Rapport

Bonjour,


Je crois que c le rapport demandé par Trying2, r

ComboFix 08-05-25.5 - Francine 2008-05-26 19:44:47.3 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.191 [GMT -4:00]
Endroit: C:\Documents and Settings\Francine\Mes documents\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\MSINET.oca

.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-26 to 2008-05-26 ))))))))))))))))))))))))))))))))))))
.

2008-05-26 19:30 . 2008-05-26 19:38 <REP> dr-h----- C:\$VAULT$.AVG
2008-05-12 06:36 . 2008-05-12 06:36 <REP> d-------- C:\Program Files\MSXML 4.0
2008-05-11 19:31 . 2008-05-11 19:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Ahead
2008-04-28 19:29 . 1992-09-07 00:00 19,408 --a------ C:\Weputil.dll
2008-04-28 19:28 . 1991-09-12 00:00 124,960 --a------ C:\PIPE.EXE
2008-04-28 19:28 . 1999-01-29 04:00 272 --a------ C:\Pipe Dream.lnk
2008-04-28 19:00 . 2008-05-26 19:28 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-04-28 19:00 . 2008-04-28 19:00 1,409 --a------ C:\WINDOWS\QTFont.for
2008-04-28 06:37 . 2008-04-28 06:37 268 --ah----- C:\sqmdata08.sqm
2008-04-28 06:37 . 2008-04-28 06:37 244 --ah----- C:\sqmnoopt08.sqm
2008-04-27 00:23 . 2005-12-29 21:59 2,808,832 --a------ C:\PetitsAnges.pps
2008-04-27 00:10 . 2008-05-10 08:33 445 --a------ C:\WINDOWS\EntPack.dat
2008-04-27 00:10 . 2008-05-11 20:47 45 --a------ C:\WINDOWS\EntPack.ini

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-26 01:39 --------- d-----w C:\Documents and Settings\Francine\Application Data\mIRC
2008-05-26 01:05 --------- d-----w C:\Program Files\mIRC
2008-05-24 12:00 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
2008-05-20 22:23 --------- d-----w C:\Documents and Settings\Francine\Application Data\AVG7
2008-05-11 23:30 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2008-05-11 23:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\Nero
2008-05-11 22:55 --------- d-----w C:\Documents and Settings\Francine\Application Data\LimeWire
2008-05-04 00:45 --------- d-----w C:\Program Files\LimeWire
2008-04-20 08:30 --------- d-----w C:\Program Files\ImpotRapide 2007
2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2008-01-22 10:13 152872]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55 5674352]
"IncrediMail"="C:\Program Files\IncrediMail\bin\IncMail.exe" [2007-07-19 10:54 208946]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 12:24 1694208]
"ccleaner"="C:\Program Files\CCleaner\CCleaner.exe" [2007-09-10 10:03 701680]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 08:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-16 03:35 7630848]
"nwiz"="nwiz.exe" [2006-08-16 03:35 1617920 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-08-16 03:35 86016]
"RTHDCPL"="RTHDCPL.EXE" [2006-12-18 23:12 16062464 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 06:04 2879488 C:\WINDOWS\SkyTel.exe]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2008-04-17 10:00 579584]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 15:10 56928]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 22:55 54832]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"Easy-PrintToolBox"="C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.exe" [2004-01-13 21:10 409600]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-19 06:33 155648]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 05:25 6731312]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 14:57 153136]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe" [2007-10-22 19:07 219136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 16:05:56 65588]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Internet Explorer\\iexplore.exe"=
"C:\\Program Files\\mIRC\\mirc.exe"=
"C:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"C:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=


*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-26 19:47:25
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-05-26 19:48:36
ComboFix-quarantined-files.txt 2008-05-26 23:48:21
ComboFix2.txt 2008-03-16 06:42:30
ComboFix3.txt 2008-02-02 18:48:19

Pre-Run: 150,090,981,376 octets libres
Post-Run: 150,085,844,992 octets libres

101 --- E O F --- 2008-05-16 03:03:30