Bonjour,
je ne sais pas si c'est ici qu'il faut coller le rapport de COMBOFIX.
Si quelqu'un peut m'aider pour l'analyser. MERCI...
ComboFix 09-04-01.01 - Nouche 2009-04-02 17:19:21.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.767.387 [GMT 2:00]
Lancé depuis: c:\documents and settings\Nouche\Bureau\ComboFix.exe
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated)
* Un nouveau point de restauration a été créé
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
c:\documents and settings\Nouche\Application Data\FunWebProducts
c:\program files\FunWebProducts
c:\program files\FunWebProducts\ScreenSaver\Images\-0-ADF0975.urr
c:\program files\FunWebProducts\ScreenSaver\Images\24D42529.urr
c:\program files\mailskinner
c:\program files\mailskinner\anim_0.gif
c:\program files\mailskinner\anim_help.gif
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\History\search2
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\MyWebSearch\bar\Settings\setting2.htm
c:\program files\MyWebSearch\bar\Settings\settings.dat
c:\program files\QUAD Utilities
c:\windows\IE4 Error Log.txt
c:\windows\msskinner
c:\windows\msskinner\msbackup.dat
c:\windows\pack.epk
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
-------\Service_Passthru
((((((((((((((((((((((((((((( Fichiers créés du 2009-03-02 au 2009-04-02 ))))))))))))))))))))))))))))))))))))
2009-04-02 17:10 . 2006-03-03 00:42 73,728 --a------ C:\pv.exe
2009-03-28 20:32 . 2009-03-28 20:49 101,287 --a------ c:\windows\system32\drivers\klin.dat
2009-03-28 20:32 . 2009-03-28 20:49 89,601 --a------ c:\windows\system32\drivers\klick.dat
2009-03-28 20:30 . 2009-03-28 20:30 <REP> d-------- c:\program files\Kaspersky Lab
2009-03-28 20:30 . 2009-04-02 17:31 <REP> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2009-03-28 20:30 . 2009-04-02 17:27 7,816,736 --ahs---- c:\windows\system32\drivers\fidbox.dat
2009-03-28 20:30 . 2009-04-02 17:27 581,664 --ahs---- c:\windows\system32\drivers\fidbox2.dat
2009-03-28 20:30 . 2009-04-02 17:27 62,148 --ahs---- c:\windows\system32\drivers\fidbox.idx
2009-03-28 20:30 . 2009-04-02 17:27 3,068 --ahs---- c:\windows\system32\drivers\fidbox2.idx
2009-03-28 20:19 . 2009-03-28 20:19 <REP> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Kaspersky Lab Setup Files
2009-03-28 19:39 . 2009-03-28 20:00 <REP> d-a------ c:\documents and settings\All Users.WINDOWS\Application Data\TEMP
2009-03-27 23:56 . 2009-03-27 23:56 <REP> d-------- c:\program files\Trend Micro
2009-03-21 23:37 . 2009-03-29 08:51 <REP> d-------- c:\documents and settings\Sabba.CF-SABBA\Tracing
2009-03-18 00:26 . 2009-04-02 17:32 <REP> d-------- c:\documents and settings\Nouche\Tracing
2009-03-18 00:23 . 2009-03-20 23:32 <REP> d-------- c:\program files\Microsoft Silverlight
2009-03-18 00:21 . 2009-02-06 19:08 55,152 --a------ c:\windows\system32\drivers\fssfltr_tdi.sys
2009-03-18 00:20 . 2009-03-18 00:20 <REP> d-------- c:\program files\Microsoft Sync Framework
2009-03-18 00:07 . 2009-03-18 00:23 <REP> d-------- c:\program files\Microsoft
2009-03-18 00:06 . 2009-03-18 00:06 <REP> d-------- c:\program files\Windows Live SkyDrive
2009-03-17 23:55 . 2009-03-17 23:55 <REP> d-------- c:\program files\Fichiers communs\Windows Live
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
2009-04-02 15:28 0 ----a-w c:\windows\system32\drivers\lvuvc.hs
2009-04-02 15:28 0 ----a-w c:\windows\system32\drivers\logiflt.iad
2009-04-02 06:40 --------- d-----w c:\program files\Google
2009-03-28 18:49 33,808 ----a-w c:\windows\system32\drivers\klbg.sys
2009-03-27 22:12 34,016 ----a-w c:\windows\system32\drivers\fhcqgyzg.sys
2009-03-21 22:21 --------- d-----w c:\documents and settings\Sabba.CF-SABBA\Application Data\OpenOffice.org2
2009-03-19 20:23 35,520 -c--a-w c:\documents and settings\Nouche\Application Data\GDIPFONTCACHEV1.DAT
2009-03-17 22:21 --------- d-----w c:\program files\Windows Live
2009-03-17 22:07 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\WindowsLiveInstaller
2009-02-28 23:37 46,080 ----a-w c:\windows\system32\drivers\ndisio.sys
2009-02-28 19:51 35,520 -c--a-w c:\documents and settings\Sabba.CF-SABBA\Application Data\GDIPFONTCACHEV1.DAT
2009-02-26 09:55 --------- d-----w c:\program files\MSBuild
2009-02-26 09:40 --------- d-----w c:\program files\Reference Assemblies
2009-02-14 15:34 --------- d-----w c:\program files\ma-config.com
2009-02-14 15:34 --------- d-----w c:\documents and settings\Sabba.CF-SABBA\Application Data\ma-config.com
2009-02-07 23:56 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-07 23:56 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\BVRP Software
2009-02-07 23:55 --------- d-----w c:\program files\Common Files
2009-02-06 18:39 308,600 ----a-w c:\windows\WLXPGSS.SCR
2009-02-04 20:05 --------- d-----w c:\program files\Fichiers communs\LogiShrd
2009-02-04 19:57 --------- d-----w c:\program files\Logitech
2009-02-04 19:57 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\Logishrd
2005-02-23 15:18 55,024 -c--a-w c:\documents and settings\SABBA\Application Data\GDIPFONTCACHEV1.DAT
2008-10-12 17:13 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008101220081013\index.dat
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2008-03-27 173368]
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WorksFUD"="c:\program files\Microsoft Works\wkfud.exe" [2000-07-12 24576]
"NeroCheck"="c:\windows\system32\NeroCheck.exe" [2002-10-08 155648]
"Microsoft Works Update Detection"="c:\program files\Microsoft Works\WkDetect.exe" [2000-08-04 28739]
"InCD"="c:\program files\Ahead\InCD\InCD.exe" [2003-02-12 1232896]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-02-16 282624]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" [2009-03-28 206088]
"PCTVOICE"="pctspk.exe" [2001-09-07 c:\windows\system32\pctspk.exe]
"nwiz"="nwiz.exe" [2006-10-22 c:\windows\system32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-10-09 66864]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\fhcqgyzg.sys]
@="Driver"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\BlueSoleil.lnk
backup=c:\windows\pss\BlueSoleil.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Rappels du Calendrier Microsoft Works.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Rappels du Calendrier Microsoft Works.lnk
backup=c:\windows\pss\Rappels du Calendrier Microsoft Works.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Nouche^Menu Démarrer^Programmes^Démarrage^dcu.lnk]
path=c:\documents and settings\Nouche\Menu Démarrer\Programmes\Démarrage\dcu.lnk
backup=c:\windows\pss\dcu.lnkStartup
[HKLM\~\startupfolder\C:^Documents and Settings^Nouche^Menu Démarrer^Programmes^Démarrage^reminder.lnk]
path=c:\documents and settings\Nouche\Menu Démarrer\Programmes\Démarrage\reminder.lnk
backup=c:\windows\pss\reminder.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\system32\\fxsclnt.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Digital Media Center\\DigitalMediaCenter.exe"=
"c:\\Program Files\\Digital Media Center\\DMGateway.exe"=
"c:\\Program Files\\Digital Media Center\\DMRecord.exe"=
"c:\\Program Files\\Digital Media Center\\AppServer.exe"=
"c:\\Program Files\\Digital Media Center\\httpd\\bin\\httpd.exe"=
"c:\\Program Files\\Digital Media Center\\VLC\\vlc.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
R0 BsStor;InCD Storage Helper Driver;c:\windows\system32\drivers\bsstor.sys [2006-09-02 9344]
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 33808]
R2 BsUDF;InCD UDF Driver;c:\windows\system32\drivers\bsudf.sys [2006-09-02 389504]
R2 Digital Media Gateway;Digital Media Gateway;c:\program files\Digital Media Center\DMGateway.exe [2008-01-14 8940177]
R2 DigitalMediaHTTPd;Digital Media HTTPd;c:\program files\Digital Media Center\httpd\bin\httpd.exe [2007-09-21 17408]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-03-18 55152]
R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\system32\drivers\fbxusb32.sys [2005-07-20 21344]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2008-04-30 24592]
S0 fhcqgyzg;fhcqgyzg;c:\windows\system32\drivers\fhcqgyzg.sys [2009-03-01 34016]
S2 gupdate1c9897da9c924be;Google Update Service (gupdate1c9897da9c924be);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-08 133104]
S3 bchgxzfi;bchgxzfi;\??\c:\windows\System32\Drivers\bchgxzfi.sys --> c:\windows\System32\Drivers\bchgxzfi.sys [?]
S3 bimcqwdb;bimcqwdb;\??\c:\windows\System32\Drivers\bimcqwdb.sys --> c:\windows\System32\Drivers\bimcqwdb.sys [?]
S3 ccgnckrt;ccgnckrt;\??\c:\windows\System32\Drivers\ccgnckrt.sys --> c:\windows\System32\Drivers\ccgnckrt.sys [?]
S3 dlecpscf;dlecpscf;\??\c:\windows\System32\Drivers\dlecpscf.sys --> c:\windows\System32\Drivers\dlecpscf.sys [?]
S3 fophctni;fophctni;\??\c:\windows\System32\Drivers\fophctni.sys --> c:\windows\System32\Drivers\fophctni.sys [?]
S3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 gavwnnqs;gavwnnqs;\??\c:\windows\System32\Drivers\gavwnnqs.sys --> c:\windows\System32\Drivers\gavwnnqs.sys [?]
S3 gljhgnwy;gljhgnwy;\??\c:\windows\System32\Drivers\gljhgnwy.sys --> c:\windows\System32\Drivers\gljhgnwy.sys [?]
S3 gydzahbm;gydzahbm;\??\c:\windows\System32\Drivers\gydzahbm.sys --> c:\windows\System32\Drivers\gydzahbm.sys [?]
S3 inwcmbjm;inwcmbjm;\??\c:\windows\System32\Drivers\inwcmbjm.sys --> c:\windows\System32\Drivers\inwcmbjm.sys [?]
S3 iosxbvxt;iosxbvxt;\??\c:\windows\System32\Drivers\iosxbvxt.sys --> c:\windows\System32\Drivers\iosxbvxt.sys [?]
S3 jyrwfiin;jyrwfiin;\??\c:\windows\System32\Drivers\jyrwfiin.sys --> c:\windows\System32\Drivers\jyrwfiin.sys [?]
S3 kfiulmju;kfiulmju;\??\c:\windows\System32\Drivers\kfiulmju.sys --> c:\windows\System32\Drivers\kfiulmju.sys [?]
S3 llxvoydd;llxvoydd;\??\c:\windows\System32\Drivers\llxvoydd.sys --> c:\windows\System32\Drivers\llxvoydd.sys [?]
S3 lqhhbapt;lqhhbapt;\??\c:\windows\System32\Drivers\lqhhbapt.sys --> c:\windows\System32\Drivers\lqhhbapt.sys [?]
S3 nxrebods;nxrebods;\??\c:\windows\System32\Drivers\nxrebods.sys --> c:\windows\System32\Drivers\nxrebods.sys [?]
S3 plzbwjtl;plzbwjtl;\??\c:\windows\System32\Drivers\plzbwjtl.sys --> c:\windows\System32\Drivers\plzbwjtl.sys [?]
S3 qsqpelta;qsqpelta;\??\c:\windows\System32\Drivers\qsqpelta.sys --> c:\windows\System32\Drivers\qsqpelta.sys [?]
S3 shhvomit;shhvomit;\??\c:\windows\System32\Drivers\shhvomit.sys --> c:\windows\System32\Drivers\shhvomit.sys [?]
S3 swrfrphw;swrfrphw;\??\c:\windows\System32\Drivers\swrfrphw.sys --> c:\windows\System32\Drivers\swrfrphw.sys [?]
S3 sysvydzr;sysvydzr;\??\c:\windows\System32\Drivers\sysvydzr.sys --> c:\windows\System32\Drivers\sysvydzr.sys [?]
S3 uscvavyt;uscvavyt;\??\c:\windows\System32\Drivers\uscvavyt.sys --> c:\windows\System32\Drivers\uscvavyt.sys [?]
S3 veeifsvo;veeifsvo;\??\c:\windows\System32\Drivers\veeifsvo.sys --> c:\windows\System32\Drivers\veeifsvo.sys [?]
S3 vrjhnuaq;vrjhnuaq;\??\c:\windows\System32\Drivers\vrjhnuaq.sys --> c:\windows\System32\Drivers\vrjhnuaq.sys [?]
S3 vyfgbpwy;vyfgbpwy;\??\c:\windows\System32\Drivers\vyfgbpwy.sys --> c:\windows\System32\Drivers\vyfgbpwy.sys [?]
S3 xrfufqyi;xrfufqyi;\??\c:\windows\System32\Drivers\xrfufqyi.sys --> c:\windows\System32\Drivers\xrfufqyi.sys [?]
S3 yapxlhdg;yapxlhdg;\??\c:\windows\System32\Drivers\yapxlhdg.sys --> c:\windows\System32\Drivers\yapxlhdg.sys [?]
S3 ykntybwv;ykntybwv;\??\c:\windows\System32\Drivers\ykntybwv.sys --> c:\windows\System32\Drivers\ykntybwv.sys [?]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{baf8152c-bacc-11dc-8cfc-0007cb0000ff}]
\Shell\AutoRun\command - F:\AutoTransfer.exe
Contenu du dossier 'Tâches planifiées'
2008-10-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-10-10 17:13]
2009-04-02 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-08 01:41]
2009-04-02 c:\windows\Tasks\User_Feed_Synchronization-{986C0A72-F7EF-4DEA-B0CD-689312CA55CF}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 12:58]
- - - - ORPHELINS SUPPRIMES - - - -
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
SafeBoot-OneCareMP
MSConfigStartUp-SweetIM - c:\program files\Macrogaming\SweetIM\SweetIM.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
------- Examen supplémentaire -------
IE: &Every Toolbar Search - c:\progra~1\EVERYT~1.1\everycom.dll/GoRSDN.dll.htm
IE: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZNxmk570YYFR (http://edits.mywebsearch.com/toolbaredits/...?p=ZNxmk570YYFR)
IE: Convertir en Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir en un fichier PDF existant - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir la cible du lien en Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en un fichier PDF existant - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir la sélection en Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la sélection en un fichier PDF existant - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir les liens sélectionnés en fichier Adobe PDF - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convertir les liens sélectionnés en un fichier PDF existant - c:\program files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net (http://www.gmer.net)
Rootkit scan 2009-04-02 17:32:48
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{2b2f2974-1b4e-49dc-ae30-027b3e97ca37}]
@Denied: (Full) (Everyone)
"Model"=dword:00000012
"Therad"=dword:00000016
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):7e,e4,c4,0f,f0,34,38,78,e6,e5,31,ea,62,2c,06,c1,ba,8a,09,a9,c6,
63,64,5d,17,27,c5,35,96,21,da,19,1d,3e,51,e7,9b,3a,dc,dc,00,00,00,00,00,00,\
------------------------ Autres processus actifs ------------------------
c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe
c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\snmp.exe
c:\windows\system32\fxssvc.exe
c:\windows\system32\wscntfy.exe
**************************************************************************
Heure de fin: 2009-04-02 17:51:50 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-04-02 15:51:43
Avant-CF: 30 935 633 920 octets libres
Après-CF: 32,722,644,992 octets libres
WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP ?dition familiale" /fastdetect /NoExecute=OptIn
261 --- E O F --- 2009-03-19 17:51:02
