faux antivirus trigger impossible à supprimer

Message original par arnaudsxm

bonjour à tous,

depuis 3 jours, j'ai un virus sur mon ordi et je n'arrive pas à le supprimer. Il ouvre des fenetres "antivirus trigger alert", "warning" et faux scan au démarrage de l'ordi.

quelqu'un peut-il m'aider à me débarrasser de cette enfer.

merci

merci de votre réponse si rapide.

voici le rapport

Logfile of random's system information tool 1.04 (written by random/random)
Run by arnaud at 2008-12-03 11:30:59
Microsoft Windows 2000 Professionnel Service Pack 4
System drive C: has 12 GB (34%) free of 34 GB
Total RAM: 447 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:31:24, on 03/12/2008
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINNT\system32\HPZipm12.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\WebMediaViewer\qttask.exe
C:\Program Files\WebMediaViewer\hpmon.exe
C:\WINNT\system32\RunDll32.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINNT\system32\VTTimer.exe
C:\WINNT\system32\VTtrayp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\WebMediaViewer\qttaskm.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\WebMediaViewer\hpmom.exe
C:\Program Files\AnvTrgrsoftware\AnvTrgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\arnaud\Bureau\RSIT.exe
C:\Program Files\trend micro\arnaud.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {64466B8E-20A7-4A4A-AFF4-AAD9CA68B52C} - C:\Program Files\WebMediaViewer\hpmun.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: AnvTrgrWarningBHO Class - {95E9BCC0-2E84-4500-8A9C-0B7A96769124} - C:\Program Files\AnvTrgrsoftware\AnvTrgrWarning.dll (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: gksraemq - {F661BA6B-FAF4-4165-A701-F65A7585AC91} - C:\DOCUME~1\arnaud\LOCALS~1\Temp\ac8zt2\gksraemq.dll (file missing)
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\XPC Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [AnvTrgr] "C:\Program Files\AnvTrgrsoftware\AnvTrgr.exe"
O4 - HKLM\..\Policies\Explorer\Run: [QuickTime Task] C:\Program Files\WebMediaViewer\qttask.exe
O4 - HKLM\..\Policies\Explorer\Run: [VMware hptray] C:\Program Files\WebMediaViewer\hpmon.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - .DEFAULT User Startup: ddrive.js (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Sitecom USB Wireless LAN Utility.lnk = C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.expresstoolie.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.expresstoolie.com/redirect.php (file missing)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {56E4B9EB-4C79-4568-A19E-72794FA70060} (PatsShellOCX Control) - http://www.futuresplatform.com/SunJVMPatsFiles6_1/pats.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: evacuative - {4d5b7736-a3bc-4e5b-9fa2-1bcc3e587abb} - C:\WINNT\system32\cwegus.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe

--
End of file - 8104 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-04-23 1377576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64466B8E-20A7-4A4A-AFF4-AAD9CA68B52C}]
C:\Program Files\WebMediaViewer\hpmun.dll [2008-12-03 37306]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95E9BCC0-2E84-4500-8A9C-0B7A96769124}]
AnvTrgrWarningBHO Class - C:\Program Files\AnvTrgrsoftware\AnvTrgrWarning.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - @msdxmLC.dll,-1@1033,&Radio - C:\WINNT\System32\msdxm.ocx [2005-06-03 848656]
{F661BA6B-FAF4-4165-A701-F65A7585AC91} - gksraemq - C:\DOCUME~1\arnaud\LOCALS~1\Temp\ac8zt2\gksraemq.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"=mobsync.exe /logon []
"Cmaudio"=RunDll32 cmicnfg.cpl []
"RaidTool"=C:\Program Files\VIA\RAID\raid_tool.exe [2005-06-20 1056768]
"VTTimer"=C:\WINNT\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\WINNT\system32\VTtrayp.exe [2005-03-11 147456]
"NeroFilterCheck"=C:\WINNT\system32\NeroCheck.exe [2001-07-09 155648]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"PV92TRAY"=C:\WINNT\system32\PV92Tray.exe [2003-06-25 311296]
"PCTVOICE"=C:\WINNT\system32\pctspk.exe [2003-07-18 180224]
"DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-10-21 413696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"QuickTime Task"=C:\Program Files\WebMediaViewer\qttask.exe [2008-12-01 65775]
"VMware hptray"=C:\Program Files\WebMediaViewer\hpmon.exe [2008-12-01 87899]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DriverUpdaterPro"=C:\Program Files\XPC Tools\Driver Updater Pro\DriverUpdaterPro.exe -t []
"msnmsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-09-04 6856704]
"ctfmon.exe"=C:\WINNT\system32\ctfmon.exe [2001-02-20 8192]
"AnvTrgr"=C:\Program Files\AnvTrgrsoftware\AnvTrgr.exe [2008-11-29 1601536]

C:\Documents and Settings\All Users.WINNT\Menu Démarrer\Programmes\Démarrage
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Sitecom USB Wireless LAN Utility.lnk - C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
evacuative - {4d5b7736-a3bc-4e5b-9fa2-1bcc3e587abb} - C:\WINNT\system32\cwegus.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2008-12-03 10:36:59 ----D---- C:\Program Files\RogueRemover FREE
2008-12-03 10:35:09 ----A---- C:\rr-free-setup.exe
2008-12-02 18:19:02 ----A---- C:\WINNT\system32\wuapi.dll.mui
2008-12-02 08:50:47 ----D---- C:\fsaua.data
2008-12-02 04:19:51 ----D---- C:\Program Files\trend micro
2008-12-02 04:19:50 ----D---- C:\rsit
2008-12-02 04:18:37 ----A---- C:\RSIT.exe
2008-12-01 10:16:59 ----AD---- C:\Documents and Settings\All Users.WINNT\Application Data\TEMP
2008-12-01 10:16:55 ----D---- C:\Program Files\AnvTrgrsoftware
2008-12-01 10:07:17 ----D---- C:\Program Files\WebMediaViewer
2008-11-26 09:33:18 ----D---- C:\Documents and Settings\All Users.WINNT\Application Data\HP Product Assistant
2008-11-17 19:30:26 ----HDC---- C:\WINNT\$NtUninstallKB955069$
2008-11-17 19:28:37 ----HDC---- C:\WINNT\$NtUninstallKB957097$
2008-11-06 16:51:31 ----HDC---- C:\WINNT\$NtUninstallKB954211$
2008-11-06 16:51:17 ----HDC---- C:\WINNT\$NtUninstallKB956391$
2008-11-06 16:50:14 ----HDC---- C:\WINNT\$NtUninstallKB956390-IE6SP1-20080820.120000$
2008-11-06 16:48:09 ----HDC---- C:\WINNT\$NtUninstallKB958644$
2008-11-06 16:47:52 ----HDC---- C:\WINNT\$NtUninstallKB957095$

======List of files/folders modified in the last 1 months======

2008-12-03 11:31:02 ----AD---- C:\WINNT\system32
2008-12-03 10:39:09 ----RAD---- C:\Program Files
2008-12-03 10:39:09 ----AD---- C:\Program Files\Fichiers communs
2008-12-03 09:45:17 ----AD---- C:\WINNT\Temp
2008-12-03 09:45:16 ----AD---- C:\WINNT\security
2008-12-03 09:42:30 ----D---- C:\WINNT\system32\NtmsData
2008-12-03 09:41:22 ----AD---- C:\WINNT\Debug
2008-12-02 22:45:15 ----A---- C:\WINNT\SchedLgU.Txt
2008-12-02 22:29:59 ----AD---- C:\WINNT
2008-12-02 18:23:42 ----D---- C:\WINNT\SoftwareDistribution
2008-12-02 18:19:09 ----RASHDC---- C:\WINNT\system32\dllcache
2008-12-02 18:19:06 ----HD---- C:\WINNT\inf
2008-12-02 18:19:06 ----AD---- C:\WINNT\Help
2008-12-02 17:51:40 ----AD---- C:\Program Files\Internet Explorer
2008-12-02 17:51:36 ----AD---- C:\WINNT\system32\drivers
2008-12-02 12:30:59 ----SD---- C:\WINNT\Downloaded Program Files
2008-12-02 06:39:58 ----AD---- C:\Program Files\Spybot - Search & Destroy
2008-12-02 05:15:05 ----A---- C:\WINNT\ntbtlog.txt
2008-12-02 04:41:04 ----D---- C:\WINNT\system32\Macromed
2008-12-01 10:39:48 ----SHD---- C:\WINNT\Installer
2008-12-01 10:39:48 ----AD---- C:\Config.Msi
2008-12-01 10:39:46 ----AD---- C:\Program Files\Google
2008-12-01 10:39:45 ----D---- C:\Documents and Settings\All Users.WINNT\Application Data\Google
2008-11-28 12:27:09 ----AD---- C:\Program Files\PokerStars
2008-11-26 18:21:30 ----A---- C:\WINNT\system32\aswBoot.exe
2008-11-26 10:50:23 ----D---- C:\Documents and Settings\arnaud\Application Data\HP
2008-11-26 10:43:52 ----A---- C:\WINNT\ODBC.INI
2008-11-26 09:34:34 ----AD---- C:\Program Files\HP
2008-11-26 09:33:21 ----D---- C:\WINNT\winsxs
2008-11-25 21:15:09 ----A---- C:\WINNT\NeroDigital.ini
2008-11-25 20:07:10 ----D---- C:\Documents and Settings\arnaud\Application Data\Skype
2008-11-25 20:05:39 ----D---- C:\Documents and Settings\arnaud\Application Data\skypePM
2008-11-24 12:18:25 ----AD---- C:\Program Files\PATS JTrader Client
2008-11-22 11:44:03 ----SHD---- C:\WINNT\CSC
2008-11-22 11:26:58 ----A---- C:\WINNT\ModemLog_Câble de communication entre deux ordinateurs.txt
2008-11-17 19:30:37 ----A---- C:\WINNT\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINNT\system32\drivers\Aavmker4.sys [2008-11-26 26944]
R1 aswSP;avast! Self Protection; C:\WINNT\system32\drivers\aswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:\WINNT\system32\drivers\aswTdi.sys [2008-11-26 50864]
R1 Cdr4_2K;Cdr4_2K; C:\WINNT\system32\drivers\Cdr4_2K.sys [2008-05-09 58000]
R1 Cdralw2k;Cdralw2k; C:\WINNT\system32\drivers\Cdralw2k.sys [2008-05-09 23420]
R2 aswFsBlk;aswFsBlk; C:\WINNT\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
R2 aswMon;avast! Standard Shield Support; C:\WINNT\system32\drivers\aswMon.sys [2008-11-26 93296]
R2 HidUsb;Pilote de classe HID Microsoft; C:\WINNT\System32\DRIVERS\hidusb.sys [1999-10-04 13904]
R2 tmcomm;tmcomm; \??\C:\WINNT\system32\drivers\tmcomm.sys []
R3 aswRdr;aswRdr; C:\WINNT\system32\drivers\aswRdr.sys [2008-11-26 23152]
R3 cmuda;C-Media WDM Audio Interface; C:\WINNT\system32\drivers\cmuda.sys [2004-04-24 818496]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINNT\System32\DRIVERS\fetnd5b.sys [2003-11-11 41984]
R3 fhlppppoe;PPPOE/ADSL miniport; C:\WINNT\system32\DRIVERS\fhlpppoe.sys [2002-11-21 49264]
R3 mouhid;Pilote HID de souris; C:\WINNT\System32\DRIVERS\mouhid.sys [2003-06-19 11824]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINNT\System32\Drivers\RootMdm.sys [2002-08-02 6032]
R3 uhcd;Pilote de contrôleur hôte universel USB Microsoft; C:\WINNT\System32\DRIVERS\uhcd.sys [2003-06-19 32848]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINNT\System32\DRIVERS\usbehci.sys [2003-06-19 19728]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINNT\System32\DRIVERS\usbhub.sys [2003-06-19 40176]
R3 usbhub20;Prise en charge du concentrateur USB; C:\WINNT\System32\DRIVERS\usbhub20.sys [2003-06-19 49776]
R3 viagfx;viagfx; C:\WINNT\System32\DRIVERS\vtmini.sys [2005-06-01 227712]
R3 ZDPNDIS5;ZDPNDIS5 NDIS Protocol Driver; \??\C:\WINNT\system32\ZDPNDIS5.SYS []
S3 F-Secure Standalone Minifilter;F-Secure Standalone Minifilter; \??\C:\DOCUME~1\arnaud\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys []
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINNT\system32\drivers\MODEMCSA.sys [1999-09-25 16144]
S3 NTSIM;NTSIM; \??\C:\WINNT\System32\ntsim.sys []
S3 Ptserial;W2K Pctel Serial Device Driver; C:\WINNT\System32\DRIVERS\ptserial.sys [2003-08-04 324590]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINNT\System32\DRIVERS\usbprint.sys [2003-06-19 21872]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINNT\System32\DRIVERS\USBSTOR.SYS [2003-06-19 21552]
S3 viafilter;VIA USB Filter; C:\WINNT\System32\Drivers\viausb.sys [2005-03-23 9038]
S3 Vmodem;W2K Vmodem; C:\WINNT\System32\DRIVERS\vmodem.sys [2003-08-01 936833]
S3 Vpctcom;W2K Vpctcom; C:\WINNT\System32\DRIVERS\vpctcom.sys [2003-08-04 942675]
S3 Vvoice;W2K Vvoice; C:\WINNT\System32\DRIVERS\vvoice.sys [2003-08-01 90900]
S3 ZD1211U(Sitecom);Sitecom Wireless Network USB Adapter Driver(Sitecom); C:\WINNT\system32\DRIVERS\zd1211u.sys [2004-07-05 232448]
S4 IntelIde;IntelIde; C:\WINNT\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINNT\system32\HPZipm12.exe [2007-08-09 73728]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINNT\system32\mspmspsv.exe [2001-05-02 53248]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WmdmPmSN;Service de numéro de série du lecteur multimédia portable; C:\WINNT\System32\svchost.exe [2002-08-02 7952]

-----------------EOF-----------------

désolé pour le temps mais j'ai eu différents problèmes :

j'ai redémarrer en mode sans echec puis lancé smitfraudfix et la une fenetre s'est ouverte "nettoyage de disque" "le nettoyage de disque calcule la quantité d'espace pouvant etre libéré sur HP" "compression des fichiers non utilisés" et impossible que le calcul se lance (bloqué) j'ai donc était dans smitfraud et tapé oui à la question voulez-vous nettoyer le registre. au bout de quelques minutes, une autre fenetre s'est ouverte "editeur de registre" avec le message suivant :

impossible d'importer cleanup.reg : erreur d'accès au registre.

j'ai donc relancé l'ordi en mode normal et lancer malwerebite's mais je n'ai pas de rapport car lorsqu'il scan mon ordi il me donne des messages d'erreur.

Par contre, apparemment, antivirus trigger à disparu.

voici le nouveau rapport hijackthis :

Logfile of random's system information tool 1.04 (written by random/random)
Run by arnaud at 2008-12-03 14:20:55
Microsoft Windows 2000 Professionnel Service Pack 4
System drive C: has 12 GB (34%) free of 34 GB
Total RAM: 447 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:21:20, on 03/12/2008
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINNT\system32\HPZipm12.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\RunDll32.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINNT\system32\VTTimer.exe
C:\WINNT\system32\VTtrayp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\arnaud\Bureau\sécurité\RSIT.exe
C:\Program Files\trend micro\arnaud.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: gksraemq - {F661BA6B-FAF4-4165-A701-F65A7585AC91} - C:\DOCUME~1\arnaud\LOCALS~1\Temp\ac8zt2\gksraemq.dll (file missing)
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [RaidTool] C:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\XPC Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [QuickTime Task] C:\Program Files\WebMediaViewer\qttask.exe
O4 - HKLM\..\Policies\Explorer\Run: [VMware hptray] C:\Program Files\WebMediaViewer\hpmon.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - .DEFAULT User Startup: ddrive.js (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Sitecom USB Wireless LAN Utility.lnk = C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.expresstoolie.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IExplorer Security - {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} - http://www.expresstoolie.com/redirect.php (file missing)
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {56E4B9EB-4C79-4568-A19E-72794FA70060} (PatsShellOCX Control) - http://www.futuresplatform.com/SunJVMPatsFiles6_1/pats.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe

--
End of file - 7486 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-04-23 1377576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - @msdxmLC.dll,-1@1033,&Radio - C:\WINNT\System32\msdxm.ocx [2005-06-03 848656]
{F661BA6B-FAF4-4165-A701-F65A7585AC91} - gksraemq - C:\DOCUME~1\arnaud\LOCALS~1\Temp\ac8zt2\gksraemq.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"=mobsync.exe /logon []
"Cmaudio"=RunDll32 cmicnfg.cpl []
"RaidTool"=C:\Program Files\VIA\RAID\raid_tool.exe [2005-06-20 1056768]
"VTTimer"=C:\WINNT\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\WINNT\system32\VTtrayp.exe [2005-03-11 147456]
"NeroFilterCheck"=C:\WINNT\system32\NeroCheck.exe [2001-07-09 155648]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"PV92TRAY"=C:\WINNT\system32\PV92Tray.exe [2003-06-25 311296]
"PCTVOICE"=C:\WINNT\system32\pctspk.exe [2003-07-18 180224]
"DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-10-21 413696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2008-10-22 399504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"QuickTime Task"=C:\Program Files\WebMediaViewer\qttask.exe []
"VMware hptray"=C:\Program Files\WebMediaViewer\hpmon.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DriverUpdaterPro"=C:\Program Files\XPC Tools\Driver Updater Pro\DriverUpdaterPro.exe -t []
"msnmsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-09-04 6856704]
"ctfmon.exe"=C:\WINNT\system32\ctfmon.exe [2001-02-20 8192]

C:\Documents and Settings\All Users.WINNT\Menu Démarrer\Programmes\Démarrage
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Sitecom USB Wireless LAN Utility.lnk - C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2008-12-03 13:50:22 ----D---- C:\Documents and Settings\arnaud\Application Data\Malwarebytes
2008-12-03 13:50:14 ----D---- C:\Documents and Settings\All Users.WINNT\Application Data\Malwarebytes
2008-12-03 13:50:13 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-03 11:59:33 ----A---- C:\WINNT\system32\tmp.txt
2008-12-03 11:59:26 ----A---- C:\rapport.txt
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\WS2Fix.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\VCCLSID.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\VACFix.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\swxcacls.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\swsc.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\SrchSTS.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\o4Patch.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\IEDFix.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\IEDFix.C.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\dumphive.exe
2008-12-03 11:54:15 ----A---- C:\WINNT\system32\404Fix.exe
2008-12-03 11:54:14 ----A---- C:\WINNT\system32\swreg.exe
2008-12-03 11:54:14 ----A---- C:\WINNT\system32\Process.exe
2008-12-03 11:53:32 ----A---- C:\SmitfraudFix.exe
2008-12-03 10:36:59 ----D---- C:\Program Files\RogueRemover FREE
2008-12-03 10:35:09 ----A---- C:\rr-free-setup.exe
2008-12-02 18:19:02 ----A---- C:\WINNT\system32\wuapi.dll.mui
2008-12-02 08:50:47 ----D---- C:\fsaua.data
2008-12-02 04:19:51 ----D---- C:\Program Files\trend micro
2008-12-02 04:19:50 ----D---- C:\rsit
2008-12-02 04:18:37 ----A---- C:\RSIT.exe
2008-12-01 10:16:59 ----AD---- C:\Documents and Settings\All Users.WINNT\Application Data\TEMP
2008-11-26 09:33:18 ----D---- C:\Documents and Settings\All Users.WINNT\Application Data\HP Product Assistant
2008-11-17 19:30:26 ----HDC---- C:\WINNT\$NtUninstallKB955069$
2008-11-17 19:28:37 ----HDC---- C:\WINNT\$NtUninstallKB957097$
2008-11-06 16:51:31 ----HDC---- C:\WINNT\$NtUninstallKB954211$
2008-11-06 16:51:17 ----HDC---- C:\WINNT\$NtUninstallKB956391$
2008-11-06 16:50:14 ----HDC---- C:\WINNT\$NtUninstallKB956390-IE6SP1-20080820.120000$
2008-11-06 16:48:09 ----HDC---- C:\WINNT\$NtUninstallKB958644$
2008-11-06 16:47:52 ----HDC---- C:\WINNT\$NtUninstallKB957095$

======List of files/folders modified in the last 1 months======

2008-12-03 14:20:58 ----AD---- C:\WINNT\system32
2008-12-03 13:50:19 ----AD---- C:\WINNT\system32\drivers
2008-12-03 13:50:13 ----RAD---- C:\Program Files
2008-12-03 13:44:06 ----AD---- C:\WINNT\Temp
2008-12-03 13:39:49 ----D---- C:\WINNT\system32\NtmsData
2008-12-03 13:39:04 ----AD---- C:\WINNT\Debug
2008-12-03 13:39:01 ----AD---- C:\WINNT\security
2008-12-03 13:36:08 ----AD---- C:\WINNT
2008-12-03 13:36:08 ----A---- C:\WINNT\ntbtlog.txt
2008-12-03 12:26:14 ----A---- C:\WINNT\SchedLgU.Txt
2008-12-03 10:39:09 ----AD---- C:\Program Files\Fichiers communs
2008-12-02 18:23:42 ----D---- C:\WINNT\SoftwareDistribution
2008-12-02 18:19:09 ----RASHDC---- C:\WINNT\system32\dllcache
2008-12-02 18:19:06 ----HD---- C:\WINNT\inf
2008-12-02 18:19:06 ----AD---- C:\WINNT\Help
2008-12-02 17:51:40 ----AD---- C:\Program Files\Internet Explorer
2008-12-02 12:30:59 ----SD---- C:\WINNT\Downloaded Program Files
2008-12-02 06:39:58 ----AD---- C:\Program Files\Spybot - Search & Destroy
2008-12-02 04:41:04 ----D---- C:\WINNT\system32\Macromed
2008-12-01 10:39:48 ----SHD---- C:\WINNT\Installer
2008-12-01 10:39:48 ----AD---- C:\Config.Msi
2008-12-01 10:39:46 ----AD---- C:\Program Files\Google
2008-12-01 10:39:45 ----D---- C:\Documents and Settings\All Users.WINNT\Application Data\Google
2008-11-28 12:27:09 ----AD---- C:\Program Files\PokerStars
2008-11-26 18:21:30 ----A---- C:\WINNT\system32\aswBoot.exe
2008-11-26 10:50:23 ----D---- C:\Documents and Settings\arnaud\Application Data\HP
2008-11-26 10:43:52 ----A---- C:\WINNT\ODBC.INI
2008-11-26 09:34:34 ----AD---- C:\Program Files\HP
2008-11-26 09:33:21 ----D---- C:\WINNT\winsxs
2008-11-25 21:15:09 ----A---- C:\WINNT\NeroDigital.ini
2008-11-25 20:07:10 ----D---- C:\Documents and Settings\arnaud\Application Data\Skype
2008-11-25 20:05:39 ----D---- C:\Documents and Settings\arnaud\Application Data\skypePM
2008-11-24 12:18:25 ----AD---- C:\Program Files\PATS JTrader Client
2008-11-22 11:44:03 ----SHD---- C:\WINNT\CSC
2008-11-22 11:26:58 ----A---- C:\WINNT\ModemLog_Câble de communication entre deux ordinateurs.txt
2008-11-17 19:30:37 ----A---- C:\WINNT\imsins.BAK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINNT\system32\drivers\Aavmker4.sys [2008-11-26 26944]
R1 aswSP;avast! Self Protection; C:\WINNT\system32\drivers\aswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:\WINNT\system32\drivers\aswTdi.sys [2008-11-26 50864]
R1 Cdr4_2K;Cdr4_2K; C:\WINNT\system32\drivers\Cdr4_2K.sys [2008-05-09 58000]
R1 Cdralw2k;Cdralw2k; C:\WINNT\system32\drivers\Cdralw2k.sys [2008-05-09 23420]
R2 aswFsBlk;aswFsBlk; C:\WINNT\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
R2 aswMon;avast! Standard Shield Support; C:\WINNT\system32\drivers\aswMon.sys [2008-11-26 93296]
R2 HidUsb;Pilote de classe HID Microsoft; C:\WINNT\System32\DRIVERS\hidusb.sys [1999-10-04 13904]
R2 tmcomm;tmcomm; \??\C:\WINNT\system32\drivers\tmcomm.sys []
R3 aswRdr;aswRdr; C:\WINNT\system32\drivers\aswRdr.sys [2008-11-26 23152]
R3 cmuda;C-Media WDM Audio Interface; C:\WINNT\system32\drivers\cmuda.sys [2004-04-24 818496]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINNT\System32\DRIVERS\fetnd5b.sys [2003-11-11 41984]
R3 fhlppppoe;PPPOE/ADSL miniport; C:\WINNT\system32\DRIVERS\fhlpppoe.sys [2002-11-21 49264]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINNT\system32\drivers\mbamswissarmy.sys []
R3 mouhid;Pilote HID de souris; C:\WINNT\System32\DRIVERS\mouhid.sys [2003-06-19 11824]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINNT\System32\Drivers\RootMdm.sys [2002-08-02 6032]
R3 uhcd;Pilote de contrôleur hôte universel USB Microsoft; C:\WINNT\System32\DRIVERS\uhcd.sys [2003-06-19 32848]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINNT\System32\DRIVERS\usbehci.sys [2003-06-19 19728]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINNT\System32\DRIVERS\usbhub.sys [2003-06-19 40176]
R3 usbhub20;Prise en charge du concentrateur USB; C:\WINNT\System32\DRIVERS\usbhub20.sys [2003-06-19 49776]
R3 viagfx;viagfx; C:\WINNT\System32\DRIVERS\vtmini.sys [2005-06-01 227712]
R3 ZDPNDIS5;ZDPNDIS5 NDIS Protocol Driver; \??\C:\WINNT\system32\ZDPNDIS5.SYS []
S3 F-Secure Standalone Minifilter;F-Secure Standalone Minifilter; \??\C:\DOCUME~1\arnaud\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys []
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINNT\system32\drivers\MODEMCSA.sys [1999-09-25 16144]
S3 NTSIM;NTSIM; \??\C:\WINNT\System32\ntsim.sys []
S3 Ptserial;W2K Pctel Serial Device Driver; C:\WINNT\System32\DRIVERS\ptserial.sys [2003-08-04 324590]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINNT\System32\DRIVERS\usbprint.sys [2003-06-19 21872]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINNT\System32\DRIVERS\USBSTOR.SYS [2003-06-19 21552]
S3 viafilter;VIA USB Filter; C:\WINNT\System32\Drivers\viausb.sys [2005-03-23 9038]
S3 Vmodem;W2K Vmodem; C:\WINNT\System32\DRIVERS\vmodem.sys [2003-08-01 936833]
S3 Vpctcom;W2K Vpctcom; C:\WINNT\System32\DRIVERS\vpctcom.sys [2003-08-04 942675]
S3 Vvoice;W2K Vvoice; C:\WINNT\System32\DRIVERS\vvoice.sys [2003-08-01 90900]
S3 ZD1211U(Sitecom);Sitecom Wireless Network USB Adapter Driver(Sitecom); C:\WINNT\system32\DRIVERS\zd1211u.sys [2004-07-05 232448]
S4 IntelIde;IntelIde; C:\WINNT\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINNT\system32\HPZipm12.exe [2007-08-09 73728]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINNT\system32\mspmspsv.exe [2001-05-02 53248]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WmdmPmSN;Service de numéro de série du lecteur multimédia portable; C:\WINNT\System32\svchost.exe [2002-08-02 7952]

-----------------EOF-----------------

Les bons plans du moment PC Astuces