[Résolu] Compte Utilisateur infecté par Win32.Brontok

Bonjour,

Je vous expose mon problème.
J'ai 2 comptes sous XP : un compte Administrateur et un compte Utilisateur que j'utilise habituellement pour aller sur internet.
Depuis quelques jours, je suis infecté par plusieurs virus mais uniquement sur mon compte Utilisateur.
1) Apparaît régulièrement la fenêtre "Security Center Alert" (Win32.Brontok)
2) Au lancement de Firefox (ou IE), la page s'ouvre sur "Insecure Internet activity. Threat of virus attack"

Et ceci, uniquement sur mon compte Utilisateur. En mode administrateur, pas de problème.

Alors ma question est peut-être bête, mais est-ce que le plus simple c'est de supprimer le compte Utilisateur actuel et d'en créer un autre ?

Merci pour vos réponses.
Bonne journée.

Merci de ta réponse !
Voici le contenu de log.txt
Logfile of random's system information tool 1.06 (written by random/random)
Run by C-E at 2009-07-25 13:46:34
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 9 GB (12%) free of 69 GB
Total RAM: 1022 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:46:47, on 25/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Documents and Settings\QuotidienCE\Bureau\RSIT.exe
C:\Documents and Settings\QuotidienCE\Bureau\C-E.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://configuration.adsl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CardDetectorHUAWEI] C:\Program Files\CardDetector\HUAWEI\CardDetector.exe
O4 - HKLM\..\Run: [BEWINTERNET-FR-DMGP-V2SessionManager] "C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-21-4044535884-3216779357-2365289996-1007\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'QuotidienCE')
O4 - HKUS\S-1-5-21-4044535884-3216779357-2365289996-1007\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized (User 'QuotidienCE')
O4 - HKUS\S-1-5-21-4044535884-3216779357-2365289996-1007\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'QuotidienCE')
O4 - HKUS\S-1-5-21-4044535884-3216779357-2365289996-1007\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (User 'QuotidienCE')
O4 - HKUS\S-1-5-21-4044535884-3216779357-2365289996-1007\..\Run: [realteks] "C:\Documents and Settings\QuotidienCE\Application Data\Google\ocprg23017248.exe" 2 (User 'QuotidienCE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6 [...] vSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6 [...] /cabsa.cab
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: EPGService - Hauppauge Computer Works - C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

--
End of file - 7404 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-16 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-16 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-08-08 691656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-11-10 344064]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-16 148888]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-06-19 729178]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2005-12-12 94208]
"eabconfg.cpl"=C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe [2005-12-22 405504]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2005-08-01 233534]
"RecGuard"=C:\Windows\SMINST\RecGuard.exe [2005-10-11 1187840]
"hpWirelessAssistant"=C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [2005-12-13 507904]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-04-29 185896]
"CardDetectorHUAWEI"=C:\Program Files\CardDetector\HUAWEI\CardDetector.exe [2008-12-01 274432]
"BEWINTERNET-FR-DMGP-V2SessionManager"=C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe [2008-12-01 131824]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-04-29 185896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoStart IR.lnk]
C:\PROGRA~1\WinTV\Ir.exe [2008-01-21 110647]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide de HP Photosmart Premier.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2005-09-24 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-11-11 47616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL France"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*isabled:bittorrent"
"C:\Program Files\Orange\IEWInternet\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\IEWInternet\Connectivity\ConnectivityManager.exe:*:enabled:CSS"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2f721ca3-a07f-11dd-9c6c-806d6172696f}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bdb0857c-6c4d-11de-9d0b-0014a5bea87f}]
shell\AutoRun\command - G:\AutoRunCardDetector.exe


======List of files/folders created in the last 1 months======

2009-07-25 09:45:15 ----D---- C:\WINDOWS\system32\NtmsData
2009-07-24 23:17:36 ----D---- C:\WINDOWS\BDOSCAN8
2009-07-24 23:03:21 ----D---- C:\Documents and Settings\C-E.PC290951034918\Application Data\HouseCall 6.6
2009-07-24 22:35:17 ----SD---- C:\ComboFix
2009-07-24 22:34:10 ----A---- C:\WINDOWS\zip.exe
2009-07-24 22:34:10 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-07-24 22:34:10 ----A---- C:\WINDOWS\SWSC.exe
2009-07-24 22:34:10 ----A---- C:\WINDOWS\SWREG.exe
2009-07-24 22:34:10 ----A---- C:\WINDOWS\sed.exe
2009-07-24 22:34:10 ----A---- C:\WINDOWS\PEV.exe
2009-07-24 22:34:10 ----A---- C:\WINDOWS\grep.exe
2009-07-24 19:53:05 ----D---- C:\WINDOWS\ERDNT
2009-07-24 19:52:42 ----D---- C:\Qoobox
2009-07-24 18:21:16 ----D---- C:\Documents and Settings\C-E.PC290951034918\Application Data\Malwarebytes
2009-07-24 18:08:26 ----A---- C:\WINDOWS\ntbtlog.txt
2009-07-24 18:03:33 ----A---- C:\WINDOWS\system32\tmp.txt
2009-07-24 17:58:48 ----D---- C:\rsit
2009-07-24 17:27:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-17 00:03:05 ----D---- C:\Program Files\Avira
2009-07-17 00:03:05 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\javaws.exe
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\javaw.exe
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\java.exe
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-07-16 23:57:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-16 23:57:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-16 23:55:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-09 08:04:17 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2009-07-09 08:00:11 ----D---- C:\Program Files\CardDetector
2009-06-30 12:35:19 ----D---- C:\Program Files\IrfanView

======List of files/folders modified in the last 1 months======

2009-07-25 13:45:57 ----D---- C:\WINDOWS\Prefetch
2009-07-25 13:21:38 ----D---- C:\WINDOWS\Temp
2009-07-25 13:21:38 ----ASH---- C:\hpqp.ini
2009-07-25 12:44:15 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-25 12:43:54 ----A---- C:\XP_TV.ini
2009-07-25 09:45:15 ----D---- C:\WINDOWS\system32
2009-07-25 08:36:07 ----D---- C:\WINDOWS
2009-07-25 08:03:09 ----D---- C:\Program Files\Mozilla Firefox
2009-07-24 23:17:39 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-24 23:17:36 ----HD---- C:\WINDOWS\inf
2009-07-24 23:03:54 ----D---- C:\WINDOWS\system32\drivers
2009-07-24 22:57:48 ----D---- C:\Documents and Settings
2009-07-24 21:57:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-24 20:00:30 ----A---- C:\rapport.txt
2009-07-24 19:30:34 ----SD---- C:\WINDOWS\Tasks
2009-07-24 18:21:14 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-24 17:24:27 ----SHD---- C:\RECYCLER
2009-07-24 16:44:30 ----D---- C:\WINDOWS\Minidump
2009-07-24 14:51:37 ----SHD---- C:\WINDOWS\Installer
2009-07-21 20:07:23 ----D---- C:\MyVideos
2009-07-20 10:37:21 ----D---- C:\WINDOWS\Debug
2009-07-20 10:34:25 ----D---- C:\Program Files\CCleaner
2009-07-20 00:20:13 ----D---- C:\Program Files\OrangeHSS
2009-07-20 00:17:21 ----D---- C:\Program Files\Google
2009-07-17 00:03:05 ----RD---- C:\Program Files
2009-07-16 23:58:59 ----HD---- C:\Config.Msi
2009-07-16 23:58:27 ----D---- C:\Program Files\Java
2009-07-16 23:57:55 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-16 23:57:52 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-07-16 23:53:43 ----D---- C:\WINDOWS\WinSxS
2009-07-16 23:53:41 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-07-16 18:35:14 ----A---- C:\WINDOWS\ModemLog_AC97 Soft Data Fax Modem with SmartCP.txt
2009-07-09 08:01:27 ----D---- C:\Program Files\Orange
2009-07-07 17:10:56 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-29 00:17:04 ----RASH---- C:\boot.ini
2009-06-29 00:17:04 ----A---- C:\WINDOWS\win.ini
2009-06-29 00:17:04 ----A---- C:\WINDOWS\system.ini
2009-06-28 16:28:58 ----D---- C:\WINDOWS\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-07-17 28520]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-11-11 1396224]
R3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-11-28 424320]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2005-08-02 38016]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2005-08-02 349312]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-08-22 1035008]
R3 HSFHWATI;HSFHWATI; C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 231424]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2005-09-30 78720]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-06-19 190400]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-09-20 162432]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-08-22 718464]
S3 astpy62j;astpy62j; C:\WINDOWS\system32\drivers\astpy62j.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-08-18 56648]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 eabusb;eabusb; \??\C:\WINDOWS\system32\drivers\eabusb.sys []
S3 hcw66xxx;WinTV HVR-900H; C:\WINDOWS\System32\Drivers\hcw66xxx.sys [2008-02-28 418304]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2008-11-12 101120]
S3 hwusbfake;Huawei DataCard USB Fake; C:\WINDOWS\system32\DRIVERS\ewusbfake.sys [2008-11-12 99840]
S3 MODBDA2;DiBcom MOD3000 TV receiver; C:\WINDOWS\System32\Drivers\modbda2.sys [2005-06-04 30464]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SMCIRDA;Pilote de périphérique SMC IrCC Miniport; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-08-23 36937]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2009-01-03 611664]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-17 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-17 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-11-11 389120]
R2 EPGService;EPGService; C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [2006-07-19 435200]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2005-12-22 98304]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-16 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2005-11-15 73728]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Et celui de info.txt

info.txt logfile of random's system information tool 1.06 2009-07-24 17:58:53

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Amélioration de nos services-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{23012310-3E05-46A5-88A9-C6CBCABCAC79} /l1036
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Athlon 64 Processor Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Compel Adaptec WinASPI-->"C:\Program Files\WinASPI\unins000.exe"
Conexant AC-Link Audio-->C:\Program Files\CONEXANT\CNXT_AUDIO\HXFSETUP.EXE -U -ICPL309BA.INF
Connexion Facile à Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1036
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
CutePDF Writer 2.7-->C:\Program Files\Acro Software\CutePDF Writer\uninscpw.exe
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Désinstallation de Internet Everywhere-->C:\Program Files\Orange\IEWInternet\installation\core\Installgui.exe -u
Hauppauge French Help Files and Resources-->C:\PROGRA~1\WinTV\UNHLPfra.EXE C:\PROGRA~1\WinTV\WTV2Kfra.LOG
Hauppauge WinTV DVB-T EPG Service-->C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\UnEPGService.LOG
Hauppauge WinTV Infrared Remote-->C:\PROGRA~1\WinTV\UNir32.EXE C:\PROGRA~1\WinTV\ir32.LOG
Hauppauge WinTV Scheduler-->C:\PROGRA~1\WinTV\\SCHEDU~1\uniSCHED.exe C:\PROGRA~1\WinTV\\SCHEDU~1\uniSCHED.log
Hauppauge WinTV Soft PVR-->C:\PROGRA~1\WinTV\UNSftPVR.EXE C:\PROGRA~1\WinTV\softpvr.LOG
Hauppauge WinTV-->C:\PROGRA~1\WinTV\UNTV6.EXE C:\PROGRA~1\WinTV\WINTV6.LOG
HijackThis 2.0.2-->"C:\Documents and Settings\QuotidienCE\Bureau\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Help and Support-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe" -l0x40c -removeonly
HP Imaging Device Functions 6.0-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Premier Software 6.0-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP QuickPlay 2.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\setup.exe" -uninstall
HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
HP User Guides 0026-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D17A2FDC-5C16-439C-A0E1-FF350079447E}\setup.exe" -l0x40c -removeonly
HP User Guides--System Recovery-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC96BBA7-C634-460E-AD18-A0A994213F80}\Setup.exe" -l0x40c -removeonly
HP Wireless Assistant 2.00 C1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x40c hpquninst
Huawei 3G+ modem-->C:\Program Files\CardDetector\HUAWEI\CardDetectorSetup.exe -u
InterVideo FilterSDK for Hauppauge-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2227E1FA-01F5-483C-AB0E-2A308E900B3D}\setup.exe" REMOVEALL
IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java(TM) 6 Update 14-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
K-Lite Codec Pack 4.6.1 (Full) BETA-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB968220)-->"C:\WINDOWS\ie8updates\KB968220-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
NeoDivx 2008-->"C:\Program Files\NeoDivX2008\uninstall.exe"
OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
Orange WebTV Player 1.28971-->"C:\Program Files\Orange\Orange WebTV Player\unins000.exe"
Panneau de contrôle ATI-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
Quick Launch Buttons 5.20 G1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe" -l0x40c -uninst
QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_1002&DEV_4378\HXFSETUP.EXE -U -Icpl309bk.inf
Sonic Audio Module-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Sonic Copy Module-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Sonic Data Module-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Texas Instruments PCIxx21/x515/xx12 drivers.-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A} /l1036
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VTPlus32 pour WinTV (French)-->C:\PROGRA~1\vtplus\UNVTplus.exe C:\PROGRA~1\vtplus\VTPlus.LOG
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
x264 Revision 305 x264.nl (remove only)-->"C:\Program Files\x264\x264-uninstall.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: PC290951034918
Event Code: 62486
Message: Invalid parameters

Record Number: 38813
Source Name: ati2mtag
Time Written: 20090709091648.000000+120
Event Type: Informations
User:

Computer Name: PC290951034918
Event Code: 62486
Message: Invalid parameters

Record Number: 38812
Source Name: ati2mtag
Time Written: 20090709091648.000000+120
Event Type: Informations
User:

Computer Name: PC290951034918
Event Code: 62486
Message: Invalid parameters

Record Number: 38811
Source Name: ati2mtag
Time Written: 20090709091648.000000+120
Event Type: Informations
User:

Computer Name: PC290951034918
Event Code: 62486
Message: Invalid parameters

Record Number: 38810
Source Name: ati2mtag
Time Written: 20090709091648.000000+120
Event Type: Informations
User:

Computer Name: PC290951034918
Event Code: 62486
Message: Invalid parameters

Record Number: 38809
Source Name: ati2mtag
Time Written: 20090709091648.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: PC290951034918
Event Code: 11729
Message: Produit : Microsoft Office Professional Edition 2003 -- La configuration a échoué.

Record Number: 2807
Source Name: MsiInstaller
Time Written: 20090630100907.000000+120
Event Type: Informations
User: PC290951034918\QuotidienCE

Computer Name: PC290951034918
Event Code: 1004
Message: Échec de détection du produit '{9011040C-6000-11D3-8CFE-0150048383C9}', fonctionnalité 'OfficeUserData', composant '{4A31E933-6F67-11D2-AAA2-00A0C90F57B0}. La ressource 'HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\MS Access Database\' n'existe pas

Record Number: 2806
Source Name: MsiInstaller
Time Written: 20090630100905.000000+120
Event Type: Avertissement
User: PC290951034918\QuotidienCE

Computer Name: PC290951034918
Event Code: 1004
Message: Échec de détection du produit '{9011040C-6000-11D3-8CFE-0150048383C9}', fonctionnalité 'ExcelUserData', composant '{8ADD2C96-C8B7-11D1-9C67-0000F81F1B38}. La ressource 'HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Excel\UserData' n'existe pas

Record Number: 2805
Source Name: MsiInstaller
Time Written: 20090630091229.000000+120
Event Type: Avertissement
User: PC290951034918\QuotidienCE

Computer Name: PC290951034918
Event Code: 11729
Message: Produit : Microsoft Office Professional Edition 2003 -- La configuration a échoué.

Record Number: 2804
Source Name: MsiInstaller
Time Written: 20090630091229.000000+120
Event Type: Informations
User: PC290951034918\QuotidienCE

Computer Name: PC290951034918
Event Code: 1004
Message: Échec de détection du produit '{9011040C-6000-11D3-8CFE-0150048383C9}', fonctionnalité 'OfficeUserData', composant '{4A31E933-6F67-11D2-AAA2-00A0C90F57B0}. La ressource 'HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\MS Access Database\' n'existe pas

Record Number: 2803
Source Name: MsiInstaller
Time Written: 20090630091228.000000+120
Event Type: Avertissement
User: PC290951034918\QuotidienCE

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 36 Stepping 2, AuthenticAMD
"PROCESSOR_REVISION"=2402
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
"PCTYPE"=PAVILION
"PLATFORM"=MCD
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

J'ai un problème au lancement de la console.
Une boite de dialogue apparait : CFScript Name Error
The name, CFScript, appears to be incorrectly spelt.

Le problème c'est qu'après la fenêtre de dialogue, il ne se passe plus rien. Pas de scan.

En fait pour être plus exact, je lance ComboFix. Une fenêtre s'ouvre "ComboFix is preparing to run" et juste après la boite de dialogue "CFScript Error" s'ouvre. Donc il ne me demande rien d'autre.

Non

J'ai tapé combofix /u et il lance combofix en refaisant la même erreur.
Pourquoi veux-tu que je retélécharge Combofix ?

J'ai une petite question. Est-ce que toutes les manip il faut les faire en session administrateur ? Je pose la question parce que pour supprimer les 2 dossiers, j'ai été obligé de passer en admin.
Veux-tu que je recommence toutes les étapes ?

En tant qu'administrateur, ça marche mieux !
Voici le rapport :

ComboFix 09-07-24.01 - C-E 25/07/2009 14:32.1.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.536 [GMT 2:00]
Running from: c:\documents and settings\C-E.PC290951034918\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\QuotidienCE\Application Data\Google\ocprg23017248.exe
c:\documents and settings\QuotidienCE\Application Data\Google\Shell32.dll
c:\recycler\S-1-5-21-657964223-1216742886-1367973330-1006
c:\recycler\S-1-5-21-657964223-1216742886-1367973330-500
c:\windows\Installer\1389b20.msi
c:\windows\Installer\1a9a61.msi
c:\windows\Installer\4fc2f7.msi
c:\windows\Installer\4fc2fc.msi
c:\windows\Installer\770e660.msi
c:\windows\Installer\9f0a2.msi
c:\windows\Installer\9f0b9.msi
c:\windows\Installer\a6630.msi
c:\windows\Installer\c80d0c.msi
c:\windows\Installer\dd0c98f.msi
c:\windows\system32\tmp.reg
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2009-06-25 to 2009-07-25 )))))))))))))))))))))))))))))))
.

2009-07-25 07:45 . 2009-07-25 07:45 -------- d-----w- c:\windows\system32\NtmsData
2009-07-24 21:17 . 2009-07-25 05:46 -------- d-----w- c:\windows\BDOSCAN8
2009-07-24 17:43 . 2009-07-24 17:43 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\Malwarebytes
2009-07-24 16:21 . 2009-07-24 16:21 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\Malwarebytes
2009-07-24 16:21 . 2009-07-13 11:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-24 16:21 . 2009-07-13 11:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-24 15:58 . 2009-07-24 15:58 -------- d-----w- C:\rsit
2009-07-24 13:57 . 2009-07-24 13:57 422 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\mario.exe
2009-07-24 13:57 . 2009-07-24 13:57 16141 ----a-w- c:\documents and settings\QuotidienCE\Application Data\DivX\flamiks32.exe
2009-07-24 13:57 . 2009-07-24 13:57 145131 ----a-w- c:\documents and settings\QuotidienCE\Application Data\CyberLink\pingo.dll
2009-07-24 13:57 . 2009-07-24 13:57 13221 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Apple Computer\xl12.exe
2009-07-24 13:57 . 2009-07-24 13:57 11232 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\norigami.dll
2009-07-17 13:34 . 2009-07-17 13:34 -------- d-sh--w- c:\documents and settings\Administrateur.PC290951034918\IETldCache
2009-07-17 13:33 . 2006-04-21 19:48 135 ----a-w- c:\documents and settings\Administrateur.PC290951034918\Local Settings\Application Data\fusioncache.dat
2009-07-17 13:33 . 2006-04-21 20:35 42128 ----a-w- c:\documents and settings\Administrateur.PC290951034918\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-16 22:03 . 2009-07-16 22:03 -------- d-----w- c:\documents and settings\LocalService\Menu Démarrer
2009-07-16 22:03 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-07-16 22:03 . 2009-03-24 14:07 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-07-16 22:03 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-07-16 22:03 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-07-16 22:03 . 2009-07-16 22:03 -------- d-----w- c:\program files\Avira
2009-07-16 22:03 . 2009-07-16 22:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-07-16 21:58 . 2009-07-16 21:58 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-07-16 21:57 . 2009-07-16 21:57 152576 ----a-w- c:\documents and settings\C-E.PC290951034918\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
2009-07-09 06:01 . 2008-11-12 10:53 99840 ----a-r- c:\windows\system32\drivers\ewusbfake.sys
2009-07-09 06:01 . 2008-11-12 10:53 101120 ----a-r- c:\windows\system32\drivers\ewusbmdm.sys
2009-07-09 06:00 . 2008-04-13 18:45 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2009-07-09 06:00 . 2008-04-13 18:45 32128 ----a-w- c:\windows\system32\dllcache\usbccgp.sys
2009-07-09 06:00 . 2009-07-09 06:00 -------- d-----w- c:\program files\CardDetector
2009-06-30 10:35 . 2009-06-30 10:35 -------- d-----w- c:\program files\IrfanView

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-25 10:10 . 2008-10-24 08:53 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent
2009-07-25 09:34 . 2009-07-24 15:31 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\HouseCall 6.6
2009-07-24 21:09 . 2009-07-24 21:03 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\HouseCall 6.6
2009-07-24 19:57 . 2004-08-17 09:31 84964 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-24 19:57 . 2004-08-17 09:31 510980 ----a-w- c:\windows\system32\perfh00C.dat
2009-07-24 16:21 . 2008-10-22 08:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-24 13:57 . 2009-02-11 17:45 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\DivX
2009-07-24 13:57 . 2009-01-18 17:53 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\Apple Computer
2009-07-24 13:57 . 2008-10-25 13:36 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\CyberLink
2009-07-20 08:34 . 2007-12-17 17:21 -------- d-----w- c:\program files\CCleaner
2009-07-19 22:20 . 2009-06-10 07:42 -------- d-----w- c:\program files\OrangeHSS
2009-07-19 22:17 . 2006-04-21 20:24 -------- d-----w- c:\program files\Google
2009-07-16 21:58 . 2006-04-21 19:52 -------- d-----w- c:\program files\Java
2009-07-09 06:01 . 2009-05-09 22:19 -------- d-----w- c:\program files\Orange
2009-06-16 14:40 . 2004-08-05 08:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2004-08-05 08:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-11 06:07 . 2007-08-26 15:34 -------- d-----w- c:\program files\Inventel
2009-06-10 07:43 . 2009-06-10 07:43 -------- d-----w- c:\program files\Securitoo
2009-06-10 07:40 . 2009-06-10 07:40 -------- d-----w- c:\program files\Fichiers communs\France Telecom
2009-06-09 13:58 . 2009-02-14 18:37 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\HP
2009-06-09 13:58 . 2008-10-22 21:27 83352 -c--a-w- c:\documents and settings\C-E.PC290951034918\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-03 19:10 . 2004-08-05 08:00 1297408 ----a-w- c:\windows\system32\quartz.dll
2009-05-28 16:16 . 2009-05-28 16:16 194 ----a-w- c:\documents and settings\C-E.PC290951034918\Application Data\wklnhst.dat
2009-05-28 16:16 . 2009-05-28 16:16 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\Template
2009-05-28 08:48 . 2008-10-22 17:02 83352 -c--a-w- c:\documents and settings\QuotidienCE\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-13 05:04 . 2004-08-05 08:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2004-08-05 08:00 348672 ----a-w- c:\windows\system32\localspl.dll
2009-02-11 17:33 . 2008-07-03 06:20 134656 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
2006-09-09 23:30 . 2006-09-09 14:30 22 --sha-w- c:\windows\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-08-08 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-11-10 344064]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-16 148888]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-06-19 729178]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2005-12-12 94208]
"eabconfg.cpl"="c:\program files\HPQ\Quick Launch Buttons\EabServr.exe" [2005-12-22 405504]
"Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2005-08-01 233534]
"RecGuard"="c:\windows\SMINST\RecGuard.exe" [2005-10-11 1187840]
"hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-12-13 507904]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-04-29 185896]
"CardDetectorHUAWEI"="c:\program files\CardDetector\HUAWEI\CardDetector.exe" [2008-12-01 274432]
"BEWINTERNET-FR-DMGP-V2SessionManager"="c:\program files\Orange\IEWInternet\SessionManager\SessionManager.exe" [2008-12-01 131824]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoStart IR.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\AutoStart IR.lnk
backup=c:\windows\pss\AutoStart IR.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide de HP Photosmart Premier.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide de HP Photosmart Premier.lnk
backup=c:\windows\pss\Démarrage rapide de HP Photosmart Premier.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Orange\\IEWInternet\\Connectivity\\ConnectivityManager.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [17/07/2009 00:03 108289]
R2 EPGService;EPGService;c:\progra~1\WinTV\EPG Services\System\EPGService.exe [21/10/2008 15:23 435200]
R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [22/08/2005 11:06 231424]
S3 hcw66xxx;WinTV HVR-900H;c:\windows\system32\drivers\hcw66xxx.sys [23/10/2008 20:10 418304]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [09/07/2009 08:01 99840]
S3 MODBDA2;DiBcom MOD3000 TV receiver;c:\windows\system32\drivers\modbda2.sys [04/06/2005 02:56 30464]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = hxxp://configuration.adsl/
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
Trusted Zone: mappy.com
Trusted Zone: orange.fr
Trusted Zone: voila.fr\rw.search.ke
Trusted Zone: weborama.fr\orange
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-25 14:39
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????????n??|?P???? ???B?????????????hLC? ??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(856)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2744)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\progra~1\HPQ\shared\HPQTOA~1.EXE
c:\program files\Mozilla Firefox\firefox.exe
.
**************************************************************************
.
Completion time: 2009-07-25 14:43 - machine was rebooted
ComboFix-quarantined-files.txt 2009-07-25 12:43

Pre-Run: 8 864 505 856 octets libres
Post-Run: 8 983 277 568 octets libres

194 --- E O F --- 2009-07-16 21:58

Ci-dessous le rapport :

ComboFix 09-07-24.01 - C-E 25/07/2009 14:55.2.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.548 [GMT 2:00]
Running from: c:\documents and settings\C-E.PC290951034918\Bureau\ComboFix.exe
Command switches used :: c:\documents and settings\C-E.PC290951034918\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
"c:\documents and settings\QuotidienCE\Application Data\Adobe\norigami.dll"
"c:\documents and settings\QuotidienCE\Application Data\Apple Computer\xl12.exe"
"c:\documents and settings\QuotidienCE\Application Data\BitTorrent\mario.exe"
"c:\documents and settings\QuotidienCE\Application Data\CyberLink\pingo.dll"
"c:\documents and settings\QuotidienCE\Application Data\DivX\flamiks32.exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\QuotidienCE\Application Data\Adobe\norigami.dll
c:\documents and settings\QuotidienCE\Application Data\Apple Computer\xl12.exe
c:\documents and settings\QuotidienCE\Application Data\BitTorrent\mario.exe
c:\documents and settings\QuotidienCE\Application Data\CyberLink\pingo.dll
c:\documents and settings\QuotidienCE\Application Data\DivX\flamiks32.exe

.
((((((((((((((((((((((((( Files Created from 2009-06-25 to 2009-07-25 )))))))))))))))))))))))))))))))
.

2009-07-25 07:45 . 2009-07-25 07:45 -------- d-----w- c:\windows\system32\NtmsData
2009-07-24 21:17 . 2009-07-25 05:46 -------- d-----w- c:\windows\BDOSCAN8
2009-07-24 17:43 . 2009-07-24 17:43 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\Malwarebytes
2009-07-24 16:21 . 2009-07-24 16:21 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\Malwarebytes
2009-07-24 16:21 . 2009-07-13 11:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-24 16:21 . 2009-07-13 11:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-24 15:58 . 2009-07-24 15:58 -------- d-----w- C:\rsit
2009-07-17 13:34 . 2009-07-17 13:34 -------- d-sh--w- c:\documents and settings\Administrateur.PC290951034918\IETldCache
2009-07-17 13:33 . 2006-04-21 19:48 135 ----a-w- c:\documents and settings\Administrateur.PC290951034918\Local Settings\Application Data\fusioncache.dat
2009-07-17 13:33 . 2006-04-21 20:35 42128 ----a-w- c:\documents and settings\Administrateur.PC290951034918\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-16 22:03 . 2009-07-16 22:03 -------- d-----w- c:\documents and settings\LocalService\Menu Démarrer
2009-07-16 22:03 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-07-16 22:03 . 2009-03-24 14:07 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-07-16 22:03 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-07-16 22:03 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-07-16 22:03 . 2009-07-16 22:03 -------- d-----w- c:\program files\Avira
2009-07-16 22:03 . 2009-07-16 22:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-07-16 21:58 . 2009-07-16 21:58 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-07-16 21:57 . 2009-07-16 21:57 152576 ----a-w- c:\documents and settings\C-E.PC290951034918\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
2009-07-09 06:01 . 2008-11-12 10:53 99840 ----a-r- c:\windows\system32\drivers\ewusbfake.sys
2009-07-09 06:01 . 2008-11-12 10:53 101120 ----a-r- c:\windows\system32\drivers\ewusbmdm.sys
2009-07-09 06:00 . 2008-04-13 18:45 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2009-07-09 06:00 . 2008-04-13 18:45 32128 ----a-w- c:\windows\system32\dllcache\usbccgp.sys
2009-07-09 06:00 . 2009-07-09 06:00 -------- d-----w- c:\program files\CardDetector
2009-06-30 10:35 . 2009-06-30 10:35 -------- d-----w- c:\program files\IrfanView

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-25 12:58 . 2009-02-11 17:45 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\DivX
2009-07-25 12:58 . 2008-10-25 13:36 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\CyberLink
2009-07-25 12:58 . 2009-01-18 17:53 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\Apple Computer
2009-07-25 12:58 . 2008-10-24 08:53 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent
2009-07-25 09:34 . 2009-07-24 15:31 -------- d-----w- c:\documents and settings\QuotidienCE\Application Data\HouseCall 6.6
2009-07-24 21:09 . 2009-07-24 21:03 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\HouseCall 6.6
2009-07-24 19:57 . 2004-08-17 09:31 84964 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-24 19:57 . 2004-08-17 09:31 510980 ----a-w- c:\windows\system32\perfh00C.dat
2009-07-24 16:21 . 2008-10-22 08:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-20 08:34 . 2007-12-17 17:21 -------- d-----w- c:\program files\CCleaner
2009-07-19 22:20 . 2009-06-10 07:42 -------- d-----w- c:\program files\OrangeHSS
2009-07-19 22:17 . 2006-04-21 20:24 -------- d-----w- c:\program files\Google
2009-07-16 21:58 . 2006-04-21 19:52 -------- d-----w- c:\program files\Java
2009-07-09 06:01 . 2009-05-09 22:19 -------- d-----w- c:\program files\Orange
2009-06-16 14:40 . 2004-08-05 08:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2004-08-05 08:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-11 06:07 . 2007-08-26 15:34 -------- d-----w- c:\program files\Inventel
2009-06-10 07:43 . 2009-06-10 07:43 -------- d-----w- c:\program files\Securitoo
2009-06-10 07:40 . 2009-06-10 07:40 -------- d-----w- c:\program files\Fichiers communs\France Telecom
2009-06-09 13:58 . 2009-02-14 18:37 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\HP
2009-06-09 13:58 . 2008-10-22 21:27 83352 -c--a-w- c:\documents and settings\C-E.PC290951034918\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-03 19:10 . 2004-08-05 08:00 1297408 ----a-w- c:\windows\system32\quartz.dll
2009-05-28 16:16 . 2009-05-28 16:16 194 ----a-w- c:\documents and settings\C-E.PC290951034918\Application Data\wklnhst.dat
2009-05-28 16:16 . 2009-05-28 16:16 -------- d-----w- c:\documents and settings\C-E.PC290951034918\Application Data\Template
2009-05-28 08:48 . 2008-10-22 17:02 83352 -c--a-w- c:\documents and settings\QuotidienCE\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-13 05:04 . 2004-08-05 08:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2004-08-05 08:00 348672 ----a-w- c:\windows\system32\localspl.dll
2009-02-11 17:33 . 2008-07-03 06:20 134656 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
2006-09-09 23:30 . 2006-09-09 14:30 22 --sha-w- c:\windows\SMINST\HPCD.sys
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\documents and settings\QuotidienCE\Application Data\Adobe ----

2009-07-24 13:57 . 2009-07-25 12:55 11232 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\norigami.dll
2009-07-22 13:41 . 2009-07-22 13:41 0 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\frn\exception.txt
2009-07-22 13:32 . 2009-07-22 13:32 1024 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\frn\added.clam
2009-06-02 14:22 . 2009-06-02 14:22 148 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\F7536EF0D78A77B889EEBE98BF96BA5321A1FDE0.heu
2009-06-02 14:22 . 2009-06-02 14:22 127284 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\F7536EF0D78A77B889EEBE98BF96BA5321A1FDE0.swz
2009-05-19 06:59 . 2009-05-19 06:59 148 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\AF62E91CD3379900D89DDF6A3E235D6FADB952B7.heu
2009-05-19 06:59 . 2009-05-19 06:59 122948 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\AF62E91CD3379900D89DDF6A3E235D6FADB952B7.swz
2009-05-15 15:40 . 2009-07-24 13:09 0 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\Preferences\AutoFillDefaults.dat
2009-05-15 15:40 . 2009-07-24 13:09 870 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\Preferences\defaultHeuristics.dat
2009-05-14 05:02 . 2009-05-14 05:02 496 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\AdobeCMapFnt07.lst
2009-05-14 05:02 . 2009-05-21 09:58 82480 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\AdobeSysFnt07.lst
2009-05-14 05:02 . 2009-07-24 15:56 103 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\Collab\RSS
2009-05-14 05:02 . 2009-07-24 15:56 10 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\JavaScripts\glob.settings.js
2009-05-14 04:56 . 2009-05-21 09:58 77572 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\7.0\UserCache.bin
2009-03-17 10:55 . 2009-07-03 22:02 148 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\1C04C61346A1FA3139A37D860ED92632AA13DECF.heu
2009-03-17 10:55 . 2009-03-17 10:55 565987 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\1C04C61346A1FA3139A37D860ED92632AA13DECF.swz
2009-02-14 10:18 . 2009-07-24 13:26 150 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\26F1F5A0DEB2FBFC5345C20FF79DFFAFEE4EC7A6.heu
2009-02-14 10:18 . 2009-02-14 10:18 284050 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\26F1F5A0DEB2FBFC5345C20FF79DFFAFEE4EC7A6.swz
2009-02-11 08:03 . 2009-02-11 08:03 40663 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\Messages\FRA\read0600win_FRAadbe0040g.pdf
2008-11-19 21:15 . 2009-07-24 13:26 150 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.heu
2008-11-19 21:15 . 2008-11-19 21:15 541380 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\1846548181EAE8A4BB86AFC74FD021D9A0F6DFA6.swz
2008-11-08 15:00 . 2009-07-03 22:02 149 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\AF07B46903A6C5D87A24725CB7D50DE352A0383C.heu
2008-11-08 15:00 . 2008-11-08 15:00 537658 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\AF07B46903A6C5D87A24725CB7D50DE352A0383C.swz
2008-11-08 15:00 . 2009-06-02 14:22 8 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Flash Player\AssetCache\PMW62KZU\cacheSize.txt
2008-10-24 06:27 . 2008-10-30 06:24 59559 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst
2008-10-22 21:13 . 2009-05-13 07:26 54 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav
2008-10-22 21:13 . 2009-05-13 07:26 4 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\Collab\Reviews
2008-10-22 21:13 . 2009-05-13 07:26 4 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs
2008-10-22 21:13 . 2009-05-13 07:26 0 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat
2008-10-22 21:13 . 2009-05-13 07:26 870 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat
2008-10-22 21:13 . 2009-05-13 07:21 28541 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList

---- Directory of c:\documents and settings\QuotidienCE\Application Data\Apple Computer ----

2009-07-24 13:57 . 2009-07-25 12:55 13221 ----a-w- c:\documents and settings\QuotidienCE\Application Data\Apple Computer\xl12.exe

---- Directory of c:\documents and settings\QuotidienCE\Application Data\BitTorrent ----

2009-07-24 13:57 . 2009-07-24 13:57 422 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\mario.exe
2009-05-17 15:07 . 2009-05-17 15:07 56906 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\470fbf5b4c8899659f02f37e2e522018275d5399
2009-05-10 06:29 . 2009-05-10 06:29 4138 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\fc664e85a41219be533f36759e92875a98026200
2009-05-04 09:57 . 2009-05-04 09:57 2725 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\22c835fe548553a08762e3cf3e99e2b0479d56e6
2009-04-01 12:52 . 2009-04-01 12:52 38574 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\1eb7d780b456a3ea4ca21fd4aebf3c5347101a6e
2009-02-26 08:40 . 2009-02-26 08:40 56978 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\b5d0ab741c991195b5779308ea2b9d27ae88c6c1
2009-02-26 08:28 . 2009-02-26 08:28 56917 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\fa5dd5ddb0a862d3814590f87bbf15512fd6a1a0
2009-02-08 08:24 . 2009-02-08 08:24 56869 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\fbf4816003ad56320e292b564b1474bc0e874b30
2009-02-08 08:08 . 2009-02-08 08:08 7933 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\43f95f8ff8330afdfffb3ec0b05011a8225f23e8
2009-01-23 12:05 . 2009-01-23 12:05 14554 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\a23437b61c1473f2d3ec2c7f0c4473a53152f91c
2008-12-13 14:24 . 2009-07-25 11:23 1048 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\ui_config
2008-11-12 07:29 . 2008-11-12 07:32 1646 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\resume\c1184844ccca62dc71a2f42325dd50169fd994c7
2008-11-12 07:29 . 2008-12-12 20:30 385 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\torrents\c1184844ccca62dc71a2f42325dd50169fd994c7
2008-11-12 07:29 . 2008-11-12 07:29 1864 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\c1184844ccca62dc71a2f42325dd50169fd994c7
2008-11-01 10:33 . 2008-11-01 10:48 20017 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\resume\53ebf073a641dbb47f470b7e5715645ddbcccd15
2008-11-01 10:33 . 2008-12-12 20:30 380 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\torrents\53ebf073a641dbb47f470b7e5715645ddbcccd15
2008-11-01 10:33 . 2008-11-01 10:33 24820 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\53ebf073a641dbb47f470b7e5715645ddbcccd15
2008-10-26 09:16 . 2008-10-26 16:44 2957 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\resume\e8f0985a321fb0b57a6cf0cf39bd42caa73d48a8
2008-10-26 09:16 . 2008-12-12 20:30 391 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\torrents\e8f0985a321fb0b57a6cf0cf39bd42caa73d48a8
2008-10-26 09:16 . 2008-10-26 09:16 3811 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\e8f0985a321fb0b57a6cf0cf39bd42caa73d48a8
2008-10-24 09:11 . 2008-10-24 09:11 19408 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\7261640a4998d2b9d1d864711048b4ba13f1a4ed
2008-10-24 08:56 . 2008-12-12 22:08 1039 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\ui_config.broken
2008-10-24 08:56 . 2009-07-25 11:22 35 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\routing_table
2008-10-24 08:55 . 2008-10-26 09:18 16968 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\resume\19386483a6d6e0ffe6fc12bf6bef16bcdf7563d4
2008-10-24 08:55 . 2009-07-21 21:05 1010 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\resume\efa5446e585b9b7fa5e91550144e1f0394d2eee5
2008-10-24 08:55 . 2008-12-12 20:30 552 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\torrents\19386483a6d6e0ffe6fc12bf6bef16bcdf7563d4
2008-10-24 08:55 . 2008-10-24 08:55 23575 -c--a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\19386483a6d6e0ffe6fc12bf6bef16bcdf7563d4
2008-10-24 08:55 . 2009-07-25 11:23 101 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\ui_state
2008-10-24 08:55 . 2009-07-25 11:21 303 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\torrents\efa5446e585b9b7fa5e91550144e1f0394d2eee5
2008-10-24 08:55 . 2009-01-23 12:05 785 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\data\metainfo\efa5446e585b9b7fa5e91550144e1f0394d2eee5
2008-10-24 08:55 . 2009-07-25 11:23 86148 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\bittorrent.log
2008-10-24 08:55 . 2009-07-25 10:10 1048544 ----a-w- c:\documents and settings\QuotidienCE\Application Data\BitTorrent\bittorrent.log.1

---- Directory of c:\documents and settings\QuotidienCE\Application Data\CyberLink ----

2009-07-24 13:57 . 2009-07-25 12:55 145131 ----a-w- c:\documents and settings\QuotidienCE\Application Data\CyberLink\pingo.dll

---- Directory of c:\documents and settings\QuotidienCE\Application Data\DivX ----

2009-07-24 13:57 . 2009-07-25 12:55 16141 ----a-w- c:\documents and settings\QuotidienCE\Application Data\DivX\flamiks32.exe


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-08-08 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-11-10 344064]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-16 148888]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-06-19 729178]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2005-12-12 94208]
"eabconfg.cpl"="c:\program files\HPQ\Quick Launch Buttons\EabServr.exe" [2005-12-22 405504]
"Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2005-08-01 233534]
"RecGuard"="c:\windows\SMINST\RecGuard.exe" [2005-10-11 1187840]
"hpWirelessAssistant"="c:\program files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-12-13 507904]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-04-29 185896]
"CardDetectorHUAWEI"="c:\program files\CardDetector\HUAWEI\CardDetector.exe" [2008-12-01 274432]
"BEWINTERNET-FR-DMGP-V2SessionManager"="c:\program files\Orange\IEWInternet\SessionManager\SessionManager.exe" [2008-12-01 131824]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoStart IR.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\AutoStart IR.lnk
backup=c:\windows\pss\AutoStart IR.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide de HP Photosmart Premier.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Démarrage rapide de HP Photosmart Premier.lnk
backup=c:\windows\pss\Démarrage rapide de HP Photosmart Premier.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Orange\\IEWInternet\\Connectivity\\ConnectivityManager.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [17/07/2009 00:03 108289]
R2 EPGService;EPGService;c:\progra~1\WinTV\EPG Services\System\EPGService.exe [21/10/2008 15:23 435200]
R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [22/08/2005 11:06 231424]
S3 hcw66xxx;WinTV HVR-900H;c:\windows\system32\drivers\hcw66xxx.sys [23/10/2008 20:10 418304]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [09/07/2009 08:01 99840]
S3 MODBDA2;DiBcom MOD3000 TV receiver;c:\windows\system32\drivers\modbda2.sys [04/06/2005 02:56 30464]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = hxxp://configuration.adsl/
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
Trusted Zone: mappy.com
Trusted Zone: orange.fr
Trusted Zone: voila.fr\rw.search.ke
Trusted Zone: weborama.fr\orange
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-25 15:01
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe????????????n??|?@???? ???B?????????????hLC? ??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(856)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2992)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\progra~1\HPQ\shared\HPQTOA~1.EXE
.
**************************************************************************
.
Completion time: 2009-07-25 15:05 - machine was rebooted
ComboFix-quarantined-files.txt 2009-07-25 13:05
ComboFix2.txt 2009-07-25 12:43

Pre-Run: 9 008 390 144 octets libres
Post-Run: 8 981 344 256 octets libres

258 --- E O F --- 2009-07-16 21:58

SystemLook v1.0 by jpshortstuff (22.05.09)
Log created at 15:14 on 25/07/2009 by C-E (Administrator - Elevation successful)

========== dir ==========

c:\documents and settings\QuotidienCE\Application Data\BitTorrent - Parameters: "(none)"

---Files---
bittorrent.log --a--- 86148 bytes [08:55 24/10/2008] [11:23 25/07/2009]
bittorrent.log.1 --a--- 1048544 bytes [08:55 24/10/2008] [10:10 25/07/2009]

---Folders---
data d----- [08:55 24/10/2008]
incomplete d----- [09:04 24/10/2008]
locale d----- [08:53 24/10/2008]

c:\documents and settings\QuotidienCE\Application Data\DivX - Parameters: "(none)"

---Files---
None found.

---Folders---
DivX Codec d----- [17:45 11/02/2009]

c:\documents and settings\QuotidienCE\Application Data\CyberLink - Parameters: "(none)"

---Files---
None found.

---Folders---
PowerCinema d----- [13:36 25/10/2008]
PowerDVD d----- [14:34 22/11/2008]

c:\documents and settings\QuotidienCE\Application Data\Apple Computer - Parameters: "(none)"

---Files---
None found.

---Folders---
QuickTime d----- [17:53 18/01/2009]

c:\documents and settings\QuotidienCE\Application Data\Adobe - Parameters: "(none)"

---Files---
None found.

---Folders---
Acrobat d----- [21:13 22/10/2008]
Flash Player d----- [21:23 22/10/2008]
Linguistics d----- [13:32 22/07/2009]

-=End Of File=-

Et bien, ça m'a l'air pas mal du tout !!!

Malwarebytes' Anti-Malware 1.39
Version de la base de données: 2498
Windows 5.1.2600 Service Pack 3

25/07/2009 15:42:31
mbam-log-2009-07-25 (15-42-31).txt

Type de recherche: Examen rapide
Eléments examinés: 91360
Temps écoulé: 4 minute(s), 42 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Logfile of random's system information tool 1.06 (written by random/random)
Run by C-E at 2009-07-25 15:49:01
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 11 GB (16%) free of 69 GB
Total RAM: 1022 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:49:06, on 25/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\CardDetector\HUAWEI\CardDetector.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\C-E.PC290951034918\Bureau\RSIT.exe
C:\Documents and Settings\QuotidienCE\Bureau\C-E.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://configuration.adsl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CardDetectorHUAWEI] C:\Program Files\CardDetector\HUAWEI\CardDetector.exe
O4 - HKLM\..\Run: [BEWINTERNET-FR-DMGP-V2SessionManager] "C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\Program Files\NOS\bin\getPlus_HelperSvc.exe" /UninstallGet1noarp
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6 [...] vSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6 [...] /cabsa.cab
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8971.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: EPGService - Hauppauge Computer Works - C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

--
End of file - 8522 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-07-16 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-16 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-16 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-08-08 691656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-11-10 344064]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-06-19 729178]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2005-12-12 94208]
"eabconfg.cpl"=C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe [2005-12-22 405504]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2005-08-01 233534]
"RecGuard"=C:\Windows\SMINST\RecGuard.exe [2005-10-11 1187840]
"hpWirelessAssistant"=C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [2005-12-13 507904]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-04-29 185896]
"CardDetectorHUAWEI"=C:\Program Files\CardDetector\HUAWEI\CardDetector.exe [2008-12-01 274432]
"BEWINTERNET-FR-DMGP-V2SessionManager"=C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe [2008-12-01 131824]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-16 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall Adobe Download Manager"=C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2009-07-14 66056]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-07-13 414992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-04-29 185896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^AutoStart IR.lnk]
C:\PROGRA~1\WinTV\Ir.exe [2008-01-21 110647]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide de HP Photosmart Premier.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2005-09-24 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-11-11 47616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*isabled:bittorrent"
"C:\Program Files\Orange\IEWInternet\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\IEWInternet\Connectivity\ConnectivityManager.exe:*:enabled:CSS"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-07-25 15:24:40 ----D---- C:\Program Files\NOS
2009-07-25 15:24:40 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-07-25 15:21:06 ----SHD---- C:\RECYCLER
2009-07-25 15:20:14 ----SD---- C:\ComboFix
2009-07-25 15:05:39 ----A---- C:\ComboFix.txt
2009-07-25 14:58:54 ----D---- C:\WINDOWS\temp
2009-07-25 09:45:15 ----D---- C:\WINDOWS\system32\NtmsData
2009-07-24 23:17:36 ----D---- C:\WINDOWS\BDOSCAN8
2009-07-24 23:03:21 ----D---- C:\Documents and Settings\C-E.PC290951034918\Application Data\HouseCall 6.6
2009-07-24 19:53:05 ----D---- C:\WINDOWS\ERDNT
2009-07-24 18:21:16 ----D---- C:\Documents and Settings\C-E.PC290951034918\Application Data\Malwarebytes
2009-07-24 18:08:26 ----A---- C:\WINDOWS\ntbtlog.txt
2009-07-24 18:03:33 ----A---- C:\WINDOWS\system32\tmp.txt
2009-07-24 17:58:48 ----D---- C:\rsit
2009-07-24 17:27:52 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-17 00:03:05 ----D---- C:\Program Files\Avira
2009-07-17 00:03:05 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\javaws.exe
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\javaw.exe
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\java.exe
2009-07-16 23:58:53 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-07-16 23:57:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-16 23:57:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-16 23:55:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-09 08:04:17 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2009-07-09 08:00:11 ----D---- C:\Program Files\CardDetector
2009-06-30 12:35:19 ----D---- C:\Program Files\IrfanView

======List of files/folders modified in the last 1 months======

2009-07-25 15:42:43 ----D---- C:\Program Files\Mozilla Firefox
2009-07-25 15:31:17 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-25 15:31:14 ----D---- C:\WINDOWS\system32\drivers
2009-07-25 15:29:29 ----SHD---- C:\WINDOWS\Installer
2009-07-25 15:29:28 ----HD---- C:\Config.Msi
2009-07-25 15:29:27 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-07-25 15:28:37 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-07-25 15:28:30 ----D---- C:\WINDOWS\WinSxS
2009-07-25 15:27:56 ----D---- C:\Program Files\Adobe
2009-07-25 15:27:02 ----D---- C:\WINDOWS\system32
2009-07-25 15:24:40 ----RD---- C:\Program Files
2009-07-25 15:21:37 ----SHD---- C:\System Volume Information
2009-07-25 15:20:24 ----D---- C:\WINDOWS
2009-07-25 15:01:39 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-25 15:01:38 ----A---- C:\WINDOWS\system.ini
2009-07-25 15:01:16 ----ASH---- C:\hpqp.ini
2009-07-25 15:01:14 ----A---- C:\XP_TV.ini
2009-07-25 14:58:14 ----D---- C:\WINDOWS\AppPatch
2009-07-25 14:58:11 ----D---- C:\Program Files\Fichiers communs
2009-07-25 14:42:26 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-07-25 13:54:24 ----D---- C:\WINDOWS\Prefetch
2009-07-24 23:17:39 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-24 23:17:36 ----HD---- C:\WINDOWS\inf
2009-07-24 22:57:48 ----D---- C:\Documents and Settings
2009-07-24 21:57:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-24 20:00:30 ----A---- C:\rapport.txt
2009-07-24 19:30:34 ----SD---- C:\WINDOWS\Tasks
2009-07-24 16:44:30 ----D---- C:\WINDOWS\Minidump
2009-07-21 20:07:23 ----D---- C:\MyVideos
2009-07-20 10:37:21 ----D---- C:\WINDOWS\Debug
2009-07-20 10:34:25 ----D---- C:\Program Files\CCleaner
2009-07-20 00:20:13 ----D---- C:\Program Files\OrangeHSS
2009-07-20 00:17:21 ----D---- C:\Program Files\Google
2009-07-16 23:58:27 ----D---- C:\Program Files\Java
2009-07-16 23:57:55 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-16 23:53:41 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-07-16 18:35:14 ----A---- C:\WINDOWS\ModemLog_AC97 Soft Data Fax Modem with SmartCP.txt
2009-07-09 08:01:27 ----D---- C:\Program Files\Orange
2009-07-07 17:10:56 ----A---- C:\WINDOWS\system32\MRT.exe
2009-06-29 00:17:04 ----RASH---- C:\boot.ini
2009-06-29 00:17:04 ----A---- C:\WINDOWS\win.ini
2009-06-28 16:28:58 ----D---- C:\WINDOWS\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-07-17 28520]
R1 WmiAcpi;Interface de gestion Microsoft Windows pour ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-11-11 1396224]
R3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-11-28 424320]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2005-08-02 38016]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2005-08-02 349312]
R3 catchme;catchme; \??\C:\DOCUME~1\C-E~1.PC2\LOCALS~1\Temp\catchme.sys []
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-08-22 1035008]
R3 HSFHWATI;HSFHWATI; C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 231424]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2005-09-30 78720]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-06-19 190400]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-09-20 162432]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-08-22 718464]
S3 a66fqzju;a66fqzju; C:\WINDOWS\system32\drivers\a66fqzju.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-08-18 56648]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 eabusb;eabusb; \??\C:\WINDOWS\system32\drivers\eabusb.sys []
S3 hcw66xxx;WinTV HVR-900H; C:\WINDOWS\System32\Drivers\hcw66xxx.sys [2008-02-28 418304]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2008-11-12 101120]
S3 hwusbfake;Huawei DataCard USB Fake; C:\WINDOWS\system32\DRIVERS\ewusbfake.sys [2008-11-12 99840]
S3 MODBDA2;DiBcom MOD3000 TV receiver; C:\WINDOWS\System32\Drivers\modbda2.sys [2005-06-04 30464]
S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SMCIRDA;Pilote de périphérique SMC IrCC Miniport; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-08-23 36937]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2009-01-03 611664]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-17 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-17 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-11-11 389120]
R2 EPGService;EPGService; C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [2006-07-19 435200]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2005-12-22 98304]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-16 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2005-11-15 73728]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2009-07-14 66056]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Ca a l'air de marcher !!!
En tout cas à l'ouverture de Firefox, je n'ai plus de message !!

Merci beaucoup de ton aide Destrio5 !!!

Je poste déjà le rapport de ToolsCleaner2 et je fais la suite des manips

[ Rapport ToolsCleaner version 2.3.8 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\rapport_clean.txt: trouvé !
C:\FixWareOut: trouvé !
C:\Combofix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\C-E\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\C-E\Mes documents\Logiciels\FixWareout.exe: trouvé !
C:\Documents and Settings\C-E\Mes documents\Logiciels\SmitFraudfix: trouvé !
C:\Documents and Settings\C-E\Mes documents\Logiciels\SmitfraudFix\SmitFraudfix: trouvé !
C:\Documents and Settings\C-E.PC290951034918\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\QuotidienCE\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\QuotidienCE\Bureau\HijackThis.exe: trouvé !
C:\Documents and Settings\QuotidienCE\Bureau\hijackthis.log: trouvé !
C:\Documents and Settings\QuotidienCE\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\QuotidienCE\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Documents and Settings\QuotidienCE\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: trouvé !
C:\Documents and Settings\QuotidienCE\Mes documents\backups\hijackthis.log: trouvé !
C:\Documents and Settings\QuotidienCE\Recent\HijackThis.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
--> Suppression:

C:\Documents and Settings\C-E\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\C-E\Mes documents\Logiciels\FixWareout.exe: supprimé !
C:\Documents and Settings\QuotidienCE\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\QuotidienCE\Bureau\HijackThis.exe: supprimé !
C:\Documents and Settings\QuotidienCE\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\rapport_clean.txt: supprimé !
C:\Documents and Settings\C-E.PC290951034918\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\QuotidienCE\Bureau\hijackthis.log: supprimé !
C:\Documents and Settings\QuotidienCE\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\QuotidienCE\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: supprimé !
C:\Documents and Settings\QuotidienCE\Mes documents\backups\hijackthis.log: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\FixWareOut: supprimé !
C:\Combofix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\C-E\Mes documents\Logiciels\SmitFraudfix: supprimé !
C:\Documents and Settings\QuotidienCE\Menu Démarrer\Programmes\UsbFix: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Encore merci !!

j'ai le probleme de security center alert win32.brontoc
voici le rapport de combofix
si quelqu'un peut m'aider



ComboFix 09-08-01.06 - Delanoë 02/08/2009 12:15.1.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.487 [GMT 2:00]
Running from: c:\documents and settings\Delanoë\Bureau\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090801-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AskSearch\bin\DefaultSearch.dll
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\config.ini
c:\program files\Dealio Toolbar\DealioToolbarIE.dll
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\separator.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\SearchSettingsKit.exe
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\Search Settings
c:\program files\Search Settings\kb128\SearchSettings.dll
c:\program files\Search Settings\kb128\SearchSettingsRes409.dll
c:\program files\Search Settings\SearchSettings.exe
c:\windows\system32\CmdLineExt.dll
c:\windows\Sysvxd.exe

.
((((((((((((((((((((((((( Files Created from 2009-07-02 to 2009-08-02 )))))))))))))))))))))))))))))))
.

2009-08-02 09:55 . 2009-08-02 09:55 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-08-02 08:40 . 2008-04-14 02:33 26624 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2009-08-01 22:46 . 2009-07-03 16:57 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-08-01 22:46 . 2009-07-03 16:57 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2009-08-01 22:46 . 2009-07-03 16:57 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-08-01 22:46 . 2009-07-03 16:57 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-08-01 22:46 . 2009-07-19 16:45 11067392 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-08-01 22:46 . 2009-07-03 16:57 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-08-01 22:46 . 2009-08-01 22:47 -------- d-----w- c:\windows\ie8updates
2009-08-01 22:46 . 2009-07-01 07:08 101376 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-08-01 22:44 . 2009-08-01 22:46 -------- dc-h--w- c:\windows\ie8
2009-08-01 22:42 . 2009-08-01 22:42 -------- d-----w- c:\program files\Windows Media Connect 2
2009-08-01 22:40 . 2009-08-01 22:41 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-08-01 22:40 . 2009-08-01 22:40 -------- d-----w- c:\windows\system32\LogFiles
2009-08-01 22:00 . 2009-08-01 22:00 -------- d-----w- c:\program files\FusionSoft DVD Player XP
2009-08-01 19:30 . 2009-02-05 20:06 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-01 19:30 . 2009-02-05 20:06 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-01 19:30 . 2009-02-05 20:05 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-01 19:30 . 2009-02-05 20:04 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-01 19:30 . 2009-02-05 20:07 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-01 19:30 . 2009-02-05 20:07 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-01 19:30 . 2009-02-05 20:08 93296 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-01 19:30 . 2009-02-05 20:08 94032 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-01 19:30 . 2009-02-05 20:11 1256296 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-01 19:29 . 2009-08-01 19:29 -------- d-----w- c:\program files\Alwil Software
2009-07-31 20:27 . 2009-07-31 20:27 -------- d-----w- c:\program files\Eurobarre
2009-07-31 20:27 . 2009-07-31 20:27 -------- d-----w- c:\windows\Eurobarre
2009-07-31 13:08 . 2009-07-31 13:08 -------- d-----w- c:\program files\AWBarre
2009-07-30 14:48 . 2009-07-23 12:50 299008 ----a-w- c:\windows\system32\TubeFinder.exe
2009-07-30 14:48 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
2009-07-30 14:48 . 2009-06-19 17:51 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2009-07-30 14:48 . 2009-07-30 16:48 -------- d-----w- c:\program files\Free FLV Converter
2009-07-30 14:48 . 2009-06-19 17:51 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2009-07-30 14:48 . 2009-06-19 17:51 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2009-07-30 13:15 . 2009-07-30 13:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Apowersoft
2009-07-30 13:15 . 2009-07-30 13:15 -------- d-----w- c:\program files\Apowersoft
2009-07-30 12:33 . 2001-08-23 15:47 8704 -c--a-w- c:\windows\system32\dllcache\kbdjpn.dll
2009-07-30 12:33 . 2001-08-23 15:47 8704 ----a-w- c:\windows\system32\kbdjpn.dll
2009-07-30 12:33 . 2001-08-23 15:47 8192 -c--a-w- c:\windows\system32\dllcache\kbdkor.dll
2009-07-30 12:33 . 2001-08-23 15:47 8192 ----a-w- c:\windows\system32\kbdkor.dll
2009-07-30 12:33 . 2001-08-17 20:55 6144 -c--a-w- c:\windows\system32\dllcache\kbd101c.dll
2009-07-30 12:33 . 2001-08-17 20:55 6144 ----a-w- c:\windows\system32\kbd101c.dll
2009-07-30 12:33 . 2001-08-17 20:55 5632 -c--a-w- c:\windows\system32\dllcache\kbd103.dll
2009-07-30 12:33 . 2001-08-17 20:55 5632 ----a-w- c:\windows\system32\kbd103.dll
2009-07-30 12:33 . 2001-08-17 20:55 6144 -c--a-w- c:\windows\system32\dllcache\kbd101b.dll
2009-07-30 12:33 . 2001-08-17 20:55 6144 ----a-w- c:\windows\system32\kbd101b.dll
2009-07-30 12:33 . 2008-04-14 01:31 6144 -c--a-w- c:\windows\system32\dllcache\kbd106.dll
2009-07-30 12:33 . 2008-04-14 01:31 6144 ----a-w- c:\windows\system32\kbd106.dll
2009-07-30 12:32 . 2009-07-30 12:32 -------- d-----w- C:\downloads
2009-07-30 12:31 . 2009-07-30 12:31 -------- d-----w- c:\program files\Xmlbar
2009-07-19 14:55 . 2009-07-19 14:55 -------- d-----w- c:\documents and settings\All Users\Application Data\r2-97-47-2p-55-55
2009-07-19 14:54 . 2009-07-19 14:58 -------- d-----w- c:\program files\GameHouse
2009-07-19 14:25 . 2009-07-19 14:25 -------- d-----w- c:\program files\BitTorrent
2009-07-19 14:25 . 2009-07-19 14:25 -------- d-----w- c:\program files\AskSearch
2009-07-19 14:25 . 2009-07-19 14:25 -------- d-----w- c:\program files\AskBarDis
2009-07-19 14:14 . 2009-07-19 14:14 -------- d-----w- c:\documents and settings\All Users\Application Data\n7-89-o9-3r-4t-r9
2009-07-19 13:04 . 2006-09-26 10:03 98304 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
2009-07-19 13:04 . 2009-07-19 13:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Zylom
2009-07-19 13:04 . 2006-09-26 10:03 161976 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll
2009-07-19 13:03 . 2009-07-19 14:07 -------- d-----w- c:\program files\Zylom Games

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-18 21:40 . 2009-05-04 19:40 -------- d-----w- c:\program files\DivX
2009-07-14 19:45 . 2009-05-18 21:11 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-07-13 12:21 . 2009-05-18 21:11 -------- d-----w- c:\program files\AoA Audio Extractor
2009-07-13 10:53 . 2004-08-05 13:00 80946 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-13 10:53 . 2004-08-05 13:00 501138 ----a-w- c:\windows\system32\perfh00C.dat
2009-07-09 17:31 . 2009-05-30 18:59 198432 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-07-03 16:57 . 2004-08-05 13:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-06-16 14:40 . 2004-08-05 13:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2004-08-05 13:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-14 18:37 . 2009-06-14 18:37 -------- d-----w- c:\program files\QuickTime
2009-06-14 18:36 . 2009-06-14 18:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-06-14 18:36 . 2009-06-14 18:36 -------- d-----w- c:\program files\Apple Software Update
2009-06-14 18:36 . 2009-06-14 18:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-06-14 17:42 . 2009-06-14 17:42 28672 ----a-w- c:\windows\system32\qttask.exe
2009-06-14 17:38 . 2009-06-14 17:38 -------- d-----w- c:\program files\Musicalis
2009-06-14 17:38 . 2009-06-14 17:38 -------- d-----w- c:\program files\directx
2009-06-03 19:10 . 2004-08-05 13:00 1297408 ----a-w- c:\windows\system32\quartz.dll
2009-05-27 22:24 . 2009-05-27 22:24 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-05-07 15:33 . 2004-08-05 13:00 348672 ----a-w- c:\windows\system32\localspl.dll
2009-07-22 22:21 . 2009-03-24 19:36 134648 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
2009-05-01 21:02 . 2009-04-15 20:24 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-04-15 20:24 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2009-04-02 10:47 333192 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2009-04-02 333192]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2009-04-02 333192]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-09-27 344064]
"WD Drive Manager"="c:\program files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe" [2008-10-24 450560]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2007-05-10 624248]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"realteks"="c:\documents and settings\Delanoë\Application Data\Google\cqvgl19623160.exe" [2009-07-31 130560]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\TVAnts\\Tvants.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [01/08/2009 21:30 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [01/08/2009 21:30 20560]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [24/10/2008 11:09 102400]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - UPNPHOST

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-06-26 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
- - - - ORPHANS REMOVED - - - -

BHO-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - c:\program files\Dealio Toolbar\DealioToolbarIE.dll
Toolbar-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - c:\program files\Dealio Toolbar\DealioToolbarIE.dll
HKLM-Run-SearchSettings - c:\program files\Search Settings\SearchSettings.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.ask.com/?o=101764&l=dis
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
IE: Ajouter au fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir la sélection en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la sélection en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir les liens sélectionnés en fichier Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convertir les liens sélectionnés en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
FF - ProfilePath - c:\documents and settings\Delanoë\Application Data\Mozilla\Firefox\Profiles\vjhppcag.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.google.com
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p=
FF - component: c:\documents and settings\Delanoë\Application Data\Mozilla\Firefox\Profiles\vjhppcag.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}\components\DealioToolbarFF.dll
FF - component: c:\program files\Mozilla Firefox\extensions\search@searchsettings.com\components\SearchSettingsFF.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, true);.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-02 12:21
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(760)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2009-08-02 12:22
ComboFix-quarantined-files.txt 2009-08-02 10:22

Pre-Run: 48 389 255 168 octets libres
Post-Run: 48 656 363 520 octets libres

233 --- E O F --- 2009-07-29 18:18