Erreur 1303

Bonjour,

Mon ordi me fait quelque chose d'étrange que je ne parviens pas à résoudre.

Alors que j'essaie d'installer adobe acrobat pro, l'installation bloque à cause d'un message d'erreur qui dit:
error 1303. The installer has insufficient privileges to acces this directory: C:/documents and settings/allusers/documents/adobe pdf. The installation cannot continue. Log on as an administrator or contact your system administrator.

De plus, lorsque je vais dans mon poste de travail, il m'est possible d'ouvrir le dossier Documents, l'accès est refusé.
Je crois que mon problème vient de là.

J'ai utilisé les programmes que je connais dont Ccleaner, Adaware, registrysmart mais rien n'y fait, quelqu'un a une idée svp?

Je possède Windows XP édition familiale et je suis le seul administrateur.
J'ai attrapé aussi dcads auparavant mais normalement, c'est réglé... peut être est ce à cause de ça?

Merci d'avance.

Laurent
Configuration: Windows XP
Internet Explorer 7.0

5 réponses

  • Votes
  • Date
  • Date décroissante
  1. Bonjour

    Tu as probablement perdu une partie de tes droits d'administrateur, fais ceci :

    Télécharge ComboFix
    ---> http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe

    Ferme ton navigateur web et tous les programmes ouverts avant d'exécuter ce programme.
    Double-clic dessus et appuye sur "1" pour continuer
    Attends quelques minutes..
    Un rapport va s'ouvrir enregistre son contenu, puis copie et colle le ici stp
    Tu peux jeter le programme dès que c'est fait.
    1. Bonjour,

      Merci pour ta réponse, je t'avoue que ça me casse les pieds cette histoire car je prends du retard dans mon boulot.

      J'ai essayé le lien que tu me donnes mais lorsque je lance le programme, il me dit que ce n'est pas une application win32 valide???
      Dois je télécharger une autre version?

      Si tu veux un scan de mon ordi, est ce que hijackthis peut t'aider à m'aider?

      Merci pour tout.
      1. coucou,

        Finalement, j'ai téléchargé combofix à partir d'un autre lien et cela fonctionne. J'ai scané deux fois l'ordi avec ce programme.
        La première fois, je n'ai pas eu de rapport par contre. Windows a redémarré aussi.
        Voici le rapport:
        Merci pour ton aide, c'est sympa.

        ComboFix 08-01-20.1 - Lolo 2008-01-21 18:24:45.2 - NTFSx86
        Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.263 [GMT -6:00]
        Running from: C:\Documents and Settings\Lolo\Bureau\ComboFix.exe

        [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
        .

        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
        .

        C:\WINDOWS\SYSTEM32\rtvwa.ini
        C:\WINDOWS\SYSTEM32\rtvwa.ini2
        .
        ---- Previous Run -------
        .
        C:\Program Files\Temporary
        C:\Program Files\WinAble
        C:\WINDOWS\Fonts\a.zip
        C:\WINDOWS\pppatc~1
        C:\WINDOWS\system32\wcpsvcc.exe
        C:\WINDOWS\ymante~1
        C:\x.dat
        C:\z.dat
        C:\WINDOWS\Fonts\'

        .
        ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

        .
        -------\nm

        ((((((((((((((((((((((((((((( Fichiers créés 2007-12-22 to 2008-01-22 ))))))))))))))))))))))))))))))))))))
        .

        2008-01-21 16:39 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
        2008-01-21 13:07 . 2008-01-21 13:07 <REP> d-------- C:\Documents and Settings\Invité\Application Data\HP
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage réseau
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage réseau
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage d'impression
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Invité\Voisinage d'impression
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Invité\Modèles
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Invité\Modèles
        2008-01-21 13:06 . 2008-01-21 13:07 <REP> dr------- C:\Documents and Settings\Invité\Mes documents
        2008-01-21 13:06 . 2008-01-21 13:07 <REP> dr------- C:\Documents and Settings\Invité\Mes documents
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> dr------- C:\Documents and Settings\Invité\Menu Démarrer
        2008-01-21 13:06 . 2005-06-13 18:52 <REP> dr------- C:\Documents and Settings\Invité\Menu Démarrer
        2008-01-21 13:06 . 2008-01-21 13:07 <REP> dr------- C:\Documents and Settings\Invité\Favoris
        2008-01-21 13:06 . 2008-01-21 13:07 <REP> dr------- C:\Documents and Settings\Invité\Favoris
        2008-01-21 13:06 . 2005-06-13 19:16 <REP> d-------- C:\Documents and Settings\Invité\Bureau
        2008-01-21 13:06 . 2005-06-13 19:16 <REP> d-------- C:\Documents and Settings\Invité\Bureau
        2008-01-21 13:06 . 2005-06-13 19:19 <REP> d-------- C:\Documents and Settings\Invité\Application Data\Symantec
        2008-01-21 11:00 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
        2008-01-21 11:00 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
        2008-01-21 11:00 . 2005-06-13 18:52 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
        2008-01-21 11:00 . 2005-06-13 18:52 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
        2008-01-21 11:00 . 2005-06-13 18:52 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
        2008-01-21 11:00 . 2005-06-13 18:52 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
        2008-01-21 11:00 . 2005-06-13 19:16 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
        2008-01-21 11:00 . 2005-06-13 19:19 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec
        2008-01-20 20:07 . 2008-01-20 20:14 <REP> d-------- C:\Program Files\RegCure
        2008-01-20 19:26 . 2008-01-20 19:30 <REP> d-------- C:\Program Files\RegistrySmart
        2008-01-20 18:48 . 2008-01-20 19:22 <REP> d-------- C:\Documents and Settings\Lolo\Application Data\Thinstall
        2008-01-20 18:24 . 2008-01-20 18:43 <REP> d-------- C:\Documents and Settings\Lolo\Application Data\RegistrySmart
        2008-01-20 14:19 . 2008-01-20 14:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
        2008-01-20 14:18 . 2008-01-20 20:07 <REP> d-------- C:\Documents and Settings\Lolo\Application Data\Azureus
        2008-01-20 14:14 . 2008-01-20 14:15 <REP> d-------- C:\Program Files\Azureus
        2008-01-17 23:29 . 2008-01-17 23:29 <REP> d-------- C:\Program Files\PDFCreator
        2008-01-17 23:29 . 1998-07-13 02:08 141,312 --a------ C:\WINDOWS\SYSTEM32\MSCMCFR.DLL
        2008-01-17 23:29 . 1998-06-24 01:00 137,000 --a------ C:\WINDOWS\SYSTEM32\MSMAPI32.OCX
        2008-01-17 23:29 . 2001-10-28 17:42 116,224 --a------ C:\WINDOWS\SYSTEM32\pdfcmnnt.dll
        2008-01-17 23:29 . 1998-07-13 02:08 59,904 --a------ C:\WINDOWS\SYSTEM32\MSCC2FR.DLL
        2008-01-17 23:29 . 1998-07-06 01:00 23,552 --a------ C:\WINDOWS\SYSTEM32\MSMPIDE.DLL
        2008-01-17 15:36 . 2008-01-20 17:59 <REP> d-------- C:\Program Files\Acro Software
        2008-01-08 20:17 . 2008-01-20 20:39 <REP> d-------- C:\Program Files\a-squared Free
        2008-01-08 19:14 . 2008-01-08 19:14 <REP> d-------- C:\Program Files\CCleaner
        2008-01-08 18:39 . 2008-01-08 18:40 <REP> d-------- C:\Documents and Settings\Lolo\Application Data\PrevxCSI
        2008-01-08 18:39 . 2008-01-08 18:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Prevx
        2007-12-30 21:19 . 2007-12-30 21:21 <REP> d-------- C:\WINDOWS\SYSTEM32\fr-fr
        2007-12-30 21:12 . 2007-10-10 17:49 6,065,664 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\ieframe.dll
        2007-12-30 21:12 . 2007-10-10 17:49 383,488 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\ieapfltr.dll
        2007-12-30 16:49 . 2007-12-30 16:49 <REP> d-------- C:\Program Files\Fichiers communs\SWF Studio
        2007-12-30 15:28 . 2007-12-30 15:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet
        2007-12-30 15:20 . 2007-12-30 15:20 <REP> d-------- C:\Program Files\Bonjour
        2007-12-30 15:09 . 2007-12-30 15:09 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
        2007-12-30 15:04 . 2007-12-30 15:06 <REP> d-------- C:\Documents and Settings\Adobe Fireworks CS3\Adobe CS3
        2007-12-29 14:32 . 2007-12-29 14:32 <REP> d-------- C:\Program Files\Windows Sidebar
        2007-12-29 14:29 . 2007-12-30 12:51 <REP> d-------- C:\Program Files\Norton Internet Security
        2007-12-29 14:25 . 2007-12-30 12:39 10,740 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\SYMEVENT.CAT
        2007-12-29 14:25 . 2007-12-30 12:39 805 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\SYMEVENT.INF
        2007-12-22 11:38 . 2007-12-22 11:38 <REP> d-------- C:\Program Files\Avira
        2007-12-22 11:38 . 2007-12-22 11:38 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
        2007-12-22 11:29 . 2007-12-22 11:29 40 --a------ C:\WINDOWS\TSC.INI
        2007-12-22 11:28 . 2007-12-22 11:28 <REP> d-------- C:\WINDOWS\AU_Temp
        2007-12-22 11:28 . 2007-12-22 11:28 <REP> d-------- C:\WINDOWS\AU_Log
        2007-12-22 11:28 . 2007-12-22 11:28 507,904 --a------ C:\WINDOWS\TMUPDATE.DLL
        2007-12-22 11:28 . 2007-12-22 11:28 286,720 --a------ C:\WINDOWS\PATCH.EXE
        2007-12-22 11:28 . 2007-12-22 11:28 69,689 --a------ C:\WINDOWS\UNZIP.DLL
        2007-12-22 11:28 . 2007-12-22 11:28 170 --a------ C:\WINDOWS\GetServer.ini

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-01-21 22:20 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
        2008-01-21 22:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
        2008-01-15 19:40 --------- d-----w C:\Program Files\Pop-Up
        2008-01-09 01:20 --------- d-----w C:\Program Files\Microsoft AntiSpyware
        2007-12-31 03:38 39,936 ----a-w C:\WINDOWS\mrofinu1188.exe.tmp
        2007-12-31 03:34 --------- d-----w C:\Program Files\Ad-Aware
        2007-12-30 21:21 --------- d-----w C:\Program Files\Fichiers communs\Adobe
        2007-12-30 18:51 --------- d-----w C:\Program Files\QuickTime
        2007-12-30 18:39 60,800 ----a-w C:\WINDOWS\SYSTEM32\S32EVNT1.DLL
        2007-12-30 18:39 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
        2007-12-30 18:39 --------- d-----w C:\Program Files\Symantec
        2007-12-29 20:40 --------- d-----w C:\Documents and Settings\Lolo\Application Data\Symantec
        2007-12-29 20:09 --------- d-----w C:\Program Files\Norton AntiVirus
        2007-12-26 18:57 --------- d-----w C:\Program Files\Diablo II
        2007-12-26 18:55 --------- d-----w C:\Program Files\Astrocycle3
        2007-12-22 18:05 --------- d-----w C:\Program Files\Calendrier
        2007-12-22 16:07 94,208 ----a-w C:\WINDOWS\SYSTEM32\igfxtray .exe
        2007-12-22 16:07 77,824 ----a-w C:\WINDOWS\SYSTEM32\hkcmd .exe
        2007-12-22 16:07 114,688 ----a-w C:\WINDOWS\SYSTEM32\igfxpers .exe
        2007-12-21 00:13 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
        2007-12-21 00:09 147,456 ----a-w C:\WINDOWS\SYSTEM32\vbzip10.dll
        2007-12-21 00:06 134 ----a-w C:\n.bat
        2007-12-20 23:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision
        2007-12-20 23:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
        2007-12-20 23:02 --------- d-----w C:\Program Files\Fichiers communs\Macromedia Shared
        2007-12-20 23:02 --------- d-----w C:\Program Files\Fichiers communs\Macromedia
        2007-12-20 23:02 --------- d-----w C:\Program Files\Dreamweaver
        2007-12-20 23:00 --------- d-----w C:\Program Files\Dreamweaver MX 2004
        2007-12-11 19:03 --------- d-----w C:\Documents and Settings\Lolo\Application Data\Calendrier Xtra
        2007-12-07 22:34 150,016 ----a-w C:\WINDOWS\SYSTEM32\mpegdll.dll
        2007-12-06 16:27 --------- d-----w C:\Documents and Settings\Lolo\Application Data\DivX
        2007-12-04 02:05 --------- d-----w C:\Program Files\DivX
        2007-12-01 05:57 43,696 ----a-w C:\WINDOWS\system32\drivers\srtspx.sys
        2007-12-01 05:57 317,616 ----a-w C:\WINDOWS\system32\drivers\srtspl.sys
        2007-12-01 05:57 279,088 ----a-w C:\WINDOWS\system32\drivers\srtsp.sys
        2007-12-01 05:57 10,549 ----a-w C:\WINDOWS\system32\drivers\srtspx.cat
        2007-12-01 05:57 10,549 ----a-w C:\WINDOWS\system32\drivers\srtspl.cat
        2007-12-01 05:57 10,545 ----a-w C:\WINDOWS\system32\drivers\srtsp.cat
        2007-12-01 05:57 1,430 ----a-w C:\WINDOWS\system32\drivers\srtspl.inf
        2007-12-01 05:57 1,421 ----a-w C:\WINDOWS\system32\drivers\srtspx.inf
        2007-12-01 05:57 1,415 ----a-w C:\WINDOWS\system32\drivers\srtsp.inf
        2007-11-07 09:28 728,576 ----a-w C:\WINDOWS\SYSTEM32\lsasrv.dll
        2007-11-07 09:28 728,576 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\lsasrv.dll
        2007-10-31 10:53 3,590,656 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll
        2007-10-30 17:20 360,064 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip.sys
        2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\SYSTEM32\quartz.dll
        2007-10-29 22:43 1,293,824 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\quartz.dll
        2007-10-25 16:43 8,516,608 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\shell32.dll
        2007-10-25 15:28 222,720 ----a-w C:\WINDOWS\SYSTEM32\wmasf.dll
        2007-10-25 15:28 222,720 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\wmasf.dll
        .
        [code]<pre>
        ----a-w 35,840 2007-12-22 16:08:03 C:\Documents and Settings\Lolo\Application Data\Microsoft\Windows\wsmuran .exe
        ----a-w 3,082,752 2007-12-22 16:07:55 C:\Program Files\Calendrier\Cld2000 .exe
        ----a-w 180,269 2007-12-22 16:07:37 C:\Program Files\Fichiers communs\Real\Update_OB\realsched .exe
        ----a-w 51,048 2007-12-30 17:25:37 C:\Program Files\Fichiers communs\Symantec Shared\ccApp .exe
        ----a-w 607,624 2007-12-29 20:45:33 C:\Program Files\Fichiers communs\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\SYMCUW .exe
        ----a-w 49,152 2007-12-30 17:25:46 C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
        ----a-w 132,496 2007-12-22 16:07:43 C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe
        ----a-w 714,608 2007-12-29 20:45:40 C:\Program Files\Norton Internet Security\osCheck .exe
        ----a-w 536,576 2007-12-30 17:25:58 C:\Program Files\Pop-Up\PSFree .exe
        ----a-w 536,576 2007-12-30 18:58:33 C:\Program Files\Pop-Up\PSFree .exe
        ----a-w 98,304 2007-12-30 18:56:33 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:02 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:06 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:14 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:22 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:27 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:35 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:38 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:41 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:44 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:49 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:51 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:52 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:55 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:16:57 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:17:01 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:17:03 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:17:06 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:17:09 C:\Program Files\QuickTime\qttask .exe
        ----a-w 98,304 2008-01-09 04:17:11 C:\Program Files\QuickTime\qttask .exe
        ----a-w 77,824 2007-12-22 16:07:43 C:\WINDOWS\SYSTEM32\hkcmd .exe
        ----a-w 114,688 2007-12-22 16:07:39 C:\WINDOWS\SYSTEM32\igfxpers .exe
        ----a-w 94,208 2007-12-22 16:07:38 C:\WINDOWS\SYSTEM32\igfxtray .exe
        </pre>[/code]

        -- Snapshot reset to current date --
        .
        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        REGEDIT4
        *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11716DF7-C66F-483D-84E9-7EDC72E98945}]

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
        2007-08-24 13:51 316784 --a------ C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
        2007-12-29 14:31 116088 --a------ C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8E015787-B1E3-404a-95DE-3E71E1FA0305}]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
        {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}

        [HKEY_CLASSES_ROOT\clsid\{7febefe3-6b19-4349-98d2-ffb09d4b49ca}]
        [HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
        [HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
        "{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"= C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll [2007-08-24 13:51 316784]

        [HKEY_CLASSES_ROOT\clsid\{7febefe3-6b19-4349-98d2-ffb09d4b49ca}]
        [HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar.1]
        [HKEY_CLASSES_ROOT\CoIEPlg.CoToolbar]

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 11:00 15360]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-12-30 12:56 51048]
        "QuickTime Task"="C:\Program Files\QuickTime\qttask .exe" [2007-12-30 12:56 98304]
        "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2007-12-30 12:57 49152]
        "osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2007-12-30 12:57 714608]
        "RegistrySmart"="C:\Program Files\RegistrySmart\RegistrySmart.exe" [2006-08-25 13:01 6443008]

        [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
        "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 11:00 15360]

        C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
        HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2007-01-02 20:40:10 210520]

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
        backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
        --a------ 2007-12-30 12:56 51048 C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
        --a------ 2004-08-05 11:00 15360 C:\WINDOWS\system32\ctfmon.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell QuickSet]
        --a------ 2005-03-04 10:26 606208 C:\Program Files\Dell\QuickSet\quickset.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Wireless Manager UI]
        C:\WINDOWS\system32\WLTRAY

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
        --a------ 2005-05-31 04:33 122941 C:\WINDOWS\system32\dla\tfswctrl.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]
        --a------ 2005-01-27 00:02 86016 C:\Program Files\Dell\Media Experience\DMXLauncher.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
        --------- 2005-02-23 15:19 53248 C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
        --a------ 2005-07-12 14:35 473928 C:\Program Files\Microsoft AntiSpyware\gcasServ.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
        --a------ 2004-07-27 15:50 221184 C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
        --a------ 2004-07-27 15:50 81920 C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PRONoMgrWired]
        --a------ 2004-12-09 12:58 86016 C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
        --a------ 2003-11-19 16:48 32881 C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
        --a------ 2004-05-13 18:35 536576 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPLpr]
        --a------ 2004-05-13 04:23 98304 C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

        R2 LiveUpdate Notice;LiveUpdate Notice;"C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" [2007-08-24 15:07]
        R3 SymIMMP;SymIMMP;C:\WINDOWS\system32\DRIVERS\SymIM.sys [2007-08-09 10:27]
        S3 COH_Mon;COH_Mon;C:\WINDOWS\system32\Drivers\COH_Mon.sys [2007-05-29 13:55]
        S3 DCamUSBNW800;D-Link CIF Webcam;C:\WINDOWS\system32\DRIVERS\pcam800.sys [2002-09-10 23:22]
        S3 SymIM;Symantec Network Security Intermediate Filter Service;C:\WINDOWS\system32\DRIVERS\SymIM.sys [2007-08-09 10:27]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
        hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

        *Newly Created Service* - COMHOST
        .
        Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
        "2007-12-29 20:53:18 C:\WINDOWS\Tasks\Norton Internet Security - Effectuer une analyse complète du système - Lolo.job"
        - C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exeh/TASK:
        "2008-01-21 23:00:00 C:\WINDOWS\Tasks\RegCure Program Check.job"
        - C:\Program Files\RegCure\RegCure.exe
        "2008-01-21 02:08:31 C:\WINDOWS\Tasks\RegCure.job"
        - C:\Program Files\RegCure\RegCure.exe
        "2008-01-21 01:15:29 C:\WINDOWS\Tasks\RegistrySmart Scheduled Scan.job"
        - C:\Program Files\RegistrySmart\RegistrySmart.ex
        - C:\Program Files\RegistrySmart
        .
        **************************************************************************

        catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-01-21 18:29:25
        Windows 5.1.2600 Service Pack 2 NTFS

        scanning hidden processes ...

        scanning hidden autostart entries ...

        scanning hidden files ...

        scan completed successfully
        hidden files: 0

        **************************************************************************
        .
        Completion time: 2008-01-21 18:30:58
        ComboFix-quarantined-files.txt 2008-01-22 00:30:43
        .
        2008-01-09 15:03:09 --- E O F ---
        1. C'est encore moi, j'ai quand même fait une analyse avec le dernier lien que tu m'as donné, voici le rapport:

          <HTML>
          <HEAD>
          <TITLE>BitDefender Online Scanner - Rapport d'analyse</TITLE>
          <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
          </HEAD>
          <BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

          <table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
          <tr>
          <td width="458">
          <p><font face="Arial" color=red><span style="font-size:14pt;"><b>BitDefender Online Scanner</b></span></font></p>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>
          <tr>
          <td colspan="3" width="912">
          <p><font face="Arial"><span style="font-size:11pt;"><B>Rapport d'analyse généré à: Mon, Jan 21, 2008 - 19:30:12</b></span></font></p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <p><font face="Arial"><span style="font-size:11pt;"><B>Voie d'analyse: </b></span><span style="font-size:10pt;">C:\DRIVERS;C:\Program Files;C:\WINDOWS;</span></font></p>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
          <tr>
          <td width="451" colspan="2" bgcolor="#CCCCCC">
          <p><font face="Arial" size="2"><B>Statistiques</b></font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Temps</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">00:35:54</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Fichiers</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">254349</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Directoires</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">4843</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Secteurs de boot</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">4</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Archives</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">773</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Paquets programmes</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">14898</font></p>
          </td>
          </tr>
          </table>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
          <tr>
          <td width="451" colspan="2" bgcolor="#CCCCCC">
          <p><font face="Arial" size="2"><B>Résultats</b></font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Virus identifiés</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">1</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Fichiers infectés</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">1</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Fichiers suspects</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">0</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Avertissements</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">0</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Désinfectés</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">0</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Fichiers effacés</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">1</font></p>
          </td>
          </tr>
          </table>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
          <tr>
          <td width="451" colspan="2" bgcolor="#CCCCCC">
          <p><font face="Arial" size="2"><B>Info sur les moteurs</b></font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Définition virus</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">892734</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Version des moteurs</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Analyse des plugins</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">14</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Archive des plugins</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">38</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Unpack des plugins</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">7</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">E-mail plugins</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">6</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Système plugins</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">1</font></p>
          </td>
          </tr>
          </table>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
          <tr>
          <td width="451" colspan="2" bgcolor="#CCCCCC">
          <p><font face="Arial" size="2"><B>Paramètres d'analyse</b></font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Première action</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Désinfecté</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Seconde Action</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Supprimé</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Heuristique</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Acceptez les avertissements</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Extensions analysées</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">*;</font></p>
          </td>
          </tr>

          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Excludez les extensions</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2"> </font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Analyse d'emails</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Analyse des Archives</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Analyser paquets programmes</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Analyse des fichiers</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">Analyse de boot</font></p>
          </td>
          <td width="43%" align="right">
          <p><font face="Arial" size="2">Oui</font></p>
          </td>
          </tr>
          </table>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td colspan=2>  
          <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
          <tr>
          <td width="252" bgcolor="#CCCCCC">
          <p><font face="Arial" size="2"><B>Fichier analysé</b></font></p>
          </td>
          <td width="195" bgcolor="#CCCCCC" align="right">
          <p align="left"><b><font size="2" face="Arial"> Statut</font></b></p>
          </td>
          </tr>
          <tr>
          <td width="57%">
          <p><font face="Arial" size="2">C:\WINDOWS\mrofinu1188.exe.tmp</font></p>
          </td>
          <td width="43%" align="left">
          <p><font face="Arial" size="2">Infecté par: Trojan.Downloader.Agent.YXR</font></p>
          </td>
          </tr><tr>
          <td width="57%">
          <p><font face="Arial" size="2">C:\WINDOWS\mrofinu1188.exe.tmp</font></p>
          </td>
          <td width="43%" align="left">
          <p><font face="Arial" size="2">Echec de la désinfection</font></p>
          </td>
          </tr><tr>
          <td width="57%">
          <p><font face="Arial" size="2">C:\WINDOWS\mrofinu1188.exe.tmp</font></p>
          </td>
          <td width="43%" align="left">
          <p><font face="Arial" size="2">Supprimé</font></p>
          </td>
          </tr>
          </table>
          </td>

          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          <tr>
          <td width="458">
          <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
          </td>
          <td width="40%">
          <p> </p>
          </td>
          <td width="10%">
          <p> </p>
          </td>
          </tr>

          </table>
          <p> </p>

          </body>
          </html>