Pc infecté

salut !
tout d'abord merci pour ton aide
je voulais te poser une question j'ai passé vundo et à la fin du scan tu m'as dit de faire remove vundo hors à l'écran j'ai fix vundo c'est pareil ?je clic fix vundo au lieu de remove vundo ?
merci à l'avance comme tu le vois je n'y connais pas grand chose désolé !

bonjour,
voilà je te poste mon rapport vundo fix :

VundoFix V7.0.3

Scan started at 08:09:04 25/03/2008

Listing files found while scanning....

C:\windows\system32\pqtss.ini
C:\windows\system32\pqtss.ini2
C:\windows\system32\sstqp.dll

Beginning removal...

Attempting to delete C:\windows\system32\pqtss.ini
C:\windows\system32\pqtss.ini Has been deleted!

Attempting to delete C:\windows\system32\pqtss.ini2
C:\windows\system32\pqtss.ini2 Has been deleted!

Attempting to delete C:\windows\system32\sstqp.dll
C:\windows\system32\sstqp.dll Has been deleted!

Performing Repairs to the registry.
Done!

j'ai également passé combofix je l'ai fais deux fois car j'ai eu un bug je t'explique la première fois je l'ai mis en route j'ai entendu 2 bips courts puis il a démarré et mon pc c'est éteinds avant que combofix ne fasse son rapport il a redémarrer tous seul la fenêtre comofix était là et affichait que le rapport était en cour de préparation elle a disparu mais pas de rapport affiché.

j'ai attendu un moment et j'ai refait combofix qui cette fois a générer un rapport sans que rien ne s'éteigne ou ne bug je le poste :

ComboFix 08-03-24.2 - christelle 2008-03-26 8:09:58.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.402 [GMT 1:00]
Endroit: C:\Documents and Settings\christelle\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Documents and Settings\christelle\Application Data\DriveCleaner 2006 Free
C:\Documents and Settings\christelle\Application Data\DriveCleaner 2006 Free\Logs\update.log
C:\Documents and Settings\christelle\Application Data\inst.exe
C:\WINDOWS\system32\autorun.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\UpMedia

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_IPRIP
-------\Service_Iprip


((((((((((((((((((((((((((((( Fichiers créés 2008-02-26 to 2008-03-26 ))))))))))))))))))))))))))))))))))))
.

2008-03-25 08:09 . 2008-03-26 07:33 <REP> d-------- C:\VundoFix Backups
2008-03-16 12:16 . 2008-03-16 12:16 <REP> d-------- C:\LILIMATH
2008-03-13 08:59 . 2008-03-13 08:59 <REP> d-------- C:\Program Files\PopCap Games
2008-03-13 08:59 . 2008-03-13 08:59 51,355 --a------ C:\WINDOWS\system32\muzika.xm
2008-03-11 08:55 . 2008-03-17 12:18 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-03-09 19:58 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-03-09 19:58 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-03-09 19:58 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-03-09 19:58 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-03-09 19:58 . 2001-07-09 10:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-03-09 19:58 . 2004-03-02 16:37 125,184 --------- C:\WINDOWS\system32\drivers\imagesrv.sys
2008-03-09 19:58 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-03-09 19:58 . 2004-03-02 16:37 5,504 --------- C:\WINDOWS\system32\drivers\imagedrv.sys
2008-03-07 14:03 . 2008-03-07 14:03 625,032 --a------ C:\WINDOWS\system32\SymNeti.dll
2008-03-07 14:03 . 2008-03-07 14:03 242,056 --a------ C:\WINDOWS\system32\SymRedir.dll
2008-03-07 13:40 . 2008-03-07 13:40 13,035 --a------ C:\WINDOWS\system32\drivers\SymRedir.cat
2008-03-07 13:40 . 2008-03-07 13:40 1,358 --a------ C:\WINDOWS\system32\drivers\SymRedir.inf
2008-03-07 13:39 . 2008-03-07 13:39 191,536 --a------ C:\WINDOWS\system32\drivers\symtdi.sys
2008-03-07 13:39 . 2008-03-07 13:39 145,968 --a------ C:\WINDOWS\system32\drivers\symfw.sys
2008-03-07 13:39 . 2008-03-07 13:39 39,984 --a------ C:\WINDOWS\system32\drivers\symids.sys
2008-03-07 13:39 . 2008-03-07 13:39 37,936 --a------ C:\WINDOWS\system32\drivers\symndisv.sys
2008-03-07 13:39 . 2008-03-07 13:39 35,120 --a------ C:\WINDOWS\system32\drivers\symndis.sys
2008-03-07 13:39 . 2008-03-07 13:39 27,696 --a------ C:\WINDOWS\system32\drivers\symredrv.sys
2008-03-07 13:39 . 2008-03-07 13:39 12,848 --a------ C:\WINDOWS\system32\drivers\symdns.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-25 19:06 --------- d-----w C:\Program Files\WinamaxPoker
2008-03-25 06:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-03-24 15:03 --------- d-----w C:\Program Files\Java
2008-03-22 21:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-22 18:25 --------- d-----w C:\Program Files\Hijackthis Version Française
2008-03-22 13:09 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-03-22 13:09 --------- d-----w C:\Program Files\Windows Live Favorites
2008-03-22 13:09 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-22 13:08 --------- d-----w C:\Program Files\QuickTime
2008-03-22 13:07 --------- d-----w C:\Program Files\Norton AntiVirus
2008-03-22 13:06 --------- d-----w C:\Program Files\MSN Messenger
2008-03-22 12:59 --------- d-----w C:\Program Files\Google
2008-03-22 12:57 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-03-22 12:50 --------- d-----w C:\Program Files\a-squared Free
2008-03-12 10:17 --------- d-----w C:\Program Files\RegistrySmart
2008-03-09 18:58 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2008-03-09 18:58 --------- d-----w C:\Program Files\Ahead
2008-03-06 20:32 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf
2008-03-06 20:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys
2008-03-06 20:32 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat
2008-03-05 12:42 21,840 ----atw C:\WINDOWS\system32\SIntfNT.dll
2008-03-05 12:42 17,212 ----atw C:\WINDOWS\system32\SIntf32.dll
2008-03-05 12:42 12,067 ----atw C:\WINDOWS\system32\SIntf16.dll
2008-02-17 17:44 691,545 ----a-w C:\WINDOWS\unins000.exe
2008-02-10 14:14 --------- d-----w C:\Program Files\directx
2008-02-10 14:13 --------- d-----w C:\Program Files\Commandos II
2008-02-10 14:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-01 14:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-01-11 05:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
2007-10-09 08:20 10 ----a-w C:\Program Files\.autoreg
2007-07-04 11:14 4,704 ----a-w C:\Program Files\satsukidecodersettings.ini
2007-07-04 11:13 680 ----a-w C:\Program Files\mpc2.reg
2007-07-04 11:13 558 ----a-w C:\Program Files\mpc1.reg
2007-07-04 11:13 32,422 ----a-w C:\Program Files\ffdssetts.reg
2007-07-04 11:13 30,772 ----a-w C:\Program Files\ffdsvsetts.reg
2007-07-04 11:13 3,476 ----a-w C:\Program Files\mpc7.reg
2007-07-04 11:13 3,026 ----a-w C:\Program Files\mpc3.reg
2007-07-04 11:13 236 ----a-w C:\Program Files\mpc4.reg
2007-07-04 11:13 18,156 ----a-w C:\Program Files\mpc6.reg
2007-07-04 11:13 16,290 ----a-w C:\Program Files\mpc5.reg
2007-07-04 11:13 13,366 ----a-w C:\Program Files\ffdsasetts.reg
2007-05-30 16:34 47,360 ----a-w C:\Documents and Settings\christelle\Application Data\pcouffin.sys
2007-04-06 06:23 3,672,408 ----a-w C:\Documents and Settings\christelle\watch.exe
2007-04-06 06:23 10,166,182 ----a-w C:\Documents and Settings\christelle\NBR6606FRA.exe
2007-04-04 11:33 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2007-02-25 19:05 374 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb6962.dat
2007-02-25 18:49 18,432 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb1478.dat
2007-02-25 17:13 538 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb9358.dat
2007-02-14 10:00 635,625 ----a-w C:\Documents and Settings\christelle\pays.zip
2007-02-08 16:39 538 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb9169.dat
2007-02-08 16:39 374 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb5724.dat
2007-02-08 16:39 18,432 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb6500.dat
2007-02-04 12:49 374 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb6334.dat
2007-02-04 12:46 18,432 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb41.dat
2007-02-04 12:10 538 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb8467.dat
2007-04-28 06:58 2,124,695 --sh--w C:\WINDOWS\ruwvxx.ini2
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{787E5742-9E2A-43FA-8A2E-00B8733F908E}]
C:\WINDOWS\system32\sstqp.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 06:00 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-04 08:58 68856]
"MsnMsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 11:55 5674352]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 13:36 14854144 C:\WINDOWS\RTHDCPL.exe]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 06:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 06:00 455168]
"ntiMUI"="c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 18:15 45056]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 06:00 59392]
"MediaSync"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe" [2005-09-21 12:48 425984]
"LaunchApp"="Alaunch" []
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 06:00 208952]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 17:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 17:00 397312]
"AspireService"="C:\Program Files\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 15:07 114688]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-01-09 21:59 115816]
"osCheck"="C:\Program Files\Norton AntiVirus\osCheck.exe" [2006-09-05 18:22 26248]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-11-14 23:43 286720]
"WorksFUD"="C:\Program Files\Microsoft Works\wkfud.exe" [2001-10-09 12:28 24576]
"Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2001-10-05 15:53 331830]
"Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2001-09-04 21:30 28738]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 17:38 583048]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 06:00 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-11-27 11:14:35 110592]
Rappels du Calendrier Microsoft Works.lnk - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe [2000-07-12 13:14:38 24633]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cbxwttq]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplicat­ions\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"C:\\WINDOWS\\system32\\ftp.exe"=
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"C:\\Program Files\\Outlook Express\\msimn.exe"=
"C:\\WINDOWS\\system32\\rtcshare.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Documents and Settings\\enfants\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\­List]
"3587:TCP"= 3587:TCP:Groupement homologue Windows
"3540:UDP"= 3540:UDP:Protocole PNRP (Peer Name Resolution Protocol)
"6346:TCP"= 6346:TCP:shareaza
"6346:UDP"= 6346:UDP:shareaza

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 m5287;m5287;C:\WINDOWS\system32\drivers\m5287.sys [2005-02-05 08:00]
R2 int15.sys;int15.sys;C:\Acer\Empowering Technology\eRecovery\int15.sys [2005-01-13 14:46]
R2 MMIndexer;Media Manager Indexer;C:\Program Files\Fichiers communs\Microsoft Shared\Media Manager\airsvcu.exe [1997-07-14 23:00]
S3 ovt530;Webcam Classic;C:\WINDOWS\system32\Drivers\ov530vid.sys [2005-03-15 16:04]
S3 p2pgasvc;Authentification de groupe réseau homologue;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S3 p2pimsvc;Gestionnaire d'identité réseau homologue;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S3 p2psvc;Réseau homologue;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S3 PNRPSvc;Protocole de résolution de noms d'homologues;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-17 22:00:12 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-02-12 12:38:00 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job"
- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe%Scan -RestrictPrivileges -ScanType 1
"2008-03-21 12:39:22 C:\WINDOWS\Tasks\Norton AntiVirus - Analyse système complète - christelle.job"
- C:\PROGRA~1\NORTON~1\Navw32.exeh/TASK:
"2008-03-26 06:32:01 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-26 08:12:23
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Iprip]
"ServiceDll"="%SystemRoot%\System32\iprip.dll"
.
--------------------- DLLs a chargé sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\Program Files\Hercules\WebCam Station\PhotoImpression\share\pihook.dll
.
Temps d'accomplissement: 2008-03-26 8:13:05
ComboFix-quarantined-files.txt 2008-03-26 07:13:02
.
2008-03-20 11:02:59 --- E O F ---

voilà je te remercie encore et j'attends ton avis
a+

salut ,

excuses moi de t'embêter mais j'y connais pas grand chose je selectionne Driver , registry et file ou ?
dans ton message ou ailleur ? merci de ta patience

j'ai fait ce que tu m'as dis pour combofix mais pas de rapport ni sur le bureau ni sur le disque dur ????

j'ai fait une recherche et je l'ai trouvé :

ComboFix 08-03-24.2 - christelle 2008-03-29 9:20:23.4 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.268 [GMT 1:00]
Endroit: C:\Documents and Settings\christelle\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Acer\Empowering Technology\eRecovery\int15.sys
C:\WINDOWS\ruwvxx.ini2

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_INT15.SYS
-------\Service_int15.sys
-------\Legacy_INT15.SYS
-------\Service_int15.sys


((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-02-28 to 2008-03-29 ))))))))))))))))))))))))))))))))))))
.

2008-03-28 16:59 . 2008-03-28 16:59 86 --a------ C:\WINDOWS\NeroDigital.ini
2008-03-26 13:15 . 2003-12-05 13:51 1,318,912 --------- C:\WINDOWS\UNMRW.exe
2008-03-26 13:15 . 2003-12-19 17:09 29,709 --------- C:\WINDOWS\UNMRW.cfg
2008-03-26 13:15 . 2003-12-08 20:55 25,072 --------- C:\WINDOWS\system32\drivers\incdrm.sys
2008-03-26 13:14 . 2003-12-04 15:53 1,318,912 --------- C:\WINDOWS\NuNinst.exe
2008-03-26 13:14 . 2003-12-05 11:27 89,168 --------- C:\WINDOWS\system32\drivers\incdfs.sys
2008-03-26 13:14 . 2003-12-19 17:09 46,185 --------- C:\WINDOWS\NuNinst.cfg
2008-03-26 13:14 . 2003-12-05 11:27 28,592 --------- C:\WINDOWS\system32\drivers\incdpass.sys
2008-03-26 13:14 . 2003-12-05 11:27 9,341 --------- C:\WINDOWS\system32\drivers\incdrec.sys
2008-03-26 13:13 . 2008-03-26 13:13 <REP> d-------- C:\WINDOWS\InCD
2008-03-26 13:12 . 2003-12-16 15:36 1,331,200 --------- C:\WINDOWS\UNNMP.exe
2008-03-26 13:12 . 2003-12-19 17:09 50,779 --------- C:\WINDOWS\UNNMP.cfg
2008-03-26 13:08 . 2001-07-09 11:50 155,648 -ra------ C:\WINDOWS\system32\NeroCheck.exe
2008-03-26 13:07 . 2003-12-11 13:34 1,318,912 --------- C:\WINDOWS\UNNeroVision.exe
2008-03-26 13:07 . 2003-12-19 17:09 109,947 --------- C:\WINDOWS\UNNeroVision.cfg
2008-03-26 13:06 . 2001-07-06 14:41 569,344 -ra------ C:\WINDOWS\system32\imagr5.dll
2008-03-26 13:06 . 2001-07-06 12:44 544,768 -ra------ C:\WINDOWS\system32\imagx5.dll
2008-03-26 13:06 . 2001-07-06 18:24 283,920 -ra------ C:\WINDOWS\system32\ImagXpr5.dll
2008-03-26 13:06 . 2001-06-26 08:15 38,912 -ra------ C:\WINDOWS\system32\picn20.dll
2008-03-26 11:46 . 2001-03-08 18:30 24,064 --------- C:\WINDOWS\system32\msxml3a.dll
2008-03-25 08:09 . 2008-03-26 07:33 <REP> d-------- C:\VundoFix Backups
2008-03-16 12:16 . 2008-03-16 12:16 <REP> d-------- C:\LILIMATH
2008-03-13 08:59 . 2008-03-13 08:59 <REP> d-------- C:\Program Files\PopCap Games
2008-03-13 08:59 . 2008-03-13 08:59 51,355 --a------ C:\WINDOWS\system32\muzika.xm
2008-03-09 19:58 . 2004-07-26 16:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-03-09 19:58 . 2004-07-26 16:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-03-09 19:58 . 2004-07-26 16:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-03-09 19:58 . 2004-07-26 16:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-03-09 19:58 . 2004-03-02 16:37 125,184 --------- C:\WINDOWS\system32\drivers\imagesrv.sys
2008-03-09 19:58 . 2000-06-26 10:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-03-09 19:58 . 2004-03-02 16:37 5,504 --------- C:\WINDOWS\system32\drivers\imagedrv.sys
2008-03-07 14:03 . 2008-03-07 14:03 625,032 --a------ C:\WINDOWS\system32\SymNeti.dll
2008-03-07 14:03 . 2008-03-07 14:03 242,056 --a------ C:\WINDOWS\system32\SymRedir.dll
2008-03-07 13:40 . 2008-03-07 13:40 13,035 --a------ C:\WINDOWS\system32\drivers\SymRedir.cat
2008-03-07 13:40 . 2008-03-07 13:40 1,358 --a------ C:\WINDOWS\system32\drivers\SymRedir.inf
2008-03-07 13:39 . 2008-03-07 13:39 191,536 --a------ C:\WINDOWS\system32\drivers\symtdi.sys
2008-03-07 13:39 . 2008-03-07 13:39 145,968 --a------ C:\WINDOWS\system32\drivers\symfw.sys
2008-03-07 13:39 . 2008-03-07 13:39 39,984 --a------ C:\WINDOWS\system32\drivers\symids.sys
2008-03-07 13:39 . 2008-03-07 13:39 37,936 --a------ C:\WINDOWS\system32\drivers\symndisv.sys
2008-03-07 13:39 . 2008-03-07 13:39 35,120 --a------ C:\WINDOWS\system32\drivers\symndis.sys
2008-03-07 13:39 . 2008-03-07 13:39 27,696 --a------ C:\WINDOWS\system32\drivers\symredrv.sys
2008-03-07 13:39 . 2008-03-07 13:39 12,848 --a------ C:\WINDOWS\system32\drivers\symdns.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-28 16:04 --------- d-----w C:\Program Files\WinamaxPoker
2008-03-26 20:01 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-03-26 18:53 --------- d-----w C:\Documents and Settings\christelle\Application Data\Ahead
2008-03-26 12:15 --------- d-----w C:\Program Files\Ahead
2008-03-26 12:06 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2008-03-26 10:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ahead
2008-03-25 06:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-03-24 15:03 --------- d-----w C:\Program Files\Java
2008-03-22 21:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-22 18:25 --------- d-----w C:\Program Files\Hijackthis Version Française
2008-03-22 13:09 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-03-22 13:09 --------- d-----w C:\Program Files\Windows Live Favorites
2008-03-22 13:09 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-22 13:08 --------- d-----w C:\Program Files\QuickTime
2008-03-22 13:07 --------- d-----w C:\Program Files\Norton AntiVirus
2008-03-22 13:06 --------- d-----w C:\Program Files\MSN Messenger
2008-03-22 12:59 --------- d-----w C:\Program Files\Google
2008-03-22 12:50 --------- d-----w C:\Program Files\a-squared Free
2008-03-12 10:17 --------- d-----w C:\Program Files\RegistrySmart
2008-03-06 20:32 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf
2008-03-06 20:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys
2008-03-06 20:32 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat
2008-03-05 12:42 21,840 ----atw C:\WINDOWS\system32\SIntfNT.dll
2008-03-05 12:42 17,212 ----atw C:\WINDOWS\system32\SIntf32.dll
2008-03-05 12:42 12,067 ----atw C:\WINDOWS\system32\SIntf16.dll
2008-02-17 17:44 691,545 ----a-w C:\WINDOWS\unins000.exe
2008-02-10 14:14 --------- d-----w C:\Program Files\directx
2008-02-10 14:13 --------- d-----w C:\Program Files\Commandos II
2008-02-10 14:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-01 14:00 --------- d-----w C:\Program Files\Norton Security Scan
2008-01-11 05:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
2007-10-09 08:20 10 ----a-w C:\Program Files\.autoreg
2007-07-04 11:14 4,704 ----a-w C:\Program Files\satsukidecodersettings.ini
2007-07-04 11:13 680 ----a-w C:\Program Files\mpc2.reg
2007-07-04 11:13 558 ----a-w C:\Program Files\mpc1.reg
2007-07-04 11:13 32,422 ----a-w C:\Program Files\ffdssetts.reg
2007-07-04 11:13 30,772 ----a-w C:\Program Files\ffdsvsetts.reg
2007-07-04 11:13 3,476 ----a-w C:\Program Files\mpc7.reg
2007-07-04 11:13 3,026 ----a-w C:\Program Files\mpc3.reg
2007-07-04 11:13 236 ----a-w C:\Program Files\mpc4.reg
2007-07-04 11:13 18,156 ----a-w C:\Program Files\mpc6.reg
2007-07-04 11:13 16,290 ----a-w C:\Program Files\mpc5.reg
2007-07-04 11:13 13,366 ----a-w C:\Program Files\ffdsasetts.reg
2007-05-30 16:34 47,360 ----a-w C:\Documents and Settings\christelle\Application Data\pcouffin.sys
2007-04-06 06:23 3,672,408 ----a-w C:\Documents and Settings\christelle\watch.exe
2007-04-06 06:23 10,166,182 ----a-w C:\Documents and Settings\christelle\NBR6606FRA.exe
2007-04-04 11:33 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2007-02-25 19:05 374 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb6962.dat
2007-02-25 18:49 18,432 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb1478.dat
2007-02-25 17:13 538 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb9358.dat
2007-02-14 10:00 635,625 ----a-w C:\Documents and Settings\christelle\pays.zip
2007-02-08 16:39 538 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb9169.dat
2007-02-08 16:39 374 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb5724.dat
2007-02-08 16:39 18,432 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb6500.dat
2007-02-04 12:49 374 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb6334.dat
2007-02-04 12:46 18,432 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb41.dat
2007-02-04 12:10 538 ----a-w C:\Documents and Settings\christelle\Application Data\internaldb8467.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 06:00 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-04 08:58 68856]
"MsnMsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 11:55 5674352]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2005-09-22 13:36 14854144 C:\WINDOWS\RTHDCPL.exe]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 06:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-05 06:00 455168]
"ntiMUI"="c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 18:15 45056]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 06:00 59392]
"MediaSync"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe" [2005-09-21 12:48 425984]
"LaunchApp"="Alaunch" []
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-05 06:00 208952]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 17:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 17:00 397312]
"AspireService"="C:\Program Files\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 15:07 114688]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-01-09 21:59 115816]
"osCheck"="C:\Program Files\Norton AntiVirus\osCheck.exe" [2006-09-05 18:22 26248]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-11-14 23:43 286720]
"WorksFUD"="C:\Program Files\Microsoft Works\wkfud.exe" [2001-10-09 12:28 24576]
"Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2001-10-05 15:53 331830]
"Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2001-09-04 21:30 28738]
"Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 17:38 583048]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2003-12-05 11:25 1237042]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 06:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cbxwttq]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"C:\\WINDOWS\\system32\\ftp.exe"=
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"C:\\Program Files\\Outlook Express\\msimn.exe"=
"C:\\WINDOWS\\system32\\rtcshare.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3587:TCP"= 3587:TCP:Groupement homologue Windows
"3540:UDP"= 3540:UDP:Protocole PNRP (Peer Name Resolution Protocol)
"6346:TCP"= 6346:TCP:shareaza
"6346:UDP"= 6346:UDP:shareaza

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 m5287;m5287;C:\WINDOWS\system32\drivers\m5287.sys [2005-02-05 08:00]
R2 int15.sys;int15.sys;C:\Acer\Empowering Technology\eRecovery\int15.sys [2005-01-13 14:46]
R2 MMIndexer;Media Manager Indexer;C:\Program Files\Fichiers communs\Microsoft Shared\Media Manager\airsvcu.exe [1997-07-14 23:00]
S3 ovt530;Webcam Classic;C:\WINDOWS\system32\Drivers\ov530vid.sys [2005-03-15 16:04]
S3 p2pgasvc;Authentification de groupe réseau homologue;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S3 p2pimsvc;Gestionnaire d'identité réseau homologue;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S3 p2psvc;Réseau homologue;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S3 PNRPSvc;Protocole de résolution de noms d'homologues;C:\WINDOWS\system32\svchost.exe [2004-08-05 06:00]
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

*Newly Created Service* - INT15.SYS
.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-03-17 22:00:12 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-02-12 12:38:00 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job"
- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe%Scan -RestrictPrivileges -ScanType 1
"2008-03-28 13:02:23 C:\WINDOWS\Tasks\Norton AntiVirus - Analyse système complète - christelle.job"

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 12:42 2008-03-29

+ Résultat de l'analyse:



:mozilla.10:C:\Documents and Settings\christelle\Application Data\Mozilla\Firefox\Profiles\ggb5199y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.11:C:\Documents and Settings\christelle\Application Data\Mozilla\Firefox\Profiles\ggb5199y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.
:mozilla.12:C:\Documents and Settings\christelle\Application Data\Mozilla\Firefox\Profiles\ggb5199y.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.


Fin du rapport

pour le moment tous va bien je fais ce que tu m'as dit et merci pour tout a+