers\nmwcd.sys
2009-07-05 19:14 . 2006-05-29 06:26 30720 ----a-w- c:\windows\system32\nmwcdcocls.dll
2009-07-05 19:14 . 2006-05-29 06:26 4608 ----a-w- c:\windows\system32\nmwcdlog.dll
2009-07-05 19:14 . 2009-07-05 19:14 -------- d-----w- c:\program files\Nokia
2009-07-05 19:14 . 2006-05-29 06:26 50688 ----a-w- c:\windows\system32\nmwcdcls.dll
2009-07-05 18:26 . 2009-07-05 18:26 -------- d-----w- c:\program files\CStartup
2009-07-05 00:01 . 2009-07-05 00:01 -------- d-----w- c:\program files\CCleaner
2009-07-03 22:40 . 2009-02-06 10:10 227840 ------w- c:\windows\system32\dllcache\wmiprvse.exe
2009-07-03 22:40 . 2009-03-06 14:20 286720 ------w- c:\windows\system32\dllcache\pdh.dll
2009-07-03 22:40 . 2009-02-09 11:23 111104 ------w- c:\windows\system32\dllcache\services.exe
2009-07-03 22:40 . 2009-02-09 10:53 401408 ------w- c:\windows\system32\dllcache\rpcss.dll
2009-07-03 22:40 . 2009-02-09 10:53 685568 ------w- c:\windows\system32\dllcache\advapi32.dll
2009-07-03 22:40 . 2009-02-09 10:53 473600 ------w- c:\windows\system32\dllcache\fastprox.dll
2009-07-03 22:40 . 2009-02-09 10:53 739840 ------w- c:\windows\system32\dllcache\ntdll.dll
2009-07-03 22:40 . 2009-02-09 10:53 735744 ------w- c:\windows\system32\dllcache\lsasrv.dll
2009-07-03 22:40 . 2009-02-09 10:53 453120 ------w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-07-03 22:36 . 2008-12-16 12:31 354304 ------w- c:\windows\system32\dllcache\winhttp.dll
2009-07-03 22:36 . 2008-04-21 21:15 219136 ------w- c:\windows\system32\dllcache\wordpad.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-11 23:42 . 2003-03-18 20:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-07-04 14:38 . 2006-01-06 15:16 64922 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-04 14:38 . 2006-01-06 15:16 447222 ----a-w- c:\windows\system32\perfh00C.dat
2009-05-13 05:04 . 2004-08-05 03:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2004-08-05 03:00 348672 ----a-w- c:\windows\system32\localspl.dll
2009-04-19 19:50 . 2004-08-05 03:00 1847296 ----a-w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-07-08_18.43.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-12-01 22:46 . 2006-12-01 22:46 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-01 22:08 . 2006-12-01 22:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-01 22:26 . 2006-12-01 22:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2006-12-01 22:25 . 2006-12-01 22:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-01 20:56 . 2006-12-01 20:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2006-08-24 18:26 . 2006-08-24 18:26 17408 c:\windows\system32\wpdshextautoplay.exe
+ 2006-08-24 20:30 . 2006-08-24 20:30 63488 c:\windows\system32\wpdmtpus.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 35840 c:\windows\system32\wpdconns.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 37376 c:\windows\system32\wmdmps.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 33792 c:\windows\system32\wmdmlog.dll
+ 2004-11-18 08:42 . 2009-01-07 16:21 26144 c:\windows\system32\spupdsvc.exe
+ 2009-07-13 21:46 . 2009-01-07 16:21 17952 c:\windows\system32\spmsg.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 46592 c:\windows\system32\pngfilt.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 23552 c:\windows\system32\normaliz.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 24576 c:\windows\system32\nlsdl.dll
+ 2008-05-08 21:54 . 2008-08-13 09:22 24576 c:\windows\system32\msxml3a.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 27648 c:\windows\system32\mspmsnsv.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 48128 c:\windows\system32\mshtmler.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 66560 c:\windows\system32\mshtmled.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 45568 c:\windows\system32\mshta.exe
+ 2009-03-08 02:31 . 2009-03-08 02:31 13312 c:\windows\system32\msfeedssync.exe
+ 2009-03-08 02:31 . 2009-03-08 02:31 55296 c:\windows\system32\msfeedsbs.dll
+ 2009-07-08 19:55 . 2009-07-08 19:55 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2008-05-12 13:53 . 2009-07-09 22:02 88590 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2004-08-05 03:00 . 2009-03-08 02:34 43008 c:\windows\system32\licmgr10.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 11264 c:\windows\system32\LAPRXY.dll
+ 2004-08-05 03:00 . 2009-04-30 21:16 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 94720 c:\windows\system32\inseng.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 34816 c:\windows\system32\imgutil.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 36864 c:\windows\system32\ieudinit.exe
+ 2004-08-05 03:00 . 2009-03-08 02:32 71680 c:\windows\system32\iesetup.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 55808 c:\windows\system32\iernonce.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 26112 c:\windows\system32\idndl.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 59904 c:\windows\system32\icardie.dll
+ 2006-08-24 18:26 . 2006-08-24 18:26 38656 c:\windows\system32\drivers\wpdusb.sys
+ 2009-07-06 21:10 . 2009-07-13 21:55 28520 c:\windows\system32\drivers\ssmdrv.sys
+ 2004-08-05 03:00 . 2006-08-24 20:30 37376 c:\windows\system32\dllcache\wmdmps.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 33792 c:\windows\system32\dllcache\wmdmlog.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 46592 c:\windows\system32\dllcache\pngfilt.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 27648 c:\windows\system32\dllcache\mspmsnsv.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 45568 c:\windows\system32\dllcache\mshta.exe
+ 2009-03-08 02:34 . 2009-03-08 02:34 43008 c:\windows\system32\dllcache\licmgr10.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 11264 c:\windows\system32\dllcache\LAPRXY.dll
+ 2009-03-08 02:33 . 2009-04-30 21:16 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 94720 c:\windows\system32\dllcache\inseng.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 34816 c:\windows\system32\dllcache\imgutil.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 71680 c:\windows\system32\dllcache\iesetup.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 55808 c:\windows\system32\dllcache\iernonce.dll
+ 2009-03-08 02:24 . 2009-03-08 02:24 68608 c:\windows\system32\dllcache\hmmapi.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 18944 c:\windows\system32\dllcache\corpol.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 72704 c:\windows\system32\dllcache\admparse.dll
+ 2004-08-05 03:00 . 2009-03-08 02:33 18944 c:\windows\system32\corpol.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 72704 c:\windows\system32\admparse.dll
+ 2009-07-13 21:47 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB969897-IE8\xpshims.dll
+ 2009-07-13 21:47 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB969897-IE8\jsproxy.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 37888 c:\windows\ie8\url.dll
+ 2009-07-13 21:46 . 2009-03-08 14:14 58448 c:\windows\ie8\spuninst\iecustom.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 39424 c:\windows\ie8\pngfilt.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 97280 c:\windows\ie8\occache.dll
+ 2009-07-13 21:45 . 2008-04-14 01:56 57344 c:\windows\ie8\mshtmler.dll
+ 2009-07-13 21:45 . 2008-04-14 02:34 29184 c:\windows\ie8\mshta.exe
+ 2009-07-13 21:45 . 2008-04-14 02:33 22528 c:\windows\ie8\licmgr10.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 15872 c:\windows\ie8\jsproxy.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 96768 c:\windows\ie8\inseng.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 35840 c:\windows\ie8\imgutil.dll
+ 2009-07-13 21:45 . 2008-04-14 02:34 93184 c:\windows\ie8\iexplore.exe
+ 2009-07-13 21:45 . 2008-04-14 02:33 63488 c:\windows\ie8\iesetup.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 49152 c:\windows\ie8\iernonce.dll
+ 2009-07-13 21:45 . 2009-04-29 04:34 81920 c:\windows\ie8\ieencode.dll
+ 2009-07-13 21:45 . 2008-04-14 02:34 34304 c:\windows\ie8\ie4uinit.exe
+ 2009-07-13 21:45 . 2008-04-14 02:33 38912 c:\windows\ie8\hmmapi.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 35328 c:\windows\ie8\corpol.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 61440 c:\windows\ie8\admparse.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\wmvdmoe2.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\wmvdmod.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 4096 c:\windows\system32\WMVADVE.DLL
+ 2006-08-24 20:30 . 2006-08-24 20:30 4096 c:\windows\system32\WMVADVD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\wmsdmoe2.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\wmsdmod.dll
+ 2006-08-24 20:42 . 2006-08-24 20:42 8704 c:\windows\system32\wdfmgr.exe
+ 2006-08-24 20:30 . 2006-08-24 20:30 4096 c:\windows\system32\wdfapi.dll
+ 2006-08-24 20:42 . 2006-08-24 20:42 8704 c:\windows\system32\uwdf.exe
+ 2009-07-11 23:42 . 2009-07-11 23:42 5632 c:\windows\system32\pndx5032.dll
+ 2009-07-11 23:42 . 2009-07-11 23:42 6656 c:\windows\system32\pndx5016.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\MPG4DMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\MP4SDMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\MP43DMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\wmvdmod.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\wmsdmod.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\MPG4DMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\MP4SDMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 4096 c:\windows\system32\dllcache\MP43DMOD.dll
+ 2009-07-13 21:48 . 2009-03-08 02:35 2048 c:\windows\ie8updates\KB971930-IE8\iecompat.dll
+ 2006-12-01 20:54 . 2006-12-01 20:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2006-12-01 20:54 . 2006-12-01 20:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-01 20:54 . 2006-12-01 20:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
- 2008-04-14 02:33 . 2008-04-14 02:33 121856 c:\windows\system32\xmllite.dll
+ 2008-04-14 02:33 . 2009-01-07 16:21 121856 c:\windows\system32\xmllite.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 349184 c:\windows\system32\wpdsp.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 133120 c:\windows\system32\WPDShServiceObj.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 154624 c:\windows\system32\wpdmtp.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 629760 c:\windows\system32\wpd_ci.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 656896 c:\windows\system32\WMVXENCD.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 790016 c:\windows\system32\WMVSENCD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 603648 c:\windows\system32\WMSPDMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 937984 c:\windows\system32\WMNetMgr.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 157184 c:\windows\system32\wmidx.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 532992 c:\windows\system32\wmdrmsdk.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 347648 c:\windows\system32\wmdrmnet.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 428032 c:\windows\system32\wmdrmdev.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 222208 c:\windows\system32\wmasf.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 757248 c:\windows\system32\WMADMOD.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 208384 c:\windows\system32\WinFXDocObj.exe
+ 2004-08-05 03:00 . 2009-03-08 02:34 236544 c:\windows\system32\webcheck.dll
+ 2004-08-05 03:00 . 2009-03-08 02:33 420352 c:\windows\system32\vbscript.dll
+ 2004-08-05 03:00 . 2009-03-08 02:34 105984 c:\windows\system32\url.dll
+ 2009-07-11 23:42 . 2009-07-11 23:42 185920 c:\windows\system32\rmoc3260.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 210432 c:\windows\system32\qasf.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 198144 c:\windows\system32\PortableDeviceWMDRM.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 166912 c:\windows\system32\PortableDeviceTypes.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 101888 c:\windows\system32\PortableDeviceClassExtension.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 284160 c:\windows\system32\PortableDeviceApi.dll
+ 2009-07-11 23:42 . 2009-07-11 23:42 278528 c:\windows\system32\pncrt.dll
+ 2004-08-05 03:00 . 2009-03-08 02:34 109568 c:\windows\system32\occache.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 320512 c:\windows\system32\mswmdm.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 611840 c:\windows\system32\mstime.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 414208 c:\windows\system32\msscp.dll
+ 2004-08-05 03:00 . 2009-03-08 02:34 193536 c:\windows\system32\msrating.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 175104 c:\windows\system32\mspmsp.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 179712 c:\windows\system32\msnetobj.dll
+ 2004-08-05 03:00 . 2009-03-08 02:22 156160 c:\windows\system32\msls31.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 594432 c:\windows\system32\msfeeds.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 265720 c:\windows\system32\msdbg2.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 259072 c:\windows\system32\MPG4DECD.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 316928 c:\windows\system32\MP4SDECD.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 258560 c:\windows\system32\MP43DECD.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 211968 c:\windows\system32\MFPLAT.dll
+ 2009-02-03 02:15 . 2009-02-03 02:15 240544 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2009-02-03 02:07 . 2009-02-03 02:07 240544 c:\windows\system32\Macromed\Flash\FlashUtil10b.exe
+ 2004-08-05 03:00 . 2006-08-24 18:31 100864 c:\windows\system32\logagent.exe
+ 2004-08-05 03:00 . 2009-03-08 02:33 726528 c:\windows\system32\jscript.dll
+ 2009-03-08 02:22 . 2009-03-08 02:22 164352 c:\windows\system32\ieui.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 183808 c:\windows\system32\iepeers.dll
+ 2004-08-05 03:00 . 2009-04-30 21:16 385536 c:\windows\system32\iedkcs32.dll
+ 2009-03-08 02:11 . 2009-03-08 02:11 445952 c:\windows\system32\ieapfltr.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 163840 c:\windows\system32\ieakui.dll
+ 2004-08-05 03:00 . 2009-03-08 02:33 229376 c:\windows\system32\ieaksie.dll
+ 2004-08-05 03:00 . 2009-03-08 02:33 125952 c:\windows\system32\ieakeng.dll
+ 2004-08-05 03:00 . 2009-04-30 11:21 173056 c:\windows\system32\ie4uinit.exe
+ 2004-08-05 03:00 . 2009-03-08 02:31 216064 c:\windows\system32\dxtrans.dll
+ 2004-08-05 03:00 . 2009-03-08 02:31 348160 c:\windows\system32\dxtmsft.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 990208 c:\windows\system32\drmv2clt.dll
+ 2006-08-24 18:27 . 2006-08-24 18:27 249344 c:\windows\system32\drmupgds.exe
+ 2006-08-24 20:30 . 2006-08-24 20:30 667648 c:\windows\system32\drivers\umdf\wpdmtpdr.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 603648 c:\windows\system32\dllcache\WMSPDMOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 937984 c:\windows\system32\dllcache\WMNetMgr.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 157184 c:\windows\system32\dllcache\wmidx.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 222208 c:\windows\system32\dllcache\WMASF.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 757248 c:\windows\system32\dllcache\WMADMOD.dll
+ 2008-04-21 06:43 . 2009-05-13 05:04 915456 c:\windows\system32\dllcache\wininet.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 236544 c:\windows\system32\dllcache\webcheck.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll
+ 2008-05-09 10:55 . 2009-03-08 02:33 420352 c:\windows\system32\dllcache\vbscript.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 134144 c:\windows\system32\dllcache\sqmapi.dll
+ 2009-01-07 16:21 . 2009-01-07 16:21 474624 c:\windows\system32\dllcache\shlwapi.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 109568 c:\windows\system32\dllcache\occache.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 320512 c:\windows\system32\dllcache\mswmdm.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 611840 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 414208 c:\windows\system32\dllcache\msscp.dll
+ 2009-03-08 02:34 . 2009-03-08 02:34 193536 c:\windows\system32\dllcache\msrating.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 175104 c:\windows\system32\dllcache\mspmsp.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 179712 c:\windows\system32\dllcache\msnetobj.dll
+ 2004-08-05 03:00 . 2009-03-08 02:22 156160 c:\windows\system32\dllcache\msls31.dll
+ 2004-08-05 03:00 . 2006-08-24 18:31 100864 c:\windows\system32\dllcache\logagent.exe
+ 2008-05-09 10:55 . 2009-03-08 02:33 726528 c:\windows\system32\dllcache\jscript.dll
+ 2009-03-08 12:09 . 2009-03-08 12:09 638816 c:\windows\system32\dllcache\iexplore.exe
+ 2009-03-08 02:31 . 2009-03-08 02:31 183808 c:\windows\system32\dllcache\iepeers.dll
+ 2009-03-08 12:09 . 2009-04-30 21:16 385536 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 163840 c:\windows\system32\dllcache\ieakui.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 229376 c:\windows\system32\dllcache\ieaksie.dll
+ 2009-03-08 02:33 . 2009-03-08 02:33 125952 c:\windows\system32\dllcache\ieakeng.dll
+ 2009-03-08 02:32 . 2009-04-30 11:21 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-03-08 02:31 . 2009-03-08 02:31 216064 c:\windows\system32\dllcache\dxtrans.dll
+ 2009-03-08 02:31 . 2009-03-08 02:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 990208 c:\windows\system32\dllcache\drmv2clt.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 228352 c:\windows\system32\dllcache\cewmdm.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 537600 c:\windows\system32\dllcache\blackbox.dll
+ 2009-03-08 02:32 . 2009-03-08 02:32 128512 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 228352 c:\windows\system32\cewmdm.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 537600 c:\windows\system32\blackbox.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 276480 c:\windows\system32\audiodev.dll
+ 2004-08-05 03:00 . 2009-03-08 02:32 128512 c:\windows\system32\advpack.dll
+ 2009-07-09 22:01 . 2009-07-09 22:01 331264 c:\windows\Installer\12fbc0f.msi
+ 2009-07-13 21:48 . 2008-07-08 13:04 406392 c:\windows\ie8updates\KB971930-IE8\spuninst\updspapi.dll
+ 2009-07-13 21:48 . 2008-07-08 13:03 234872 c:\windows\ie8updates\KB971930-IE8\spuninst\spuninst.exe
+ 2009-07-13 21:47 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB969897-IE8\wininet.dll
+ 2009-07-13 21:47 . 2008-07-09 07:40 406392 c:\windows\ie8updates\KB969897-IE8\spuninst\updspapi.dll
+ 2009-07-13 21:47 . 2007-11-30 12:39 234872 c:\windows\ie8updates\KB969897-IE8\spuninst\spuninst.exe
+ 2009-07-13 21:47 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB969897-IE8\ieproxy.dll
+ 2009-07-13 21:47 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB969897-IE8\iedkcs32.dll
+ 2009-07-13 21:47 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB969897-IE8\ie4uinit.exe
+ 2009-07-13 21:45 . 2009-04-29 04:34 670720 c:\windows\ie8\wininet.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 281600 c:\windows\ie8\webcheck.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 851968 c:\windows\ie8\vgx.dll
+ 2009-07-13 21:45 . 2008-05-09 10:55 430080 c:\windows\ie8\vbscript.dll
+ 2009-07-13 21:45 . 2009-04-29 04:34 621056 c:\windows\ie8\urlmon.dll
+ 2009-07-13 21:46 . 2009-01-07 16:21 406048 c:\windows\ie8\spuninst\updspapi.dll
+ 2009-07-13 21:46 . 2009-01-07 16:21 235040 c:\windows\ie8\spuninst\spuninst.exe
+ 2009-07-13 21:45 . 2008-04-14 02:33 532480 c:\windows\ie8\mstime.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 146432 c:\windows\ie8\msrating.dll
+ 2009-07-13 21:45 . 2004-08-05 03:00 146432 c:\windows\ie8\msls31.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 449024 c:\windows\ie8\mshtmled.dll
+ 2009-07-13 21:45 . 2008-05-09 10:55 512000 c:\windows\ie8\jscript.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 251904 c:\windows\ie8\iepeers.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 323584 c:\windows\ie8\iedkcs32.dll
+ 2009-07-13 21:45 . 2004-08-05 03:00 245760 c:\windows\ie8\ieakui.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 221184 c:\windows\ie8\ieaksie.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 143360 c:\windows\ie8\ieakeng.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 205312 c:\windows\ie8\dxtrans.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 357888 c:\windows\ie8\dxtmsft.dll
+ 2009-07-13 21:45 . 2008-04-14 02:33 101888 c:\windows\ie8\advpack.dll
+ 2006-12-01 22:25 . 2006-12-01 22:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-01 22:25 . 2006-12-01 22:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 2589184 c:\windows\system32\WpdShext.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 1392128 c:\windows\system32\WMVSDECD.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 1532416 c:\windows\system32\WMVENCOD.dll
+ 2006-08-24 20:30 . 2006-08-24 20:30 1539584 c:\windows\system32\WMVDECOD.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 2450944 c:\windows\system32\WMVCore.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 1327616 c:\windows\system32\WMSPDMOE.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 1118208 c:\windows\system32\WMADMOE.dll
+ 2004-08-05 03:00 . 2009-04-30 21:16 1207808 c:\windows\system32\urlmon.dll
+ 2004-08-05 03:00 . 2009-05-13 05:04 5936128 c:\windows\system32\mshtml.dll
+ 2009-02-03 02:15 . 2009-02-03 02:15 3771296 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2009-03-08 02:32 . 2009-04-30 21:16 1985024 c:\windows\system32\iertutil.dll
+ 2009-02-06 19:07 . 2009-02-06 19:07 3698584 c:\windows\system32\ieapfltr.dat
+ 2004-08-05 03:00 . 2006-08-24 20:30 2450944 c:\windows\system32\dllcache\wmvcore.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 1327616 c:\windows\system32\dllcache\WMSPDMOE.dll
+ 2004-08-05 03:00 . 2006-08-24 20:30 1118208 c:\windows\system32\dllcache\WMADMOE.dll
+ 2008-06-26 08:13 . 2009-04-30 21:16 1207808 c:\windows\system32\dllcache\urlmon.dll
+ 2008-04-21 06:43 . 2009-05-13 05:04 5936128 c:\windows\system32\dllcache\mshtml.dll
+ 2009-01-07 16:21 . 2009-01-07 16:21 1022976 c:\windows\system32\dllcache\browseui.dll
+ 2009-07-13 21:47 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB969897-IE8\urlmon.dll
+ 2009-07-13 21:47 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB969897-IE8\mshtml.dll
+ 2009-07-13 21:47 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB969897-IE8\iertutil.dll
+ 2009-07-13 21:45 . 2009-04-29 04:34 3089920 c:\windows\ie8\mshtml.dll
+ 2009-03-08 02:39 . 2009-04-30 21:16 11064832 c:\windows\system32\ieframe.dll
+ 2009-07-13 21:47 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB969897-IE8\ieframe.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"ISUSPM"="c:\documents and settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-09-28 68856]
"Google Update"="c:\documents and settings\Propriétaire\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-07-08 133104]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-01-07 102491]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-01-07 692315]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-07-18 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-07-18 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-07-18 114688]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2005-10-19 69632]
"EPM-DM"="c:\acer\Empowering Technology\ePower\epm-dm.exe" [2005-11-25 212992]
"Acer ePower Management"="c:\acer\Empowering Technology\ePower\Acer ePower Management.exe" [2005-11-09 3084288]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2005-12-01 458752]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 397312]
"ADMTray.exe"="c:\acer\Empowering Technology\admtray.exe" [2005-10-24 2462208]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-07-11 198160]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2005-11-16 15600128]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
D‚marrage d'Office.lnk - c:\program files\Microsoft Office\Office\OSA.EXE [1997-8-29 51984]
Gestionnaire Microsoft Office.lnk - c:\program files\Microsoft Office\Office\MSOFFICE.EXE [1997-8-29 340480]
Microsoft Recherche acc‚l‚r‚e.lnk - c:\program files\Microsoft Office\Office\FINDFAST.EXE [1997-8-29 111376]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"VPbubble"="c:\program files\Nosibay\VPbubble\launcher.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"cctray"="c:\program files\CA\CA Internet Security Suite\cctray\cctray.exe"
"CAVRID"="c:\program files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\System32\\usmt\\migwiz.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [06/07/2009 23:10 108289]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
S3 TV_551805_Sp50;TV_551805_Sp50 NDIS Protocol Driver;c:\windows\system32\drivers\TV_551805_Sp50.sys [21/05/2008 11:52 27072]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
SafeBoot-mckjnioc.sys


.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com/
uInternet Connection Wizard,ShellNext = hxxp://www.google.fr/
uSearchURL,(Default) = hxxp://fr.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://fr.search.yahoo.com
IE: &Sample Toolband Serach - c:\windows\system32\ToolBand.dll/MENUSEARCH.HTM
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-14 18:12
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(516)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3208)
c:\windows\system32\MSNChatHook.dll
c:\windows\system32\sysenv.dll
c:\windows\system32\MFC71U.DLL
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\INTEL\WIRELESS\BIN\EVTENG.EXE
c:\program files\INTEL\WIRELESS\BIN\S24EVMON.EXE
c:\program files\LAUNCH MANAGER\QTZGACER.EXE
c:\windows\SYSTEM32\IGFXSRVC.EXE
c:\program files\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE
c:\acer\EMPOWERING TECHNOLOGY\ADMSERV.EXE
c:\windows\SYSTEM32\IGFXEXT.EXE
c:\program files\INTEL\WIRELESS\BIN\REGSRVC.EXE
c:\program files\YAHOO!\SOFTWAREUPDATE\YAHOOAUSERVICE.EXE
c:\program files\Yahoo!\Messenger\ymsgr_tray.exe
.
**************************************************************************
.
Completion time: 2009-07-14 18:14 - machine was rebooted
ComboFix-quarantined-files.txt 2009-07-14 16:14
ComboFix2.txt 2009-07-08 18:45

Pre-Run: 35 145 678 848 octets libres
Post-Run: 35 168 550 912 octets libres

488 --- E O F --- 2009-07-13 21:48

c'est régler désolé pour le retard, ce n'est plus moi qui a le pc. Donc le sujet est clos.

Merci beaucoup a Destrio5 et Angledark pour votre aide ^^