re moi
merci encore beaucoup combofix ok c'est fait deja je n'ai plus fenetre internet qui s'ouvre toutes les 5minutes
voici le rapport combo
ComboFix 08-05-12.1 - cedric et edwige 2008-05-15 16:45:28.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.314 [GMT 2:00]
Endroit: C:\Users\cedric et edwige\Desktop\ComboFix.exe
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Program Files\internetgamebox
C:\Program Files\internetgamebox\InternetGameBox.exe
C:\Program Files\internetgamebox\language
C:\Program Files\internetgamebox\ressources\AttenteOff.html
C:\Program Files\internetgamebox\ressources\AttenteOn.html
C:\Program Files\internetgamebox\ressources\configv2_en.xml
C:\Program Files\internetgamebox\ressources\configv2_es.xml
C:\Program Files\internetgamebox\ressources\configv2_fr.xml
C:\Program Files\internetgamebox\ressources\favoris\defaultv2.swf
C:\Program Files\internetgamebox\skins\skinv2.skn
C:\Program Files\internetgamebox\uninst.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Conditions générales.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Confidentialité.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Désinstaller.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\InternetGameBox.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Website.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Spyware-Secure trial.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Website.lnk
C:\Users\cedric et edwige\AppData\Local\obsakgt.dat
C:\Users\cedric et edwige\AppData\Local\obsakgt_nav.dat
C:\Users\cedric et edwige\AppData\Local\obsakgt_navps.dat
C:\Users\cedric et edwige\AppData\Local\obsakgt_navup.dat
C:\Users\Public\Desktop\internetgamebox.lnk
C:\Windows\system32\nvs2.inf
C:\Windows\system32\x64
.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-15 to 2008-05-15 ))))))))))))))))))))))))))))))))))))
.
Pas de nouveau fichier créé dans cet espace de temps
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-15 14:45 1,048,576 --sha-w C:\Users\Invité\NTUSER.DAT
2008-05-15 14:45 1,048,576 --sha-w C:\Users\Invité\NTUSER.DAT
2008-05-15 06:55 --------- d-----w C:\ProgramData\Microsoft Help
2008-05-15 06:55 --------- d-----w C:\Program Files\Windows Mail
2008-05-14 18:24 --------- d-----w C:\ProgramData\Lavasoft
2008-05-14 18:22 --------- d-----w C:\Program Files\Lavasoft
2008-05-14 18:19 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-05-14 16:06 --------- d-----w C:\ProgramData\Google Updater
2008-05-13 17:28 --------- d-----w C:\Program Files\Alwil Software
2008-05-11 12:17 --------- d-----w C:\Program Files\iccontroller4
2008-05-10 10:18 --------- d-----w C:\Program Files\Wyzo
2008-05-10 09:17 --------- d---a-w C:\ProgramData\TEMP
2008-05-10 09:11 --------- d-----w C:\Program Files\bfgclient
2008-05-10 09:01 --------- d-----w C:\ProgramData\Trymedia
2008-05-10 08:07 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\Oberon Games
2008-05-10 08:07 --------- d-----w C:\ProgramData\Oberon Games
2008-05-08 14:43 --------- d-----w C:\Program Files\Disney Interactive
2008-05-08 12:00 --------- d-----w C:\Program Files\iTunes
2008-05-08 12:00 --------- d-----w C:\Program Files\iPod
2008-05-08 11:59 --------- d-----w C:\Program Files\QuickTime
2008-05-08 11:47 --------- d-----w C:\Program Files\Safari
2008-05-08 11:39 --------- d-----w C:\ProgramData\Playrix Entertainment
2008-05-08 11:38 --------- d-----w C:\Program Files\Apple Software Update
2008-05-08 07:35 --------- d-----w C:\ProgramData\GamesBar
2008-05-08 07:35 --------- d-----w C:\Program Files\GamesBar
2008-05-07 20:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-07 20:21 --------- d-----w C:\Program Files\eSobi
2008-05-07 10:14 --------- d-----w C:\Program Files\Spcron
2008-05-05 20:28 --------- d-----w C:\ProgramData\Sandlot Games
2008-05-05 19:21 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\Big Fish Games
2008-05-05 18:22 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\PlayFirst
2008-05-05 18:22 --------- d-----w C:\ProgramData\PlayFirst
2008-05-05 09:17 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\cerasus.media
2008-04-29 17:16 --------- d-----w C:\ProgramData\HipSoft
2008-04-29 14:30 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\SprillBermudeFr
2008-04-29 07:57 --------- d-----w C:\ProgramData\JollyBear
2008-04-28 17:35 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\FloodLightGames
2008-04-28 17:35 --------- d-----w C:\ProgramData\FloodLightGames
2008-04-27 16:57 --------- d-----w C:\Program Files\torrent_search
2008-04-27 16:57 --------- d-----w C:\Program Files\Conduit
2008-04-27 16:56 2,560 ----a-w C:\Windows\_MSRSTRT.EXE
2008-04-23 16:41 --------- d-----w C:\Program Files\RiseofAtlantis_at
2008-04-23 08:59 --------- d-----w C:\ProgramData\TERMINAL Studio
2008-04-21 11:17 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\SurfAccuracy
2008-04-20 13:03 --------- d-----w C:\Program Files\Turbo Pizza
2008-04-20 12:02 --------- d-----w C:\ProgramData\Fugazo
2008-04-20 12:00 --------- d-----w C:\Program Files\Gamenext
2008-04-20 09:01 --------- d-----w C:\ProgramData\BigFishGamesCache
2008-04-20 08:35 --------- d-----w C:\Program Files\MSN Games
2008-04-20 08:01 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\Flood Light Games
2008-04-20 08:01 --------- d-----w C:\ProgramData\Flood Light Games
2008-04-10 19:24 --------- d-----w C:\Program Files\Common Files\Adobe
2008-04-03 20:03 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\LG Electronics
2008-04-03 20:00 --------- d-----w C:\Program Files\LG Electronics
2008-04-03 19:58 --------- d-----w C:\Program Files\LG PC Suite 2
2008-04-03 19:56 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\InstallShield
2008-03-24 22:51 --------- d-----w C:\ProgramData\Symantec
2008-03-21 17:19 --------- d-----w C:\ProgramData\Avira
2008-03-21 17:19 --------- d-----w C:\Program Files\Avira
2008-03-21 17:16 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-03-21 17:14 --------- d-----w C:\Program Files\Symantec
2008-03-20 21:35 --------- d-----w C:\Users\cedric et edwige\AppData\Roaming\Apple Computer
2008-03-16 09:06 --------- d-----w C:\Program Files\Java
2008-02-29 06:51 19,000 ----a-w C:\Windows\System32\kd1394.dll
2008-02-29 06:39 40,960 ----a-w C:\Windows\System32\srclient.dll
2008-02-29 06:39 371,712 ----a-w C:\Windows\System32\srcore.dll
2008-02-29 06:38 313,856 ----a-w C:\Windows\System32\rstrui.exe
2008-02-29 06:38 16,384 ----a-w C:\Windows\System32\srdelayed.exe
2008-02-29 06:35 6,656 ----a-w C:\Windows\System32\kbd106n.dll
2008-02-29 06:34 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
2008-02-29 04:16 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-02-21 04:43 826,368 ----a-w C:\Windows\System32\wininet.dll
2008-02-21 04:43 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-21 04:43 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-21 04:43 296,448 ----a-w C:\Windows\System32\gdi32.dll
2008-02-21 04:43 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-19 05:10 620,088 ----a-w C:\Windows\System32\ci.dll
2007-11-25 18:39 15,489,152 ----a-w C:\Program Files\PES2008Patch1_10.zip
2007-11-08 14:23 174 --sha-w C:\Program Files\desktop.ini
.
------- Sigcheck -------
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-10 10:49 1232896]
"MsnMsgr"="C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" [2007-10-18 12:34 5724184]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
"Acer Tour Reminder"="" []
"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2008-01-01 18:49 4739072]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-11-08 15:09 68856]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-11-08 14:35 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-02-15 11:07 4390912 C:\Windows\RtHDVCpl.exe]
"Acer Empowering Technology Monitor"="C:\Acer\Empowering Technology\SysMonitor.exe" [2007-01-24 10:27 319488]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-02-07 00:04 464168]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2006-11-15 16:58 151552]
"Acer Tour"="" []
"NMSSupport"="C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" [2006-09-26 10:56 423424]
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 21:48 57344]
"eRecoveryService"="" []
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-02-15 18:39 151552]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-11-09 22:16 185632]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 18:38 583048]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-15 18:36 262401]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
C:\Users\cedric et edwige\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d'‚cran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 20:24:54 98632]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-04-20 11:45:36 528384]
Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-11-08 15:09:24 126136]
PCM Media Sharing.lnk - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [2007-04-20 11:49:51 200812]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{9975DA4C-9B0A-4562-8104-BBEDE0C476CD}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{E6877A5F-7CB2-474B-8810-7EFD00BFB81F}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{BB82DE3E-0D30-4A0E-A4DE-24FEE90A20B8}"= C:\Program Files\Acer Arcade Live\Acer Arcade Live Main Page\Acer Arcade Live.exe:Acer Arcade Live
"{30C66B97-5348-432C-8C8D-FDC5D53398A8}"= C:\Program Files\Acer Arcade Live\Acer DV Magician\Component\ARAWP.exe:DV Magician ARA workprocess
"{1E17540B-C6F2-4603-B6BB-FCF18E577BD7}"= C:\Program Files\Acer Arcade Live\Acer DV Magician\Component\DVAX2Process.exe:DV Magician AVAX workprocess
"{FABD7FB2-EB66-446D-B88F-9BBF64D3EC89}"= C:\Program Files\Acer Arcade Live\Acer DVDivine\DVDivine.exe:DVDivine
"{94D99930-8327-4375-9044-66379D3E2AB6}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia\HomeMedia.exe:HomeMedia
"{6195F082-0459-41EC-98AD-25E7EDDB9082}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\HomeMedia Connect.exe:HomeMedia Connect
"{EAE4E69B-2B6D-4112-AE38-9A20F6A4089C}"= C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.EXE:HomeMedia Connect Service
"{DC6AA3C5-B182-4B2C-A647-820993D94A25}"= C:\Program Files\Acer Arcade Live\SlideShow DVD\Component\CLSLDVD.exe:SlideShow DVD workprocess
"{F9EEAD95-DBAD-4A39-AE68-07DD01DE7DD5}"= C:\Program Files\Acer Arcade Live\Acer VideoMagician\VideoMagician.exe:VideoMagician
"{1F068C1D-BE83-4CCA-A656-7CF56A159E0D}"= UDP:Profile=Private|Profile=Public:LocalSubnet:LocalSubnet|C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe:SPCM
"{EC716CF1-1243-429B-AD6C-01C57C8F8A81}"= TCP:Profile=Private|Profile=Public:LocalSubnet:LocalSubnet|C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe:SPCM
"{A62BAA96-BC4C-4F65-8B2E-0815E4943080}"= UDP:Profile=Private|Profile=Public:LocalSubnet:LocalSubnet|C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe:Intel® Remoting Service
"{B8346E1C-61E0-45F5-B7B4-6F679091E0A3}"= TCP:Profile=Private|Profile=Public:LocalSubnet:LocalSubnet|C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe:Intel® Remoting Service
"{7CE30603-E7C1-4810-AA3B-E913F09843A9}"= UDP:Profile=Private|Profile=Public:LocalSubnet:LocalSubnet|C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe:Intel® Viiv Media Server
"{D59985C7-E87F-4CB3-941D-F078CFE0783F}"= TCP:Profile=Private|Profile=Public:LocalSubnet:LocalSubnet|C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe:Intel® Viiv Media Server
"{8A590A5E-18ED-48C7-9ED3-8F4FB1B4A7F8}"= TCP:Profile=Private|Profile=Public|9442:127.0.0.1:Intel® Viiv Media Server Discovery
"{59FCE995-680A-48E3-9558-CEEE5D9BCD9C}"= TCP:Profile=Private|Profile=Public|1900:LocalSubnet:LocalSubnet:Intel® Viiv Media Server UPnP Discovery
"{85181136-5C42-4A06-ADAB-26BAE8D5B237}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{ADFE1DFA-2D6E-46F4-A99D-FE6638876568}"= UDP:C:\Program Files\MSN Messenger\msnmsgr.exe:MSN Messenger 7.0
"{0D8459B9-B486-4CB3-8464-8882786F765A}"= TCP:C:\Program Files\MSN Messenger\msnmsgr.exe:MSN Messenger 7.0
"{9232ADC3-1A9B-429B-8BC0-563A9016EA3F}"= UDP:C:\Program Files\MSN Messenger\msnmsgr.exe:MSN Messenger 7.0
"{2F6A8544-5D1D-46A1-A5EF-7EDFD8E332D0}"= TCP:C:\Program Files\MSN Messenger\msnmsgr.exe:MSN Messenger 7.0
"{64446F59-50D5-4BE2-B576-00FC6470249E}"= UDP:C:\Program Files\KONAMI\Pro Evolution Soccer 2008\PES2008.exe:Pro Evolution Soccer 2008
"{0DD3904F-15A1-4551-A3F4-91EEEF1C253E}"= TCP:C:\Program Files\KONAMI\Pro Evolution Soccer 2008\PES2008.exe:Pro Evolution Soccer 2008
"{8539C442-B51B-4A6D-84E9-9367EA00479F}"= C:\Program Files\Windows Live\Messenger\wlcsdk.exe:Windows Live Messenger (Phone)
"{6E6C2BB5-0428-4819-8A13-17935A4BED28}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{40F6F3DC-0E0F-4AAB-832B-24F1F29BD7DF}C:\\program files\\shareaza\\shareaza.exe"= UDP:C:\program files\shareaza\shareaza.exe:Shareaza Ultimate File Sharing
"UDP Query User{96EC3ED1-1562-4532-B8F5-993A16C4A0D6}C:\\program files\\shareaza\\shareaza.exe"= TCP:C:\program files\shareaza\shareaza.exe:Shareaza Ultimate File Sharing
"TCP Query User{F506255E-6D74-42BB-A8BC-9928405A39E3}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{1D6258B0-20F2-4018-940F-034C6F59C7F9}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"{FD87FA62-8C54-4EE5-AFFA-CC2A9EF36366}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{67CD0C3F-3D1B-4C6B-821B-3FEBED6B264D}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{1666C228-4202-49C5-9D3E-3290F40E27C2}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{4489C2B1-E3A1-47E7-AF2A-F81D471A964F}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\BitTorrent\\bittorrent.exe"= C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
"C:\\Program Files\\WINSOS\\winsos.exe"= C:\Program Files\WINSOS\winsos.exe:*:Enabled:Winsos
"C:\\Program Files\\WINSOS\\anti-spy.exe"= C:\Program Files\WINSOS\anti-spy.exe:*:Enabled:anti-spy Winsos
"C:\\Program Files\\WINSOS\\help.exe"= C:\Program Files\WINSOS\help.exe:*:Enabled:Winsos Help
R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-02-07 00:04]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-02-07 00:04]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2007-02-07 00:04]
R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;"C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe" [2007-04-04 18:54]
R2 DQLWinService;DQLWinService;"C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe" [2006-10-29 09:03]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-02-07 00:04]
R2 nmsgopro;GoProto Protocol Driver for NMS;C:\Windows\system32\DRIVERS\nmsgopro.sys [2006-09-27 16:37]
R2 nmsunidr;UniDriver for NMS;C:\Windows\system32\DRIVERS\nmsunidr.sys [2006-10-19 15:49]
R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-05-17 16:01]
R3 IntelDH;IntelDH Driver;C:\Windows\system32\Drivers\IntelDH.sys [2007-07-01 15:59]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;C:\Windows\system32\drivers\libusb0.sys [2005-03-09 21:50]
S3 IntelDHSvcConf;IntelDHSvcConf;"C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe" [2006-11-18 06:59]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
*Newly Created Service* - CATCHME
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-05-14 19:46:53 C:\Windows\Tasks\User_Feed_Synchronization-{876FFA40-BC84-4408-9317-1F7E08925EC6}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-15 16:53:31
Windows 6.0.6000 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
C:\Users\cedric et edwige\AppData\Roaming\GTek\GTUpdate\AUpdate\NMSSupport\DB\{BA4889F8-EE3F-485A-A8DB-9D9EC9E6EFEA}.xml 863 bytes
Scan terminé avec succès
Les fichiers cachés: 1
**************************************************************************
.
Temps d'accomplissement: 2008-05-15 16:55:33
ComboFix-quarantined-files.txt 2008-05-15 14:55:12
Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
254 --- E O F --- 2008-05-15 06:56:03
j'espere que comme ca c'est bon
encore merci