gerger

merci beaucoup pour tus ces renseignements. je ne sais pas comment j'aurais fait sans ton aide. je vais faire ce que tu as dit. je te tiendrais au courant. merci encore thanos.

Slt tous, Voila, il y a quelques jours, a la suite du téléchargement du SP3 de xp, j'ai eu un message d'avertissement sur mon fond d'écran de bureau comme quoi j'étais infecté par 2 virus : virturmonde et win32... (je nai pas bien retenu les noms) Apres de nombreuses recherches, j'ai vu un site qui disait que l'on pouvait s'en débarasser avec Combofix, ce que je fis sans pb. Mais il était fortement conseillé de faire analyser par des persones comptétentes le log rapport a la fin de la correction pour voir s'il ne reste pas d'infections que le logiciel n'aurait pas vu. Pourriez vous m'aider car mes connaissances informatiques sont assez limitée ? Merci, merci beaucoup d'avance. ComboFix 08-09-28.01 - utilisateur 2008-09-29 20:39:26.1 - FAT32x86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.554 [GMT 2:00] Lancé depuis: C:\Documents and Settings\utilisateur\Bureau\ComboFix.exe Commutateurs utilisés :: C:\Documents and Settings\utilisateur\Bureau\WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\tmp2.tmp C:\Documents and Settings\utilisateur\Application Data\rhcr1cj0er1q C:\Documents and Settings\utilisateur\Local Settings\Application Data\wckeo.dat C:\Documents and Settings\utilisateur\Local Settings\Application Data\wckeo.exe C:\Documents and Settings\utilisateur\Local Settings\Application Data\wckeo_nav.dat C:\Documents and Settings\utilisateur\Local Settings\Application Data\wckeo_navps.dat C:\Program Files\internetgamebox C:\Program Files\internetgamebox\InternetGameBox.exe C:\Program Files\internetgamebox\language C:\Program Files\internetgamebox\ressources\AttenteOff.html C:\Program Files\internetgamebox\ressources\AttenteOn.html C:\Program Files\internetgamebox\ressources\configv2_en.xml C:\Program Files\internetgamebox\ressources\configv2_es.xml C:\Program Files\internetgamebox\ressources\configv2_fr.xml C:\Program Files\internetgamebox\ressources\favoris\defaultv2.swf C:\Program Files\internetgamebox\skins\skinv2.skn C:\Program Files\internetgamebox\uninst.exe C:\Program Files\rhcr1cj0er1q C:\WINDOWS\system32\blphcv1cj0er1q.scr C:\WINDOWS\system32\drivers\npf.sys C:\WINDOWS\system32\packet.dll C:\WINDOWS\system32\pthreadVC.dll C:\WINDOWS\system32\sysrest32.exe C:\WINDOWS\system32\TDSSinit.dll C:\WINDOWS\system32\TDSSjjsm.dll C:\WINDOWS\system32\tdssl.dll C:\WINDOWS\system32\tdssservers.dat C:\WINDOWS\system32\WanPacket.dll C:\WINDOWS\system32\wpcap.dll D:\Autorun.inf . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_TDSSSERV -------\Service_NPF -------\Service_sysrest.sys -------\Service_TDSSserv ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-28 au 2008-09-29 )))))))))))))))))))))))))))))))))))) . 2008-09-29 20:27 . 2008-09-29 20:27 <REP> d--hs---- C:\FOUND.007 2008-09-29 06:41 . 2008-09-29 06:41 <REP> d--hs---- C:\FOUND.006 2008-09-28 16:30 . 2008-09-28 16:30 <REP> d-------- C:\Program Files\Freecorder 2008-09-28 16:30 . 2008-09-28 16:30 737,280 --a------ C:\WINDOWS\iun6002.exe 2008-09-27 23:01 . 2008-09-27 23:01 <REP> d--hs---- C:\FOUND.005 2008-09-27 22:44 . 2008-09-27 22:44 <REP> d--hs---- C:\FOUND.004 2008-09-26 07:29 . 2008-09-26 07:29 <REP> d--hs---- C:\FOUND.003 2008-09-25 08:49 . 2008-09-25 08:49 <REP> d--hs---- C:\FOUND.002 2008-09-19 19:19 . 2008-09-19 19:19 <REP> d-------- C:\Program Files\Wesnoth 1.4.5 2008-09-18 22:17 . 2008-09-18 22:17 <REP> d-------- C:\WINDOWS\Sun 2008-09-16 06:38 . 2008-09-16 06:38 <REP> d-------- C:\Documents and Settings\utilisateur\Application Data\FaxCtr 2008-09-15 13:14 . 2008-09-15 13:14 <REP> d-------- C:\Program Files\Lexmark Fax Solutions 2008-09-15 13:14 . 2008-09-15 13:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\FaxCtr 2008-09-15 13:14 . 2003-03-11 18:26 339,968 -ra------ C:\WINDOWS\system32\IMGMAN32.DLL 2008-09-15 13:14 . 2003-03-11 18:26 98,345 -ra------ C:\WINDOWS\system32\IMHOST32.DLL 2008-09-15 13:14 . 2003-03-11 18:26 98,304 -ra------ C:\WINDOWS\system32\IM31XPNG.DEL 2008-09-15 13:14 . 2003-03-11 18:26 69,632 -ra------ C:\WINDOWS\system32\IM31XTIF.DEL 2008-09-15 13:14 . 2003-03-11 18:26 49,152 -ra------ C:\WINDOWS\system32\IM31IMG.DIL 2008-09-15 13:14 . 2004-02-04 15:27 32,768 --a------ C:\WINDOWS\system32\LXPRMON.DLL 2008-09-15 13:14 . 2004-02-04 15:25 20,480 --a------ C:\WINDOWS\system32\LXPMONUI.DLL 2008-09-15 13:14 . 2004-02-04 15:34 12,288 --a------ C:\WINDOWS\system32\LXPMONRC.DLL 2008-09-15 13:13 . 2008-09-15 13:13 <REP> d-------- C:\Program Files\ABBYY FineReader 5.0 Sprint 2008-09-15 13:12 . 2008-09-29 18:54 359 --a------ C:\WINDOWS\lexstat.ini 2008-09-15 13:10 . 2008-09-15 13:10 <REP> d-------- C:\Program Files\Lexmark 2200 Series 2008-09-15 13:10 . 2004-02-13 15:10 483,328 --a------ C:\WINDOWS\system32\LXBVJSWR.DLL 2008-09-15 13:08 . 2004-08-05 05:00 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys 2008-09-15 13:08 . 2004-08-05 05:00 31,616 --a------ C:\WINDOWS\system32\dllcache\usbccgp.sys 2008-09-13 23:59 . 1997-04-18 11:49 298,496 --a------ C:\WINDOWS\unin040c.exe 2008-09-13 23:58 . 2008-09-13 23:58 <REP> d-------- C:\Documents and Settings\utilisateur\WINDOWS 2008-09-10 07:07 . 2008-09-10 07:07 <REP> d-------- C:\Documents and Settings\utilisateur\Application Data\skypePM 2008-09-10 07:07 . 2008-09-10 07:07 56 --ah----- C:\WINDOWS\system32\ezsidmv.dat 2008-09-10 07:04 . 2008-09-10 07:04 <REP> d-------- C:\Program Files\Skype 2008-09-10 07:04 . 2008-09-10 07:04 <REP> d-------- C:\Program Files\Fichiers communs\Skype 2008-09-10 07:04 . 2008-09-10 07:04 <REP> d-------- C:\Documents and Settings\utilisateur\Application Data\Skype 2008-09-10 07:03 . 2008-09-10 07:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype 2008-09-04 13:00 . 2008-09-04 13:00 <REP> d-------- C:\Program Files\Apple Software Update 2008-09-04 12:59 . 2008-09-04 12:59 <REP> d-------- C:\Program Files\Safari . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-22 04:57 90,112 ----a-w C:\WINDOWS\DUMP6457.tmp 2008-08-26 09:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\QuickTime 2008-08-24 09:24 --------- d-----w C:\Documents and Settings\utilisateur\Application Data\LimeWire 2008-08-24 09:14 --------- d-----w C:\Program Files\LimeWire 2008-08-23 23:31 --------- d-----w C:\Program Files\Lavasoft 2008-08-23 23:31 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-08-23 23:31 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-08-22 14:18 --------- d-----w C:\Program Files\iTunes 2008-08-22 14:18 --------- d-----w C:\Program Files\iPod 2008-08-22 14:18 --------- d-----w C:\Program Files\Bonjour 2008-08-22 14:18 --------- d-----w C:\Documents and Settings\utilisateur\Application Data\Apple Computer 2008-08-22 14:17 --------- d-----w C:\Program Files\QuickTime 2008-08-22 14:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer 2008-08-22 14:16 --------- d-----w C:\Program Files\Fichiers communs\Apple 2008-08-22 14:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple 2008-08-04 23:00 --------- d-----w C:\Program Files\Dictionnaire 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll 2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-07-07 20:28 253,952 ------w C:\WINDOWS\system32\dllcache\es.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2}"= "C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL" [2008-06-18 66912] [HKEY_CLASSES_ROOT\clsid\{0579b4b6-0293-4d73-b02d-5ebb0ba0f0a2}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2}] 2008-06-18 09:17 66912 --a------ C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-08-28 3660848] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-08-12 21741864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-12-21 53248] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-07-20 729177] "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952] "MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392] "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168] "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168] "PCMService"="C:\Program Files\Acer\Acer Arcade\PCMService.exe" [2005-12-13 151552] "igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-11-28 98304] "igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-11-28 77824] "igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-11-28 118784] "eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2005-10-19 69632] "ePower_DMC"="C:\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2005-12-13 344064] "Acer ePower Management"="C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe" [2005-11-18 3079680] "LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2006-01-09 589824] "eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 397312] "ADMTray.exe"="C:\Acer\Empowering Technology\admtray.exe" [2005-10-24 2462208] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-03-17 185896] "SpeedBitVideoAccelerator"="C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2008-06-18 2705008] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2006-01-30 35328] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "AppleSyncNotifier"="C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-22 116040] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-30 289064] "Lexmark 2200 Series"="C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe" [2004-02-13 57344] "FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2004-02-04 294912] "RTHDCPL"="RTHDCPL.EXE" [2005-12-19 C:\WINDOWS\RTHDCPL.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] C:\Documents and Settings\utilisateur\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 393216] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.mkdmp3enc"= C:\PROGRA~1\Acer\ACERAR~1\Kernel\Burner\MKDMP3Enc.ACM "VIDC.X264"= x264vfw.dll "VIDC.3iv2"= 3ivxVfWCodec.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Acer\\Acer Arcade\\PCMService.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"= "C:\\Program Files\\adslTV\\adsltv.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\DAP\\DAP.EXE"= "C:\\Program Files\\Bonjour\\mDNSResponder.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= "C:\\Program Files\\LimeWire\\LimeWire.exe"= "C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe"= "C:\\Program Files\\MSN Messenger\\livecall.exe"= "C:\\Program Files\\adslTV\\vlc.exe"= "C:\\Program Files\\SpeedBit Video Accelerator\\VideoAccelerator.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416] R1 OsaFsLoc;OsaFsLoc;C:\WINDOWS\system32\drivers\OsaFsLoc.sys [2005-10-15 12106] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560] R2 EpmPsd;Acer EPM Power Scheme Driver;C:\WINDOWS\system32\drivers\epm-psd.sys [2005-04-22 4096] R2 EpmShd;Acer EPM System Hardware Driver;C:\WINDOWS\system32\drivers\epm-shd.sys [2005-04-22 78208] R2 int15.sys;int15.sys;C:\Acer\Empowering Technology\eRecovery\int15.sys [2005-01-13 69632] R2 osaio;osaio;C:\WINDOWS\system32\drivers\osaio.sys [2005-06-30 7296] R2 osanbm;osanbm;C:\WINDOWS\system32\drivers\osanbm.sys [2005-01-14 4010] R2 sbbotdi;sbbotdi;C:\PROGRA~1\SPEEDB~1\sbbotdi.sys [2008-06-18 35584] R2 VideoAcceleratorService;VideoAcceleratorService;C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe [2008-06-18 292472] R3 NdisFilt;OSA NdisFilter Protocol;C:\WINDOWS\system32\Drivers\NdisFilt.sys [2005-09-13 4392] R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c2d6ca94-695a-11dd-8c0b-0016d4537ad8}] \Shell\AutoRun\command - explorer.exe . Contenu du dossier 'Tâches planifiées' . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-wckeo - c:\documents and settings\utilisateur\local settings\application data\wckeo.exe . ------- Examen supplémentaire ------- . FireFox -: Profile - C:\Documents and Settings\utilisateur\Application Data\Mozilla\Firefox\Profiles\z1kgzs81.default\ FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF -: plugin - c:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll FF -: plugin - C:\Program Files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll FF -: plugin - C:\Program Files\Yahoo!\Common\npyaxmpb.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-29 20:43:33 Windows 5.1.2600 Service Pack 3 FAT NTAPI Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . C:\PROGRAM FILES\INTEL\WIRELESS\BIN\EVTENG.EXE C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE C:\PROGRAM FILES\LAVASOFT\AD-AWARE\AAWSERVICE.EXE C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE C:\WINDOWS\SYSTEM32\LEXBCES.EXE C:\WINDOWS\SYSTEM32\LEXPPS.EXE C:\PROGRAM FILES\FICHIERS COMMUNS\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE C:\ACER\EMPOWERING TECHNOLOGY\ADMSERV.EXE C:\PROGRAM FILES\BONJOUR\MDNSRESPONDER.EXE C:\PROGRAM FILES\ACER\ACER ARCADE\KERNEL\TV\CLCAPSVC.EXE C:\PROGRAM FILES\ACER\ACER ARCADE\KERNEL\CLML_NTSERVICE\CLMLSERVER.EXE C:\PROGRAM FILES\ACER\ACER ARCADE\KERNEL\CLML_NTSERVICE\CLMLSERVICE.EXE C:\PROGRAM FILES\INTEL\WIRELESS\BIN\REGSRVC.EXE C:\PROGRAM FILES\CYBERLINK\SHARED FILES\RICHVIDEO.EXE C:\PROGRAM FILES\SPEEDBIT VIDEO ACCELERATOR\VIDEOACCELERATORSERVICE.EXE C:\PROGRAM FILES\SPEEDBIT VIDEO ACCELERATOR\VIDEOACCELERATORENGINE.EXE C:\PROGRAM FILES\ACER\ACER ARCADE\KERNEL\TV\CLSCHED.EXE C:\PROGRAM FILES\LAUNCH MANAGER\LMANAGER.EXE C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE C:\WINDOWS\system32\igfxext.exe C:\WINDOWS\SYSTEM32\IGFXSRVC.EXE C:\Program Files\OpenOffice.org 2.4\program\soffice.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN C:\WINDOWS\system32\wbem\unsecapp.exe C:\Program Files\iPod\bin\iPodService.exe C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\RtkBtMnt.exe C:\WINDOWS\system32\wscntfy.exe C:\ComboFix\pv.cfexe . ************************************************************************** . Heure de fin: 2008-09-29 20:45:38 - La machine a redémarré ComboFix-quarantined-files.txt 2008-09-29 18:45:34 Avant-CF: 11ÿ548ÿ098ÿ560 octets libres Après-CF: 13,246,922,752 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect 278 --- E O F --- 2008-09-11 05:33:01