Se connecter / S'enregistrer
Votre question

Infection virus

Tags :
  • Sécurité
Dernière réponse : dans Sécurité et virus
17 Janvier 2009 20:25:46

bonjour je pense avoir un virus car mon pc rame un peut. quelqu'un peut-il m'aider suis novice en informatique. par avance mercie pour les reponses qui me seront apporter.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:22:29, on 17/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\olivier\AppData\Local\gioaksk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Users\olivier\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Afficher Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "J:\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [gioaksk] "c:\users\olivier\appdata\local\gioaksk.exe" gioaksk
O4 - HKCU\..\Run: [drvsyskit] C:\Users\olivier\AppData\Roaming\drivers\winupgro.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8....
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common...
O21 - SSODL: vadokmxt - {DAB3293C-05FE-4A4B-8597-C3DB004CE2BF} - (no file)
O21 - SSODL: wdpoefan - {0D6B3FEB-A35E-4B39-9652-61491C37D924} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: EasyBits Magic Desktop Services for Windows NT (ezntsvc) - EasyBits Software Corp. - C:\Windows\system32\ezNTSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: FrontLine Drivers Update Tool Drivers Auto Removal (pr2ajbeb) (pr2ajbeb) - Unknown owner - C:\Windows\system32\pr2ajbeb.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

--
End of file - 10731 bytes

Autres pages sur : infection virus

17 Janvier 2009 20:30:15

:hello:  Bonjour,

Je vais t'aider à résoudre ton problème. Merci de suivre à la lettre mes instructions et de ne pas prendre d'initiatives personnelles. Si tu as la moindre question, je suis à ton écoute.

Merci de prendre en compte que je suis bénévole et que j'ai une vie privée : je passe au moins une fois par jour.

Si tu penses avoir été oublié, envoie-moi un MP pour me le signaler.

1) Télécharge Gmer.

  • Dézippe-le dans un dossier dédié ou sur ton Bureau.
  • Déconnecte toi d'Internet puis ferme tous les programmes.
  • Double-clique sur Gmer.exe.
    Si une alerte de ton antivirus apparaît pour le fichier gmer.sys ou gmer.exe, laisse le s'executer.
  • Clique sur l'onglet Rootkit.
  • A droite, coche tout.
  • Clique maintenant sur Scan.
  • Lorsque le scan est terminé, clique sur Copy.
  • Ouvre le Bloc-notes puis clique sur le Menu Edition / Coller.
  • Le rapport doit alors apparaître.
  • Enregistre le fichier sur ton Bureau et upload-le sur mediafire.

    Uploader un fichier sur mediafire :

  • Rends-toi sur ce lien : http://www.mediafire.com/
  • Clique en haut sur "Upload files To Media fire". Choisis ensuite "I want to upload without an account"
  • Une fenêtre de ton explorateur windows va s'ouvrir. Navigue jusqu'au rapport que je te demande d'uploader, sélectionne-le puis clique sur "ouvrir".
  • Clique ensuite sur "Upload".
  • A droite de l'écran, choisis : "upload to a new folder". Laisse le nom par défaut ( = la date )
  • Valide et laisse l'upload se faire.
  • Clique sur "Vieuw uploaded file" et copie-moi l'url ( = le lien ) du nouvel onglet ou de la nouvelle fenêtre qui va s'ouvrir dans ton prochain message. Ainsi, je pourrais télécharger le rapport demandé.

    2) Télécharge DDS de sUBs et sauvegarde-le sur ton bureau.
  • Désactive tout script bloquant, tel q'un antivirus, un logiciel comme ad-block, noscript etc.
  • Double-clique sur dds.scr pour lancer l'outil. Ne double clique qu'une seule fois dessus, sois patient !
  • Une fois le scan fini, un document texte, DDS.txt, va s'ouvrir .
  • Clique Oui à la prochaine invite Optional Scan.
  • Sauvegarde les deux rapports sur ton bureau et poste-moi uniquement le DDS.txt, garde l'autre sous la main si jamais je te le demande. Copie/colle le rapport sur le forum. N'uploade des fichiers sur mediafire que si j'en fais la demande explicite.

    ;) 
    17 Janvier 2009 20:33:26

    ok vais faire ça et te tiens au courant
    Contenus similaires
    17 Janvier 2009 21:30:31

    http://www.mediafire.com/?0oenzzjkztz



    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-01-07.01)

    Microsoft® Windows Vista™ Édition Familiale Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 18/06/2007 22:24:25
    System Uptime: 17/01/2009 17:32:35 (4 hours ago)

    Motherboard: ECS | | Nettle2
    Processor: AMD Athlon(tm) 64 Processor 3800+ | Socket M2 | 2400/201mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 118 GiB total, 29,349 GiB free.
    D: is FIXED (NTFS) - 8 GiB total, 0,815 GiB free.
    E: is CDROM ()
    F: is Removable
    G: is CDROM ()
    H: is Removable
    I: is Removable
    J: is FIXED (NTFS) - 50 GiB total, 35,164 GiB free.
    K: is FIXED (NTFS) - 58 GiB total, 34,846 GiB free.
    L: is CDROM ()
    N: is Removable

    ==== Disabled Device Manager Items =============

    Class GUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}
    Description: SCSI/RAID Host Controller
    Device ID: ACPI\PNPA000\4&632D6191&1
    Manufacturer:
    Name: SCSI/RAID Host Controller
    PNP Device ID: ACPI\PNPA000\4&632D6191&1
    Service: abqmyavm

    ==== System Restore Points ===================

    RP726: 14/01/2009 19:44:24 - Point de contrôle planifié
    RP727: 16/01/2009 01:56:44 - Windows Update
    RP728: 16/01/2009 20:04:45 - Windows Update
    RP729: 16/01/2009 21:51:47 - Windows Update
    RP730: 17/01/2009 10:26:25 - Removed Ad-Aware 2007
    RP731: 17/01/2009 10:29:54 - Installed Ad-Aware
    RP732: 17/01/2009 14:38:18 - Removed Ad-Aware
    RP733: 17/01/2009 14:50:41 - Installed Ad-Aware

    ==== Installed Programs ======================

    2007 Microsoft Office Suite Service Pack 1 (SP1)
    32 Bit HP CIO Components Installer
    7-Zip 4.42
    Activation Assistant for the 2007 Microsoft Office suites
    Ad-Aware
    Adobe Acrobat 5.0
    Adobe Flash Player ActiveX
    Adobe Flash Player Plugin
    Adobe Reader 9 - Français
    AGEIA PhysX v6.12.02
    AIO_CDA_ProductContext
    AIO_CDA_Software
    AIO_Scan
    AppCore
    Archiveur WinRAR
    Assistant de connexion Windows Live
    AVI ReComp 1.3.0
    AviSynth 2.5
    BitTorrent
    BufferChm
    C3100
    c3100_Help
    ccCommon
    Cerebral Sherlock
    Choice Guard
    Compel Adaptec WinASPI
    Component Framework
    Copy
    CustomerResearchQFolder
    DAEMON Tools Toolbar
    Destinations
    DeviceManagementQFolder
    Disney's Magic Artist Cartoon Maker
    Disney Dingo Extrême Skateboarding
    DivxToDVD 0.5.2
    DNA
    DocProc
    DocProcQFolder
    Dora l'exploratrice : Les animaux de la jungle
    Dora La Cité Perdue
    Dora Sakado
    Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)
    DVD Shrink 3.2
    EasyBits Magic Desktop
    eMule
    eSupportQFolder
    Everest Poker (Remove Only)
    Favorit
    Fax
    ffdshow [rev 497] [2006-11-04]
    Free Mp3 Wma Converter V 1.5.5
    Galerie de photos Windows Live
    GameCenter
    GamesBar 1.1.0.5
    Google Toolbar for Internet Explorer
    HijackThis 2.0.2
    HP Customer Experience Enhancements
    HP Customer Feedback
    HP Customer Participation Program 8.0
    HP Easy Setup - Frontend
    HP Imaging Device Functions 8.0
    HP OCR Software 8.0
    HP On-Screen Cap/Num/Scroll Lock Indicator
    HP Photosmart Essential
    HP Photosmart Essential 2.0
    HP Photosmart Essential2.5
    HP Photosmart.All-In-One Driver Software 8.0 .A
    HP Picasso Media Center Add-In
    HP Solution Center 8.0
    HP Update
    HPProductAssistant
    HPSSupply
    ImgBurn 2.3.2.0 Fr
    Installation Windows Live
    Installation Wizard
    Java(TM) 6 Update 11
    Junk Mail filter update
    jv16 PowerTools 2008
    K-Lite Codec Pack 3.9.0 Full
    Le pic rouge
    Legendo's Les Trois Mousquetaires
    Les Ch'tis au Camping
    LightScribe 1.4.142.1
    LiveUpdate (Symantec Corporation)
    LiveUpdate Notice (Symantec Corporation)
    LucasArts' Curse of Monkey Island
    Ma-Config.com
    Macromedia Flash Player 8
    MarketResearch
    Menus intelligents (Windows Live Toolbar)
    Microsoft Application Error Reporting
    Microsoft Games for Windows - LIVE Redistributable
    Microsoft Office Excel MUI (French) 2007
    Microsoft Office Home and Student 2007
    Microsoft Office Language Pack 2007 Service Pack 1 (SP1)
    Microsoft Office Live Add-in 1.3
    Microsoft Office OneNote MUI (French) 2007
    Microsoft Office PowerPoint MUI (French) 2007
    Microsoft Office Proof (Arabic) 2007
    Microsoft Office Proof (Dutch) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (German) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (French) 2007
    Microsoft Office Shared MUI (French) 2007
    Microsoft Office Word MUI (French) 2007
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Works
    Mozilla Firefox (3.0.5)
    MSVCRT
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB941833)
    MSXML 4.0 SP2 (KB954430)
    Nathan Francais CP
    No Man's Land
    Norton AntiVirus
    Norton AntiVirus Help
    Norton Confidential Core
    Norton Internet Security
    Norton Internet Security (Symantec Corporation)
    Norton Protection Center
    NVIDIA Drivers
    OpenOffice.org Installer 1.0
    Outil de téléchargement Windows Live
    Outils de diagnostic du matériel
    Photo Story 3 for Windows
    Pochette Express 2
    PSSWCORE
    Python 2.4.3
    QuickTime
    RCT3 Soaked
    RealPlayer
    Realtek High Definition Audio Driver
    RollerCoaster Tycoon 3
    Roxio Activation Module
    Roxio Creator Audio
    Roxio Creator Basic v9
    Roxio Creator Copy
    Roxio Creator Data
    Roxio Creator EasyArchive
    Roxio Creator Tools
    Roxio Express Labeler 3
    Roxio MyDVD Basic v9
    Scan
    Scooby-Doo(TM), Panique dans la Ville fantôme(TM)
    Security Update for 2007 Microsoft Office System (KB951550)
    Security Update for 2007 Microsoft Office System (KB951944)
    Security Update for 2007 Microsoft Office System (KB958439)
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft Office Excel 2007 (KB958437)
    Security Update for Microsoft Office OneNote 2007 (KB950130)
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)
    Security Update for Microsoft Office system 2007 (KB954326)
    Security Update for Microsoft Office system 2007 (KB956828)
    Security Update for Microsoft Office Word 2007 (KB956358)
    Security Update for Visio 2007 (KB947590)
    Solution de clavier multimédia amélioré
    SolutionCenter
    SopCast 3.0.3
    Sothink Movie DVD Maker
    SPBBC 32bit
    Spelling Dictionaries Support For Adobe Reader 8
    Status
    Symantec Real Time Storage Protection Component
    SymNet
    TomCat Soft : Le Jeu des Petits Chevaux
    Toolbox
    TrayApp
    TVAnts 1.0
    UnloadSupport
    Update for Microsoft Office Excel 2007 Help (KB957242)
    Update for Office 2007 (KB946691)
    VideoLAN VLC media player 0.8.6c
    VobSub v2.23 (Remove Only)
    WebReg
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Contrôle parental
    Windows Live Mail
    Windows Live Messenger
    Windows Live Sync
    Windows Live Toolbar
    Windows Live Writer
    Windows Media Player Firefox Plugin
    Xvid 1.1.2 final uninstall

    ==== End Of File ===========================
    17 Janvier 2009 23:07:49


    DDS (Ver_09-01-07.01) - NTFSx86
    Run by olivier at 21:24:39,45 on 17/01/2009
    Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_11
    Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.894.136 [GMT 1:00]

    AV: Norton Internet Security *On-access scanning disabled* (Outdated)
    FW: Norton Internet Security *disabled*

    ============== Running Processes ===============

    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe -k rpcss
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Windows\RtHDVCpl.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Users\olivier\AppData\Local\gioaksk.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Windows\system32\ezNTSvc.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Windows\system32\svchost.exe -k hpdevmgmt
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\IEUser.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    C:\Windows\system32\conime.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Users\olivier\Desktop\dds.scr
    C:\Windows\system32\wbem\wmiprvse.exe

    ============== Pseudo HJT Report ===============

    uSearch Bar = hxxp://recherche.neuf.fr/ie/default.html
    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=73&bd=Pavilion&pf=desktop
    mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=73&bd=Pavilion&pf=desktop
    mDefault_Search_URL = hxxp://recherche.neuf.fr/
    uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    mSearchAssistant = hxxp://recherche.neuf.fr/ie/default.html
    mWinlogon: Userinit=c:\windows\system32\ezShellStart.exe
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: NCO 2.0 IE BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\common files\symantec shared\coshared\browser\2.0\coIEPlg.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
    BHO: Programme d'aide de l'Assistant de connexion Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\2.1.1119.1736\swg.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
    TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
    TB: Afficher Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\common files\symantec shared\coshared\browser\2.0\CoIEPlg.dll
    TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
    TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
    TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
    EB: &winbutler bar: {5b6d45f9-19ed-419a-84c5-7049ef9c7e8b} - %SystemRoot%\system32\shdocvw.dll
    uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
    uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
    uRun: [gioaksk] "c:\users\olivier\appdata\local\gioaksk.exe" gioaksk
    uRun: [drvsyskit] c:\users\olivier\appdata\roaming\drivers\winupgro.exe
    uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
    mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    mRun: [KBD] c:\hp\kbd\KbdStub.EXE
    mRun: [OsdMaestro] "c:\program files\hewlett-packard\on-screen osd indicator\OSD.exe"
    mRun: [RtHDVCpl] RtHDVCpl.exe
    mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
    mRun: [snpstd3] c:\windows\vsnpstd3.exe
    mRun: [fssui] "c:\program files\windows live\family safety\fsui.exe" -autorun
    mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
    mRun: [QuickTime Task] "J:\qttask.exe" -atboottime
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
    StartupFolder: c:\users\olivier\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
    uPolicies-system: DisableTaskMgr = 1 (0x1)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: E&xporter vers Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
    IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\ssv.dll
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
    Handler: ms-its51 - {F6F1E82D-DE4D-11D2-875C-0000F8105754} - c:\program files\common files\microsoft shared\information retrieval\itss51.dll
    SSODL: vadokmxt - {DAB3293C-05FE-4A4B-8597-C3DB004CE2BF} - No File
    SSODL: wdpoefan - {0D6B3FEB-A35E-4B39-9652-61491C37D924} - No File
    SEH: EasyBits ShellExecute Hook: {e54729e8-bb3d-4270-9d49-7389ea579090} - c:\windows\system32\EZUPBH~1.DLL

    ================= FIREFOX ===================

    FF - ProfilePath - c:\users\olivier\appdata\roaming\mozilla\firefox\profiles\3o7qk2za.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
    FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - component: c:\program files\daemon tools toolbar\firefoxdtt\components\DTToolbarFF.dll
    FF - component: c:\program files\mozilla firefox\components\coFFPlgn.dll
    FF - plugin: c:\program files\bittorrent_dna\npbtdna.dll
    FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - plugin: c:\users\olivier\program files\dna\plugins\npbtdna.dll

    ---- FIREFOX POLICIES ----
    FF - user.js: yahoo.homepage.dontask - true
    ============= SERVICES / DRIVERS ===============

    R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\symantec\defini~1\symcdata\ipsdefs\20090113.002\IDSvix86.sys [2009-1-14 270384]
    R1 sK9Ou0s;sK9Ou0s;c:\users\olivier\appdata\roaming\drivers\srosa2.sys [2009-1-16 7168]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2008-9-5 99376]
    R3 SYMNDISV;SYMNDISV;c:\windows\system32\drivers\symndisv.sys [2008-6-13 41008]
    R4 athsgt;athsgt;c:\windows\system32\drivers\athsgt.sys [2008-5-24 164992]
    R4 ezntsvc;EasyBits Magic Desktop Services for Windows NT;c:\windows\system32\ezntsvc.exe [2007-8-22 33792]
    R4 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2009-1-13 55264]
    R4 fsssvc;Windows Live Contrôle parental;c:\program files\windows live\family safety\fsssvc.exe [2008-12-8 533344]
    R4 limsgt;limsgt;c:\windows\system32\drivers\limsgt.sys [2008-5-24 12544]
    R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\common files\symantec shared\CCSVCHST.EXE [2008-4-23 149352]
    R4 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2008-12-4 226640]
    S3 Boonty Games;Boonty Games;c:\program files\common files\boonty shared\service\Boonty.exe [2008-4-27 69120]
    S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2007-5-29 23888]
    S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-7-25 191656]
    S4 pr2ajbeb;FrontLine Drivers Update Tool Drivers Auto Removal (pr2ajbeb);c:\windows\system32\pr2ajbeb.exe svc --> c:\windows\system32\pr2ajbeb.exe svc [?]

    =============== Created Last 30 ================

    2009-01-17 20:42 250 a------- c:\windows\gmer.ini
    2009-01-17 19:01 <DIR> --d----- C:\ToolBar SD
    2009-01-17 17:16 108,336 a------- c:\windows\system32\Mswinsck.OCX
    2009-01-17 17:16 <DIR> --d----- c:\program files\Setup Wizard
    2009-01-16 17:39 <DIR> --d----- c:\program files\Panda Security
    2009-01-16 16:06 <DIR> --d----- c:\programdata\DAEMON Tools Lite
    2009-01-16 16:06 <DIR> --d----- c:\progra~2\DAEMON Tools Lite
    2009-01-16 16:05 <DIR> --d----- c:\program files\DAEMON Tools Toolbar
    2009-01-16 16:04 <DIR> --d----- c:\users\olivier\appdata\roaming\DAEMON Tools Lite
    2009-01-16 15:42 <DIR> --d-h--- c:\users\olivier\appdata\roaming\drivers
    2009-01-13 23:11 288,768 a------- c:\windows\system32\drivers\srv.sys
    2009-01-13 11:56 <DIR> --d----- c:\users\olivier\Tracing
    2009-01-13 10:41 55,264 a------- c:\windows\system32\drivers\fssfltr.sys
    2009-01-13 10:14 <DIR> --d----- c:\program files\Microsoft
    2009-01-13 10:14 <DIR> --d----- c:\program files\Windows Live SkyDrive
    2009-01-13 09:33 <DIR> --d----- c:\program files\common files\Windows Live
    2008-12-19 09:03 410,984 a------- c:\windows\system32\deploytk.dll

    ==================== Find3M ====================

    2009-01-17 17:30 669,652 a------- c:\windows\system32\perfh00C.dat
    2009-01-17 17:30 123,690 a------- c:\windows\system32\perfc00C.dat
    2009-01-16 10:22 138 a------- c:\users\olivier\appdata\roaming\wklnhst.dat
    2009-01-11 10:13 124,464 a------- c:\windows\system32\drivers\SYMEVENT.SYS
    2009-01-11 10:13 10,635 a------- c:\windows\system32\drivers\SYMEVENT.CAT
    2009-01-11 10:13 806 a------- c:\windows\system32\drivers\SYMEVENT.INF
    2009-01-05 15:06 146,351 a------- c:\windows\hpoins18.dat
    2008-12-05 00:11 308,584 a------- c:\windows\WLXPGSS.SCR
    2008-12-02 22:37 49,480 a------- c:\windows\system32\sirenacm.dll
    2008-11-01 04:44 52,736 a------- c:\windows\apppatch\iebrshim.dll
    2008-11-01 04:44 2,154,496 a------- c:\windows\apppatch\AcGenral.dll
    2008-11-01 04:44 541,696 a------- c:\windows\apppatch\AcLayers.dll
    2008-11-01 04:44 460,288 a------- c:\windows\apppatch\AcSpecfc.dll
    2008-11-01 04:44 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
    2008-11-01 04:44 28,672 a------- c:\windows\system32\Apphlpdm.dll
    2008-11-01 02:21 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
    2008-10-29 07:29 2,927,104 a------- c:\windows\explorer.exe
    2008-10-22 04:57 241,152 a------- c:\windows\system32\PortableDeviceApi.dll
    2008-10-22 02:22 2,048 a------- c:\windows\system32\tzres.dll
    2008-10-21 06:25 296,960 a------- c:\windows\system32\gdi32.dll
    2008-10-21 06:25 1,645,568 a------- c:\windows\system32\connect.dll
    2008-09-18 19:03 143,360 a------- c:\windows\inf\infstrng.dat
    2008-09-18 19:03 51,200 a------- c:\windows\inf\infpub.dat
    2008-09-18 19:03 86,016 a------- c:\windows\inf\infstor.dat
    2008-06-12 02:12 665,600 a------- c:\windows\inf\drvindex.dat
    2008-06-04 12:35 174 a--sh--- c:\program files\desktop.ini
    2007-11-19 18:54 87,608 a------- c:\users\olivier\appdata\roaming\inst.exe
    2007-11-19 18:54 47,360 a------- c:\users\olivier\appdata\roaming\pcouffin.sys
    2007-01-03 21:23 340,236 a------- c:\windows\inf\perflib\040c\perfi.dat
    2007-01-03 21:23 340,236 a------- c:\windows\inf\perflib\040c\perfh.dat
    2007-01-03 21:23 37,390 a------- c:\windows\inf\perflib\040c\perfd.dat
    2007-01-03 21:23 37,390 a------- c:\windows\inf\perflib\040c\perfc.dat
    2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
    2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
    2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
    2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
    2007-10-16 16:39 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
    2007-10-16 16:39 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
    2007-10-16 16:39 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat
    2008-05-10 16:37 23 a--sh--- c:\windows\system32\fcdbfafcfce4_z.dll

    ============= FINISH: 21:25:58,29 ===============
    17 Janvier 2009 23:26:37

    Re,

    [#ff0000]! Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]

  • Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
  • Double clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
  • Il va te demander d'installer la console de récupération : accepte.
  • Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\combofix.txt*) dans ta prochaine réponse.


    AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
    * le nom de la partition peut changer

    ;) 
    18 Janvier 2009 09:38:56

    re voici log combofix


    ComboFix 09-01-17.03 - olivier 2009-01-18 9:21:59.1 - NTFSx86
    Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.894.193 [GMT 1:00]
    Lancé depuis: c:\users\olivier\Desktop\ComboFix.exe
    AV: Norton Internet Security *On-access scanning disabled* (Outdated)
    FW: Norton Internet Security *disabled*
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\program files\Setup Wizard
    c:\program files\Setup Wizard\settings.ini
    c:\program files\Setup Wizard\SetupWizard.exe
    c:\program files\Setup Wizard\spywaredoctor.exe
    c:\program files\Setup Wizard\unins000.dat
    c:\program files\Setup Wizard\unins000.exe
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Setup Wizard
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Setup Wizard\Désinstaller SetupWizard.lnk
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Setup Wizard\SetupWizard.lnk
    c:\users\olivier\AppData\Local\gioaksk.dat
    c:\users\olivier\AppData\Local\gioaksk.exe
    c:\users\olivier\AppData\Local\gioaksk_nav.dat
    c:\users\olivier\AppData\Local\gioaksk_navps.dat
    c:\users\olivier\AppData\Roaming\drivers\downld
    c:\users\olivier\AppData\Roaming\drivers\srosa2.sys
    c:\users\olivier\AppData\Roaming\drivers\winupgro.exe
    c:\users\olivier\AppData\Roaming\inst.exe

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_SK9OU0S
    -------\Service_Boonty Games
    -------\Service_sK9Ou0s
    -------\Service_srosa


    ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-18 au 2009-01-18 ))))))))))))))))))))))))))))))))))))
    .

    2009-01-17 20:42 . 2009-01-17 20:42 250 --a------ c:\windows\gmer.ini
    2009-01-17 19:01 . 2009-01-17 19:14 <REP> d-------- C:\ToolBar SD
    2009-01-17 17:16 . 2005-06-06 13:31 108,336 --a------ c:\windows\System32\Mswinsck.OCX
    2009-01-16 18:56 . 2009-01-16 19:09 <REP> d-------- c:\windows\BDOSCAN8
    2009-01-16 17:51 . 2009-01-16 17:51 <REP> d-------- c:\windows\Sun
    2009-01-16 17:39 . 2009-01-17 14:35 <REP> d-------- c:\program files\Panda Security
    2009-01-16 16:06 . 2009-01-16 16:06 <REP> d-------- c:\users\All Users\DAEMON Tools Lite
    2009-01-16 16:06 . 2009-01-16 16:06 <REP> d-------- c:\programdata\DAEMON Tools Lite
    2009-01-16 16:05 . 2009-01-16 16:06 <REP> d-------- c:\program files\DAEMON Tools Toolbar
    2009-01-16 16:04 . 2009-01-16 16:08 <REP> d-------- c:\users\olivier\AppData\Roaming\DAEMON Tools Lite
    2009-01-16 15:42 . 2009-01-18 09:24 <REP> d--h----- c:\users\olivier\AppData\Roaming\drivers
    2009-01-13 23:11 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys
    2009-01-13 11:56 . 2009-01-17 19:48 <REP> d-------- c:\users\olivier\Tracing
    2009-01-13 10:41 . 2008-12-08 17:01 55,264 --a------ c:\windows\System32\drivers\fssfltr.sys
    2009-01-13 10:36 . 2009-01-13 10:36 <REP> d-------- c:\program files\Microsoft Sync Framework
    2009-01-13 10:14 . 2009-01-13 10:14 <REP> d-------- c:\program files\Windows Live SkyDrive
    2009-01-13 10:14 . 2009-01-13 10:43 <REP> d-------- c:\program files\Microsoft
    2009-01-13 09:33 . 2009-01-13 09:33 <REP> d-------- c:\program files\Common Files\Windows Live
    2008-12-19 09:03 . 2008-12-19 09:00 410,984 --a------ c:\windows\System32\deploytk.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-01-17 16:31 --------- d---a-w c:\programdata\TEMP
    2009-01-17 16:13 --------- d-----w c:\users\olivier\AppData\Roaming\BitTorrent
    2009-01-17 13:49 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
    2009-01-17 09:30 --------- d-----w c:\program files\Lavasoft
    2009-01-17 09:25 --------- d-----w c:\programdata\Lavasoft
    2009-01-16 20:57 --------- d-----w c:\program files\Windows Mail
    2009-01-16 15:18 --------- d-----w c:\program files\DAEMON Tools Lite
    2009-01-16 15:08 --------- d-----w c:\users\olivier\AppData\Roaming\DAEMON Tools Pro
    2009-01-16 15:08 --------- d-----w c:\users\olivier\AppData\Roaming\DAEMON Tools
    2009-01-16 13:24 --------- d-----w c:\programdata\Microsoft Help
    2009-01-16 09:22 138 ----a-w c:\users\olivier\AppData\Roaming\wklnhst.dat
    2009-01-16 01:03 --------- d-----w c:\programdata\Symantec
    2009-01-15 07:45 --------- d-----w c:\program files\Everest Poker
    2009-01-13 15:13 --------- d--h--w c:\program files\InstallShield Installation Information
    2009-01-13 09:42 --------- d-----w c:\program files\Windows Live
    2009-01-13 09:38 --------- d-----w c:\program files\Windows Live Toolbar
    2009-01-11 09:13 806 ----a-w c:\windows\system32\drivers\SYMEVENT.INF
    2009-01-11 09:13 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS
    2009-01-11 09:13 10,635 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT
    2009-01-11 09:13 --------- d-----w c:\program files\Symantec
    2009-01-04 20:03 --------- d-----w c:\programdata\Roxio
    2008-12-21 12:36 --------- d-----w c:\programdata\DVD Shrink
    2008-12-19 14:04 --------- d-----w c:\program files\Anuman Interactive
    2008-12-19 13:46 --------- d-----w c:\program files\Java
    2008-12-19 13:36 --------- d-----w c:\program files\Atari
    2008-12-19 13:35 --------- d-----w c:\program files\Cyanide
    2008-12-19 13:26 --------- d-----w c:\program files\Mindscape
    2008-12-11 17:08 --------- d-----w c:\program files\Micro Application
    2008-12-09 14:07 --------- d-----w c:\program files\Nathan
    2008-12-04 23:11 308,584 ----a-w c:\windows\WLXPGSS.SCR
    2008-11-24 11:04 --------- d-----w c:\users\olivier\AppData\Roaming\dvdcss
    2008-11-20 17:13 --------- d-----w c:\users\olivier\AppData\Roaming\Anuman Interactive
    2008-11-01 03:44 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll
    2008-11-01 03:44 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll
    2008-11-01 03:44 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll
    2008-11-01 03:44 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll
    2008-11-01 03:44 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll
    2008-10-29 06:29 2,927,104 ----a-w c:\windows\explorer.exe
    2008-06-04 11:35 174 --sha-w c:\program files\desktop.ini
    2007-11-19 17:54 47,360 ----a-w c:\users\olivier\AppData\Roaming\pcouffin.sys
    2007-08-24 19:52 300,400 ----a-w c:\program files\mozilla firefox\components\coFFPlgn.dll
    2007-10-16 15:39 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    2007-10-16 15:39 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    2007-10-16 15:39 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    2008-05-10 15:37 23 --sha-w c:\windows\System32\fcdbfafcfce4_z.dll
    .

    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-23 68856]
    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
    "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2006-09-28 65536]
    "KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
    "OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
    "snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]
    "fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2008-12-08 453984]
    "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-22 13539872]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-22 92704]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-19 136600]
    "RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 c:\windows\RtHDVCpl.exe]

    c:\users\olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    OneNote 2007 - Capture d'‚cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-01-02 210520]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{E54729E8-BB3D-4270-9D49-7389EA579090}"= "c:\windows\system32\EZUPBH~1.DLL" [2007-08-22 49152]

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2856635891-3439680339-913657767-1000]
    "EnableNotificationsRef"=dword:00000002

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
    "DefaultOutboundAction"= 0 (0x0)
    "DefaultInboundAction"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{C607E263-78F0-4955-BFBE-D2D3400B79B6}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{1667334A-DF5E-4F24-8AA7-A5AE50518AC2}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "TCP Query User{AAFF800C-E4E1-4EB3-9794-27BADDF5C8CE}k:\\emule\\emule.exe"= UDP:k:\emule\emule.exe:eMule
    "UDP Query User{A47058F2-52D4-4FB6-8E3E-06216C0E351F}k:\\emule\\emule.exe"= TCP:k:\emule\emule.exe:eMule
    "{11F293D6-A1D7-4D12-8B2D-DF3B9F0B17D4}"= UDP:k:\emule\emule.exe:eMule
    "{E72C7EF0-A09C-4C14-917D-FE6FB541BAE0}"= TCP:k:\emule\emule.exe:eMule
    "TCP Query User{545452AF-6F02-4A13-A342-8BB00E53A2B5}c:\\program files\\trackmania original\\tmoriginal.exe"= UDP:c:\program files\trackmania original\tmoriginal.exe:TmOriginal
    "UDP Query User{08CA54DF-1098-4A89-8404-0DB792430423}c:\\program files\\trackmania original\\tmoriginal.exe"= TCP:c:\program files\trackmania original\tmoriginal.exe:TmOriginal
    "{17512FF0-8FAA-4D76-A1B1-DAF281652B95}"= UDP:c:\program files\Cyanide\Pro Cycling Manager\Cym2005.exe:p ro Cycling Manager
    "{86B885F6-35E9-449E-9E46-A1935EEA516F}"= TCP:c:\program files\Cyanide\Pro Cycling Manager\Cym2005.exe:p ro Cycling Manager
    "{4DCC1FC9-0179-4FA0-8D3D-0FF8BFB27C5E}"= UDP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter
    "{A523AFCE-69EA-4470-A2AF-D2770FEDA428}"= TCP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter
    "{2268A78F-E353-40BB-8587-29E8A2D9F4CD}"= UDP:c:\program files\BitTorrent_DNA\dna.exe:BitTorrent DNA
    "{F3976C82-3E12-4D06-AE56-6AA9933CE5EB}"= TCP:c:\program files\BitTorrent_DNA\dna.exe:BitTorrent DNA
    "{1DC09C42-23E6-4996-982D-9F76F7AF5F4B}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
    "{96257485-5E4E-41F4-82A5-796198B24C35}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
    "{6487BAFC-6AC5-4A08-8747-3D253E84BABC}"= UDP:j:\divers\BitTorrent\bittorrent.exe:BitTorrent
    "{91DFB2F7-1982-497E-8A1B-D8937C43A517}"= TCP:j:\divers\BitTorrent\bittorrent.exe:BitTorrent
    "TCP Query User{19FBF95D-368A-4DA3-BD4F-1D5455F98A22}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= UDP:c:\users\olivier\program files\bittorrent_dna\dna.exe:D na.exe
    "UDP Query User{057209DB-34A5-4DC7-ACE7-143EDAE50EE8}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= TCP:c:\users\olivier\program files\bittorrent_dna\dna.exe:D na.exe
    "TCP Query User{ED698191-9762-4F0B-9A92-E1646711329A}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= UDP:c:\users\olivier\program files\bittorrent_dna\dna.exe:D na.exe
    "UDP Query User{B3524D6B-C784-4A0F-9FFE-1D35796D48CE}c:\\users\\olivier\\program files\\bittorrent_dna\\dna.exe"= TCP:c:\users\olivier\program files\bittorrent_dna\dna.exe:D na.exe
    "TCP Query User{E6D3238C-E6A2-46CA-A5C7-B146B27CF778}c:\\users\\olivier\\program files\\dna\\btdna.exe"= UDP:c:\users\olivier\program files\dna\btdna.exe:btdna.exe
    "UDP Query User{4B97F46D-521C-421A-8315-9336A1154C2B}c:\\users\\olivier\\program files\\dna\\btdna.exe"= TCP:c:\users\olivier\program files\dna\btdna.exe:btdna.exe
    "TCP Query User{4594DA5B-C58C-4223-855D-6AFA9A859C94}c:\\program files\\mswt kart\\msworldtour.exe"= UDP:c:\program files\mswt kart\msworldtour.exe:MSWorldTour
    "UDP Query User{798D815C-7F64-458B-AA69-F1554CA495EC}c:\\program files\\mswt kart\\msworldtour.exe"= TCP:c:\program files\mswt kart\msworldtour.exe:MSWorldTour
    "{0E8980FF-E58E-4FB5-8CBC-FB798AE874D5}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp
    "{54CCA526-2F37-4853-9087-07C4BC46BA5A}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp
    "{BEBA31AE-34AF-44E2-A49E-E4278828EAAE}"= UDP:c:\program files\ma-config.com\maconfservice.exe:maconfservice
    "{8C7750AA-6B5C-440B-81AE-02AE884C7B74}"= TCP:c:\program files\ma-config.com\maconfservice.exe:maconfservice
    "TCP Query User{E9F2E4BC-B7AF-4F98-895E-D57E372BB954}c:\\users\\olivier\\program files\\bittorrent\\bittorrent.exe"= UDP:c:\users\olivier\program files\bittorrent\bittorrent.exe:bittorrent.exe
    "UDP Query User{A49CA5D2-8D25-4418-82B2-54DF5200D80B}c:\\users\\olivier\\program files\\bittorrent\\bittorrent.exe"= TCP:c:\users\olivier\program files\bittorrent\bittorrent.exe:bittorrent.exe
    "{95433AC2-E401-4AB3-AA40-DF9A9ECB3373}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
    "DefaultOutboundAction"= 0 (0x0)
    "DefaultInboundAction"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
    "DefaultOutboundAction"= 0 (0x0)
    "DefaultInboundAction"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
    "c:\\Program Files\\BitTorrent\\bittorrent.exe"= c:\program files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
    "j:\\divers\\BitTorrent\\bittorrent.exe"= j:\divers\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent

    R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20090113.002\IDSvix86.sys [2009-01-14 270384]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2008-09-05 99376]
    R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [2008-06-13 41008]
    R4 athsgt;athsgt;c:\windows\System32\drivers\athsgt.sys [2008-05-24 164992]
    R4 ezntsvc;EasyBits Magic Desktop Services for Windows NT;c:\windows\System32\ezntsvc.exe [2007-08-22 33792]
    R4 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-01-13 55264]
    R4 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
    R4 limsgt;limsgt;c:\windows\System32\drivers\limsgt.sys [2008-05-24 12544]
    R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [2008-04-23 149352]
    R4 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
    S3 COH_Mon;COH_Mon;c:\windows\System32\drivers\COH_Mon.sys [2007-05-29 23888]
    S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-07-25 191656]
    S4 pr2ajbeb;FrontLine Drivers Update Tool Drivers Auto Removal (pr2ajbeb);c:\windows\system32\pr2ajbeb.exe svc --> c:\windows\system32\pr2ajbeb.exe svc [?]

    --- Autres Services/Pilotes en mémoire ---

    *NewlyCreated* - COMHOST
    *Deregistered* - sptd

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffafc7c9-3bc6-11dd-91d1-001bb97f72f5}]
    \shell\AutoRun\command - f:\cdsample\AUTORUN\AUTORUN.EXE
    .
    Contenu du dossier 'Tâches planifiées'
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    HKCU-Run-gioaksk - c:\users\olivier\appdata\local\gioaksk.exe
    HKLM-Run-QuickTime Task - J:\qttask.exe
    SSODL-vadokmxt-{DAB3293C-05FE-4A4B-8597-C3DB004CE2BF} - (no file)
    SSODL-wdpoefan-{0D6B3FEB-A35E-4B39-9652-61491C37D924} - (no file)


    .
    ------- Examen supplémentaire -------
    .
    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=73&bd=Pavilion&pf=desktop
    uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
    Handler: ms-its51 - {F6F1E82D-DE4D-11D2-875C-0000F8105754} - c:\program files\Common Files\microsoft shared\Information Retrieval\itss51.dll
    FF - ProfilePath - c:\users\olivier\AppData\Roaming\Mozilla\Firefox\Profiles\3o7qk2za.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
    FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - component: c:\program files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
    FF - component: c:\program files\Mozilla Firefox\components\coFFPlgn.dll
    FF - plugin: c:\program files\BitTorrent_DNA\npbtdna.dll
    FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: c:\users\olivier\Program Files\DNA\plugins\npbtdna.dll

    ---- PARAMETRES FIREFOX ----
    FF - user.js: yahoo.homepage.dontask - true.

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-01-18 09:31:20
    Windows 6.0.6001 Service Pack 1 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\windows\System32\nvvsvc.exe
    c:\windows\System32\audiodg.exe
    c:\windows\System32\rundll32.exe
    c:\program files\Lavasoft\Ad-Aware\aawservice.exe
    c:\program files\Common Files\LightScribe\LSSrvc.exe
    c:\windows\System32\WUDFHost.exe
    c:\windows\System32\conime.exe
    c:\windows\System32\rundll32.exe
    c:\program files\Windows Media Player\wmpnetwk.exe
    c:\program files\HP\Digital Imaging\bin\hpqste08.exe
    c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    c:\hp\KBD\kbd.exe
    .
    **************************************************************************
    .
    Heure de fin: 2009-01-18 9:37:09 - La machine a redémarré
    ComboFix-quarantined-files.txt 2009-01-18 08:36:36

    Avant-CF: 35ÿ466ÿ936ÿ320 octets libres
    AprÞs-CF: 35,299,565,568 octets libres

    269 --- E O F --- 2009-01-16 20:57:32
    18 Janvier 2009 11:01:49

    Re,

    Je te conseille de désinstaller et de supprimer tous tes logiciels de p2p : 50% de ce que tu télécharges via p2p est piégé. Le p2p est le premier vecteur d'infection de nos jours.
    Plus d'informations disponibles en cliquant sur le lien suivant : Cracks / P2P

    1) Télécharge MalwareByte's Anti-Malware sur ton Bureau.
    Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

    Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
    AIDE : Redémarrer en mode sans échec

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
    -- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
    -- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
    [#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]

    AIDE : Tuto en images sur MBAM

    2) ~Fais une analyse antivirus en ligne sur le site de Kaspersky
    http://www.kaspersky.com/kos/eng/partner/default/kavweb...
  • Clique sur Accept
  • Une barre jaune va te demander si tu acceptes d'installer le Kavwebscan_Unicode.cab, installe l'Active X.
  • clique une nouvelle fois sur "Accept"
  • Les bases de mises à jour vont s'installer, patiente un moment
  • Clique sur Next.
  • Clique sur My Computer, le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera. Et poste-moi le rapport que tu obtiens.

    Et poste-moi le rapport attach.txt que je t'avais demandé de mettre de côté.

    ;) 
    18 Janvier 2009 15:19:12

    re desoler d'avoir ete aussi long, mais impossible de lancer mba en mode sans echec "erreur 181". je l'ai fait en mode normal ca change quelque chose
    18 Janvier 2009 15:21:00

    Non, poste les rapports comme demandé.

    ;) 
    18 Janvier 2009 15:22:13

    Malwarebytes' Anti-Malware 1.33
    Version de la base de données: 1654
    Windows 6.0.6001 Service Pack 1

    18/01/2009 14:35:26
    mbam-log-2009-01-18 (14-35-26).txt

    Type de recherche: Examen complet (C:\|D:\|J:\|K:\|)
    Eléments examinés: 190734
    Temps écoulé: 2 hour(s), 9 minute(s), 40 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 5
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 1

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\Interface\{af1a6b09-a361-4c27-b5d6-61705f7c28b2} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{e5df674f-3727-4856-8d74-8db49a4ce9f1} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{600b86be-a420-44e4-b179-ea0728329d2c} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\OneMoreKey (Rogue.Installer) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\Qoobox\Quarantine\C\Users\olivier\AppData\Roaming\drivers\srosa2.sys.vir (Worm.Bagel) -> Quarantined and deleted successfully.
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS