[RESOLU] Comment me débarrasser de AskToolbar ?

nanotek · le 3 avril 2010

Bonsoir Thanos,

Pour le nettoyage (concernant mon post précédent), voici ce que j'avais fait :

1 - Suppression de tous les programmes suspects (qui m'imposaient ask toolbar) par Regseeker, puis lessivage avec suppression des "éléments verts" de Regseeker.

2 - Suppression (dans l'Explorateur) des dossiers résiduels (non supprimés par Regseeker)

3 - Suppression, dans la Base de registre, de tout ce qui concernait les programmes suspects.

4 - Hijackthis, et Fix des lignes selon procédure conseillée

5 - Hijackthis, et Fix des lignes avec toolbar installée par Foxit Reader, ou non identifiée.

6 - Suppression de tous les anciens points de restauration, et création d'un point de restauration tout neuf.

Aucun problème depuis.

Mais, à titre de précaution, j'ai redémarré Rsit, qui m'a donné un log.txt et un hijackthis.log, mais, bizarrement, pas de info.txt.

Ci-dessous log.txt :

Logfile of random's system information tool 1.06 (written by random/random)

Run by pc at 2010-04-03 23:50:25

Microsoft Windows XP Édition familiale Service Pack 3

System drive C: has 33 GB (81%) free of 41 GB

Total RAM: 3071 MB (88% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:50:35, on 03/04/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.17023)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe

C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe

E:\Program Files\DVD Region+CSS Free\DVDRegionFree.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\system32\RunDll32.exe

C:\Documents and Settings\pc\Bureau\RSIT.exe

C:\Program Files\trend micro\pc.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"

O4 - HKLM\..\Run: [DVD43] E:\PROGRA~2\DVDREG~1\DVDRegionFree.exe /hidden

O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: DVDRegionFree.lnk = E:\Program Files\DVD Region+CSS Free\DVDRegionFree.exe

O8 - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_674125AABFE11C21.dll/cmsidewiki.html

O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/p...obat/nos/gp.cab

O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll

O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe

O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe

O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--

End of file - 5449 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]

IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-10-20 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]

FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-10-20 268816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-31 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-10-20 340456]

"DVD43"=E:\PROGRA~2\DVDREG~1\DVDRegionFree.exe [2006-08-03 259072]

"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-01-06 1657448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CleanSetup]

cmd /C rmdir /S /Q C:\Documents and Settings\pc\Local Settings\Temp\nro.tmp\ []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]

E:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-03-29 437584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Windows Search.lnk]

C:\PROGRA~1\WI459E~1\WINDOW~1.EXE [2008-05-26 123904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^pc^Menu Démarrer^Programmes^Démarrage^PrintKey 2000 Fr.lnk]

[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"Bonjour Service"=2

"UPS"=3

"TuneUp.Defrag"=3

"SCardSvr"=3

"RDSessMgr"=3

"RasMan"=3

"RasAuto"=3

"mnmsrvc"=3

"gusvc"=2

"gupdate1c98f693f51060"=2

"FolderSize"=2

"Dot3svc"=3

"CryptSvc"=2

"TapiSrv"=3

"SharedAccess"=2

"Schedule"=3

C:\Documents and Settings\pc\Menu Démarrer\Programmes\Démarrage

DVDRegionFree.lnk - E:\Program Files\DVD Region+CSS Free\DVDRegionFree.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]

C:\WINDOWS\system32\klogon.dll [2009-10-20 219664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{93994DE8-8239-4655-B1D1-5F4E91300429}"=E:\Program Files\DVD Region+CSS Free\DVDShell.dll [2004-10-09 49152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=323

"NoDrives"=0

"NoDriveAutoRun"=67108863

"NoActiveDesktop"=00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=

"HonorAutoRunSetting"=

"NoDriveAutoRun"=

"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS"

"C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Disabled:Microsoft Management Console"

"E:\Program Files\Mozilla_Firefox_3\firefox.exe"="E:\Program Files\Mozilla_Firefox_3\firefox.exe:*:Enabled:Firefox"

"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Disabled:Microsoft DirectPlay Voice Test"

"E:\Program Files\Free Music Zilla\FMZilla.exe"="E:\Program Files\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-04-03 12:54:10 ----D---- C:\Program Files\Ask.com

2010-04-03 12:53:57 ----D---- C:\Program Files\Foxit Software

2010-04-02 19:34:34 ----D---- C:\Documents and Settings\pc\Application Data\DAEMON Tools Lite

2010-04-02 19:34:24 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite

2010-04-01 21:16:14 ----D---- C:\rsit

2010-04-01 21:16:14 ----D---- C:\Program Files\trend micro

2010-04-01 09:55:37 ----A---- C:\TB.txt

2010-04-01 09:54:40 ----D---- C:\ToolBar SD

2010-03-31 15:57:45 ----A---- C:\WINDOWS\system32\javaws.exe

2010-03-31 15:57:44 ----A---- C:\WINDOWS\system32\javaw.exe

2010-03-31 15:57:44 ----A---- C:\WINDOWS\system32\java.exe

2010-03-31 14:37:02 ----D---- C:\Program Files\Fichiers communs\Java

2010-03-30 08:39:01 ----D---- C:\Program Files\Fichiers communs\Nero

2010-03-30 07:50:34 ----A---- C:\mbam-error.txt

2010-03-28 14:00:47 ----D---- C:\Program Files\NVIDIA Corporation

2010-03-28 10:58:13 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation

2010-03-28 10:58:05 ----D---- C:\Program Files\NVIDIA Corporation-nv28513

2010-03-24 13:05:14 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard

2010-03-21 22:27:59 ----D---- C:\Documents and Settings\pc\Application Data\DeepBurner

2010-03-20 20:58:16 ----SHD---- C:\Documents and Settings\All Users\Application Data\System Restore

2010-03-17 12:12:27 ----A---- C:\WINDOWS\system32\TURegOpt.exe

2010-03-17 12:12:24 ----A---- C:\WINDOWS\system32\uxtuneup.dll

2010-03-17 12:10:45 ----D---- C:\Documents and Settings\pc\Application Data\TuneUp Software

2010-03-17 12:10:02 ----D---- C:\Program Files\TuneUp Utilities 2010

2010-03-17 12:09:51 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software

2010-03-17 12:09:34 ----SHD---- C:\Documents and Settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}

2010-03-12 23:04:18 ----D---- C:\Documents and Settings\pc\Application Data\Foxit

2010-03-07 22:28:12 ----D---- C:\Program Files\TV Orange

2010-03-07 22:15:28 ----D---- C:\Program Files\adslTV

2010-03-05 23:45:30 ----D---- C:\Documents and Settings\pc\Application Data\vlc

======List of files/folders modified in the last 1 months======

2010-04-03 23:42:44 ----D---- C:\WINDOWS\Temp

2010-04-03 23:42:42 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab

2010-04-03 23:42:35 ----A---- C:\WINDOWS\DVDRegionFree.INI

2010-04-03 23:42:20 ----SD---- C:\WINDOWS\Tasks

2010-04-03 15:58:30 ----SHD---- C:\System Volume Information

2010-04-03 15:58:30 ----D---- C:\WINDOWS\system32\Restore

2010-04-03 15:49:07 ----A---- C:\WINDOWS\npornap.INI

2010-04-03 14:58:01 ----SHD---- C:\WINDOWS\Installer

2010-04-03 14:57:57 ----D---- C:\WINDOWS\WinSxS

2010-04-03 12:54:10 ----RD---- C:\Program Files

2010-04-02 20:59:38 ----D---- C:\WINDOWS

2010-04-02 20:08:48 ----HD---- C:\WINDOWS\inf

2010-04-02 20:08:44 ----D---- C:\WINDOWS\system32\CatRoot2

2010-04-02 19:36:12 ----D---- C:\WINDOWS\system32\drivers

2010-03-31 15:57:47 ----D---- C:\WINDOWS\system32

2010-03-31 15:57:08 ----A---- C:\WINDOWS\system32\deploytk.dll

2010-03-31 14:37:02 ----D---- C:\Program Files\Fichiers communs

2010-03-31 08:48:42 ----D---- C:\Program Files\Internet Explorer

2010-03-31 08:46:57 ----RSHDC---- C:\WINDOWS\system32\dllcache

2010-03-31 08:46:55 ----D---- C:\WINDOWS\system32\fr-fr

2010-03-31 08:41:20 ----HD---- C:\WINDOWS\$hf_mig$

2010-03-28 14:02:42 ----D---- C:\WINDOWS\system32\CatRoot

2010-03-28 14:01:28 ----D---- C:\WINDOWS\Help

2010-03-28 10:59:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-03-27 11:41:54 ----D---- C:\WINDOWS\system32\wbem

2010-03-23 12:19:40 ----D---- C:\WINDOWS\Prefetch

2010-03-18 00:09:17 ----D---- C:\WINDOWS\system32\config

2010-03-17 17:15:29 ----D---- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited

2010-03-14 10:46:45 ----D---- C:\WINDOWS\Microsoft.NET

2010-03-14 10:46:40 ----RSD---- C:\WINDOWS\assembly

2010-03-11 14:34:41 ----A---- C:\WINDOWS\system32\wininet.dll

2010-03-11 14:34:40 ----A---- C:\WINDOWS\system32\webcheck.dll

2010-03-11 14:34:40 ----A---- C:\WINDOWS\system32\urlmon.dll

2010-03-11 14:34:40 ----A---- C:\WINDOWS\system32\url.dll

2010-03-11 14:34:40 ----A---- C:\WINDOWS\system32\pngfilt.dll

2010-03-11 14:34:40 ----A---- C:\WINDOWS\system32\occache.dll

2010-03-11 14:34:39 ----A---- C:\WINDOWS\system32\mstime.dll

2010-03-11 14:34:39 ----A---- C:\WINDOWS\system32\msrating.dll

2010-03-11 14:34:39 ----A---- C:\WINDOWS\system32\mshtmled.dll

2010-03-11 14:34:39 ----A---- C:\WINDOWS\system32\mshtml.dll

2010-03-11 14:34:37 ----A---- C:\WINDOWS\system32\msfeedsbs.dll

2010-03-11 14:34:37 ----A---- C:\WINDOWS\system32\msfeeds.dll

2010-03-11 14:34:36 ----A---- C:\WINDOWS\system32\jsproxy.dll

2010-03-11 14:34:36 ----A---- C:\WINDOWS\system32\iertutil.dll

2010-03-11 14:34:35 ----A---- C:\WINDOWS\system32\iernonce.dll

2010-03-11 14:34:35 ----A---- C:\WINDOWS\system32\iepeers.dll

2010-03-11 14:34:35 ----A---- C:\WINDOWS\system32\ieframe.dll

2010-03-11 14:34:32 ----A---- C:\WINDOWS\system32\ieencode.dll

2010-03-11 14:34:32 ----A---- C:\WINDOWS\system32\iedkcs32.dll

2010-03-11 14:34:32 ----A---- C:\WINDOWS\system32\ieapfltr.dll

2010-03-11 14:34:31 ----A---- C:\WINDOWS\system32\ieaksie.dll

2010-03-11 14:34:31 ----A---- C:\WINDOWS\system32\ieakeng.dll

2010-03-11 14:34:31 ----A---- C:\WINDOWS\system32\icardie.dll

2010-03-11 14:34:31 ----A---- C:\WINDOWS\system32\dxtrans.dll

2010-03-11 14:34:31 ----A---- C:\WINDOWS\system32\dxtmsft.dll

2010-03-11 14:34:31 -------- C:\WINDOWS\system32\extmgr.dll

2010-03-11 14:34:30 ----A---- C:\WINDOWS\system32\corpol.dll

2010-03-11 14:34:30 ----A---- C:\WINDOWS\system32\advpack.dll

2010-03-10 15:19:17 ----A---- C:\WINDOWS\system32\ie4uinit.exe

2010-03-10 10:42:45 ----D---- C:\WINDOWS\Debug

2010-03-10 10:19:00 ----A---- C:\WINDOWS\win.ini

2010-03-10 10:17:59 ----D---- C:\Program Files\Movie Maker

2010-03-06 00:14:45 ----D---- C:\Program Files\Fichiers communs\windows

2010-03-04 06:07:58 ----D---- C:\WINDOWS\pchealth

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2006-10-19 12664]

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]

R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

R1 kl1;Kl1; \??\C:\WINDOWS\system32\drivers\kl1.sys []

R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-11-17 315408]

R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]

R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l151x86.sys [2008-11-12 37376]

R3 Dvd43;Dvd43; C:\WINDOWS\System32\DRIVERS\Dvd43.sys [2009-10-31 35296]

R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-10-02 4613120]

R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-09-14 32272]

R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]

R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]

R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-01-12 10276768]

R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys []

R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]

R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]

R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

S1 eeCtrl;eeCtrl; C:\WINDOWS\system32\drivers\eeCtrl.sys []

S3 av350x6q;av350x6q; C:\WINDOWS\system32\drivers\av350x6q.sys []

S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []

S3 RkPavproc1;RkPavproc1; C:\WINDOWS\system32\drivers\RkPavproc1.sys [2008-04-29 16952]

S3 RkPavproc2;RkPavproc2; C:\WINDOWS\system32\drivers\RkPavproc2.sys [2008-04-29 16952]

S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 7168]

S3 TSP;TSP; \??\C:\WINDOWS\system32\drivers\klif.sys []

S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-10-20 340456]

R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-09-25 65536]

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-31 153376]

R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]

R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-02-25 1047880]

S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-22 183280]

S2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-03-17 435016]

S3 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]

S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-24 918016]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF----------------

et Hijackthis.log :