Internet tres lent

Pour internet le probleme est malheureusement toujours la.

J'ai refait un rapport HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:51:27, on 31/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Glary Utilities\Integrator.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\christian\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSD.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Bonjour,

Malwarebytes' Anti-Malware 1.35
Version de la base de données: 1929
Windows 5.1.2600 Service Pack 3

01/04/2009 23:19:12
mbam-log-2009-04-01 (23-18-56).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 257892
Temps écoulé: 1 hour(s), 23 minute(s), 31 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\christian\Application Data\Desktopicon\eBayShortcuts.exe (Trojan.Agent) -> No action taken.

Rapport COMBOFIX

ComboFix 09-04-01.01 - christian 2009-04-01 23:26:40.3 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1279.604 [GMT 2:00]
Lancé depuis: c:\documents and settings\christian\Bureau\ComboFix.exe
FW: ZoneAlarm Firewall *enabled*
* Un nouveau point de restauration a été créé
* Resident AV is active

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Process.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-03-01 au 2009-04-01 ))))))))))))))))))))))))))))))))))))
.

2009-04-01 21:52 . 2009-04-01 23:19 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-04-01 21:52 . 2009-03-26 16:49 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-01 21:52 . 2009-03-26 16:49 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-04-01 20:44 . 2009-04-01 20:44 <REP> d--h----- c:\documents and settings\Administrateur\Modèles
2009-03-31 22:08 . 2009-03-31 22:08 <REP> d-------- c:\program files\AskBarDis
2009-03-31 06:39 . 2009-03-31 06:39 21 --a------ c:\windows\kit.ini
2009-03-31 06:34 . 2009-03-31 06:34 <REP> d-------- c:\program files\SAGEM
2009-03-31 06:33 . 2009-03-31 06:33 <REP> d-------- c:\program files\Securitoo
2009-03-30 20:29 . 2009-03-30 20:30 <REP> d-------- c:\documents and settings\christian\Application Data\vlc
2009-03-30 20:27 . 2009-03-30 20:27 <REP> d-------- c:\program files\VideoLAN
2009-03-30 20:20 . 2009-03-31 06:03 <REP> d-------- c:\program files\ffvfw_sav
2009-03-30 20:07 . 2009-03-30 20:07 <REP> d-------- c:\documents and settings\christian\Application Data\Uniblue
2009-03-30 18:13 . 2009-03-30 18:13 <REP> d-------- c:\documents and settings\christian\Application Data\ATI
2009-03-30 18:05 . 2007-03-22 21:05 520,192 --------- c:\windows\system32\ati2sgag.exe
2009-03-30 17:15 . 2009-03-30 17:16 <REP> d-------- c:\program files\Network Associates
2009-03-30 17:15 . 2009-03-30 17:15 <REP> d-------- c:\program files\Fichiers communs\Network Associates
2009-03-30 17:15 . 2009-03-30 17:16 <REP> d-------- c:\documents and settings\All Users\Application Data\Network Associates
2009-03-30 17:15 . 2004-08-25 08:00 108,256 --a------ c:\windows\system32\drivers\naiavf5x.sys
2009-03-30 17:15 . 2004-08-25 08:00 58,016 --a------ c:\windows\system32\drivers\mvstdi5x.sys
2009-03-29 11:00 . 2009-03-29 12:12 <REP> d-------- c:\windows\BDOSCAN8
2009-03-27 23:00 . 2009-03-27 23:00 <REP> d-------- c:\documents and settings\christian\Application Data\Malwarebytes
2009-03-27 07:51 . 2004-10-15 10:20 1,654,784 --a------ c:\windows\system32\W29MLRES.DLL
2009-03-27 07:51 . 2004-01-02 15:58 13 --a------ c:\windows\system32\drivers\verfile.tic
2009-03-25 22:09 . 2009-03-25 22:09 <REP> d-------- c:\windows\tiinst
2009-03-25 09:25 . 2009-03-25 09:25 <REP> d-------- c:\documents and settings\Invité\Application Data\Windows Desktop Search
2009-03-25 09:24 . 2009-03-25 09:24 <REP> d-------- c:\documents and settings\Invité\Application Data\Intel
2009-03-25 09:23 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Invité\Voisinage réseau
2009-03-25 09:23 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Invité\Voisinage réseau
2009-03-25 09:23 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Invité\Voisinage d'impression
2009-03-25 09:23 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Invité\Voisinage d'impression
2009-03-25 09:23 . 2009-03-22 10:55 <REP> d--h----- c:\documents and settings\Invité\Modèles
2009-03-25 09:23 . 2009-03-22 10:55 <REP> d--h----- c:\documents and settings\Invité\Modèles
2009-03-25 09:23 . 2009-03-25 09:25 <REP> dr------- c:\documents and settings\Invité\Mes documents
2009-03-25 09:23 . 2009-03-25 09:25 <REP> dr------- c:\documents and settings\Invité\Mes documents
2009-03-25 09:23 . 2009-03-22 10:41 <REP> dr------- c:\documents and settings\Invité\Menu Démarrer
2009-03-25 09:23 . 2009-03-22 10:41 <REP> dr------- c:\documents and settings\Invité\Menu Démarrer
2009-03-25 09:23 . 2009-03-25 09:25 <REP> dr------- c:\documents and settings\Invité\Favoris
2009-03-25 09:23 . 2009-03-25 09:25 <REP> dr------- c:\documents and settings\Invité\Favoris
2009-03-25 09:23 . 2009-03-22 10:55 <REP> d-------- c:\documents and settings\Invité\Bureau
2009-03-25 09:23 . 2009-03-22 10:55 <REP> d-------- c:\documents and settings\Invité\Bureau
2009-03-25 09:23 . 2009-03-25 09:23 <REP> d-------- c:\documents and settings\Invité
2009-03-24 18:39 . 2009-03-24 18:39 <REP> d--hs---- c:\documents and settings\Papa\IETldCache
2009-03-23 21:21 . 2009-03-23 21:21 <REP> d--hs---- c:\documents and settings\christian\IECompatCache
2009-03-22 20:08 . 2008-04-14 04:33 81,920 --a------ c:\windows\system32\ieencode.dll
2009-03-22 19:03 . 2009-03-22 19:03 <REP> d--hs---- c:\documents and settings\christian\PrivacIE
2009-03-22 18:59 . 2009-03-22 18:59 <REP> d--hs---- c:\documents and settings\LocalService\IETldCache
2009-03-22 18:59 . 2009-03-22 18:59 <REP> d--hs---- c:\documents and settings\christian\IETldCache
2009-03-22 18:56 . 2009-03-30 18:51 <REP> d-------- c:\windows\ie8updates
2009-03-22 18:50 . 2009-02-28 06:55 105,984 -----c--- c:\windows\system32\dllcache\iecompat.dll
2009-03-22 15:54 . 2009-03-22 15:54 <REP> d-------- c:\documents and settings\Maxime\Application Data\Windows Desktop Search
2009-03-22 15:53 . 2009-03-22 15:54 <REP> dr------- c:\documents and settings\Maxime\Favoris
2009-03-22 15:53 . 2009-03-22 16:01 <REP> d-------- c:\documents and settings\Maxime\Bureau
2009-03-22 15:53 . 2009-03-22 15:53 <REP> d-------- c:\documents and settings\Maxime\Application Data\Intel
2009-03-22 15:52 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Maxime\Voisinage réseau
2009-03-22 15:52 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Maxime\Voisinage d'impression
2009-03-22 15:52 . 2009-03-22 10:55 <REP> d--h----- c:\documents and settings\Maxime\Modèles
2009-03-22 15:52 . 2009-03-22 15:54 <REP> dr------- c:\documents and settings\Maxime\Mes documents
2009-03-22 15:52 . 2009-03-22 10:41 <REP> dr------- c:\documents and settings\Maxime\Menu Démarrer
2009-03-22 15:52 . 2009-03-22 15:53 <REP> d-------- c:\documents and settings\Maxime
2009-03-22 13:26 . 2008-05-08 16:02 203,136 -----c--- c:\windows\system32\dllcache\rmcast.sys
2009-03-22 13:25 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Papa\Voisinage réseau
2009-03-22 13:25 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Papa\Voisinage d'impression
2009-03-22 13:25 . 2009-03-22 10:55 <REP> d--h----- c:\documents and settings\Papa\Modèles
2009-03-22 13:25 . 2009-03-24 18:39 <REP> dr------- c:\documents and settings\Papa\Mes documents
2009-03-22 13:25 . 2009-03-22 10:41 <REP> dr------- c:\documents and settings\Papa\Menu Démarrer
2009-03-22 13:25 . 2009-03-24 18:39 <REP> dr------- c:\documents and settings\Papa\Favoris
2009-03-22 13:25 . 2009-03-28 16:38 <REP> d-------- c:\documents and settings\Papa\Bureau
2009-03-22 13:25 . 2009-03-22 13:25 <REP> d-------- c:\documents and settings\Papa\Application Data\Windows Desktop Search
2009-03-22 13:25 . 2009-03-22 13:25 <REP> d-------- c:\documents and settings\Papa\Application Data\Intel
2009-03-22 13:25 . 2009-03-24 18:39 <REP> d-------- c:\documents and settings\Papa
2009-03-22 13:23 . 2008-06-14 19:33 272,768 -----c--- c:\windows\system32\dllcache\bthport.sys
2009-03-22 13:20 . 2008-10-16 03:01 1,499,648 -----c--- c:\windows\system32\dllcache\shdocvw.dll
2009-03-22 13:20 . 2008-10-16 03:01 670,208 --a--c--- c:\windows\system32\dllcache\wininet.dll
2009-03-22 13:20 . 2008-10-16 03:01 620,544 --a--c--- c:\windows\system32\dllcache\urlmon.dll
2009-03-22 13:18 . 2008-08-14 15:23 2,191,232 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
2009-03-22 13:18 . 2008-08-14 15:23 2,147,328 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-03-22 13:18 . 2008-08-14 15:23 2,068,096 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-03-22 13:18 . 2008-08-14 15:23 2,025,984 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
2009-03-22 13:16 . 2008-12-12 19:02 3,088,896 --a--c--- c:\windows\system32\dllcache\mshtml.dll
2009-03-22 13:13 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Marion\Voisinage réseau
2009-03-22 13:13 . 2009-03-22 10:41 <REP> d--h----- c:\documents and settings\Marion\Voisinage d'impression
2009-03-22 13:13 . 2009-03-22 10:55 <REP> d--h----- c:\documents and settings\Marion\Modèles
2009-03-22 13:13 . 2009-03-22 13:13 <REP> dr------- c:\documents and settings\Marion\Mes documents
2009-03-22 13:13 . 2009-03-22 10:41 <REP> dr------- c:\documents and settings\Marion\Menu Démarrer
2009-03-22 13:13 . 2009-03-22 13:13 <REP> dr------- c:\documents and settings\Marion\Favoris
2009-03-22 13:13 . 2009-03-22 10:55 <REP> d-------- c:\documents and settings\Marion\Bureau
2009-03-22 13:13 . 2009-03-22 13:13 <REP> d-------- c:\documents and settings\Marion\Application Data\Windows Desktop Search
2009-03-22 13:13 . 2009-03-22 13:13 <REP> d-------- c:\documents and settings\Marion\Application Data\Intel
2009-03-22 13:13 . 2009-03-22 13:13 <REP> d-------- c:\documents and settings\Marion
2009-03-22 13:13 . 2008-10-24 13:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
2009-03-22 13:12 . 2008-12-11 12:57 333,952 -----c--- c:\windows\system32\dllcache\srv.sys
2009-03-22 13:12 . 2008-05-01 16:36 331,776 -----c--- c:\windows\system32\dllcache\msadce.dll
2009-03-22 13:10 . 2008-04-11 21:05 691,712 -----c--- c:\windows\system32\dllcache\inetcomm.dll
2009-03-22 13:07 . 2008-09-04 19:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
2009-03-22 13:07 . 2008-10-15 18:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
2009-03-22 13:05 . 2009-01-09 21:19 1,089,883 -----c--- c:\windows\system32\dllcache\ntprint.cat
2009-03-22 13:02 . 2009-03-22 13:02 <REP> d-------- c:\documents and settings\NetworkService\Menu Démarrer
2009-03-22 12:26 . 2008-04-14 04:33 1,306,624 -----c--- c:\windows\system32\dllcache\msxml6.dll
2009-03-22 12:25 . 2007-06-26 08:00 457,607 -----c--- c:\windows\system32\dllcache\mdlib.wmv
2009-03-22 12:25 . 2008-04-14 04:34 380,928 --a------ c:\windows\system32\irprops.cpl
2009-03-22 12:25 . 2008-04-14 04:31 294,912 -----c--- c:\windows\system32\dllcache\msaud32.acm
2009-03-22 12:25 . 2008-04-14 04:31 290,816 -----c--- c:\windows\system32\dllcache\l3codeca.acm
2009-03-22 12:25 . 2007-06-26 07:59 97,117 -----c--- c:\windows\system32\dllcache\mplayer2.hlp
2009-03-22 12:25 . 2004-08-05 14:00 36,640 -----c--- c:\windows\system32\dllcache\mplayer2.inf
2009-03-22 12:25 . 2007-06-26 08:00 5,971 -----c--- c:\windows\system32\dllcache\events.js
2009-03-22 12:25 . 2004-08-05 14:00 2,778 -----c--- c:\windows\system32\dllcache\mplogoh.gif
2009-03-22 12:25 . 2004-08-05 14:00 2,545 -----c--- c:\windows\system32\dllcache\mplogo.gif
2009-03-22 12:25 . 2007-06-26 07:59 1,885 -----c--- c:\windows\system32\dllcache\mplayer2.cnt
2009-03-22 12:24 . 2007-06-26 08:00 381,425 -----c--- c:\windows\system32\dllcache\copycd.wmv
2009-03-22 12:24 . 2008-04-14 04:34 294,912 -----c--- c:\windows\system32\dllcache\dlimport.exe
2009-03-22 12:24 . 2004-07-17 11:34 184,107 -----c--- c:\windows\system32\dllcache\compact.wmz
2009-03-22 12:24 . 2007-06-26 08:00 9,585 -----c--- c:\windows\system32\dllcache\controls.css
2009-03-22 12:24 . 2007-06-26 08:00 8,298 -----c--- c:\windows\system32\dllcache\contents.htm
2009-03-22 12:24 . 2007-06-26 08:00 6,878 -----c--- c:\windows\system32\dllcache\controls.js
2009-03-22 12:24 . 2004-08-05 14:00 999 -----c--- c:\windows\system32\dllcache\bktrh.gif
2009-03-22 12:24 . 2004-08-05 14:00 773 -----c--- c:\windows\system32\dllcache\cnth.gif
2009-03-22 12:24 . 2004-08-05 14:00 773 -----c--- c:\windows\system32\dllcache\cnt.gif
2009-03-22 12:24 . 2004-08-05 14:00 772 -----c--- c:\windows\system32\dllcache\cntd.gif
2009-03-22 12:24 . 2004-08-05 14:00 760 -----c--- c:\windows\system32\dllcache\cloapph.gif
2009-03-22 12:24 . 2004-08-05 14:00 717 -----c--- c:\windows\system32\dllcache\cloapp.gif
2009-03-22 11:32 . 2009-03-22 11:32 2,422 --a------ c:\windows\system32\wpa.bak
2009-03-22 11:02 . 2008-04-14 04:32 426,041 --a--c--- c:\windows\system32\dllcache\voicepad.dll
2009-03-22 11:02 . 2008-04-14 04:32 156,672 --a--c--- c:\windows\system32\dllcache\winzm.ime
2009-03-22 11:02 . 2008-04-14 04:32 156,672 --a--c--- c:\windows\system32\dllcache\winsp.ime
2009-03-22 11:02 . 2008-04-14 04:32 156,672 --a--c--- c:\windows\system32\dllcache\winpy.ime

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-01 21:32 1,697,824 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-01 21:20 21,320 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-04-01 21:19 --------- d-----w c:\documents and settings\christian\Application Data\Desktopicon
2009-03-31 20:11 --------- d-----w c:\program files\Glary Utilities
2009-03-31 19:46 --------- d-----w c:\program files\Yahoo!
2009-03-31 18:06 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-03-31 04:39 --------- d-----w c:\program files\Wanadoo
2009-03-31 04:34 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-30 16:27 --------- d-----w c:\program files\ATI Technologies
2009-03-28 17:31 33,836 ----a-w c:\documents and settings\christian\Application Data\wklnhst.dat
2009-03-27 21:57 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-03-27 17:03 --------- d-----w c:\program files\Java
2009-03-27 05:52 17,119 ----a-w c:\windows\system32\drivers\AegisP.sys
2009-03-25 19:50 --------- d-----w c:\program files\Launch Manager
2009-03-24 19:09 --------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-22 16:30 5,481,925 ----a-w c:\windows\Internet Logs\tvDebug.zip
2009-03-22 14:37 --------- d-----w c:\program files\Micro Application
2009-03-08 17:02 29,051 ----a-w c:\windows\Internet Logs\zlclient_2nd_2009_03_08_12_20_41_small.dmp.zip
2009-02-02 05:43 --------- d-----w c:\documents and settings\christian\Application Data\GlarySoft
2009-01-07 17:21 26,144 ----a-w c:\windows\system32\spupdsvc.exe
2009-01-07 17:20 265,720 ----a-w c:\windows\system32\msdbg2.dll
2009-01-07 17:20 26,112 ----a-w c:\windows\system32\idndl.dll
2009-01-07 17:20 24,576 ----a-w c:\windows\system32\nlsdl.dll
2009-01-07 17:20 23,552 ----a-w c:\windows\system32\normaliz.dll
2008-03-30 15:18 96,176 ----a-w c:\documents and settings\christian\Application Data\GDIPFONTCACHEV1.DAT
2008-08-15 07:33 122,880 ----a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2008-04-14 02:33 65,024 --sha-w c:\windows\system32\asycfilt.dll
2005-01-20 20:55 8 --sha-r c:\windows\system32\BCFCF81A7E.sys
2007-03-24 21:08 56 --sha-r c:\windows\system32\EEB141F368.sys
2008-03-29 15:29 9,552 --sha-w c:\windows\system32\KGyGaAvL.sys
2008-04-14 02:33 1,028,096 --sha-w c:\windows\system32\mfc42.dll
2004-08-05 12:00 57,344 --sha-w c:\windows\system32\mfc42loc.dll
1995-09-20 15:16 35,088 --sha-w c:\windows\system32\msjint32.dll
1995-09-20 15:13 977,680 --sha-w c:\windows\system32\msjt3032.dll
1995-09-20 15:16 23,824 --sha-w c:\windows\system32\msjter32.dll
2008-04-14 02:33 413,696 --sha-w c:\windows\system32\msvcp60.dll
2008-04-14 02:33 343,040 --sha-w c:\windows\system32\msvcrt.dll
2004-08-05 12:00 253,952 --sha-w c:\windows\system32\msvcrt20.dll
2008-04-14 02:33 551,936 --sha-w c:\windows\system32\oleaut32.dll
2008-04-14 02:33 84,992 --sha-w c:\windows\system32\olepro32.dll
2008-04-14 02:33 30,749 --sha-w c:\windows\system32\vbajet32.dll
1995-09-24 10:02 243,472 --sha-w c:\windows\system32\vbar2232.dll
1998-05-18 02:06 368,912 --sha-w c:\windows\system32\vbar332.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-07-17 17:20 279944 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-07-17 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-12-21 344064]
"CtrlVol"="c:\program files\Launch Manager\CtrlVol.exe" [2003-09-16 20480]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-05 98394]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-05 688218]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-15 385024]
"EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2004-10-15 356352]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2004-08-06 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2004-11-11 49152]
"LMgrOSD"="c:\program files\Launch Manager\OSD.exe" [2004-07-26 204800]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2004-11-23 73728]
"PCMService"="c:\program files\Home Cinema\PowerCinema\PCMService.exe" [2005-03-09 118926]
"RemoteControl"="c:\program files\Home Cinema\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"ShStatEXE"="c:\program files\Network Associates\VirusScan\SHSTAT.EXE" [2004-08-25 94208]
"McAfeeUpdaterUI"="c:\program files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 139320]
"Network Associates Error Reporting Service"="c:\program files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2003-10-07 147514]
"AGRSMMSG"="AGRSMMSG.exe" [2004-07-22 c:\windows\AGRSMMSG.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-01-02 c:\windows\soundman.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-05 44544]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-05-26 123904]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"EditLevel"= 0 (0x0)
"NoCommonGroups"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
2004-10-15 11:27 110592 c:\program files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\H:\[u]0/uautocheck autochk *

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"btwdins"=2 (0x2)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"MSConfig"=c:\windows\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"SoundMan"=SOUNDMAN.EXE
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_06\bin\jusched.exe"
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"BluetoothAuthenticationAgent"=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\Microsoft Games\\Flight Simulator 9\\fs9.exe"=
"%WinDir%\\system32\\fxsclnt.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Network Associates\\VirusScan\\shcfg32.exe"=
"c:\\Program Files\\Network Associates\\VirusScan\\ScnCfg32.Exe"=
"c:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R1 Hotkey;Hotkey;c:\windows\system32\drivers\HOTKEY.sys [2008-05-10 9867]
R1 NaiAvTdi1;NaiAvTdi1;c:\windows\system32\drivers\mvstdi5x.sys [2009-03-30 58016]
S1 mailKmd;mailKmd; [x]
S1 Wbutton;Wbutton;c:\windows\system32\drivers\Wbutton.sys --> c:\windows\system32\drivers\Wbutton.sys [?]
S3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2005-01-12 945152]
S3 flash;flash;c:\windows\system32\drivers\flash.sys [2008-05-10 7040]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-08-15 29744]
S3 K320bus;Sony Ericsson K320 driver (WDM);c:\windows\system32\drivers\K320bus.sys [2007-11-17 61504]
S3 K320mdfl;Sony Ericsson K320 USB WMC Modem Filter;c:\windows\system32\drivers\K320mdfl.sys [2007-11-17 9328]
S3 K320mdm;Sony Ericsson K320 USB WMC Modem Driver;c:\windows\system32\drivers\K320mdm.sys [2007-11-17 97056]
S3 K320mgmt;Sony Ericsson K320 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\K320mgmt.sys [2007-11-17 88560]
S3 K320obex;Sony Ericsson K320 USB WMC OBEX Interface;c:\windows\system32\drivers\K320obex.sys [2007-11-17 86368]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - ENTDRV51

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc
.
Contenu du dossier 'Tâches planifiées'

2009-04-01 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-03-23 09:49]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
IE: &Recherche AOL Toolbar - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
IE: Envoyer à &Bluetooth - c:\program files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
Trusted Zone: internet
Trusted Zone: mcafee.com
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
FF - ProfilePath - c:\documents and settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Ask
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10168&gct=&gc=1&q=
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-01 23:31:30
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\.Default\Software\Autodesk\Autodesk Digital Signatures]
@DACL=(02 0000)

[HKEY_USERS\.Default\Software\HotkeyPanel\1]
@DACL=(02 0000)
"Name"="c:\\Program Files\\Launch Manager\\hotkey.html"

[HKEY_USERS\.Default\Software\HotkeyPanel\11]
@DACL=(02 0000)
"Name"="\"c:\\Program Files\\Launch Manager\\fn.exe\""
"NameDesc"="Launch Manager"

[HKEY_USERS\.Default\Software\HotkeyPanel\12]
@DACL=(02 0000)
"Name"="\"c:\\Program Files\\Launch Manager\\fn.exe\""
"NameDesc"="Launch Manager"

[HKEY_USERS\.Default\Software\HotkeyPanel\31]
@DACL=(02 0000)
"Name"="\"c:\\Program Files\\Outlook Express\\msimn.exe\""
"NameDesc"="E-Mail"

[HKEY_USERS\.Default\Software\HotkeyPanel\36]
@DACL=(02 0000)
"Name"="\"c:\\Program Files\\Internet Explorer\\iexplore.exe\""
"NameDesc"="WWW"

[HKEY_USERS\.Default\Software\Local AppWizard-Generated Applications\LaunchAp]
@DACL=(02 0000)

[HKEY_USERS\.Default\Software\Local AppWizard-Generated Applications\Wbutton]
@DACL=(02 0000)

[HKEY_USERS\.Default\Software\Macromedia\FlashPlayer]
@DACL=(02 0000)

[HKEY_USERS\.Default\Software\Macromedia\Shockwave 10]
@DACL=(02 0000)

[HKEY_USERS\S-1-5-21-3958462218-115887364-3908271126-1010\Software\Ahead\Nero - Burning Rom\Settings\NeroIsoListView]
@DACL=(02 0000)
@SACL=
"FILENAME"="0,120,0,1"
"FILESIZE"="1,90,1,1"
"FILETYPE"="2,60,0,1"
"FILEDATE"="3,70,0,1"
"FILEORIGIN"="4,150,0,1"
"FILEATTRIBUTE"="5,60,0,0"
"FILEPRIORITY"="6,80,0,0"

[HKEY_USERS\S-1-5-21-3958462218-115887364-3908271126-1010\Software\Local AppWizard-Generated Applications\LaunchAp\Settings]
@DACL=(02 0000)
@SACL=

[HKEY_USERS\S-1-5-21-3958462218-115887364-3908271126-1010\Software\Local AppWizard-Generated Applications\MMDiag\Settings]
@DACL=(02 0000)
@SACL=

[HKEY_USERS\S-1-5-21-3958462218-115887364-3908271126-1010\Software\Local AppWizard-Generated Applications\Wbutton\Settings]
@DACL=(02 0000)
@SACL=

[HKEY_USERS\S-1-5-21-3958462218-115887364-3908271126-1010\Software\Microsoft\Internet Explorer\Default MHTML Editor\shell]
@DACL=(02 0000)
@SACL=

[HKEY_USERS\S-1-5-21-3958462218-115887364-3908271126-1010\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\ATI Technologies Inc.\Pilotes ATI]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\Classes\Applications\PHOTOED.EXE\shell]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\Classes\Software\RealNetworks\RealJukebox\1.0\Preferences\DisplayName]
@DACL=(02 0000)
@SACL=
@="RealPlayer"

[HKEY_LOCAL_MACHINE\software\Classes\Software\RealNetworks\RealJukebox\1.0\Preferences\MainApp]
@DACL=(02 0000)
@SACL=
@="c:\\Program Files\\Real\\RealPlayer\\realjbox.exe"

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IE40.BrowseUI\RegBackup]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IEHomePageInfo\RegBackup]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\10.0]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\7.0]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\Monitors]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\Monitors\//./DISPLAY1\[u]0/u,0,1280,768]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\services]
@DACL=(02 0000)
@SACL=
"NoServices"=dword:00000000

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\Settings]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\ShimInclusionList\FIREFOX.EXE]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\MediaPlayer\UIPlugins\{292AE934-4F49-40bb-9E7E-6F6398ED9C31}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Plug-in Nero Fast CD-Burning"
"Description"="Graver votre CD"
"Capabilities"=dword:40000001

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{3FDF25EE-E592-4495-8391-6E9C504DAC2B}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\\WMSET10.inf"
"ExceptionCatalogName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\\wmset10.cat"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{60204BB3-7078-4F70-8F69-68297621941C}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{60204BB3-7078-4F70-8F69-68297621941C}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{60204BB3-7078-4F70-8F69-68297621941C}\\MPSTUB10.inf"
"ExceptionCatalogName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{60204BB3-7078-4F70-8F69-68297621941C}\\mpstub10.cat"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\\MPCD10.inf"
"ExceptionCatalogName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\\mpcd10.cat"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{DD90D410-1823-43EB-9A16-A2331BF08799}]
@DACL=(02 0000)
@SACL=
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{DD90D410-1823-43EB-9A16-A2331BF08799}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{DD90D410-1823-43EB-9A16-A2331BF08799}\\WMP10.inf"
"ExceptionCatalogName"=expand:"c:\\WINDOWS\\RegisteredPackages\\{DD90D410-1823-43EB-9A16-A2331BF08799}\\wmp10.cat"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwDir]
@DACL=(02 0000)
@SACL=
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash]
@DACL=(02 0000)
@SACL=
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows Media Device Manager\Plugins\SCP\SCPTRANS]
@DACL=(02 0000)
@SACL=
"ProgID"="MsScp.SCPTRANS.1"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows Media Device Manager\Plugins\SP\NeroBurnPlugin]
@DACL=(02 0000)
@SACL=
"ProgID"="MDNeroBurnPlugin.MDNeroBurnPlugin"

[HKEY_LOCAL_MACHINE\software\MozillaPlugins\@viewpoint.com/VMP\MimeTypes]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\MozillaPlugins\@viewpoint.com/VMP\Suffixes]
@DACL=(02 0000)
@SACL=
"mtx"=""
"mtz"=""
"mts"=""

[HKEY_LOCAL_MACHINE\software\Obsidian\Star Wars(tm) Knights of the Old Republic(tm) II: The Sith Lords(tm)]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Realtek Semiconductor Corp.\Realtek AC'97 Audio]
@DACL=(02 0000)
@SACL=

[HKEY_LOCAL_MACHINE\software\ViaMichelin\ViaMichelin Navigation]
@DACL=(02 0000)
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1104)
c:\windows\system32\Ati2evxx.dll
c:\program files\Intel\Wireless\Bin\LgNotify.dll

- - - - - - - > 'lsass.exe'(1160)
c:\windows\system32\EntApi.dll
.
Heure de fin: 2009-04-01 23:34:37
ComboFix-quarantined-files.txt 2009-04-01 21:34:32

Avant-CF: 12 863 352 832 octets libres
Après-CF: 12,837,810,176 octets libres

Current=4 Default=4 Failed=0 LastKnownGood=6 Sets=1,2,3,4,6
498 --- E O F --- 2009-03-23 06:13:57


Il reste le scan kaperski mais je n'arrive pas à le lancer.

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Thursday, April 02, 2009 8:37:47 PM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 1/04/2009
Enregistrements dans la base antivirus Kaspersky : 1802231
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
E:\
F:\

Statistiques de l'analyse:
Total d'objets analysés: 163716
Nombre de virus trouvés: 1
Nombre d'objets infectés: 1 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 04:02:12

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.20.Crwl L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.20.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010005.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010006.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.ci L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.wsb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010010.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010013.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010014.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010015.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001C.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001D.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\Used0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk1.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk2.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.Ntfy5.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tmp.edb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Windows.edb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\0237\0192\values L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\BOPDATA\_Date-20090401_Time-232215051_EnterceptExceptions.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\BOPDATA\_Date-20090401_Time-232215051_EnterceptRules.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\Agent_WORK.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\PrdMgr_WORK.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\AccessProtectionLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\BufferOverflowProtectionLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\OnAccessScanLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\cert8.db L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\content-prefs.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\cookies.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\downloads.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\logs\ytoolbar.thu.log L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\formhistory.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\key3.db L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\parent.lock L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\permissions.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\places.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\places.sqlite-journal L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\search.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db.shadow L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_001_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_002_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_003_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_MAP_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\urlclassifier3.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\XUL.mfl L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\temp\etilqs_bju9SHF26xqrW6ar5Zej L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\christian\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_AGENT_LOG1.txt L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_AUDIO\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_AUDIO\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_BINARY\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_BLOB\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_BLOB\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_GLOBAL\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_GLOBAL\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_IMAGE\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_IMAGE\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_MAIN\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_MAIN\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_TV\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_TV\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_VIDEO\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_VIDEO\CLML.db-journal L'objet est verrouillé ignoré
C:\quarantine\Av-test.txt.Vir Infecté : EICAR-Test-File ignoré
C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\ACEEvent.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\drivers\fidbox.dat L'objet est verrouillé ignoré
C:\WINDOWS\system32\drivers\fidbox.idx L'objet est verrouillé ignoré
C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
C:\WINDOWS\Temp\Perflib_Perfdata_8b4.dat L'objet est verrouillé ignoré
C:\WINDOWS\Temp\usgthrsvc\Perflib_Perfdata_8f4.dat L'objet est verrouillé ignoré
C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

Analyse terminée.

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Thursday, April 02, 2009 8:37:47 PM
Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 1/04/2009
Enregistrements dans la base antivirus Kaspersky : 1802231
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
E:\
F:\

Statistiques de l'analyse:
Total d'objets analysés: 163716
Nombre de virus trouvés: 1
Nombre d'objets infectés: 1 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 04:02:12

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.20.Crwl L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.20.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010005.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010006.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.ci L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.wsb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010010.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010013.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010014.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010015.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001C.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001D.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\Used0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk1.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk2.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.Ntfy5.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tmp.edb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Windows.edb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\0237\0192\values L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\BOPDATA\_Date-20090401_Time-232215051_EnterceptExceptions.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\BOPDATA\_Date-20090401_Time-232215051_EnterceptRules.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\Agent_WORK.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\PrdMgr_WORK.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\AccessProtectionLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\BufferOverflowProtectionLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\OnAccessScanLog.txt L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\cert8.db L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\content-prefs.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\cookies.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\downloads.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\logs\ytoolbar.thu.log L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\formhistory.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\key3.db L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\parent.lock L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\permissions.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\places.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\places.sqlite-journal L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\search.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db.shadow L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_001_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_002_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_003_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_MAP_ L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\urlclassifier3.sqlite L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\XUL.mfl L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\temp\etilqs_bju9SHF26xqrW6ar5Zej L'objet est verrouillé ignoré
C:\Documents and Settings\christian\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\christian\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\christian\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_AGENT_LOG1.txt L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_AUDIO\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_AUDIO\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_BINARY\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_BLOB\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_BLOB\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_GLOBAL\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_GLOBAL\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_IMAGE\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_IMAGE\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_MAIN\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_MAIN\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_TV\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_TV\CLML.db-journal L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_VIDEO\CLML.db L'objet est verrouillé ignoré
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLML_VIDEO\CLML.db-journal L'objet est verrouillé ignoré
C:\quarantine\Av-test.txt.Vir Infecté : EICAR-Test-File ignoré
C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\ACEEvent.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\drivers\fidbox.dat L'objet est verrouillé ignoré
C:\WINDOWS\system32\drivers\fidbox.idx L'objet est verrouillé ignoré
C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
C:\WINDOWS\Temp\Perflib_Perfdata_8b4.dat L'objet est verrouillé ignoré
C:\WINDOWS\Temp\usgthrsvc\Perflib_Perfdata_8f4.dat L'objet est verrouillé ignoré
C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

Analyse terminée.

Bonjour,

Hiers après les dernieres manip ca aalait beaucoup mieux, mais après avoir rebooter les symphômes réaparaissent.

Ci joint le rapport de Dt WEB.


regLocal.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups Probablement SCRIPT.Virus
RegUBP2b-christian.reg C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2 Trojan.StartPage.1505 Supprimé.
ComboFix.exe/data002\32788R22FWJFW\c.bat C:\Documents and Settings\christian\Bureau\ComboFix.exe/data002 Probablement BATCH.Virus
ComboFix.exe/data002\32788R22FWJFW\psexec.cfexe C:\Documents and Settings\christian\Bureau\ComboFix.exe/data002 Program.PsExec.171
data002 C:\Documents and Settings\christian\Bureau L'archive contient des éléments infectés
ComboFix.exe C:\Documents and Settings\christian\Bureau Conteneur comporte des objets infectés Quarantaine.
Olympique_game.exe C:\DONNEES\UTILITAIRE\JEU\jeu Probablement DLOADER.Trojan
Process.exe.vir C:\Qoobox\Quarantine\C\WINDOWS\system32 Tool.Prockill

C'et toujours pareil pour le web mais je n'ai pas trouvé le rep quarantaine de spybot

[ Rapport ToolsCleaner version 2.3.3 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\TB.txt: trouvé !
C:\Qoobox: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\christian\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\christian\DoctorWeb\Quarantine\ComboFix.exe: trouvé !

C'est le seul ordi connecté.

Mon autre ordi n'a rien pour être connecté.

Par contre c'est de pire en pire pour aller d'une page à l'autre.
J'ai essayer de faire des test de débit et a priori ils semble bon mais je ne suis pas sur de bien interpréter les résultats

J'ai réinitialisé mais c'est pareil.
Je vais tester une connection avec un cable réseau

J'ai connecter un vieux PC en Windows 2000 avec cable réseau -> aucun problème
Je viens de faire le test sur le portable -> c'est une 2CV à coté.

Je pense qu'il y a toujours une cochonnerie ou un parametrage qui ralenti.

ci joint le rapport OTMoveIt

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder c:\program files\AskBarDis not found.
File/Folder c:\program files\AskBarDis\bar\bin\askBar.dll not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}\\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"| - /E : value set successfully!
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\etilqs_vfFGDXBvAa3mWr7rczF2 scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\christian\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\usgthrsvc\Perflib_Perfdata_5cc.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_528.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\WFV1.tmp scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT05d4f.TMP scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT05d53.TMP scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.10.0 log created on 04072009_213546

Files moved on Reboot...
File C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\etilqs_vfFGDXBvAa3mWr7rczF2 not found!
File C:\WINDOWS\temp\usgthrsvc\Perflib_Perfdata_5cc.dat not found!
C:\WINDOWS\temp\Perflib_Perfdata_528.dat moved successfully.
File move failed. C:\WINDOWS\temp\WFV1.tmp scheduled to be moved on reboot.
File C:\WINDOWS\temp\ZLT05d4f.TMP not found!
File C:\WINDOWS\temp\ZLT05d53.TMP not found!
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\XUL.mfl moved successfully.

############################## [ UsbFix V3.002 ]

# User : christian (Administrateurs) # WORK
# Update on 07/04/09 by C_XX & Chiquitine29
# Start at: 22:01:34 | 07/04/2009

# Intel(R) Pentium(R) M processor 1.70GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# FW : ZoneAlarm Firewall[ Enabled ]7.0.483.000

# C:\ # Disque fixe local # 46,29 Go (10,82 Go free) [BOOT] # NTFS
# D:\ # Disque fixe local # 37 Go (426,54 Mo free) [BACKUP] # NTFS
# E:\ # Disque fixe local # 9,76 Go (3,42 Go free) [RECOVER] # FAT32
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 991,22 Mo (665,66 Mo free) [LEXAR MEDIA] # FAT

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ati2sgag.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Fichiers # Dossiers infectieux ]

Deleted ! C:\WINDOWS\system32\tmp.txt

################## [ Registre # Clés infectieuses ]

# -> Not Found !

################## [ Registre # Mountpoint2 ]

# -> Not Found !

################## [ Listing des fichiers présent ]

C:\AUTOEXEC.BAT
C:\NTDETECT.COM
C:\pv.exe
C:\boot.ini
E:\setupSNK.exe
G:\everesthome220.exe

################## [ ! Fin du rapport # UsbFix V3.002 ! ]

[b]SDFix: Version 1.240 [/b]
Run by christian on 07/04/2009 at 22:26

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:



[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-04-07 22:35:52
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\000b6b59612d]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\000b6b5990a9]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\000b6b5aeee4]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\BTHPORT\Parameters\Keys\000b6b59612d]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\BTHPORT\Parameters\Keys\000b6b5990a9]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\BTHPORT\Parameters\Keys\000b6b5aeee4]

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{3FDF25EE-E592-4495-8391-6E9C504DAC2B}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\WMSET10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\wmset10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{60204BB3-7078-4F70-8F69-68297621941C}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{60204BB3-7078-4F70-8F69-68297621941C}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\MPSTUB10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\mpstub10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\MPCD10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\mpcd10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\ExceptionComponents\{DD90D410-1823-43EB-9A16-A2331BF08799}]
"FriendlyName"="Windows Media Files"
"ComponentGUID"="{DD90D410-1823-43EB-9A16-A2331BF08799}"
"Version"=dword:000a0000
"Sub-Version"=dword:00000e3e
"ExceptionInfName"=str(2):"C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\WMP10.inf"
"ExceptionCatalogName"=str(2):"C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmp10.cat"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwDir]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents\SwFlash]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\Plugins\SCP\SCPTRANS]
"ProgID"="MsScp.SCPTRANS.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Device Manager\Plugins\SP\NeroBurnPlugin]
"ProgID"="MDNeroBurnPlugin.MDNeroBurnPlugin"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:0000014b

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%ProgramFiles%\\Microsoft Games\\Flight Simulator 9\\fs9.exe"="%ProgramFiles%\\Microsoft Games\\Flight Simulator 9\\fs9.exe:*:enabled:Microsoft Flight Simulator 2004"
"%WinDir%\\system32\\fxsclnt.exe"="%WinDir%\\system32\\fxsclnt.exe:*:enabled:Microsoft Fax Console"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:Assistance à distance"
"C:\\Program Files\\Network Associates\\VirusScan\\shcfg32.exe"="C:\\Program Files\\Network Associates\\VirusScan\\shcfg32.exe:*:Enabled:VirusScan - Analyse à l'accès"
"C:\\Program Files\\Network Associates\\VirusScan\\ScnCfg32.Exe"="C:\\Program Files\\Network Associates\\VirusScan\\ScnCfg32.Exe:*:Enabled:VirusScan - Analyse à la demande"
"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe"="C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe:*:Enabled:ZoneAlarm Security"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%ProgramFiles%\\Messenger\\msmsgs.exe"="%ProgramFiles%\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"%ProgramFiles%\\Microsoft Games\\Flight Simulator 9\\fs9.exe"="%ProgramFiles%\\Microsoft Games\\Flight Simulator 9\\fs9.exe:*:enabled:Microsoft Flight Simulator 2004"
"%WinDir%\\system32\\fxsclnt.exe"="%WinDir%\\system32\\fxsclnt.exe:*:enabled:Microsoft Fax Console"
"%ProgramFiles%\\CA\\eTrust Antivirus\\InoRpc.exe"="%ProgramFiles%\\CA\\eTrust Antivirus\\InoRpc.exe:*:enabled:eTrust Antivirus - RPC Server"
"%ProgramFiles%\\CA\\eTrust Antivirus\\Realmon.exe"="%ProgramFiles%\\CA\\eTrust Antivirus\\Realmon.exe:*:enabled:eTrust Antivirus - Realtime monitor"
"%ProgramFiles%\\CA\\eTrust Antivirus\\InocIT.exe"="%ProgramFiles%\\CA\\eTrust Antivirus\\InocIT.exe:*:enabled:eTrust Antivirus - Local Scanner"
"%CommonProgramFiles%\\AOL\\ACS\\AOLDIAL.exe"="%CommonProgramFiles%\\AOL\\ACS\\AOLDIAL.exe:*:enabled:AOL 9.0 (Connectivity Service Dialer)"
"%CommonProgramFiles%\\AOL\\ACS\\AOLACSD.exe"="%CommonProgramFiles%\\AOL\\ACS\\AOLACSD.exe:*:enabled:AOL 9.0 (Connectivity Service)"
"%ProgramFiles%\\AOL 9.0\\WAOL.exe"="%ProgramFiles%\\AOL 9.0\\WAOL.exe:*:enabled:AOL 9.0"
"%ProgramFiles%\\AOL 9.0\\AOL.exe"="%ProgramFiles%\\AOL 9.0\\AOL.exe:*:enabled:AOL 9.0"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 6.2"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Fri 15 Aug 2008 6,104,632 A..H. --- "C:\Program Files\Picasa2\setup.exe"
Mon 26 Jan 2009 1,740,632 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 26 Jan 2009 5,365,592 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Thu 5 Mar 2009 2,260,480 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Mon 14 Apr 2008 65,024 A.SH. --- "C:\WINDOWS\system32\asycfilt.dll"
Thu 20 Jan 2005 8 A.SHR --- "C:\WINDOWS\system32\BCFCF81A7E.sys"
Sat 24 Mar 2007 56 A.SHR --- "C:\WINDOWS\system32\EEB141F368.sys"
Sat 29 Mar 2008 9,552 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Mon 14 Apr 2008 1,028,096 A.SH. --- "C:\WINDOWS\system32\mfc42.dll"
Thu 5 Aug 2004 57,344 A.SH. --- "C:\WINDOWS\system32\mfc42loc.dll"
Wed 20 Sep 1995 35,088 A.SH. --- "C:\WINDOWS\system32\msjint32.dll"
Wed 20 Sep 1995 977,680 A.SH. --- "C:\WINDOWS\system32\msjt3032.dll"
Wed 20 Sep 1995 23,824 A.SH. --- "C:\WINDOWS\system32\msjter32.dll"
Mon 14 Apr 2008 413,696 A.SH. --- "C:\WINDOWS\system32\msvcp60.dll"
Mon 14 Apr 2008 343,040 A.SH. --- "C:\WINDOWS\system32\msvcrt.dll"
Thu 5 Aug 2004 253,952 A.SH. --- "C:\WINDOWS\system32\msvcrt20.dll"
Mon 14 Apr 2008 551,936 A.SH. --- "C:\WINDOWS\system32\oleaut32.dll"
Mon 14 Apr 2008 84,992 A.SH. --- "C:\WINDOWS\system32\olepro32.dll"
Mon 14 Apr 2008 30,749 A.SH. --- "C:\WINDOWS\system32\vbajet32.dll"
Sun 24 Sep 1995 243,472 A.SH. --- "C:\WINDOWS\system32\vbar2232.dll"
Mon 18 May 1998 368,912 A.SH. --- "C:\WINDOWS\system32\vbar332.dll"
Thu 1 May 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Tue 15 Nov 2005 78,104 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe"
Thu 24 Nov 2005 17,920 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setup.dll"
Thu 24 Nov 2005 12,880 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll"
Fri 13 Aug 2004 1,953,792 A..HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\launcher.exe"
Fri 13 Aug 2004 53,760 A..HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\mnyinsta.dll"
Fri 13 Aug 2004 94,208 A..HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\RmvSuite.exe"
Mon 16 Aug 2004 35,328 A..HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\setuplng.dll"
Fri 13 Aug 2004 20,480 A..HR --- "C:\Program Files\Microsoft Works Suite 2005\Setup\unregwtr.exe"
Fri 25 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sun 22 Mar 2009 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Tue 7 Apr 2009 108 A..H. --- "C:\Program Files\Common Files\X10\Common\x10prod.sys"

[b]Finished![/b]

Bonsoir,
C'est malheureusement toujours pareil

Je l'ai déja fait.
J'ai meme essayer avec internet explorer mais c'est pareil.

Bonjour,

Avira AntiVir Personal
Report file date: jeudi 9 avril 2009 16:29

Scanning for 1345453 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : WORK

Version information:
BUILD.DAT : 9.0.0.387 17962 Bytes 24/03/2009 11:04:00
AVSCAN.EXE : 9.0.3.3 464641 Bytes 24/02/2009 10:13:26
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 08:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 09:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 08:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 10:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 18:33:26
ANTIVIR2.VDF : 7.1.3.0 1330176 Bytes 01/04/2009 14:28:50
ANTIVIR3.VDF : 7.1.3.39 146944 Bytes 09/04/2009 14:28:50
Engineversion : 8.2.0.138
AEVDF.DLL : 8.1.1.0 106868 Bytes 27/01/2009 15:36:42
AESCRIPT.DLL : 8.1.1.73 373114 Bytes 09/04/2009 14:28:53
AESCN.DLL : 8.1.1.10 127348 Bytes 09/04/2009 14:28:53
AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 16:24:41
AEPACK.DLL : 8.1.3.12 397687 Bytes 09/04/2009 14:28:53
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 18:01:56
AEHEUR.DLL : 8.1.0.114 1700214 Bytes 09/04/2009 14:28:52
AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 18:01:56
AEGEN.DLL : 8.1.1.33 340340 Bytes 09/04/2009 14:28:51
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 12:32:40
AECORE.DLL : 8.1.6.7 176502 Bytes 09/04/2009 14:28:50
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 12:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 06:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 05/12/2008 08:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 12:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 08:32:09
AVARKT.DLL : 9.0.0.1 292609 Bytes 09/02/2009 05:52:24
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 08:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 13:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 06:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 08:32:10
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 09/02/2009 09:45:45
RCTEXT.DLL : 9.0.35.0 87297 Bytes 11/03/2009 13:55:12

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:, E:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: jeudi 9 avril 2009 16:29

Starting search for hidden objects.
'71606' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'X10nets.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'iFrmewrk.exe' - '1' Module(s) have been scanned
Scan process 'ZCfgSvc.exe' - '1' Module(s) have been scanned
Scan process 'soundman.exe' - '1' Module(s) have been scanned
Scan process 'zlclient.exe' - '0' Module(s) have been scanned
Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
Scan process 'PDVDServ.exe' - '1' Module(s) have been scanned
Scan process 'PCMService.exe' - '1' Module(s) have been scanned
Scan process 'WButton.exe' - '1' Module(s) have been scanned
Scan process 'OSD.exe' - '1' Module(s) have been scanned
Scan process 'HotkeyApp.exe' - '1' Module(s) have been scanned
Scan process 'LaunchAp.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'SynTPLpr.exe' - '1' Module(s) have been scanned
Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'CLSched.exe' - '1' Module(s) have been scanned
Scan process 'searchindexer.exe' - '1' Module(s) have been scanned
Scan process 'snmp.exe' - '1' Module(s) have been scanned
Scan process 'tcpsvcs.exe' - '1' Module(s) have been scanned
Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'CLMLService.exe' - '1' Module(s) have been scanned
Scan process 'EvtEng.exe' - '1' Module(s) have been scanned
Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'vsmon.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
54 processes with 54 modules were scanned

Starting master boot sector scan:

Start scanning boot sectors:

Starting to scan executable files (registry).
The registry was scanned ( '72' files ).


Starting the file scan:

Begin scan in 'C:\' <BOOT>
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\quarantine\Av-test.txt.Vir
[DETECTION] Contains code of the Eicar-Test-Signature virus
C:\WINDOWS\UbiSoft\SetupUbi.exe
[DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
Begin scan in 'D:\' <BACKUP>
D:\LOGICIELS\LOGICIEL_AUTOCAD2007\Bin\acadFeui\support\DirectX\BDAXP.cab
[0] Archive type: CAB (Microsoft)
--> MSDvbNP.ax
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\English\AlertPackage.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> alert.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\English\webpkg.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> inoweb.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\French\AlertPackage.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> alert.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\French\webpkg.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> inoweb.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\German\AlertPackage.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> alert.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\German\webpkg.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> inoweb.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\Spain\AlertPackage.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> alert.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\TOOLS\eTrust_AV\Spain\webpkg.exe
[0] Archive type: RSRC
--> Object
[1] Archive type: CAB (Microsoft)
--> inoweb.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
[WARNING] No further files can be extracted from this archive. The archive will be closed
Begin scan in 'E:\' <RECOVER>

Beginning disinfection:
C:\quarantine\Av-test.txt.Vir
[DETECTION] Contains code of the Eicar-Test-Signature virus
[NOTE] The file was moved to '4a0b2447.qua'!
C:\WINDOWS\UbiSoft\SetupUbi.exe
[DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
[NOTE] The file was moved to '4a522436.qua'!


End of the scan: jeudi 9 avril 2009 18:35
Used time: 2:00:55 Hour(s)

The scan has been done completely.

9262 Scanned directories
532056 Files were scanned
2 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
2 Files were moved to quarantine
0 Files were renamed
2 Files cannot be scanned
532052 Files not concerned
8634 Archives were scanned
20 Warnings
4 Notes
71606 Objects were scanned with rootkit scan
0 Hidden objects were found

C'est désespérant, pas d'amélioration.

Ci joint le rapport.
Je te teins au courant
========== FILES ==========
File/Folder C:\quarantine\Av-test.txt.Vir not found.
File/Folder C:\WINDOWS\UbiSoft\SetupUbi.exe not found.
File/Folder D:\LOGICIELS\LOGICIEL_AUTOCAD2007\Bin\acadFeui\support\Direc­tX\BDAXP.cab not found.
D:\TOOLS\eTrust_AV\English\AlertPackage.exe moved successfully.
D:\TOOLS\eTrust_AV\English\webpkg.exe moved successfully.
D:\TOOLS\eTrust_AV\French\AlertPackage.exe moved successfully.
D:\TOOLS\eTrust_AV\French\webpkg.exe moved successfully.
D:\TOOLS\eTrust_AV\German\AlertPackage.exe moved successfully.
D:\TOOLS\eTrust_AV\German\webpkg.exe moved successfully.
D:\TOOLS\eTrust_AV\Spain\AlertPackage.exe moved successfully.
D:\TOOLS\eTrust_AV\Spain\webpkg.exe moved successfully.
C:\quarantine moved successfully.
D:\TOOLS\eTrust_AV\Spain\Utility moved successfully.
D:\TOOLS\eTrust_AV\Spain\Remote Install\Lang\Spanish moved successfully.
D:\TOOLS\eTrust_AV\Spain\Remote Install\Lang moved successfully.
D:\TOOLS\eTrust_AV\Spain\Remote Install moved successfully.
D:\TOOLS\eTrust_AV\Spain\Lang\es moved successfully.
D:\TOOLS\eTrust_AV\Spain\Lang moved successfully.
D:\TOOLS\eTrust_AV\Spain moved successfully.
D:\TOOLS\eTrust_AV\German\Utility moved successfully.
D:\TOOLS\eTrust_AV\German\Remote Install\Lang\German moved successfully.
D:\TOOLS\eTrust_AV\German\Remote Install\Lang moved successfully.
D:\TOOLS\eTrust_AV\German\Remote Install moved successfully.
D:\TOOLS\eTrust_AV\German\Lang\de moved successfully.
D:\TOOLS\eTrust_AV\German\Lang moved successfully.
D:\TOOLS\eTrust_AV\German moved successfully.
D:\TOOLS\eTrust_AV\French\Utility moved successfully.
D:\TOOLS\eTrust_AV\French\Remote Install\Lang\French moved successfully.
D:\TOOLS\eTrust_AV\French\Remote Install\Lang moved successfully.
D:\TOOLS\eTrust_AV\French\Remote Install moved successfully.
D:\TOOLS\eTrust_AV\French\Lang\fr moved successfully.
D:\TOOLS\eTrust_AV\French\Lang moved successfully.
D:\TOOLS\eTrust_AV\French moved successfully.
D:\TOOLS\eTrust_AV\eTrust Update SP2 moved successfully.
D:\TOOLS\eTrust_AV\English\Utility moved successfully.
D:\TOOLS\eTrust_AV\English\Remote Install\Lang\English moved successfully.
D:\TOOLS\eTrust_AV\English\Remote Install\Lang moved successfully.
D:\TOOLS\eTrust_AV\English\Remote Install moved successfully.
D:\TOOLS\eTrust_AV\English\Lang\en moved successfully.
D:\TOOLS\eTrust_AV\English\Lang moved successfully.
D:\TOOLS\eTrust_AV\English moved successfully.
D:\TOOLS\eTrust_AV moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\VBE\MSForms.exd scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\VBE\RefEdit.exd scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\etilqs_W4heBU8w5YQjoLKarblK scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\IMG4.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\~DF5DA5.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\~DF9E26.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\christian\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\usgthrsvc\Perflib_Perfdata_2c0.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_278.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT00f1e.TMP scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT00f21.TMP scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.10.0 log created on 04092009_200451

Files moved on Reboot...
C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\VBE\MSForms.exd moved successfully.
C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\VBE\RefEdit.exd moved successfully.
File C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\etilqs_W4heBU8w5YQjoLKarblK not found!
File C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\IMG4.tmp not found!
File C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\~DF5DA5.tmp not found!
File C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\~DF9E26.tmp not found!
File C:\WINDOWS\temp\usgthrsvc\Perflib_Perfdata_2c0.dat not found!
C:\WINDOWS\temp\Perflib_Perfdata_278.dat moved successfully.
File C:\WINDOWS\temp\ZLT00f1e.TMP not found!
File C:\WINDOWS\temp\ZLT00f21.TMP not found!
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\christian\Local Settings\Application Data\Mozilla\Firefox\Profiles\2s9386tz.default\XUL.mfl moved successfully.

Que penses tu d'une réparation de Windows ?