Ok je ferai cela dès ce soir au retour du boulot. Encore merci.
Voilà le rapport Combofix fait en mode sans échec :
[i]
ComboFix 08-09-01.01 - Nicolas 2008-09-02 16:55:43.3 - NTFSx86 MINIMAL
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1791 [GMT 2:00]
Endroit: F:\Software (Partie 4)\ComboFix.exe
AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N’EST PAS INSTALLÉE SUR CETTE MACHINE !!
.
((((((((((((((((((((((((((((( Fichiers créés 2008-08-02 to 2008-09-02 ))))))))))))))))))))))))))))))))))))
.
2008-09-01 23:07 . 2008-09-01 23:07 d-------- C:\Documents and Settings\Nicolas\Application Data\Leadertech
2008-08-31 22:30 . 2008-08-31 22:53 d-------- C:\Program Files\Malwarebytes’ Anti-Malware
2008-08-31 22:30 . 2008-08-31 22:30 d-------- C:\Documents and Settings\Nicolas\Application Data\Malwarebytes
2008-08-31 22:30 . 2008-08-31 22:30 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-31 22:30 . 2008-08-17 15:05 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-31 22:30 . 2008-08-17 15:05 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-30 19:23 . 2008-08-30 19:23 dr-h----- C:\Documents and Settings\Nicolas\Application Data\SecuROM
2008-08-30 10:09 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-08-30 10:09 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-08-30 10:09 . 2008-08-26 20:19 88,576 --a------ C:\WINDOWS\system32\AntiXPVSTFix.exe
2008-08-30 10:09 . 2008-08-27 15:17 87,040 --a------ C:\WINDOWS\system32\VACFix.exe
2008-08-30 10:09 . 2008-08-28 22:36 82,432 --a------ C:\WINDOWS\system32\IEDFix.C.exe
2008-08-30 10:09 . 2008-08-18 12:19 82,432 --a------ C:\WINDOWS\system32\404Fix.exe
2008-08-30 10:09 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-08-30 10:09 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-08-30 01:19 . 2008-08-30 10:13 d-------- C:\Program Files\a-squared Anti-Malware
2008-08-30 00:14 . 2008-08-30 00:14 d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
2008-08-30 00:14 . 2008-08-30 00:14 d-------- C:\WINDOWS\system32\Samsung PC Studio Codecs
2008-08-29 20:40 . 2008-08-29 20:40 d-------- C:\Program Files\Trend Micro
2008-08-29 20:19 . 2008-08-29 20:19 37,440 --a------ C:\WINDOWS\system32\drivers\pssdklbf.drv
2008-08-29 20:19 . 2008-08-29 20:19 30,272 --a------ C:\WINDOWS\system32\drivers\pssdk31.drv
2008-08-29 17:08 . 2008-08-30 00:15 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-29 14:35 . 2008-08-29 14:35 d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-08-29 12:42 . 2008-08-29 12:42 d-------- C:\Documents and Settings\All Users\Application Data\ATI
2008-08-29 12:40 . 2008-07-31 21:05 593,920 --------- C:\WINDOWS\system32\ati2sgag.exe
2008-08-29 12:39 . 2008-08-30 00:15 d-------- C:\Program Files\ATI Technologies
2008-08-29 12:39 . 2008-08-29 12:39 d-------- C:\ATI
2008-08-28 21:23 . 2008-08-30 00:14 d-------- C:\Program Files\Samsung
2008-08-28 21:16 . 2005-08-28 20:51 766 --a------ C:\WINDOWS\system32\Uninstall.ico
2008-08-28 21:15 . 2006-03-21 15:49 2,729,472 --a------ C:\WINDOWS\system32\fun_avcodec.dll
2008-08-28 21:15 . 2006-04-18 16:32 684,032 --a------ C:\WINDOWS\system32\fun_mp4_enc.dll
2008-08-28 21:15 . 2006-04-11 16:49 671,744 --a------ C:\WINDOWS\system32\FunDecFilter.ax
2008-08-28 21:15 . 2006-04-11 13:13 532,480 --a------ C:\WINDOWS\system32\FunEncFilter.ax
2008-08-28 21:15 . 2006-04-06 11:28 77,824 --a------ C:\WINDOWS\system32\fun_mp4_dec.dll
2008-08-28 21:05 . 2005-08-30 01:49 94,000 --a------ C:\WINDOWS\system32\drivers\ssm_mdm.sys
2008-08-28 21:05 . 2005-08-30 01:47 58,320 --a------ C:\WINDOWS\system32\drivers\ssm_bus.sys
2008-08-28 21:05 . 2005-08-13 05:06 22,486 -ra------ C:\WINDOWS\system32\UnInstall_Driver.ico
2008-08-28 21:05 . 2005-08-30 01:49 8,336 --a------ C:\WINDOWS\system32\drivers\ssm_mdfl.sys
2008-08-28 21:05 . 2005-08-30 01:49 6,176 --a------ C:\WINDOWS\system32\drivers\ssm_cmnt.sys
2008-08-28 21:05 . 2005-08-30 01:49 6,176 --a------ C:\WINDOWS\system32\drivers\ssm_cm.sys
2008-08-28 21:05 . 2005-08-30 01:47 5,840 --a------ C:\WINDOWS\system32\drivers\ssm_whnt.sys
2008-08-28 21:05 . 2005-08-30 01:47 5,840 --a------ C:\WINDOWS\system32\drivers\ssm_wh.sys
2008-08-25 22:04 . 2008-08-30 00:14 d-------- C:\Documents and Settings\Nicolas\Application Data\DeepBurner
2008-08-25 22:01 . 2008-08-25 22:01 d-------- C:\Program Files\Astonsoft
2008-08-21 20:36 . 2008-08-21 20:36 152,848 --a------ C:\WINDOWS\system32\comdlg32.ocx
2008-08-21 20:36 . 2008-08-21 20:36 132,880 --a------ C:\WINDOWS\system32\msinet.ocx
2008-08-21 19:49 . 2008-08-21 19:49 28,898 --a------ C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP Real Audio Encoder R3.bmp
2008-08-21 19:49 . 2008-08-21 19:48 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9 Codec.bmp
2008-08-21 19:49 . 2008-08-21 19:49 2,995 --a------ C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP Real Audio Encoder R3.dat
2008-08-21 19:49 . 2008-08-21 19:49 2,151 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP WMA V9 Codec.dat
2008-08-21 19:49 . 2008-08-21 19:51 1,022 --a------ C:\WINDOWS\CDPlayer.ini
2008-08-21 19:48 . 2008-08-21 19:48 28,898 --a------ C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP Dalet codec R1.bmp
2008-08-21 19:48 . 2008-08-21 19:48 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Real Audio Codec.bmp
2008-08-21 19:48 . 2008-08-21 19:48 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.bmp
2008-08-21 19:48 . 2008-08-21 19:48 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Musepack Codec.bmp
2008-08-21 19:48 . 2008-08-21 19:48 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP FLAC Codec.bmp
2008-08-21 19:48 . 2008-08-21 19:48 3,452 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Musepack Codec.dat
2008-08-21 19:48 . 2008-08-21 19:48 2,088 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Ogg Vorbis Codec.dat
2008-08-21 19:48 . 2008-08-21 19:48 2,069 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP FLAC Codec.dat
2008-08-21 19:48 . 2008-08-21 19:48 1,928 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Real Audio Codec.dat
2008-08-21 19:48 . 2008-08-21 19:48 566 --a------ C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP Dalet codec R1.dat
2008-08-21 19:47 . 2008-08-21 19:47 d-------- C:\Program Files\Illustrate
2008-08-21 19:47 . 2008-08-21 19:49 164,352 --a------ C:\WINDOWS\system32\SpoonUninstall.exe
2008-08-21 19:47 . 2008-08-21 19:47 28,898 --a------ C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP AIFF codec r3.bmp
2008-08-21 19:47 . 2008-08-21 19:47 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.bmp
2008-08-21 19:47 . 2008-08-21 19:47 27,958 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Monkeys Audio Codec.bmp
2008-08-21 19:47 . 2008-08-21 19:47 20,898 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
2008-08-21 19:47 . 2008-08-21 19:47 2,286 --a------ C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Monkeys Audio Codec.dat
2008-08-21 19:47 . 2008-08-21 19:47 739 --a------ C:\WINDOWS\system32\SpoonUninstall-dBPowerAMP AIFF codec r3.dat
2008-08-20 19:40 . 1999-11-02 10:01 6,173 --a------ C:\WINDOWS\system32\drivers\Entech.vxd
2008-08-20 19:40 . 2004-06-22 15:44 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2008-08-20 19:40 . 2001-11-19 19:05 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2008-08-20 19:38 . 2008-08-20 19:38 d-------- C:\WINDOWS\system32\Futuremark
2008-08-20 19:38 . 2007-08-20 10:05 27,672 -ra------ C:\WINDOWS\system32\drivers\Entech.sys
2008-08-19 18:15 . 2008-08-30 00:14 d-------- C:\Program Files\OCCT
2008-08-19 17:51 . 2008-05-21 01:53 93,696 -ra------ C:\WINDOWS\system32\drivers\AtiHdmi.sys
2008-08-17 00:46 . 2008-08-17 00:46 d–h----- C:\WINDOWS\PIF
2008-08-15 10:20 . 2008-04-11 21:05 691,712 -----c— C:\WINDOWS\system32\dllcache\inetcomm.dll
2008-08-15 10:20 . 2008-05-01 16:36 331,776 -----c— C:\WINDOWS\system32\dllcache\msadce.dll
2008-08-11 20:28 . 2008-08-25 19:12 69 --a------ C:\WINDOWS\NeroDigital.ini
2008-08-10 16:57 . 2008-08-30 00:14 d-------- C:\Program Files\Ahead
2008-08-10 16:56 . 2004-10-01 15:00 40,960 --a------ C:\Program Files\Uninstall_CDS.exe
2008-08-09 19:13 . 2008-08-09 19:13 d-------- C:\Program Files\MSXML 4.0
2008-08-07 22:36 . 2008-08-07 22:36 d-------- C:\Documents and Settings\All Users\Application Data\Codemasters
2008-08-07 22:36 . 2008-08-07 22:36 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-08-07 21:15 . 2008-08-07 21:15 d-------- C:\Documents and Settings\All Users\Application Data\Pinnacle
2008-08-07 21:12 . 2008-08-07 21:12 d-------- C:\Program Files\VOB
2008-08-07 21:12 . 2002-08-28 11:09 611,840 --a------ C:\WINDOWS\system32\vobhw.dll
2008-08-07 21:12 . 1998-10-29 16:45 306,688 --a------ C:\WINDOWS\IsUninst.exe
2008-08-07 21:12 . 2002-09-26 17:34 153,088 --a------ C:\WINDOWS\system32\IWUninstall.exe
2008-08-07 21:12 . 2000-04-27 12:31 19,456 --a------ C:\WINDOWS\system32\asapi.dll
2008-08-07 21:12 . 2002-04-17 20:27 11,264 --a------ C:\WINDOWS\system32\drivers\asapi.sys
2008-08-07 21:11 . 2008-08-07 21:11 d-------- C:\Documents and Settings\Nicolas\WINDOWS
2008-08-07 21:10 . 2008-08-07 21:11 d-------- C:\Program Files\Steinberg
2008-08-07 20:44 . 2008-08-07 20:50 d-------- C:\Program Files\VirtualDJ
2008-08-07 18:54 . 2008-04-28 15:53 805,400 -ra------ C:\WINDOWS\system32\tmp136.tmp
2008-08-07 18:54 . 2008-04-28 15:53 805,400 -ra------ C:\WINDOWS\system32\tmp135.tmp
2008-08-07 18:15 . 2008-08-07 18:15 d-------- C:\Program Files\OpenAL
2008-08-07 18:14 . 2007-03-12 16:42 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
2008-08-07 15:24 . 2008-08-07 15:24 d-------- C:\Documents and Settings\Nicolas\Application Data\vlc
2008-08-07 15:07 . 2008-08-07 15:07 d-------- C:\Program Files\CyberLink
2008-08-07 13:45 . 2008-08-20 20:15 d-------- C:\Documents and Settings\Nicolas\Application Data\XnView
2008-08-07 09:05 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-08-07 09:05 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-08-07 09:05 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-08-07 00:09 . 2008-08-07 00:09 d-------- C:\Documents and Settings\Nicolas\Application Data\ATI
2008-08-06 23:57 . 2008-08-29 12:29 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-08-06 23:55 . 2008-08-29 12:26 10 --a------ C:\WINDOWS\WININIT.INI
2008-08-06 23:46 . 2008-08-30 00:14 d-------- C:\Program Files\ma-config.com
2008-08-06 23:46 . 2008-08-30 00:14 d-------- C:\Documents and Settings\All Users\Application Data\ma-config.com
2008-08-06 23:38 . 2007-11-14 15:18 553 --a------ C:\WINDOWS\USetup.iss
2008-08-06 21:47 . 2008-08-06 21:47 d-------- C:\Documents and Settings\Nicolas\Application Data\CyberLink
2008-08-06 21:46 . 2008-08-06 21:49 d-------- C:\Documents and Settings\All Users\Application Data\CyberLink
2008-08-06 21:46 . 2008-08-06 21:45 505,128 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-08-06 21:46 . 2008-08-06 21:45 29,480 --a------ C:\WINDOWS\system32\msxml3a.dll
2008-08-06 20:41 . 2008-08-06 20:41 d-------- C:\Program Files\GIGABYTE
2008-08-06 20:28 . 2008-08-07 23:02 d-------- C:\Documents and Settings\Nicolas\Contacts
2008-08-06 19:19 . 2008-08-06 20:27 d-------- C:\Program Files\Windows Live
2008-08-06 19:19 . 2008-08-06 19:25 d–hsc— C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-08-06 19:18 . 2008-08-06 20:26 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-08-06 18:49 . 2008-04-13 19:02 2,985,984 -----c— C:\WINDOWS\system32\dllcache\wmploc.dll
2008-08-06 18:47 . 2006-12-28 12:01 19,569 --a------ C:\WINDOWS[u]0[/u]05225_.tmp
2008-08-06 18:47 . 2008-04-13 11:40 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-08-06 17:52 . 2008-09-01 23:07 d-------- C:\Program Files\Logitech
2008-08-06 17:52 . 2008-08-06 17:52 d-------- C:\Program Files\Fichiers communs\Logitech
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-02 14:54 160,724 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-09-02 14:54 13,266,976 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-09-01 16:34 1,296,487 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
2008-08-30 09:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-08-30 09:44 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-08-27 21:29 --------- d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-08-27 21:29 --------- d-----w C:\Program Files\SpywareBlaster
2008-08-20 17:40 86,016 ----a-w C:\WINDOWS\system32\OpenAL32.dll
2008-08-19 15:40 538,624 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
2008-08-19 15:40 1,590,272 ----a-w C:\WINDOWS\Internet Logs\xDB2.tmp
2008-08-07 16:54 444,952 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2008-08-06 19:45 353,576 ----a-w C:\WINDOWS\system32\msvcr71.dll
2008-08-06 10:33 --------- d-----w C:\Program Files\Avira
2008-08-06 10:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2008-08-06 10:21 17,801 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2008-08-06 10:21 --------- d-----w C:\Program Files\TRENDnet
2008-08-06 10:20 456,384 ----a-w C:\WINDOWS\system32\drivers\ar5211.sys
2008-08-06 10:18 --------- d-----w C:\Documents and Settings\Nicolas\Application Data\Jetico Personal Firewall
2008-08-06 10:15 --------- d-----w C:\Program Files\XP Codec Pack
2008-08-06 09:50 315,392 ----a-w C:\WINDOWS\HideWin.exe
2008-08-06 08:41 --------- d-----w C:\Program Files\microsoft frontpage
2008-08-06 08:38 --------- d-----w C:\Program Files\Services en ligne
2008-08-01 06:38 3,266,560 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-08-01 05:40 9,928,704 ----a-w C:\WINDOWS\system32\atioglxx.dll
2008-08-01 04:58 253,952 ----a-w C:\WINDOWS\system32\atiok3x2.dll
2008-08-01 04:33 425,984 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
2008-08-01 04:32 311,296 ------w C:\WINDOWS\system32\ati2dvag.dll
2008-08-01 04:23 184,320 ----a-w C:\WINDOWS\system32\atipdlxx.dll
2008-08-01 04:23 143,360 ----a-w C:\WINDOWS\system32\Oemdspif.dll
2008-08-01 04:22 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
2008-08-01 04:22 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
2008-08-01 04:22 143,360 ----a-w C:\WINDOWS\system32\ati2evxx.dll
2008-08-01 04:21 573,440 ----a-w C:\WINDOWS\system32\ati2evxx.exe
2008-08-01 04:19 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
2008-08-01 04:10 3,917,568 ------w C:\WINDOWS\system32\ati3duag.dll
2008-08-01 03:59 2,183,552 ------w C:\WINDOWS\system32\ativvaxx.dll
2008-08-01 03:46 48,640 ----a-w C:\WINDOWS\system32\amdpcom32.dll
2008-08-01 03:42 376,832 ----a-w C:\WINDOWS\system32\atikvmag.dll
2008-08-01 03:40 35,328 ----a-w C:\WINDOWS\system32\atiadlxx.dll
2008-08-01 03:40 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
2008-08-01 03:39 53,248 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
2008-08-01 03:39 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
2008-08-01 03:34 561,152 ------w C:\WINDOWS\system32\ati2cqag.dll
2008-07-09 07:05 75,248 ----a-w C:\WINDOWS\zllsputility.exe
2008-07-09 07:05 54,672 ----a-w C:\WINDOWS\system32\vsutil_loc040c.dll
2008-07-09 07:05 42,384 ----a-w C:\WINDOWS\zllsputility_loc040c.dll
2008-07-09 07:05 21,904 ----a-w C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-07-09 07:05 17,808 ----a-w C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-07-09 07:05 1,086,952 ----a-w C:\WINDOWS\system32\zpeng24.dll
2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-06-27 09:23 16,875,008 ----a-w C:\WINDOWS\RTHDCPL.exe
2008-06-24 16:44 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 15:10 670,208 ----a-w C:\WINDOWS\system32\wininet.dll
2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-19 14:42 2,808,832 ----a-w C:\WINDOWS\alcwzrd.exe
2008-06-19 14:27 9,715,200 ----a-w C:\WINDOWS\RTLCPL.exe
2008-06-19 14:20 57,344 ----a-w C:\WINDOWS\Alcmtr.exe
2008-06-18 16:01 77,824 ----a-w C:\WINDOWS\SoundMan.exe
2005-06-20 08:31 456,384 ----a-w C:\WINDOWS\inf\WLG-1103\ar5211.sys
2004-11-04 04:08 212,992 ----a-w C:\WINDOWS\inf\WLG-1103\CopyWHQLDriver.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Note les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe” [2008-04-13 19:34 15360]
“SuperCopier2.exe”=“C:\Program Files\SuperCopier2\SuperCopier2.exe” [2006-07-07 18:45 1052672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“JMB36X IDE Setup”=“C:\WINDOWS\RaidTool\xInsIDE.exe” [2007-03-20 08:36 36864]
“36X Raid Configurer”=“C:\WINDOWS\system32\xRaidSetup.exe” [2007-08-29 10:55 1966080]
“avgnt”=“C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe” [2008-02-12 10:06 262401]
“ZoneAlarm Client”=“C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe” [2008-07-09 09:05 919016]
“WinampAgent”=“C:\Program Files\Winamp\winampa.exe” [2008-08-04 01:02 36352]
“Adobe Reader Speed Launcher”=“C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe” [2007-05-11 03:06 40048]
“RemoteControl8”=“C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe” [2008-02-18 18:33 77824]
“PDVD8LanguageShortcut”=“C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe” [2007-12-14 11:36 50472]
“BDRegion”=“C:\Program Files\Cyberlink\Shared Files\brs.exe” [2007-11-14 23:10 91432]
“StartCCC”=“C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” [2008-07-16 16:57 61440]
“RTHDCPL”=“RTHDCPL.EXE” [2008-06-27 11:23 16875008 C:\WINDOWS\RTHDCPL.exe]
“SoundMan”=“SOUNDMAN.EXE” [2008-06-18 18:01 77824 C:\WINDOWS\SoundMan.exe]
“AlcWzrd”=“ALCWZRD.EXE” [2008-06-19 16:42 2808832 C:\WINDOWS\alcwzrd.exe]
[HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
“CTFMON.EXE”=“C:\WINDOWS\System32\CTFMON.EXE” [2008-04-13 19:34 15360]
C:\Documents and Settings\Nicolas\Menu D?marrer\Programmes\D?marrage
Enregistrement de produit Logitech.lnk - C:\Program Files\Logitech\G51 Skins\eReg.exe [2007-08-12 22:06:28 2979080]
C:\Documents and Settings\All Users\Menu D?marrer\Programmes\D?marrage
108Mbps Wireless LAN Adapte.lnk - C:\Program Files\TRENDnet\TEW-441PC_443PI\TRENDnet.exe [2006-06-16 22:44:54 1253376]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
“vidc.ffds”= ffdshow.ax
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
“DisableMonitoring”=dword:00000001
[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
“EnableFirewall”= 0 (0x0)
[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
“%windir%\system32\sessmgr.exe”=
“C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe”=
“%windir%\Network Diagnostic\xpnetdiag.exe”=
“C:\Program Files\Windows Live\Messenger\msnmsgr.exe”=
“C:\Program Files\Windows Live\Messenger\livecall.exe”=
“D:\Program Files\Codemasters\GRID\GRID.exe”=
“D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe”=
“D:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe”=
R1 Asapi;Asapi;C:\WINDOWS\system32\drivers\Asapi.sys [2002-04-17 20:27]
S2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};C:\Program Files\CyberLink\PowerDVD8[u]0[/u]00.fcl [2008-02-01 17:24]
S3 AtiHdmiService;ATI Function Driver for HDMI Service;C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-21 01:53]
S3 PsSdk31;PsSdk31;C:\WINDOWS\system32\Drivers\pssdk31.drv [2008-08-29 20:19]
S3 PsSdkLBF;PsSdkLBF;C:\WINDOWS\system32\Drivers\pssdklbf.drv [2008-08-29 20:19]
Newly Created Service - CATCHME
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\haei7zeu.default
FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.fr…
FF -: plugin - C:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\haei7zeu.default\extensions{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
FF -: plugin - C:\Program Files\ma-config.com\nphardwaredetection.dll
.
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, www.gmer.net…
Rootkit scan 2008-09-02 16:56:51
Windows 5.1.2600 Service Pack 3 NTFS
Balayage processus cachés …
Balayage caché autostart entries …
Balayage des fichiers cachés …
Scan terminé avec succès
Les fichiers cachés: 0
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PsSdk31]
“ImagePath”="??\C:\WINDOWS\system32\Drivers\pssdk31.drv"
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PsSdkLBF]
“ImagePath”="??\C:\WINDOWS\system32\Drivers\pssdklbf.drv"
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
“ImagePath”="??\C:\Program Files\CyberLink\PowerDVD8[u]0[/u]00.fcl"
.
Temps d’accomplissement: 2008-09-02 16:57:25
ComboFix-quarantined-files.txt 2008-09-02 14:57:21
ComboFix2.txt 2008-09-01 20:56:30
ComboFix3.txt 2008-09-01 16:36:30
Pre-Run: 18,340,081,664 octets libres
Post-Run: 18,324,246,528 octets libres
277 — E O F — 2008-08-15 14:40:11[/i]
Ta navigation est toujours lente?
Désolé de répondre tard mais à mon désespoir hier soir mon raptor a rendu l’âme aprés deux ans de bons et loyaux services…vive la garantie Western de 5ans, il y part dès ce soir.
Du coup, j’ai tout réinstallé sur un autre dd en attendant donc je n’ai plus de problème 1/2lol.
Merci du temps que tu as passé sur mon problème.
@+
Ok, a bientot 