Bonjour,
le meme probleme,de plus quand j'ecris il manque tjs des lettres !grrrrrrrr
jai fais le usbfix : mon rapport ci dessous

############################## | UsbFix V6.036 |

User : mon pc (Administrateurs) # PC-DE-MONPC
Update on 21/09/2009 by Chiquitine29, C_XX & Chimay8
Start at: 17:29:37 | 25/09/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

Intel(R) Celeron(R) CPU 540 @ 1.86GHz
Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6000 32-bit) #
Internet Explorer 7.0.6000.16890
Windows Firewall Status : Disabled
AV : Norton Internet Security 2007 [ Enabled | (!) Outdated ]
FW : Norton Internet Security[ (!) Disabled ]2007
FW : ZoneAlarm Firewall[ Enabled ]7.1.254.000

C:\ -> Disque fixe local # 51,01 Go (17,23 Go free) [ACER] # NTFS
D:\ -> Disque fixe local # 51,01 Go (25,97 Go free) [DATA] # NTFS
E:\ -> Disque CD-ROM

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Windows\WindowsMobile\wmdcBase.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\mon pc\AppData\Local\goyomuk.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Users\MONPC~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\ZoneLabs\vsmon.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Windows\system32\conime.exe

################## | Fichiers # Dossiers infectieux |

C:\Windows\MS32DLL.dll.vbs
C:\autorun.inf
C:\MS32DLL.dll.vbs

################## | Registre # Clés Run infectieuses |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "ms32dll"
[HKLM\software\microsoft\windows nt\currentversion\image file execution options\rstrui.exe]

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{28a5858f-cf97-11dd-9b80-8000600fe800}
shell\AutoRun\command =F:\qcwpung.exe
shell\explore\Command =F:\qcwpung.exe
shell\open\Command =F:\qcwpung.exe

HKCU\..\..\Explorer\MountPoints2\{36df5579-8264-11dd-9092-000000000000}
shell\AutoRun\command =F:\qcwpung.exe
shell\explore\Command =F:\qcwpung.exe
shell\open\Command =F:\qcwpung.exe

HKCU\..\..\Explorer\MountPoints2\{6a614e37-ea99-11dc-93b0-000000000000}
shell\AutoRun\command =F:\EXPLORER.EXE
shell\explore\Command =F:\EXPLORER.EXE
shell\open\Command =F:\EXPLORER.EXE

HKCU\..\..\Explorer\MountPoints2\{6d7174c5-fead-11dd-966a-000000000000}
shell\AutoRun\command =F:\qcwpung.exe
shell\explore\Command =F:\qcwpung.exe
shell\open\Command =F:\qcwpung.exe

HKCU\..\..\Explorer\MountPoints2\{86256541-41e4-11dd-a4de-000000000000}
shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs

HKCU\..\..\Explorer\MountPoints2\{87234b40-1381-11dd-ba35-000000000000}
shell\AutoRun\command =F:\qcwpung.exe
shell\explore\Command =F:\qcwpung.exe
shell\open\Command =F:\qcwpung.exe

HKCU\..\..\Explorer\MountPoints2\{e17a642f-f5ed-11dd-8aea-000000000000}
shell\AutoRun\command =F:\qcwpung.exe
shell\explore\Command =F:\qcwpung.exe
shell\open\Command =F:\qcwpung.exe

HKCU\..\..\Explorer\MountPoints2\{f6e4ff8d-71dc-11dd-aef1-000000000000}
shell\AutoRun\command =F:\qcwpung.exe
shell\explore\Command =F:\qcwpung.exe
shell\open\Command =F:\qcwpung.exe

################## | ! Fin du rapport # UsbFix V6.036 ! |

Configuration: Windows Vista Internet Explorer 7.0