Problème : plus d'antivirus au démarrage!

salut et merci de m'aider,

voilà le rapport info.txt :

info.txt logfile of random's system information tool 1.06 2009-05-03 15:05:10

======Uninstall list======

-->C:\WINDOWS\NuNInst.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->D:\Utilitaires\Divers\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83021AC3-086F-4B77-ACCD-1BD7C9AB211E}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
ALZip-->D:\Utilitaires\Divers\ALZip\unins000.exe
Ant Renamer-->"D:\Utilitaires\Divers\Ant Renamer\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner (remove only)-->"D:\Utilitaires\Divers\CCleaner\uninst.exe"
C-Media Azalia Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
COMODO Internet Security-->D:\Internet\Comodo\COMODO Internet Security\cfpconfg.exe -u
Defraggler (remove only)-->"D:\Utilitaires\Divers\Defraggler\uninst.exe"
DVD Shrink 3.2-->"D:\Utilitaires\Divers\DVD Shrink\unins000.exe"
EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x40c uninst
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\Setup.exe" -l0x40c -UnInstall
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst
EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x40c uninst
EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Smart Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE" -l0x40c Uninstall
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESCX6600 Guide de réf.-->C:\Program Files\EPSON\TPMANUAL\ESCX6600\REF_G\DOCUNINS.EXE
ESCX6600 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESCX6600\PQU_G\DOCUNINS.EXE
filehippo.com Update Checker-->"D:\Utilitaires\Divers\filehippo.com\uninstall.exe"
Free Video to Mp3 Converter version 3.1-->"D:\Utilitaires\Divers\DVDVideoSoft\Free Video to Mp3 Converter\unins000.exe"
Free YouTube to Mp3 Converter version 3.1-->"D:\Utilitaires\Divers\DVDVideoSoft\Free YouTube to Mp3 Converter\unins000.exe"
Glary Utilities 2.12.0.658-->"D:\Utilitaires\Système\Glary Utilities\unins000.exe"
Grisbi 0.5.9-->D:\Utilitaires\Divers\Grisbi\uninstall.exe
HijackThis 2.0.2-->"D:\Internet\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}
KeyScrambler-->C:\Program Files\Mozilla Firefox\extensions\KeyScrambler\uninstall.exe
K-Lite Codec Pack 3.5.7 Full-->"D:\Utilitaires\Système\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Malwarebytes' Anti-Malware-->"D:\Internet\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Project Professional 2003-->MsiExec.exe /I{903B040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MotoGP URT 3-->"E:\MotoGP URT 3\unins000.exe"
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSI Wireless Adapter Driver and Utility-->C:\Program Files\\InstallShield Installation Information\{AE7730A5-F810-48A6-8AFA-0C6CDC1C08D5}\setup.exe -uninst -l0x9 -removeonly
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
My Lockbox 1.3 for Windows 2000/XP-->"D:\Utilitaires\Divers\My Lockbox\unins000.exe"
Nero 7 Premium-->MsiExec.exe /I{4908C75E-E5E2-43F7-B1DF-023CBA831036}
Next Generation Visualisations-->MsiExec.exe /I{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}
Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
PDFCreator-->D:\Bureautique\PDFCreator\unins000.exe
PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7BD0A2D8-4EA0-43C6-BDF8-DDA87B8031C6}\SETUP.EXE" -l0x40c anything
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
Pro Evolution Soccer 2008-->C:\Program Files\InstallShield Installation Information\{2FDFD600-7338-4738-90D5-FC4ACA08DC36}\setup.exe -runfromtemp -l0x040c
Quicksys RegDefrag 2.3-->"D:\Utilitaires\Système\Quicksys\RegDefrag\unins000.exe"
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
ScanToWeb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\SETUP.EXE" ADDREMOVEDLG
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB960003)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F04F8702-18D0-458D-921E-146FB7CD38CF}
Security Update for Microsoft Office Excel 2007 (KB959997)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {9EAC3AEC-5C81-4856-A05B-DE9DC236D740}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Sony Ericsson PC Suite-->MsiExec.exe /I{52809086-618D-4F0B-8BF1-B75A5BB817A4}
Sony Ericsson Themes Creator 4.00-->C:\Program Files\Sony Ericsson\Themes Creator\Uninstall.exe
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Spybot - Search & Destroy-->"D:\Internet\Spybot - Search & Destroy\unins000.exe"
SuperCopier2-->"D:\Utilitaires\Divers\SuperCopier2\SC2Uninst.exe"
Systran Professional Standard 4.0-->C:\WINDOWS\unvise32.exe d:\bureautique\Systran\4_0\Standard\uninstal.log
TmNationsForever-->"E:\TrackMania Nations Forever\unins000.exe"
Uninstall 1.0.0.1-->"C:\Program Files\Fichiers communs\DVDVideoSoft\unins000.exe"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Outlook 2007 Junk Email Filter (kb968503)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5DD98950-4D10-4B79-8BF6-59726705207D}
VIA Gestionnaire de périphériques de plate-forme-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: AntiVir Desktop
FW: COMODO Firewall

======System event log======

Computer Name: tibouuh
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.

Record Number: 40597
Source Name: Service Control Manager
Time Written: 20090425160632.000000+120
Event Type: Informations
User: tibouuh

Computer Name: tibouuh
Event Code: 7036
Message: Le service Téléphonie est entré dans l'état : en cours d'exécution.

Record Number: 40596
Source Name: Service Control Manager
Time Written: 20090425160632.000000+120
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.

Record Number: 40595
Source Name: Service Control Manager
Time Written: 20090425160631.000000+120
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP.

Record Number: 40594
Source Name: Service Control Manager
Time Written: 20090425160631.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: tibouuh
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 40593
Source Name: Service Control Manager
Time Written: 20090425160631.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: tibouuh
Event Code: 11707
Message: Product: Catalyst Control Center - Branding -- Installation operation completed successfully.

Record Number: 6819
Source Name: MsiInstaller
Time Written: 20081202155445.000000+060
Event Type: Informations
User: tibouuh

Computer Name: tibouuh
Event Code: 11707
Message: Product: ccc-core-preinstall -- Installation operation completed successfully.

Record Number: 6818
Source Name: MsiInstaller
Time Written: 20081202155443.000000+060
Event Type: Informations
User: tibouuh

Computer Name: tibouuh
Event Code: 100
Message: The ATI Smart service was installed.

Record Number: 6817
Source Name: ATI Smart
Time Written: 20081202155418.000000+060
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 6816
Source Name: SecurityCenter
Time Written: 20081202155041.000000+060
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 2
Message:
Record Number: 6815
Source Name: Diskeeper
Time Written: 20081202155030.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\QuickTime\QTSystem;D:\Utilitaires\Divers\ALZip\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0304
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

salut et merci de m'aider,

voilà le rapport info.txt :

info.txt logfile of random's system information tool 1.06 2009-05-03 15:05:10

======Uninstall list======

-->C:\WINDOWS\NuNInst.exe /UNINSTALL
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->D:\Utilitaires\Divers\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83021AC3-086F-4B77-ACCD-1BD7C9AB211E}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe" -l0x9
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe" -l0x9
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
ALZip-->D:\Utilitaires\Divers\ALZip\unins000.exe
Ant Renamer-->"D:\Utilitaires\Divers\Ant Renamer\unins000.exe"
Apple Mobile Device Support-->MsiExec.exe /I{AFA20D47-69C3-4030-8DF8-D37466E70F13}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner (remove only)-->"D:\Utilitaires\Divers\CCleaner\uninst.exe"
C-Media Azalia Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
COMODO Internet Security-->D:\Internet\Comodo\COMODO Internet Security\cfpconfg.exe -u
Defraggler (remove only)-->"D:\Utilitaires\Divers\Defraggler\uninst.exe"
DVD Shrink 3.2-->"D:\Utilitaires\Divers\DVD Shrink\unins000.exe"
EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x40c uninst
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\Setup.exe" -l0x40c -UnInstall
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst
EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x40c uninst
EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON Smart Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE" -l0x40c Uninstall
EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
ESCX6600 Guide de réf.-->C:\Program Files\EPSON\TPMANUAL\ESCX6600\REF_G\DOCUNINS.EXE
ESCX6600 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESCX6600\PQU_G\DOCUNINS.EXE
filehippo.com Update Checker-->"D:\Utilitaires\Divers\filehippo.com\uninstall.exe"
Free Video to Mp3 Converter version 3.1-->"D:\Utilitaires\Divers\DVDVideoSoft\Free Video to Mp3 Converter\unins000.exe"
Free YouTube to Mp3 Converter version 3.1-->"D:\Utilitaires\Divers\DVDVideoSoft\Free YouTube to Mp3 Converter\unins000.exe"
Glary Utilities 2.12.0.658-->"D:\Utilitaires\Système\Glary Utilities\unins000.exe"
Grisbi 0.5.9-->D:\Utilitaires\Divers\Grisbi\uninstall.exe
HijackThis 2.0.2-->"D:\Internet\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
iTunes-->MsiExec.exe /I{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}
KeyScrambler-->C:\Program Files\Mozilla Firefox\extensions\KeyScrambler\uninstall.exe
K-Lite Codec Pack 3.5.7 Full-->"D:\Utilitaires\Système\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Malwarebytes' Anti-Malware-->"D:\Internet\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Project Professional 2003-->MsiExec.exe /I{903B040C-6000-11D3-8CFE-0150048383C9}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
MotoGP URT 3-->"E:\MotoGP URT 3\unins000.exe"
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSI Wireless Adapter Driver and Utility-->C:\Program Files\\InstallShield Installation Information\{AE7730A5-F810-48A6-8AFA-0C6CDC1C08D5}\setup.exe -uninst -l0x9 -removeonly
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
My Lockbox 1.3 for Windows 2000/XP-->"D:\Utilitaires\Divers\My Lockbox\unins000.exe"
Nero 7 Premium-->MsiExec.exe /I{4908C75E-E5E2-43F7-B1DF-023CBA831036}
Next Generation Visualisations-->MsiExec.exe /I{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}
Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe
PDFCreator-->D:\Bureautique\PDFCreator\unins000.exe
PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7BD0A2D8-4EA0-43C6-BDF8-DDA87B8031C6}\SETUP.EXE" -l0x40c anything
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
Pro Evolution Soccer 2008-->C:\Program Files\InstallShield Installation Information\{2FDFD600-7338-4738-90D5-FC4ACA08DC36}\setup.exe -runfromtemp -l0x040c
Quicksys RegDefrag 2.3-->"D:\Utilitaires\Système\Quicksys\RegDefrag\unins000.exe"
QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
ScanToWeb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\SETUP.EXE" ADDREMOVEDLG
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB960003)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F04F8702-18D0-458D-921E-146FB7CD38CF}
Security Update for Microsoft Office Excel 2007 (KB959997)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {9EAC3AEC-5C81-4856-A05B-DE9DC236D740}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Sony Ericsson PC Suite-->MsiExec.exe /I{52809086-618D-4F0B-8BF1-B75A5BB817A4}
Sony Ericsson Themes Creator 4.00-->C:\Program Files\Sony Ericsson\Themes Creator\Uninstall.exe
Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}
Spybot - Search & Destroy-->"D:\Internet\Spybot - Search & Destroy\unins000.exe"
SuperCopier2-->"D:\Utilitaires\Divers\SuperCopier2\SC2Uninst.exe"
Systran Professional Standard 4.0-->C:\WINDOWS\unvise32.exe d:\bureautique\Systran\4_0\Standard\uninstal.log
TmNationsForever-->"E:\TrackMania Nations Forever\unins000.exe"
Uninstall 1.0.0.1-->"C:\Program Files\Fichiers communs\DVDVideoSoft\unins000.exe"
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft Office Outlook 2007 (KB952142)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4AD3A076-427C-491F-A5B7-7D1DE788A756}
Update for Outlook 2007 Junk Email Filter (kb968503)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5DD98950-4D10-4B79-8BF6-59726705207D}
VIA Gestionnaire de périphériques de plate-forme-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: AntiVir Desktop
FW: COMODO Firewall

======System event log======

Computer Name: tibouuh
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Gestionnaire de connexions d'accès distant.

Record Number: 40597
Source Name: Service Control Manager
Time Written: 20090425160632.000000+120
Event Type: Informations
User: tibouuh

Computer Name: tibouuh
Event Code: 7036
Message: Le service Téléphonie est entré dans l'état : en cours d'exécution.

Record Number: 40596
Source Name: Service Control Manager
Time Written: 20090425160632.000000+120
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 7036
Message: Le service Service de découvertes SSDP est entré dans l'état : en cours d'exécution.

Record Number: 40595
Source Name: Service Control Manager
Time Written: 20090425160631.000000+120
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP.

Record Number: 40594
Source Name: Service Control Manager
Time Written: 20090425160631.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: tibouuh
Event Code: 7036
Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

Record Number: 40593
Source Name: Service Control Manager
Time Written: 20090425160631.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: tibouuh
Event Code: 11707
Message: Product: Catalyst Control Center - Branding -- Installation operation completed successfully.

Record Number: 6819
Source Name: MsiInstaller
Time Written: 20081202155445.000000+060
Event Type: Informations
User: tibouuh

Computer Name: tibouuh
Event Code: 11707
Message: Product: ccc-core-preinstall -- Installation operation completed successfully.

Record Number: 6818
Source Name: MsiInstaller
Time Written: 20081202155443.000000+060
Event Type: Informations
User: tibouuh

Computer Name: tibouuh
Event Code: 100
Message: The ATI Smart service was installed.

Record Number: 6817
Source Name: ATI Smart
Time Written: 20081202155418.000000+060
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 6816
Source Name: SecurityCenter
Time Written: 20081202155041.000000+060
Event Type: Informations
User:

Computer Name: tibouuh
Event Code: 2
Message:
Record Number: 6815
Source Name: Diskeeper
Time Written: 20081202155030.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\QuickTime\QTSystem;D:\Utilitaires\Divers\ALZip\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0304
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

et voilà le rapport log.txt :

Logfile of random's system information tool 1.06 (written by random/random)
Run by tibouuh at 2009-05-03 15:04:21
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 18 GB (61%) free of 30 GB
Total RAM: 1023 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:05:06, on 03/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
D:\Internet\Comodo\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
D:\Internet\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\fsproflt.exe
D:\Utilitaires\Divers\Nero 7\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\Utilitaires\Divers\SuperCopier2\SuperCopier2.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Internet\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\MSI\RtWlan.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
D:\Internet\Comodo\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
F:\Logiciels\Sécurité\Random's System Information Tool (analyse des infections)\RSIT.exe
D:\Internet\Trend Micro\HijackThis\tibouuh.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\Mozilla Firefox\extensions\KeyScrambler\KeyScramblerIE.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Internet\SPYBOT~1\SDHelper.dll
O2 - BHO: Fire-Trust SiteHound - {C86AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: (no name) - {73F7F495-A325-4C52-BE48-5F97FA511E89} - (no file)
O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Utilitaires\Divers\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Internet\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: MSI Wireless Client Utility.lnk = ? (User 'Default user')
O4 - Global Startup: MSI Wireless Client Utility.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\BUREAU~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {11316B13-33F0-4C9F-BD55-09994CCFA8EB} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\Mozilla Firefox\extensions\KeyScrambler\KeyScramblerIE.dll
O9 - Extra 'Tools' menuitem: &KeyScrambler... - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\Mozilla Firefox\extensions\KeyScrambler\KeyScramblerIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\BUREAU~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Internet\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Internet\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: McAfee Application Installer Cleanup (0304851241289852) (0304851241289852mcinstcleanup) - Unknown owner - C:\DOCUME~1\tibouuh\LOCALS~1\Temp\030485~1.EXE (file missing)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - D:\Internet\Comodo\COMODO Internet Security\cmdagent.exe
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - C:\WINDOWS\system32\fsproflt.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Utilitaires\Divers\Nero 7\InCD\InCDsrv.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - D:\Utilitaires\Divers\Nero 7\Nero BackItUp\NBService.exe

maintenant c'est ma partition du C avec laquelle l'icone n'est pas normale. l'autre partition est redevenue normale.

comment ça se fait que dans ces rapports, je vois qu'il y a des programmes qui ne sont plus installés (McAfee, MSN, Diskeeper, Catalyst control center par exemple)?
alors que j'utilise CCleaner et récemment Glary Utilities en plus.

je suis allé voir dans msconfig et dans CCleaner, il n'y a plus Windows defender, antivir, comodo. je crois que c'est tout ce qui manque. mais bon c'est le plus important quand même!

et ce que je ne comprends pas non plus, c'est que je suis allé voir dans services.msc et les 3 progs de sécurité cités sont bien en "automatique".

pour le fichier fsproflt.exe, virustotal ne trouve rien. résultat : 0/40 (0.00%)

ccleaner et malwarebytes je les ai déjà.

avec Flash_Disinfector, il était précisé dans un article sur CCM, que l'antivirus pouvait le considérer comme un virus. ce qui a été le cas, mais j'ai cliqué sur "ignorer" pour pouvoir continuer à utiliser le programme.
ça peut venir de là?

Avira me le signale à nouveau. il me dit qu'un fichier dans le cache de Firefox dans "local settings" est un virus. c'est le fichier NirCmd.2
je continue à l'ignorer, je le mets en quarantaine, je le supprime, je refuse l'accès, ...?

en attendant ta réponse, j'ai redémarré mon PC.
et cette fois-ci c'est une autre partition qui n'a pas l'icone normale!

j'ai pas pu désinstaller flash_disinfector car c'est un exécutable. je l'ai mis en quarantaine avec avira.

avec le lien que tu m'as donné pour smitfraudfix, avira me signale qu'il y a un virus.

j'ai essayé de le télécharger à partir de CCM, j'ai réussi à le prendre. mais au moment de l'exécuter smitfraudfix.exe, il ouvre un dossier avec d'autres .exe, mais avira signale "reboot.exe" comme un virus.

que dois-je faire?

voilà le rapport :

SmitFraudFix v2.414

Rapport fait à 17:17:14,54, 03/05/2009
Executé à partir de C:\Documents and Settings\tibouuh\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
D:\Internet\Comodo\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
D:\Internet\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\fsproflt.exe
D:\Utilitaires\Divers\Nero 7\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\Utilitaires\Divers\SuperCopier2\SuperCopier2.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Internet\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\MSI\RtWlan.exe
C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
D:\Internet\Malwarebytes' Anti-Malware\mbam.exe
D:\Internet\Comodo\COMODO Internet Security\cfp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Policies.exe
C:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Policies.exe
C:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\

C:\autorun.inf PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\tibouuh


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\tibouuh\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\tibouuh\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\tibouuh\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

»»»»»»»»»»»»»»»»»»»»»»»» RK

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""




»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: MSI Wireless Adapter #2 - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{CC40B255-5E5F-4B54-80B1-C621B2CFE5FF}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{CC40B255-5E5F-4B54-80B1-C621B2CFE5FF}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{CC40B255-5E5F-4B54-80B1-C621B2CFE5FF}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

malwarebytes a fini le scan. aucun problème trouvé.

là tout de suite je ne peux pas le faire car comodo est entrain de scanner le pc après sa réinstallation.

si j'enregistre tes instructions en fichier .txt et que je le mets sur le bureau, je pourrais le consulter en mode sans échec?

c'est l'autorun qui est corrompu?

c'est bon alors, parce que j'ai vu "Problème suppression C:\autorun.inf" dans le rapport?
ça l'a bien supprimé?

je comptais faire un scan en ligne aussi ^^
j'avais d'ailleurs utilisé bitdefender, entre autres!

j'attends avant de supprimer les logiciels smitfraudfix et consorts?

le scan est en cours. il devrait être terminé d'ici 15 minutes environ d'après ce qui est marqué.

le scan vient de se terminer et il n'a rien trouvé.

ça signifie que tout est ok?

salut,

voilà le rapport de OTMoveIt :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\autorun.inf moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\tibouuh\LOCALS~1\Temp\etilqs_Nb1pOMsZhNai6cWhC9em scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\TMP00000028136E7F33982A53EB scheduled to be deleted on reboot.
Windows Temp folder emptied.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05042009_101228

Files moved on Reboot...
File C:\DOCUME~1\tibouuh\LOCALS~1\Temp\etilqs_Nb1pOMsZhNai6cWhC9em not found!
File C:\WINDOWS\temp\TMP00000028136E7F33982A53EB not found!
C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\tibouuh\Local Settings\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\XUL.mfl moved successfully.

j'ai de nouveau une icone qui merde!

tu parles du CD d'installation de Windows?

ça va réinstaller Windows et formater les programmes et données?
il vaudrait alors mieux que je sauvegarde tout sur un disque dur externe?

parce que je sais pas si mon CD va marcher.
j'ai XP Pro en image iso. je précise de suite que c'est légal la manière dont je l'ai eu!
j'ai donc gravé XP en image CD, mais comme mon graveur merde de temps en temps, je ne sais pas s'il a bien gravé XP!
et j'aimerais pas insérer le CD et me retrouver avec plus rien!
il y a un moyen de vérifier que l'image CD a bien été gravée correctement?

j'attends tes réponses avant de faire cmd...

Excuse moi pour cette absence pas de problème!

non pas de risques, cette commande va juste te permettre de vérifier l'état des fichiers système et si ils sont endommagés il y aura réparation j'ai demandé à quelqu'un en MP (merci toptitbal)

tu tombes bien car le scan c'est terminé il y a peu.
j'ai redémarré et tout à l'air ok, en apparence.

les icones de disques durs sont normales.
il y a bien toutes les icones dans la barre des tâches.
les programmes sécuritaires se lancent bien au démarrage.


je dois faire quoi maintenant?

oui j'avais mis le CD.

tu peux me dire comment je dois faire pour arrêter temporairement mon firewall comodo, parce qu'il arrête pas de me signaler des alertes. alors à chaque fois il faut que je clique pour que le processus puisse continuer.

c'est bon, en fait le scan vient de se terminer.

voilà le rapport généré :

DiagHelp version v1.4 - http://www.malekal.com
excute le 04/05/2009 à 21:48:08,65

System information for \\tibouuh:
Uptime: Error reading uptime
Kernel version: Microsoft Windows XP, Multiprocessor Free
Product type: Professional
Product version: 5.1
Service pack: 3
Kernel build number: 2600
Registered organization:
Registered owner: tibouuh
Install date: 09/11/2007, 15:55:40
Activation status: Error reading status
IE version: 8.0000
System root: C:\WINDOWS
Processors: 2
Processor speed: 3.2 GHz
Processor type: Intel(R) Pentium(R) 4 CPU
Physical memory: 1024 MB
Video driver: RADEON X600/X550 Series
Volume Type Format Label Size Free Free
A: Removable 0.0%
C: Fixed NTFS Disque local 29.29 GB 17.59 GB 60.0%
D: Fixed NTFS Logiciels 14.65 GB 12.27 GB 83.8%
E: Fixed NTFS Jeux 29.29 GB 22.53 GB 76.9%
F: Fixed NTFS Données 79.42 GB 44.24 GB 55.7%
G: CD-ROM 0.0%
H: CD-ROM 0.0%
J: Fixed NTFS Musique 152.66 GB 100.67 GB 65.9%
K: CD-ROM 0.0%


C:\WINDOWS\prefetch\WMIAPSRV.EXE-1E2270A5.pf -->04/05/2009 21:48:43
C:\WINDOWS\prefetch\PSINFO.EXE-2E45E60C.pf -->04/05/2009 21:48:18
C:\WINDOWS\prefetch\CHCP.COM-18156052.pf -->04/05/2009 21:48:04
C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->04/05/2009 21:47:44
C:\WINDOWS\prefetch\ALZIP.EXE-0748DC31.pf -->04/05/2009 21:47:12
C:\WINDOWS\prefetch\AVWSC.EXE-0283F9DD.pf -->04/05/2009 21:45:47
C:\WINDOWS\prefetch\CFPUPDAT.EXE-228779B1.pf -->04/05/2009 21:42:33
C:\WINDOWS\prefetch\FIREFOX.EXE-28641590.pf -->04/05/2009 21:37:25
C:\WINDOWS\prefetch\RUNDLL32.EXE-451FC2C0.pf -->04/05/2009 21:36:59
C:\WINDOWS\prefetch\WUAUCLT.EXE-399A8E72.pf -->04/05/2009 21:36:19

C:\WINDOWS\System32\drivers\inspect.sys -->03/05/2009 18:48:25
C:\WINDOWS\System32\drivers\cmdhlp.sys -->03/05/2009 18:48:24
C:\WINDOWS\System32\drivers\cmdguard.sys -->03/05/2009 18:48:24
C:\WINDOWS\System32\drivers\sptd2733.sys -->27/04/2009 22:46:31
C:\WINDOWS\System32\drivers\AegisP.sys -->10/04/2009 13:11:36
C:\WINDOWS\System32\drivers\mbamswissarmy.sys -->06/04/2009 15:32:54
C:\WINDOWS\System32\drivers\mbam.sys -->06/04/2009 15:32:46

C:\WINDOWS\System32\wpa.dbl -->04/05/2009 21:35:10
C:\WINDOWS\System32\FNTCACHE.DAT -->04/05/2009 12:58:39
C:\WINDOWS\System32\GDIPFONTCACHEV1.DAT -->04/05/2009 10:19:04
C:\WINDOWS\System32\tmp.txt -->03/05/2009 20:36:50
C:\WINDOWS\System32\tmp.reg -->03/05/2009 20:36:50
C:\WINDOWS\System32\guard32.dll -->03/05/2009 18:48:25
C:\WINDOWS\System32\PerfStringBackup.INI -->28/04/2009 19:58:57
C:\WINDOWS\System32\perfh00C.dat -->28/04/2009 19:58:57
C:\WINDOWS\System32\perfh009.dat -->28/04/2009 19:58:57
C:\WINDOWS\System32\perfc00C.dat -->28/04/2009 19:58:57
C:\WINDOWS\System32\perfc009.dat -->28/04/2009 19:58:57
C:\WINDOWS\System32\CCCInstall_200904251741577500.log -->25/04/2009 17:41:57
C:\WINDOWS\System32\MRT.exe -->06/04/2009 16:57:24
C:\WINDOWS\System32\usbaaplrc.dll -->26/03/2009 15:23:46
C:\WINDOWS\System32\kernel32.dll -->21/03/2009 16:07:58
C:\WINDOWS\System32\ieframe.dll.mui -->08/03/2009 14:18:02
C:\WINDOWS\System32\msrating.dll.mui -->08/03/2009 14:17:46
C:\WINDOWS\System32\mshta.exe.mui -->08/03/2009 14:17:30
C:\WINDOWS\System32\ie4uinit.exe.mui -->08/03/2009 14:16:06
C:\WINDOWS\System32\advpack.dll.mui -->08/03/2009 14:16:06
C:\WINDOWS\System32\iedkcs32.dll.mui -->08/03/2009 14:15:48
C:\WINDOWS\System32\iedkcs32.dll -->08/03/2009 14:09:26
C:\WINDOWS\System32\mshtml.dll -->08/03/2009 04:41:16
C:\WINDOWS\System32\ieframe.dll -->08/03/2009 04:39:48
C:\WINDOWS\System32\html.iec -->08/03/2009 04:35:10

C:\WINDOWS\WindowsUpdate.log -->04/05/2009 21:36:34
C:\WINDOWS\RTacDbg.txt -->04/05/2009 21:35:33
C:\WINDOWS\wiadebug.log -->04/05/2009 21:35:10
C:\WINDOWS\wiaservc.log -->04/05/2009 21:35:06
C:\WINDOWS\0.log -->04/05/2009 21:35:01
C:\WINDOWS\bootstat.dat -->04/05/2009 21:34:59
C:\WINDOWS\SchedLgU.Txt -->04/05/2009 21:32:56
C:\WINDOWS\setupapi.log -->04/05/2009 20:48:36
C:\WINDOWS\setupact.log -->03/05/2009 20:39:44
C:\WINDOWS\ntbtlog.txt -->03/05/2009 20:35:21
C:\WINDOWS\setuperr.log -->03/05/2009 14:21:34
C:\WINDOWS\NeroDigital.ini -->02/05/2009 17:08:21
C:\WINDOWS\win.ini -->29/04/2009 18:41:35
C:\WINDOWS\system.ini -->29/04/2009 18:41:35
C:\WINDOWS\WININIT.INI -->25/04/2009 17:51:08


Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 4C8F-11FA

Répertoire de C:\WINDOWS

15/04/2009 19:38 <REP> $hf_mig$
05/02/2009 11:57 <REP> $NtServicePackUninstall$
10/11/2007 23:18 <REP> ftpcache
10/04/2009 18:03 <REP> ie8
03/05/2009 21:42 <REP> inf
03/05/2009 20:52 <REP> Installer
05/08/2004 14:00 49 102 winnt.bmp
05/08/2004 14:00 49 102 winnt256.bmp
3 fichier(s) 98 953 octets
6 Rép(s) 18 884 276 224 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 4C8F-11FA

Répertoire de C:\WINDOWS\system32

04/05/2009 21:34 <REP> dllcache
7 fichier(s) 4 721 octets
1 Rép(s) 18 884 792 320 octets libres
winlogon.exe
Verified: Signed
svchost.exe
Verified: Signed
ws2_32.dll
Verified: Signed
user32.dll
Verified: Signed
tcpip.sys
Verified: Signed
ndis.sys
Verified: Signed
null.sys
Verified: Signed
userinit.exe
kernel32.dll


ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
explorer.exe pid: 588
Command line: C:\WINDOWS\Explorer.EXE

Base Size Version Path
0x77be0000 0x58000 7.00.2600.5512 C:\WINDOWS\system32\msvcrt.dll
0x779e0000 0x97000 5.131.2600.5512 C:\WINDOWS\system32\CRYPT32.dll
0x76610000 0x84000 5.131.2600.5512 C:\WINDOWS\system32\CRYPTUI.dll
0x63000000 0xe6000 8.00.6001.18702 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x1a400000 0x132000 8.00.6001.18702 C:\WINDOWS\system32\urlmon.dll
0x5dca0000 0x1e8000 8.00.6001.18702 C:\WINDOWS\system32\iertutil.dll
0x76be0000 0x2e000 5.131.2600.5512 C:\WINDOWS\system32\WINTRUST.dll
0x58b50000 0x9a000 5.82.2900.5512 C:\WINDOWS\system32\comctl32.dll
0x10000000 0x27000 3.08.0260.0476 C:\WINDOWS\system32\guard32.dll
0x76f80000 0x7f000 2001.12.4414.0700 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0700 C:\WINDOWS\system32\COMRes.dll
0x76ac0000 0x11000 3.05.2284.0001 C:\WINDOWS\system32\ATL.DLL
0x7d200000 0x2bc000 3.01.4001.5512 C:\WINDOWS\system32\msi.dll
0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll
0x024f0000 0xa91000 8.00.6001.18702 C:\WINDOWS\system32\ieframe.dll
0x5f800000 0x16000 1.01.1593.0000 D:\Internet\WINDOW~1\MpShHook.dll
0x78130000 0x9b000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll
0x7c420000 0x87000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll
0x013b0000 0x3d000 8.00.6001.18702 C:\WINDOWS\system32\webcheck.dll
0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x00cf0000 0x19000 2.00.0000.0016 D:\Utilitaires\Divers\SuperCopier2\SC2Hook.dll
0x034e0000 0x1d6000 1.06.0002.0014 D:\Internet\SPYBOT~1\SDHelper.dll
0x013a0000 0x9000 8.00.6001.18702 C:\WINDOWS\system32\jsproxy.dll
0x74730000 0x3d000 3.525.1132.0000 C:\WINDOWS\system32\ODBC32.dll
0x1f840000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x03ed0000 0x4c000 9.01.0000.0163 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA
0x00de0000 0x2e000 6.11.0027.0111 D:\Utilitaires\Divers\ALZip\AZCTM.dll
0x00980000 0x14000 2.07.0002.0000 D:\Utilitaires\Divers\Nero 7\Nero BackItUp\NBShell.dll
0x7c250000 0x102000 7.10.3077.0000 D:\Utilitaires\Divers\Nero 7\Nero BackItUp\MFC71U.DLL
0x03110000 0x56000 7.10.3052.0004 D:\Utilitaires\Divers\Nero 7\Nero BackItUp\MSVCR71.dll
0x7c3a0000 0x7b000 7.10.3077.0000 D:\Utilitaires\Divers\Nero 7\Nero BackItUp\MSVCP71.dll
0x00e30000 0x18000 9.00.0000.0003 C:\Program Files\Avira\AntiVir Desktop\shlext.dll
0x789e0000 0x3a1000 9.00.30729.0001 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll
0x78520000 0xa3000 9.00.30729.0001 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCR90.dll
0x5d360000 0xf000 9.00.30729.0001 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\MFC90FRA.DLL
0x01d00000 0x12000 1.01.0000.0000 D:\Internet\Malwarebytes' Anti-Malware\mbamext.dll
0x01c30000 0xd000 2.12.0000.0658 D:\UTILIT~1\SYSTME~1\GLARYU~1\CONTEX~1.DLL
0x40000000 0xc6000 7.00.0004.0453 D:\UTILIT~1\SYSTME~1\GLARYU~1\rtl70.bpl
0x04a00000 0x157000 7.00.0004.0453 D:\UTILIT~1\SYSTME~1\GLARYU~1\vcl70.bpl
0x03f60000 0x5b000 9.01.0000.0163 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll
0x6bd10000 0x10000 12.00.4518.1014 D:\Bureautique\Microsoft Office Professionnel 2007\Office12\msohevi.dll

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
winlogon.exe pid: 1004
Command line: winlogon.exe

Base Size Version Path
0x01000000 0x82000 \??\C:\WINDOWS\system32\winlogon.exe
0x77be0000 0x58000 7.00.2600.5512 C:\WINDOWS\system32\msvcrt.dll
0x779e0000 0x97000 5.131.2600.5512 C:\WINDOWS\system32\CRYPT32.dll
0x76be0000 0x2e000 5.131.2600.5512 C:\WINDOWS\system32\WINTRUST.dll
0x10000000 0x27000 3.08.0260.0476 C:\WINDOWS\system32\guard32.dll
0x58b50000 0x9a000 5.82.2900.5512 C:\WINDOWS\system32\COMCTL32.dll
0x74730000 0x3d000 3.525.1132.0000 C:\WINDOWS\system32\ODBC32.dll
0x1f840000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x00fd0000 0x28000 6.14.0010.4178 C:\WINDOWS\system32\Ati2evxx.dll
0x01540000 0x42000 1.08.0031.0009 C:\WINDOWS\system32\WgaLogon.dll
0x76f80000 0x7f000 2001.12.4414.0700 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0700 C:\WINDOWS\system32\COMRes.dll
0x76ac0000 0x11000 3.05.2284.0001 C:\WINDOWS\system32\ATL.DLL


Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 4C8F-11FA

Répertoire de C:\WINDOWS\Downloaded Program Files

03/05/2009 21:50 <REP> .
03/05/2009 21:50 <REP> ..
09/01/2008 15:01 32 bdcore.dll
09/01/2008 15:01 118 784 bdupd.dll
09/11/2007 15:52 65 desktop.ini
09/01/2008 15:01 53 248 ipsupd.dll
25/02/2009 16:41 7 724 lang.ini
09/01/2008 15:01 32 libfn.dll
21/01/2008 17:43 130 live.ini
07/02/2008 14:06 1 248 oscan8.inf
26/02/2008 15:59 487 424 oscan82.ocx
09/01/2008 15:01 6 828 scanoptions.tsi
10 fichier(s) 675 515 octets

Total des fichiers listés :
10 fichier(s) 675 515 octets
2 Rép(s) 18 884 714 496 octets libres

Recherche de rootkit! (Merci S!Ri)

Recherche d'infections connues

Export des clefs sensibles..


Liste des fichiers en exception sur le pare-feu XP SP2

"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\Bureautique\\Microsoft Office Professionnel 2007\\Office12\\OUTLOOK.EXE"="D:\\Bureautique\\Microsoft Office Professionnel 2007\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\WINDOWS\\system32\\mmc.exe"="C:\\WINDOWS\\system32\\mmc.exe:*:Enabled:Microsoft Management Console"
"E:\\MotoGP URT 3\\motogp.exe"="E:\\MotoGP URT 3\\motogp.exe:*:Enabled:motogp"
"E:\\TrackMania Nations ESWC\\TmNationsESWC.exe"="E:\\TrackMania Nations ESWC\\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"D:\\Graveur\\Nero 7\\Nero Home\\NeroHome.exe"="D:\\Graveur\\Nero 7\\Nero Home\\NeroHome.exe:*:Enabled:Nero Home"
"E:\\Pro Evolution Soccer 2008\\PES2008.exe"="E:\\Pro Evolution Soccer 2008\\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008"
"C:\\WINDOWS\\Temp\\NavBrowser.exe"="C:\\WINDOWS\\Temp\\NavBrowser.exe:*:Enabled:NAVBrowser"
"E:\\Pro Evolution Soccer 2008\\Pro Evolution Soccer 2008\\All National Teams.exe"="E:\\Pro Evolution Soccer 2008\\Pro Evolution Soccer 2008\\All National Teams.exe:*:Enabled:Pro Evolution Soccer 2008"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"E:\\TrackMania Nations Forever\\TmForever.exe"="E:\\TrackMania Nations Forever\\TmForever.exe:*:Enabled:TmForever"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\\Son\\iTunes\\iTunes.exe"="D:\\Son\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

Export de la clef SharedTaskScheduler

[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"



exports des policies
REGEDIT4

[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001



Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-04 22:04:36
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s0"=dword:fc35bb1a
"s1"=dword:62488fc2
"s2"=dword:54250a39
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="D:\Utilitaires\Divers\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:63,08,97,75,a0,80,7a,32,70,a7,56,59,cd,d1,c5,4f,c3,53,24,a2,1c,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,04,4e,ed,11,f5,40,e7,26,f4,b0,0a,ad,b8,10,13,3e,8a,..
"khjeh"=hex:26,c6,79,84,5a,09,36,e6,11,1b,de,fa,1f,80,42,d4,d1,80,48,2b,6d,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:0f,06,9c,75,69,64,d3,6f,21,d2,d3,ec,2f,68,0c,13,c7,be,09,77,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="D:\Utilitaires\Divers\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:63,08,97,75,a0,80,7a,32,70,a7,56,59,cd,d1,c5,4f,c3,53,24,a2,1c,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,04,4e,ed,11,f5,40,e7,26,f4,b0,0a,ad,b8,10,13,3e,8a,..
"khjeh"=hex:26,c6,79,84,5a,09,36,e6,11,1b,de,fa,1f,80,42,d4,d1,80,48,2b,6d,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:0f,06,9c,75,69,64,d3,6f,21,d2,d3,ec,2f,68,0c,13,c7,be,09,77,af,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="D:\Utilitaires\Divers\DAEMON Tools\"
"h0"=dword:00000000
"khjeh"=hex:63,08,97,75,a0,80,7a,32,70,a7,56,59,cd,d1,c5,4f,c3,53,24,a2,1c,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,04,4e,ed,11,f5,40,e7,26,f4,b0,0a,ad,b8,10,13,3e,8a,..
"khjeh"=hex:26,c6,79,84,5a,09,36,e6,11,1b,de,fa,1f,80,42,d4,d1,80,48,2b,6d,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:0f,06,9c,75,69,64,d3,6f,21,d2,d3,ec,2f,68,0c,13,c7,be,09,77,af,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden services: 0
hidden files: 0


Stealth MBR rootkit detector 0.2.4 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK

KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

Process list by traversal of KiWaitListHead

4 - System
264 - ati2evxx.exe
280 - spoolsv.exe
588 - explorer.exe
756 - avguard.exe
788 - AppleMobileDevi
844 - fsproflt.exe
972 - csrss.exe
1004 - winlogon.exe
1056 - services.exe
1068 - lsass.exe
1292 - svchost.exe
1392 - svchost.exe
1448 - cmdagent.exe
1476 - svchost.exe
1508 - MsMpEng.exe
1804 - svchost.exe
1836 - svchost.exe
2168 - avgnt.exe
2176 - cfp.exe
2184 - MSASCui.exe
2412 - ctfmon.exe
2660 - TeaTimer.exe
2856 - alg.exe
2880 - RtWLan.exe
3100 - firefox.exe

Total number of processes = 26
NOTE: Under WinXP, this will not show all processes.

KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

Driver/Module list by traversal of PsLoadedModuleList

804D7000 - \WINDOWS\system32\ntoskrnl.exe
806FF000 - \WINDOWS\system32\hal.dll
F7B6F000 - \WINDOWS\system32\KDCOM.DLL
F7A7F000 - \WINDOWS\system32\BOOTVID.dll
F757E000 - sptd.sys
F7B71000 - \WINDOWS\System32\Drivers\WMILIB.SYS
F7566000 - \WINDOWS\System32\Drivers\SPTD2733.SYS
F7537000 - ACPI.sys
F7526000 - pci.sys
F766F000 - isapnp.sys
F7C37000 - pciide.sys
F78EF000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
F7B73000 - intelide.sys
F767F000 - MountMgr.sys
F7507000 - ftdisk.sys
F7B75000 - dmload.sys
F74E1000 - dmio.sys
F78F7000 - PartMgr.sys
F78FF000 - pavboot.sys
F768F000 - VolSnap.sys
F74C9000 - atapi.sys
F74B7000 - viamraid.sys
F749F000 - \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
F769F000 - disk.sys
F76AF000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
F747F000 - fltmgr.sys
F746D000 - sr.sys
F76BF000 - FSPFltd.sys
F7456000 - \WINDOWS\System32\Drivers\ksecdd.sys
F73C9000 - Ntfs.sys
F73B7000 - inspect.sys
F738A000 - \WINDOWS\System32\DRIVERS\NDIS.SYS
F7907000 - \WINDOWS\System32\DRIVERS\TDI.SYS
F7377000 - sfvfs02.sys
F790F000 - sfhlp02.sys
F7365000 - sfdrv01.sys
F734B000 - Mup.sys
F781F000 - \SystemRoot\system32\DRIVERS\intelppm.sys
F6637000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys
F6623000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
F65FF000 - \SystemRoot\system32\DRIVERS\HDAudBus.sys
F65B9000 - \SystemRoot\system32\DRIVERS\yk51x86.sys
F79CF000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
F6595000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
F79D7000 - \SystemRoot\system32\DRIVERS\usbehci.sys
F654A000 - \SystemRoot\system32\DRIVERS\rtl8185.sys
F782F000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
F6530000 - \SystemRoot\System32\drivers\keyscrambler.sys
F79DF000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
F651F000 - \SystemRoot\system32\DRIVERS\serial.sys
F731B000 - \SystemRoot\system32\DRIVERS\serenum.sys
F79E7000 - \SystemRoot\system32\DRIVERS\irsir.sys
F7317000 - \SystemRoot\system32\DRIVERS\irenum.sys
F79EF000 - \SystemRoot\system32\DRIVERS\fdc.sys
F650B000 - \SystemRoot\system32\DRIVERS\parport.sys
F783F000 - \SystemRoot\system32\DRIVERS\imapi.sys
F784F000 - \SystemRoot\system32\DRIVERS\cdrom.sys
F785F000 - \SystemRoot\system32\DRIVERS\redbook.sys
F64E8000 - \SystemRoot\system32\DRIVERS\ks.sys
F79F7000 - \SystemRoot\system32\drivers\InCDPass.sys
F786F000 - \SystemRoot\system32\drivers\InCDRm.sys
F787F000 - \SystemRoot\System32\Drivers\GEARAspiWDM.sys
F645C000 - \SystemRoot\System32\Drivers\dtscsi.sys
F7D31000 - \SystemRoot\system32\DRIVERS\audstub.sys
F79FF000 - \SystemRoot\system32\DRIVERS\rasirda.sys
F788F000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
F72F7000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
F6445000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
F789F000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
F78AF000 - \SystemRoot\system32\DRIVERS\raspptp.sys
F6434000 - \SystemRoot\system32\DRIVERS\psched.sys
F78BF000 - \SystemRoot\system32\DRIVERS\msgpc.sys
F62D0000 - \SystemRoot\System32\drivers\dmboot.sys
F7997000 - \SystemRoot\system32\DRIVERS\ptilink.sys
F799F000 - \SystemRoot\system32\DRIVERS\raspti.sys
F62A0000 - \SystemRoot\system32\DRIVERS\rdpdr.sys
F78CF000 - \SystemRoot\system32\DRIVERS\termdd.sys
F79A7000 - \SystemRoot\system32\DRIVERS\mouclass.sys
F7B9D000 - \SystemRoot\system32\DRIVERS\swenum.sys
F621A000 - \SystemRoot\system32\DRIVERS\update.sys
F72DF000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
F78DF000 - \SystemRoot\System32\Drivers\NDProxy.SYS
EE07C000 - \SystemRoot\system32\drivers\cmudax.sys
EE058000 - \SystemRoot\system32\drivers\portcls.sys
F773F000 - \SystemRoot\system32\drivers\drmk.sys
F774F000 - \SystemRoot\system32\DRIVERS\usbhub.sys
F7BC1000 - \SystemRoot\system32\DRIVERS\USBD.SYS
F79C7000 - \SystemRoot\system32\DRIVERS\flpydisk.sys
EE03E000 - \SystemRoot\System32\DRIVERS\cmdguard.sys
F7BC5000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
F7D9D000 - \SystemRoot\System32\Drivers\Null.SYS
F7BC7000 - \SystemRoot\System32\Drivers\Beep.SYS
F7A0F000 - \SystemRoot\System32\drivers\vga.sys
F7BC9000 - \SystemRoot\System32\Drivers\mnmdd.SYS
F7BCB000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
F629C000 - \SystemRoot\System32\Drivers\InCDrec.SYS
EDFDC000 - \SystemRoot\system32\drivers\InCDFs.sys
F7A17000 - \SystemRoot\System32\Drivers\Msfs.SYS
F7A1F000 - \SystemRoot\System32\Drivers\Npfs.SYS
F6298000 - \SystemRoot\system32\DRIVERS\rasacd.sys
EDFC9000 - \SystemRoot\system32\DRIVERS\ipsec.sys
EDF70000 - \SystemRoot\system32\DRIVERS\tcpip.sys
F7A27000 - \SystemRoot\System32\DRIVERS\cmdhlp.sys
EDF4A000 - \SystemRoot\system32\DRIVERS\ipnat.sys
EDF22000 - \SystemRoot\system32\DRIVERS\netbt.sys
F776F000 - \SystemRoot\system32\DRIVERS\wanarp.sys
EDF00000 - \SystemRoot\System32\drivers\afd.sys
F777F000 - \SystemRoot\system32\DRIVERS\netbios.sys
F7A2F000 - \SystemRoot\system32\DRIVERS\ssmdrv.sys
EDED5000 - \SystemRoot\system32\DRIVERS\rdbss.sys
EDE65000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
F778F000 - \SystemRoot\System32\Drivers\Fips.SYS
EDDA9000 - \SystemRoot\system32\DRIVERS\avipbb.sys
F7BCF000 - \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
F6206000 - \SystemRoot\system32\DRIVERS\hidusb.sys
F77BF000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
F7A37000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
F61FE000 - \SystemRoot\system32\DRIVERS\mouhid.sys
F6404000 - \SystemRoot\System32\Drivers\Cdfs.SYS
EDD19000 - \SystemRoot\System32\Drivers\dump_atapi.sys
F7BE1000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS
BF800000 - \SystemRoot\System32\win32k.sys
F7B47000 - \SystemRoot\System32\drivers\Dxapi.sys
F7A67000 - \SystemRoot\System32\watchdog.sys
BF000000 - \SystemRoot\System32\drivers\dxg.sys
F7D56000 - \SystemRoot\System32\drivers\dxgthk.sys
BF012000 - \SystemRoot\System32\ati2dvag.dll
BF065000 - \SystemRoot\System32\ati2cqag.dll
BF0FE000 - \SystemRoot\System32\atikvmag.dll
BF182000 - \SystemRoot\System32\atiok3x2.dll
BF1CD000 - \SystemRoot\System32\ati3duag.dll
BF572000 - \SystemRoot\System32\ativvaxx.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
EB9C5000 - \SystemRoot\system32\DRIVERS\avgntflt.sys
F7967000 - \SystemRoot\system32\DRIVERS\AegisP.sys
EB847000 - \SystemRoot\system32\DRIVERS\irda.sys
EBAE1000 - \SystemRoot\system32\DRIVERS\EAPPkt.sys
EB965000 - \SystemRoot\system32\DRIVERS\ndisuio.sys
EB612000 - \SystemRoot\system32\DRIVERS\mrxdav.sys
EB5AD000 - \SystemRoot\system32\drivers\wdmaud.sys
EB73F000 - \SystemRoot\system32\drivers\sysaudio.sys
F7C15000 - \SystemRoot\System32\Drivers\ParVdm.SYS
EB235000 - \SystemRoot\system32\DRIVERS\srv.sys
F7246000 - \SystemRoot\System32\Drivers\HTTP.sys
BA61A000 - \SystemRoot\system32\drivers\kmixer.sys
BA5F6000 - \SystemRoot\System32\Drivers\Fastfat.SYS
F7B7F000 - \??\C:\DOCUME~1\tibouuh\LOCALS~1\Temp\mbr.sys
F7C49000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys

Total number of drivers = 148

Liste des programmes installes

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.1 - Français
Adobe Shockwave Player 11.5
ALZip
Ant Renamer
Apple Mobile Device Support
Apple Software Update
ATI - Software Uninstall Utility
ATI Display Driver
Avira AntiVir Personal - Free Antivirus
C-Media Azalia Audio Driver
CCleaner (remove only)
COMODO Internet Security
Defraggler (remove only)
DVD Shrink 3.2
EPSON CardMonitor
EPSON Copy Utility 3
EPSON Logiciel imprimante
EPSON PhotoQuicker3.5
EPSON PhotoStarter3.1
EPSON PRINT Image Framer Tool2.1
EPSON Scan
EPSON Smart Panel
EPSON Web-To-Page
ESCX6600 Guide de réf.
ESCX6600 Guide des logiciels
filehippo.com Update Checker
Free Video to Mp3 Converter version 3.1
Free YouTube to Mp3 Converter version 3.1
Glary Utilities 2.12.0.658
Grisbi 0.5.9
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB954550-v5)
iTunes
K-Lite Codec Pack 3.5.7 Full
KeyScrambler
Lecteur Windows Media 11
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA
Microsoft .NET Framework 3.5 Language Pack SP1 - fra
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Office Access MUI (French) 2007
Microsoft Office Excel MUI (French) 2007
Microsoft Office InfoPath MUI (French) 2007
Microsoft Office Language Pack 2007 Service Pack 1 (SP1)
Microsoft Office Outlook MUI (French) 2007
Microsoft Office PowerPoint MUI (French) 2007
Microsoft Office Professional Plus 2007
Microsoft Office Professional Plus 2007
Microsoft Office Project Professional 2003
Microsoft Office Proof (Arabic) 2007
Microsoft Office Proof (Dutch) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (French) 2007
Microsoft Office Publisher MUI (French) 2007
Microsoft Office Shared MUI (French) 2007
Microsoft Office Word MUI (French) 2007
Microsoft Software Update for Web Folders (French) 12
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Module linguistique Microsoft .NET Framework 3.5 SP1- fra
MotoGP URT 3
Mozilla Firefox (3.0.10)
MSI Wireless Adapter Driver and Utility
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
My Lockbox 1.3 for Windows 2000/XP
Nero 7 Premium
Next Generation Visualisations
Panda ActiveScan 2.0
PDFCreator
PIF DESIGNER2.1
Platform
PowerDVD
Pro Evolution Soccer 2008
Pro Evolution Soccer 2008
Quicksys RegDefrag 2.3
QuickTime
ScanToWeb
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB960003)
Security Update for Microsoft Office Excel 2007 (KB959997)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Sony Ericsson PC Suite
Sony Ericsson Themes Creator 4.00
Spelling Dictionaries Support For Adobe Reader 9
Spybot - Search & Destroy
SuperCopier2
Systran Professional Standard 4.0
TmNationsForever
Uninstall 1.0.0.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Outlook 2007 Junk Email Filter (kb968503)
VIA Gestionnaire de périphériques de plate-forme
WebFldrs XP
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3



Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 4C8F-11FA

Répertoire de C:\Program Files

02/05/2009 23:15 <REP> .
02/05/2009 23:15 <REP> ..
12/09/2008 10:40 <REP> Apple Software Update
25/04/2009 18:53 <REP> ATI
25/04/2009 17:43 <REP> ATI Technologies
29/04/2009 11:39 <REP> Avira
09/11/2007 15:50 <REP> ComPlus Applications
20/11/2007 18:48 <REP> CyberLink
19/11/2007 15:07 <REP> epson
16/04/2009 20:44 <REP> ESTsoft
03/05/2009 14:59 <REP> Fichiers communs
09/11/2007 17:01 <REP> Intel
10/04/2009 18:05 <REP> Internet Explorer
14/04/2009 17:56 <REP> iPod
09/11/2007 15:53 <REP> microsoft frontpage
09/11/2007 19:31 <REP> Microsoft Visual Studio
09/11/2007 19:32 <REP> Microsoft Works
05/02/2009 12:02 <REP> Movie Maker
04/05/2009 21:37 <REP> Mozilla Firefox
25/02/2009 18:34 <REP> MSBuild
30/04/2009 16:25 <REP> MSI
09/11/2007 15:50 <REP> MSN Gaming Zone
26/11/2007 19:48 <REP> MSXML 4.0
05/02/2009 12:00 <REP> NetMeeting
05/02/2009 12:00 <REP> Outlook Express
27/04/2009 21:22 <REP> Panda Security
19/02/2009 14:45 <REP> QuickTime
25/02/2009 18:34 <REP> Reference Assemblies
09/11/2007 15:52 <REP> Services en ligne
19/11/2007 15:05 <REP> Smart Panel
30/04/2009 12:28 <REP> Sony Ericsson
29/04/2009 16:48 <REP> Trend Micro
09/11/2007 16:49 <REP> VIA
05/06/2008 22:40 <REP> Windows Media Connect 2
05/02/2009 12:00 <REP> Windows Media Player
05/02/2009 12:00 <REP> Windows NT
09/11/2007 15:53 <REP> xerox
0 fichier(s) 0 octets
37 Rép(s) 18 851 430 400 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 4C8F-11FA

Répertoire de C:\Program Files\fichiers communs

03/05/2009 14:59 <REP> .
03/05/2009 14:59 <REP> ..
30/04/2009 11:22 <REP> Adobe
04/12/2008 12:00 <REP> Ahead
14/04/2009 17:56 <REP> Apple
09/11/2007 19:31 <REP> DESIGNER
10/11/2007 14:41 <REP> DirectX
20/04/2009 18:18 <REP> DVDVideoSoft
09/11/2007 16:36 <REP> InstallShield
25/04/2009 17:34 <REP> Microsoft Shared
09/11/2007 15:51 <REP> MSSoap
09/11/2007 16:34 <REP> ODBC
09/11/2007 15:51 <REP> Services
09/11/2007 16:34 <REP> SpeechEngines
05/02/2009 12:00 <REP> System
03/12/2007 12:18 <REP> Teleca Shared
0 fichier(s) 0 octets
16 Rép(s) 18 851 430 400 octets libres
Le volume dans le lecteur C s'appelle Disque local
Le numéro de série du volume est 4C8F-11FA

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

14/04/2009 17:08 <REP> .
14/04/2009 17:08 <REP> ..
20/11/2007 21:30 <REP> 1033
09/11/2007 19:29 <REP> 1036
28/08/2007 23:55 973 168 MSONSEXT.DLL
26/10/2006 21:12 40 256 MSOSV.DLL
03/06/1999 13:09 122 937 MSOWS409.DLL
07/03/2001 08:00 127 033 MSOWS40c.DLL
11/07/2003 03:25 80 448 PKMWS.DLL
5 fichier(s) 1 343 842 octets
4 Rép(s) 18 851 430 400 octets libres




c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe
c:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
c:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\DifXInstall32.exe
c:\Documents and Settings\tibouuh\Bureau\OTMoveIt3.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\catchme.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\diff.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\dumphive.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\find2.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\Fport.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\grep.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\gzip.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\KProcCheck.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\LFiles.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\mbr.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\md5sums.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\Psinfo.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\pslist.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\sigcheck.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\streams.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\swreg.exe
c:\Documents and Settings\tibouuh\Bureau\DiagHelp\DiagHelp\tar.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\404Fix.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Agent.OMZ.Fix.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\dumphive.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\exit.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\GenericRenosFix.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\HostsChk.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\IEDFix.C.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\IEDFix.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\o4Patch.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Policies.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Process.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\ProxyDisable.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\Reboot.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\restart.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\SmiUpdate.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\SrchSTS.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\swreg.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\swsc.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\swxcacls.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\UIFix.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\unzip.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\VACFix.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\VCCLSID.exe
c:\Documents and Settings\tibouuh\Bureau\SmitfraudFix\WS2Fix.exe
c:\Documents and Settings\tibouuh\Mes documents\DVDVideoSoft\Cleaner.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{A7C854E6-49D5-452C-83FC-DD54258E5093}\mpengine.dll
c:\Documents and Settings\All Users\Application Data\Nero\DrWeb\Drweb32.dll
c:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\DIFxAPI.dll
c:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86\GEARAspi.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
c:\Documents and Settings\tibouuh\Application Data\Mozilla\Firefox\Profiles\wa3lzre9.default\extensions\keyscrambler@qfx.software.corporation\components\KeyScramblerIE.dll

****** Fin du rapport DiagHelp
Veuillez svp envoyer le fichier C:\upload_moi_tibouuh.tar.gz a l'adresse http://upload.malekal.com

j'ai fait le scan et il n'a trouvé aucun problème.

j'ai redémarré, et vlan, à nouveau une icone du disque dur qui déconne.

est-ce que c'est dû à un virus au moins? ou est-ce windows qui déconne un peu, peut-être à cause d'anciens programmes dont ils restent des traces ou je ne sais quoi d'autres?

bonne nuit ;-)

salut,

et pour ce qui est du rapport que j'ai posté suite au scan Panda. je désinfecte et supprime les fichiers (ceux de DiagHelp) qu'il a trouvé?

j'ai réinstallé Firefox, passé un coup d'ATF Cleaner, de ToolsCleaner et de CCleaner et j'ai aussi défragmenté.

et je viens de lancer le scan de Windows. en fait, le CD m'est demandé à chaque fois dès le début.

je voulais te demander aussi. est-ce que tu connais le logiciel Glary Utilities? c'est un peu comme un couteau suisse du nettoyage. parce que je l'ai utilisé avant d'avoir ces problèmes (en tout cas, avant de m'en apercevoir), et vu qu'il efface des clés de registre et qu'il fait le nettoyage en profondeur, je demandais si les problèmes pouvaient pas venir de là.

j'essaie de protéger mon PC mieux qu'avant (j'avais juste Avast!) et aussi de lui redonner une nouvelle jeunesse en le "nettoyant" pour qu'il booste un peu plus, mais je sais pas si ce genre de logiciel est efficace et sûr.
quand penses-tu? qu'est-ce que tu me conseillerais?

je dois te faire chier avec toutes ces questions?! ^^
désolé de t'assaillir avec mes questions, mais j'aime bien apprendre! ^^

la réparation s'est bien passée.
tout semble correct.

merci pour les liens, je vais les regarder attentivement.

est-ce que je dois faire autre chose pour être certain que c'est ok?

ok!

merci pour ton aide et ta patience! ;-)
a+