Menu

Enlever la publicité [Fermé]

odin - 28 oct. 2008 à 17:44 - Dernière réponse :  schummy
- 29 mai 2010 à 19:45
Bonjour,

Je souhaiterais savoir comment enlever les publicité (casino, porno, etc), car ca fait déja plusieur jour que j'essaie mais sans succès.

Merci de votre aide.
Afficher la suite 

46 réponses

0
Merci
rapport : ComboFix 08-10-28.01 - PATTY 2008-10-28 19:04:44.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1530 [GMT 1:00]
Lancé depuis: C:\Documents and Settings\PATTY\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\Documents and Settings\PATTY\Application Data\hidires
C:\Documents and Settings\PATTY\Application Data\m
C:\Documents and Settings\PATTY\Application Data\m\list.oct
C:\Documents and Settings\PATTY\Application Data\m\shared\[Programmi.-.ITA].Sicurezza.AVG.6(antivirus).Spyware.e.SpyBot.AdAware.il.tutto.con.seriali.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\A Fantasy Journey Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Aare AVI to VCD DVD SVCD MPEG Converter 6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AbNote 1.7.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AbsolutePrivacy 2.02.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Access Password Recovery Master 1.0.0.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AccessPatrol 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Active@ ISO File Manager 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\activePrinter 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced MP3 Converter 2.63 [Patch].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AmIAScreenSaverOrNot 1.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Antiquity Riddles 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AnVir Virus Destroyer 3.7 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Apdsoft Web Mailer 3.03.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ArcaMagica Packaging Templates 2.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ARulesXL 2.0.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ASPlayer 3.00f.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic PST Password Recovery 1.60.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic RAR Password Recovery 1.20 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AV Bros. Colorist 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.Antivírus.7.0.322.em.português.+.Keygen.&.Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Banner Maker Pro 6.0.8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Basenjinn Desktop Buddy 1.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BatchOutput 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Battlefield 1942 BiTurbo Mod.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bay Area Diving RSS feed 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Big Faceless Report Generator 1.1.34.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bigeye Network Manager 3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Birthdays 2.3 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BpmChecker 3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BRICKLETTER 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\celum IMAGINE 3.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CHP Incident Information 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CoCoMiner 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ColorPickUp 1.1.0.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Command & Conquer Generals Train map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Coollector 1.13.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CTC 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CTMailer 2.20.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Customized Windows Logon 1.0 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dealership Director 3.01 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Deleted Digital Photo Pictures Retrieval 2.0.1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dramatica Pro 4.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD Base Lite 5.530.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD to VCD AVI DivX Converter 3.2 build 069 Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD X IMAGER 2.0.0.1 (Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dynomite 2.01.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Easy SMTP Server 2.7 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\EasyTVA V1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Email Spy Pro 5.1.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\EnergySaver 2.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ESXManager 7.5.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Excel Password Recovery Key 6.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Exe Password 2004 7.114.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\F-Album 1.8.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Falling Icons 3D Screensaver 1.2 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FastChords 3.6 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FileMenu 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Flashback 1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Flippin' Switcheroo 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Folder Iconizer 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GalleryView 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GAMP Candy 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Generador2.0.Para.Actualizaciones.Del.Antivirus.Nod32.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GetAnonymous Professional 2.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Grass Roots 1.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Hadi Farsi Builder 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HandyRec Professional 4.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HD Workbench 1.1.31 Cracked.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HidePro 0.5.1.70 (beta 3).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\High--Low 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HotDog Junior 1.51.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Hours Manager 1.1 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HumanityThunder 3.1.1028 (Key).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\iDump 1.1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\IESnap 1.2 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\InsideCAT Lite Edition 4.00 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Insider 3.02 [Key+Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Itookia Free Icon Set.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Jerrycan 6.28.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Keyspan USB Twin Serial Adapter Software 1.9.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Landscape 1.2.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Lemonade Tycoon 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Dictionary 2007 German - French 4.0.22 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Suite 2006 Turkish-Russian for Windows 3.1.29.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Logic Builder - VBA Runtime Demo 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Lunar Colongitude 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MagiName 1.2 Build 30 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MasterBlaster Deluxe 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MCAFEE.ANTISPYWARE.V1.0.2005.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\McAfee.Internet.Security.Suite.V7.0.2005.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Medianet 1.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MonoCalendar 0.7.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Morovia Royal Mail RM4SCC Fontware 3.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MorphVOX 2.9.8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MSDict Professional Dictionary Bundle (Symbian Series 80) 2.40.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Muon 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MYquery Analyzer 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\N-Ball 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Net Snippets Standard 3.3 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Network Traffic Generator and Monitor 1.7.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Nuclear Clock 2.24.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\OGM to AVI Converter 3.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\OpenOffice IFilter 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PacRush 1.42.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Paquet Builder 2.9.5.0 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Password generator 1.0 beta.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Password Inventory 1.1.0.2 (Key).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PC-Com Basic 8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Conversion Series - PDF2TXT 1.1 build 1115.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Security and Privacy Audit 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Perfect Day
C:\Documents and Settings\PATTY\Application Data\m\shared\Phyllotaxis Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PictMatch 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Pink Calendar and Day Planner 6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Planetary Dreamscapes 1 1.0 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Portals of Arnak 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Power Siphon 1.9.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PowerPoint Slide Show Converter 2.3.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ProcView32 2.01.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\QuidProQuo 1.04 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\r.a.d.ajax 1.62 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Radio Max toolbar for IE 4.5.129.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Rapid Backup Beta 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RAR IFilter 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RC Converter 2.0 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Remote Software Installation Utility 2007 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Renamer 5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RGS-ADSLBoost 1.0.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RSS Content Generator Enterprise 3.1.58 Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\San Francisco 49ers screensaver.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Scenic Drive - Welsh Hills to Chestnut Hills 1.0 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sense Remote Control 1.4.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sfx-Factory 2.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sideways Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Slawdog Smart Shutdown 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SMB iCRM 4.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Soft193 Password Manager 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Softdiv Audio Converter 3.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Space War Online 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Spamihilator 0.9.9.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SQLeonardo 2006.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Starlines INC 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\swBatchPrint 1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Symantec.Norton.Antivirus.2007.Full.+.Symantec.Norton.Internet.Security.2007.Full.part1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\TestLAB 3.0.3 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Text Converter 2.1.3.21.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\TextPad 5.0.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Thunder Batch 2.1.2 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Trade Empires 1.01 patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Traffic Scotland Cameras 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Trojan Guarder 5.54.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Twinsen's Odyssey demo.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\uCertify PrepKit for test 70-300 8.02.5 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Fire Pitt v1.1 deathmatch map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Knallert45 deathmatch map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\UrVirtualDesktops 1.0.0.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VAS Free System Tools 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VB Doodle 5.0.0.68.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VerMan's Art Converter 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Visual Catalogues Lite 4.16.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Voice Tracker 1.3 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VOKATOR 1.0.2 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Volt 1.301.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - Lt. Bronx's Assault map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - The Death Sheep map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warhammer 40,000 Dawn of War The Canyon map 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WGP FolderLock 2006 1.0.4 (Patch).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\When Clones Attack 1.04.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Wincry 1.6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WinLog Assist 2.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WOA Custom Document Properties 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Woize 2.5.0.32959.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Word Password Recovery Key 8.0 build 2514.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\X-Copy Professional 1.6.50.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\YASA VOB to iPod Converter 4.0 Cracked.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Zarafa Outlook Sharing 4.22 [Key+Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\srvlist.oct
C:\Documents and Settings\PATTY\ravmonlog
C:\resycled
C:\resycled\boot.com
C:\WINDOWS\cnsinfo.dat
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\_000009_.tmp.dll
C:\WINDOWS\system32\fxtslgsw.ini
C:\WINDOWS\system32\kdpuf.exe
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\plpgbsvi.ini
C:\WINDOWS\system32\RsDdcfii.ini
C:\WINDOWS\system32\RsDdcfii.ini2
C:\xcrashdump.dat

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Legacy_CNSMINKP
-------\Service_Boonty Games


((((((((((((((((((((((((((((( Fichiers créés du 2008-09-28 au 2008-10-28 ))))))))))))))))))))))))))))))))))))
.

2008-10-28 18:27 . 2008-10-28 18:51 <REP> d-------- C:\Lop SD
2008-10-28 18:07 . 2008-10-28 18:24 <REP> d-------- C:\Program Files\Navilog1
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Malwarebytes
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-28 17:54 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-28 17:54 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-28 16:27 . 2008-10-28 16:33 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
2008-10-28 16:27 . 2008-10-28 16:27 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-10-28 16:27 . 2008-10-28 16:27 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
2008-10-28 16:27 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll
2008-10-28 16:11 . 2008-10-28 16:11 <REP> d-------- C:\Program Files\Zylom Games2
2008-10-28 13:43 . 2008-10-28 13:43 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\ESET
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Program Files\ESET
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-10-28 13:07 . 2008-10-28 13:07 144 --a------ C:\WINDOWS\wininit.ini
2008-10-27 22:40 . 2008-10-27 22:40 <REP> d-------- C:\VundoFix Backups
2008-10-27 22:36 . 2008-10-27 22:37 <REP> d-------- C:\rsit
2008-10-27 22:36 . 2008-10-27 22:37 <REP> d-------- C:\Program Files\trend micro
2008-10-26 16:41 . 2008-10-26 16:41 <REP> d-------- C:\Program Files\Yahoo!
2008-10-26 16:41 . 2008-10-26 16:42 <REP> d-------- C:\Program Files\CCleaner
2008-10-24 06:59 . 2008-10-15 17:35 337,408 --------- C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-23 14:46 . 2008-10-23 14:46 <REP> d-------- C:\Program Files\SmartShopper
2008-10-23 14:46 . 2008-10-27 14:49 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\SmartShopper
2008-10-23 14:46 . 2008-10-23 14:46 0 --a------ C:\WINDOWS\_MSI5166._IS
2008-10-22 15:51 . 2006-11-13 14:30 106,496 --a------ C:\WINDOWS\system32\ssPlantasia.scr
2008-10-22 13:16 . 2008-10-22 13:16 <REP> d-------- C:\Program Files\DD PlayCam
2008-10-22 13:15 . 2008-10-22 13:15 <REP> d-------- C:\Program Files\Fichiers communs\Look312P
2008-10-22 13:15 . 2004-03-19 17:11 90,968 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
2008-10-22 13:15 . 2003-05-15 16:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
2008-10-21 23:44 . 2008-10-22 18:40 <REP> d-------- C:\WINDOWS\Album
2008-10-21 23:43 . 2008-10-22 22:52 <REP> d-------- C:\Program Files\Look 312P
2008-10-21 23:43 . 2005-06-27 17:24 184,392 --------- C:\WINDOWS\system32\VM31bPrp.Ax
2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys
2008-10-16 21:13 . 2008-08-14 14:23 2,191,232 --------- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,147,328 --------- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,068,096 --------- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,025,984 --------- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-16 13:01 . 2008-09-15 16:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-16 12:15 . 2008-09-08 11:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-14 23:51 . 2008-10-14 23:51 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\GamesCafe
2008-10-10 23:21 . 2008-10-19 19:58 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Shopping Blocks
2008-10-04 13:51 . 2008-10-04 13:51 <REP> d-------- C:\Program Files\Eidos
2008-10-04 09:20 . 2008-10-04 09:20 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Anuman Interactive

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-28 16:31 --------- d-----w C:\Program Files\Zylom Games
2008-10-28 16:21 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Zylom
2008-10-28 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-10-28 13:19 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-10-28 12:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-28 01:35 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-10-28 01:34 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-28 01:34 --------- d-----w C:\Documents and Settings\PATTY\Application Data\EoRezo
2008-10-28 00:27 --------- d-----w C:\Program Files\EoRezo
2008-10-27 21:23 --------- d-----w C:\Program Files\WiPen
2008-10-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-10-26 20:19 --------- d-----w C:\Program Files\eMule
2008-10-23 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MythPeople
2008-10-05 12:25 --------- d-----w C:\Program Files\GameSpy Arcade
2008-10-04 21:05 --------- d-----w C:\Documents and Settings\PATTY\Application Data\PlayFirst
2008-10-04 20:11 --------- d-----w C:\Program Files\Ubisoft
2008-10-04 20:11 --------- d-----w C:\Program Files\Codemasters
2008-10-04 20:11 --------- d-----w C:\Program Files\Anuman Interactive
2008-10-04 08:26 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
2008-09-25 10:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\GameHouse
2008-09-23 21:49 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Playrix Entertainment
2008-09-19 12:07 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys
2008-09-17 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games
2008-09-12 23:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\POPWWPROFILES
2008-09-12 07:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Gogii
2008-09-11 20:54 --------- d-----w C:\Documents and Settings\PATTY\Application Data\SPAMfighter
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-07 12:01 --------- d-----w C:\Program Files\Maxis
2008-09-07 11:08 --------- d-----w C:\Program Files\MSN Messenger
2008-09-04 11:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo
2008-09-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-04-01 16:46 212,368 ----a-w C:\Documents and Settings\PATTY\Application Data\GDIPFONTCACHEV1.DAT
2007-04-25 14:08 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2003-03-21 11:37 16,056 ----a-w C:\Program Files\owcstp16.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 975360]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-09 68856]
"AnumanLive"="C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" [2008-07-01 347648]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-10-25 1410304]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.iv31"= C:\WINDOWS\system32\ir32_32.dll
"vidc.iv32"= C:\WINDOWS\system32\ir32_32.dll
"msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
"msacm.mpegacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"13789:TCP"= 13789:TCP:NortonAV
"16158:TCP"= 16158:TCP:NortonAV
"16502:TCP"= 16502:TCP:NortonAV
"16499:TCP"= 16499:TCP:NortonAV
"15187:TCP"= 15187:TCP:NortonAV
"56586:TCP"= 56586:TCP:Pando P2P TCP Listening Port
"56586:UDP"= 56586:UDP:Pando P2P UDP Listening Port

R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-02-10 162432]
R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-02-10 12032]
R2 NwSapAgent;Agent SAP;C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2006-07-25 613376]
R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-28 882688]
R3 RTSTOR;USB Mass Stroage Device;C:\WINDOWS\system32\drivers\RTSTOR.SYS [2005-12-21 20096]
R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 7040]
S2 AbyssWebServer;Abyss Web Server;F:\abyssws.exe [ ]
S3 DIGIRPS;Pilote PortServer Digi;C:\WINDOWS\system32\DRIVERS\digirlpt.sys [2001-08-23 42656]
S3 gAGP440p;gAGP440p;C:\DOCUME~1\PATTY\LOCALS~1\Temp\gAGP440p.sys [ ]
S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-10-22 38496]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 17536]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-28 355584]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}]
\Shell\AutoRun\command - F:\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5e536d2-4688-11dc-bfed-00038a000015}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe
.
Contenu du dossier 'Tâches planifiées'

2008-10-28 C:\WINDOWS\Tasks\Maintenance en 1 clic.job
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{32341E7E-C319-46DE-91D0-E30BB1A3CABA} - (no file)
BHO-{6A511CCC-E0F0-4A27-A70A-664C11A4F999} - (no file)
HKLM-Run-C:\WINDOWS\system32\kdpuf.exe - C:\WINDOWS\system32\kdpuf.exe
Notify-__c008EED6 - C:\WINDOWS\system32\__c008EED6.dat
Notify-cbXooMcY - cbXooMcY.dll


.
------- Examen supplémentaire -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.lo.st
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 -: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {BCEB373D-A35A-4200-BD43-8586CD9DFAE7} -

O16 -: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - hxxp://zylom.king.com/ctl/kingcomie.cab
C:\WINDOWS\Downloaded Program Files\KingComIE.inf
C:\WINDOWS\KingComIE.dll

O16 -: {48DF87EE-F2DE-11D8-BE7F-302050C10811} - hxxp://www.flysuite.com/flyword/loaderword_win_fr.cab
C:\WINDOWS\Downloaded Program Files\FlyLoader.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-28 19:20:32
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2008-10-28 19:29:13 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-10-28 18:29:10

Avant-CF: 249 614 553 088 octets libres
Après-CF: 249,048,584,192 octets libres

450 --- E O F --- 2008-10-25 12:13:51
0
Merci
rapport : ComboFix 08-10-28.01 - PATTY 2008-10-28 19:04:44.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1530 [GMT 1:00]
Lancé depuis: C:\Documents and Settings\PATTY\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\Documents and Settings\PATTY\Application Data\hidires
C:\Documents and Settings\PATTY\Application Data\m
C:\Documents and Settings\PATTY\Application Data\m\list.oct
C:\Documents and Settings\PATTY\Application Data\m\shared\[Programmi.-.ITA].Sicurezza.AVG.6(antivirus).Spyware.e.SpyBot.AdAware.il.tutto.con.seriali.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\A Fantasy Journey Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Aare AVI to VCD DVD SVCD MPEG Converter 6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AbNote 1.7.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AbsolutePrivacy 2.02.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Access Password Recovery Master 1.0.0.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AccessPatrol 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Active@ ISO File Manager 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\activePrinter 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced MP3 Converter 2.63 [Patch].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AmIAScreenSaverOrNot 1.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Antiquity Riddles 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AnVir Virus Destroyer 3.7 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Apdsoft Web Mailer 3.03.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ArcaMagica Packaging Templates 2.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ARulesXL 2.0.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ASPlayer 3.00f.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic PST Password Recovery 1.60.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic RAR Password Recovery 1.20 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AV Bros. Colorist 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.Antivírus.7.0.322.em.português.+.Keygen.&.Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Banner Maker Pro 6.0.8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Basenjinn Desktop Buddy 1.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BatchOutput 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Battlefield 1942 BiTurbo Mod.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bay Area Diving RSS feed 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Big Faceless Report Generator 1.1.34.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bigeye Network Manager 3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Birthdays 2.3 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BpmChecker 3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BRICKLETTER 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\celum IMAGINE 3.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CHP Incident Information 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CoCoMiner 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ColorPickUp 1.1.0.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Command & Conquer Generals Train map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Coollector 1.13.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CTC 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CTMailer 2.20.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Customized Windows Logon 1.0 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dealership Director 3.01 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Deleted Digital Photo Pictures Retrieval 2.0.1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dramatica Pro 4.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD Base Lite 5.530.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD to VCD AVI DivX Converter 3.2 build 069 Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD X IMAGER 2.0.0.1 (Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dynomite 2.01.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Easy SMTP Server 2.7 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\EasyTVA V1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Email Spy Pro 5.1.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\EnergySaver 2.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ESXManager 7.5.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Excel Password Recovery Key 6.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Exe Password 2004 7.114.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\F-Album 1.8.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Falling Icons 3D Screensaver 1.2 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FastChords 3.6 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FileMenu 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Flashback 1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Flippin' Switcheroo 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Folder Iconizer 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GalleryView 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GAMP Candy 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Generador2.0.Para.Actualizaciones.Del.Antivirus.Nod32.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GetAnonymous Professional 2.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Grass Roots 1.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Hadi Farsi Builder 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HandyRec Professional 4.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HD Workbench 1.1.31 Cracked.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HidePro 0.5.1.70 (beta 3).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\High--Low 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HotDog Junior 1.51.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Hours Manager 1.1 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HumanityThunder 3.1.1028 (Key).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\iDump 1.1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\IESnap 1.2 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\InsideCAT Lite Edition 4.00 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Insider 3.02 [Key+Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Itookia Free Icon Set.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Jerrycan 6.28.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Keyspan USB Twin Serial Adapter Software 1.9.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Landscape 1.2.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Lemonade Tycoon 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Dictionary 2007 German - French 4.0.22 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Suite 2006 Turkish-Russian for Windows 3.1.29.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Logic Builder - VBA Runtime Demo 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Lunar Colongitude 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MagiName 1.2 Build 30 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MasterBlaster Deluxe 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MCAFEE.ANTISPYWARE.V1.0.2005.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\McAfee.Internet.Security.Suite.V7.0.2005.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Medianet 1.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MonoCalendar 0.7.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Morovia Royal Mail RM4SCC Fontware 3.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MorphVOX 2.9.8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MSDict Professional Dictionary Bundle (Symbian Series 80) 2.40.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Muon 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MYquery Analyzer 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\N-Ball 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Net Snippets Standard 3.3 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Network Traffic Generator and Monitor 1.7.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Nuclear Clock 2.24.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\OGM to AVI Converter 3.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\OpenOffice IFilter 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PacRush 1.42.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Paquet Builder 2.9.5.0 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Password generator 1.0 beta.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Password Inventory 1.1.0.2 (Key).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PC-Com Basic 8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Conversion Series - PDF2TXT 1.1 build 1115.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Security and Privacy Audit 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Perfect Day
C:\Documents and Settings\PATTY\Application Data\m\shared\Phyllotaxis Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PictMatch 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Pink Calendar and Day Planner 6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Planetary Dreamscapes 1 1.0 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Portals of Arnak 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Power Siphon 1.9.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PowerPoint Slide Show Converter 2.3.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ProcView32 2.01.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\QuidProQuo 1.04 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\r.a.d.ajax 1.62 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Radio Max toolbar for IE 4.5.129.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Rapid Backup Beta 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RAR IFilter 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RC Converter 2.0 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Remote Software Installation Utility 2007 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Renamer 5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RGS-ADSLBoost 1.0.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RSS Content Generator Enterprise 3.1.58 Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\San Francisco 49ers screensaver.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Scenic Drive - Welsh Hills to Chestnut Hills 1.0 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sense Remote Control 1.4.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sfx-Factory 2.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sideways Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Slawdog Smart Shutdown 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SMB iCRM 4.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Soft193 Password Manager 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Softdiv Audio Converter 3.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Space War Online 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Spamihilator 0.9.9.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SQLeonardo 2006.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Starlines INC 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\swBatchPrint 1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Symantec.Norton.Antivirus.2007.Full.+.Symantec.Norton.Internet.Security.2007.Full.part1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\TestLAB 3.0.3 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Text Converter 2.1.3.21.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\TextPad 5.0.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Thunder Batch 2.1.2 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Trade Empires 1.01 patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Traffic Scotland Cameras 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Trojan Guarder 5.54.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Twinsen's Odyssey demo.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\uCertify PrepKit for test 70-300 8.02.5 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Fire Pitt v1.1 deathmatch map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Knallert45 deathmatch map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\UrVirtualDesktops 1.0.0.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VAS Free System Tools 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VB Doodle 5.0.0.68.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VerMan's Art Converter 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Visual Catalogues Lite 4.16.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Voice Tracker 1.3 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VOKATOR 1.0.2 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Volt 1.301.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - Lt. Bronx's Assault map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - The Death Sheep map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warhammer 40,000 Dawn of War The Canyon map 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WGP FolderLock 2006 1.0.4 (Patch).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\When Clones Attack 1.04.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Wincry 1.6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WinLog Assist 2.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WOA Custom Document Properties 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Woize 2.5.0.32959.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Word Password Recovery Key 8.0 build 2514.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\X-Copy Professional 1.6.50.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\YASA VOB to iPod Converter 4.0 Cracked.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Zarafa Outlook Sharing 4.22 [Key+Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\srvlist.oct
C:\Documents and Settings\PATTY\ravmonlog
C:\resycled
C:\resycled\boot.com
C:\WINDOWS\cnsinfo.dat
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\_000009_.tmp.dll
C:\WINDOWS\system32\fxtslgsw.ini
C:\WINDOWS\system32\kdpuf.exe
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\plpgbsvi.ini
C:\WINDOWS\system32\RsDdcfii.ini
C:\WINDOWS\system32\RsDdcfii.ini2
C:\xcrashdump.dat

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Legacy_CNSMINKP
-------\Service_Boonty Games


((((((((((((((((((((((((((((( Fichiers créés du 2008-09-28 au 2008-10-28 ))))))))))))))))))))))))))))))))))))
.

2008-10-28 18:27 . 2008-10-28 18:51 <REP> d-------- C:\Lop SD
2008-10-28 18:07 . 2008-10-28 18:24 <REP> d-------- C:\Program Files\Navilog1
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Malwarebytes
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-28 17:54 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-28 17:54 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-28 16:27 . 2008-10-28 16:33 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
2008-10-28 16:27 . 2008-10-28 16:27 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-10-28 16:27 . 2008-10-28 16:27 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
2008-10-28 16:27 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll
2008-10-28 16:11 . 2008-10-28 16:11 <REP> d-------- C:\Program Files\Zylom Games2
2008-10-28 13:43 . 2008-10-28 13:43 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\ESET
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Program Files\ESET
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-10-28 13:07 . 2008-10-28 13:07 144 --a------ C:\WINDOWS\wininit.ini
2008-10-27 22:40 . 2008-10-27 22:40 <REP> d-------- C:\VundoFix Backups
2008-10-27 22:36 . 2008-10-27 22:37 <REP> d-------- C:\rsit
2008-10-27 22:36 . 2008-10-27 22:37 <REP> d-------- C:\Program Files\trend micro
2008-10-26 16:41 . 2008-10-26 16:41 <REP> d-------- C:\Program Files\Yahoo!
2008-10-26 16:41 . 2008-10-26 16:42 <REP> d-------- C:\Program Files\CCleaner
2008-10-24 06:59 . 2008-10-15 17:35 337,408 --------- C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-23 14:46 . 2008-10-23 14:46 <REP> d-------- C:\Program Files\SmartShopper
2008-10-23 14:46 . 2008-10-27 14:49 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\SmartShopper
2008-10-23 14:46 . 2008-10-23 14:46 0 --a------ C:\WINDOWS\_MSI5166._IS
2008-10-22 15:51 . 2006-11-13 14:30 106,496 --a------ C:\WINDOWS\system32\ssPlantasia.scr
2008-10-22 13:16 . 2008-10-22 13:16 <REP> d-------- C:\Program Files\DD PlayCam
2008-10-22 13:15 . 2008-10-22 13:15 <REP> d-------- C:\Program Files\Fichiers communs\Look312P
2008-10-22 13:15 . 2004-03-19 17:11 90,968 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
2008-10-22 13:15 . 2003-05-15 16:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
2008-10-21 23:44 . 2008-10-22 18:40 <REP> d-------- C:\WINDOWS\Album
2008-10-21 23:43 . 2008-10-22 22:52 <REP> d-------- C:\Program Files\Look 312P
2008-10-21 23:43 . 2005-06-27 17:24 184,392 --------- C:\WINDOWS\system32\VM31bPrp.Ax
2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys
2008-10-16 21:13 . 2008-08-14 14:23 2,191,232 --------- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,147,328 --------- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,068,096 --------- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,025,984 --------- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-16 13:01 . 2008-09-15 16:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-16 12:15 . 2008-09-08 11:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-14 23:51 . 2008-10-14 23:51 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\GamesCafe
2008-10-10 23:21 . 2008-10-19 19:58 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Shopping Blocks
2008-10-04 13:51 . 2008-10-04 13:51 <REP> d-------- C:\Program Files\Eidos
2008-10-04 09:20 . 2008-10-04 09:20 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Anuman Interactive

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-28 16:31 --------- d-----w C:\Program Files\Zylom Games
2008-10-28 16:21 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Zylom
2008-10-28 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-10-28 13:19 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-10-28 12:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-28 01:35 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-10-28 01:34 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-28 01:34 --------- d-----w C:\Documents and Settings\PATTY\Application Data\EoRezo
2008-10-28 00:27 --------- d-----w C:\Program Files\EoRezo
2008-10-27 21:23 --------- d-----w C:\Program Files\WiPen
2008-10-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-10-26 20:19 --------- d-----w C:\Program Files\eMule
2008-10-23 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MythPeople
2008-10-05 12:25 --------- d-----w C:\Program Files\GameSpy Arcade
2008-10-04 21:05 --------- d-----w C:\Documents and Settings\PATTY\Application Data\PlayFirst
2008-10-04 20:11 --------- d-----w C:\Program Files\Ubisoft
2008-10-04 20:11 --------- d-----w C:\Program Files\Codemasters
2008-10-04 20:11 --------- d-----w C:\Program Files\Anuman Interactive
2008-10-04 08:26 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
2008-09-25 10:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\GameHouse
2008-09-23 21:49 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Playrix Entertainment
2008-09-19 12:07 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys
2008-09-17 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games
2008-09-12 23:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\POPWWPROFILES
2008-09-12 07:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Gogii
2008-09-11 20:54 --------- d-----w C:\Documents and Settings\PATTY\Application Data\SPAMfighter
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-07 12:01 --------- d-----w C:\Program Files\Maxis
2008-09-07 11:08 --------- d-----w C:\Program Files\MSN Messenger
2008-09-04 11:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo
2008-09-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-04-01 16:46 212,368 ----a-w C:\Documents and Settings\PATTY\Application Data\GDIPFONTCACHEV1.DAT
2007-04-25 14:08 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2003-03-21 11:37 16,056 ----a-w C:\Program Files\owcstp16.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 975360]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-09 68856]
"AnumanLive"="C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" [2008-07-01 347648]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-10-25 1410304]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.iv31"= C:\WINDOWS\system32\ir32_32.dll
"vidc.iv32"= C:\WINDOWS\system32\ir32_32.dll
"msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
"msacm.mpegacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"13789:TCP"= 13789:TCP:NortonAV
"16158:TCP"= 16158:TCP:NortonAV
"16502:TCP"= 16502:TCP:NortonAV
"16499:TCP"= 16499:TCP:NortonAV
"15187:TCP"= 15187:TCP:NortonAV
"56586:TCP"= 56586:TCP:Pando P2P TCP Listening Port
"56586:UDP"= 56586:UDP:Pando P2P UDP Listening Port

R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-02-10 162432]
R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-02-10 12032]
R2 NwSapAgent;Agent SAP;C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2006-07-25 613376]
R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-28 882688]
R3 RTSTOR;USB Mass Stroage Device;C:\WINDOWS\system32\drivers\RTSTOR.SYS [2005-12-21 20096]
R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 7040]
S2 AbyssWebServer;Abyss Web Server;F:\abyssws.exe [ ]
S3 DIGIRPS;Pilote PortServer Digi;C:\WINDOWS\system32\DRIVERS\digirlpt.sys [2001-08-23 42656]
S3 gAGP440p;gAGP440p;C:\DOCUME~1\PATTY\LOCALS~1\Temp\gAGP440p.sys [ ]
S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-10-22 38496]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 17536]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-28 355584]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}]
\Shell\AutoRun\command - F:\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5e536d2-4688-11dc-bfed-00038a000015}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe
.
Contenu du dossier 'Tâches planifiées'

2008-10-28 C:\WINDOWS\Tasks\Maintenance en 1 clic.job
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{32341E7E-C319-46DE-91D0-E30BB1A3CABA} - (no file)
BHO-{6A511CCC-E0F0-4A27-A70A-664C11A4F999} - (no file)
HKLM-Run-C:\WINDOWS\system32\kdpuf.exe - C:\WINDOWS\system32\kdpuf.exe
Notify-__c008EED6 - C:\WINDOWS\system32\__c008EED6.dat
Notify-cbXooMcY - cbXooMcY.dll


.
------- Examen supplémentaire -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.lo.st
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 -: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {BCEB373D-A35A-4200-BD43-8586CD9DFAE7} -

O16 -: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - hxxp://zylom.king.com/ctl/kingcomie.cab
C:\WINDOWS\Downloaded Program Files\KingComIE.inf
C:\WINDOWS\KingComIE.dll

O16 -: {48DF87EE-F2DE-11D8-BE7F-302050C10811} - hxxp://www.flysuite.com/flyword/loaderword_win_fr.cab
C:\WINDOWS\Downloaded Program Files\FlyLoader.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-28 19:20:32
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2008-10-28 19:29:13 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-10-28 18:29:10

Avant-CF: 249 614 553 088 octets libres
Après-CF: 249,048,584,192 octets libres

450 --- E O F --- 2008-10-25 12:13:51
0
Merci
rapport : ComboFix 08-10-28.01 - PATTY 2008-10-28 19:04:44.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1530 [GMT 1:00]
Lancé depuis: C:\Documents and Settings\PATTY\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\Documents and Settings\PATTY\Application Data\hidires
C:\Documents and Settings\PATTY\Application Data\m
C:\Documents and Settings\PATTY\Application Data\m\list.oct
C:\Documents and Settings\PATTY\Application Data\m\shared\[Programmi.-.ITA].Sicurezza.AVG.6(antivirus).Spyware.e.SpyBot.AdAware.il.tutto.con.seriali.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\A Fantasy Journey Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Aare AVI to VCD DVD SVCD MPEG Converter 6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AbNote 1.7.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AbsolutePrivacy 2.02.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Access Password Recovery Master 1.0.0.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AccessPatrol 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Active@ ISO File Manager 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\activePrinter 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced MP3 Converter 2.63 [Patch].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Advanced Office Password Breaker 1.40 (KeyGen).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AmIAScreenSaverOrNot 1.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Antiquity Riddles 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AnVir Virus Destroyer 3.7 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Apdsoft Web Mailer 3.03.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Apex iPod Video Converter 4.19 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ArcaMagica Packaging Templates 2.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ARulesXL 2.0.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ASPlayer 3.00f.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic PST Password Recovery 1.60.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Atomic RAR Password Recovery 1.20 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AV Bros. Colorist 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.Antivírus.7.0.322.em.português.+.Keygen.&.Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\AVG.AntiVirus.v7.1.371.Multilangages.Incl-Keygen.par.eMule-Paradise.com.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Banner Maker Pro 6.0.8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Basenjinn Desktop Buddy 1.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Batch It! Ultra 3.978 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BatchOutput 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Battlefield 1942 BiTurbo Mod.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bay Area Diving RSS feed 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Big Faceless Report Generator 1.1.34.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bigeye Network Manager 3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Birthdays 2.3 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Bitdefender.v8.Keygen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BpmChecker 3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\BRICKLETTER 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CarryDVD 4.5.0 Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\celum IMAGINE 3.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CHP Incident Information 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CoCoMiner 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ColorPickUp 1.1.0.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Command & Conquer Generals Train map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Coollector 1.13.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CTC 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\CTMailer 2.20.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Customized Windows Logon 1.0 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dealership Director 3.01 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Deleted Digital Photo Pictures Retrieval 2.0.1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dramatica Pro 4.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD Base Lite 5.530.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD to VCD AVI DivX Converter 3.2 build 069 Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\DVD X IMAGER 2.0.0.1 (Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Dynomite 2.01.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Easy SMTP Server 2.7 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\EasyTVA V1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Email Spy Pro 5.1.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\EnergySaver 2.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ESXManager 7.5.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Excel Password Recovery Key 6.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Exe Password 2004 7.114.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\F-Album 1.8.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Falling Icons 3D Screensaver 1.2 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FastChords 3.6 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FileMenu 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Flashback 1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Flippin' Switcheroo 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Folder Iconizer 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\FRS Clocks and Time 1.8 [KeyGen].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GalleryView 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GAMP Candy 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Generador2.0.Para.Actualizaciones.Del.Antivirus.Nod32.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GetAnonymous Professional 2.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\GoToMeeting 3.0 [KeyGen].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Grass Roots 1.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Hadi Farsi Builder 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HandyRec Professional 4.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HD Workbench 1.1.31 Cracked.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HidePro 0.5.1.70 (beta 3).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\High--Low 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HotDog Junior 1.51.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Hours Manager 1.1 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\HumanityThunder 3.1.1028 (Key).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\iDump 1.1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\IESnap 1.2 (Key+Serial).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\InsideCAT Lite Edition 4.00 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Insider 3.02 [Key+Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\iPod Audio Studio 6.4.2 [With Crack].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Itookia Free Icon Set.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Jerrycan 6.28.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Keyspan USB Twin Serial Adapter Software 1.9.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Landscape 1.2.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Lemonade Tycoon 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Dictionary 2007 German - French 4.0.22 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\LingvoSoft Suite 2006 Turkish-Russian for Windows 3.1.29.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Logic Builder - VBA Runtime Demo 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Lunar Colongitude 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MagiName 1.2 Build 30 Patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MasterBlaster Deluxe 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MCAFEE.ANTISPYWARE.V1.0.2005.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\McAfee.Internet.Security.Suite.V7.0.2005.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Medianet 1.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MonoCalendar 0.7.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Morovia Royal Mail RM4SCC Fontware 3.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MorphVOX 2.9.8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MP3DJ Broadcast 3.7 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MSDict Professional Dictionary Bundle (Symbian Series 80) 2.40.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Muon 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\MYquery Analyzer 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\N-Ball 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Net Snippets Standard 3.3 [Key].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Network Traffic Generator and Monitor 1.7.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Nuclear Clock 2.24.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\OGM to AVI Converter 3.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\OpenOffice IFilter 1.2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PacRush 1.42.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Paint Shop Photo Album 5.01 (Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Paquet Builder 2.9.5.0 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Password generator 1.0 beta.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Password Inventory 1.1.0.2 (Key).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PC-Com Basic 8.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Conversion Series - PDF2TXT 1.1 build 1115.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PDF Security and Privacy Audit 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Perfect Day
C:\Documents and Settings\PATTY\Application Data\m\shared\Phyllotaxis Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PictMatch 2.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Pink Calendar and Day Planner 6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Planetary Dreamscapes 1 1.0 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PM Master 2.8 [Crack].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PopSurfer 1.1 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Portals of Arnak 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Power Siphon 1.9.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\PowerPoint Slide Show Converter 2.3.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\ProcView32 2.01.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\QuidProQuo 1.04 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\r.a.d.ajax 1.62 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Radio Max toolbar for IE 4.5.129.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Rapid Backup Beta 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RAR IFilter 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RC Converter 2.0 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Remote Software Installation Utility 2007 Key+Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Renamer 5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RGS-ADSLBoost 1.0.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\RSS Content Generator Enterprise 3.1.58 Serial.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\San Francisco 49ers screensaver.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Scenic Drive - Welsh Hills to Chestnut Hills 1.0 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sense Remote Control 1.4.0.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sfx-Factory 2.6.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Sideways Screensaver 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Slawdog Smart Shutdown 1.4.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SmartFormFiller 5.1 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SMB iCRM 4.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Soft193 Password Manager 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Softdiv Audio Converter 3.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Space War Online 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Spamihilator 0.9.9.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\SQLeonardo 2006.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Starlines INC 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\swBatchPrint 1.5.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Symantec.Norton.Antivirus.2007.Full.+.Symantec.Norton.Internet.Security.2007.Full.part1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\TestLAB 3.0.3 [Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Text Converter 2.1.3.21.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\TextPad 5.0.3.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\The Business OpsCenter 3.5.0 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Thunder Batch 2.1.2 [Cracked].zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Titanium Checkbook 3.2 With Crack.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Trade Empires 1.01 patch.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Traffic Scotland Cameras 1.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Trojan Guarder 5.54.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Twinsen's Odyssey demo.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\uCertify PrepKit for test 70-300 8.02.5 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Fire Pitt v1.1 deathmatch map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Unreal Tournament 2003 - Knallert45 deathmatch map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\UrVirtualDesktops 1.0.0.31.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VAS Free System Tools 1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VB Doodle 5.0.0.68.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Vegetarian Cookery 1.0 (With Crack).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VerMan's Art Converter 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Visual Catalogues Lite 4.16.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Voice Tracker 1.3 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\VOKATOR 1.0.2 Key.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Volt 1.301.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - Lt. Bronx's Assault map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warcraft III - The Death Sheep map.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Warhammer 40,000 Dawn of War The Canyon map 2.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WGP FolderLock 2006 1.0.4 (Patch).zip
C:\Documents and Settings\PATTY\Application Data\m\shared\When Clones Attack 1.04.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Wincry 1.6.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WinLog Assist 2.1.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WOA Custom Document Properties 1.0.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Woize 2.5.0.32959.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Word Password Recovery Key 8.0 build 2514.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\WordCaptureX 2.2 KeyGen.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\X-Copy Professional 1.6.50.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\YASA VOB to iPod Converter 4.0 Cracked.zip
C:\Documents and Settings\PATTY\Application Data\m\shared\Zarafa Outlook Sharing 4.22 [Key+Serial].zip
C:\Documents and Settings\PATTY\Application Data\m\srvlist.oct
C:\Documents and Settings\PATTY\ravmonlog
C:\resycled
C:\resycled\boot.com
C:\WINDOWS\cnsinfo.dat
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\_000009_.tmp.dll
C:\WINDOWS\system32\fxtslgsw.ini
C:\WINDOWS\system32\kdpuf.exe
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\MSINET.oca
C:\WINDOWS\system32\plpgbsvi.ini
C:\WINDOWS\system32\RsDdcfii.ini
C:\WINDOWS\system32\RsDdcfii.ini2
C:\xcrashdump.dat

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Legacy_CNSMINKP
-------\Service_Boonty Games


((((((((((((((((((((((((((((( Fichiers créés du 2008-09-28 au 2008-10-28 ))))))))))))))))))))))))))))))))))))
.

2008-10-28 18:27 . 2008-10-28 18:51 <REP> d-------- C:\Lop SD
2008-10-28 18:07 . 2008-10-28 18:24 <REP> d-------- C:\Program Files\Navilog1
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Malwarebytes
2008-10-28 17:54 . 2008-10-28 17:54 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-28 17:54 . 2008-10-22 16:10 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-10-28 17:54 . 2008-10-22 16:10 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-10-28 16:27 . 2008-10-28 16:33 <REP> d-------- C:\Program Files\TuneUp Utilities 2008
2008-10-28 16:27 . 2008-10-28 16:27 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-10-28 16:27 . 2008-10-28 16:27 355,584 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
2008-10-28 16:27 . 2008-05-29 09:28 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll
2008-10-28 16:11 . 2008-10-28 16:11 <REP> d-------- C:\Program Files\Zylom Games2
2008-10-28 13:43 . 2008-10-28 13:43 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\ESET
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Program Files\ESET
2008-10-28 13:27 . 2008-10-28 13:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-10-28 13:07 . 2008-10-28 13:07 144 --a------ C:\WINDOWS\wininit.ini
2008-10-27 22:40 . 2008-10-27 22:40 <REP> d-------- C:\VundoFix Backups
2008-10-27 22:36 . 2008-10-27 22:37 <REP> d-------- C:\rsit
2008-10-27 22:36 . 2008-10-27 22:37 <REP> d-------- C:\Program Files\trend micro
2008-10-26 16:41 . 2008-10-26 16:41 <REP> d-------- C:\Program Files\Yahoo!
2008-10-26 16:41 . 2008-10-26 16:42 <REP> d-------- C:\Program Files\CCleaner
2008-10-24 06:59 . 2008-10-15 17:35 337,408 --------- C:\WINDOWS\system32\dllcache\netapi32.dll
2008-10-23 14:46 . 2008-10-23 14:46 <REP> d-------- C:\Program Files\SmartShopper
2008-10-23 14:46 . 2008-10-27 14:49 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\SmartShopper
2008-10-23 14:46 . 2008-10-23 14:46 0 --a------ C:\WINDOWS\_MSI5166._IS
2008-10-22 15:51 . 2006-11-13 14:30 106,496 --a------ C:\WINDOWS\system32\ssPlantasia.scr
2008-10-22 13:16 . 2008-10-22 13:16 <REP> d-------- C:\Program Files\DD PlayCam
2008-10-22 13:15 . 2008-10-22 13:15 <REP> d-------- C:\Program Files\Fichiers communs\Look312P
2008-10-22 13:15 . 2004-03-19 17:11 90,968 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
2008-10-22 13:15 . 2003-05-15 16:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
2008-10-21 23:44 . 2008-10-22 18:40 <REP> d-------- C:\WINDOWS\Album
2008-10-21 23:43 . 2008-10-22 22:52 <REP> d-------- C:\Program Files\Look 312P
2008-10-21 23:43 . 2005-06-27 17:24 184,392 --------- C:\WINDOWS\system32\VM31bPrp.Ax
2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2008-10-21 23:32 . 2008-04-13 19:45 60,032 --a------ C:\WINDOWS\system32\dllcache\usbaudio.sys
2008-10-16 21:13 . 2008-08-14 14:23 2,191,232 --------- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,147,328 --------- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,068,096 --------- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-16 21:13 . 2008-08-14 14:23 2,025,984 --------- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-16 13:01 . 2008-09-15 16:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-16 12:15 . 2008-09-08 11:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-14 23:51 . 2008-10-14 23:51 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\GamesCafe
2008-10-10 23:21 . 2008-10-19 19:58 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Shopping Blocks
2008-10-04 13:51 . 2008-10-04 13:51 <REP> d-------- C:\Program Files\Eidos
2008-10-04 09:20 . 2008-10-04 09:20 <REP> d-------- C:\Documents and Settings\PATTY\Application Data\Anuman Interactive

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-28 16:31 --------- d-----w C:\Program Files\Zylom Games
2008-10-28 16:21 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Zylom
2008-10-28 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-10-28 13:19 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-10-28 12:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-28 01:35 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-10-28 01:34 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-28 01:34 --------- d-----w C:\Documents and Settings\PATTY\Application Data\EoRezo
2008-10-28 00:27 --------- d-----w C:\Program Files\EoRezo
2008-10-27 21:23 --------- d-----w C:\Program Files\WiPen
2008-10-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-10-26 20:19 --------- d-----w C:\Program Files\eMule
2008-10-23 15:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MythPeople
2008-10-05 12:25 --------- d-----w C:\Program Files\GameSpy Arcade
2008-10-04 21:05 --------- d-----w C:\Documents and Settings\PATTY\Application Data\PlayFirst
2008-10-04 20:11 --------- d-----w C:\Program Files\Ubisoft
2008-10-04 20:11 --------- d-----w C:\Program Files\Codemasters
2008-10-04 20:11 --------- d-----w C:\Program Files\Anuman Interactive
2008-10-04 08:26 278,984 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
2008-09-25 10:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\GameHouse
2008-09-23 21:49 --------- d-----w C:\Documents and Settings\PATTY\Application Data\Playrix Entertainment
2008-09-19 12:07 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys
2008-09-17 12:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games
2008-09-12 23:25 --------- d-----w C:\Documents and Settings\All Users\Application Data\POPWWPROFILES
2008-09-12 07:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Gogii
2008-09-11 20:54 --------- d-----w C:\Documents and Settings\PATTY\Application Data\SPAMfighter
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-07 12:01 --------- d-----w C:\Program Files\Maxis
2008-09-07 11:08 --------- d-----w C:\Program Files\MSN Messenger
2008-09-04 11:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\MumboJumbo
2008-09-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-04-01 16:46 212,368 ----a-w C:\Documents and Settings\PATTY\Application Data\GDIPFONTCACHEV1.DAT
2007-04-25 14:08 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2003-03-21 11:37 16,056 ----a-w C:\Program Files\owcstp16.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="C:\APPS\SMP\SmpSys.exe" [2005-11-17 975360]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-09 68856]
"AnumanLive"="C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe" [2008-07-01 347648]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2007-10-25 1410304]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

C:\Documents and Settings\PATTY\Menu D‚marrer\Programmes\D‚marrage\
FreeBot.lnk - C:\Program Files\FreeBot\freebot.exe [2006-04-04 2480440]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.iv31"= C:\WINDOWS\system32\ir32_32.dll
"vidc.iv32"= C:\WINDOWS\system32\ir32_32.dll
"msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
"msacm.mpegacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"13789:TCP"= 13789:TCP:NortonAV
"16158:TCP"= 16158:TCP:NortonAV
"16502:TCP"= 16502:TCP:NortonAV
"16499:TCP"= 16499:TCP:NortonAV
"15187:TCP"= 15187:TCP:NortonAV
"56586:TCP"= 56586:TCP:Pando P2P TCP Listening Port
"56586:UDP"= 56586:UDP:Pando P2P UDP Listening Port

R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2007-02-10 162432]
R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2007-02-10 12032]
R2 NwSapAgent;Agent SAP;C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 SrvCDEject;SrvCDEject;C:\Program Files\Packard Bell\SrvCDEject.exe [2006-07-25 613376]
R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 3xHybrid;ASUSTek SAA713x PCI Card;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-28 882688]
R3 RTSTOR;USB Mass Stroage Device;C:\WINDOWS\system32\drivers\RTSTOR.SYS [2005-12-21 20096]
R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 7040]
S2 AbyssWebServer;Abyss Web Server;F:\abyssws.exe [ ]
S3 DIGIRPS;Pilote PortServer Digi;C:\WINDOWS\system32\DRIVERS\digirlpt.sys [2001-08-23 42656]
S3 gAGP440p;gAGP440p;C:\DOCUME~1\PATTY\LOCALS~1\Temp\gAGP440p.sys [ ]
S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-10-22 38496]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 17536]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-28 355584]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}]
\Shell\AutoRun\command - F:\Setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a5e536d2-4688-11dc-bfed-00038a000015}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe
.
Contenu du dossier 'Tâches planifiées'

2008-10-28 C:\WINDOWS\Tasks\Maintenance en 1 clic.job
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{32341E7E-C319-46DE-91D0-E30BB1A3CABA} - (no file)
BHO-{6A511CCC-E0F0-4A27-A70A-664C11A4F999} - (no file)
HKLM-Run-C:\WINDOWS\system32\kdpuf.exe - C:\WINDOWS\system32\kdpuf.exe
Notify-__c008EED6 - C:\WINDOWS\system32\__c008EED6.dat
Notify-cbXooMcY - cbXooMcY.dll


.
------- Examen supplémentaire -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.lo.st
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 -: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {BCEB373D-A35A-4200-BD43-8586CD9DFAE7} -

O16 -: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - hxxp://zylom.king.com/ctl/kingcomie.cab
C:\WINDOWS\Downloaded Program Files\KingComIE.inf
C:\WINDOWS\KingComIE.dll

O16 -: {48DF87EE-F2DE-11D8-BE7F-302050C10811} - hxxp://www.flysuite.com/flyword/loaderword_win_fr.cab
C:\WINDOWS\Downloaded Program Files\FlyLoader.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-28 19:20:32
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2008-10-28 19:29:13 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-10-28 18:29:10

Avant-CF: 249 614 553 088 octets libres
Après-CF: 249,048,584,192 octets libres

450 --- E O F --- 2008-10-25 12:13:51
0
Merci
euh dsl j'ai pas fait gaffe, j'ai envoyer 3 fois le mm rapport....
0
Merci
quelqu'un peut continuer ce poste svp?
0
Merci
s'il vous plais, le membre qui s'occupait de moi est parti, pouvez vous le relayer svp
0
Merci
Quelqu'un peut me dire ce que je dis faire après combofix s'il vous plais
Psycotix 16 Messages postés mardi 28 octobre 2008Date d'inscription 4 novembre 2008 Dernière intervention - 28 oct. 2008 à 20:30
0
Merci
à l'aide svp, HELP
Psycotix 16 Messages postés mardi 28 octobre 2008Date d'inscription 4 novembre 2008 Dernière intervention - 28 oct. 2008 à 20:40
0
Merci
S'IL VOUS PLAIT
Psycotix 16 Messages postés mardi 28 octobre 2008Date d'inscription 4 novembre 2008 Dernière intervention - 28 oct. 2008 à 20:49
0
Merci
qu'est ce que je dois faire ensuite?
Psycotix 16 Messages postés mardi 28 octobre 2008Date d'inscription 4 novembre 2008 Dernière intervention - 28 oct. 2008 à 21:37
0
Merci
bon j'ai contacter un de tes collègue chiquetine, il m'a conseillé de faire avancer le poste avec un rapport hijack
donc en voila un:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:19, on 28/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\APPS\SMP\SmpSys.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Packard Bell\SrvCDEject.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Documents and Settings\PATTY\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AnumanLive] C:\Documents and Settings\PATTY\Application Data\Anuman Interactive\AnumanLive\AnumanLive.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: FreeBot.lnk = C:\Program Files\FreeBot\freebot.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: FreeBot.lnk = C:\Program Files\FreeBot\freebot.exe (User 'Default user')
O4 - Startup: FreeBot.lnk = C:\Program Files\FreeBot\freebot.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://zylom.king.com/ctl/kingcomie.cab
O16 - DPF: {48DF87EE-F2DE-11D8-BE7F-302050C10811} (FlyLoader Class) - http://www.flysuite.com/flyword/loaderword_win_fr.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Abyss Web Server (AbyssWebServer) - Unknown owner - F:\abyssws.exe (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SrvCDEject - Unknown owner - C:\Program Files\Packard Bell\SrvCDEject.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
O24 - Desktop Component 0: (no name) - http://image.jeuxvideo.com/pics/logo1.gif
Psycotix 16 Messages postés mardi 28 octobre 2008Date d'inscription 4 novembre 2008 Dernière intervention - 28 oct. 2008 à 22:21
0
Merci
moi je m'en vais donc c'est ma soeur qui prend le relai alors essay de détailer un peut plus les explications voila a+ et merci
Utilisateur anonyme - 29 oct. 2008 à 00:53
0
Merci
Il faut patienter. Le rapport que tu lui a envoyé------->>>COMBOFIX nécessite une grande prudence et il est long à analyser. Il faut prendre ton mal en patience! Chiquitine ne laissera pas tomber. Tu peux compter sur elle. Tu auras une réponse sous peu!!! N'envoie pas de MP à tout le monde pour prendre la suite....cela ne sert à rien!

De plus, les helpeurs, tout comme toi je suppose ont une vie privée.

Ca va arriver, pas de panique! A++ :))

Bonne chance et bonne continuation.
Utilisateur anonyme - 3 nov. 2008 à 14:00
0
Merci
re désolé


Telecharge UsbFix sur ton bureau

--> Lance l installation avec les parametres par default

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

--> Le pc va redémarer

-->Apres redémarrage post le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
0
Merci
-------------- UsbFix V2.395 ---------------

* User : PATTY - 121888950314
* Outils mis a jours le 01/11/2008 par Chiquitine29 et Chimay8
* Recherche effectuée à 14:12:11 le 03/11/2008
* Windows Xp - Internet Explorer 7.0.5730.11


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\DOCUME~1\PATTY\LOCALS~1\Temp\1.tmp\b2e.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\eHome\ehRec.exe
C:\Program Files\Packard Bell\SrvCDEject.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe


--------------- [ Registre / Startup ] ----------------


! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\avp6_post_uninstall

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
SmpcSys REG_SZ C:\APPS\SMP\SmpSys.exe
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b7aeaa1-6abb-11dd-8174-00038a000015}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a5e536d2-4688-11dc-bfed-00038a000015}\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------


--------------- [ Listing des fichiers présents ] ----------------

-> /!\ Le resultat doit etre interprété par un spécialiste /!\

[10/08/2004 14:00][--ah-----] C:\NTDETECT.COM
[09/05/2007 21:16][--ah-----] C:\Google Updater.exe
[09/05/2007 21:16][--ah-----] C:\UNWISE.EXE
[12/02/2007 13:51][--ahs----] C:\BOOT.INI

--------------- ! Fin du rapport ! ----------------
Utilisateur anonyme - 3 nov. 2008 à 14:31
0
Merci
Telecharge malwarebytes

Tu l´instale; le programme va se mettre automatiquement a jour.

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

Puis click sur "rechercher".

Laisse le scanner le pc...

Si des elements on ete trouvés > click sur supprimer la selection.

si il t´es demandé de redemarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log
0
Merci
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1358
Windows 5.1.2600 Service Pack 3

03/11/2008 16:44:22
mbam-log-2008-11-03 (16-44-13).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 245736
Temps écoulé: 1 hour(s), 12 minute(s), 29 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{32341e7e-c319-46de-91d0-e30bb1a3caba} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{32341e7e-c319-46de-91d0-e30bb1a3caba} (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\sexvid (Trojan.DNSChanger) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c008eed6 (Trojan.Vundo) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\ (Trojan.Vundo) -> No action taken.
C:\Program Files\EoRezo (Rogue.Eorezo) -> No action taken.
Utilisateur anonyme - 3 nov. 2008 à 16:46
0
Merci
No action taken

tu as supprimé la selection ?
enlever la publicité - page 1
enlever la publicité - page 3