Virus ROOTKIT et BAGLE, RAPPORT HIJACKTHIS [Résolu]

Salut,

Merci pour ton ultra-rapidité,
J'ai fait la manip, donc il a trouvé et éliminer Bagle (puissant ce petit logiciel !), jai redémarré le pc et recommencer et n'a plus rien trouvé :-)
Je ne sais pas si tout est vraiment clean mais ca au moins oui, le nouveau rapport est =


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:21:51, on 24/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [HWSetup] \HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange HSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware Reboot] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing)
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/redirect-home?tag=Toshibafrbholink-21&site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR (file missing)
O13 - Gopher Prefix:
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

Salut, Mon scan combo est le suivant =


ComboFix 08-06-20.4 - Ludo 2008-06-24 12:37:36.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1298 [GMT 2:00]
Endroit: C:\Users\Ludo\Documents\Mes fichiers reçus\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\Ludo\AppData\Roaming\m
C:\Users\Ludo\AppData\Roaming\m\shared
C:\Users\Ludo\AppData\Roaming\m\shared\About_Menu_1.1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\ACT_Mobile_Messenger_2.1.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\ActiveMailer_3.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\ActMon_5.11.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Add_Email_ActiveX_Enterprise_2.0_(KeyGen).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Advanced_Data_Export_.NET_1.5.3.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Advanced_MP3_Catalog_Pro_3.36.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Alicesoft_DVD_&_Video_to_MP4_all_Converter_5.0_[Patch].zip
C:\Users\Ludo\AppData\Roaming\m\shared\American_Flag_Theme_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Amiasoft_SiteAid_2.3_Crack.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Any_Time_1.1_(With_Crack).zip
C:\Users\Ludo\AppData\Roaming\m\shared\ArchiCrypt_Proxy-Collector_4.0.2_Key.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Attachment_Extractor_for_Outlook_Express_1.5_[Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\AVast!.4.Professional.Edition.v4.7.871.zip
C:\Users\Ludo\AppData\Roaming\m\shared\AVI_ReComp_1.3.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\BG.-.Dajana.(2006).-.Pravo.v.celta.(by.PANDA_1960).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Bitdefender.9.Profesional.Plus.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Bookmark_Keys_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Bubble_Shooter_1.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Buttonmania_1.3.14.92.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Calc98_5.3.zip
C:\Users\Ludo\AppData\Roaming\m\shared\CallZap_2.2_(Cracked).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Canada_Map_Locator_1.0_Crack.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Colossal_Word_Search_1.5.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Comic_Life_1.2.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Cryptex_1.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\DBArtisan_8.1.2_build_3218_Serial.zip
C:\Users\Ludo\AppData\Roaming\m\shared\DesignBots_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Dictionary_English_-_Bulgarian_1.8.33_Key.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Direct_Connect_Hub_2.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\DiscKeeper_BlackBox_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Disk_Optimise_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\DS_Fire_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\DVD_X_Player_Professional_4.1_(Cracked).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Earth_2150_The_Lost_Souls_patch_2.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Easy_CD_Ejector_1.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Easy_RSS_Content_Generator_2.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\EasyTable_For_AutoCAD_2.1.06.zip
C:\Users\Ludo\AppData\Roaming\m\shared\eBay_Fee_Calculator_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\EkinSis_Hide_Folder_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\EZ_Save_MHT_3.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Far_Cry_Co-op_mod_beta_2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\File_King_2004.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Free_Test_Exam_Questions_10.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\French_Before_You_Know_It_Lite_3.6.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Galactic_Teddy_1.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Gradebook_for_Filemaker_Pro_8_2.0.55.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Gucup_Antivirus_2.7.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Haunted_Castle_3D_1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Holdem_Dominator_iPod_Edition_1.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Host_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\HP0-757_-_HP_ProCurve_Security_Practice_Exam_Questions_1.0_[Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\HTML2Exe_Baler_2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\i.Ftp_2.11.zip
C:\Users\Ludo\AppData\Roaming\m\shared\InnerSoft_CAD_for_AutoCAD_2007_1.2b_With_Crack.zip
C:\Users\Ludo\AppData\Roaming\m\shared\JpegSizer_5.3e.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Kana_Launcher_3.0.0.29.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Kernel_ZIP_4.0.2_Key.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Kidwidget_1.1_[With_Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Lacelevel2_3.17_[Key+Serial].zip
C:\Users\Ludo\AppData\Roaming\m\shared\LingvoSoft_Dictionary_2007_German_-_Hungarian_4.0.22.zip
C:\Users\Ludo\AppData\Roaming\m\shared\LingvoSoft_Talking_Dictionary_2007_English_-_Romanian_4.0.22.zip
C:\Users\Ludo\AppData\Roaming\m\shared\LiteServe_2.7_[Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Lyrics2Search_toolbar_1.0.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Magic_Audio_CD_Burner_VCL_1.00.zip
C:\Users\Ludo\AppData\Roaming\m\shared\MedTime_1.5.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Midi_To_Wav_1.0.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Mountain_Climbing_Journal_1.3.zip
C:\Users\Ludo\AppData\Roaming\m\shared\MP3-finder_1.4.zip
C:\Users\Ludo\AppData\Roaming\m\shared\MSDict_Oxford_Concise_Medical_Dictionary_(Pocket_PC)_4.30.zip
C:\Users\Ludo\AppData\Roaming\m\shared\MSN_Track_Monitor_3.55_Key+Serial.zip
C:\Users\Ludo\AppData\Roaming\m\shared\My_Messenger_with_wapmsgr_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\nCleaner_2.0.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\NCTFinancialChart.NET_Library_1.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\NetHelpDesk_4.20f.zip
C:\Users\Ludo\AppData\Roaming\m\shared\NetSaver_0.9.4.5.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Norton.Antivirus.2007.zip
C:\Users\Ludo\AppData\Roaming\m\shared\NoteMagic_Lite_6.7.8.20.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Obsidium_1.3.3.4.zip
C:\Users\Ludo\AppData\Roaming\m\shared\OLfax_1.7.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Ottawa_Traffic_Cams_1.12.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Panda.Antivirus.2005.Titanium.Serial.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Parallaxis_iAlbum_1.1.3.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Password_Guard_2.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\PC_Optimizer_Pro_4.5.9.zip
C:\Users\Ludo\AppData\Roaming\m\shared\PDF_Word_Count_&_Frequency_Statistics_Software_7.0_[With_Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Periodic_Spiral_1.3.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Personal_Mail_Server_Pro_2.46.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Perspector_Professional_Edition_3.2.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Plummit_1.4.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Pocket_War_the_Screen_Saver_1.3.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Programmer's_File_Editor_(32-bit)_1.01.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Purchase_Order_Software_3.0_Key+Serial.zip
C:\Users\Ludo\AppData\Roaming\m\shared\QueIt_2.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Quick_Recovery_for_Linux_10.12.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Registrar_Registry_Manager_Lite_5.02_Build_502.31018_With_Crack.zip
C:\Users\Ludo\AppData\Roaming\m\shared\RiskyProject_Professional_2.1.4_(Cracked).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Saga_MP3_Cutter_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Screen_Saver_Activate_1.6.zip
C:\Users\Ludo\AppData\Roaming\m\shared\ShareMusic_1.0_[Key+Serial].zip
C:\Users\Ludo\AppData\Roaming\m\shared\SoftFuse_Nice_Tables_1.2_(Serial).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Spb_Pocket_PC_Tips_&_Tricks_1.5.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Sport_Icons_2006_2.0_[KeyGen].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Spy_Hunter_2.9.1007.zip
C:\Users\Ludo\AppData\Roaming\m\shared\StartScreenSaver_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\StepUpPro_3.0.5_build_11_[With_Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Sunflowers_Screensaver2_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\The_Cube_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\The_Sims_-_Anakin_Skywalker_skin.zip
C:\Users\Ludo\AppData\Roaming\m\shared\The_Space_Travel_Screensaver_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Tomb_Raider_The_Lost_Artifact_demo.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Towing_Invoice_Creator_2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\TriQ_Color_Matching_Puzzle_1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\TV_Game_Clock_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Typophile_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\UK_Map_Locator_1.0_With_Crack.zip
C:\Users\Ludo\AppData\Roaming\m\shared\Ultra-Downloader_2.4_[Crack].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Unreal_Tournament_2003_-_Nova_Burst_CTF_map.zip
C:\Users\Ludo\AppData\Roaming\m\shared\USA_Puzzle_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\UtiliSync_1.1.4.zip
C:\Users\Ludo\AppData\Roaming\m\shared\VirtualSpeaker_1.2.1.zip
C:\Users\Ludo\AppData\Roaming\m\shared\VNC_Personal_Edition_for_Windows_4.2.7_(Key+Serial).zip
C:\Users\Ludo\AppData\Roaming\m\shared\Web-PC-Exe_Lock_1.5_(Patch).zip
C:\Users\Ludo\AppData\Roaming\m\shared\WinCapture_8.4.0_(Crack).zip
C:\Users\Ludo\AppData\Roaming\m\shared\XIRR_Calculator_1.0.zip
C:\Users\Ludo\AppData\Roaming\m\shared\XL-EasyGantt_2.2.zip
C:\Users\Ludo\AppData\Roaming\m\shared\XP_Visual_Tools_1.8.7_[Serial].zip
C:\Users\Ludo\AppData\Roaming\m\shared\Your_Own_ScreenSaver_1.31.zip
C:\Users\Ludo\AppData\Roaming\m\shared\YukonDev_SQL_Editor_1.8.16.39.zip
C:\Windows\system32\drivers\downld
C:\Windows\system32\drivers\downld\102601.exe
C:\Windows\system32\drivers\downld\108046.exe
C:\Windows\system32\drivers\downld\126470.exe
C:\Windows\system32\drivers\downld\147452.exe
C:\Windows\system32\drivers\downld\149729.exe
C:\Windows\system32\drivers\downld\155579.exe
C:\Windows\system32\drivers\downld\156625.exe
C:\Windows\system32\drivers\downld\16252090.exe
C:\Windows\system32\drivers\downld\16290217.exe
C:\Windows\system32\drivers\downld\16299015.exe
C:\Windows\system32\drivers\downld\16306519.exe
C:\Windows\system32\drivers\downld\16310247.exe
C:\Windows\system32\drivers\downld\163489.exe
C:\Windows\system32\drivers\downld\168122.exe
C:\Windows\system32\drivers\downld\172568.exe
C:\Windows\system32\drivers\downld\184517.exe
C:\Windows\system32\drivers\downld\295465.exe
C:\Windows\system32\drivers\downld\305434.exe
C:\Windows\system32\drivers\downld\30737173.exe
C:\Windows\system32\drivers\downld\30907261.exe
C:\Windows\system32\drivers\downld\30914515.exe
C:\Windows\system32\drivers\downld\30920552.exe
C:\Windows\system32\drivers\downld\30924358.exe
C:\Windows\system32\drivers\downld\309443.exe
C:\Windows\system32\drivers\downld\5218280.exe
C:\Windows\system32\drivers\downld\5278964.exe
C:\Windows\system32\drivers\downld\5285267.exe
C:\Windows\system32\drivers\downld\5308682.exe
C:\Windows\system32\drivers\downld\5317200.exe
C:\Windows\system32\drivers\downld\88156.exe
C:\Windows\system32\drivers\downld\91480234.exe
C:\Windows\system32\drivers\mdelk.exe

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-24 to 2008-06-24 ))))))))))))))))))))))))))))))))))))
.

2008-06-24 09:07 . 2008-06-24 09:07 <REP> d-------- C:\Users\Ludo\DoctorWeb
2008-06-24 08:41 . 2008-06-24 08:41 <REP> d-------- C:\Users\Ludo\AppData\Roaming\Grisoft
2008-06-24 08:41 . 2008-06-24 08:41 <REP> d-------- C:\Users\All Users\Grisoft
2008-06-24 08:41 . 2008-06-24 08:41 <REP> d-------- C:\PROGRA~2\Grisoft
2008-06-24 08:41 . 2007-05-30 14:10 10,872 --a------ C:\Windows\System32\drivers\AvgAsCln.sys
2008-06-24 08:32 . 2008-06-24 08:32 <REP> d-------- C:\Program Files\Trend Micro
2008-06-23 17:16 . 2008-06-23 17:16 <REP> d-------- C:\Program Files\Lavasoft
2008-06-23 17:16 . 2008-06-23 17:16 <REP> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-06-23 14:20 . 2008-05-16 01:18 50,768 --a------ C:\Windows\System32\drivers\aswMonFlt.sys
2008-06-23 13:07 . 2008-06-23 13:07 <REP> d-------- C:\Users\Ludo\AppData\Roaming\Malwarebytes
2008-06-23 13:07 . 2008-06-23 13:07 <REP> d-------- C:\Users\All Users\Malwarebytes
2008-06-23 13:07 . 2008-06-23 13:07 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-06-23 13:07 . 2008-06-23 13:07 <REP> d-------- C:\PROGRA~2\Malwarebytes
2008-06-23 13:07 . 2008-06-19 17:48 34,296 --a------ C:\Windows\System32\drivers\mbamcatchme.sys
2008-06-23 13:07 . 2008-06-19 17:47 17,144 --a------ C:\Windows\System32\drivers\mbam.sys
2008-06-23 13:05 . 2008-06-23 03:15 <REP> d-------- C:\SDFix
2008-06-23 11:28 . 2006-10-19 04:05 684,032 --a------ C:\Windows\System32\TOSCDSPD.EXE
2008-06-23 11:25 . 2008-06-23 11:25 <REP> d-------- C:\Program Files\CCleaner
2008-06-23 11:24 . 2008-06-23 13:26 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-06-14 11:55 . 2008-04-23 06:42 428,544 --a------ C:\Windows\System32\EncDec.dll
2008-06-14 11:55 . 2008-04-23 06:42 293,376 --a------ C:\Windows\System32\psisdecd.dll
2008-06-14 11:55 . 2008-04-23 06:41 218,624 --a------ C:\Windows\System32\psisrndr.ax
2008-06-14 11:55 . 2008-04-23 06:41 57,856 --a------ C:\Windows\System32\MSDvbNP.ax
2008-06-11 13:13 . 2008-06-11 13:13 <REP> d-------- C:\Users\Ludo\AppData\Roaming\Thunderbird
2008-06-11 13:13 . 2008-06-11 13:13 <REP> d-------- C:\Program Files\Mozilla Thunderbird
2008-06-11 08:35 . 2008-04-25 04:12 1,383,424 --a------ C:\Windows\System32\mshtml.tlb
2008-06-11 08:35 . 2008-04-26 10:08 1,314,816 --a------ C:\Windows\System32\quartz.dll
2008-06-11 08:35 . 2008-04-25 06:35 826,880 --a------ C:\Windows\System32\wininet.dll
2008-06-11 08:35 . 2008-05-10 03:33 113,664 --a------ C:\Windows\System32\drivers\rmcast.sys
2008-06-10 19:49 . 2008-06-10 19:49 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-06-07 10:21 . 2008-06-07 10:21 <REP> d-------- C:\Local Settings
2008-06-07 09:42 . 2008-06-07 09:42 <REP> d-------- C:\PerfLogs
2008-06-06 22:45 . 2008-01-19 09:35 4,875,776 --a------ C:\Windows\System32\NlsData0009.dll
2008-06-06 22:44 . 2008-01-19 09:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll
2008-06-06 22:43 . 2008-01-19 09:34 6,103,040 --a------ C:\Windows\System32\chtbrkr.dll
2008-06-06 22:42 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-06-06 22:41 . 2008-01-19 09:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-06-06 22:41 . 2008-01-19 09:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
2008-06-06 22:41 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-06-06 22:41 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-06-06 22:41 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-06-06 22:41 . 2008-01-19 09:36 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-06-06 22:41 . 2008-01-19 09:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
2008-06-06 22:41 . 2008-01-19 09:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-06-06 22:41 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-06-02 07:27 . 2008-06-02 07:27 <REP> d-------- C:\Program Files\Systran
2008-05-27 22:03 . 2008-03-08 04:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-05-27 22:03 . 2008-03-08 06:21 1,695,744 --a------ C:\Windows\System32\gameux.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-23 15:16 --------- d-----w C:\PROGRA~2\Lavasoft
2008-06-23 12:02 --------- d-----w C:\Program Files\eChanblard
2008-06-17 21:07 --------- d-----w C:\Users\Ludo\AppData\Roaming\LimeWire
2008-06-12 06:20 --------- d-----w C:\Program Files\Windows Mail
2008-06-07 07:52 174 --sha-w C:\Program Files\desktop.ini
2008-06-07 07:43 --------- d-----w C:\Program Files\Windows Sidebar
2008-06-07 07:43 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-06-07 07:43 --------- d-----w C:\Program Files\Windows Journal
2008-06-07 07:43 --------- d-----w C:\Program Files\Windows Defender
2008-06-07 07:43 --------- d-----w C:\Program Files\Windows Collaboration
2008-06-07 07:43 --------- d-----w C:\Program Files\Windows Calendar
2008-05-18 11:22 --------- d-----w C:\Users\Ludo\AppData\Roaming\TomTom
2008-05-18 11:22 --------- d-----w C:\Program Files\TomTom HOME 2
2008-05-18 11:22 --------- d-----w C:\PROGRA~2\TomTom
2008-05-18 11:19 --------- d-----w C:\Program Files\TomTom DesktopSuite
2008-05-17 18:39 --------- d-----w C:\Users\Ludo\AppData\Roaming\Canon
2008-05-16 11:52 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-14 21:35 --------- d-----w C:\PROGRA~2\Microsoft Help
2008-05-13 20:05 6,115,448 ----a-w C:\Users\Public\Firefox Setup 2.0.0.14.exe
2008-05-13 12:34 --------- d-----w C:\Users\Ludo\AppData\Roaming\Nokia Multimedia Player
2008-04-29 09:20 15,648 ----a-w C:\Windows\system32\drivers\NSDriver.sys
2008-04-29 09:19 15,648 ----a-w C:\Windows\system32\drivers\Awrtrd.sys
2008-04-29 09:19 12,960 ----a-w C:\Windows\system32\drivers\Awrtpd.sys
2008-04-28 06:38 --------- d-----w C:\Program Files\Nokia
2008-04-28 06:38 --------- d-----w C:\Program Files\Common Files\PCSuite
2008-04-28 06:38 --------- d-----w C:\Program Files\Common Files\Nokia
2008-04-28 06:36 --------- d-----w C:\Program Files\PC Connectivity Solution
2008-04-28 06:35 --------- d-----w C:\PROGRA~2\Installations
2008-04-26 10:06 --------- d-----w C:\Program Files\LimeWire
2008-01-09 00:32 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2008-01-09 00:32 32,768 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2008-01-09 00:32 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
2007-10-15 16:07 397,312 --sha-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6000.16480_none_ef1b6bb652cf8744\WinMail.exe
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="TOSCDSPD.EXE" [2006-10-19 04:05 684032 C:\Windows\System32\TOSCDSPD.EXE]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 09:33 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KeNotify"="C:\Program Files\TOSHIBA\Utilities\KeNotify.exe" [2006-11-06 17:14 34352]
"TPwrMain"="C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 10:39 411192]
"HSON"="C:\Program Files\TOSHIBA\TBS\HSON.exe" [2006-12-07 16:49 55416]
"SmoothView"="C:\Program Files\Toshiba\SmoothView\SmoothView.exe" [2007-04-03 16:52 509496]
"00TCrdMain"="C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe" [2007-05-22 16:32 538744]
"topi"="C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-07-10 09:24 581632]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112]
"Camera Assistant Software"="C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" [2007-04-10 17:40 413696]
"SynTPStart"="C:\Program Files\Synaptics\SynTP\SynTPStart.exe" [2007-07-27 09:00 204800]
"Toshiba Registration"="C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe" [2007-02-19 16:00 571024]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-02-12 14:37 174872]
"SystrayORAHSS"="C:\Program Files\Orange HSS\Systray\SystrayApp.exe" [ ]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 08:00 33648]
"RtHDVCpl"="RtHDVCpl.exe" [2007-09-03 12:39 4702208 C:\Windows\RtHDVCpl.exe]
"Malwarebytes Anti-Malware Reboot"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" [2008-06-19 17:47 1166968]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 18:41 1232896]

C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 03:38:16 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= C:\PROGRA~1\COMMON~1\ULEADS~1\vio\dvacm.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2347029160-293687376-4007398046-1000]
"EnableNotificationsRef"=dword:00000004

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{A9F44F5E-B063-486F-9F72-567B93E307C2}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{92B67849-C2D5-47BF-9D3D-5AD7B88882AD}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{A9A8AFA2-488B-4418-B931-97666A059D2C}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{D296FA54-3353-45B7-A3A2-0A952A5B5AD8}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{20D00306-F013-42C2-926A-FFC88052C817}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{129E10C1-AA97-434B-8532-F7861EFBBE2B}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"TCP Query User{7BB8B46C-182E-487E-A0B7-3A6AAAE9BB64}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule
"UDP Query User{D2A640F7-29DF-461B-99F8-D94E1490A7EB}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule
"TCP Query User{02BC49D0-43EE-41C6-8914-F2E689EFC721}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule
"UDP Query User{6473B049-9C26-4794-A4E7-1D55B4512E56}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule
"TCP Query User{5ADFAD9E-7EE1-4FE2-99F1-1DC5912FD2DE}C:\\program files\\shareaza\\shareaza.exe"= UDP:C:\program files\shareaza\shareaza.exe:Shareaza Ultimate File Sharing
"UDP Query User{8DE6955B-7C40-4427-95CE-1FABE2396E6D}C:\\program files\\shareaza\\shareaza.exe"= TCP:C:\program files\shareaza\shareaza.exe:Shareaza Ultimate File Sharing
"TCP Query User{59DDCD33-52F8-4BFC-A4D3-503D36AC2739}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{DE2BC0E6-2711-4E35-B5B8-14E9F071C223}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{74EF14EC-8BEF-467A-920D-B2F967E77970}C:\\program files\\echanblard\\emule.exe"= UDP:C:\program files\echanblard\emule.exe:eChanblard
"UDP Query User{32039E5E-674F-497A-B176-39183E97CB8F}C:\\program files\\echanblard\\emule.exe"= TCP:C:\program files\echanblard\emule.exe:eChanblard
"TCP Query User{CEF06267-E659-4C87-B3BB-F246226BF12A}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{9E6D1954-6C7A-4CAC-8840-39E1776A8C69}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{506B01B2-5305-40F2-90DF-93AF6D961C93}E:\\echanblard\\emule.exe"= UDP:E:\echanblard\emule.exe:eChanblard
"UDP Query User{F083E0EB-86D7-4FC8-9D4F-E4FFCAFA9064}E:\\echanblard\\emule.exe"= TCP:E:\echanblard\emule.exe:eChanblard
"TCP Query User{33FE9117-17A6-4401-8F00-D12C8A006346}E:\\echanblard\\emule.exe"= UDP:E:\echanblard\emule.exe:eChanblard
"UDP Query User{066393D5-216E-49DE-8A45-75970E8B80D6}E:\\echanblard\\emule.exe"= TCP:E:\echanblard\emule.exe:eChanblard
"TCP Query User{84BF70D9-F255-492A-87DA-9A451F9CDDAC}C:\\users\\ludo\\appdata\\local\\emule\\emule.exe"= UDP:C:\users\ludo\appdata\local\emule\emule.exe:emule.exe
"UDP Query User{DC4365C7-6621-4742-A6CA-FD15F40FDF8D}C:\\users\\ludo\\appdata\\local\\emule\\emule.exe"= TCP:C:\users\ludo\appdata\local\emule\emule.exe:emule.exe
"TCP Query User{907485B6-4275-4DD6-A5E9-CE6E54B7F269}C:\\users\\ludo\\appdata\\local\\emule\\emule.exe"= UDP:C:\users\ludo\appdata\local\emule\emule.exe:emule.exe
"UDP Query User{A423C690-90BF-4F27-8127-9202030867BD}C:\\users\\ludo\\appdata\\local\\emule\\emule.exe"= TCP:C:\users\ludo\appdata\local\emule\emule.exe:emule.exe
"TCP Query User{6F9D9A2B-13A6-42E5-8D35-17AE2A0F714E}C:\\program files\\amsn\\bin\\wish.exe"= UDP:C:\program files\amsn\bin\wish.exe:Wish Application
"UDP Query User{CD1CC46A-7CFA-4ADE-B603-6CCF0B16839D}C:\\program files\\amsn\\bin\\wish.exe"= TCP:C:\program files\amsn\bin\wish.exe:Wish Application
"TCP Query User{A411C75B-E5C0-49B6-A78A-8DBB0221DBDD}C:\\program files\\amsn\\bin\\wish.exe"= UDP:C:\program files\amsn\bin\wish.exe:Wish Application
"UDP Query User{56E0F37F-CC86-4C95-99D7-734BEE953321}C:\\program files\\amsn\\bin\\wish.exe"= TCP:C:\program files\amsn\bin\wish.exe:Wish Application
"TCP Query User{6267CBFF-D4B7-4AC7-8CBC-B0DF71401931}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= UDP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
"UDP Query User{63770DCC-E7D3-4221-9451-8D1AC58F26DD}C:\\program files\\common files\\nokia\\service layer\\a\\nsl_host_process.exe"= TCP:C:\program files\common files\nokia\service layer\a\nsl_host_process.exe:Nokia Service Layer Host Process
"TCP Query User{29CBC43C-76D9-4891-8C98-4B828FC6903C}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= UDP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
"UDP Query User{B9A46CC8-B784-4575-B0E1-CF8E25753F1C}C:\\program files\\nokia\\nokia software updater\\nsu_ui_client.exe"= TCP:C:\program files\nokia\nokia software updater\nsu_ui_client.exe:Nokia Software Updater
"TCP Query User{621F109F-1336-45C2-81BE-5D3F3EC232D5}C:\\program files\\limewire\\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire
"UDP Query User{A0F4DAD5-B90A-4DFF-A0B0-C9EAC09DC371}C:\\program files\\limewire\\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire

R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-05-16 01:18]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-09-20 18:56]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 22:46]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 22:46]
S4 CplIR;Embedded IR Driver;C:\Windows\system32\DRIVERS\CplIR.SYS [2007-03-06 15:01]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1fb18a84-a885-11dc-986f-001b384b2ca9}]
\shell\AutoRun\command - D:\nideiect.com
\shell\explore\Command - D:\nideiect.com
\shell\open\Command - D:\nideiect.com

.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-24 12:41:25
Windows 6.0.6001 Service Pack 1 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Windows\System32\Ati2evxx.exe
C:\Windows\System32\audiodg.exe
C:\Windows\System32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\System32\agrsmsvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe
C:\Windows\System32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Windows\System32\conime.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\wbem\WMIADAP.exe
C:\Windows\System32\dllhost.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-06-24 12:45:38 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-24 10:45:34

Pre-Run: 16,378,724,352 octets libres
Post-Run: 17,500,876,800 octets libres

394 --- E O F --- 2008-06-23 21:09:18

ok les scan complets vont durer un peu de temps, je te répond apres, merci

La réparation de windows, je ne pourrai la faire que le week end prochain car je n'ai pas le CD sur moi.

le rapport est le suivant, mais c bizarre que des choses sont marquées par "erreur desuppression" =

-->- Recherche:

C:\SDFIX: trouvé !
C:\Qoobox: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\Ludo\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis: trouvé !
C:\Users\Ludo\Desktop\HijackThis.lnk: trouvé !
C:\Users\Ludo\Documents\Mes fichiers reçus\SdFix.exe: trouvé !
C:\Users\Ludo\Documents\Mes fichiers reçus\ComboFix.exe: trouvé !

---------------------------------
-->- Suppression:

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: ERREUR DE SUPPRESSION !!
C:\Users\Ludo\Desktop\HijackThis.lnk: supprimé !
C:\Users\Ludo\Documents\Mes fichiers reçus\SdFix.exe: supprimé !
C:\Users\Ludo\Documents\Mes fichiers reçus\ComboFix.exe: supprimé !
C:\SDFIX: supprimé !
C:\Qoobox: supprimé !
C:\Program Files\Trend Micro\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\Ludo\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !
Corbeille vidée!

Bon ben merci pour tout, ca devrait aller avec la réparation windows. J'ai déja fait ca sous XP pour le meme genre de probleme suite à un virus.

Conclusion : avast ne suffit pas, même s'il tourne en permanence. Dès qu'il y a quelque chose d'un peu plus important, il ne sait pas éradiquer.

Si jamais je fais une restau, faut-il choisir une date avant l'apparition du virus ? donc hier matin pour moi ?

A trsè bientôt.
Ciao

Ludo++