Salut !

Quels sont les problèmes ?

Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

http://images.malwareremoval.com/random/RSIT.exe

Double-clique sur RSIT.exe.

Clique sur Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

A noter: Les rapports se trouvent également ici: C:\rsit.

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

J'me lance...

Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PoiZone-->C:\Program Files\Image-Line\PoiZone\uninstall.exe
Polaroid Digital Cam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FBF18108-DDC2-11D5-BEBF-00606733A9BE}\setup.exe"
QuickTime-->MsiExec.exe /I{5B09BD67-4C99-46A1-8161-B7208CE18121}
RealPlayer Basic-->C:\Program Files\Fichiers communs\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Solutions de télécopie Lexmark-->C:\Program Files\Lexmark Fax Solutions\Install\x86\Uninst.exe /R:faxunst
Sony Ericsson Communication Center-->MsiExec.exe /X{7B98B956-EF9E-4801-BAC5-AC55546139EE}
Sony Ericsson Media Manager 1.1-->MsiExec.exe /X{82419DFA-102C-403D-B9D0-C0F0652AB8F8}
Sony Ericsson PC Suite 1.20.224-->MsiExec.exe /I{7689CA7A-1270-425A-9959-EB4CB25EA29A}
Sony Ericsson PC Suite 3.209.00-->C:\Program Files\InstallShield Installation Information\{2FFE93F0-BB72-4E52-8761-354D1AAA9387}\Setup.exe -runfromtemp -l0x040c -removeonly
Text-To-Speech-Runtime-->MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Toxic Biohazard-->C:\Program Files\Image-Line\Toxic Biohazard\uninstall.exe
tupac_screensaver-->C:\WINDOWS\tupac_screensaver.scr /u
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Update Service-->C:\Program Files\Sony Ericsson\Update Service\uninst.exe
VIA Rhine-Family Fast Ethernet Adapter-->Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Xilisoft Video Converter 3-->C:\Program Files\Xilisoft\Video Converter 3\Uninstall.exe
Yahoo! Companion-->rundll32.exe C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\YCOMP5~1.DLL,DllCommand ui

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090623-0]
FW: Norton Internet Worm Protection (disabled)

======System event log======

Computer Name: R2D2
Event Code: 7036
Message: Le service Hôte de périphérique universel Plug-and-Play est entré dans l'état : en cours d'exécution.

Record Number: 10414
Source Name: Service Control Manager
Time Written: 20090501113030.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Hôte de périphérique universel Plug-and-Play.

Record Number: 10413
Source Name: Service Control Manager
Time Written: 20090501113029.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: R2D2
Event Code: 7036
Message: Le service Acquisition d'image Windows (WIA) est entré dans l'état : en cours d'exécution.

Record Number: 10412
Source Name: Service Control Manager
Time Written: 20090501110742.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

Record Number: 10411
Source Name: Service Control Manager
Time Written: 20090430210658.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 10410
Source Name: Service Control Manager
Time Written: 20090430210655.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: R2D2
Event Code: 0
Message: Service started

Record Number: 5
Source Name: fsssvc
Time Written: 20090623185647.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 0
Message:
Record Number: 4
Source Name: MSCamSvc
Time Written: 20090623185647.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 0
Message:
Record Number: 3
Source Name: MSCamSvc
Time Written: 20090623185647.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 0
Message:
Record Number: 2
Source Name: MSCamSvc
Time Written: 20090623185647.000000+120
Event Type: Informations
User:

Computer Name: R2D2
Event Code: 0
Message:
Record Number: 1
Source Name: gusvc
Time Written: 20090623185644.000000+120
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\Fichiers communs\Autodesk Shared\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
"SAFEBOOT_OPTION"=DSREPAIR

-----------------EOF-----------------




Logfile of random's system information tool 1.06 (written by random/random)
Run by Tony at 2009-06-23 21:33:47
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 107 GB (35%) free of 305 GB
Total RAM: 1022 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:36:17, on 23/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\M-Audio\Install\EvoInst.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
C:\WINDOWS\system32\lxddcoms.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Tony\Mes documents\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/fsc/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {23649E36-60C6-4433-880A-9DF59FC27342} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2454207 12
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: desktop(2).ini (User 'Default user')
O4 - Startup: Raccourci vers ashDisp.lnk = C:\Program Files\Alwil Software\Avast4\ashDisp.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_2\Ghost (file missing)
O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_2\Ghost (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: M-Audio Installer (EvoInstallerService) - Unknown owner - C:\Program Files\M-Audio\Install\EvoInst.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxddCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe
O23 - Service: lxdd_device - - C:\WINDOWS\system32\lxddcoms.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe (file missing)
O24 - Desktop Component 0: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00524.JPG
O24 - Desktop Component 1: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00603.JPG
O24 - Desktop Component 2: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\DSC00442.jpg
O24 - Desktop Component 3: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-05-02-1902-02\DSC00464.JPG
O24 - Desktop Component 4: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00580.JPG
O24 - Desktop Component 5: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00457.JPG
O24 - Desktop Component 6: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-05-02-1902-02\julien.JPG
O24 - Desktop Component 7: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00500_edited.JPG
O24 - Desktop Component 8: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-05-02-1902-02\DSC00573.JPG
End of file - 10553 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\Microsoft_Hardware_Launch_vVX1000_exe.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
Yahoo! Companion BHO - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll [2004-05-24 275031]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}]
Lexmark Barre d'outils - C:\Program Files\Lexmark Toolbar\toolband.dll [2006-08-09 184320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-02-06 61808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-22 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Companion - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll [2004-05-24 275031]
{1017A80C-6F09-4548-A84D-EDD6AC9525F0} - Lexmark Barre d'outils - C:\Program Files\Lexmark Toolbar\toolband.dll [2006-08-09 184320]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
{23649E36-60C6-4433-880A-9DF59FC27342}
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll,NvStartup []
"RealTray"=C:\Program Files\Real\RealPlayer\RealPlay.exe [2007-06-17 26112]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"VX1000"=C:\WINDOWS\vVX1000.exe [2007-04-10 709992]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-10-19 286720]
"fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-02-06 454000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"fsc-reminder.exe"=C:\WINDOWS\reminder\fsc-reminder.exe [2005-01-19 28672]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Booster]
C:\Program Files\inKline Global\PC Booster\pcbooster.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2007-10-19 286720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2008-02-20 360448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2008-04-23 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AOL ACS"=2

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
AOL 9.0 Icône AOL.lnk - C:\Program Files\AOL 9.0\aoltray.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Documents and Settings\Tony\Menu Démarrer\Programmes\Démarrage
Raccourci vers ashDisp.lnk - C:\Program Files\Alwil Software\Avast4\ashDisp.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\WINDOWS\system32\lxddcoms.exe"="C:\WINDOWS\system32\lxddcoms.exe:*:Enabled:Lexmark Communications System"
"C:\Program Files\Lexmark 2500 Series\lxddamon.exe"="C:\Program Files\Lexmark 2500 Series\lxddamon.exe:*:Enabled:Lexmark Device Monitor"
"C:\Program Files\Lexmark 2500 Series\App4R.exe"="C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio"
"C:\Program Files\Freeplayer\vlc\vlc.exe"="C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:uTorrent"
"C:\Program Files\Autodesk\3dsMax8\3dsmax.exe"="C:\Program Files\Autodesk\3dsMax8\3dsmax.exe:*:Enabled:Autodesk 3ds Max 8"
"C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe"="C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.1"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Lexmark 2500 Series\lxddmon.exe"="C:\Program Files\Lexmark 2500 Series\lxddmon.exe:*:Enabled: "
"C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
"C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe:*:Enabled: "
"C:\Program Files\HT Web Cam 3.0\HTWebCam.exe"="C:\Program Files\HT Web Cam 3.0\HTWebCam.exe:*:Disabled:HT Web Cam 3.0"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe:*:Enabled: "
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe:*:Enabled: "
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe:*:Enabled: "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Lexmark 2500 Series\app4r.exe"="C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Printing Application"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{494e87ac-15b4-11de-a7df-001617c9cb8a}]
shell\Shell00\command - K:\Start.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a8c302ea-0da4-11de-a7d5-001617c9cb8a}]
shell\AutoRun\command - K:\un9.cmd
shell\explore\command - K:\un9.cmd
shell\open\command - K:\un9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c1b1d8d4-3c22-11de-a808-001617c9cb8a}]
shell\AutoRun\command - explorer.exe .


======File associations======

.reg - open - "regedit.exe" "%1"
.scr - open - "%1" %*

======List of files/folders created in the last 1 months======

2009-06-23 21:33:47 ----D---- C:\rsit
2009-06-22 20:41:17 ----A---- C:\WINDOWS\imsins.BAK
2009-06-22 20:41:14 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-06-21 22:45:49 ----A---- C:\WINDOWS\ntbtlog.txt
2009-06-21 22:20:37 ----D---- C:\Program Files\SIW
2009-06-21 21:20:26 ----D---- C:\Program Files\ma-config.com
2009-06-21 21:20:26 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-06-21 21:14:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP
2009-06-21 21:12:35 ----D---- C:\WINDOWS\LastGood(2)
2009-06-21 20:58:21 ----D---- C:\NVIDIA(2)
2009-06-20 00:06:57 ----A---- C:\WINDOWS\DUMP66d8.tmp
2009-06-19 23:22:28 ----A---- C:\WINDOWS\UPGRADE.TXT
2009-06-14 20:25:16 ----SHD---- C:\WINDOWS\CSC
2009-06-11 06:44:17 ----DC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 06:44:08 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-11 06:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 06:42:35 ----DC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 06:42:26 ----DC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-07 21:41:09 ----D---- C:\Program Files\Fichiers communs\DivX Shared

======List of files/folders modified in the last 1 months======

2009-06-23 20:09:41 ----D---- C:\Program Files\Mozilla Firefox
2009-06-23 19:58:57 ----D---- C:\WINDOWS\Temp
2009-06-23 19:57:52 ----D---- C:\WINDOWS\Registration
2009-06-23 19:57:30 ----SD---- C:\WINDOWS\Tasks
2009-06-23 19:57:16 ----D---- C:\WINDOWS
2009-06-23 18:58:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-23 18:57:52 ----D---- C:\WINDOWS\Prefetch
2009-06-22 20:41:27 ----HD---- C:\WINDOWS\inf
2009-06-22 20:41:25 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-22 20:41:25 ----AD---- C:\WINDOWS\system32
2009-06-22 20:40:40 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-22 20:40:39 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-22 20:38:37 ----D---- C:\WINDOWS\Debug
2009-06-22 20:37:44 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-06-22 00:56:56 ----D---- C:\WINDOWS\Help
2009-06-22 00:56:44 ----D---- C:\NVIDIA
2009-06-22 00:56:10 ----D---- C:\Program Files\NRJ
2009-06-22 00:56:09 ----D---- C:\Config.Msi
2009-06-22 00:56:06 ----D---- C:\Documents and Settings\All Users\Application Data\Autodesk
2009-06-22 00:55:45 ----D---- C:\WINDOWS\WinSxS
2009-06-22 00:55:38 ----SHD---- C:\WINDOWS\Installer
2009-06-22 00:55:18 ----D---- C:\WINDOWS\system32\drivers
2009-06-22 00:53:44 ----D---- C:\Program Files\DivX
2009-06-22 00:53:40 ----D---- C:\Program Files\HT Web Cam 3.0
2009-06-22 00:49:53 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-22 00:31:12 ----D---- C:\Documents and Settings\Tony\Application Data\uTorrent
2009-06-22 00:31:12 ----D---- C:\Documents and Settings\Tony\Application Data\DivX
2009-06-22 00:25:29 ----D---- C:\WINDOWS\system32\config
2009-06-22 00:25:04 ----D---- C:\WINDOWS\system32\wbem
2009-06-21 23:22:20 ----D---- C:\WINDOWS\nview
2009-06-21 22:55:48 ----AD---- C:\Program Files\Fichiers communs
2009-06-21 22:20:37 ----AD---- C:\Program Files
2009-06-21 21:20:32 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-20 00:38:49 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-16 00:26:18 ----A---- C:\WINDOWS\DUMP4248.tmp
2009-06-14 23:35:13 ----A---- C:\WINDOWS\DUMP41ac.tmp
2009-06-14 21:40:45 ----A---- C:\WINDOWS\DUMP42b6.tmp
2009-06-14 21:38:31 ----A---- C:\WINDOWS\DUMP42c5.tmp
2009-06-11 06:44:02 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-07 02:28:15 ----A---- C:\WINDOWS\Robota.INI
2009-06-07 02:28:15 ----A---- C:\WINDOWS\BeatBox.INI
2009-06-03 16:57:53 ----D---- C:\Program Files\Lx_cats
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R2 ACEDRV07;ACEDRV07; \??\C:\WINDOWS\system32\drivers\ACEDRV07.sys []
R2 ACEDRV08;ACEDRV08; \??\C:\WINDOWS\system32\drivers\ACEDRV08.sys []
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2007-06-17 8552]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2008-12-08 55136]
R2 usbhub;DSC Composite USB Device; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-24 4374016]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2004-04-14 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2004-04-14 44064]
S1 hidfltr;HID Filter Driver; C:\WINDOWS\system32\drivers\MWhid.sys [2004-11-03 13332]
S2 Ca533av;Polaroid Digital Cam Video; C:\WINDOWS\System32\Drivers\Ca533av.sys []
S3 a016bus;Sony Ericsson Device A016 driver (WDM); C:\WINDOWS\system32\DRIVERS\a016bus.sys [2008-01-18 83880]
S3 a016mdfl;Sony Ericsson Device A016 USB WMC Modeme Filter; C:\WINDOWS\system32\DRIVERS\a016mdfl.sys [2008-01-18 15016]
S3 a016mdm;Sony Ericsson Device A016 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\a016mdm.sys [2008-01-18 110504]
S3 a016mgmt;Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\a016mgmt.sys [2008-01-18 104488]
S3 a016obex;Sony Ericsson Device A016 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\a016obex.sys [2008-01-18 100648]
S3 afwqtwab;afwqtwab; C:\WINDOWS\system32\drivers\afwqtwab.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EVOLUSB;%EVOL_USB.SvcDesc%; C:\WINDOWS\system32\drivers\evolusb.sys [2004-10-20 21984]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS\system32\DRIVERS\ggflt.sys [2008-06-11 13352]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2008-06-11 21672]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys []
S3 PCTINDIS5;PCTINDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCTINDIS5.SYS []
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\WINDOWS\system32\DRIVERS\s116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\WINDOWS\system32\DRIVERS\s116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\WINDOWS\system32\DRIVERS\s116unic.sys [2007-04-03 99080]
S3 SE2Bbus;Sony Ericsson Device 043 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE2Bbus.sys [2006-05-01 61600]
S3 SE2Bmdfl;Sony Ericsson Device 043 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\SE2Bmdfl.sys [2006-05-01 9360]
S3 SE2Bmdm;Sony Ericsson Device 043 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\SE2Bmdm.sys [2006-05-01 97184]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBCamera;Icatch(IV) Still Camera Device; C:\WINDOWS\System32\Drivers\Bulk533.sys []
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 VX1000;VX-1000; C:\WINDOWS\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-14 32128]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2004-04-14 21280]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2004-04-14 5600]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-06-29 237568]
R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
R2 EvoInstallerService;M-Audio Installer; C:\Program Files\M-Audio\Install\EvoInst.exe [2005-03-08 90112]
R2 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
R2 lxdd_device;lxdd_device; C:\WINDOWS\system32\lxddcoms.exe [2007-05-25 537520]
R2 lxddCATSCustConnectService;lxddCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe [2007-05-25 99248]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe []
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-22 183280]
S2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe []
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe []
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

RE !

UsbFix : recherche

▶ Télécharge UsbFix de C_XX & Chiquitine29

▶ Tutoriel d'installation si besoin.

▶ Tutoriel de recherche si besoin.

▶ Lance l'installation avec les paramètres par défaut.

▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectées sans les ouvrir

▶ Double clique sur le raccourci UsbFix sur ton bureau

▶ Choisis l'option 1 (recherche)

▶ Laisse travailler l'outil

▶ Ensuite poste le rapport UsbFix.txt qui apparaîtra

* Note : le rapport UsbFix.txt est sauvegardé a la racine du disque

* Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valide

* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

Brancher les sources externes ? explique moi pourquoi stp,les rapports que j'ai envoyé en dise déjà long sur mon pc...

Re !

Pourquoi ? Ben parce qu'il y a des choses à vérifier suivant les rapports ! ;)

Tu pourras me dire exactement les problèmes ? Sur le forum Windows, tu disais ne pas pouvoir démarrer autrement qu'en sans échec, cela semble ne plus être le cas.

++

~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

Impssible de fair une mise a jour de la cg,meme avec le cd driver,t'a pu voir quoi dans le rapport hijackthis?

Pourquoi tu ne suis pas mes procédures ?

?? ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

Excuse,j'm'y remet

J'ai fais ce que tu m'a dit avec UsBfix




############################## [ UsbFix V3.033 ]

# User : Tony (Administrateurs) # R2D2
# Update on 15/06/09 by C_XX
# Start at: 19:56:58 | 24/06/2009
# Website : http://pagesperso-orange.fr/NosTools/usbfix.html

# Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 6.0.2900.5512
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1335 [VPS 090623-0] 4.8.1335 [ Enabled | Updated ]
# FW : Norton Internet Worm Protection[ (!) Disabled ]2006

# C:\ # Disque fixe local # 298,09 Go (104,43 Go free) [466323] # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
# J:\ # Disque CD-ROM
# K:\ # Disque fixe local # 232,88 Go (76,5 Go free) [Boite Noire] # NTFS

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\M-Audio\Install\EvoInst.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
C:\WINDOWS\system32\lxddcoms.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wudfhost.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Registre Startup ]

HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
HKCU_Main: "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="Tony"
HKLM_logon: "AltDefaultUserName"="Tony"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""

HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM_Run: RealTray=C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
HKLM_Run: UnlockerAssistant="C:\Program Files\Unlocker\UnlockerAssistant.exe"
HKLM_Run: VX1000=C:\WINDOWS\vVX1000.exe
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: fssui="C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
HKCU_Run: fsc-reminder.exe=C:\WINDOWS\reminder\fsc-reminder.exe 2454207 12
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

HKLM_expl: "NoDriveAutoRun"=dword:03ffffff
HKLM_expl: "NoDriveTypeAutoRun"=dword:000000ff
HKLM_expl: "HonorAutoRunSetting"=dword:00000001
HKCU_expl: "NoDrives"=dword:00000000

################## [ Fichiers # Dossiers infectieux ]

Présent ! C:\install.exe
Présent ! K:\._autorun.inf
Présent ! K:\autorun.inf

################## [ Registre # Clés Run infectieuses ]

Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )

################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{a8c302ea-0da4-11de-a7d5-001617c9cb8a}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{a8c302ea-0da4-11de-a7d5-001617c9cb8a}\Shell\explore\Command
HKCU\...\Explorer\MountPoints2\{a8c302ea-0da4-11de-a7d5-001617c9cb8a}\Shell\open\Command
HKCU\...\Explorer\MountPoints2\{c1b1d8d4-3c22-11de-a808-001617c9cb8a}\Shell\AutoRun\Command

################## [ ! Fin du rapport # UsbFix V3.033 ! ]

Bien !

UsbFix : nettoyage

▶ Tutoriel de nettoyage si besoin.

▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectées sans les ouvrir

▶ Double clique sur le raccourci UsbFix présent sur ton bureau

▶ Choisis l'option 2 ( Suppression )

▶ Ton bureau disparaîtra et le pc redémarrera .

▶ Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

▶ Ensuite poste le rapport UsbFix.txt qui apparaîtra avec le bureau .

▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

############################## [ UsbFix V3.033 ]

# User : Tony (Administrateurs) # R2D2
# Update on 15/06/09 by C_XX
# Start at: 20:07:16 | 24/06/2009
# Website : http://pagesperso-orange.fr/NosTools/usbfix.html

# Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 6.0.2900.5512
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1335 [VPS 090623-0] 4.8.1335 [ Enabled | Updated ]
# FW : Norton Internet Worm Protection[ (!) Disabled ]2006

# C:\ # Disque fixe local # 298,09 Go (104,43 Go free) [466323] # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
# J:\ # Disque CD-ROM
# K:\ # Disque fixe local # 232,88 Go (76,5 Go free) [Boite Noire] # NTFS

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\wudfhost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\M-Audio\Install\EvoInst.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
C:\WINDOWS\system32\lxddcoms.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Fichiers # Dossiers infectieux ]

Supprimé ! C:\install.exe
Supprimé ! K:\._autorun.inf
Supprimé ! K:\autorun.inf

################## [ Registre # Clés Run infectieuses ]

# HKLM\software\microsoft\security center "AntiVirusDisableNotify" # -> Reset sucessfully !

################## [ Registre # Mountpoints2 ]

Supprimé ! HKCU\...\Explorer\MountPoints2\{a8c302ea-0da4-11de-a7d5-001617c9cb8a}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{c1b1d8d4-3c22-11de-a808-001617c9cb8a}\Shell\AutoRun\Command

################## [ Listing des fichiers présent ]

[27/10/2006 10:00|--a------|1053] - C:\868000466323.dat
[27/10/2006 15:25|--a------|0] - C:\AUTOEXEC.BAT
[01/06/2008 16:57|-rahs----|220] - C:\boot.ini
[10/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
[31/05/2008 13:59|--a------|19514] - C:\ComboFix.txt
[27/10/2006 15:25|--a------|0] - C:\CONFIG.SYS
[06/04/2007 11:48|--a------|116366] - C:\DSC00351.JPG
[06/04/2007 11:49|--a------|160029] - C:\DSC00352.JPG
[06/04/2007 11:49|--a------|138873] - C:\DSC00353.JPG
[06/04/2007 11:50|--a------|196555] - C:\DSC00354.JPG
[06/04/2007 11:51|--a------|158176] - C:\DSC00355.JPG
[06/04/2007 11:51|--a------|156345] - C:\DSC00356.JPG
[06/04/2007 11:53|--a------|275881] - C:\DSC00357.JPG
[06/04/2007 11:56|--a------|358916] - C:\DSC00358.JPG
[06/04/2007 11:59|--a------|357473] - C:\DSC00359.JPG
[06/04/2007 12:00|--a------|349591] - C:\DSC00360.JPG
[06/04/2007 12:50|--a------|132215] - C:\DSC00361.JPG
[06/04/2007 12:50|--a------|121779] - C:\DSC00362.JPG
[06/04/2007 12:50|--a------|145638] - C:\DSC00363.JPG
[06/04/2007 12:52|--a------|133372] - C:\DSC00364.JPG
[06/04/2007 12:53|--a------|158932] - C:\DSC00366.JPG
[06/04/2007 12:53|--a------|144492] - C:\DSC00367.JPG
[06/04/2007 18:06|--a------|411116] - C:\DSC00370.JPG
[06/04/2007 18:06|--a------|385452] - C:\DSC00371.JPG
[06/04/2007 18:07|--a------|426801] - C:\DSC00372.JPG
[06/04/2007 18:07|--a------|452502] - C:\DSC00373.JPG
[06/04/2007 18:07|--a------|448877] - C:\DSC00374.JPG
[06/04/2007 18:07|--a------|455776] - C:\DSC00375.JPG
[24/08/2007 23:24|--a------|64526] - C:\DSC00376.JPG
[24/08/2007 23:24|--a------|63292] - C:\DSC00377.JPG
[24/08/2007 23:24|--a------|63248] - C:\DSC00378.JPG
[24/08/2007 23:24|--a------|66259] - C:\DSC00379.JPG
[24/08/2007 23:24|--a------|68858] - C:\DSC00384.JPG
[24/08/2007 23:25|--a------|74846] - C:\DSC00385.JPG
[07/04/2007 00:25|--a------|76654] - C:\DSC00386.JPG
[06/04/2007 18:14|--a------|76819] - C:\DSC00387.JPG
[06/04/2007 18:14|--a------|78069] - C:\DSC00388.JPG
[06/04/2007 18:14|--a------|79140] - C:\DSC00389.JPG
[06/04/2007 18:14|--a------|81089] - C:\DSC00390.JPG
[06/04/2007 18:13|--a------|82499] - C:\DSC00391.JPG
[06/04/2007 20:30|--a------|236842] - C:\DSC00396.JPG
[06/04/2007 20:31|--a------|232490] - C:\DSC00397.JPG
[07/04/2007 10:44|--a------|465919] - C:\DSC00404.JPG
[07/04/2007 17:45|--a------|265181] - C:\DSC00405.JPG
[07/04/2007 17:46|--a------|157527] - C:\DSC00406.JPG
[07/04/2007 17:46|--a------|174951] - C:\DSC00407.JPG
[07/04/2007 17:46|--a------|174038] - C:\DSC00408.JPG
[07/04/2007 17:47|--a------|179792] - C:\DSC00409.JPG
[07/04/2007 17:47|--a------|173045] - C:\DSC00411.JPG
[07/04/2007 17:47|--a------|169316] - C:\DSC00412.JPG
[07/04/2007 21:33|--a------|204057] - C:\DSC00414.JPG
[07/04/2007 21:33|--a------|212376] - C:\DSC00415.JPG
[07/04/2007 21:48|--a------|168518] - C:\DSC00419.JPG
[07/04/2007 21:56|--a------|249657] - C:\DSC00420.JPG
[07/04/2007 21:59|--a------|310338] - C:\DSC00421.JPG
[07/04/2007 22:04|--a------|267888] - C:\DSC00424.JPG
[07/04/2007 22:27|--a------|166585] - C:\DSC00430.JPG
[08/04/2007 01:24|--a------|271388] - C:\DSC00434.JPG
[08/04/2007 01:24|--a------|79370] - C:\DSC00435.JPG
[08/04/2007 01:30|--a------|239399] - C:\DSC00436.JPG
[08/04/2007 17:22|--a------|263875] - C:\DSC00437.JPG
[08/04/2007 23:42|--a------|235187] - C:\DSC00440.JPG
[08/04/2007 23:42|--a------|197787] - C:\DSC00441.JPG
[08/04/2007 23:42|--a------|185484] - C:\DSC00442.JPG
[09/04/2007 12:28|--a------|424108] - C:\DSC00447.JPG
[09/04/2007 12:28|--a------|440082] - C:\DSC00448.JPG
[09/04/2007 12:31|---------|497833] - C:\DSC00449.JPG
[09/04/2007 12:30|--a------|489212] - C:\DSC00450.JPG
[09/04/2007 12:46|--a------|256494] - C:\DSC00451.JPG
[09/04/2007 12:43|--a------|328094] - C:\DSC00455.JPG
[10/04/2007 22:13|--a------|874293] - C:\DSC00456.JPG
[10/04/2007 22:13|--a------|686927] - C:\DSC00457.JPG
[10/04/2007 22:16|--a------|471340] - C:\DSC00458.JPG
[11/04/2007 05:48|--a------|300351] - C:\DSC00459.JPG
[13/04/2007 18:59|--a------|392364] - C:\DSC00500.JPG
[13/04/2007 19:00|--a------|148673] - C:\DSC00501.JPG
[14/04/2007 03:27|--a------|120064] - C:\DSC00523.JPG
[14/04/2007 03:27|--a------|273565] - C:\DSC00524.JPG
[24/08/2007 23:26|--a------|149535] - C:\DSC00526.JPG
[14/04/2007 03:32|--a------|168662] - C:\DSC00528.JPG
[24/08/2007 23:27|--a------|237436] - C:\DSC00533.JPG
[24/08/2007 23:27|--a------|263864] - C:\DSC00535.JPG
[14/04/2007 14:39|--a------|239446] - C:\DSC00537.JPG
[14/04/2007 14:39|--a------|244663] - C:\DSC00538.JPG
[14/04/2007 17:02|--a------|271447] - C:\DSC00546.JPG
[14/04/2007 17:02|--a------|261393] - C:\DSC00547.JPG
[14/04/2007 17:02|--a------|365849] - C:\DSC00548.JPG
[14/04/2007 17:02|--a------|256501] - C:\DSC00549.JPG
[14/04/2007 17:25|--a------|282185] - C:\DSC00550.JPG
[14/04/2007 18:30|--a------|308510] - C:\DSC00554.JPG
[14/04/2007 18:31|--a------|420150] - C:\DSC00555.JPG
[14/04/2007 18:31|--a------|364544] - C:\DSC00556.JPG
[15/04/2007 18:31|--a------|209454] - C:\DSC00574.JPG
[15/04/2007 18:32|--a------|213514] - C:\DSC00575.JPG
[15/04/2007 20:22|--a------|125386] - C:\DSC00576.JPG
[15/04/2007 20:49|--a------|124949] - C:\DSC00578.JPG
[15/04/2007 20:50|--a------|136604] - C:\DSC00579.JPG
[15/04/2007 20:51|--a------|279561] - C:\DSC00580.JPG
[15/04/2007 20:55|--a------|142146] - C:\DSC00593.JPG
[15/04/2007 20:57|--a------|148627] - C:\DSC00603.JPG
[15/04/2007 21:00|--a------|122943] - C:\DSC00608.JPG
[15/04/2007 21:01|--a------|110854] - C:\DSC00611.JPG
[19/04/2007 17:15|--a------|146908] - C:\DSC00624.JPG
[19/04/2007 17:15|--a------|140605] - C:\DSC00625.JPG
[20/04/2007 08:39|--a------|113161] - C:\DSC00627.JPG
[20/04/2007 08:39|--a------|85648] - C:\DSC00628.JPG
[20/04/2007 11:13|--a------|318733] - C:\DSC00629.JPG
[26/04/2007 08:59|--a------|117164] - C:\DSC00640.JPG
[26/04/2007 08:59|--a------|92509] - C:\DSC00641.JPG
[26/04/2007 10:06|--a------|276995] - C:\DSC00642.JPG
[26/04/2007 10:06|--a------|155777] - C:\DSC00643.JPG
[26/04/2007 10:06|--a------|261489] - C:\DSC00644.JPG
[26/04/2007 14:36|--a------|117713] - C:\DSC00645.JPG
[26/04/2007 14:36|--a------|97176] - C:\DSC00646.JPG
[26/04/2007 15:29|--a------|103883] - C:\DSC00647.JPG
[26/04/2007 15:39|--a------|218185] - C:\DSC00648.JPG
[26/04/2007 15:39|--a------|154947] - C:\DSC00649.JPG
[27/04/2007 12:30|--a------|121203] - C:\DSC00651.JPG
[27/04/2007 12:31|--a------|125438] - C:\DSC00652.JPG
[27/04/2007 12:31|--a------|163066] - C:\DSC00653.JPG
[27/04/2007 12:31|--a------|194747] - C:\DSC00654.JPG
[27/04/2007 13:05|--a------|128009] - C:\DSC00655.JPG
[27/04/2007 13:05|--a------|123742] - C:\DSC00656.JPG
[27/04/2007 13:06|--a------|119440] - C:\DSC00657.JPG
[27/04/2007 13:07|--a------|109099] - C:\DSC00658.JPG
[27/04/2007 13:09|--a------|149466] - C:\DSC00660.JPG
[27/04/2007 13:09|--a------|135850] - C:\DSC00661.JPG
[28/04/2007 17:25|--a------|225335] - C:\DSC00683.JPG
[28/04/2007 17:25|--a------|250312] - C:\DSC00684.JPG
[28/04/2007 17:35|--a------|310734] - C:\DSC00685.JPG
[28/04/2007 18:19|--a------|231472] - C:\DSC00686.JPG
[28/04/2007 18:19|--a------|231831] - C:\DSC00687.JPG
[28/04/2007 18:20|--a------|164378] - C:\DSC00688.JPG
[30/04/2007 21:39|--a------|295579] - C:\DSC00697.JPG
[30/04/2007 21:40|--a------|279738] - C:\DSC00700.JPG
[02/05/2007 20:21|--a------|142278] - C:\DSC00703.JPG
[15/05/2007 11:34|--a------|116682] - C:\DSC00712.JPG
[15/05/2007 12:34|--a------|179674] - C:\DSC00713.JPG
[15/05/2007 19:13|--a------|237841] - C:\DSC00714.JPG
[15/05/2007 19:13|--a------|260379] - C:\DSC00715.JPG
[24/05/2007 13:16|--a------|158707] - C:\DSC00721.JPG
[24/05/2007 13:17|--a------|130256] - C:\DSC00722.JPG
[24/05/2007 13:22|--a------|121580] - C:\DSC00724.JPG
[24/05/2007 13:23|--a------|160995] - C:\DSC00726.JPG
[28/05/2007 11:16|--a------|115424] - C:\DSC00733.JPG
[28/05/2007 11:18|--a------|120928] - C:\DSC00740.JPG
[29/05/2007 10:08|--a------|279241] - C:\DSC00744.JPG
[29/05/2007 16:59|--a------|206770] - C:\DSC00745.JPG
[30/05/2007 08:08|--a------|290340] - C:\DSC00751.JPG
[31/05/2007 11:20|--a------|246990] - C:\DSC00752.JPG
[02/06/2007 18:05|--a------|160150] - C:\DSC00754.JPG
[02/06/2007 18:06|--a------|150182] - C:\DSC00755.JPG
[02/06/2007 18:06|--a------|155845] - C:\DSC00756.JPG
[04/06/2007 08:20|--a------|286696] - C:\DSC00757.JPG
[09/06/2007 10:29|--a------|159110] - C:\DSC00763.JPG
[09/06/2007 16:12|--a------|153675] - C:\DSC00768.JPG
[12/06/2007 20:04|--a------|212737] - C:\DSC00769.JPG
[20/06/2007 12:34|--a------|225140] - C:\DSC00780.JPG
[21/06/2007 11:52|--a------|155030] - C:\DSC00782.JPG
[23/06/2007 17:16|--a------|106336] - C:\DSC00783.JPG
[26/06/2007 19:54|--a------|169452] - C:\DSC00785.JPG
[28/06/2007 14:33|--a------|208480] - C:\DSC00786.JPG
[01/07/2007 12:38|--a------|106118] - C:\DSC00787.JPG
[04/07/2007 18:29|--a------|165251] - C:\DSC00792.JPG
[08/07/2007 13:56|--a------|244048] - C:\DSC00793.JPG
[08/07/2007 13:57|--a------|261457] - C:\DSC00794.JPG
[24/08/2007 23:20|--a------|174768] - C:\DSC00802.JPG
[24/08/2007 23:20|--a------|258134] - C:\DSC00803.JPG
[21/07/2007 19:36|--a------|281294] - C:\DSC00804.JPG
[21/07/2007 19:36|--a------|206032] - C:\DSC00805.JPG
[21/07/2007 19:36|--a------|200833] - C:\DSC00806.JPG
[24/08/2007 23:20|--a------|309307] - C:\DSC00807.JPG
[21/07/2007 23:58|--a------|322617] - C:\DSC00808.JPG
[21/07/2007 23:58|--a------|324752] - C:\DSC00809.JPG
[21/07/2007 23:58|--a------|316154] - C:\DSC00810.JPG
[22/07/2007 00:01|--a------|501641] - C:\DSC00811.JPG
[07/11/2007 08:00|--a------|17734] - C:\eula.1028.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1031.txt
[07/11/2007 08:00|--a------|10134] - C:\eula.1033.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1036.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1040.txt
[07/11/2007 08:00|--a------|118] - C:\eula.1041.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.1042.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.2052.txt
[07/11/2007 08:00|--a------|17734] - C:\eula.3082.txt
[16/04/2007 21:35|--a------|27] - C:\expand.txt
[07/11/2007 08:00|--a------|1110] - C:\globdata.ini
[12/05/2009 13:08|--a------|921624] - C:\img2-001.raw
[07/11/2007 08:00|--a------|843] - C:\install.ini
[07/11/2007 08:03|--a------|76304] - C:\install.res.1028.dll
[07/11/2007 08:03|--a------|96272] - C:\install.res.1031.dll
[07/11/2007 08:03|--a------|91152] - C:\install.res.1033.dll
[07/11/2007 08:03|--a------|97296] - C:\install.res.1036.dll
[07/11/2007 08:03|--a------|95248] - C:\install.res.1040.dll
[07/11/2007 08:03|--a------|81424] - C:\install.res.1041.dll
[07/11/2007 08:03|--a------|79888] - C:\install.res.1042.dll
[07/11/2007 08:03|--a------|75792] - C:\install.res.2052.dll
[07/11/2007 08:03|--a------|96272] - C:\install.res.3082.dll
[10/08/2007 11:10|--a------|640706] - C:\instru pro.MMM
[27/10/2006 15:25|-rahs----|0] - C:\IO.SYS
[17/06/2007 17:18|--ah-----|933] - C:\IPH(2).PH
[19/05/2008 21:59|--ah-----|1253] - C:\IPH.PH
[11/10/2004 07:18|--a------|19] - C:\LANG.TXT
[09/04/2003 10:44|--a------|10] - C:\Language.txt
[31/12/2005 23:09|--a------|3903] - C:\LGSInst.Log
[15/03/2008 15:31|--a------|1184] - C:\lxdd.log
[04/04/2007 18:50|--a------|573832] - C:\MOV00343.3GP
[06/04/2007 17:48|--a------|445400] - C:\MOV00368.3GP
[06/04/2007 17:50|--a------|915088] - C:\MOV00369.3GP
[06/04/2007 18:15|--a------|84635] - C:\MOV00392.3GP
[06/04/2007 18:16|--a------|38683] - C:\MOV00395.3GP
[07/04/2007 19:33|--a------|394561] - C:\MOV00413.3GP
[07/04/2007 21:45|--a------|205952] - C:\MOV00418.3GP
[07/04/2007 22:02|--a------|348635] - C:\MOV00422.3GP
[07/04/2007 22:02|--a------|27147] - C:\MOV00423.3GP
[07/04/2007 22:07|--a------|1030070] - C:\MOV00425.3GP
[07/04/2007 22:14|--a------|247435] - C:\MOV00426.3GP
[07/04/2007 22:15|--a------|336383] - C:\MOV00428.3GP
[07/04/2007 22:15|--a------|129491] - C:\MOV00429.3GP
[08/04/2007 17:23|--a------|292680] - C:\MOV00439.3GP
[11/04/2007 16:57|--a------|421425] - C:\MOV00461.3GP
[13/04/2007 08:29|--a------|251599] - C:\MOV00463.3GP
[13/04/2007 18:29|--a------|1329898] - C:\MOV00497.3GP
[13/04/2007 18:34|--a------|1701830] - C:\MOV00498.3GP
[13/04/2007 18:36|--a------|330951] - C:\MOV00499.3GP
[14/04/2007 03:34|--a------|578870] - C:\MOV00529.3GP
[14/04/2007 03:35|--a------|711294] - C:\MOV00530.3GP
[14/04/2007 03:38|--a------|801962] - C:\MOV00531.3GP
[14/04/2007 13:34|--a------|471742] - C:\MOV00534.3GP
[14/04/2007 14:39|--a------|720797] - C:\MOV00536.3GP
[14/04/2007 14:56|--a------|262178] - C:\MOV00539.3GP
[14/04/2007 15:04|--a------|142067] - C:\MOV00540.3GP
[14/04/2007 16:03|--a------|1765698] - C:\MOV00541.3GP
[14/04/2007 16:19|--a------|759331] - C:\MOV00542.3GP
[14/04/2007 16:30|--a------|2103762] - C:\MOV00543.3GP
[14/04/2007 16:49|--a------|136298] - C:\MOV00544.3GP
[14/04/2007 16:52|--a------|308978] - C:\MOV00545.3GP
[14/04/2007 17:47|--a------|360161] - C:\MOV00551.3GP
[14/04/2007 17:47|--a------|128225] - C:\MOV00552.3GP
[14/04/2007 19:45|--a------|228275] - C:\MOV00557.3GP
[14/04/2007 21:01|--a------|109033] - C:\MOV00558.3GP
[15/04/2007 20:33|--a------|93785] - C:\MOV00577.3GP
[19/04/2007 17:25|--a------|225668] - C:\MOV00626.3GP
[21/04/2007 12:21|--a------|770886] - C:\MOV00632.3GP
[21/04/2007 12:22|--a------|922671] - C:\MOV00633.3GP
[24/04/2007 19:31|--a------|5277597] - C:\MOV00638.3GP
[28/04/2007 15:41|--a------|167816] - C:\MOV00679.3GP
[28/04/2007 15:42|--a------|267840] - C:\MOV00680.3GP
[28/04/2007 15:51|--a------|335579] - C:\MOV00681.3GP
[28/04/2007 18:20|--a------|201620] - C:\MOV00689.3GP
[30/04/2007 17:32|--a------|394969] - C:\MOV00696.3GP
[07/05/2007 21:06|--a------|55002] - C:\MOV00708.3GP
[28/05/2007 11:13|--a------|110544] - C:\MOV00731.3GP
[28/05/2007 15:56|--a------|191772] - C:\MOV00743.3GP
[29/05/2007 17:03|--a------|296043] - C:\MOV00749.3GP
[29/05/2007 17:06|--a------|295983] - C:\MOV00750.3GP
[04/06/2007 08:21|--a------|275880] - C:\MOV00758.3GP
[05/06/2007 17:37|--a------|163574] - C:\MOV00762.3GP
[09/06/2007 10:30|--a------|828630] - C:\MOV00764.3GP
[09/06/2007 14:35|--a------|45849] - C:\MOV00767.3GP
[17/06/2007 16:43|--a------|801326] - C:\MOV00774.3GP
[17/06/2007 16:49|--a------|702046] - C:\MOV00775.3GP
[18/06/2007 10:03|--a------|136155] - C:\MOV00776.3GP
[18/06/2007 10:03|--a------|243357] - C:\MOV00777.3GP
[18/06/2007 10:05|--a------|229591] - C:\MOV00778.3GP
[02/07/2007 21:17|--a------|127035] - C:\MOV00790.3GP
[27/10/2006 15:25|-rahs----|0] - C:\MSDOS.SYS
[10/08/2007 11:14|--a------|113410] - C:\Neel gringo fait.MMM
[10/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
[08/10/2008 20:57|-rahs----|252240] - C:\ntldr
[04/08/2004 14:00|--a------|2] - C:\oem.tag
[?|?|?] - C:\pagefile.sys
[01/07/2007 17:54|--a------|2561666] - C:\PICT0001.AVI
[29/06/2007 19:33|--a------|2371628] - C:\PICT0001.JPG
[01/07/2007 18:10|--a------|2391744] - C:\PICT0002.AVI
[01/07/2007 17:51|--a------|4599546] - C:\PICT0002.JPG
[30/06/2007 11:55|--a------|1920] - C:\PICT0002_avi.AVD
[01/07/2007 18:14|--a------|12851580] - C:\PICT0003.AVI
[01/07/2007 17:51|--a------|4570657] - C:\PICT0003.JPG
[30/06/2007 11:56|--a------|1920] - C:\PICT0003_avi.AVD
[01/07/2007 23:03|--a------|1737936] - C:\PICT0004.AVI
[01/07/2007 17:53|--a------|4930910] - C:\PICT0004.JPG
[30/06/2007 12:28|--a------|1920] - C:\PICT0004_avi.AVD
[03/07/2007 11:24|--a------|20434830] - C:\PICT0005.AVI
[01/07/2007 18:24|--a------|4470197] - C:\PICT0005.JPG
[11/07/2007 21:33|--a------|1608] - C:\PICT0005_avi.AVD
[03/07/2007 11:25|--a------|4992822] - C:\PICT0006.AVI
[01/07/2007 18:25|--a------|4746324] - C:\PICT0006.JPG
[03/07/2007 15:04|--a------|18345290] - C:\PICT0007.AVI
[01/07/2007 18:35|--a------|4766831] - C:\PICT0007.JPG
[30/06/2007 12:53|--a------|1920] - C:\PICT0007_avi.AVD
[01/07/2007 18:35|--a------|4485600] - C:\PICT0008.JPG
[30/06/2007 12:53|--a------|1920] - C:\PICT0008_avi.AVD
[07/07/2007 11:32|--a------|58223118] - C:\PICT0009.AVI
[01/07/2007 18:37|--a------|4722943] - C:\PICT0009.JPG
[11/07/2007 21:45|--a------|1920] - C:\PICT0009_avi.AVD
[07/07/2007 12:47|--a------|13130946] - C:\PICT0010.AVI
[07/07/2007 13:04|--a------|16212478] - C:\PICT0011.AVI
[07/07/2007 14:23|--a------|7981966] - C:\PICT0012.AVI
[03/07/2007 18:13|--a------|3884854] - C:\PICT0012.JPG
[07/07/2007 14:39|--a------|9464684] - C:\PICT0013.AVI
[03/07/2007 18:14|--a------|4427118] - C:\PICT0013.JPG
[03/07/2007 18:14|--a------|4964326] - C:\PICT0014.JPG
[07/07/2007 15:50|--a------|37186064] - C:\PICT0015.AVI
[03/07/2007 18:15|--a------|4814664] - C:\PICT0015.JPG
[07/07/2007 16:24|--a------|17273384] - C:\PICT0016.AVI
[03/07/2007 18:17|--a------|4691706] - C:\PICT0016.JPG
[07/07/2007 19:07|--a------|42191408] - C:\PICT0017.AVI
[07/07/2007 13:12|--a------|4851379] - C:\PICT0017.JPG
[11/07/2007 21:36|--a------|1920] - C:\PICT0017_avi.AVD
[10/07/2007 21:19|--a------|42841470] - C:\PICT0018.AVI
[07/07/2007 13:12|--a------|4658406] - C:\PICT0018.JPG
[20/07/2007 17:49|--a------|16841516] - C:\PICT0019.AVI
[21/07/2007 11:52|--a------|11948060] - C:\PICT0020.AVI
[07/07/2007 17:15|--a------|4938486] - C:\PICT0020.JPG
[21/07/2007 11:53|--a------|8033546] - C:\PICT0021.AVI
[07/07/2007 17:15|--a------|4883521] - C:\PICT0021.JPG
[21/07/2007 18:21|--a------|1920] - C:\PICT0021_avi.AVD
[21/07/2007 15:57|--a------|24948068] - C:\PICT0022.AVI
[07/07/2007 17:16|--a------|4747917] - C:\PICT0022.JPG
[21/07/2007 18:03|--a------|11465356] - C:\PICT0023.AVI
[07/07/2007 17:20|--a------|4667555] - C:\PICT0023.JPG
[21/07/2007 18:03|--a------|943478] - C:\PICT0024.AVI
[07/07/2007 17:20|--a------|4722554] - C:\PICT0024.JPG
[21/07/2007 18:04|--a------|10631998] - C:\PICT0025.AVI
[07/07/2007 17:20|--a------|4577608] - C:\PICT0025.JPG
[21/07/2007 18:10|--a------|8278502] - C:\PICT0026.AVI
[07/07/2007 17:22|--a------|4892368] - C:\PICT0026.JPG
[21/07/2007 18:27|--a------|1920] - C:\PICT0026_avi.AVD
[22/07/2007 02:52|--a------|18524594] - C:\PICT0027.AVI
[07/07/2007 17:22|--a------|4745375] - C:\PICT0027.JPG
[22/07/2007 03:12|--a------|77344252] - C:\PICT0028.AVI
[07/07/2007 17:23|--a------|4703307] - C:\PICT0028.JPG
[20/07/2007 17:47|--a------|3948233] - C:\PICT0029.JPG
[20/07/2007 17:47|--a------|4001027] - C:\PICT0030.JPG
[20/07/2007 17:47|--a------|4032178] - C:\PICT0031.JPG
[21/07/2007 01:47|--a------|4399282] - C:\PICT0032.JPG
[27/10/2006 10:00|--ah-----|18155] - C:\Prodlog.txt
[10/08/2007 10:58|--a------|113406] - C:\projet Nø3.MMM
[28/04/2007 04:03|--a------|224] - C:\Raccourci vers Lecteur CD.lnk
[17/08/2008 23:34|--ah-----|268] - C:\sqmdata00.sqm
[18/08/2008 07:21|--ah-----|268] - C:\sqmdata01.sqm
[18/08/2008 23:11|--ah-----|268] - C:\sqmdata02.sqm
[19/08/2008 22:55|--ah-----|268] - C:\sqmdata03.sqm
[04/09/2008 22:20|--ah-----|268] - C:\sqmdata04.sqm
[06/09/2008 19:13|--ah-----|268] - C:\sqmdata05.sqm
[07/09/2008 21:50|--ah-----|268] - C:\sqmdata06.sqm
[08/09/2008 20:54|--ah-----|268] - C:\sqmdata07.sqm
[24/10/2008 06:34|--ah-----|268] - C:\sqmdata08.sqm
[26/10/2008 00:42|--ah-----|268] - C:\sqmdata09.sqm
[10/11/2008 00:49|--ah-----|268] - C:\sqmdata10.sqm
[28/07/2008 22:36|--ah-----|268] - C:\sqmdata11.sqm
[28/07/2008 23:26|--ah-----|268] - C:\sqmdata12.sqm
[29/07/2008 19:59|--ah-----|268] - C:\sqmdata13.sqm
[29/07/2008 23:32|--ah-----|268] - C:\sqmdata14.sqm
[30/07/2008 22:27|--ah-----|268] - C:\sqmdata15.sqm
[31/07/2008 21:30|--ah-----|268] - C:\sqmdata16.sqm
[31/07/2008 22:50|--ah-----|268] - C:\sqmdata17.sqm
[02/08/2008 00:20|--ah-----|268] - C:\sqmdata18.sqm
[02/08/2008 12:58|--ah-----|268] - C:\sqmdata19.sqm
[17/08/2008 23:34|--ah-----|244] - C:\sqmnoopt00.sqm
[18/08/2008 07:21|--ah-----|244] - C:\sqmnoopt01.sqm
[18/08/2008 23:11|--ah-----|244] - C:\sqmnoopt02.sqm
[19/08/2008 22:55|--ah-----|244] - C:\sqmnoopt03.sqm
[04/09/2008 22:20|--ah-----|244] - C:\sqmnoopt04.sqm
[06/09/2008 19:13|--ah-----|244] - C:\sqmnoopt05.sqm
[07/09/2008 21:50|--ah-----|244] - C:\sqmnoopt06.sqm
[08/09/2008 20:54|--ah-----|244] - C:\sqmnoopt07.sqm
[24/10/2008 06:34|--ah-----|244] - C:\sqmnoopt08.sqm
[26/10/2008 00:42|--ah-----|244] - C:\sqmnoopt09.sqm
[10/11/2008 00:49|--ah-----|244] - C:\sqmnoopt10.sqm
[28/07/2008 22:36|--ah-----|244] - C:\sqmnoopt11.sqm
[28/07/2008 23:26|--ah-----|244] - C:\sqmnoopt12.sqm
[29/07/2008 19:59|--ah-----|244] - C:\sqmnoopt13.sqm
[29/07/2008 23:32|--ah-----|244] - C:\sqmnoopt14.sqm
[30/07/2008 22:27|--ah-----|244] - C:\sqmnoopt15.sqm
[31/07/2008 21:30|--ah-----|244] - C:\sqmnoopt16.sqm
[31/07/2008 22:50|--ah-----|244] - C:\sqmnoopt17.sqm
[02/08/2008 00:20|--ah-----|244] - C:\sqmnoopt18.sqm
[02/08/2008 12:58|--ah-----|244] - C:\sqmnoopt19.sqm
[09/05/2009 01:10|--a------|32987648] - C:\test.avi
[01/02/2009 17:24|--ahs----|1006080] - C:\Thumbs.db
[10/08/2007 10:55|--a------|1208326] - C:\touch millenium.MMM
[24/06/2009 20:08|--a------|24030] - C:\UsbFix.txt
[07/11/2007 08:00|--a------|5686] - C:\vcredist.bmp
[07/11/2007 08:09|--a------|1442522] - C:\VC_RED.cab
[07/11/2007 08:12|--a------|232960] - C:\VC_RED.MSI
[10/02/2007 00:55|--a------|157696] - C:\VIDEO_TS.VOB
[03/06/2007 01:31|--a------|67160] - C:\VIDEO_TS_vob.AVD
[09/10/2008 23:09|--a------|429] - C:\VundoFix.txt
[24/06/2009 19:27|--a------|493778] - C:\wmdm.log
[21/03/2009 19:34|---hs----|29018] - K:\.VolumeIcon.icns
[21/03/2009 19:34|---hs----|25214] - K:\.VolumeIcon.ico
[21/03/2009 19:34|---------|126976] - K:\LaCie.exe
[21/03/2009 19:34|---h-----|390] - K:\LaCie.ini

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# K:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

################## [ ! Fin du rapport # UsbFix V3.033 ! ]

Tu as utilisé Combofix seul ?

============

* Télécharge Malwarebytes Anti-Malware (MBAM):

MBAM

* Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

* Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

* Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

* Poste le rapport généré.

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

Déjà 5 infections en 4mins,tes conseils portent ses fruits, Avast----->poubelle

Ok ! Laisse-le tourner, poste le rapport.

On verra pour l'antivirus ensuite ! ;)

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2297
Windows 5.1.2600 Service Pack 3

24/06/2009 20:47:29
mbam-log-2009-06-24 (20-47-29).txt

Type de recherche: Examen rapide
Eléments examinés: 123158
Temps écoulé: 11 minute(s), 9 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{c1d0b9f7-f3c6-443a-af61-ad47771­ace27} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{aaa0a546-2b51-4aed-b1e2-c14f38c73165} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\c:\WINDOWS\system32\ConTest.dll (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\WINDOWS\system32\ConTest.dll (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.

Ok ! Ré-ouvre MBAM, va dans l'onglet "Quarantaine" et supprime tout.

===================

Télécharge CCleaner, version Slim, sans toolbar:

CCLEANER

* Va dans "Options">>"Avancé". Décoche la première ligne.

* Va dans la section "Nettoyeur". Lance l'analyse. La liste créée, lance le nettoyage deux fois de suite afin d'obtenir 0bytes supprimé!

* Ensuite dans "Registre", lance une recherche des erreurs. La liste créée, fais-les réparer.

/!\ A ce moment CCleaner te demande normalement de sauvegarder le registre, fais-le. /!\

* Recommence ensuite le cycle Recherche/Réparation des erreurs jusqu'à n'en trouver aucune lors de la recherche.

===================

Fais un nouveau rapport RSIT, tu devrais avoir "log.txt" qui apparaît. Poste-le stp.

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~

Logfile of random's system information tool 1.06 (written by random/random)
Run by Tony at 2009-06-24 21:07:59
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 107 GB (35%) free of 305 GB
Total RAM: 1022 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:08:06, on 24/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\M-Audio\Install\EvoInst.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxddserv.exe
C:\WINDOWS\system32\lxddcoms.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Tony\Bureau\RSIT.exe
C:\Documents and Settings\Tony\Mes documents\Tony.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {23649E36-60C6-4433-880A-9DF59FC27342} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2454207 12
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: desktop(2).ini (User 'Default user')
O4 - Startup: Raccourci vers ashDisp.lnk = C:\Program Files\Alwil Software\Avast4\ashDisp.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_2\Ghost (file missing)
O9 - Extra 'Tools' menuitem: Ghost Navigator - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Ghost Navigator2_8_2\Ghost (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=19588
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: M-Audio Installer (EvoInstallerService) - Unknown owner - C:\Program Files\M-Audio\Install\EvoInst.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxddCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe
O23 - Service: lxdd_device - - C:\WINDOWS\system32\lxddcoms.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe (file missing)
O24 - Desktop Component 0: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00524.JPG
O24 - Desktop Component 1: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00603.JPG
O24 - Desktop Component 2: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\DSC00442.jpg
O24 - Desktop Component 3: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-05-02-1902-02\DSC00464.JPG
O24 - Desktop Component 4: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00580.JPG
O24 - Desktop Component 5: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00457.JPG
O24 - Desktop Component 6: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-05-02-1902-02\julien.JPG
O24 - Desktop Component 7: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-04-16-2303-48\2007-04-16-2217-22\DSC00500_edited.JPG
O24 - Desktop Component 8: (no name) - C:\Documents and Settings\Tony\Mes documents\Mes images\Adobe\Photos d'un appareil photo numérique\2007-05-02-1902-02\DSC00573.JPG
End of file - 10650 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\Microsoft_Hardware_Launch_vVX1000_exe.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
Yahoo! Companion BHO - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll [2004-05-24 275031]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}]
Lexmark Barre d'outils - C:\Program Files\Lexmark Toolbar\toolband.dll [2006-08-09 184320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-02-06 61808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-22 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Companion - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll [2004-05-24 275031]
{1017A80C-6F09-4548-A84D-EDD6AC9525F0} - Lexmark Barre d'outils - C:\Program Files\Lexmark Toolbar\toolband.dll [2006-08-09 184320]
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
{23649E36-60C6-4433-880A-9DF59FC27342}
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RealTray"=C:\Program Files\Real\RealPlayer\RealPlay.exe [2007-06-17 26112]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"VX1000"=C:\WINDOWS\vVX1000.exe [2007-04-10 709992]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-10-19 286720]
"fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-02-06 454000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-06-17 414992]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-06-17 1287440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"fsc-reminder.exe"=C:\WINDOWS\reminder\fsc-reminder.exe [2005-01-19 28672]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
C:\Program Files\Microsoft LifeCam\LifeExp.exe [2007-05-17 279912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Booster]
C:\Program Files\inKline Global\PC Booster\pcbooster.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2007-10-19 286720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2008-02-20 360448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2008-04-23 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AOL ACS"=2

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
AOL 9.0 Icône AOL.lnk - C:\Program Files\AOL 9.0\aoltray.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\Documents and Settings\Tony\Menu Démarrer\Programmes\Démarrage
Raccourci vers ashDisp.lnk - C:\Program Files\Alwil Software\Avast4\ashDisp.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDrives"=0
"NoFind"=0
"NoFolderOptions"=0
"NoRun"=0
"NoDriveAutoRun"=FFFFFFFF
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\WINDOWS\system32\lxddcoms.exe"="C:\WINDOWS\system32\lxddcoms.exe:*:Enabled:Lexmark Communications System"
"C:\Program Files\Lexmark 2500 Series\lxddamon.exe"="C:\Program Files\Lexmark 2500 Series\lxddamon.exe:*:Enabled:Lexmark Device Monitor"
"C:\Program Files\Lexmark 2500 Series\App4R.exe"="C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio"
"C:\Program Files\Freeplayer\vlc\vlc.exe"="C:\Program Files\Freeplayer\vlc\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:uTorrent"
"C:\Program Files\Autodesk\3dsMax8\3dsmax.exe"="C:\Program Files\Autodesk\3dsMax8\3dsmax.exe:*:Enabled:Autodesk 3ds Max 8"
"C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe"="C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.1"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Lexmark 2500 Series\lxddmon.exe"="C:\Program Files\Lexmark 2500 Series\lxddmon.exe:*:Enabled: "
"C:\Program Files\Microsoft LifeCam\LifeCam.exe"="C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe"
"C:\Program Files\Microsoft LifeCam\LifeExp.exe"="C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddwbgw.exe:*:Enabled: "
"C:\Program Files\HT Web Cam 3.0\HTWebCam.exe"="C:\Program Files\HT Web Cam 3.0\HTWebCam.exe:*:Disabled:HT Web Cam 3.0"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe:*:Enabled: "
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe:*:Enabled: "
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe:*:Enabled: "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Lexmark 2500 Series\app4r.exe"="C:\Program Files\Lexmark 2500 Series\App4R.exe:*:Enabled:Printing Application"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{494e87ac-15b4-11de-a7df-001617c9cb8a}]
shell\Shell00\command - K:\Start.exe


======File associations======

.scr - open - "%1" %*

======List of files/folders created in the last 1 months======

2009-06-24 20:49:41 ----A---- C:\pghyj.txt
2009-06-24 20:08:14 ----RASHD---- C:\autorun.inf
2009-06-24 20:07:13 ----A---- C:\UsbFix.txt
2009-06-24 19:56:25 ----D---- C:\UsbFix
2009-06-23 21:33:47 ----D---- C:\rsit
2009-06-22 20:41:14 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-06-21 22:20:37 ----D---- C:\Program Files\SIW
2009-06-21 21:20:26 ----D---- C:\Program Files\ma-config.com
2009-06-21 21:20:26 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-06-21 21:14:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP
2009-06-21 21:12:35 ----D---- C:\WINDOWS\LastGood(2)
2009-06-21 20:58:21 ----D---- C:\NVIDIA(2)
2009-06-20 00:06:57 ----A---- C:\WINDOWS\DUMP66d8.tmp
2009-06-19 23:22:28 ----A---- C:\WINDOWS\UPGRADE.TXT
2009-06-14 20:25:16 ----SHD---- C:\WINDOWS\CSC
2009-06-11 06:44:17 ----DC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 06:44:08 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$
2009-06-11 06:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 06:42:35 ----DC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 06:42:26 ----DC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-07 21:41:09 ----D---- C:\Program Files\Fichiers communs\DivX Shared

======List of files/folders modified in the last 1 months======

2009-06-24 21:08:06 ----D---- C:\WINDOWS\Prefetch
2009-06-24 21:03:17 ----D---- C:\WINDOWS
2009-06-24 21:01:04 ----D---- C:\Program Files\CCleaner
2009-06-24 20:49:41 ----D---- C:\WINDOWS\system32\drivers
2009-06-24 20:47:28 ----AD---- C:\WINDOWS\system32
2009-06-24 20:33:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-24 20:21:01 ----D---- C:\Program Files\Mozilla Firefox
2009-06-24 20:10:49 ----D---- C:\WINDOWS\Temp
2009-06-24 20:10:25 ----SHD---- C:\RECYCLER
2009-06-24 20:07:06 ----SD---- C:\WINDOWS\Tasks
2009-06-24 20:07:01 ----D---- C:\WINDOWS\Registration
2009-06-24 20:05:43 ----N---- C:\WINDOWS\SchedLgU.Txt
2009-06-24 20:05:43 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-24 19:18:48 ----A---- C:\WINDOWS\NeroDigital.ini
2009-06-23 23:18:46 ----SHD---- C:\WINDOWS\Installer
2009-06-23 23:18:46 ----D---- C:\Config.Msi
2009-06-23 23:00:17 ----D---- C:\WINDOWS\Help
2009-06-23 22:16:14 ----D---- C:\WINDOWS\Debug
2009-06-22 20:41:27 ----HD---- C:\WINDOWS\inf
2009-06-22 20:41:25 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-22 20:40:40 ----D---- C:\WINDOWS\system32\CatRoot
2009-06-22 20:37:44 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2009-06-22 00:56:44 ----D---- C:\NVIDIA
2009-06-22 00:56:10 ----D---- C:\Program Files\NRJ
2009-06-22 00:56:06 ----D---- C:\Documents and Settings\All Users\Application Data\Autodesk
2009-06-22 00:55:45 ----D---- C:\WINDOWS\WinSxS
2009-06-22 00:53:44 ----D---- C:\Program Files\DivX
2009-06-22 00:53:40 ----D---- C:\Program Files\HT Web Cam 3.0
2009-06-22 00:49:53 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-22 00:31:12 ----D---- C:\Documents and Settings\Tony\Application Data\uTorrent
2009-06-22 00:31:12 ----D---- C:\Documents and Settings\Tony\Application Data\DivX
2009-06-22 00:25:29 ----D---- C:\WINDOWS\system32\config
2009-06-22 00:25:04 ----D---- C:\WINDOWS\system32\wbem
2009-06-21 23:22:20 ----D---- C:\WINDOWS\nview
2009-06-21 22:55:48 ----AD---- C:\Program Files\Fichiers communs
2009-06-21 22:20:37 ----AD---- C:\Program Files
2009-06-21 21:20:32 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-06-16 00:26:18 ----A---- C:\WINDOWS\DUMP4248.tmp
2009-06-14 23:35:13 ----A---- C:\WINDOWS\DUMP41ac.tmp
2009-06-14 21:40:45 ----A---- C:\WINDOWS\DUMP42b6.tmp
2009-06-14 21:38:31 ----A---- C:\WINDOWS\DUMP42c5.tmp
2009-06-11 06:44:02 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-07 02:28:15 ----A---- C:\WINDOWS\Robota.INI
2009-06-07 02:28:15 ----A---- C:\WINDOWS\BeatBox.INI
2009-06-03 16:57:53 ----D---- C:\Program Files\Lx_cats
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R2 ACEDRV07;ACEDRV07; \??\C:\WINDOWS\system32\drivers\ACEDRV07.sys []
R2 ACEDRV08;ACEDRV08; \??\C:\WINDOWS\system32\drivers\ACEDRV08.sys []
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2007-06-17 8552]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2008-12-08 55136]
R2 usbhub;DSC Composite USB Device; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2005-11-16 42496]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-24 4374016]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2004-04-14 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2004-04-14 44064]
R3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
R3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S1 hidfltr;HID Filter Driver; C:\WINDOWS\system32\drivers\MWhid.sys [2004-11-03 13332]
S2 Ca533av;Polaroid Digital Cam Video; C:\WINDOWS\System32\Drivers\Ca533av.sys []
S3 a016bus;Sony Ericsson Device A016 driver (WDM); C:\WINDOWS\system32\DRIVERS\a016bus.sys [2008-01-18 83880]
S3 a016mdfl;Sony Ericsson Device A016 USB WMC Modeme Filter; C:\WINDOWS\system32\DRIVERS\a016mdfl.sys [2008-01-18 15016]
S3 a016mdm;Sony Ericsson Device A016 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\a016mdm.sys [2008-01-18 110504]
S3 a016mgmt;Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\a016mgmt.sys [2008-01-18 104488]
S3 a016obex;Sony Ericsson Device A016 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\a016obex.sys [2008-01-18 100648]
S3 amj1dsmm;amj1dsmm; C:\WINDOWS\system32\drivers\amj1dsmm.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EVOLUSB;%EVOL_USB.SvcDesc%; C:\WINDOWS\system32\drivers\evolusb.sys [2004-10-20 21984]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS\system32\DRIVERS\ggflt.sys [2008-06-11 13352]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2008-06-11 21672]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys []
S3 PCTINDIS5;PCTINDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCTINDIS5.SYS []
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\WINDOWS\system32\DRIVERS\s116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\WINDOWS\system32\DRIVERS\s116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\WINDOWS\system32\DRIVERS\s116unic.sys [2007-04-03 99080]
S3 SE2Bbus;Sony Ericsson Device 043 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE2Bbus.sys [2006-05-01 61600]
S3 SE2Bmdfl;Sony Ericsson Device 043 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\SE2Bmdfl.sys [2006-05-01 9360]
S3 SE2Bmdm;Sony Ericsson Device 043 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\SE2Bmdm.sys [2006-05-01 97184]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBCamera;Icatch(IV) Still Camera Device; C:\WINDOWS\System32\Drivers\Bulk533.sys []
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 VX1000;VX-1000; C:\WINDOWS\system32\DRIVERS\VX1000.sys [2007-04-10 1966312]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-14 32128]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2004-04-14 21280]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2004-04-14 5600]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-06-29 237568]
R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
R2 EvoInstallerService;M-Audio Installer; C:\Program Files\M-Audio\Install\EvoInst.exe [2005-03-08 90112]
R2 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
R2 lxdd_device;lxdd_device; C:\WINDOWS\system32\lxddcoms.exe [2007-05-25 537520]
R2 lxddCATSCustConnectService;lxddCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe [2007-05-25 99248]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-05-17 271720]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe []
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-22 183280]
S2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe []
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe []
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Ton lecteur K: correspond à quoi ?

Relance UsbFix, option 1 et poste le rapport stp.

++ ~~ XÞ SÞ3 ☼ Kubuntu ~~ ƒireƒØX + WØT + ÑS + Åthéñå CSM ~~ Åvirå + MßÅM ~~