Faux centre de sécurité windows

voila c'est fait :
OTL.txt: http://www.cijoint.fr/cjlink.php?file=cj201003/cijYZLjKum.txt
Extras.tkt: http://www.cijoint.fr/cjlink.php?file=cj201003/cijGckpyvl.txt

All processes killed
========== OTL ==========
No active process named ave.exe was found!
No active process named wuaucldt.exe was found!
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
File C:\WINDOWS\system32\wuaucldt.exe not found.
Registry key HKEY_CURRENT_USER\\Software\Microsoft\Windows\CurrentVersion\Run not found.
File move failed. C:\Documents and Settings\nd\Menu Démarrer\Programmes\Démarrage\syspck32.exe scheduled to be moved on reboot.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\Software\Classes\.exe\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.exe\\|exefile /E : value set successfully!
File C:\Documents and Settings\All Users\Application Data\48531I0 not found.
File C:\WINDOWS\System32\wuaucldt.exe not found.
File C:\Documents and Settings\NetworkService\Application Data\jasltw.dat not found.
File C:\Documents and Settings\nd\Application Data\avdrn.dat not found.
File C:\Documents and Settings\nd\oashdihasidhasuidhiasdhiashdiuasdhasd not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\3570694465.dll not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\VH56DJI7u87yo not found.
File C:\Documents and Settings\All Users\Application Data\VH56DJI7u87yo not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\490373180.dll not found.
File C:\Documents and Settings\All Users\Application Data\wo588q8Gd1tnB not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\wo588q8Gd1tnB not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\1139758833.dll not found.
File C:\Documents and Settings\LocalService\Local Settings\Application Data\ave.exe not found.
File C:\Documents and Settings\All Users\Application Data\vma.exe not found.
File C:\Documents and Settings\All Users\Application Data\MSASCui.exe not found.
File C:\Documents and Settings\All Users\Application Data\ave.exe not found.
File C:\Documents and Settings\All Users\Application Data\av.exe not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\48531I0 not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\av.exe not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\vma.exe not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\MSASCui.exe not found.
File C:\Documents and Settings\nd\Local Settings\Application Data\ave.exe not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 7168644 bytes

User: nd
->Temp folder emptied: 1446537929 bytes
->Temporary Internet Files folder emptied: 247924946 bytes
->Java cache emptied: 47398699 bytes
->FireFox cache emptied: 51311636 bytes
->Flash cache emptied: 2052487 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2225529 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 32864 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 128993 bytes
RecycleBin emptied: 82752036 bytes

Total Files Cleaned = 1 800,00 mb


OTL by OldTimer - Version 3.1.37.3 log created on 03222010_200156

Files\Folders moved on Reboot...
C:\Documents and Settings\nd\Menu Démarrer\Programmes\Démarrage\syspck32.exe moved successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Mozilla\Firefox\Profiles\9sr5epbu.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Mozilla\Firefox\Profiles\9sr5epbu.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Mozilla\Firefox\Profiles\9sr5epbu.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Mozilla\Firefox\Profiles\9sr5epbu.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Mozilla\Firefox\Profiles\9sr5epbu.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Mozilla\Firefox\Profiles\9sr5epbu.default\XUL.mfl moved successfully.

Registry entries deleted on Reboot...

mon ordi c'est redemarré apres l'analyse qui avait trouvé un bon nombre de virus, trojan ...
donc je n'ai pas pu copié les données donc je ne peut pas te les donner ! :S

Tu peux récupérer le rapport dans l'onglet Rapports/Logs de MBAM.

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3901
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

22/03/2010 21:21:43
mbam-log-2010-03-22 (21-21-43).txt

Type de recherche: Examen rapide
Eléments examinés: 117121
Temps écoulé: 9 minute(s), 45 second(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 7
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 22

Processus mémoire infecté(s):
C:\Documents and Settings\LocalService\Local Settings\Application Data\ave.exe (Rogue.MultipleAV) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cdrom (Trojan.Patched) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\regedit32 (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\syncman (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\syncman (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\shell\open\command\(default) (Hijack.ExeFile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\secfile\shell\open\command\(default) (Rogue.MultipleAV) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe") Good: (firefox.exe) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe") Good: (iexplore.exe) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode) Good: (firefox.exe -safe-mode) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (secfile) Good: (exefile) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\config\SystemProfile\wuaucldt.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\avG\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\cdrom.sys (Trojan.Patched) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\cdrom.sys (Trojan.Patched) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\av.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\MSASCui.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\vma.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\avG\av.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\avG\vma.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\avG\MSASCui.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Microsoft\Windows Defender\av.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Microsoft\Windows Defender\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Microsoft\Windows Defender\vma.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\nd\Local Settings\Application Data\Microsoft\Windows Defender\MSASCui.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\avG\av.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\avG\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\avG\vma.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\avG\MSASCui.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.

oué merci le pc va mieux :D
je te fais le scan OTL de suite ;)