URGENT ordi infecté par un ou plusieurs virus

finiarel · le 15 novembre 2008

Bonsoir à tous!!!

J'ai besoin d'aide d'urgence s'il vous plait parce que mon ordi est infecté par un ou plusieurs virus.J'en suis sur parce que l'accés a mon antivirus et a mon pare feu est refusé.De plus je ne peut pas faire de demarrage en mode sans echec ni de restauration systeme.

Je suis completement perdu s'il vous plait j'ai terriblement besoin de votre aide d'urgence

Merci d'avance à tous.

Falkra · le 15 novembre 2008

Bonsoir, tu as des messages application win32 non valide ?

finiarel · le 15 novembre 2008

oui exctement

Falkra · le 15 novembre 2008

Oki, on va régler ça.

Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.

Ne pas utiliser en dehors de ce cas de figure : dangereux.

Attention à bien suivre ces instructions en détail, ne pas oublier de renommer combofix.exe AVANT qu'il ne soit téléchargé, quand on peut encore changer le nom du fichier et dire au navigateur où le télécharger.

Télécharge combofix.exe de sUBs et renomme-le combo-fix.exe avant de le sauvegarder sur ton bureau (et pas ailleurs).

Assure toi que tous les programmes sont fermés avant de commencer (même le navigateur).
Double-clique combo-fix.exe afin de l'exécuter.
Clique sur "Oui" au message de Limitation de Garantie qui s'affiche.
On va te proposer de télécharger et installer la console de récupération, clique sur "Oui" au message, autorise le téléchargement dans ton firewall si demandé, puis accepte le message de contrat utilisateur final.
Le bureau disparaît, c'est normal, et il va revenir.
Il est possible que ton parefeu te demande si tu acceptes ou non l'accès de nircmd.cfexe à la zone sûre: accepte.
Ne ferme pas la fenêtre qui vient de s'ouvrir, tu te retrouverais avec un bureau vide.
Lorsque l'analyse sera terminée, un rapport apparaîtra.
Copie-colle ce rapport dans ta prochaine réponse.
Le rapport se trouve dans : C:\Combofix.txt (si jamais).

finiarel · le 15 novembre 2008

merci pour ta vitesse de reponse

Voici le rapport:

ComboFix 08-11-13.02 - Anthony 2008-11-16 0:20:56.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.742 [GMT 1:00]

* Un nouveau point de restauration a été créé

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\Anthony\Application Data\m

c:\documents and settings\Anthony\Application Data\m\data.oct

c:\documents and settings\Anthony\Application Data\m\flec006.exe

c:\documents and settings\Anthony\Application Data\m\list.oct

c:\documents and settings\Anthony\Application Data\m\shared\12Ghosts_Replace_8.11.zip

c:\documents and settings\Anthony\Application Data\m\shared\360 Flash Panorama Viewer 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\3D_Space_Clock_ScreenSaver_2.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\3D_Stockcar_Screensaver_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Able2Extract_4.zip

c:\documents and settings\Anthony\Application Data\m\shared\ACProtect_2.0_build_2006.03.10.zip

c:\documents and settings\Anthony\Application Data\m\shared\Active_Sound_Studio_Professional_2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Advanced Page Rank Analyzer 2.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Akala Password Revealer 1.00.031103.zip

c:\documents and settings\Anthony\Application Data\m\shared\All to AVI VCD SVCD DVD MPEG Converter 4.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\AlphaPeeler Professional 1.0b.zip

c:\documents and settings\Anthony\Application Data\m\shared\ALTools Christmas Desktop Wallpapers 2005.zip

c:\documents and settings\Anthony\Application Data\m\shared\Americanassist_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\AMP_Tile_Viewer_2.01.zip

c:\documents and settings\Anthony\Application Data\m\shared\AOL_Suite_1.18.2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\ArintE_Level_Better_2.03.635.zip

c:\documents and settings\Anthony\Application Data\m\shared\AvailSuite_2.70_Patch.zip

c:\documents and settings\Anthony\Application Data\m\shared\AW_English-Spanish_Dictionary_1.7.zip

c:\documents and settings\Anthony\Application Data\m\shared\Bad_Folkers_1.5.zip

c:\documents and settings\Anthony\Application Data\m\shared\Belkasoft_BookaMark_2.04.zip

c:\documents and settings\Anthony\Application Data\m\shared\Blade Transfer Services 1.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Bonbon_Quest_1.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Boombox_Granny_Demo_Screensaver_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Business_Card_Designer_Plus_9.0.1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\By Heart 4.0 (Patch).zip

c:\documents and settings\Anthony\Application Data\m\shared\Cache Reader 5.0.3.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\CCMplayer 1.5.zip

c:\documents and settings\Anthony\Application Data\m\shared\Chainsaw 3.7.zip

c:\documents and settings\Anthony\Application Data\m\shared\Cheetah_Screensaver_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Christmas_Playtime_Demo_Screensaver_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Clicktionary (Thai) 3.2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Color_It_Update_4.0.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Copy_Table_for_SQL_Server_1.00.00_(Patch).zip

c:\documents and settings\Anthony\Application Data\m\shared\CRM-Express Standard 3.20.zip

c:\documents and settings\Anthony\Application Data\m\shared\DB Solo 2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\DBF_to_XLS_(Excel)_1.51.04.zip

c:\documents and settings\Anthony\Application Data\m\shared\DBForms from MS Access to ASP.NET+MS SQL 1.0.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Defygo 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\DiskDriver_4.2.2_(Cracked).zip

c:\documents and settings\Anthony\Application Data\m\shared\Easy-to-Use PDF Organizer 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\EldoS_Thumbnailer_4.41_Patch.zip

c:\documents and settings\Anthony\Application Data\m\shared\Elecard Mobile Converter 2.0.37 build 60619.zip

c:\documents and settings\Anthony\Application Data\m\shared\ewido-setup.zip

c:\documents and settings\Anthony\Application Data\m\shared\EZ Unit Converter Wizard 2002 4.00.zip

c:\documents and settings\Anthony\Application Data\m\shared\FastWin 1.00.zip

c:\documents and settings\Anthony\Application Data\m\shared\File Watcher 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\FileCluster_Search_Plugin_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\fireQuest (Key+Serial).zip

c:\documents and settings\Anthony\Application Data\m\shared\FlipPublisher 1.0 KeyGen.zip

c:\documents and settings\Anthony\Application Data\m\shared\Framy_Leopard_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Full Moon 2.0.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\GENViewer_1.02.zip

c:\documents and settings\Anthony\Application Data\m\shared\Ghost Surf Standard 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Glycemic_Impact_Diet_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Gyzmo_2.0_Key+Serial.zip

c:\documents and settings\Anthony\Application Data\m\shared\Hide_The_IP_2.1.1_Crack.zip

c:\documents and settings\Anthony\Application Data\m\shared\Hot_Phone_2.8_(Key).zip

c:\documents and settings\Anthony\Application Data\m\shared\HTML_Protect_Center_1.0_[Crack].zip

c:\documents and settings\Anthony\Application Data\m\shared\Idea_Cruncher_1.4.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Ideal Gas in 3D 2.01.zip

c:\documents and settings\Anthony\Application Data\m\shared\IL-2_Sturmovik_1.2_patch.zip

c:\documents and settings\Anthony\Application Data\m\shared\iMiser Research Assistant 3.0 Build 1073.zip

c:\documents and settings\Anthony\Application Data\m\shared\Instant_Image_Creator_1.0_Cracked.zip

c:\documents and settings\Anthony\Application Data\m\shared\Itel_Office_2.1.1_[Key+Serial].zip

c:\documents and settings\Anthony\Application Data\m\shared\JGraphpad_2.zip

c:\documents and settings\Anthony\Application Data\m\shared\linrdp 2.5.zip

c:\documents and settings\Anthony\Application Data\m\shared\LockItNow!_1.2_Crack.zip

c:\documents and settings\Anthony\Application Data\m\shared\Lunascape_4.1.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\Magic Garden Screensaver 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Manet Screensaver 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Messenger_Jump!_MSN_Content_Installer_1.10.zip

c:\documents and settings\Anthony\Application Data\m\shared\MS_Access_Password_Recovery_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\MultiMediaPhile_1.6.zip

c:\documents and settings\Anthony\Application Data\m\shared\Multiplication_Flash_2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\News Publishing Content Management System 2.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\Nod32.AntiVirus.v2.52.17+Crack.zip

c:\documents and settings\Anthony\Application Data\m\shared\NTFS_Compressed_File_Decompressor_2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Old Fireplace - Animated Wallpaper 5.07.zip

c:\documents and settings\Anthony\Application Data\m\shared\OneClick_Encryption_Software_2.2.zip

c:\documents and settings\Anthony\Application Data\m\shared\Option_Pricing_Spreadsheet_1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Oregon Real Estate Finder 1.03.zip

c:\documents and settings\Anthony\Application Data\m\shared\OrgChart Professional 4.0.1183.zip

c:\documents and settings\Anthony\Application Data\m\shared\Panda Gadget 1.00.zip

c:\documents and settings\Anthony\Application Data\m\shared\PDF-Pro 2.7.zip

c:\documents and settings\Anthony\Application Data\m\shared\Performance_Monitoring_Protocol_(PMP)_8.3.1_[Key+Serial].zip

c:\documents and settings\Anthony\Application Data\m\shared\Personal_Timeclock_4.4_(KeyGen).zip

c:\documents and settings\Anthony\Application Data\m\shared\phpBB Advanced Quick Reply Quote Edit 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Piramide 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\PostgreSQL_Import_Multiple_Text_Files_Software_7.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Prg_Text_Launcher_1.0_[Cracked].zip

c:\documents and settings\Anthony\Application Data\m\shared\PrimaSoft_Encryption_-_Service_Edition_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\ReaSoft PDF Printer Lite 3.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\RegEm_1.0.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\RetailRoadshow 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Rikisoft_EasySnap_Pro_1.7.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\RTF_Convertor_1.0_beta.zip

c:\documents and settings\Anthony\Application Data\m\shared\SafarIcon_2.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\setupitapro-Avast!.versione.4.7.Homa.Edition.zip

c:\documents and settings\Anthony\Application Data\m\shared\ShapeBook with 2D3DSteel 3.10.zip

c:\documents and settings\Anthony\Application Data\m\shared\Silver_Net_Inventory_system_1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Smart Diary Suite 3.10.zip

c:\documents and settings\Anthony\Application Data\m\shared\Snooker_1.zip

c:\documents and settings\Anthony\Application Data\m\shared\StartupList_1.5.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\SubC - Subtitle Converter 1.2.0.91.zip

c:\documents and settings\Anthony\Application Data\m\shared\Super Echo SE-i 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Systweak_Photo_Studio_1.00_[serial].zip

c:\documents and settings\Anthony\Application Data\m\shared\TCP Optimizer 2.0.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\TestDisk_&_PhotoRec_6.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\The Spring Path Screensaver 1.0 [Crack].zip

c:\documents and settings\Anthony\Application Data\m\shared\Theta- Software HTML To PDF Converter 2.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\TIM_USB_Transfer_1.2.zip

c:\documents and settings\Anthony\Application Data\m\shared\Timesheets MTS 2.3.0 Patch.zip

c:\documents and settings\Anthony\Application Data\m\shared\TOP - Vista Shutdown Control 2.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Traffic_Game_Demo.zip

c:\documents and settings\Anthony\Application Data\m\shared\TreeNotes_2.01.zip

c:\documents and settings\Anthony\Application Data\m\shared\Trend_Micro_PC-cillin_Internet_Security_2007_Build_1420_Cracked.zip

c:\documents and settings\Anthony\Application Data\m\shared\Ultimate Spyware Adware Remover 6.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Unreal_Tournament_2003_-_Proximity_Mine_mod_1.1a.zip

c:\documents and settings\Anthony\Application Data\m\shared\Unreal_Tournament_2003_-_VSK_War_Zone_deathmatch_map.zip

c:\documents and settings\Anthony\Application Data\m\shared\US_Army_in_Iraq_1.zip

c:\documents and settings\Anthony\Application Data\m\shared\VCE_Testing_System_1.0.815.zip

c:\documents and settings\Anthony\Application Data\m\shared\Verbose Text to Speech Converter 1.04.zip

c:\documents and settings\Anthony\Application Data\m\shared\Virtual Piano 1.0.zip

c:\documents and settings\Anthony\Application Data\m\shared\Viscom Video Converter 1.0 [serial].zip

c:\documents and settings\Anthony\Application Data\m\shared\Wapet 0.5.zip

c:\documents and settings\Anthony\Application Data\m\shared\Word Password Recovery Master 3.0.0.1.zip

c:\documents and settings\Anthony\Application Data\m\shared\Work Examiner Standard 2.1 Build 337.zip

c:\documents and settings\Anthony\Application Data\m\shared\Xlit 2.3.zip

c:\documents and settings\Anthony\Application Data\m\shared\zsCompare 3.03 KeyGen.zip

c:\documents and settings\Anthony\Application Data\m\srvlist.oct

c:\windows\system32\ban_list.txt

c:\windows\system32\drivers\downld

c:\windows\system32\drivers\downld\118812.exe

c:\windows\system32\drivers\downld\123406.exe

c:\windows\system32\drivers\downld\128843.exe

c:\windows\system32\drivers\downld\130187.exe

c:\windows\system32\drivers\downld\130593.exe

c:\windows\system32\drivers\downld\134562.exe

c:\windows\system32\drivers\downld\134656.exe

c:\windows\system32\drivers\downld\138296.exe

c:\windows\system32\drivers\downld\148515.exe

c:\windows\system32\drivers\downld\14996421.exe

c:\windows\system32\drivers\downld\15002515.exe

c:\windows\system32\drivers\downld\15003453.exe

c:\windows\system32\drivers\downld\15012796.exe

c:\windows\system32\drivers\downld\15016125.exe

c:\windows\system32\drivers\downld\15018609.exe

c:\windows\system32\drivers\downld\15022109.exe

c:\windows\system32\drivers\downld\15028140.exe

c:\windows\system32\drivers\downld\15089281.exe

c:\windows\system32\drivers\downld\15126000.exe

c:\windows\system32\drivers\downld\15134125.exe

c:\windows\system32\drivers\downld\163437.exe

c:\windows\system32\drivers\downld\166750.exe

c:\windows\system32\drivers\downld\183765.exe

c:\windows\system32\drivers\downld\198156.exe

c:\windows\system32\drivers\downld\221484.exe

c:\windows\system32\drivers\downld\245968.exe

c:\windows\system32\drivers\downld\349078.exe

c:\windows\system32\drivers\downld\361562.exe

c:\windows\system32\drivers\downld\381187.exe

c:\windows\system32\drivers\downld\500281.exe

c:\windows\system32\drivers\downld\574140.exe

c:\windows\system32\drivers\downld\79421.exe

c:\windows\system32\drivers\downld\81812.exe

c:\windows\system32\drivers\downld\89046.exe

c:\windows\system32\drivers\downld\90156.exe

c:\windows\system32\drivers\downld\91906.exe

c:\windows\system32\drivers\downld\94062.exe

c:\windows\system32\drivers\downld\95031.exe

c:\windows\system32\drivers\srosa.sys

c:\windows\system32\drivers\winfilse.exe

c:\windows\system32\mdelk.exe

c:\windows\system32\wintems.exe

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Service_SROSA

-------\Legacy_SROSA

((((((((((((((((((((((((((((( Fichiers créés du 2008-10-15 au 2008-11-15 ))))))))))))))))))))))))))))))))))))

.

2008-11-16 00:07 . 2001-08-23 17:47 46,080 --a--c--- c:\windows\system32\dllcache\esuni.dll

2008-11-16 00:07 . 2001-08-23 17:47 34,816 --a--c--- c:\windows\system32\dllcache\esuimg.dll

2008-11-16 00:06 . 2001-08-23 17:16 596,319 --a--c--- c:\windows\system32\dllcache\es56cvmp.sys

2008-11-16 00:06 . 2001-08-23 17:16 594,910 --a--c--- c:\windows\system32\dllcache\es56hpi.sys

2008-11-16 00:06 . 2001-08-23 17:16 348,222 --a--c--- c:\windows\system32\dllcache\es56tpi.sys

2008-11-16 00:06 . 2001-08-17 20:19 174,464 --a--c--- c:\windows\system32\dllcache\es198x.sys

2008-11-16 00:06 . 2004-08-03 22:32 137,088 --a--c--- c:\windows\system32\dllcache\essm2e.sys

2008-11-16 00:06 . 2001-08-17 20:19 72,192 --a--c--- c:\windows\system32\dllcache\es1969.sys

2008-11-16 00:06 . 2001-08-17 20:19 63,360 --a--c--- c:\windows\system32\dllcache\ess.sys

2008-11-16 00:06 . 2001-08-23 17:47 43,008 --a--c--- c:\windows\system32\dllcache\esucm.dll

2008-11-16 00:06 . 2001-08-17 20:19 40,704 --a--c--- c:\windows\system32\dllcache\es1371mp.sys

2008-11-16 00:05 . 2001-08-23 17:16 630,016 --a--c--- c:\windows\system32\dllcache\eqn.sys

2008-11-16 00:05 . 2001-08-17 20:19 283,904 --a--c--- c:\windows\system32\dllcache\emu10k1m.sys

2008-11-16 00:05 . 2001-08-17 21:50 144,896 --a--c--- c:\windows\system32\dllcache\epcfw2k.sys

2008-11-16 00:05 . 2001-08-17 21:50 114,944 --a--c--- c:\windows\system32\dllcache\epstw2k.sys

2008-11-16 00:05 . 2001-08-23 17:47 62,464 --a--c--- c:\windows\system32\dllcache\eqnloop.exe

2008-11-16 00:05 . 2001-08-23 17:47 53,760 --a--c--- c:\windows\system32\dllcache\eqndiag.exe

2008-11-16 00:05 . 2001-08-23 17:47 51,712 --a--c--- c:\windows\system32\dllcache\eqnlogr.exe

2008-11-16 00:05 . 2001-08-17 20:19 37,120 --a--c--- c:\windows\system32\dllcache\es1370mp.sys

2008-11-16 00:05 . 2001-08-17 20:12 18,503 --a--c--- c:\windows\system32\dllcache\epro4.sys

2008-11-16 00:05 . 2001-08-17 21:46 6,400 --a--c--- c:\windows\system32\dllcache\enum1394.sys

2008-11-16 00:04 . 2001-08-23 17:13 455,711 --a--c--- c:\windows\system32\dllcache\el985n51.sys

2008-11-16 00:04 . 2001-08-23 17:13 175,104 --a--c--- c:\windows\system32\dllcache\el99xn51.sys

2008-11-16 00:04 . 2001-08-23 17:13 153,631 --a--c--- c:\windows\system32\dllcache\el90xnd5.sys

2008-11-16 00:04 . 2001-08-17 20:11 70,174 --a--c--- c:\windows\system32\dllcache\el98xn5.sys

2008-11-16 00:04 . 2001-08-17 20:11 66,591 --a--c--- c:\windows\system32\dllcache\el90xbc5.sys

2008-11-16 00:04 . 2001-08-17 20:10 25,159 --a--c--- c:\windows\system32\dllcache\elnk3.sys

2008-11-16 00:04 . 2001-08-17 20:10 19,996 --a--c--- c:\windows\system32\dllcache\em556n4.sys

2008-11-16 00:04 . 2001-08-17 21:53 7,296 --a--c--- c:\windows\system32\dllcache\elmsmc.sys

2008-11-16 00:03 . 2001-08-23 17:13 634,166 --a--c--- c:\windows\system32\dllcache\el656ct5.sys

2008-11-16 00:03 . 2001-08-23 17:13 241,238 --a--c--- c:\windows\system32\dllcache\el656se5.sys

2008-11-16 00:03 . 2001-08-17 20:11 77,386 --a--c--- c:\windows\system32\dllcache\el656nd5.sys

2008-11-16 00:03 . 2001-08-17 20:10 69,692 --a--c--- c:\windows\system32\dllcache\el575nd5.sys

2008-11-16 00:03 . 2001-08-17 20:11 69,194 --a--c--- c:\windows\system32\dllcache\el656cd5.sys

2008-11-16 00:03 . 2001-08-17 20:10 55,999 --a--c--- c:\windows\system32\dllcache\el556nd5.sys

2008-11-16 00:03 . 2001-08-23 17:13 44,615 --a--c--- c:\windows\system32\dllcache\el515.sys

2008-11-16 00:03 . 2001-08-17 20:10 26,141 --a--c--- c:\windows\system32\dllcache\el589nd5.sys

2008-11-16 00:03 . 2001-08-17 20:10 24,653 --a--c--- c:\windows\system32\dllcache\el574nd4.sys

2008-11-16 00:02 . 2001-08-17 20:20 334,208 --a--c--- c:\windows\system32\dllcache\ds1wdm.sys

2008-11-16 00:02 . 2008-04-13 20:39 206,976 --a--c--- c:\windows\system32\dllcache\dot4.sys

2008-11-16 00:02 . 2001-08-23 17:12 117,760 --a--c--- c:\windows\system32\dllcache\e100b325.sys

2008-11-16 00:02 . 2001-08-23 17:12 51,743 --a--c--- c:\windows\system32\dllcache\e1000nt5.sys

2008-11-16 00:02 . 2001-08-17 20:12 28,062 --a--c--- c:\windows\system32\dllcache\dp83820.sys

2008-11-16 00:02 . 2001-08-23 17:11 24,064 --a--c--- c:\windows\system32\dllcache\dot4usb.sys

2008-11-16 00:02 . 2008-04-14 04:34 20,992 --a--c--- c:\windows\system32\dllcache\dshowext.ax

2008-11-16 00:02 . 2001-08-17 22:07 20,192 --a--c--- c:\windows\system32\dllcache\dpti2o.sys

2008-11-16 00:02 . 2001-08-17 20:12 19,594 --a--c--- c:\windows\system32\dllcache\e100isa4.sys

2008-11-16 00:02 . 2001-08-17 21:47 12,928 --a--c--- c:\windows\system32\dllcache\dot4prt.sys

2008-11-16 00:02 . 2001-08-17 21:47 8,704 --a--c--- c:\windows\system32\dllcache\dot4scan.sys

2008-11-16 00:01 . 2001-08-17 20:14 952,007 --a--c--- c:\windows\system32\dllcache\diwan.sys

2008-11-16 00:01 . 2001-08-23 17:47 236,060 --a--c--- c:\windows\system32\dllcache\ditrace.exe

2008-11-16 00:01 . 2001-08-23 17:47 38,985 --a--c--- c:\windows\system32\dllcache\disrvsu.dll

2008-11-16 00:01 . 2001-08-23 17:47 37,962 --a--c--- c:\windows\system32\dllcache\divaprop.dll

2008-11-16 00:01 . 2001-08-23 17:47 31,817 --a--c--- c:\windows\system32\dllcache\disrvpp.dll

2008-11-16 00:01 . 2001-08-23 17:47 29,768 --a--c--- c:\windows\system32\dllcache\divasu.dll

2008-11-16 00:01 . 2001-08-17 20:11 29,696 --a--c--- c:\windows\system32\dllcache\dm9pci5.sys

2008-11-16 00:01 . 2001-08-17 20:11 26,698 --a--c--- c:\windows\system32\dllcache\dlh5xnd5.sys

2008-11-16 00:01 . 2008-04-13 20:40 8,320 --a--c--- c:\windows\system32\dllcache\dlttape.sys

2008-11-16 00:01 . 2001-08-23 17:47 6,729 --a--c--- c:\windows\system32\dllcache\disrvci.dll

2008-11-16 00:01 . 2001-08-23 17:47 6,216 --a--c--- c:\windows\system32\dllcache\divaci.dll

2008-11-16 00:00 . 2001-08-23 17:47 622,621 --a--c--- c:\windows\system32\dllcache\digiview.exe

2008-11-16 00:00 . 2001-08-23 17:47 229,462 --a--c--- c:\windows\system32\dllcache\digifwrk.dll

2008-11-16 00:00 . 2001-08-23 17:47 159,828 --a--c--- c:\windows\system32\dllcache\digihlc.dll

2008-11-16 00:00 . 2001-08-23 17:47 110,621 --a--c--- c:\windows\system32\dllcache\digirlpt.dll

2008-11-16 00:00 . 2001-08-23 17:10 103,492 --a--c--- c:\windows\system32\dllcache\digidxb.sys

2008-11-16 00:00 . 2001-08-23 17:47 102,484 --a--c--- c:\windows\system32\dllcache\digiinf.dll

2008-11-16 00:00 . 2001-08-17 20:13 91,305 --a--c--- c:\windows\system32\dllcache\dimaint.sys

2008-11-16 00:00 . 2001-08-23 17:10 90,685 --a--c--- c:\windows\system32\dllcache\digifep5.sys

2008-11-16 00:00 . 2001-08-23 17:10 42,656 --a--c--- c:\windows\system32\dllcache\digirlpt.sys

2008-11-16 00:00 . 2001-08-23 17:47 41,046 --a--c--- c:\windows\system32\dllcache\digiisdn.dll

2008-11-16 00:00 . 2001-08-17 20:14 21,606 --a--c--- c:\windows\system32\dllcache\digiisdn.sys

2008-11-15 23:59 . 2001-08-23 17:47 422,429 --a--c--- c:\windows\system32\dllcache\dgconfig.dll

2008-11-15 23:59 . 2001-08-23 17:47 256,512 --a--c--- c:\windows\system32\dllcache\devcon32.dll

2008-11-15 23:59 . 2001-08-23 17:47 135,252 --a--c--- c:\windows\system32\dllcache\digidbp.dll

2008-11-15 23:59 . 2001-08-23 17:47 65,622 --a--c--- c:\windows\system32\dllcache\digiasyn.dll

2008-11-15 23:59 . 2001-08-23 17:10 37,927 --a--c--- c:\windows\system32\dllcache\digiasyn.sys

2008-11-15 23:59 . 2001-08-23 17:09 29,691 --a--c--- c:\windows\system32\dllcache\dgapci.sys

2008-11-15 23:59 . 2001-08-17 20:11 24,649 --a--c--- c:\windows\system32\dllcache\dfe650d.sys

2008-11-15 23:59 . 2001-08-17 20:11 24,648 --a--c--- c:\windows\system32\dllcache\dfe650.sys

2008-11-15 23:59 . 2001-08-23 17:47 24,064 --a--c--- c:\windows\system32\dllcache\devldr32.exe

2008-11-15 23:59 . 2001-08-17 20:11 20,928 --a--c--- c:\windows\system32\dllcache\defpa.sys

2008-11-15 23:58 . 2001-08-17 21:52 179,584 --a--c--- c:\windows\system32\dllcache\dac2w2k.sys

2008-11-15 23:58 . 2001-08-23 17:08 117,760 --a--c--- c:\windows\system32\dllcache\d100ib5.sys

2008-11-15 23:58 . 2001-08-23 17:47 112,128 --a--c--- c:\windows\system32\dllcache\dc260usd.dll

2008-11-15 23:58 . 2001-08-23 17:47 87,552 --a--c--- c:\windows\system32\dllcache\dc240usd.dll

2008-11-15 23:58 . 2001-08-23 17:47 82,432 --a--c--- c:\windows\system32\dllcache\dc210usd.dll

2008-11-15 23:58 . 2001-08-17 20:12 63,208 --a--c--- c:\windows\system32\dllcache\dc21x4.sys

2008-11-15 23:58 . 2001-08-23 17:47 28,160 --a--c--- c:\windows\system32\dllcache\cyzports.dll

2008-11-15 23:58 . 2001-08-23 17:47 25,600 --a--c--- c:\windows\system32\dllcache\dc210_32.dll

2008-11-15 23:58 . 2001-08-17 21:52 14,720 --a--c--- c:\windows\system32\dllcache\dac960nt.sys

2008-11-15 23:58 . 2001-08-17 21:52 7,424 --a--c--- c:\windows\system32\dllcache\ddsmc.sys

2008-11-15 23:57 . 2001-08-17 20:19 111,872 --a--c--- c:\windows\system32\dllcache\cwcspud.sys

2008-11-15 23:57 . 2001-08-17 20:19 93,952 --a--c--- c:\windows\system32\dllcache\cwcwdm.sys

2008-11-15 23:57 . 2001-08-17 20:19 72,832 --a--c--- c:\windows\system32\dllcache\cwbwdm.sys

2008-11-15 23:57 . 2001-08-23 17:08 50,944 --a--c--- c:\windows\system32\dllcache\cyyport.sys

2008-11-15 23:57 . 2001-08-23 17:08 50,688 --a--c--- c:\windows\system32\dllcache\cyzport.sys

2008-11-15 23:57 . 2004-08-03 22:32 48,640 --a--c--- c:\windows\system32\dllcache\cwrwdm.sys

2008-11-15 23:57 . 2001-08-23 17:47 29,184 --a--c--- c:\windows\system32\dllcache\cyycoins.dll

2008-11-15 23:57 . 2001-08-23 17:47 28,160 --a--c--- c:\windows\system32\dllcache\cyzcoins.dll

2008-11-15 23:57 . 2001-08-23 17:47 28,160 --a--c--- c:\windows\system32\dllcache\cyyports.dll

2008-11-15 23:57 . 2001-08-23 17:08 17,536 --a--c--- c:\windows\system32\dllcache\cyclad-z.sys

2008-11-15 23:57 . 2001-08-23 17:08 15,104 --a--c--- c:\windows\system32\dllcache\cyclom-y.sys

2008-11-15 23:57 . 2001-08-17 20:19 3,584 --a--c--- c:\windows\system32\dllcache\cwcosnt5.sys

2008-11-15 23:56 . 2008-04-14 04:33 252,416 --a--c--- c:\windows\system32\dllcache\ctmasetp.dll

2008-11-15 23:56 . 2001-08-23 17:47 216,576 --a--c--- c:\windows\system32\dllcache\cpscan.dll

2008-11-15 23:56 . 2001-08-23 17:47 175,104 --a--c--- c:\windows\system32\dllcache\csamsp.dll

2008-11-15 23:56 . 2001-08-17 20:19 96,256 --a--c--- c:\windows\system32\dllcache\ctlsb16.sys

2008-11-15 23:56 . 2001-08-23 17:07 61,194 --a--c--- c:\windows\system32\dllcache\cpqtrnd5.sys

2008-11-15 23:56 . 2001-08-17 20:19 42,112 --a--c--- c:\windows\system32\dllcache\crtaud.sys

2008-11-15 23:56 . 2001-08-17 20:19 6,912 --a--c--- c:\windows\system32\dllcache\ctlfacem.sys

2008-11-15 23:56 . 2001-08-23 17:47 4,096 --a--c--- c:\windows\system32\dllcache\ctwdm32.dll

2008-11-15 23:56 . 2001-08-17 20:19 3,712 --a--c--- c:\windows\system32\dllcache\ctljystk.sys

2008-11-15 23:56 . 2001-08-17 20:19 3,072 --a--c--- c:\windows\system32\dllcache\cwbmidi.sys

2008-11-15 23:56 . 2001-08-17 20:19 3,072 --a--c--- c:\windows\system32\dllcache\cwbase.sys

2008-11-15 23:55 . 2001-08-17 21:57 248,064 --a--c--- c:\windows\system32\dllcache\cl546xm.sys

2008-11-15 23:55 . 2001-08-23 17:46 170,880 --a--c--- c:\windows\system32\dllcache\cl546x.dll

2008-11-15 23:55 . 2001-08-23 17:46 111,232 --a--c--- c:\windows\system32\dllcache\cl5465.dll

2008-11-15 23:55 . 2001-08-17 21:57 45,696 --a--c--- c:\windows\system32\dllcache\cirrus.sys

2008-11-15 23:55 . 2001-08-23 17:47 44,544 --a--c--- c:\windows\system32\dllcache\cnusd.dll

2008-11-15 23:55 . 2001-08-17 20:11 39,936 --a--c--- c:\windows\system32\dllcache\cnxt1803.sys

2008-11-15 23:55 . 2001-08-23 17:07 21,533 --a--c--- c:\windows\system32\dllcache\cpqndis5.sys

2008-11-15 23:55 . 2001-08-23 17:04 20,864 --a--c--- c:\windows\system32\dllcache\cmbp0wdm.sys

2008-11-15 23:55 . 2001-08-17 21:52 14,976 --a--c--- c:\windows\system32\dllcache\cpqarray.sys

2008-11-15 23:55 . 2008-04-13 20:36 13,952 --a--c--- c:\windows\system32\dllcache\cmbatt.sys

2008-11-15 23:55 . 2008-04-13 20:36 10,240 --a--c--- c:\windows\system32\dllcache\compbatt.sys

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-11-15 23:14 --------- d-----w c:\documents and settings\Anthony\Application Data\uTorrent

2008-11-15 15:55 --------- d-----w c:\documents and settings\Anthony\Application Data\Platrium

2008-11-15 15:35 --------- d-----w c:\program files\eMule

2008-11-15 14:58 --------- d--h--w c:\program files\InstallShield Installation Information

2008-11-15 11:20 1,930,752 ----a-w c:\windows\Internet Logs\xDB6.tmp

2008-11-15 09:12 --------- d-----w c:\documents and settings\Oceane\Application Data\Platrium

2008-11-15 00:56 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

2008-11-14 18:36 --------- d-----w c:\documents and settings\Valerie\Application Data\Platrium

2008-11-10 13:22 --------- d-----w c:\documents and settings\Valerie\Application Data\Nero

2008-11-05 10:17 --------- d-----w c:\documents and settings\Anthony\Application Data\Nero

2008-11-05 10:14 --------- d-----w c:\program files\Fichiers communs\Nero

2008-11-05 09:55 --------- d-----w c:\program files\Nero

2008-11-05 09:46 --------- d-----w c:\documents and settings\All Users\Application Data\Nero

2008-11-05 09:20 --------- d-----w c:\program files\Java

2008-10-31 15:58 3,636,418 ----a-w c:\windows\Internet Logs\tvDebug.Zip

2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys

2008-10-19 16:17 2,861,056 ----a-w c:\windows\Internet Logs\xDB5.tmp

2008-10-19 08:59 --------- d-----w c:\program files\OpenOffice.org 2.4

2008-10-18 13:42 --------- d-----w c:\documents and settings\Anthony\Application Data\OpenOffice.org2

2008-10-17 17:03 1,529,856 ----a-w c:\windows\Internet Logs\xDB4.tmp

2008-10-16 17:54 --------- d-----w c:\documents and settings\Valerie\Application Data\OpenOffice.org2

2008-10-15 11:58 3,088,896 ----a-w c:\windows\Internet Logs\xDB2.tmp

2008-10-15 11:58 1,521,152 ----a-w c:\windows\Internet Logs\xDB3.tmp

2008-10-07 15:09 --------- d-----w c:\documents and settings\Oceane\Application Data\Nero

2008-10-07 11:33 86,016 ----a-w c:\windows\system32\SET177.tmp

2008-10-07 11:33 8,826,880 ----a-w c:\windows\system32\nvoglnt.dll

2008-10-07 11:33 6,133,856 ----a-w c:\windows\system32\drivers\nv4_mini.sys

2008-10-07 11:33 6,058,112 ----a-w c:\windows\system32\SET17C.tmp

2008-10-07 11:33 6,058,112 ----a-w c:\windows\system32\SET16B.tmp

2008-10-07 11:33 475,136 ----a-w c:\windows\system32\SET17E.tmp

2008-10-07 11:33 475,136 ----a-w c:\windows\system32\SET16F.tmp

2008-10-07 11:33 163,908 ----a-w c:\windows\system32\nvsvc32.exe

2008-10-07 11:33 13,574,144 ----a-w c:\windows\system32\SET181.tmp

2008-10-07 11:33 13,574,144 ----a-w c:\windows\system32\SET175.tmp

2008-10-07 11:33 1,368,064 ----a-w c:\windows\system32\nvcuda.dll

2008-10-05 19:50 1,501,184 ----a-w c:\windows\Internet Logs\xDB1.tmp

2008-10-05 16:06 --------- d-----w c:\documents and settings\Valerie\Application Data\vlc

2008-10-05 13:49 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP

2008-10-04 14:14 --------- d-----w c:\program files\Hero Editor

2008-10-04 14:12 249,856 ------w c:\windows\Setup1.exe

2008-10-04 14:11 73,216 ----a-w c:\windows\ST6UNST.EXE

2008-10-04 12:40 --------- d-----w c:\documents and settings\All Users\Application Data\PlatriumSA

2008-10-04 06:58 --------- d-----w c:\program files\Spybot - Search & Destroy

2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll

2008-09-28 09:33 --------- d-----w c:\documents and settings\All Users\Application Data\B3E85FAA-C316-40E0-BB3C-BF07959CAB7A

2008-09-28 09:32 --------- d-----w c:\program files\Platrium

2008-09-28 09:32 --------- d-----w c:\documents and settings\Valerie\Application Data\PlatriumWeather

2008-09-27 18:29 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!

2008-09-23 13:31 --------- d-----w c:\documents and settings\Oceane\Application Data\OpenOffice.org2

2008-09-21 11:22 --------- d-----w c:\documents and settings\Anthony\Application Data\DivX

2008-09-21 10:02 21,840 ----a-w c:\windows\system32\SIntfNT.dll

2008-09-21 10:02 17,212 ----a-w c:\windows\system32\SIntf32.dll

2008-09-21 10:02 12,067 ----a-w c:\windows\system32\SIntf16.dll

2008-09-21 09:46 2,829 ----a-w c:\windows\DIIUnin.pif

2008-09-21 09:46 102,400 ----a-w c:\windows\DIIUnin.exe

2008-09-21 09:21 --------- d-----w c:\program files\DivX

2008-09-20 22:43 --------- d-----w c:\program files\VirtualDubMOD

2008-09-20 17:33 --------- d-----w c:\program files\Google

2008-09-20 16:43 --------- d-----w c:\program files\TiLP-2

2008-09-20 16:41 --------- d-----w c:\program files\TI Education

2008-09-20 15:57 --------- d-----w c:\program files\Fichiers communs\TI Shared

2008-09-20 15:56 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard

2008-09-16 19:27 453,152 ----a-w c:\windows\system32\NVUNINST.EXE

2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys

2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll

2008-09-07 11:47 11,270 --sha-w c:\windows\system32\KGyGaAvL.sys

2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll

2008-08-30 18:49 107,888 ----a-w c:\windows\system32\CmdLineExt.dll

2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll

2008-08-21 18:41 1,221,008 ----a-w c:\windows\system32\zpeng25.dll

2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll

2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll

2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]

"EPSON Stylus DX8400 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE" [2007-04-12 182272]

"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-10-29 2610608]

"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2008-10-18 270128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13574144]

"SW20"="c:\windows\system32\sw20.exe" [2006-09-07 208896]

"SW24"="c:\windows\system32\sw24.exe" [2006-09-07 69632]

"WinSys2"="c:\windows\system32\winsys2.exe" [2006-10-03 217088]

"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-11-15 266497]

"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]

"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-11-15 981904]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 86016]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

"SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe]

"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 c:\windows\RTHDCPL.EXE]

"nwiz"="nwiz.exe" [2008-09-17 c:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Valerie\Menu D‚marrer\Programmes\D‚marrage\

OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-09-12 384000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"vidc.ffds"= c:\progra~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\BlueSoleil.lnk

backup=c:\windows\pss\BlueSoleil.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Valerie^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.4.lnk]

path=c:\documents and settings\Valerie\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.4.lnk

backup=c:\windows\pss\OpenOffice.org 2.4.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

--a------ 2008-06-12 01:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]

--a------ 2008-07-24 16:02 490952 c:\program files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\filehippo.com]

--a------ 2008-07-03 18:08 137216 c:\program files\filehippo.com\UpdateChecker.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]

--a------ 2008-10-29 10:42 2610608 c:\program files\Internet Download Manager\IDMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

--a------ 2008-06-24 15:06 1840424 c:\program files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveMonitor]

--a------ 2008-04-30 17:30 498176 c:\program files\MSI\Live Update 3\LMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

--a------ 2007-10-18 10:34 5724184 c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]

--a------ 2008-06-08 08:31 2221352 c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a------ 2008-06-19 08:53 570664 c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

--a------ 2008-05-06 09:42 202088 c:\program files\TomTom HOME 2\HOMERunner.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]

--a------ 2008-10-18 18:57 270128 c:\program files\uTorrent\uTorrent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\River Past\\Video Cleaner\\VideoCleaner.exe"=

"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=

"c:\\WINDOWS\\system32\\PnkBstrA.exe"=

"c:\\WINDOWS\\system32\\PnkBstrB.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 sK9Ou0s;sK9Ou0s;\??\c:\windows\system32\drivers\srosa2.sys [2008-11-15 7168]

R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-09-30 935208]

R2 PoliceService;PoliceService;c:\windows\system32\srksrv.exe [2008-11-04 453120]

R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2008-01-25 25088]

S2 PortTalk;PortTalk; []

S3 TiglUsb;TiglUsb.sys TI-GRAPH / DIRECT LINK USB driver;c:\windows\system32\Drivers\TiglUsb.sys []

*Newly Created Service* - CATCHME

*Newly Created Service* - PROCEXP90

.

Contenu du dossier 'Tâches planifiées'

2008-11-14 c:\windows\Tasks\Norton Security Scan.job

- c:\program files\Norton Security Scan\Nss.exe [2008-01-09 04:08]

.

- - - - ORPHELINS SUPPRIMES - - - -

BHO-{201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\AskBarDis\bar\bin\askBar.dll

Toolbar-{3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\AskBarDis\bar\bin\askBar.dll

.

------- Examen supplémentaire -------

.

FireFox -: Profile - c:\documents and settings\Anthony\Application Data\Mozilla\Firefox\Profiles\bbtm8cyw.default\

FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.galaxywars.fr/

FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll

FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll

FF -: plugin - c:\program files\Mozilla Firefox\plugins\npdeploytk.dll

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-11-16 00:24:46

Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

c:\documents and settings\Anthony\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 715 bytes hidden from API

Scan terminé avec succès

Fichiers cachés: 1

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet003\Services\srosa]

.

Heure de fin: 2008-11-16 0:33:00

ComboFix-quarantined-files.txt 2008-11-15 23:32:58

Avant-CF: 75,492,061,184 octets libres

Après-CF: 75,124,748,288 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

514 --- E O F --- 2008-11-13 16:02:10

Falkra · le 15 novembre 2008

Ca va aller mieux, mais il faudra réinstaller ton firewall et ton antivirus.

Tu as choppé ça (Bagle) par un crack infecté... ne réinfecte pas la bécane avec.

Télécharge Malwarebytes' Anti-Malware (MBAM)

Double clique sur le fichier téléchargé pour lancer le processus d'installation.
Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
Sélectionne "Exécuter un examen rapide"
Clique sur "Rechercher"
L'analyse démarre, le scan est relativement long, c'est normal.
A la fin de l'analyse, un message s'affiche :
L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés.
Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.

NB : Si MBAM te demande à redémarrer, fais-le.

finiarel · le 15 novembre 2008

je vai le faire mais lecan pren combien de temps et je reinstalle antivirus et pare feu maitenant ou apré le scan?

finiarel · le 16 novembre 2008

voila la rapport MBAM:

Malwarebytes' Anti-Malware 1.30

Version de la base de données: 1401

Windows 5.1.2600 Service Pack 3

16/11/2008 00:57:02

mbam-log-2008-11-16 (00-57-02).txt

Type de recherche: Examen rapide

Eléments examinés: 49633

Temps écoulé: 6 minute(s), 7 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 1

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 1

Processus mémoire infecté(s):