Impossible d'afficher les fichiers cachés - Page 2

salut jlpjlp, je suis en trin de faire une analyse anti-virus en ligne comme tu me l'as conseillé, c'est pas encore fini (c'est long) mais pour l'instant on m'affiche ceci :

Analyse

Recherche de virus, logiciels espions, chevaux de Troie et autres menaces. Ce processus peut prendre plus d’une heure, selon la quantité d’informations stockées sur votre ordinateur.
24%
Elément en cours: C:\System Volume Informat...}\RP245\A0100907.exe
Fichiers analysés : 228733
Fichiers infectés : 89
Fichiers suspects détectés : 14
Vulnérabilités détectées : 15

Est-ce que ces résultats sont fiables ? Comment se fait-il que je me rend pas compte qu'il y ai autant de virus, 89 !!!? c'est énormes
dois-je m'alarmer ? Parceque personnellement mon ordinateur re-fonctionne trés bien maintenant (grace a ton aide)

Peux-tu m'éclairer s'il te plait ?

Merci

En plus :

;***********************************************************************************************************************************************************************************
ANALYSIS: 2009-05-28 15:35:20
PROTECTIONS: 2
MALWARE: 21
SUSPECTS: 15
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
ZoneAlarm Security Suite Antivirus 7.0.483.000 Yes No
avast! antivirus 4.8.1335 [VPS 090527-0] 4.8.1335 Yes Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\abdallah\Cookies\abdallah@atdmt[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\abdallah\Cookies\abdallah@mediaplex[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur\Cookies\administrateur@xiti[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\abdallah\Cookies\abdallah@apmebf[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\abdallah\Cookies\abdallah@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\abdallah\Cookies\abdallah@bs.serving-sys[2].txt
00571380 Trj/PWSteal.EE Virus/Trojan No 0 No No C:\WINDOWS\i386\SYSTSOFT.EX_[SystSoft.exe][SystSoft.exe][System32\Vistadrive\vsdrv.exe]
00950236 W32/Lineage.KFR.worm Virus/Worm No 1 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0093183.inf
00950524 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0094178.bat
00950524 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0094180.exe
00950525 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095179.inf
00950525 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0094179.inf
00950525 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095200.inf
00950525 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095255.inf
00950525 Trj/Lineage.KVL Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095270.inf
00950918 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095178.bat
00950918 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP236\A0100035.bat
00950918 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095199.bat
00950918 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095269.bat
00950918 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095254.bat
00950918 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095271.exe
00951451 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0093184.exe
00951451 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP236\A0100036.bat
00951451 Generic Malware Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0093182.bat
00954132 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0094181.dll
00954132 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095177.dll
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP234\A0099918.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0099907.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0099786.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098784.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098726.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098699.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098459.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098378.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098040.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP231\A0098035.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096850.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0098025.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0097944.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096864.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096938.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0097066.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096890.exe
00954154 W32/Lineage.KVR Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP234\A0099920.exe
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096937.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP236\A0100039.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP234\A0099921.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096889.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0099906.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0099785.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096863.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098783.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0098024.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098725.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098458.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098377.dll
00954155 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0097942.dll
00954191 W32/Autorun.IZY.worm Virus No 1 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0094177.dll
00954191 W32/Autorun.IZY.worm Virus No 1 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0093185.dll
00954340 W32/Lineage.KVU Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096822.exe
00954340 W32/Lineage.KVU Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0096358.exe
00954340 W32/Lineage.KVU Virus No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096820.exe
00954342 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096819.dll
00954342 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096823.dll
00954342 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096849.dll
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096821.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098700.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096851.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0098026.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098727.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0098776.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098041.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098441.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0099783.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP228\A0096865.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0096359.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0097067.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP232\A0098379.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP233\A0099908.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP242\A0100540.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP234\A0099919.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096891.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096939.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP235\A0099971.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP236\A0100033.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP245\A0100985.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP230\A0097945.inf
00954344 W32/Lineage.KVU.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP231\A0098036.inf
00954359 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0095358.inf
00954359 W32/Lineage.KVR.worm Virus/Worm No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0095299.inf
03074964 Trj/CI.A Virus/Trojan No 0 Yes No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0093006.sys
;===================================================================================================================================================================================
SUSPECTS
Sent Location ãè
;===================================================================================================================================================================================
No C:\Documents and Settings\abdallah\Mes documents\prgm clé usb\Programes\streamripper-windows-installer-1.64.3.exe
No C:\Program Files\Free FLV Converter\FreeFLVConverter.exe ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095198.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095253.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095268.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP226\A0095272.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0095298.cmd ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0095357.cmd ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0095359.exe ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0095360.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP227\A0096357.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP229\A0096905.cmd ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP236\A0100038.exe ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP240\A0100375.dll ãè
No C:\System Volume Information\_restore{6093FD69-AC1E-41CE-A6B0-C103A13BE8BA}\RP248\A0101643.dll ãè
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description ãè
;===================================================================================================================================================================================
184379 MEDIUM MS08-001 ãè
182048 HIGH MS07-069 ãè
182046 HIGH MS07-067 ãè
182043 HIGH MS07-064 ãè
176382 HIGH MS07-057 ãè
170907 HIGH MS07-046 ãè
170906 HIGH MS07-045 ãè
170904 HIGH MS07-043 ãè
164913 HIGH MS07-033 ãè
160623 HIGH MS07-027 ãè
157262 HIGH MS07-022 ãè
150253 HIGH MS07-016 ãè
150243 HIGH MS07-008 ãè
108742 MEDIUM MS06-006 ãè
93454 MEDIUM MS05-049 ãè
;===================================================================================================================================================================================

ok je te fais confiance v faire ce que tu m'as dit

thank you ^^

Rapport OTMoveIt3

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\WINDOWS\i386\SYSTSOFT.EX_ moved successfully.
File/Folder C:\WINDOWS\i386\SYSTSOFT.EX_[SystSoft.exe][SystSoft.exe][Sys­­tem32\Vistadrive\vsdrv.exe] not found.
File/Folder C:\Documents and Settings\abdallah\Mes documents\prgm clé usb\Programes\streamripper-windows-installer-1.64.3.exe not found.
File/Folder C:\Program Files\Free FLV Converter\FreeFLVConverter.exe ãè not found.
C:\Program Files\Free FLV Converter\FreeFLVConverter.exe moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\abdallah\LOCALS~1\Temp\ee366d2b2e4ede8287de879e85a0dcc2PSK_PLUGINS_0 scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\abdallah\LOCALS~1\Temp\etilqs_SckwifjP0QY10WHKsrRq scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\abdallah\LOCALS~1\Temp\Perflib_Perfdata_d3c.dat scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_218.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6b8.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT01a55.TMP scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\ZLT01a58.TMP scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05282009_155211

Files moved on Reboot...
C:\DOCUME~1\abdallah\LOCALS~1\Temp\ee366d2b2e4ede8287de879e85a0dcc2PSK_PLUGINS_0 moved successfully.
File C:\DOCUME~1\abdallah\LOCALS~1\Temp\etilqs_SckwifjP0QY10WHKsrRq not found!
File C:\DOCUME~1\abdallah\LOCALS~1\Temp\Perflib_Perfdata_d3c.dat not found!
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_218.dat moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_6b8.dat moved successfully.
C:\WINDOWS\temp\ZLT01a55.TMP moved successfully.
C:\WINDOWS\temp\ZLT01a58.TMP moved successfully.
C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\abdallah\Local Settings\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\XUL.mfl moved successfully.

Compte rendu combofix :

Petite question au passage, le répertoire 'System volume Information' a été complètement supprimé j'avoue que ça m'arrange parceque c'est dans ce répertoire ou j'ai détecté beaucoup de virus, seulement l'accès à ce répertoire m'a été refusé est-ce normal ?




ComboFix 09-05-26.05 - abdallah 28/05/2009 16:55.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.999.629 [GMT 2:00]
Lancé depuis: c:\documents and settings\abdallah\Bureau\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090527-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: ZoneAlarm Security Suite Antivirus *On-access scanning enabled* (Outdated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}
FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\_000005_.tmp.dll
c:\windows\system32\_000006_.tmp.dll
c:\windows\system32\_000007_.tmp.dll
c:\windows\system32\_000008_.tmp.dll
c:\windows\system32\msconfig.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-04-28 au 2009-05-28 ))))))))))))))))))))))))))))))))))))
.

2009-05-28 13:52 . 2009-05-28 13:52 -------- d-----w C:\_OTMoveIt
2009-05-28 12:21 . 2008-06-19 15:24 28544 ----a-w c:\windows\system32\drivers\pavboot.sys
2009-05-28 12:20 . 2009-05-28 12:20 -------- d-----w c:\program files\Panda Security
2009-05-27 22:56 . 2009-05-27 23:10 -------- d-----w c:\program files\RegCleaner
2009-05-27 22:55 . 2009-02-05 20:06 51376 ----a-w c:\windows\system32\drivers\aswTdi.sys
2009-05-27 22:55 . 2009-02-05 20:06 23152 ----a-w c:\windows\system32\drivers\aswRdr.sys
2009-05-27 22:55 . 2009-02-05 20:05 26944 ----a-w c:\windows\system32\drivers\aavmker4.sys
2009-05-27 22:55 . 2009-02-05 20:08 93296 ----a-w c:\windows\system32\drivers\aswmon.sys
2009-05-27 22:55 . 2009-02-05 20:08 94032 ----a-w c:\windows\system32\drivers\aswmon2.sys
2009-05-27 22:55 . 2009-02-05 20:07 114768 ----a-w c:\windows\system32\drivers\aswSP.sys
2009-05-27 22:55 . 2009-02-05 20:07 20560 ----a-w c:\windows\system32\drivers\aswFsBlk.sys
2009-05-27 22:55 . 2009-02-05 20:04 97480 ----a-w c:\windows\system32\AvastSS.scr
2009-05-27 22:55 . 2009-02-05 20:11 1256296 ----a-w c:\windows\system32\aswBoot.exe
2009-05-27 22:48 . 2009-05-27 22:48 -------- d-----w c:\documents and settings\abdallah\Application Data\Search Settings
2009-05-27 19:29 . 2009-05-27 19:29 -------- d-sha-w C:\autorun(2).inf
2009-05-27 16:57 . 2009-05-27 16:57 -------- d-----w c:\documents and settings\abdallah\Application Data\Uniblue
2009-05-27 03:09 . 2009-03-24 14:07 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys
2009-05-27 01:53 . 2009-05-27 01:53 -------- d--h--w c:\windows\system32\GroupPolicy
2009-05-26 18:32 . 2009-05-28 11:16 -------- d-----w c:\program files\trend micro
2009-05-25 19:34 . 2009-05-25 19:34 -------- d-----w c:\windows\SQL9_KB960089_ENU
2009-05-24 21:36 . 2009-02-03 19:53 56320 -c----w c:\windows\system32\dllcache\secur32.dll
2009-05-24 21:36 . 2009-02-20 17:10 78336 -c----w c:\windows\system32\dllcache\ieencode.dll
2009-05-24 21:35 . 2008-06-12 13:48 956928 -c----w c:\windows\system32\dllcache\msdtctm.dll
2009-05-24 21:35 . 2008-06-12 13:48 91648 -c----w c:\windows\system32\dllcache\mtxoci.dll
2009-05-24 21:35 . 2008-06-12 13:48 66560 -c----w c:\windows\system32\dllcache\mtxclu.dll
2009-05-24 21:35 . 2008-06-12 13:48 58880 -c----w c:\windows\system32\dllcache\msdtclog.dll
2009-05-24 21:35 . 2008-06-12 13:48 428032 -c----w c:\windows\system32\dllcache\msdtcprx.dll
2009-05-24 21:35 . 2008-06-12 13:48 161792 -c----w c:\windows\system32\dllcache\msdtcuiu.dll
2009-05-24 21:34 . 2009-03-06 14:00 286720 -c----w c:\windows\system32\dllcache\pdh.dll
2009-05-24 21:34 . 2009-02-09 10:03 473088 -c----w c:\windows\system32\dllcache\fastprox.dll
2009-05-24 21:34 . 2009-02-09 10:03 401408 -c----w c:\windows\system32\dllcache\rpcss.dll
2009-05-24 21:34 . 2009-02-09 09:53 111104 -c----w c:\windows\system32\dllcache\services.exe
2009-05-24 21:34 . 2009-02-06 09:54 35328 -c----w c:\windows\system32\dllcache\sc.exe
2009-05-24 21:34 . 2009-02-06 09:41 227840 -c----w c:\windows\system32\dllcache\wmiprvse.exe
2009-05-24 21:34 . 2005-07-26 04:29 60416 -c----w c:\windows\system32\dllcache\colbact.dll
2009-05-24 21:34 . 2009-02-09 10:03 740352 -c----w c:\windows\system32\dllcache\ntdll.dll
2009-05-24 21:34 . 2009-02-09 10:03 686080 -c----w c:\windows\system32\dllcache\advapi32.dll
2009-05-24 21:33 . 2008-12-16 12:49 351232 -c----w c:\windows\system32\dllcache\winhttp.dll
2009-05-20 14:04 . 2009-05-20 14:04 698903 ----a-w c:\documents and settings\abdallah\Application Data\EoRezo\SoftwareUpdate\unins000.exe
2009-05-20 14:04 . 2008-12-09 08:13 368224 ----a-w c:\documents and settings\abdallah\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
2009-05-20 14:04 . 2008-12-09 08:12 499296 ----a-w c:\documents and settings\abdallah\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe
2009-05-20 14:04 . 2009-05-20 14:07 -------- d-----w c:\documents and settings\abdallah\Application Data\EoRezo
2009-05-12 11:43 . 2009-05-12 15:02 -------- d-----w c:\documents and settings\abdallah\Application Data\gtk-2.0
2009-05-12 11:36 . 2009-05-12 11:36 -------- d-----w c:\documents and settings\abdallah\Application Data\Inkscape
2009-05-12 11:24 . 2009-05-27 23:28 -------- d-----w c:\program files\Inkscape
2009-05-12 11:07 . 2009-05-12 11:07 -------- d-----w c:\documents and settings\abdallah\Application Data\Itsth
2009-05-12 11:07 . 2009-05-12 11:19 -------- d-----w c:\program files\CompanyLogoDesigner
2009-05-10 21:37 . 2009-05-26 22:37 -------- d-----w c:\program files\Microsoft SQL Server

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-28 14:39 . 2008-04-10 08:08 306184 ----a-w c:\documents and settings\abdallah\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-28 13:59 . 2004-08-28 14:00 81978 ----a-w c:\windows\system32\perfc00C.dat
2009-05-28 13:59 . 2004-08-28 14:00 502840 ----a-w c:\windows\system32\perfh00C.dat
2009-05-28 13:54 . 2009-05-28 13:55 93184 ----a-w c:\windows\Internet Logs\xDBC2.tmp
2009-05-28 13:52 . 2009-01-04 01:26 -------- d-----w c:\program files\Free FLV Converter
2009-05-28 11:34 . 2008-03-15 13:50 -------- d-----w c:\program files\Fichiers communs\Adobe
2009-05-28 11:29 . 2009-05-28 11:30 1470464 ----a-w c:\windows\Internet Logs\xDBC1.tmp
2009-05-28 11:29 . 2009-05-28 11:30 105472 ----a-w c:\windows\Internet Logs\xDBC0.tmp
2009-05-28 11:07 . 2009-01-10 02:03 -------- d-----w c:\program files\Java
2009-05-28 10:23 . 2009-05-28 10:34 57344 ----a-w c:\windows\Internet Logs\xDBBE.tmp
2009-05-28 10:23 . 2009-05-28 10:34 1453568 ----a-w c:\windows\Internet Logs\xDBBF.tmp
2009-05-28 09:36 . 2009-05-28 09:37 489472 ----a-w c:\windows\Internet Logs\xDBBC.tmp
2009-05-28 09:36 . 2009-05-28 09:37 1453056 ----a-w c:\windows\Internet Logs\xDBBD.tmp
2009-05-27 20:40 . 2009-05-27 20:51 218112 ----a-w c:\windows\Internet Logs\xDBBB.tmp
2009-05-27 19:26 . 2009-05-27 19:27 266240 ----a-w c:\windows\Internet Logs\xDBBA.tmp
2009-05-27 15:05 . 2009-01-03 21:06 4212 ---h--w c:\windows\system32\zllictbl.dat
2009-05-27 12:51 . 2009-05-27 15:02 1395712 ----a-w c:\windows\Internet Logs\xDBB9.tmp
2009-05-27 12:51 . 2009-05-27 15:02 206336 ----a-w c:\windows\Internet Logs\xDBB8.tmp
2009-05-27 09:37 . 2009-05-27 09:38 1382912 ----a-w c:\windows\Internet Logs\xDBB7.tmp
2009-05-27 09:37 . 2009-05-27 09:37 601088 ----a-w c:\windows\Internet Logs\xDBB6.tmp
2009-05-27 02:21 . 2009-05-27 02:22 1349632 ----a-w c:\windows\Internet Logs\xDBB5.tmp
2009-05-26 22:34 . 2008-04-10 07:48 -------- d-----w c:\program files\Microsoft.NET
2009-05-26 15:47 . 2009-05-26 17:43 526848 ----a-w c:\windows\Internet Logs\xDBB3.tmp
2009-05-26 15:47 . 2009-05-26 17:43 1320448 ----a-w c:\windows\Internet Logs\xDBB4.tmp
2009-05-25 23:21 . 2009-01-03 15:28 -------- dcsh--w c:\program files\Fichiers communs\WindowsLiveInstaller
2009-05-25 23:20 . 2009-01-03 15:27 -------- d-----w c:\program files\Windows Live
2009-05-25 23:19 . 2009-01-03 15:27 -------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2009-05-25 22:46 . 2009-05-25 22:46 1238016 ----a-w c:\windows\Internet Logs\xDBB2.tmp
2009-05-25 22:45 . 2009-05-25 22:46 1725440 ----a-w c:\windows\Internet Logs\xDBB0.tmp
2009-05-25 22:45 . 2009-05-25 22:46 62464 ----a-w c:\windows\Internet Logs\xDBAF.tmp
2009-05-25 22:43 . 2009-05-25 22:46 1725440 ----a-w c:\windows\Internet Logs\xDBB1.tmp
2009-05-25 21:23 . 2009-05-25 21:24 138752 ----a-w c:\windows\Internet Logs\xDBAE.tmp
2009-05-24 22:50 . 2009-05-25 08:11 1702912 ----a-w c:\windows\Internet Logs\xDBAD.tmp
2009-05-24 22:50 . 2009-05-25 08:11 162816 ----a-w c:\windows\Internet Logs\xDBAC.tmp
2009-05-22 23:55 . 2009-05-23 07:47 898048 ----a-w c:\windows\Internet Logs\xDBAB.tmp
2009-05-22 00:28 . 2009-01-10 13:04 218780 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-05-22 00:28 . 2009-01-10 13:04 16255264 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-05-21 00:49 . 2009-05-21 10:51 1661440 ----a-w c:\windows\Internet Logs\xDBAA.tmp
2009-05-21 00:49 . 2009-05-21 10:51 1467904 ----a-w c:\windows\Internet Logs\xDBA9.tmp
2009-05-19 18:28 . 2009-01-10 04:13 -------- d-----w c:\documents and settings\abdallah\Application Data\dvdcss
2009-05-19 00:22 . 2009-05-19 11:25 193536 ----a-w c:\windows\Internet Logs\xDBA7.tmp
2009-05-19 00:22 . 2009-05-19 11:25 1653760 ----a-w c:\windows\Internet Logs\xDBA8.tmp
2009-05-18 19:50 . 2009-05-18 19:51 243712 ----a-w c:\windows\Internet Logs\xDBA5.tmp
2009-05-18 19:50 . 2009-05-18 19:51 1653248 ----a-w c:\windows\Internet Logs\xDBA6.tmp
2009-05-18 13:30 . 2009-05-18 15:40 646656 ----a-w c:\windows\Internet Logs\xDBA4.tmp
2009-05-14 14:28 . 2009-05-14 23:48 255488 ----a-w c:\windows\Internet Logs\xDBA2.tmp
2009-05-14 14:28 . 2009-05-14 23:48 1650176 ----a-w c:\windows\Internet Logs\xDBA3.tmp
2009-05-13 15:19 . 2009-05-13 19:49 387072 ----a-w c:\windows\Internet Logs\xDBA0.tmp
2009-05-13 15:19 . 2009-05-13 19:49 1647104 ----a-w c:\windows\Internet Logs\xDBA1.tmp
2009-05-12 18:03 . 2009-05-12 21:30 676352 ----a-w c:\windows\Internet Logs\xDB9E.tmp
2009-05-12 18:03 . 2009-05-12 21:30 1646592 ----a-w c:\windows\Internet Logs\xDB9F.tmp
2009-05-11 00:36 . 2009-05-11 09:10 1113088 ----a-w c:\windows\Internet Logs\xDB9C.tmp
2009-05-11 00:36 . 2009-05-11 09:10 1638912 ----a-w c:\windows\Internet Logs\xDB9D.tmp
2009-05-10 21:29 . 2009-01-15 19:54 -------- d-----w c:\program files\Pinnacle
2009-04-27 23:38 . 2009-04-28 10:18 1788928 ----a-w c:\windows\Internet Logs\xDB9B.tmp
2009-04-24 08:36 . 2009-04-24 08:36 2615221 ----a-w c:\windows\Internet Logs\tvDebug.zip
2009-04-21 03:28 . 2009-04-21 09:17 2946048 ----a-w c:\windows\Internet Logs\xDB9A.tmp
2009-04-18 16:24 . 2009-04-18 16:07 -------- d-----w c:\program files\SystemRequirementsLab
2009-04-18 16:24 . 2009-04-18 16:07 -------- d-----w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab
2009-04-18 16:24 . 2009-04-18 16:24 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_ind_4.dll
2009-04-18 16:24 . 2009-04-18 16:24 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_ind_3.dll
2009-04-18 16:24 . 2009-04-18 16:24 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_ind_2.dll
2009-04-18 16:24 . 2009-04-18 16:24 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_ind_1.dll
2009-04-18 16:07 . 2009-04-18 16:07 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_srl_4.dll
2009-04-18 16:07 . 2009-04-18 16:07 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_srl_3.dll
2009-04-18 16:07 . 2009-04-18 16:07 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_srl_2.dll
2009-04-18 16:07 . 2009-04-18 16:07 207872 ----a-w c:\documents and settings\abdallah\Application Data\SystemRequirementsLab\SRLProxy_srl_1.dll
2009-04-17 21:56 . 2009-04-18 09:14 994816 ----a-w c:\windows\Internet Logs\xDB99.tmp
2009-04-16 15:06 . 2009-04-16 18:28 1323520 ----a-w c:\windows\Internet Logs\xDB97.tmp
2009-04-16 15:06 . 2009-04-16 18:28 1617408 ----a-w c:\windows\Internet Logs\xDB98.tmp
2009-04-13 20:22 . 2009-04-13 21:22 1298944 ----a-w c:\windows\Internet Logs\xDB95.tmp
2009-04-13 20:22 . 2009-04-13 21:22 1614336 ----a-w c:\windows\Internet Logs\xDB96.tmp
2009-04-07 14:26 . 2009-04-11 22:07 1612800 ----a-w c:\windows\Internet Logs\xDB94.tmp
2009-04-07 14:26 . 2009-04-11 22:07 103424 ----a-w c:\windows\Internet Logs\xDB93.tmp
2009-04-07 01:10 . 2009-04-07 11:59 413184 ----a-w c:\windows\Internet Logs\xDB92.tmp
2009-04-06 18:10 . 2009-02-16 13:19 595888 ----a-w c:\documents and settings\abdallah\Application Data\HiYo\Data\hiyo_install.exe
2009-04-06 00:06 . 2009-04-06 10:53 1608192 ----a-w c:\windows\Internet Logs\xDB91.tmp
2009-04-06 00:06 . 2009-04-06 10:53 2844672 ----a-w c:\windows\Internet Logs\xDB90.tmp
2009-04-03 18:24 . 2009-04-05 18:37 378368 ----a-w c:\windows\Internet Logs\xDB8E.tmp
2009-04-03 18:24 . 2009-04-05 18:37 1607680 ----a-w c:\windows\Internet Logs\xDB8F.tmp
2009-04-02 01:02 . 2009-04-02 14:22 291840 ----a-w c:\windows\Internet Logs\xDB8D.tmp
2009-03-31 17:55 . 2009-03-31 19:59 562176 ----a-w c:\windows\Internet Logs\xDB8B.tmp
2009-03-31 17:55 . 2009-03-31 19:59 1602560 ----a-w c:\windows\Internet Logs\xDB8C.tmp
2009-03-30 13:32 . 2009-03-30 13:32 152576 ----a-w c:\documents and settings\abdallah\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-03-29 22:56 . 2009-03-30 07:05 701440 ----a-w c:\windows\Internet Logs\xDB89.tmp
2009-03-29 22:56 . 2009-03-30 07:05 1593856 ----a-w c:\windows\Internet Logs\xDB8A.tmp
2009-03-23 19:02 . 2009-03-23 21:20 2903040 ----a-w c:\windows\Internet Logs\xDB88.tmp
2009-03-20 15:37 . 2009-03-20 17:01 131072 ----a-w c:\windows\Internet Logs\xDB86.tmp
2009-03-20 15:37 . 2009-03-20 17:01 1585664 ----a-w c:\windows\Internet Logs\xDB87.tmp
2009-03-20 01:24 . 2009-03-20 11:50 163840 ----a-w c:\windows\Internet Logs\xDB85.tmp
2009-03-18 23:40 . 2009-03-19 18:35 530432 ----a-w c:\windows\Internet Logs\xDB83.tmp
2009-03-18 23:39 . 2009-03-19 18:35 1584128 ----a-w c:\windows\Internet Logs\xDB84.tmp
2009-03-16 18:50 . 2009-03-16 19:08 711680 ----a-w c:\windows\Internet Logs\xDB82.tmp
2009-03-14 13:43 . 2009-03-14 15:53 1577472 ----a-w c:\windows\Internet Logs\xDB81.tmp
2009-03-14 13:43 . 2009-03-14 15:53 404992 ----a-w c:\windows\Internet Logs\xDB80.tmp
2009-03-13 02:14 . 2009-03-13 10:00 462336 ----a-w c:\windows\Internet Logs\xDB7F.tmp
2009-03-11 18:59 . 2009-03-11 21:01 1571840 ----a-w c:\windows\Internet Logs\xDB7E.tmp
2009-03-11 18:59 . 2009-03-11 21:01 403456 ----a-w c:\windows\Internet Logs\xDB7D.tmp
2009-03-10 15:41 . 2009-03-10 18:01 1471488 ----a-w c:\windows\Internet Logs\xDB7C.tmp
2009-03-09 03:19 . 2009-01-10 19:26 410984 ----a-w c:\windows\system32\deploytk.dll
.

------- Sigcheck -------

[-] 2004-08-28 14:00 1934848 1630D57B8370B7A20A41BB4C1E459EDF c:\windows\explorer.exe
[7] 2007-06-13 13:10 1037312 B795475444D6D57A572C14B9E1A29839 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2004-08-28 14:00 1934848 1630D57B8370B7A20A41BB4C1E459EDF c:\windows\$NtUninstallKB938828$\explorer.exe
[-] 2008-04-14 02:34 1037824 F2317622D29F9FF0F88AEECD5F60F0DD c:\windows\SoftwareDistribution\Download\d43a20c40794c502928d4b7d8ff0ea20\explorer.exe
[7] 2007-06-13 13:22 1037312 D0288319660EDCFED07C7E74C4EA38A5 c:\windows\system32\dllcache\explorer.exe

[-] 2008-04-14 02:33 15360 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 c:\windows\SoftwareDistribution\Download\d43a20c40794c502928d4b7d8ff0ea20\ctfmon.exe
[-] 2004-08-28 14:00 25088 43836CFFABAC8D6779E8EE55E308DF2C c:\windows\system32\ctfmon.exe

[-] 2008-04-14 02:33 1571840 E17C85D5B5CF477638433B851A98499E c:\windows\SoftwareDistribution\Download\d43a20c40794c502928d4b7d8ff0ea20\sfcfiles.dll
[-] 2004-08-28 14:00 1548288 F6AE0589111ACEFDC7A109A30A60E2A6 c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6b284373-1765-4464-a587-80fbc2b2eefa}]
2009-03-10 00:28 1883672 ----a-w c:\program files\LphantBar\tbLph0.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-28 25088]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-19 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TransBar"="c:\windows\System32\TransBar.exe" [2004-08-28 65536]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-08 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-08 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-08 131072]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 159744]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-07-09 919016]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-02-13 16857600]
"LayoutM"="KLayMgr.exe" - c:\windows\KLayMgr.exe [2004-08-26 45056]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2009-02-20 124928]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SQLWriter"=3 (0x3)
"ose"=3 (0x3)
"Nero BackItUp Scheduler 4.0"=2 (0x2)
"MSSQL$SQLEXPRESS"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Lphant\\eLePhantClient.exe"=

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [28/05/2009 14:21 28544]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [28/05/2009 00:55 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [28/05/2009 00:55 20560]
S2 Ca533av;Polaroid Digital Cam Video;c:\windows\system32\drivers\Ca533av.sys [04/01/2009 21:38 515803]
S3 AsAudioDevice_349;AsAudioDevice_349;c:\windows\system32\drivers\AsAudioDevice_349.sys [07/01/2009 19:48 16640]
S3 CrystalSysInfo;CrystalSysInfo;\??\c:\program files\MediaCoder\SysInfo.sys --> c:\program files\MediaCoder\SysInfo.sys [?]
S3 HPKBCCID;HP Keyboard Smart Card Driver;c:\windows\system32\drivers\HPKBCCID.sys [16/03/2008 12:53 46976]
S3 STC2DFU;STCII DFU Adapter;c:\windows\system32\drivers\Stc2Dfu.sys [25/10/2004 01:04 7796]
S3 USBCamera;Icatch(IV) Still Camera Device;c:\windows\system32\drivers\Bulk533.sys [04/01/2009 21:38 10986]
S3 USRWGU(USR);USRobotics Wireless USB Adapter(USR);c:\windows\system32\drivers\USRWGU.sys [16/03/2008 12:16 408064]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - PAVBOOT
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
SafeBoot-procexp90.Sys


.
------- Examen supplémentaire -------
.
uDefault_Search_URL = hxxp://www.google.fr/keyword/%s
mStart Page = hxxp://www.google.fr
uSearchURL,(Default) = hxxp://www.google.fr/keyword/%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
FF - ProfilePath - c:\documents and settings\abdallah\Application Data\Mozilla\Firefox\Profiles\z9glacj0.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-28 16:57
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:e2,63,26,f1,3f,c8,ff,68,fc,ce,fc,af,13,
84,ef,fd,e2,63,26,f1,3f,c8,ff,68,f0,db,fa,75,52,a3,e5,27,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,97,f8,83,34,29,
ce,0a,88,6a,9c,d6,61,af,45,84,18,c1,36,f7,79,15,66,55,9c,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:ff,7c,85,e0,43,d4,0e,fe,9a,6a,d0,24,8d,
24,a8,ea,ff,7c,85,e0,43,d4,0e,fe,2a,81,54,fb,cc,7e,0b,35,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:6b,65,49,6a,7e,99,74,f7,12,e4,b6,c5,bf,
12,31,35,86,8c,21,01,be,91,eb,e7,43,90,84,ca,4a,ad,cd,3c,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,05,de,db,7d,62,
59,45,d8,f5,1d,4d,73,a8,13,5c,05,ee,35,19,ac,36,62,10,6d,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:50,93,e5,ab,ec,6a,4e,ab,89,f5,da,0d,ab,
33,ea,8c,df,20,58,62,78,6b,cf,c8,4b,f6,e8,1a,52,b1,98,91,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,88,1d,78,c8,b1,
2d,10,71,fb,a7,78,e6,12,2f,9a,ea,f0,98,9a,66,c7,5e,a7,a8,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,77,69,3b,cf,b0,
fc,96,ff,01,3a,48,fc,e8,04,4a,f1,9a,8e,ee,9c,32,16,b6,41,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,85,04,74,2f,50,
17,63,4d,f6,0f,4e,58,98,5b,89,c9,34,5d,21,4c,9e,aa,24,09,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:37,a4,aa,c3,a6,15,56,0a,c5,83,fb,a9,ca,
0c,e1,c1,3d,ce,ea,26,2d,45,aa,78,17,c1,63,ef,ef,8c,cc,2c,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:2a,b7,cc,b5,b9,7f,41,e7,1b,b9,3c,df,94,
3c,6f,77,2a,b7,cc,b5,b9,7f,41,e7,71,71,75,ff,6f,58,31,6d,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:6c,43,2d,1e,aa,22,2f,9c,09,e9,12,c6,f0,
4e,bd,6b,6c,43,2d,1e,aa,22,2f,9c,39,fa,d5,f2,4e,ce,8a,88,6c,43,2d,1e,aa,22,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|é•Ñw*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1280)
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\sfc_os.dll

- - - - - - - > 'lsass.exe'(1360)
c:\windows\system32\setupapi.dll
.
Heure de fin: 2009-05-28 16:58
ComboFix-quarantined-files.txt 2009-05-28 14:58

Avant-CF: 10 157 932 544 octets libres
Après-CF: 10 145 267 712 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

355 --- E O F --- 2009-01-14 12:54

le lien que tu m'a donné ne fonctionne plus erreur 404

oui j'ai désactiver la mise à jour automatique parceque j'avais un message qui disait que ma version n'estait pas légale etc.......

enfaite j'ai un ami étudiant en informatique polytechnique à montpellier, c'est lui qui m'a booster mon ordi qui m'a fait l'installation et tout.... et j'avou qu'il est trés rapide et performant l'ordinateur grace à lui, seulement il est parti au canada terminé ses études, bref voila maintenant je sais pas trop quoi faire

B1 en gros ça va, le problème initial a été résolu mais je me retrouve avec des nouveaux soucis mais bon.... tu me donner une explication au sujet du repertoire systeme volume information j'accede plus