Erreur de chargement wcctmqgp.dll

il s'agit de wcctmqgp.dll et mIJYsqOg.dll

c'est un message d'erreur que j'ai au démarrage de mon pc
ca me marque erreur de chargement le module spécifié est introuvable

j'ai posté le bloc notes comme tu m'as dit mais je le vois pas dans la discussion
tu l'as eu ?

peut etre que c'est trop long je sais pas
j'ai voulu le reposter mais ca m'a marqué que je l'avais deja posté

ok lol
on va les laisser terminer alors

http://www.cijoint.fr/cjlink.php?file=cj200906/cijMdfFZwl.docx

t'en connais des astuces dis moi !! lol
voici le fichier word

c'est quoi l'UAC ?
boonty je l'avais avant d'avoir ce soucis

je n'arrive pas a télécharger malwarebytes
mon antivirus l'a bloqué (activité suspecte)

c'est bon j'ai réussi à le dl j'espère que ca craint rien car j'ai jamais vu mon antivirus bloquer un truc de cette facon
j'essaye et je te redis ce que ca donne

ah ok
l'analyse est en cours
il m'a deja détecté 12 fichiers infectés :S
elle dure longtemps l'analyse ?

oui au moins ca
ca fait deja 15min

nan j'ai pas grand chose comme vidéo
ca fait deja 40 min toujours en cours pfffiu lol

voila ! apparement j'ai un message d'erreur qui a disparu mais pas l'autre

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2352
Windows 6.0.6002 Service Pack 2

29/06/2009 22:54:00
mbam-log-2009-06-29 (22-54-00).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 234817
Temps écoulé: 1 hour(s), 14 minute(s), 45 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 17
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 11

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{df1c8e21-4045-4d67-b528-335f1a4f0de9} (Adware.Navipromo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{df1c8e21-4045-4d67-b528-335f1a4f0de9} (Adware.Navipromo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{df1c8e21-4045-4d67-b528-335f1a4f0de9} (Adware.Navipromo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access (Adware.InstantAccess) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\egdhtml (Adware.EGDAccess) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bmf3ad59f6 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\gimakmm (Trojan.Agent.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Instant Access (Adware.InstantAccess) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Instant Access (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Windows\System32\wTR02 (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\Users\Mimi\local settings\application data\gimakmm_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
c:\Users\Mimi\local settings\application data\gimakmm_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
c:\Users\Mimi\local settings\application data\gimakmm.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
c:\Users\Mimi\local settings\application data\gimakmm.exe (Adware.Navipromo.H) -> Delete on reboot.
c:\Users\Mimi\AppData\Local\gimakmm.exe (Trojan.Agent.H) -> Delete on reboot.
c:\Windows\System32\MSINET.oca (Rogue.Trace) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\CrazyGirls.upd (Adware.EGDAccess) -> Quarantined and deleted successfully.
c:\program files\instant access\Center\tray1.ico (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Windows\System32\nsinet.exe (Adware.InstantAccess) -> Quarantined and deleted successfully.
C:\Windows\System32\pac.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\Windows\System32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.

bonjour,
voici le rapport, l'uac était déjà désactivée mais l'antivirus je ne sais pas comment le désactiver.

Fix Navipromo version 4.0.0 commencé le 30/06/2009 à 7:39:25,42

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 19.06.2009 à 20h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Basique ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) CPU 420 @ 1.60GHz )
BIOS : v5.04
USER : Mimi ( Administrator )
BOOT : Normal boot

Antivirus : Kaspersky Internet Security 8.0.0.454 (Activated)
Firewall : Kaspersky Internet Security 8.0.0.454 (Activated)

C:\ (Local Disk) - NTFS - Total:225 Go (Free:182 Go)
D:\ (Local Disk) - NTFS - Total:7 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)


Recherche exécutée en mode normal

Nettoyage exécuté au redémarrage de l'ordinateur


C:\Windows\Downloaded Program Files\IaLdr32.inf supprimé !


Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\Mimi\AppData\Local\Temp effectué !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !


C:\Windows\system32\edfhNUtv.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !
C:\Windows\system32\SYacIjjl.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !


*** Scan terminé le 30/06/2009 à 8:14:07,71 ***

re
je n'arrive pas a dl combofix j'ai un message d'erreur qui me dit que je ne peux pas le renommer hors j'ai rien demandé
KIS c'est la version payante

j'essaye avec ca
je parlais de mon antivirus qui était payant car tu m'a posé la question ce matin

c'est pareil message d'erreur pfffiu

ca marque "erreur impossible de renommer le fichier combofix en combofix[1] veuillez choisir un autre nom de préférence avec des caractères alphanumériques"

euh le premier lien j'y comprend rien lol
le 2eme meme message

bah je clic sur le lien puis télécharger exécuter
ca charge puis j'ai une tout petite barre de chargement verte combofix qui apparait puis après ce message

ComboFix 09-06-29.07 - Mimi 30/06/2009 22:50:48.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6002.2.1252.33.1036.18.1015.435 [GMT 2:00]
Lancé depuis: C:\Users\Mimi\Documents\TUTU.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
SP: Kaspersky Internet Security *disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\ad.dll
C:\ap.dll
C:\as.dll
C:\Users\Mimi\AppData\Roaming\.#
C:\Windows\system32\afwdktrx.ini
C:\Windows\system32\AutoRun.inf
C:\Windows\system32\edfhNUtv.ini
C:\Windows\System32\edfhNUtv.ini2
C:\Windows\system32\lemlauox.ini
C:\Windows\system32\pgyfssrb.ini
C:\Windows\System32\SYacIjjl.ini
C:\Windows\System32\SYacIjjl.ini2
C:\Windows\system32\yabjqylj.ini
C:\Windows\TEMP\logishrd\LVPrcInj01.dll
D:\Desktop.ini

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_Boonty Games


((((((((((((((((((((((((((((( Fichiers créés du 2009-05-28 au 2009-06-30 ))))))))))))))))))))))))))))))))))))
.

2009-06-29 19:36:01 . 2009-06-29 19:36:01 0 d-----w- C:\Users\Mimi\AppData\Roaming\Malwarebytes
2009-06-29 19:35:30 . 2009-06-17 09:27:56 38160 ----a-w- C:\Windows\system32\drivers\mbamswissarmy.sys
2009-06-29 19:35:28 . 2009-06-29 19:35:28 0 d-----w- C:\ProgramData\Malwarebytes
2009-06-29 19:35:26 . 2009-06-29 19:35:51 0 d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2009-06-29 19:26:47 . 2009-06-17 09:27:44 19096 ----a-w- C:\Windows\system32\drivers\mbam.sys
2009-06-29 07:52:44 . 2009-06-29 07:52:44 3584 ----a-r- C:\Users\Mimi\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2009-06-29 07:52:43 . 2009-06-29 07:52:43 0 d-----w- C:\Program Files\Windows Installer Clean Up
2009-06-29 07:51:13 . 2009-06-29 07:51:13 0 d-----w- C:\Program Files\MSECACHE
2009-06-29 07:45:49 . 2009-06-29 07:45:49 0 d-----w- C:\Windows\system32\ErrorLogs
2009-06-29 06:41:53 . 2009-06-29 06:55:14 0 d-----w- C:\Program Files\Microsoft
2009-06-22 20:33:15 . 2009-06-22 20:33:51 0 d-----w- C:\Windows\system32\ca-ES
2009-06-22 20:33:15 . 2009-06-22 20:33:50 0 d-----w- C:\Windows\system32\eu-ES
2009-06-22 20:33:15 . 2009-06-22 20:33:44 0 d-----w- C:\Windows\system32\vi-VN
2009-06-22 20:05:32 . 2009-06-22 20:05:33 0 d-----w- C:\Windows\system32\EventProviders
2009-06-22 20:02:01 . 2009-04-11 05:03:42 12240896 ----a-w- C:\Windows\system32\NlsLexicons0007.dll
2009-06-22 20:00:59 . 2009-04-11 06:28:21 241664 ----a-w- C:\Windows\system32\msltus40.dll
2009-06-22 19:59:59 . 2009-04-11 06:28:23 497152 ----a-w- C:\Windows\system32\qdvd.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:25 83968 ----a-w- C:\Windows\system32\wbem\wmiutils.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:25 744448 ----a-w- C:\Windows\system32\wbem\wbemcore.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:25 30208 ----a-w- C:\Windows\system32\wbem\wbemprox.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:24 265728 ----a-w- C:\Windows\system32\wbem\repdrvfs.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:20 189440 ----a-w- C:\Windows\system32\wbem\mofd.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:19 614912 ----a-w- C:\Windows\system32\wbem\fastprox.dll
2009-06-22 19:58:36 . 2009-04-11 06:28:19 265728 ----a-w- C:\Windows\system32\wbem\esscli.dll
2009-06-22 19:58:33 . 2009-04-11 06:28:24 705536 ----a-w- C:\Windows\system32\SmiEngine.dll
2009-06-22 19:58:28 . 2009-04-11 06:28:25 218624 ----a-w- C:\Windows\system32\wdscore.dll
2009-06-22 19:58:28 . 2009-04-11 06:27:48 130560 ----a-w- C:\Windows\system32\PkgMgr.exe
2009-06-22 19:58:10 . 2009-04-11 06:28:18 247808 ----a-w- C:\Windows\system32\drvstore.dll
2009-06-22 08:16:36 . 2009-06-22 08:16:36 0 d--h--r- C:\Users\Mimi\AppData\Roaming\SecuROM
2009-06-22 05:25:56 . 2009-06-22 05:32:49 127170 ----a-w- C:\Windows\hpqins00.dat
2009-06-15 08:31:07 . 2009-06-15 08:31:07 0 d-----w- C:\Program Files\Common Files\SWF Studio
2009-06-11 05:04:07 . 2009-04-21 11:39:47 2034688 ----a-w- C:\Windows\system32\win32k.sys
2009-06-11 05:03:51 . 2009-04-23 12:14:10 623616 ----a-w- C:\Windows\system32\localspl.dll
2009-06-11 05:03:14 . 2009-05-09 05:50:28 915456 ----a-w- C:\Windows\system32\wininet.dll
2009-06-11 05:03:09 . 2009-05-09 05:34:34 71680 ----a-w- C:\Windows\system32\iesetup.dll
2009-06-11 05:02:32 . 2009-04-23 12:15:07 784896 ----a-w- C:\Windows\system32\rpcrt4.dll
2009-06-05 17:59:50 . 2009-06-05 17:59:50 0 d-----w- C:\Program Files\iPod
2009-06-05 17:59:32 . 2009-06-05 18:00:17 0 d-----w- C:\Program Files\iTunes
2009-06-05 17:56:35 . 2009-06-05 17:57:18 0 d-----w- C:\Program Files\QuickTime
2009-06-05 17:44:36 . 2009-06-05 17:44:36 75048 ----a-w- C:\ProgramData\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-30 21:04:23 . 2008-09-03 20:29:08 0 d-----w- C:\ProgramData\Kaspersky Lab
2009-06-30 21:02:31 . 2008-09-03 20:28:51 876576 --sha-w- C:\Windows\system32\drivers\fidbox2.dat
2009-06-30 21:02:31 . 2008-09-03 20:28:51 4669984 --sha-w- C:\Windows\system32\drivers\fidbox.dat
2009-06-30 21:02:31 . 2008-09-03 20:28:51 4076 --sha-w- C:\Windows\system32\drivers\fidbox2.idx
2009-06-30 21:02:31 . 2008-09-03 20:28:51 38612 --sha-w- C:\Windows\system32\drivers\fidbox.idx
2009-06-29 16:58:45 . 2009-05-22 05:12:47 89 ----a-w- C:\Users\Mimi\AppData\Local\soick.bat
2009-06-29 08:04:00 . 2007-10-12 15:16:29 0 d-----w- C:\ProgramData\WLInstaller
2009-06-29 06:56:35 . 2007-08-16 07:36:25 0 d-----w- C:\Program Files\Windows Live
2009-06-29 06:53:33 . 2008-08-11 10:40:23 0 d-----w- C:\Program Files\Common Files\LogiShrd
2009-06-29 06:52:48 . 2009-01-12 16:59:51 0 d-----w- C:\Program Files\Logitech
2009-06-28 10:54:05 . 2007-05-15 17:50:15 672084 ----a-w- C:\Windows\system32\perfh00C.dat
2009-06-28 10:54:05 . 2007-05-15 17:50:15 124228 ----a-w- C:\Windows\system32\perfc00C.dat
2009-06-28 09:35:51 . 2008-10-05 09:36:54 0 d-----w- C:\ProgramData\PopCap Games
2009-06-22 20:33:57 . 2006-11-02 12:35:51 0 d-----w- C:\Program Files\Windows Sidebar
2009-06-22 20:33:57 . 2006-11-02 12:35:51 0 d-----w- C:\Program Files\Windows Calendar
2009-06-22 20:33:57 . 2006-11-02 11:18:33 0 d-----w- C:\Program Files\Windows Mail
2009-06-22 20:33:56 . 2006-11-02 12:35:51 0 d-----w- C:\Program Files\Windows Photo Gallery
2009-06-22 20:33:56 . 2006-11-02 12:35:51 0 d-----w- C:\Program Files\Windows Collaboration
2009-06-22 20:33:55 . 2006-11-02 12:35:51 0 d-----w- C:\Program Files\Windows Defender
2009-06-22 20:33:04 . 2006-11-02 10:25:05 665600 ----a-w- C:\Windows\inf\drvindex.dat
2009-06-22 10:32:55 . 2007-08-16 07:40:59 0 d-----w- C:\ProgramData\BOONTY
2009-06-13 06:02:27 . 2007-05-15 08:42:14 0 d-----w- C:\ProgramData\Microsoft Help
2009-06-05 17:59:49 . 2008-03-08 07:23:03 0 d-----w- C:\Program Files\Common Files\Apple
2009-06-01 18:20:45 . 2008-10-27 18:45:51 0 d-----w- C:\Program Files\orange
2009-05-26 20:28:43 . 2007-10-23 18:42:21 0 d-----w- C:\Program Files\Windows Live Safety Center
2009-05-25 09:08:53 . 2009-05-25 09:08:53 0 d-----w- C:\ProgramData\PlayPond
2009-05-25 08:13:06 . 2007-05-15 08:37:01 0 d-----w- C:\Program Files\Common Files\Real
2009-05-24 11:34:43 . 2007-08-16 16:34:41 0 d-----w- C:\Program Files\Java
2009-05-21 11:53:10 . 2009-05-21 11:53:10 0 d-----w- C:\Program Files\GamesBar
2009-05-21 11:50:53 . 2007-05-15 08:21:30 0 d--h--w- C:\Program Files\InstallShield Installation Information
2009-05-21 11:46:38 . 2007-05-15 08:51:27 0 d-----w- C:\Program Files\Google
2009-05-21 09:37:27 . 2008-10-21 12:40:15 0 d-----w- C:\ProgramData\Gogii
2009-05-21 08:44:08 . 2007-08-16 07:36:19 0 d-----w- C:\Program Files\Messenger Plus! Live
2009-05-20 17:08:46 . 2008-09-03 20:34:27 94643 ----a-w- C:\Windows\system32\drivers\klick.dat
2009-05-20 17:08:46 . 2008-09-03 20:34:27 105395 ----a-w- C:\Windows\system32\drivers\klin.dat
2009-05-13 18:44:37 . 2007-08-14 17:10:42 131208 ----a-w- C:\Users\Mimi\AppData\Local\GDIPFONTCACHEV1.DAT
2009-05-13 18:17:27 . 2007-05-15 08:41:09 0 d-----w- C:\Program Files\Microsoft Works
2009-05-11 05:58:18 . 2008-10-26 13:16:37 0 d-----w- C:\ProgramData\SpinTop Games
2009-05-08 08:39:16 . 2009-05-08 08:39:16 296208 ----a-w- C:\ProgramData\Logishrd\LQCVFX\Filters\VMSEF.dll
2009-05-08 08:36:26 . 2009-05-08 08:36:26 6781200 ----a-w- C:\ProgramData\Logishrd\LQCVFX\Filters\MMSEF.dll
2009-05-08 08:13:04 . 2009-05-08 08:13:04 13584 ----a-w- C:\Windows\system32\drivers\iKeyLFT2.dll
2009-05-04 09:16:05 . 2009-05-04 09:14:13 0 d-----w- C:\Program Files\Common Files\Adobe
2009-05-04 09:12:21 . 2009-05-04 09:10:21 0 d-----w- C:\ProgramData\NOS
2009-05-04 09:10:09 . 2009-05-04 09:10:09 0 d-----w- C:\Program Files\NOS
2009-05-04 07:35:24 . 2009-01-11 13:08:58 0 d-----w- C:\ProgramData\Flood Light Games
2009-04-30 21:02:32 . 2009-04-30 21:02:32 539160 ----a-w- C:\Windows\system32\LVUI2RC.dll
2009-04-30 21:02:10 . 2009-04-30 21:02:10 539160 ----a-w- C:\Windows\system32\LVUI2.dll
2009-04-30 21:01:36 . 2009-04-30 21:01:36 265496 ----a-w- C:\Windows\system32\drivers\lvrs.sys
2009-04-30 20:57:30 . 2009-04-30 20:57:30 199192 ----a-w- C:\Windows\system32\lvci1201278.dll
2009-04-30 20:57:10 . 2009-04-30 20:57:10 416280 ----a-w- C:\Windows\system32\lvcodec2.dll
2009-04-30 20:55:58 . 2008-06-04 14:59:14 2687512 ----a-w- C:\Windows\system32\drivers\LV302V32.SYS
2009-04-30 20:55:34 . 2009-04-30 20:55:34 13976 ----a-w- C:\Windows\system32\drivers\lv302af.sys
2009-04-30 20:39:22 . 2009-04-30 20:39:22 34068 ----a-w- C:\Windows\system32\Repository.reg
2009-04-30 14:00:12 . 2009-04-30 14:00:12 25624 ----a-w- C:\Windows\system32\drivers\LVPr2Mon.sys
2009-04-11 06:33:19 . 2009-06-22 20:01:18 986600 ----a-w- C:\Windows\system32\winload.exe
2009-04-11 06:33:19 . 2009-06-22 20:00:49 926184 ----a-w- C:\Windows\system32\winresume.exe
2009-04-11 06:33:03 . 2009-06-22 20:00:19 292840 ----a-w- C:\Windows\system32\drivers\volmgrx.sys
2009-04-11 06:33:02 . 2009-06-22 20:01:12 897000 ----a-w- C:\Windows\system32\drivers\tcpip.sys
2009-04-11 06:33:02 . 2009-06-22 20:00:55 614376 ----a-w- C:\Windows\system32\ci.dll
2009-04-11 06:28:28 . 2009-06-22 20:00:53 56320 ----a-w- C:\Windows\system32\xmlfilter.dll
2009-04-11 06:27:59 . 2009-06-22 20:01:31 441344 ----a-w- C:\Windows\system32\SearchIndexer.exe
2009-04-11 06:22:22 . 2009-06-22 19:59:20 7168 ----a-w- C:\Windows\system32\f3ahvoas.dll
2009-04-11 06:21:46 . 2009-06-22 19:59:37 37376 ----a-w- C:\Windows\system32\cdd.dll
2009-04-11 05:42:55 . 2009-06-22 19:59:22 93696 ----a-w- C:\Windows\system32\drivers\bridge.sys
2009-04-11 05:03:40 . 2009-06-22 20:01:53 2644480 ----a-w- C:\Windows\system32\NlsLexicons0009.dll
2009-04-11 04:57:26 . 2009-06-22 19:59:20 8147456 ----a-w- C:\Windows\system32\wmploc.DLL
2009-04-11 04:54:59 . 2009-06-22 19:59:19 2048 ----a-w- C:\Windows\system32\mferror.dll
2009-04-11 04:51:27 . 2009-06-22 19:59:35 180736 ----a-w- C:\Windows\system32\drivers\rdpwd.sys
2009-04-11 04:47:03 . 2009-06-22 19:59:47 273920 ----a-w- C:\Windows\system32\drivers\afd.sys
2009-04-11 04:46:40 . 2009-06-22 19:59:31 69120 ----a-w- C:\Windows\system32\drivers\rassstp.sys
2009-04-11 04:46:32 . 2009-06-22 19:59:35 121344 ----a-w- C:\Windows\system32\drivers\ndiswan.sys
2009-04-11 04:46:30 . 2009-06-22 19:59:21 41472 ----a-w- C:\Windows\system32\drivers\raspppoe.sys
2009-04-11 04:46:08 . 2009-06-22 19:59:21 15872 ----a-w- C:\Windows\system32\drivers\usb8023.sys
2009-04-11 04:46:07 . 2009-06-22 19:59:23 33280 ----a-w- C:\Windows\system32\drivers\RNDISMP.sys
2009-04-11 04:46:06 . 2009-06-22 19:59:47 30720 ----a-w- C:\Windows\system32\drivers\tcpipreg.sys
2009-04-11 04:45:56 . 2009-06-22 19:59:44 72192 ----a-w- C:\Windows\system32\drivers\tdx.sys
2009-04-11 04:45:51 . 2009-06-22 19:59:44 72192 ----a-w- C:\Windows\system32\drivers\pacer.sys
2009-04-11 04:45:37 . 2009-06-22 20:00:16 185856 ----a-w- C:\Windows\system32\drivers\netbt.sys
2009-04-11 04:45:32 . 2009-06-22 20:00:13 401408 ----a-w- C:\Windows\system32\drivers\http.sys
2009-04-11 04:45:24 . 2009-06-22 19:59:40 113664 ----a-w- C:\Windows\system32\drivers\rmcast.sys
2009-04-11 04:45:22 . 2009-06-22 19:59:38 66560 ----a-w- C:\Windows\system32\drivers\smb.sys
2009-04-11 04:43:28 . 2009-06-22 19:59:28 148480 ----a-w- C:\Windows\system32\drivers\nwifi.sys
2009-04-11 04:43:16 . 2009-06-22 20:00:48 196096 ----a-w- C:\Windows\system32\drivers\usbhub.sys
2009-04-11 04:42:57 . 2009-06-22 20:00:35 226304 ----a-w- C:\Windows\system32\drivers\usbport.sys
2009-04-11 04:42:56 . 2009-06-22 19:59:48 25856 ----a-w- C:\Windows\system32\drivers\USBCAMD2.sys
2009-04-11 04:42:56 . 2009-06-22 19:59:48 25856 ----a-w- C:\Windows\system32\drivers\USBCAMD.sys
2009-04-11 04:42:54 . 2009-06-22 19:59:50 73216 ----a-w- C:\Windows\system32\drivers\USBAUDIO.sys
2009-04-11 04:42:54 . 2009-06-22 19:59:38 27648 ----a-w- C:\Windows\system32\drivers\usbser.sys
2009-04-11 04:42:52 . 2009-06-22 20:00:06 39936 ----a-w- C:\Windows\system32\drivers\usbehci.sys
2009-04-11 04:42:50 . 2009-06-22 19:59:48 167936 ----a-w- C:\Windows\system32\drivers\portcls.sys
2009-04-11 04:42:47 . 2009-06-22 19:59:23 52992 ----a-w- C:\Windows\system32\drivers\stream.sys
2009-04-11 04:42:42 . 2009-06-22 20:01:47 561152 ----a-w- C:\Windows\system32\drivers\hdaudbus.sys
2009-04-11 04:39:57 . 2009-06-22 19:59:26 16384 ----a-w- C:\Windows\system32\iscsilog.dll
2009-04-11 04:39:17 . 2009-06-22 19:59:28 67072 ----a-w- C:\Windows\system32\drivers\cdrom.sys
2009-04-11 04:39:11 . 2009-06-22 19:59:25 19456 ----a-w- C:\Windows\system32\drivers\Diskdump.sys
2009-04-11 04:38:49 . 2009-06-22 20:00:04 149504 ----a-w- C:\Windows\system32\drivers\ks.sys
2009-04-11 04:27:17 . 2009-06-22 19:59:20 2560 ----a-w- C:\Windows\system32\msimsg.dll
2009-04-11 04:23:48 . 2009-06-22 20:00:57 626176 ----a-w- C:\Windows\system32\drivers\dxgkrnl.sys
2009-04-11 04:23:23 . 2009-06-22 19:59:25 76288 ----a-w- C:\Windows\system32\drivers\dxg.sys
2009-04-11 04:23:23 . 2009-06-22 19:59:24 289792 ----a-w- C:\Windows\system32\atmfd.dll
2007-09-01 07:23:38 . 2007-09-01 07:23:38 22 --sha-w- C:\Windows\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnhancedStorageShell]
@="{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}"
[HKEY_CLASSES_ROOT\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}]
2009-04-11 06:28:19 114176 ----a-w- C:\Windows\System32\EhStorShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2009-04-11 06:28:03 1233920]
"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-10-02 06:00:38 1124352]
"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-04-08 10:38:14 251240]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 09:34:04 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 19:34:40 49152]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-02-04 15:44:44 206088]
"hpqSRMon"="C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 08:54:08 150016]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 15:10:28 35696]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-03-09 03:19:17 148888]
"MailNotifierSessionManager"="C:\Program Files\Orange\Notification Mail\SessionManager\SessionManager.exe" [2008-11-03 07:20:40 131824]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2009-05-26 15:18:30 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2009-05-30 10:30:26 292136]
"LogitechQuickCamRibbon"="C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" [2009-05-08 08:35:50 2780432]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [2008-06-18 19:01:34 141848]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2008-06-18 19:01:26 166424]
"Persistence"="C:\Windows\system32\igfxpers.exe" [2008-06-18 19:01:30 133656]
"RtHDVCpl"="RtHDVCpl.exe" - C:\Windows\RtHDVCpl.exe [2008-01-15 09:26:18 4874240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="C:\Windows\SMINST\launcher.exe" [2007-03-07 09:09:52 44168]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"BindDirectlyToPropertySetStorage"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll c:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll c:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll c:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):fd,df,4a,34,7a,f3,c9,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{BE98B92D-B143-4334-BD7B-32FFCC65CCFC}"= UDP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{6744A1B6-AEE1-40D4-B25C-6827C1FA264D}"= TCP:C:\Program Files\LimeWire\LimeWire.exe:LimeWire
"{ED6ECAEA-EA0D-4E34-B4BF-C47B12299B60}"= Disabled:UDP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{AAEBBF45-915A-4927-9B01-C532A589633E}"= Disabled:TCP:C:\Program Files\Skype\Phone\Skype.exe:Skype
"{D723221D-6436-4663-B48F-308BD51D992C}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{13EB91F8-5D96-457F-8209-B1B4F3B16461}C:\\program files\\real\\realplayer\\realplay.exe"= UDP:C:\program files\real\realplayer\realplay.exe:RealPlayer
"UDP Query User{534FAE74-97F4-4323-8E45-1CDFAFF041FB}C:\\program files\\real\\realplayer\\realplay.exe"= TCP:C:\program files\real\realplayer\realplay.exe:RealPlayer
"{D6E69447-9BAC-4921-98B2-4D31A6CC1ADF}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{98331631-3C39-4077-A213-B183C0C4B4B1}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{49292089-CDFB-4577-989B-10B97AC5439A}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{82331CA9-D3DD-4225-87D0-F1B279FD4945}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{E9A5EC63-98A5-4EC8-BEE9-EC988586C7CB}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{F29974BA-6466-4F65-885C-F55C3E49048F}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{BA5DCD99-473F-4861-9EE2-8A1FDA28ECA0}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{2A7BD3A0-0E99-4F93-88CA-965EED5270C3}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{BCD3DE57-3FA6-4B80-ADF3-533DA145C66B}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{241D3C35-1439-4C91-9E97-E012BDFE001A}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{F9E1B150-6314-46FC-B921-FB9113E83D49}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:hpqscnvw.exe
"{F00B86B8-C0E0-4891-A96C-0CE14E9225D8}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:hpqscnvw.exe
"{C6DEE967-FEFB-4534-BD7F-CFA7632C6BAE}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"{6794F527-44D0-43B0-8E01-7FFAE7162C32}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"{47F7EF03-0CDA-4330-B9A7-31C7F8153DDF}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{7552E76C-4006-4E98-9EA6-2397F5309FEC}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{1F116558-ACE3-4AF3-A31B-7F707C2D4AD7}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{93829F0A-D744-4B75-99AA-4F57C4F4BFA5}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{B7ED02C8-EF65-4C83-94CA-8DE67D3E9794}"= Disabled:UDP:C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:hpqnrs08.exe
"{284DDF21-15B3-4F81-A41D-F7D2294BDF9C}"= Disabled:TCP:C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:hpqnrs08.exe
"{D9D19D0A-209E-4928-B29B-8DB5E534021B}"= C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:hpqpse.exe
"{A90814E5-0705-4F02-BC7B-7E80713178E4}"= C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe:hpqphotocrm.exe
"{209E1ACF-7AD8-49F8-9544-9A876FEBBA5D}"= C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:hpqsudi.exe
"{D4B9F524-6AC0-4484-B0B5-67EA0E9E892D}"= C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:hpqpsapp.exe
"{7E489CC9-24B2-406B-8FAB-447BBB1CC443}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{5FC5DF82-7403-4308-94E8-1A48DC30DBFE}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{14B607ED-99A9-44DD-8187-EED4FF3FE989}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{A7825CBA-1786-4F95-AA78-CC0049610C21}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{A207A68F-031E-4140-A278-8368AEDFF3BA}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{3BBF5845-2B14-4043-9A0C-8E253E35E69F}C:\\program files\\spyware terminator\\spywareterminatorupdate.exe"= UDP:C:\program files\spyware terminator\spywareterminatorupdate.exe:Crawler Spyware Terminator
"UDP Query User{3E5D768E-DE4E-40F3-B075-53A0BABDAFD2}C:\\program files\\spyware terminator\\spywareterminatorupdate.exe"= TCP:C:\program files\spyware terminator\spywareterminatorupdate.exe:Crawler Spyware Terminator

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"DoNotAllowExceptions"= 0 (0x0)

R0 klbg;Kaspersky Lab Boot Guard Driver;C:\Windows\System32\drivers\klbg.sys [29/01/2008 18:29:38 33808]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\System32\drivers\klim6.sys [09/07/2008 18:28:26 20496]
R2 TomTomHOMEService;TomTomHOMEService;C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [08/04/2009 12:38:14 92008]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;C:\Windows\System32\drivers\klfltdev.sys [13/03/2008 19:02:46 26640]
S3 getPlus(R) Helper;getPlus(R) Helper;C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [04/05/2009 11:10:09 33176]
S3 OxUSBTIMOUT;OxUSBTIMOUT;C:\Windows\System32\drivers\OxUSBTIMOUT.sys [07/06/2007 08:48:34 34152]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenu du dossier 'Tâches planifiées'

2009-06-30 C:\Windows\Tasks\User_Feed_Synchronization-{13915F2A-7FA2-4D37-8FA7-659FC7D8128F}.job
- C:\Windows\system32\msfeedssync.exe [2009-04-10 05:49:38 . 2009-03-08 11:31:52]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{EC8A838F-E887-4B26-87CC-FAF601C1E047} - C:\Windows\system32\vtUNhfde.dll
HKCU-Run-IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
HKLM-Run-NBKeyScan - C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
mStart Page = hxxp://ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9
uInternet Settings,ProxyOverride = <local>
IE: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
IE: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: {741747F6-83B4-4FB9-A268-8CA4010762C8} - hxxp://www3.snapfish.fr/SnapfishActivia2.cab
.