Problème de Virus

Bonjour,
J'ai téléchargé le logiciel Malwarebytes Anti-Malware, mais cela ne fonctionne pas car le logiciel ne se lance pas. J'ai beau tenté de l'ouvrir, cela ne fait rien.

Clic droit sur le racourci puis ''Executer en tant qu'administrateur''

Pas nécessaire, on a pas affaire a un rogue.
Il avait tout simplement besoin d'une alternative èa Spyware Doctor qui peut désinfecter.

C'est à cause de clef Debbuger de ce type là : https://forums.commentcamarche.net/forum/affich-17752928-internet-coupe-par-my-security-engine#13
c'est fait exprès pour empécher la lancement du logiciel.

Faudrait tenter de renommer MBAM.exe en autre chose ou utiliser Combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe


Au passage, Spyware Doctor, c'est de la m*rde, tu devrais le désinstaller.

OK. Merci du conseil.

Bonjour, c'est toujours moi!
Est-ce que, pour mon problème, je peux aussi tenter le logiciel Hijackthis, puisque visiblement Malwarebytes ne fonctionne pas??

Et voilà, j'ai utilisé Combofix.
J'ai eu un compte rendu, dois-je le publier ici ou ce n'est pas utile??

poste le ici :)

ComboFix 10-05-16.06 - Coralie 18/05/2010 19:21:00.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2686.1656 [GMT 2:00]
Lancé depuis: c:\users\Coralie\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\eMule\lang\ar_AE.dll
c:\program files\eMule\lang\ba_BA.dll
c:\program files\eMule\lang\bg_BG.dll
c:\program files\eMule\lang\ca_ES.dll
c:\program files\eMule\lang\cz_CZ.dll
c:\program files\eMule\lang\da_DK.dll
c:\program files\eMule\lang\de_DE.dll
c:\program files\eMule\lang\el_GR.dll
c:\program files\eMule\lang\es_AS.dll
c:\program files\eMule\lang\es_ES_T.dll
c:\program files\eMule\lang\et_EE.dll
c:\program files\eMule\lang\fa_IR.dll
c:\program files\eMule\lang\fi_FI.dll
c:\program files\eMule\lang\fr_BR.dll
c:\program files\eMule\lang\fr_FR.dll
c:\program files\eMule\lang\gl_ES.dll
c:\program files\eMule\lang\he_IL.dll
c:\program files\eMule\lang\hu_HU.dll
c:\program files\eMule\lang\it_IT.dll
c:\program files\eMule\lang\jp_JP.dll
c:\program files\eMule\lang\ko_KR.dll
c:\program files\eMule\lang\lt_LT.dll
c:\program files\eMule\lang\lv_LV.dll
c:\program files\eMule\lang\mt_MT.dll
c:\program files\eMule\lang\nb_NO.dll
c:\program files\eMule\lang\nl_NL.dll
c:\program files\eMule\lang\nn_NO.dll
c:\program files\eMule\lang\pl_PL.dll
c:\program files\eMule\lang\pt_BR.dll
c:\program files\eMule\lang\pt_PT.dll
c:\program files\eMule\lang\ro_RO.dll
c:\program files\eMule\lang\ru_RU.dll
c:\program files\eMule\lang\sl_SI.dll
c:\program files\eMule\lang\sq_AL.dll
c:\program files\eMule\lang\sv_SE.dll
c:\program files\eMule\lang\tr_TR.dll
c:\program files\eMule\lang\ua_UA.dll
c:\program files\eMule\lang\ug_CN.dll
c:\program files\eMule\lang\va_ES.dll
c:\program files\eMule\lang\va_ES_RACV.dll
c:\program files\eMule\lang\vi_VN.dll
c:\program files\eMule\lang\zh_CN.dll
c:\program files\eMule\lang\zh_TW.dll
c:\program files\Fast Browser Search
c:\program files\Fast Browser Search\IE\basis.xml
c:\program files\Fast Browser Search\IE\fbsSearchProvider.xml
c:\program files\Search Guard Plus
c:\program files\Search Guard Plus\fbsProtectionI.xml
c:\program files\Search Guard Plus\fbsSearchProvider.xml
c:\program files\Search Guard PlusU
c:\program files\Search Guard PlusU\SGPUpdater.xml
c:\program files\SGPSA
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\users\Coralie\AppData\Local\Temp\wcrat0t8.dll
c:\users\Coralie\AppData\Roaming\.#
c:\users\Coralie\AppData\Roaming\inst.exe
c:\users\Coralie\AppData\Roaming\sdra64.exe
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

----- BITS: Il y a peut-être des sites infectés -----

hxxp://solaruploader.com
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_Boonty Games


((((((((((((((((((((((((((((( Fichiers créés du 2010-04-18 au 2010-05-18 ))))))))))))))))))))))))))))))))))))
.

2010-05-18 17:28 . 2010-05-18 17:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-05-14 22:00 . 2010-05-18 16:48 -------- d-sh--w- c:\users\Coralie\AppData\Roaming\lowsec
2010-05-14 20:22 . 2010-05-14 20:22 -------- d-----w- c:\users\Coralie\AppData\Roaming\Avira
2010-05-14 20:15 . 2010-03-01 08:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-05-14 20:15 . 2010-02-16 12:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-05-14 20:15 . 2009-05-11 10:49 51992 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-05-14 20:15 . 2009-05-11 10:49 17016 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-05-14 20:15 . 2010-05-14 20:15 -------- d-----w- c:\programdata\Avira
2010-05-14 20:15 . 2010-05-14 20:15 -------- d-----w- c:\program files\Avira
2010-05-14 19:43 . 2010-05-14 19:43 -------- d-----w- c:\program files\Trend Micro
2010-05-12 07:35 . 2010-01-29 15:40 738816 ----a-w- c:\windows\system32\inetcomm.dll
2010-05-10 15:51 . 2010-05-10 15:51 -------- d-----w- c:\users\Coralie\AppData\Roaming\Adobe Mini Bridge CS5
2010-05-10 15:51 . 2010-05-10 15:51 -------- d-----w- c:\users\Coralie\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-05-10 15:38 . 2010-05-10 15:38 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-05-10 14:29 . 2010-05-18 17:32 -------- d-----w- c:\program files\Common Files\Akamai
2010-05-07 14:52 . 2010-05-07 14:52 -------- d-----w- c:\users\Coralie\AppData\Roaming\Pixia
2010-05-07 14:42 . 2010-05-07 14:46 -------- d-----w- c:\users\Coralie\AppData\Roaming\gtk-2.0
2010-05-03 16:03 . 2010-05-03 16:05 -------- d-----w- c:\users\Coralie\AppData\Roaming\FreeCDRipper
2010-04-24 16:48 . 2010-04-24 16:48 -------- d-----w- c:\program files\eMule

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-17 13:36 . 2010-02-15 18:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-14 20:05 . 2008-06-13 17:46 669566 ----a-w- c:\windows\system32\perfh00C.dat
2010-05-14 20:05 . 2008-06-13 17:46 123556 ----a-w- c:\windows\system32\perfc00C.dat
2010-05-12 22:20 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-05-12 22:20 . 2008-06-13 08:58 -------- d-----w- c:\programdata\Microsoft Help
2010-05-12 09:18 . 2008-08-07 16:43 22256 ----a-w- c:\users\Coralie\AppData\Roaming\wklnhst.dat
2010-05-10 18:13 . 2010-01-19 17:52 -------- d-----w- c:\program files\OpenOffice.org 3
2010-05-10 18:04 . 2010-01-19 17:55 1 ----a-w- c:\users\Coralie\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-05-10 16:09 . 2008-06-13 08:36 -------- d-----w- c:\program files\Common Files\Adobe
2010-05-10 15:46 . 2008-08-07 16:18 76000 ----a-w- c:\users\Coralie\AppData\Local\GDIPFONTCACHEV1.DAT
2010-05-06 08:36 . 2009-10-04 09:57 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-03 16:02 . 2010-05-03 16:02 -------- d-----w- c:\users\Coralie\AppData\Roaming\FreeAudioPack
2010-04-24 16:48 . 2008-08-25 17:29 -------- d-----w- c:\programdata\eMule
2010-04-24 10:18 . 2009-03-22 20:07 -------- d-----w- c:\program files\Microsoft
2010-04-24 10:14 . 2009-12-23 11:18 -------- d-----w- c:\program files\Common Files\Apple
2010-04-16 21:12 . 2008-06-13 08:18 -------- d-----w- c:\program files\Packard Bell
2010-04-15 21:14 . 2009-09-26 15:55 -------- d-----w- c:\program files\Lexmark 2300 Series
2010-03-27 20:10 . 2010-03-27 18:11 -------- d-----w- c:\programdata\incredible express
2010-03-20 19:27 . 2010-03-20 19:19 -------- d-----w- c:\programdata\FarmFrenzy3_Arctica
2010-03-05 14:01 . 2010-04-14 11:56 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-02-23 11:10 . 2010-04-14 11:56 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-02-23 11:10 . 2010-04-14 11:56 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-02-23 11:10 . 2010-04-14 11:56 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-23 06:39 . 2010-03-31 05:46 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-23 06:33 . 2010-03-31 05:46 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-02-23 06:33 . 2010-03-31 05:46 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-02-23 04:55 . 2010-03-31 05:46 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-02-20 23:06 . 2010-03-10 21:14 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-02-20 23:05 . 2010-03-10 21:14 30720 ----a-w- c:\windows\system32\httpapi.dll
2010-02-20 20:53 . 2010-03-10 21:14 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-02-18 14:07 . 2010-04-14 11:56 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-02-18 14:07 . 2010-04-14 11:56 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-18 14:07 . 2010-04-14 11:56 3600776 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-18 13:30 . 2010-04-14 11:56 200704 ----a-w- c:\windows\system32\iphlpsvc.dll
2010-02-18 11:28 . 2010-04-14 11:56 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2008-06-13 17:52 . 2008-06-13 17:52 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\Packard Bell\SetUpMyPC\SmpSys.exe" [2008-02-04 1038136]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-01-14 1688872]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-21 39408]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-04-02 102400]
"Sidebar"="c:\program files\windows sidebar\sidebar.exe" [2009-04-11 1233920]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-01 857648]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-17 4702208]
"Skytel"="Skytel.exe" [2007-08-03 1826816]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-12-10 30192]
"toolbar_eula_launcher"="c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 28672]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-19 149280]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

c:\users\Coralie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d''cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):82,da,3a,c6,17,70,ca,01

R2 gupdate1ca12ffc5f2ab40;Service Google Update (gupdate1ca12ffc5f2ab40);c:\program files\Google\Update\GoogleUpdate.exe [2009-08-01 133104]
R3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2009-12-10 30192]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-03-31 233472]
S2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\System32\StkCSrv.exe [2007-09-17 24576]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]
S3 StkCMini;Syntek AVStream USB2.0 VGA WebCam;c:\windows\system32\Drivers\StkCMini.sys [2007-09-26 1355520]


--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - FSUSBEXDISK

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai
.
Contenu du dossier 'Tâches planifiées'

2010-05-18 c:\windows\Tasks\Extension de garantie-Coralie.job
- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2008-06-13 10:13]

2010-05-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-01 23:28]

2010-05-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-01 23:28]

2010-05-18 c:\windows\Tasks\User_Feed_Synchronization-{82D356FF-87C2-4116-B77C-1031E8BE1B81}.job
- c:\windows\system32\msfeedssync.exe [2010-03-31 04:54]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://www.muuler.com/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
FF - ProfilePath - c:\users\Coralie\AppData\Roaming\Mozilla\Firefox\Profiles\qknpoote.default\
FF - prefs.js: network.proxy.type - 1
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-AdobeBridge - (no file)
HKLM-Run-EoEngine - (no file)
HKLM-Run-NPSStartup - (no file)



**************************************************************************
Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Akamai]
"ServiceDll"="C:/Program Files/Common Files/Akamai/rswin_3697.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Akamai]
"ServiceDll"="C:/Program Files/Common Files/Akamai/rswin_3697.dll"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATK Hotkey\ASLDRSrv.exe
c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\IoctlSvc.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\program files\ATK Hotkey\Hcontrol.exe
c:\windows\system32\conime.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\windows\RtHDVCpl.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
c:\windows\ehome\ehmsas.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
.
**************************************************************************
.
Heure de fin: 2010-05-18 19:41:00 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-05-18 17:40

Avant-CF: 166 068 891 648 octets libres
Après-CF: 166 086 967 296 octets libres

- - End Of File - - 6D1F3D4C4BE7C034F2D57CE7BFF72182

voila le rapport:

Avira AntiVir Personal
Report file date: mardi 18 mai 2010 20:31

Scanning for 2132076 virus strains and unwanted programs.

The program is running as an unrestricted full version.
Online services are available:

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows Vista
Windows version : (Service Pack 2) [6.0.6002]
Boot mode : Normally booted
Username : Coralie
Computer name : ORDI-DE-CORALIE

Version information:
BUILD.DAT : 10.0.0.567 Bytes 19/04/2010 15:07:00
AVSCAN.EXE : 10.0.3.0 433832 Bytes 01/04/2010 11:37:38
AVSCAN.DLL : 10.0.3.0 46440 Bytes 01/04/2010 11:57:04
LUKE.DLL : 10.0.2.3 104296 Bytes 07/03/2010 17:33:04
LUKERES.DLL : 10.0.0.1 12648 Bytes 10/02/2010 22:40:49
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 08:05:36
VBASE001.VDF : 7.10.1.0 1372672 Bytes 19/11/2009 18:27:49
VBASE002.VDF : 7.10.3.1 3143680 Bytes 20/01/2010 16:37:42
VBASE003.VDF : 7.10.3.75 996864 Bytes 26/01/2010 15:37:42
VBASE004.VDF : 7.10.4.203 1579008 Bytes 05/03/2010 10:29:03
VBASE005.VDF : 7.10.6.82 2494464 Bytes 15/04/2010 20:17:47
VBASE006.VDF : 7.10.6.83 2048 Bytes 15/04/2010 20:17:47
VBASE007.VDF : 7.10.6.84 2048 Bytes 15/04/2010 20:17:47
VBASE008.VDF : 7.10.6.85 2048 Bytes 15/04/2010 20:17:47
VBASE009.VDF : 7.10.6.86 2048 Bytes 15/04/2010 20:17:47
VBASE010.VDF : 7.10.6.87 2048 Bytes 15/04/2010 20:17:47
VBASE011.VDF : 7.10.6.88 2048 Bytes 15/04/2010 20:17:47
VBASE012.VDF : 7.10.6.89 2048 Bytes 15/04/2010 20:17:47
VBASE013.VDF : 7.10.6.90 2048 Bytes 15/04/2010 20:17:47
VBASE014.VDF : 7.10.6.123 126464 Bytes 19/04/2010 20:17:48
VBASE015.VDF : 7.10.6.152 123392 Bytes 21/04/2010 20:17:48
VBASE016.VDF : 7.10.6.178 122880 Bytes 22/04/2010 20:17:48
VBASE017.VDF : 7.10.6.206 120320 Bytes 26/04/2010 20:17:49
VBASE018.VDF : 7.10.6.232 99328 Bytes 28/04/2010 20:17:49
VBASE019.VDF : 7.10.7.2 155648 Bytes 30/04/2010 20:17:49
VBASE020.VDF : 7.10.7.26 119808 Bytes 04/05/2010 20:17:50
VBASE021.VDF : 7.10.7.51 118272 Bytes 06/05/2010 20:17:50
VBASE022.VDF : 7.10.7.75 404992 Bytes 10/05/2010 20:17:51
VBASE023.VDF : 7.10.7.100 125440 Bytes 13/05/2010 20:17:52
VBASE024.VDF : 7.10.7.119 177664 Bytes 17/05/2010 16:34:53
VBASE025.VDF : 7.10.7.120 2048 Bytes 17/05/2010 16:34:54
VBASE026.VDF : 7.10.7.121 2048 Bytes 17/05/2010 16:34:56
VBASE027.VDF : 7.10.7.122 2048 Bytes 17/05/2010 16:34:57
VBASE028.VDF : 7.10.7.123 2048 Bytes 17/05/2010 16:34:59
VBASE029.VDF : 7.10.7.124 2048 Bytes 17/05/2010 16:34:59
VBASE030.VDF : 7.10.7.125 2048 Bytes 17/05/2010 16:35:00
VBASE031.VDF : 7.10.7.129 57344 Bytes 18/05/2010 16:35:01
Engineversion : 8.2.1.242
AEVDF.DLL : 8.1.2.0 106868 Bytes 14/05/2010 20:18:01
AESCRIPT.DLL : 8.1.3.29 1343866 Bytes 14/05/2010 20:18:00
AESCN.DLL : 8.1.6.1 127347 Bytes 14/05/2010 20:17:59
AESBX.DLL : 8.1.3.1 254324 Bytes 14/05/2010 20:18:01
AERDL.DLL : 8.1.4.6 541043 Bytes 14/05/2010 20:17:59
AEPACK.DLL : 8.2.1.1 426358 Bytes 19/03/2010 11:34:51
AEOFFICE.DLL : 8.1.1.0 201081 Bytes 14/05/2010 20:17:58
AEHEUR.DLL : 8.1.1.27 2670967 Bytes 14/05/2010 20:17:57
AEHELP.DLL : 8.1.11.3 242039 Bytes 01/04/2010 15:05:25
AEGEN.DLL : 8.1.3.9 377203 Bytes 14/05/2010 20:17:55
AEEMU.DLL : 8.1.2.0 393588 Bytes 14/05/2010 20:17:54
AECORE.DLL : 8.1.15.3 192886 Bytes 14/05/2010 20:17:54
AEBB.DLL : 8.1.1.0 53618 Bytes 14/05/2010 20:17:54
AVWINLL.DLL : 10.0.0.0 19304 Bytes 14/01/2010 11:03:38
AVPREF.DLL : 10.0.0.0 44904 Bytes 14/01/2010 11:03:35
AVREP.DLL : 10.0.0.8 62209 Bytes 18/02/2010 15:47:40
AVREG.DLL : 10.0.3.0 53096 Bytes 01/04/2010 11:35:46
AVSCPLR.DLL : 10.0.3.0 83816 Bytes 01/04/2010 11:39:51
AVARKT.DLL : 10.0.0.14 227176 Bytes 01/04/2010 11:22:13
AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 26/01/2010 08:53:30
SQLITE3.DLL : 3.6.19.0 355688 Bytes 28/01/2010 11:57:58
AVSMTP.DLL : 10.0.0.17 63848 Bytes 16/03/2010 14:38:56
NETNT.DLL : 10.0.0.0 11624 Bytes 19/02/2010 13:41:00
RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 28/01/2010 12:10:20
RCTEXT.DLL : 10.0.53.0 97128 Bytes 09/04/2010 13:14:29

Configuration settings for the scan:
Jobname.............................: Local Drives
Configuration file..................: C:\Program Files\Avira\AntiVir Desktop\alldrives.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: off
Integrity checking of system files..: off
Scan all files......................: Intelligent file selection
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium

Start of the scan: mardi 18 mai 2010 20:31

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'wlcomm.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.exe' - '1' Module(s) have been scanned
Scan process 'CCC.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
Scan process 'ONENOTEM.EXE' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'NPSAgent.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ehtray.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'SmpSys.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'MOM.EXE' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'RtHDVCpl.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'Dwm.exe' - '1' Module(s) have been scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights

Starting to scan executable files (registry).
The registry was scanned ( '1642' files ).


Starting the file scan:

Begin scan in 'C:\' <HDD>
Begin scan in 'D:\'
Search path D:\ could not be opened!
System error [21]: Le périphérique n'est pas prêt.


End of the scan: mardi 18 mai 2010 21:17
Used time: 45:37 Minute(s)

The scan has been done completely.

22222 Scanned directories
250972 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
250972 Files not concerned
1521 Archives were scanned
0 Warnings
0 Notes





PS: par contre, mon ordi rame bcp plus qu'avant.

Tout fonctionne très bien.
Merci bcp pour ton aide!